IPFire-SCM October 2022

ipfire-scm@lists.ipfire.org

1 participants
16 discussions

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 44fc05f634ab3829ea368428845bd4d5412cc2a9
by Peter Müller 29 Oct '22

29 Oct '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 44fc05f634ab3829ea368428845bd4d5412cc2a9 (commit) from a6f89e38db587c467d97513437dfe0ae2e424a19 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 44fc05f634ab3829ea368428845bd4d5412cc2a9 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Oct 29 09:04:07 2022 +0000 Core Update 172: Ship rules.pl This file should have been shipped with Core Update 171, but that was omitted by mistake. Core Update 172 therefore finally fixes #12934 on existing installations. Fixes: #12934 Cc: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/172/filelists/files | 1 + 1 file changed, 1 insertion(+) Difference in files: diff --git a/config/rootfiles/core/172/filelists/files b/config/rootfiles/core/172/filelists/files index 1bbcde521..533d128d1 100644 --- a/config/rootfiles/core/172/filelists/files +++ b/config/rootfiles/core/172/filelists/files @@ -1,3 +1,4 @@ +usr/lib/firewall/rules.pl usr/local/bin/addonctrl usr/local/bin/openvpnctrl srv/web/ipfire/cgi-bin/services.cgi hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. a6f89e38db587c467d97513437dfe0ae2e424a19
by Peter Müller 29 Oct '22

29 Oct '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via a6f89e38db587c467d97513437dfe0ae2e424a19 (commit) via 8ed997102eeaee19e06e13aea4dfe08f83338489 (commit) via 4f205b54422afa069dd3956ebc4df2efe8600f75 (commit) via 207ca1141c1e1b1b2d384b82ac6b8238ad8d566c (commit) via 2b9b31b71d9b6211276b60ce9583198163a0c582 (commit) via 24168c8898eb6a9bcc1a0f6103f0c87eb092e7ef (commit) via e728fba16f59f09374e5817de6efa0fcb4d29537 (commit) from ca1787b29ba370c2da9cdfb29e6f148fdb5edba1 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit a6f89e38db587c467d97513437dfe0ae2e424a19 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Oct 29 08:58:00 2022 +0000 Core Update 171: Ship changes related to services.cgi Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 8ed997102eeaee19e06e13aea4dfe08f83338489 Author: Robin Roevens <robin.roevens(a)disroot.org> Date: Wed Oct 12 00:01:57 2022 +0200 services.cgi: add link to addon config if ui exists for it * If a cgi file exists with the same name as an addon, the displayed service will be a link to that cgi file. Signed-off-by: Robin Roevens <robin.roevens(a)disroot.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 4f205b54422afa069dd3956ebc4df2efe8600f75 Author: Robin Roevens <robin.roevens(a)disroot.org> Date: Wed Oct 12 00:01:56 2022 +0200 services.cgi: add restart action and restrict action usage * Add restart action to services. * Only display available actions for a service: Start when service is stopped or Stop and Restart when a service is running. Signed-off-by: Robin Roevens <robin.roevens(a)disroot.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 207ca1141c1e1b1b2d384b82ac6b8238ad8d566c Author: Robin Roevens <robin.roevens(a)disroot.org> Date: Wed Oct 12 00:01:55 2022 +0200 services.cgi: minor cosmetics * Singular 'Service' instead of plural 'Services' as column header of services table * Sort list of services Signed-off-by: Robin Roevens <robin.roevens(a)disroot.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 2b9b31b71d9b6211276b60ce9583198163a0c582 Author: Robin Roevens <robin.roevens(a)disroot.org> Date: Wed Oct 12 00:01:54 2022 +0200 services.cgi: Fix status/actions on services with name != addon name * addonctrl's new functionality to control explicit addon services was implemented. * Change 'Addon' column header to 'Addon Service' to be clear that it's not addons but services listed here. * Services not matching the name of the addon now display the addon name between parentheses, so the user knows where the service comes from. * When no valid runlevel symlink is found by addonctrl for a service, the 'enable on boot' checkbox is replaced by a small exclamation point with alt-text "No valid runlevel symlink was found for the initscript of this service." to inform user why a service can't be enabled. * Added German and Dutch translation for above message. Fixes: Bug#12935 Signed-off-by: Robin Roevens <robin.roevens(a)disroot.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 24168c8898eb6a9bcc1a0f6103f0c87eb092e7ef Author: Robin Roevens <robin.roevens(a)disroot.org> Date: Wed Oct 12 00:01:53 2022 +0200 misc-progs: addonctrl: Add support for 'Services' metadata * Addonctrl will now check in addon metadata for the exact initscript names (Services). If more than one initscript is defined for an addon, the requested action will be performed on all listed initscripts. * Added posibility to perform action on a specific initscript of an addon instead of on all initscripts of the addon. * New action 'list-services' to display a list of services related to an addon. * New action 'boot-status' to display wether service(s) are enabled to start on boot or not. * More error checking and cleaner error reporting to user * General cleanup and code restructuring to avoid code duplication * Updated and made usage instructions more verbose. Fixes: Bug#12935 Signed-off-by: Robin Roevens <robin.roevens(a)disroot.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit e728fba16f59f09374e5817de6efa0fcb4d29537 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Oct 29 08:55:58 2022 +0000 Samba: Update ARM rootfiles Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/172/filelists/files | 2 + config/rootfiles/packages/aarch64/samba | 59 ++-- config/rootfiles/packages/armv6l/samba | 59 ++-- html/cgi-bin/services.cgi | 127 ++++----- langs/de/cgi-bin/de.pl | 1 + langs/en/cgi-bin/en.pl | 1 + langs/nl/cgi-bin/nl.pl | 1 + src/misc-progs/addonctrl.c | 459 ++++++++++++++++++++++++++---- 8 files changed, 534 insertions(+), 175 deletions(-) Difference in files: diff --git a/config/rootfiles/core/172/filelists/files b/config/rootfiles/core/172/filelists/files index 206a50369..1bbcde521 100644 --- a/config/rootfiles/core/172/filelists/files +++ b/config/rootfiles/core/172/filelists/files @@ -1,2 +1,4 @@ +usr/local/bin/addonctrl usr/local/bin/openvpnctrl +srv/web/ipfire/cgi-bin/services.cgi var/ipfire/backup/bin/backup.pl diff --git a/config/rootfiles/packages/aarch64/samba b/config/rootfiles/packages/aarch64/samba index a049902b0..7f9072725 100644 --- a/config/rootfiles/packages/aarch64/samba +++ b/config/rootfiles/packages/aarch64/samba @@ -154,8 +154,8 @@ usr/lib/libndr-standard.so usr/lib/libndr-standard.so.0 usr/lib/libndr-standard.so.0.0.1 usr/lib/libndr.so -usr/lib/libndr.so.2 -usr/lib/libndr.so.2.0.0 +usr/lib/libndr.so.3 +usr/lib/libndr.so.3.0.0 usr/lib/libnetapi.so usr/lib/libnetapi.so.1 usr/lib/libnetapi.so.1.0.0 @@ -166,6 +166,7 @@ usr/lib/libsamba-credentials.so.1 usr/lib/libsamba-credentials.so.1.0.0 usr/lib/libsamba-errors.so usr/lib/libsamba-errors.so.1 +usr/lib/libsamba-errors.so.1.0.0 usr/lib/libsamba-hostconfig.so usr/lib/libsamba-hostconfig.so.0 usr/lib/libsamba-hostconfig.so.0.0.1 @@ -282,13 +283,31 @@ usr/lib/python3.10/site-packages/samba/emulate/traffic_packets.py usr/lib/python3.10/site-packages/samba/forest_update.py usr/lib/python3.10/site-packages/samba/gensec.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/getopt.py -usr/lib/python3.10/site-packages/samba/gp_cert_auto_enroll_ext.py -usr/lib/python3.10/site-packages/samba/gp_chromium_ext.py -usr/lib/python3.10/site-packages/samba/gp_ext_loader.py -usr/lib/python3.10/site-packages/samba/gp_firefox_ext.py -usr/lib/python3.10/site-packages/samba/gp_firewalld_ext.py -usr/lib/python3.10/site-packages/samba/gp_gnome_settings_ext.py -usr/lib/python3.10/site-packages/samba/gp_msgs_ext.py +usr/lib/python3.10/site-packages/samba/gp +usr/lib/python3.10/site-packages/samba/gp/gp_centrify_crontab_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_centrify_sudoers_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_cert_auto_enroll_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_chromium_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_ext_loader.py +usr/lib/python3.10/site-packages/samba/gp/gp_firefox_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_firewalld_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_gnome_settings_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_msgs_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_scripts_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_sec_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_smb_conf_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_sudoers_ext.py +usr/lib/python3.10/site-packages/samba/gp/gpclass.py +usr/lib/python3.10/site-packages/samba/gp/util +usr/lib/python3.10/site-packages/samba/gp/util/logging.py +usr/lib/python3.10/site-packages/samba/gp/vgp_access_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_files_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_issue_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_motd_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_openssh_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_startup_scripts_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_sudoers_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_symlink_ext.py #usr/lib/python3.10/site-packages/samba/gp_parse usr/lib/python3.10/site-packages/samba/gp_parse/__init__.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_aas.py @@ -296,11 +315,6 @@ usr/lib/python3.10/site-packages/samba/gp_parse/gp_csv.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_inf.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_ini.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_pol.py -usr/lib/python3.10/site-packages/samba/gp_scripts_ext.py -usr/lib/python3.10/site-packages/samba/gp_sec_ext.py -usr/lib/python3.10/site-packages/samba/gp_smb_conf_ext.py -usr/lib/python3.10/site-packages/samba/gp_sudoers_ext.py -usr/lib/python3.10/site-packages/samba/gpclass.py usr/lib/python3.10/site-packages/samba/gpo.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/graph.py usr/lib/python3.10/site-packages/samba/hostconfig.py @@ -375,12 +389,14 @@ usr/lib/python3.10/site-packages/samba/samba3/libsmb_samba_internal.py usr/lib/python3.10/site-packages/samba/samba3/mdscli.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/samba3/param.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/samba3/passdb.cpython-310-aarch64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/samba3/smbconf.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/samba3/smbd.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/samdb.py usr/lib/python3.10/site-packages/samba/schema.py usr/lib/python3.10/site-packages/samba/sd_utils.py usr/lib/python3.10/site-packages/samba/security.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/sites.py +usr/lib/python3.10/site-packages/samba/smbconf.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/subnets.py #usr/lib/python3.10/site-packages/samba/subunit usr/lib/python3.10/site-packages/samba/subunit/__init__.py @@ -407,6 +423,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/downgradedatabase.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/mdsearch.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/ndrdump.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_dns.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_json.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/samba_dnsupdate.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls.py @@ -498,7 +515,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgs_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kpasswd_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/ms_kile_client_principal_lookup_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/nt_hash_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/pac_align_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/protected_users_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/raw_testcase.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_constants.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1.py @@ -521,6 +540,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/ldap_upn_sam_account.py #usr/lib/python3.10/site-packages/samba/tests/libsmb.py #usr/lib/python3.10/site-packages/samba/tests/loadparm.py +#usr/lib/python3.10/site-packages/samba/tests/logfiles.py #usr/lib/python3.10/site-packages/samba/tests/lsa_string.py #usr/lib/python3.10/site-packages/samba/tests/messaging.py #usr/lib/python3.10/site-packages/samba/tests/ndr.py @@ -537,6 +557,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/ntlmdisabled.py #usr/lib/python3.10/site-packages/samba/tests/pam_winbind.py #usr/lib/python3.10/site-packages/samba/tests/pam_winbind_chauthtok.py +#usr/lib/python3.10/site-packages/samba/tests/pam_winbind_setcred.py #usr/lib/python3.10/site-packages/samba/tests/pam_winbind_warn_pwd_expire.py #usr/lib/python3.10/site-packages/samba/tests/param.py #usr/lib/python3.10/site-packages/samba/tests/password_hash.py @@ -606,8 +627,10 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/sddl.py #usr/lib/python3.10/site-packages/samba/tests/security.py #usr/lib/python3.10/site-packages/samba/tests/segfault.py +#usr/lib/python3.10/site-packages/samba/tests/sid_strings.py #usr/lib/python3.10/site-packages/samba/tests/smb-notify.py #usr/lib/python3.10/site-packages/samba/tests/smb.py +#usr/lib/python3.10/site-packages/samba/tests/smbconf.py #usr/lib/python3.10/site-packages/samba/tests/smbd_base.py #usr/lib/python3.10/site-packages/samba/tests/smbd_fuzztest.py #usr/lib/python3.10/site-packages/samba/tests/source.py @@ -624,14 +647,6 @@ usr/lib/python3.10/site-packages/samba/trust_utils.py usr/lib/python3.10/site-packages/samba/upgrade.py usr/lib/python3.10/site-packages/samba/upgradehelpers.py usr/lib/python3.10/site-packages/samba/uptodateness.py -usr/lib/python3.10/site-packages/samba/vgp_access_ext.py -usr/lib/python3.10/site-packages/samba/vgp_files_ext.py -usr/lib/python3.10/site-packages/samba/vgp_issue_ext.py -usr/lib/python3.10/site-packages/samba/vgp_motd_ext.py -usr/lib/python3.10/site-packages/samba/vgp_openssh_ext.py -usr/lib/python3.10/site-packages/samba/vgp_startup_scripts_ext.py -usr/lib/python3.10/site-packages/samba/vgp_sudoers_ext.py -usr/lib/python3.10/site-packages/samba/vgp_symlink_ext.py usr/lib/python3.10/site-packages/samba/werror.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/xattr.py usr/lib/python3.10/site-packages/samba/xattr_native.cpython-310-aarch64-linux-gnu.so diff --git a/config/rootfiles/packages/armv6l/samba b/config/rootfiles/packages/armv6l/samba index dec46311b..736d3e603 100644 --- a/config/rootfiles/packages/armv6l/samba +++ b/config/rootfiles/packages/armv6l/samba @@ -154,8 +154,8 @@ usr/lib/libndr-standard.so usr/lib/libndr-standard.so.0 usr/lib/libndr-standard.so.0.0.1 usr/lib/libndr.so -usr/lib/libndr.so.2 -usr/lib/libndr.so.2.0.0 +usr/lib/libndr.so.3 +usr/lib/libndr.so.3.0.0 usr/lib/libnetapi.so usr/lib/libnetapi.so.1 usr/lib/libnetapi.so.1.0.0 @@ -166,6 +166,7 @@ usr/lib/libsamba-credentials.so.1 usr/lib/libsamba-credentials.so.1.0.0 usr/lib/libsamba-errors.so usr/lib/libsamba-errors.so.1 +usr/lib/libsamba-errors.so.1.0.0 usr/lib/libsamba-hostconfig.so usr/lib/libsamba-hostconfig.so.0 usr/lib/libsamba-hostconfig.so.0.0.1 @@ -282,13 +283,31 @@ usr/lib/python3.10/site-packages/samba/emulate/traffic_packets.py usr/lib/python3.10/site-packages/samba/forest_update.py usr/lib/python3.10/site-packages/samba/gensec.cpython-310-arm-linux-gnueabi.so usr/lib/python3.10/site-packages/samba/getopt.py -usr/lib/python3.10/site-packages/samba/gp_cert_auto_enroll_ext.py -usr/lib/python3.10/site-packages/samba/gp_chromium_ext.py -usr/lib/python3.10/site-packages/samba/gp_ext_loader.py -usr/lib/python3.10/site-packages/samba/gp_firefox_ext.py -usr/lib/python3.10/site-packages/samba/gp_firewalld_ext.py -usr/lib/python3.10/site-packages/samba/gp_gnome_settings_ext.py -usr/lib/python3.10/site-packages/samba/gp_msgs_ext.py +usr/lib/python3.10/site-packages/samba/gp +usr/lib/python3.10/site-packages/samba/gp/gp_centrify_crontab_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_centrify_sudoers_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_cert_auto_enroll_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_chromium_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_ext_loader.py +usr/lib/python3.10/site-packages/samba/gp/gp_firefox_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_firewalld_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_gnome_settings_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_msgs_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_scripts_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_sec_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_smb_conf_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_sudoers_ext.py +usr/lib/python3.10/site-packages/samba/gp/gpclass.py +usr/lib/python3.10/site-packages/samba/gp/util +usr/lib/python3.10/site-packages/samba/gp/util/logging.py +usr/lib/python3.10/site-packages/samba/gp/vgp_access_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_files_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_issue_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_motd_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_openssh_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_startup_scripts_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_sudoers_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_symlink_ext.py #usr/lib/python3.10/site-packages/samba/gp_parse usr/lib/python3.10/site-packages/samba/gp_parse/__init__.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_aas.py @@ -296,11 +315,6 @@ usr/lib/python3.10/site-packages/samba/gp_parse/gp_csv.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_inf.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_ini.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_pol.py -usr/lib/python3.10/site-packages/samba/gp_scripts_ext.py -usr/lib/python3.10/site-packages/samba/gp_sec_ext.py -usr/lib/python3.10/site-packages/samba/gp_smb_conf_ext.py -usr/lib/python3.10/site-packages/samba/gp_sudoers_ext.py -usr/lib/python3.10/site-packages/samba/gpclass.py usr/lib/python3.10/site-packages/samba/gpo.cpython-310-arm-linux-gnueabi.so usr/lib/python3.10/site-packages/samba/graph.py usr/lib/python3.10/site-packages/samba/hostconfig.py @@ -375,12 +389,14 @@ usr/lib/python3.10/site-packages/samba/samba3/libsmb_samba_internal.py usr/lib/python3.10/site-packages/samba/samba3/mdscli.cpython-310-arm-linux-gnueabi.so usr/lib/python3.10/site-packages/samba/samba3/param.cpython-310-arm-linux-gnueabi.so usr/lib/python3.10/site-packages/samba/samba3/passdb.cpython-310-arm-linux-gnueabi.so +usr/lib/python3.10/site-packages/samba/samba3/smbconf.cpython-310-arm-linux-gnueabi.so usr/lib/python3.10/site-packages/samba/samba3/smbd.cpython-310-arm-linux-gnueabi.so usr/lib/python3.10/site-packages/samba/samdb.py usr/lib/python3.10/site-packages/samba/schema.py usr/lib/python3.10/site-packages/samba/sd_utils.py usr/lib/python3.10/site-packages/samba/security.cpython-310-arm-linux-gnueabi.so usr/lib/python3.10/site-packages/samba/sites.py +usr/lib/python3.10/site-packages/samba/smbconf.cpython-310-arm-linux-gnueabi.so usr/lib/python3.10/site-packages/samba/subnets.py #usr/lib/python3.10/site-packages/samba/subunit usr/lib/python3.10/site-packages/samba/subunit/__init__.py @@ -407,6 +423,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/downgradedatabase.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/mdsearch.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/ndrdump.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_dns.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_json.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/samba_dnsupdate.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls.py @@ -498,7 +515,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgs_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kpasswd_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/ms_kile_client_principal_lookup_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/nt_hash_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/pac_align_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/protected_users_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/raw_testcase.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_constants.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1.py @@ -521,6 +540,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/ldap_upn_sam_account.py #usr/lib/python3.10/site-packages/samba/tests/libsmb.py #usr/lib/python3.10/site-packages/samba/tests/loadparm.py +#usr/lib/python3.10/site-packages/samba/tests/logfiles.py #usr/lib/python3.10/site-packages/samba/tests/lsa_string.py #usr/lib/python3.10/site-packages/samba/tests/messaging.py #usr/lib/python3.10/site-packages/samba/tests/ndr.py @@ -537,6 +557,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/ntlmdisabled.py #usr/lib/python3.10/site-packages/samba/tests/pam_winbind.py #usr/lib/python3.10/site-packages/samba/tests/pam_winbind_chauthtok.py +#usr/lib/python3.10/site-packages/samba/tests/pam_winbind_setcred.py #usr/lib/python3.10/site-packages/samba/tests/pam_winbind_warn_pwd_expire.py #usr/lib/python3.10/site-packages/samba/tests/param.py #usr/lib/python3.10/site-packages/samba/tests/password_hash.py @@ -606,8 +627,10 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/sddl.py #usr/lib/python3.10/site-packages/samba/tests/security.py #usr/lib/python3.10/site-packages/samba/tests/segfault.py +#usr/lib/python3.10/site-packages/samba/tests/sid_strings.py #usr/lib/python3.10/site-packages/samba/tests/smb-notify.py #usr/lib/python3.10/site-packages/samba/tests/smb.py +#usr/lib/python3.10/site-packages/samba/tests/smbconf.py #usr/lib/python3.10/site-packages/samba/tests/smbd_base.py #usr/lib/python3.10/site-packages/samba/tests/smbd_fuzztest.py #usr/lib/python3.10/site-packages/samba/tests/source.py @@ -624,14 +647,6 @@ usr/lib/python3.10/site-packages/samba/trust_utils.py usr/lib/python3.10/site-packages/samba/upgrade.py usr/lib/python3.10/site-packages/samba/upgradehelpers.py usr/lib/python3.10/site-packages/samba/uptodateness.py -usr/lib/python3.10/site-packages/samba/vgp_access_ext.py -usr/lib/python3.10/site-packages/samba/vgp_files_ext.py -usr/lib/python3.10/site-packages/samba/vgp_issue_ext.py -usr/lib/python3.10/site-packages/samba/vgp_motd_ext.py -usr/lib/python3.10/site-packages/samba/vgp_openssh_ext.py -usr/lib/python3.10/site-packages/samba/vgp_startup_scripts_ext.py -usr/lib/python3.10/site-packages/samba/vgp_sudoers_ext.py -usr/lib/python3.10/site-packages/samba/vgp_symlink_ext.py usr/lib/python3.10/site-packages/samba/werror.cpython-310-arm-linux-gnueabi.so usr/lib/python3.10/site-packages/samba/xattr.py usr/lib/python3.10/site-packages/samba/xattr_native.cpython-310-arm-linux-gnueabi.so diff --git a/html/cgi-bin/services.cgi b/html/cgi-bin/services.cgi index 29926ecc3..14ed01c50 100644 --- a/html/cgi-bin/services.cgi +++ b/html/cgi-bin/services.cgi @@ -20,7 +20,7 @@ ############################################################################### use strict; - +use feature "switch"; # enable only the following on debugging purpose #use warnings; #use CGI::Carp 'fatalsToBrowser'; @@ -105,7 +105,7 @@ if ( $querry[0] =~ "processescpu"){ <div align='center'> <table width='80%' cellspacing='1' class='tbl'> <tr> - <th align='left'>$Lang::tr{'services'}</th> + <th align='left'>$Lang::tr{'service'}</th> <th align='center' >$Lang::tr{'status'}</th> <th align='center'>PID</th> <th align='center'>$Lang::tr{'memory'}</th> @@ -141,15 +141,22 @@ END &Header::openbox('100%', 'left', "Addon - $Lang::tr{services}"); my $paramstr=$ENV{QUERY_STRING}; my @param=split(/!/, $paramstr); - if ($param[1] ne ''){ - &General::system("/usr/local/bin/addonctrl", "$param[0]", "$param[1]"); + # Make sure action parameter is actually one of the allowed service actions + given ($param[1]) { + when ( ['start', 'stop', 'restart', 'enable', 'disable'] ) { + # Make sure pak-name and service name don't contain any illegal character + if ( $param[0] !~ /[^a-zA-Z_0-9\-]/ && + $param[2] !~ /[^a-zA-Z_0-9\-]/ ) { + &General::system("/usr/local/bin/addonctrl", "$param[0]", "$param[1]", "$param[2]"); + } + } } print <<END <div align='center'> <table width='80%' cellspacing='1' class='tbl'> <tr> - <th align='center'>Addon</th> + <th align='left'>Addon $Lang::tr{service}</th> <th align='center'>Boot</th> <th align='center' colspan=2>$Lang::tr{'action'}</th> <th align='center'>$Lang::tr{'status'}</th> @@ -167,36 +174,40 @@ END # Generate list of installed addon pak services my %paklist = &Pakfire::dblist("installed"); - foreach my $pak (keys %paklist) { + foreach my $pak (sort keys %paklist) { my %metadata = &Pakfire::getmetadata($pak, "installed"); + my $service; + if ("$metadata{'Services'}") { - foreach my $service (split(/ /, "$metadata{'Services'}")) { - push(@addon_services, $service); - } - } - } + foreach $service (split(/ /, "$metadata{'Services'}")) { + $lines++; + if ($lines % 2) { + print "<tr>"; + $col="bgcolor='$color{'color22'}'"; + } else { + print "<tr>"; + $col="bgcolor='$color{'color20'}'"; + } - foreach (@addon_services) { - $lines++; - if ($lines % 2){ - print "<tr>"; - $col="bgcolor='$color{'color22'}'"; - }else{ - print "<tr>"; - $col="bgcolor='$color{'color20'}'"; + # Add addon name to displayname of service if servicename differs from addon + my $displayname = ($pak ne $service) ? "$service ($pak)" : $service; + if ( -e "/srv/web/ipfire/cgi-bin/$pak.cgi" ) { + $displayname = ($pak ne $service) ? "$service (<a href=\'$pak.cgi\'>$pak</a>)" : "<a href=\'$pak.cgi\'>$service</a>"; + } + + print "<td align='left' $col width='31%'>$displayname</td> "; + + my $status = isautorun($pak,$service,$col); + print "$status "; + my $status = isrunningaddon($pak,$service,$col); + $status =~ s/\\[[0-1]\;[0-9]+m//g; + + chomp($status); + print "$status"; + print "</tr>"; + } } - print "<td align='left' $col width='31%'>$_</td> "; - my $status = isautorun($_,$col); - print "$status "; - print "<td align='center' $col width='8%'><a href='services.cgi?$_!start'><img alt='$Lang::tr{'start'}' title='$Lang::tr{'start'}' src='/images/go-up.png' border='0' /></a></td>"; - print "<td align='center' $col width='8%'><a href='services.cgi?$_!stop'><img alt='$Lang::tr{'stop'}' title='$Lang::tr{'stop'}' src='/images/go-down.png' border='0' /></a></td> "; - my $status = isrunningaddon($_,$col); - $status =~ s/\\[[0-1]\;[0-9]+m//g; - - chomp($status); - print "$status"; - print "</tr>"; } print "</table></div>\n"; @@ -215,51 +226,24 @@ END } sub isautorun (@) { - my ($cmd, $col) = @_; - - # Init directory. - my $initdir = "/etc/rc.d/rc3.d/"; - - my $status = "<td align='center' $col></td>"; + my ($pak, $service, $col) = @_; + my @testcmd = &General::system_output("/usr/local/bin/addonctrl", "$pak", "boot-status", "$service"); + my $testcmd = @testcmd[0]; + my $status = "<td align='center' $col><img alt='$Lang::tr{'service boot setting unavailable'}' title='$Lang::tr{'service boot setting unavailable'}' src='/images/dialog-warning.png' border='0' width='16' height='16' /></td>"; - # Check if autorun for the given cmd is enabled. - if ( &find_init("$cmd", "$initdir") ) { + # Check if autorun for the given service is enabled. + if ( $testcmd =~ /enabled\ on\ boot/ ) { # Adjust status. - $status = "<td align='center' $col><a href='services.cgi?$_!disable'><img alt='$Lang::tr{'deactivate'}' title='$Lang::tr{'deactivate'}' src='/images/on.gif' border='0' width='16' height='16' /></a></td>"; - } else { + $status = "<td align='center' $col><a href='services.cgi?$pak!disable!$service'><img alt='$Lang::tr{'deactivate'}' title='$Lang::tr{'deactivate'}' src='/images/on.gif' border='0' width='16' height='16' /></a></td>"; + } elsif ( $testcmd =~ /disabled\ on\ boot/ ) { # Adjust status. - $status = "<td align='center' $col><a href='services.cgi?$_!enable'><img alt='$Lang::tr{'activate'}' title='$Lang::tr{'activate'}' src='/images/off.gif' border='0' width='16' height='16' /></a></td>"; + $status = "<td align='center' $col><a href='services.cgi?$pak!enable!$service'><img alt='$Lang::tr{'activate'}' title='$Lang::tr{'activate'}' src='/images/off.gif' border='0' width='16' height='16' /></a></td>"; } # Return the status. return $status; } -sub find_init (@) { - my ($cmd, $dir) = @_; - - # Open given init directory. - opendir (INITDIR, "$dir") || die "Cannot opendir $dir: $!"; - - # Read-in init files from directory. - my @inits = readdir(INITDIR); - - # Close directory handle. - closedir(INITDIR); - - # Loop through the directory. - foreach my $init (@inits) { - # Check if the current processed file belongs to the given command. - if ($init =~ /S\d+\d+$cmd\z/) { - # Found, return "1" - True. - return "1"; - } - } - - # Nothing found, return nothing. - return; -} - sub isrunning (@) { my ($cmd, $col) = @_; my $status = "<td align='center' bgcolor='${Header::colourred}'>$Lang::tr{'stopped'}</td><td colspan='2' $col></td>"; @@ -313,7 +297,7 @@ sub isrunning (@) { } sub isrunningaddon (@) { - my ($cmd, $col) = @_; + my ($pak, $service, $col) = @_; my $status = "<td align='center' bgcolor='${Header::colourred}'>$Lang::tr{'stopped'}</td><td colspan='2' $col></td>"; my $pid = ''; @@ -321,11 +305,13 @@ sub isrunningaddon (@) { my $exename; my @memory; - my @testcmd = &General::system_output("/usr/local/bin/addonctrl", "$cmd", "status"); + my @testcmd = &General::system_output("/usr/local/bin/addonctrl", "$pak", "status", "$service"); my $testcmd = @testcmd[0]; if ( $testcmd =~ /is\ running/ && $testcmd !~ /is\ not\ running/){ - $status = "<td align='center' bgcolor='${Header::colourgreen}'>$Lang::tr{'running'}</td>"; + $status = "<td align='center' $col width='8%'><a href='services.cgi?$pak!stop!$service'><img alt='$Lang::tr{'stop'}' title='$Lang::tr{'stop'}' src='/images/go-down.png' border='0' /></a></td> "; + $status .= "<td align='center' $col width='8%'><a href='services.cgi?$pak!restart!$service'><img alt='$Lang::tr{'restart'}' title='$Lang::tr{'restart'}' src='/images/reload.gif' border='0' /></a></td> "; + $status .= "<td align='center' bgcolor='${Header::colourgreen}'>$Lang::tr{'running'}</td>"; $testcmd =~ s/.* //gi; $testcmd =~ s/[a-z_]//gi; $testcmd =~ s/\[[0-1]\;[0-9]+//gi; @@ -348,7 +334,8 @@ sub isrunningaddon (@) { } $status .="<td align='center' $col>$memory KB</td>"; }else{ - $status = "<td align='center' bgcolor='${Header::colourred}'>$Lang::tr{'stopped'}</td><td colspan='2' $col></td>"; + $status = "<td align='center' $col width='16%' colspan=2><a href='services.cgi?$pak!start!$service'><img alt='$Lang::tr{'start'}' title='$Lang::tr{'start'}' src='/images/go-up.png' border='0' /></a></td>"; + $status .= "<td align='center' bgcolor='${Header::colourred}'>$Lang::tr{'stopped'}</td><td colspan='2' $col></td>"; } return $status; } diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index 798abcffc..db7d117b0 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -2251,6 +2251,7 @@ 'server string' => 'Server String', 'service' => 'Dienst', 'service added' => 'Benutzerdefinierter Netzwerkdienst wurde hinzugefügt', +'service boot setting unavailable' => 'Für das Initscript dieses Dienstes wurde kein gültiger Runlevel-Symlink gefunden.', 'service name' => 'Name des Dienstes:', 'service removed' => 'Benutzerdefinierter Netzwerkdienst wurde entfernt', 'service updated' => 'Benutzerdefinierter Netzwerkdienst wurde aktualisiert', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index f770e7cd9..60dca5be4 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -2306,6 +2306,7 @@ 'server string' => 'Server String', 'service' => 'Service', 'service added' => 'Custom network service added', +'service boot setting unavailable' => 'No valid runlevel symlink was found for the initscript of this service.', 'service name' => 'Service name:', 'service removed' => 'Custom network service removed', 'service updated' => 'Custom network service updated', diff --git a/langs/nl/cgi-bin/nl.pl b/langs/nl/cgi-bin/nl.pl index 49dabec99..4fd6955cc 100644 --- a/langs/nl/cgi-bin/nl.pl +++ b/langs/nl/cgi-bin/nl.pl @@ -1899,6 +1899,7 @@ 'server string' => 'Server String', 'service' => 'Dienst', 'service added' => 'Aangepaste netwerkdienst toegevoegd', +'service boot setting unavailable' => 'Er werd voor het initscript van deze service geen geldige runlevel symlink gevonden.', 'service name' => 'Dienstennaam:', 'service removed' => 'Aangepaste netwerkdienst verwijderd', 'service updated' => 'Aangepaste netwerkdienst bijgewerkt', diff --git a/src/misc-progs/addonctrl.c b/src/misc-progs/addonctrl.c index 14b4b1325..8eb7fbfa5 100644 --- a/src/misc-progs/addonctrl.c +++ b/src/misc-progs/addonctrl.c @@ -10,71 +10,408 @@ #include <string.h> #include <unistd.h> #include <sys/types.h> +#include <sys/stat.h> #include <fcntl.h> +#include <dirent.h> +#include <fnmatch.h> +#include <errno.h> #include "setuid.h" #define BUFFER_SIZE 1024 +const char *initd_path = "/etc/rc.d/init.d"; +const char *enabled_path = "/etc/rc.d/rc3.d"; +const char *disabled_path = "/etc/rc.d/rc3.d/off"; + +const char *usage = + "Usage\n" + " addonctrl <addon> (start|stop|restart|reload|enable|disable|status|boot-status|list-services) [<service>]\n" + "\n" + "Options:\n" + " <addon>\t\tName of the addon to control\n" + " <service>\t\tSpecific service of the addon to control (optional)\n" + " \t\t\tBy default the requested action is performed on all related services. See also 'list-services'.\n" + " start\t\t\tStart service(s) of the addon\n" + " stop\t\t\tStop service(s) of the addon\n" + " restart\t\tRestart service(s) of the addon\n" + " enable\t\tEnable service(s) of the addon to start at boot\n" + " disable\t\tDisable service(s) of the addon to start at boot\n" + " status\t\tDisplay current state of addon service(s)\n" + " boot-status\t\tDisplay wether service(s) is enabled on boot or not\n" + " list-services\t\tDisplay a list of services related to the addon"; + +// Find a file <path> using <filepattern> as glob pattern. +// Returns the found filename or NULL if not found +char *find_file_in_dir(const char *path, const char *filepattern) +{ + struct dirent *entry; + DIR *dp; + char *found = NULL; + + dp = opendir(path); + if (dp) { + entry = readdir(dp); + while(!found && entry) { + if (fnmatch(filepattern, entry->d_name, FNM_PATHNAME) == 0) + found = strdup(entry->d_name); + else + entry = readdir(dp); + } + + closedir(dp); + } + + return found; +} + +// Reads Services metadata for <addon>. +// Returns pointer to array of strings containing the services for <addon>, +// sets <servicescnt> to the number of found services and +// sets <returncode> to +// -1 - system error occured, check errno +// 0 - success - if returned array is NULL, there are no services for <addon> +// 1 - addon was not found +char **get_addon_services(const char *addon, int *servicescnt, const char *filter, int *returncode) { + const char *metafile_prefix = "/opt/pakfire/db/installed/meta-"; + const char *metadata_key = "Services"; + const char *keyvalue_delim = ":"; + const char *service_delim = " "; + char *token; + char **services = NULL; + char *service; + char *line = NULL; + size_t line_len = 0; + int i = 0; + char *metafile = NULL; + + *returncode = 0; + + if (!addon) { + errno = EINVAL; + *returncode = 1; + return NULL; + } + + *returncode = asprintf(&metafile, "%s%s", metafile_prefix, addon); + if (*returncode == -1) + return NULL; + + FILE *fp = fopen(metafile,"r"); + if (!fp) { + if (errno == ENOENT) { + *returncode = 1; + } else { + *returncode = -1; + } + return NULL; + } + + // Get initscript(s) for addon from meta-file + while (getline(&line, &line_len, fp) != -1 && !services) { + // Strip newline + char *newline = strchr(line, '\n'); + if (newline) *newline = 0; + + // Split line in key and values; Check for required key. + token = strtok(line, keyvalue_delim); + if (!token || strcmp(token, metadata_key) != 0) + continue; + + // Get values for matched key. Stop if no values are present. + token = strtok(NULL, keyvalue_delim); + if (!token) + break; + + // Split values and put each service in services array + service = strtok(token, service_delim); + while (service) { + if (!filter || strcmp(filter, service) == 0) { + services = reallocarray(services, i+1 ,sizeof (char *)); + if (!services) { + *returncode = -1; + break; + } + + services[i] = strdup(service); + if (!services[i++]) { + *returncode = -1; + break; + } + } + + service = strtok(NULL, service_delim); + } + } + + if (line) free(line); + fclose(fp); + free(metafile); + + *servicescnt = i; + + return services; +} + +// Calls initscript <service> with parameter <action> +int initscript_action(const char *service, const char *action) { + char *initscript = NULL; + char *argv[] = { + action, + NULL + }; + int r = 0; + + r = asprintf(&initscript, "%s/%s", initd_path, service); + if (r != -1) + r = run(initscript, argv); + + if (initscript) free(initscript); + + return r; +} + +// Move an initscript with filepattern from <src_path> to <dest_path> +// Returns: +// -1: Error during move or memory allocation. Details in errno +// 0: Success +// 1: file was not moved, but is already in <dest_path> +// 2: file does not exist in either in <src_path> or <dest_path> +int move_initscript_by_pattern(const char *src_path, const char *dest_path, const char *filepattern) { + char *src = NULL; + char *dest = NULL; + int r = 2; + char *filename = NULL; + + filename = find_file_in_dir(src_path, filepattern); + if (filename) { + // Move file + r = asprintf(&src, "%s/%s", src_path, filename); + if (r != -1) { + r = asprintf(&dest, "%s/%s", dest_path, filename); + if (r != -1) + r = rename(src, dest); + } + + if (src) free(src); + if (dest) free(dest); + } else { + // check if file is already in dest + filename = find_file_in_dir(dest_path, filepattern); + if (filename) + r = 1; + } + + if (filename) free(filename); + + return r; +} + +// Enable/Disable addon service(s) by moving initscript symlink from/to disabled_path +// Returns: +// -1 - System error occured. Check errno. +// 0 - Success +// 1 - Service was already enabled/disabled +// 2 - Service has no valid runlevel symlink +int toggle_service(const char *service, const char *action) { + const char *src_path, *dest_path; + char *filepattern = NULL; + int r = 0; + + if (asprintf(&filepattern, "S??%s", service) == -1) + return -1; + + if (strcmp(action, "enable") == 0) { + src_path = disabled_path; + dest_path = enabled_path; + } else { + src_path = enabled_path; + dest_path = disabled_path; + } + + // Ensure disabled_path exists + r = mkdir(disabled_path, S_IRWXU + S_IRGRP + S_IXGRP + S_IROTH + S_IXOTH); + if (r != -1 || errno == EEXIST) + r = move_initscript_by_pattern(src_path, dest_path, filepattern); + + free(filepattern); + + return r; +} + +// Return whether <service> is enabled or disabled on boot +// Returns: +// -1 - System error occured. Check errno. +// 0 - <service> is disabled on boot +// 1 - <service> is enabled on boot +// 2 - Runlevel suymlink for <service> was not found +int get_boot_status(char *service) { + char *filepattern = NULL; + char *filename = NULL; + int r = 2; + + if (asprintf(&filepattern, "S??%s", service) == -1) + return -1; + + filename = find_file_in_dir(enabled_path, filepattern); + if (filename) + r = 1; + else { + filename = find_file_in_dir(disabled_path, filepattern); + if (filename) + r = 0; + else + r = 2; + } + + if (filename) free(filename); + free(filepattern); + + return r; +} + int main(int argc, char *argv[]) { - char command[BUFFER_SIZE]; - - if (!(initsetuid())) - exit(1); - - if (argc < 3) { - fprintf(stderr, "\nMissing arguments.\n\naddonctrl addon (start|stop|restart|reload|enable|disable)\n\n"); - exit(1); - } - - const char* name = argv[1]; - - if (strlen(name) > 32) { - fprintf(stderr, "\nString to large.\n\naddonctrl addon (start|stop|restart|reload|enable|disable)\n\n"); - exit(1); - } - - // Check if the input argument is valid - if (!is_valid_argument_alnum(name)) { - fprintf(stderr, "Invalid add-on name: %s\n", name); - exit(2); - } - - sprintf(command, "/opt/pakfire/db/installed/meta-%s", name); - FILE *fp = fopen(command,"r"); - if ( fp ) { - fclose(fp); - } else { - fprintf(stderr, "\nAddon '%s' not found.\n\naddonctrl addon (start|stop|restart|reload|status|enable|disable)\n\n", name); - exit(1); - } - - if (strcmp(argv[2], "start") == 0) { - snprintf(command, BUFFER_SIZE - 1, "/etc/rc.d/init.d/%s start", name); - safe_system(command); - } else if (strcmp(argv[2], "stop") == 0) { - snprintf(command, BUFFER_SIZE - 1, "/etc/rc.d/init.d/%s stop", name); - safe_system(command); - } else if (strcmp(argv[2], "restart") == 0) { - snprintf(command, BUFFER_SIZE - 1, "/etc/rc.d/init.d/%s restart", name); - safe_system(command); - } else if (strcmp(argv[2], "reload") == 0) { - snprintf(command, BUFFER_SIZE - 1, "/etc/rc.d/init.d/%s reload", name); - safe_system(command); - } else if (strcmp(argv[2], "status") == 0) { - snprintf(command, BUFFER_SIZE - 1, "/etc/rc.d/init.d/%s status", name); - safe_system(command); - } else if (strcmp(argv[2], "enable") == 0) { - snprintf(command, BUFFER_SIZE - 1, "mv -f /etc/rc.d/rc3.d/off/S??%s /etc/rc.d/rc3.d" , name); - safe_system(command); - } else if (strcmp(argv[2], "disable") == 0) { - snprintf(command, BUFFER_SIZE - 1, "mkdir -p /etc/rc.d/rc3.d/off"); - safe_system(command); - snprintf(command, BUFFER_SIZE - 1, "mv -f /etc/rc.d/rc3.d/S??%s /etc/rc.d/rc3.d/off" , name); - safe_system(command); - } else { - fprintf(stderr, "\nBad argument given.\n\naddonctrl addon (start|stop|restart|reload|enable|disable)\n\n"); - exit(1); - } - - return 0; + char **services = NULL; + int servicescnt = 0; + char *addon = argv[1]; + char *action = argv[2]; + char *service_filter = NULL; + int r = 0; + + if (!(initsetuid())) + exit(1); + + if (argc < 3) { + fprintf(stderr, "\nMissing arguments.\n\n%s\n\n", usage); + exit(1); + } + + // Ignore filter when list of services is requested + if (argc == 4 && strcmp(action, "list-services") != 0) + service_filter = argv[3]; + + if (strlen(addon) > 32) { + fprintf(stderr, "\nString too large.\n\n%s\n\n", usage); + exit(1); + } + + // Check if the input argument is valid + if (!is_valid_argument_alnum(addon)) { + fprintf(stderr, "Invalid add-on name: %s.\n", addon); + exit(2); + } + + // Get initscript name(s) from addon metadata + int rc = 0; + services = get_addon_services(addon, &servicescnt, service_filter, &rc); + if (!services) { + switch (rc) { + case -1: + fprintf(stderr, "\nSystem error occured. (Error: %m)\n\n"); + break; + + case 0: + if (service_filter) + fprintf(stderr, "\nNo service '%s' found for addon '%s'. Use 'list-services' to get a list of available services\n\n%s\n\n", service_filter, addon, usage); + else + fprintf(stderr, "\nAddon '%s' has no services.\n\n", addon); + break; + + case 1: + fprintf(stderr, "\nAddon '%s' not found.\n\n%s\n\n", addon, usage); + break; + } + exit(1); + } + + // Handle requested action + if (strcmp(action, "start") == 0 || + strcmp(action, "stop") == 0 || + strcmp(action, "restart") == 0 || + strcmp(action, "reload") == 0 || + strcmp(action, "status") == 0) { + + for(int i = 0; i < servicescnt; i++) { + if (initscript_action(services[i], action) < 0) { + r = 1; + fprintf(stderr, "\nSystem error occured. (Error: %m)\n\n"); + break; + } + } + + } else if (strcmp(action, "enable") == 0 || + strcmp(action, "disable") == 0) { + + for(int i = 0; i < servicescnt; i++) { + switch (r = toggle_service(services[i], action)) { + case -1: + fprintf(stderr, "\nSystem error occured. (Error: %m)\n\n"); + break; + + case 0: + printf("%sd service %s\n", action, services[i]); + break; + + case 1: + fprintf(stderr, "Service %s is already %sd. Skipping...\n", services[i], action); + break; + + case 2: + fprintf(stderr, "\nUnable to %s service %s. (Service has no valid runlevel symlink).\n\n", action, services[i]); + break; + } + + // Break from for loop in case of a system error. + if (r == -1) { + r = 1; + break; + } + } + + } else if (strcmp(action, "boot-status") == 0) { + // Print boot status for each service + for(int i = 0; i < servicescnt; i++) { + switch (get_boot_status(services[i])) { + case -1: + r = 1; + fprintf(stderr, "\nSystem error occured. (Error: %m)\n\n"); + break; + + case 0: + printf("%s is disabled on boot.\n", services[i]); + break; + + case 1: + printf("%s is enabled on boot.\n", services[i]); + break; + + case 2: + printf("%s is not available for boot. (Service has no valid symlink in either %s or %s).\n", services[i], enabled_path, disabled_path); + break; + } + + // Break from for loop in case of an error + if (r == 1) { + break; + } + } + + } else if (strcmp(action, "list-services") == 0) { + // List all services for addon + printf("\nServices for addon %s:\n", addon); + for(int i = 0; i < servicescnt; i++) { + printf(" %s\n", services[i]); + } + printf("\n"); + + } else { + fprintf(stderr, "\nBad argument given.\n\n%s\n\n", usage); + r = 1; + } + + // Cleanup + for(int i = 0; i < servicescnt; i++) + free(services[i]); + free(services); + + return r; } hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. ca1787b29ba370c2da9cdfb29e6f148fdb5edba1
by Peter Müller 24 Oct '22

24 Oct '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via ca1787b29ba370c2da9cdfb29e6f148fdb5edba1 (commit) via 3e5190f5c7fc828937fdefa0a65d97243b55c2ed (commit) via 77321ff12fc918f39ce6a4eeb37a97e25896b65f (commit) via e420c103dede60f9c8121386b55e83314d176634 (commit) via 233baacd6753d8adb756219d5fac536d9b6f92ae (commit) via c965daf6da233875d6cdf06fd8935f18102c7478 (commit) via 5f1abe00433812a75e58583ed254a452fe30a609 (commit) via 609007e54b85fafd14b35c3adfd9acb8a36b9b4d (commit) via 4ddb1fdac09c20d132935f668b395b918e9846a4 (commit) via 89e47eaca85d0d582195731b4506b6c4be1dfe75 (commit) via 7fc5e932944d61af0ccacf87bb562f0a94bb3f26 (commit) via 367a62f5151c1a8569c32d2d40a536d889dd55f6 (commit) via 024579de58e4410ce1d2eba61814f2ede59f53a5 (commit) via 0d0bfd0e5c68a6d0ebef31f37fbd601a90e71250 (commit) via f6121180b8a219e11a21d586df0ad175f1440b63 (commit) via 4929efb7d8a0b90040be24754b13f748a15f8a85 (commit) via 0f421901dde788a2bbb8af1fcf185477408a812b (commit) from ee2e7db90bf12ab1c028f5f3b955afaf9cdf76f5 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit ca1787b29ba370c2da9cdfb29e6f148fdb5edba1 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 24 12:39:47 2022 +0000 libloc: Update rootfile Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 3e5190f5c7fc828937fdefa0a65d97243b55c2ed Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Sat Oct 8 19:55:47 2022 +0200 samba: Update to 4.17.0 For details see: https://www.samba.org/samba/latest_news.html#4.17.0 This "just came my way" and I found the CVEs listed on https://www.samba.org/samba/history/security.html which address "All versions of Samba prior to 4.16.4" or "All versions of Samba" rather long. The 'glibc_headers' patch is now included. Sad to say, due to the lack of hardware I can only include the rootfile for x86_64. Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> commit 77321ff12fc918f39ce6a4eeb37a97e25896b65f Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 24 09:07:18 2022 +0000 Core Update 172: Ship changes related to OpenVPN CRL handling Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit e420c103dede60f9c8121386b55e83314d176634 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Oct 7 14:50:17 2022 +0000 openvpnctrl: Update CRL before starting the client daemon If the CRL is outdated for some reason (e.g. a backup restored from ISO where we don't run the migration scripts), this will update it on reboot/restart of the service. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 233baacd6753d8adb756219d5fac536d9b6f92ae Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Oct 7 14:50:16 2022 +0000 backup: Update OpenVPN CRL After a backup is restored, the CRL might be out of data and client won't be able to connect to the server any more. This will immediately update the CRL should it require an update. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit c965daf6da233875d6cdf06fd8935f18102c7478 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 24 09:05:23 2022 +0000 Core Update 172: Delete orphaned strongSwan files Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 5f1abe00433812a75e58583ed254a452fe30a609 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 24 09:04:29 2022 +0000 Core Update 172: Ship and restart Unbound Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 609007e54b85fafd14b35c3adfd9acb8a36b9b4d Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Fri Oct 14 21:09:35 2022 +0200 unbound: Update to 1.17.0 For details see: https://nlnetlabs.nl/projects/unbound/download/#unbound-1-17-0 "Features Merge #753: ACL per interface. (New interface-* configuration options). Merge #760: PROXYv2 downstream support. (New proxy-protocol-port configuration option). Bug Fixes Fix #728: alloc_reg_obtain() core dump. Stop double alloc_reg_release when serviced_create fails. Fix edns subnet so that scope 0 answers only match sourcemask 0 queries for answers from cache if from a query with sourcemask 0. Fix unittest for edns subnet change. Merge #730 from luisdallos: Fix startup failure on Windows 8.1 due to unsupported IPV6_USER_MTU socket option being set. Fix ratelimit inconsistency, for ip-ratelimits the value is the amount allowed, like for ratelimits. Fix #734 [FR] enable unbound-checkconf to detect more (basic) errors. Fix to log accept error ENFILE and EMFILE errno, but slowly, once per 10 seconds. Also log accept failures when no slow down is used. Fix to avoid process wide fcntl calls mixed with nonblocking operations after a blocked write. Patch from Vadim Fedorenko that adds MSG_DONTWAIT to receive operations, so that instruction reordering does not cause mistakenly blocking socket operations. Fix to wait for blocked write on UDP sockets, with a timeout if it takes too long the packet is dropped. Fix for wait for udp send to stop when packet is successfully sent. Fix #741: systemd socket activation fails on IPv6. Fix to update config tests to fix checking if nonblocking sockets work on OpenBSD. Slow down log frequency of write wait failures. Fix to set out of file descriptor warning to operational verbosity. Fix to log a verbose message at operational notice level if a thread is not responding, to stats requests. It is logged with thread identifiers. Remove include that was there for debug purposes. Fix to check pthread_t size after pthread has been detected. Convert tdir tests to use the new skip_test functionality. Remove unused testcode/mini_tpkg.sh file. Better output for skipped tdir tests. Fix doxygen warning in respip.h. Fix to remove erroneous TC flag from TCP upstream. Fix test tdir skip report printout. Fix windows compile, the identifier interface is defined in headers. Fix to close errno block in comm_point_tcp_handle_read outside of ifdef. Fix static analysis report to remove dead code from the rpz_callback_from_iterator_module function. Fix to clean up after the acl_interface unit test. Merge #764: Leniency for target discovery when under load (for NRDelegation changes). Use DEBUG_TDIR from environment in mini_tdir.sh for debugging. Fix string comparison in mini_tdir.sh. Make ede.tdir test more predictable by using static data. Fix checkconf test for dnscrypt and proxy port. Fix dnscrypt compile for proxy protocol code changes. Fix to stop responses with TC flag from resulting in partial responses. It retries to fetch the data elsewhere, or fails the query and in depth fix removes the TC flag from the cached item. Fix proxy length debug output printout typecasts. Fix to stop possible loops in the tcp reuse code (write_wait list and tcp_wait list). Based on analysis and patch from Prad Seniappan and Karthik Umashankar. Fix PROXYv2 header read for TCP connections when no proxied addresses are provided." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 4ddb1fdac09c20d132935f668b395b918e9846a4 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 24 09:03:08 2022 +0000 Core Update 172: Ship and restart OpenSSH Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 89e47eaca85d0d582195731b4506b6c4be1dfe75 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Oct 15 15:47:51 2022 +0000 OpenSSH: Update to 9.1p1 Please refer to https://www.openssh.com/releasenotes.html#9.1 for the release announcement of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 7fc5e932944d61af0ccacf87bb562f0a94bb3f26 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 24 08:59:09 2022 +0000 Core Update 172: Ship tzdata Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 367a62f5151c1a8569c32d2d40a536d889dd55f6 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Oct 15 15:51:05 2022 +0000 tzdata: Update to 2022e Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 024579de58e4410ce1d2eba61814f2ede59f53a5 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 24 08:58:51 2022 +0000 Core Update 172: Ship libloc Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 0d0bfd0e5c68a6d0ebef31f37fbd601a90e71250 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Oct 15 15:53:07 2022 +0000 libloc: Update to 0.9.15 Please refer to https://lists.ipfire.org/pipermail/location/2022-September/000579.html for the release announcement of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit f6121180b8a219e11a21d586df0ad175f1440b63 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 24 08:57:00 2022 +0000 Core Update 172: Ship and restart strongSwan Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 4929efb7d8a0b90040be24754b13f748a15f8a85 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Oct 15 16:01:26 2022 +0000 strongSwan: Update to 5.9.8 Please refer to https://github.com/strongswan/strongswan/releases/tag/5.9.8 for the release announcement of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 0f421901dde788a2bbb8af1fcf185477408a812b Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 24 08:55:12 2022 +0000 Start Core Update 172 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/backup/backup.pl | 3 ++ config/rootfiles/common/libloc | 2 + config/rootfiles/common/strongswan | 8 +-- config/rootfiles/common/tzdata | 3 ++ config/rootfiles/common/unbound | 2 +- config/rootfiles/core/{171 => 172}/core-files | 0 config/rootfiles/core/{171 => 172}/exclude | 0 .../core/{171 => 172}/filelists/core-files | 0 config/rootfiles/core/172/filelists/files | 2 + .../rootfiles/core/{171 => 172}/filelists/libloc | 0 .../{oldcore/100 => core/172}/filelists/openssh | 0 .../core/{171 => 172}/filelists/strongswan | 0 .../{oldcore/100 => core/172}/filelists/tzdata | 0 .../rootfiles/core/{171 => 172}/filelists/unbound | 0 .../rootfiles/{oldcore/151 => core/172}/update.sh | 28 +++++----- config/rootfiles/{core => oldcore}/171/core-files | 0 config/rootfiles/{core => oldcore}/171/exclude | 0 .../171/filelists/aarch64/binutils | 0 .../{core => oldcore}/171/filelists/aarch64/efivar | 0 .../{core => oldcore}/171/filelists/aarch64/gcc | 0 .../{core => oldcore}/171/filelists/aarch64/glibc | 0 .../{core => oldcore}/171/filelists/aarch64/linux | 0 .../{core => oldcore}/171/filelists/aarch64/u-boot | 0 .../171/filelists/aarch64/util-linux | 0 .../171/filelists/armv6l/binutils | 0 .../{core => oldcore}/171/filelists/armv6l/gcc | 0 .../{core => oldcore}/171/filelists/armv6l/glibc | 0 .../{core => oldcore}/171/filelists/armv6l/linux | 0 .../{core => oldcore}/171/filelists/armv6l/u-boot | 0 .../171/filelists/armv6l/util-linux | 0 .../rootfiles/{core => oldcore}/171/filelists/bind | 0 .../171/filelists/ca-certificates | 0 .../{core => oldcore}/171/filelists/collectd | 0 .../{core => oldcore}/171/filelists/core-files | 0 .../rootfiles/{core => oldcore}/171/filelists/curl | 0 .../rootfiles/{core => oldcore}/171/filelists/dhcp | 0 .../{core => oldcore}/171/filelists/expat | 0 .../{core => oldcore}/171/filelists/files | 0 .../{core => oldcore}/171/filelists/hdparm | 0 .../{core => oldcore}/171/filelists/iproute2 | 0 .../rootfiles/{core => oldcore}/171/filelists/kbd | 0 .../{core => oldcore}/171/filelists/libarchive | 0 .../{core => oldcore}/171/filelists/libhtp | 0 .../{core => oldcore}/171/filelists/libloc | 0 .../{core => oldcore}/171/filelists/liboping | 0 .../{core => oldcore}/171/filelists/libsodium | 0 .../{core => oldcore}/171/filelists/nettle | 0 .../{core => oldcore}/171/filelists/openvpn | 0 .../rootfiles/{core => oldcore}/171/filelists/perl | 0 .../171/filelists/perl-Apache-Htpasswd | 0 .../171/filelists/perl-Archive-Tar | 0 .../171/filelists/perl-Archive-Zip | 0 .../171/filelists/perl-BerkeleyDB | 0 .../{core => oldcore}/171/filelists/perl-CGI | 0 .../171/filelists/perl-Canary-Stability | 0 .../171/filelists/perl-Compress-Zlib | 0 .../171/filelists/perl-Convert-TNEF | 0 .../171/filelists/perl-Convert-UUlib | 0 .../171/filelists/perl-Crypt-PasswdMD5 | 0 .../171/filelists/perl-DBD-SQLite | 0 .../{core => oldcore}/171/filelists/perl-DBI | 0 .../{core => oldcore}/171/filelists/perl-Data-UUID | 0 .../171/filelists/perl-Device-Modem | 0 .../171/filelists/perl-Device-SerialPort | 0 .../{core => oldcore}/171/filelists/perl-Digest | 0 .../171/filelists/perl-Digest-HMAC | 0 .../171/filelists/perl-Digest-SHA1 | 0 .../171/filelists/perl-Email-Date-Format | 0 .../171/filelists/perl-File-Remove | 0 .../{core => oldcore}/171/filelists/perl-Font-TTF | 0 .../{core => oldcore}/171/filelists/perl-GD | 0 .../{core => oldcore}/171/filelists/perl-GD-Graph | 0 .../171/filelists/perl-GD-TextUtil | 0 .../171/filelists/perl-HTML-Parser | 0 .../171/filelists/perl-HTML-Tagset | 0 .../171/filelists/perl-HTML-Template | 0 .../{core => oldcore}/171/filelists/perl-HTTP-Date | 0 .../171/filelists/perl-HTTP-Message | 0 .../171/filelists/perl-IO-Socket-SSL | 0 .../{core => oldcore}/171/filelists/perl-IO-String | 0 .../171/filelists/perl-IO-Stringy | 0 .../{core => oldcore}/171/filelists/perl-Imager | 0 .../171/filelists/perl-Imager-QRCode | 0 .../171/filelists/perl-LWP-Protocol-https | 0 .../171/filelists/perl-MIME-Base32 | 0 .../{core => oldcore}/171/filelists/perl-MIME-Lite | 0 .../171/filelists/perl-MIME-Tools | 0 .../171/filelists/perl-Mail-Tools | 0 .../171/filelists/perl-Net-CIDR-Lite | 0 .../{core => oldcore}/171/filelists/perl-Net-DNS | 0 .../{core => oldcore}/171/filelists/perl-Net-HTTP | 0 .../171/filelists/perl-Net-IPv4Addr | 0 .../171/filelists/perl-Net-Server | 0 .../171/filelists/perl-Net-Telnet | 0 .../171/filelists/perl-NetAddr-IP | 0 .../171/filelists/perl-Net_SSLeay | 0 .../{core => oldcore}/171/filelists/perl-PDF-API2 | 0 .../171/filelists/perl-Sort-Naturally | 0 .../{core => oldcore}/171/filelists/perl-Switch | 0 .../171/filelists/perl-Text-CSV_XS | 0 .../{core => oldcore}/171/filelists/perl-Try-Tiny | 0 .../{core => oldcore}/171/filelists/perl-URI | 0 .../171/filelists/perl-URI-Encode | 0 .../171/filelists/perl-Unix-Syslog | 0 .../171/filelists/perl-XML-Parser | 0 .../{core => oldcore}/171/filelists/perl-YAML-Tiny | 0 .../{core => oldcore}/171/filelists/perl-libwww | 0 .../{core => oldcore}/171/filelists/rrdtool | 0 .../{core => oldcore}/171/filelists/sqlite | 0 .../{core => oldcore}/171/filelists/squid | 0 .../{core => oldcore}/171/filelists/strongswan | 0 .../{core => oldcore}/171/filelists/suricata | 0 .../{core => oldcore}/171/filelists/sysvinit | 0 .../rootfiles/{core => oldcore}/171/filelists/udev | 0 .../{core => oldcore}/171/filelists/unbound | 0 .../{core => oldcore}/171/filelists/wireless-regdb | 0 .../171/filelists/x86_64/binutils | 0 .../{core => oldcore}/171/filelists/x86_64/efivar | 0 .../{core => oldcore}/171/filelists/x86_64/gcc | 0 .../{core => oldcore}/171/filelists/x86_64/glibc | 0 .../{core => oldcore}/171/filelists/x86_64/linux | 0 .../171/filelists/x86_64/syslinux | 0 .../171/filelists/x86_64/util-linux | 0 config/rootfiles/{core => oldcore}/171/update.sh | 0 config/rootfiles/packages/x86_64/samba | 59 ++++++++++++-------- lfs/libloc | 18 +++++-- lfs/openssh | 4 +- lfs/samba | 7 ++- lfs/tzdata | 6 +-- lfs/unbound | 4 +- make.sh | 2 +- src/misc-progs/openvpnctrl.c | 2 + .../libloc-0.9.15-Makefile-reset-Python-path.patch | 22 ++++++++ ...ix-generating-file-names-for-ipset-output.patch | 36 +++++++++++++ src/patches/samba-4.16.4-glibc-headers.patch | 62 ---------------------- 135 files changed, 151 insertions(+), 119 deletions(-) copy config/rootfiles/core/{171 => 172}/core-files (100%) copy config/rootfiles/core/{171 => 172}/exclude (100%) copy config/rootfiles/core/{171 => 172}/filelists/core-files (100%) create mode 100644 config/rootfiles/core/172/filelists/files copy config/rootfiles/core/{171 => 172}/filelists/libloc (100%) copy config/rootfiles/{oldcore/100 => core/172}/filelists/openssh (100%) copy config/rootfiles/core/{171 => 172}/filelists/strongswan (100%) copy config/rootfiles/{oldcore/100 => core/172}/filelists/tzdata (100%) copy config/rootfiles/core/{171 => 172}/filelists/unbound (100%) copy config/rootfiles/{oldcore/151 => core/172}/update.sh (86%) rename config/rootfiles/{core => oldcore}/171/core-files (100%) rename config/rootfiles/{core => oldcore}/171/exclude (100%) rename config/rootfiles/{core => oldcore}/171/filelists/aarch64/binutils (100%) rename config/rootfiles/{core => oldcore}/171/filelists/aarch64/efivar (100%) rename config/rootfiles/{core => oldcore}/171/filelists/aarch64/gcc (100%) rename config/rootfiles/{core => oldcore}/171/filelists/aarch64/glibc (100%) rename config/rootfiles/{core => oldcore}/171/filelists/aarch64/linux (100%) rename config/rootfiles/{core => oldcore}/171/filelists/aarch64/u-boot (100%) rename config/rootfiles/{core => oldcore}/171/filelists/aarch64/util-linux (100%) rename config/rootfiles/{core => oldcore}/171/filelists/armv6l/binutils (100%) rename config/rootfiles/{core => oldcore}/171/filelists/armv6l/gcc (100%) rename config/rootfiles/{core => oldcore}/171/filelists/armv6l/glibc (100%) rename config/rootfiles/{core => oldcore}/171/filelists/armv6l/linux (100%) rename config/rootfiles/{core => oldcore}/171/filelists/armv6l/u-boot (100%) rename config/rootfiles/{core => oldcore}/171/filelists/armv6l/util-linux (100%) rename config/rootfiles/{core => oldcore}/171/filelists/bind (100%) rename config/rootfiles/{core => oldcore}/171/filelists/ca-certificates (100%) rename config/rootfiles/{core => oldcore}/171/filelists/collectd (100%) rename config/rootfiles/{core => oldcore}/171/filelists/core-files (100%) rename config/rootfiles/{core => oldcore}/171/filelists/curl (100%) rename config/rootfiles/{core => oldcore}/171/filelists/dhcp (100%) rename config/rootfiles/{core => oldcore}/171/filelists/expat (100%) rename config/rootfiles/{core => oldcore}/171/filelists/files (100%) rename config/rootfiles/{core => oldcore}/171/filelists/hdparm (100%) rename config/rootfiles/{core => oldcore}/171/filelists/iproute2 (100%) rename config/rootfiles/{core => oldcore}/171/filelists/kbd (100%) rename config/rootfiles/{core => oldcore}/171/filelists/libarchive (100%) rename config/rootfiles/{core => oldcore}/171/filelists/libhtp (100%) rename config/rootfiles/{core => oldcore}/171/filelists/libloc (100%) rename config/rootfiles/{core => oldcore}/171/filelists/liboping (100%) rename config/rootfiles/{core => oldcore}/171/filelists/libsodium (100%) rename config/rootfiles/{core => oldcore}/171/filelists/nettle (100%) rename config/rootfiles/{core => oldcore}/171/filelists/openvpn (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Apache-Htpasswd (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Archive-Tar (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Archive-Zip (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-BerkeleyDB (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-CGI (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Canary-Stability (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Compress-Zlib (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Convert-TNEF (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Convert-UUlib (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Crypt-PasswdMD5 (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-DBD-SQLite (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-DBI (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Data-UUID (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Device-Modem (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Device-SerialPort (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Digest (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Digest-HMAC (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Digest-SHA1 (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Email-Date-Format (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-File-Remove (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Font-TTF (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-GD (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-GD-Graph (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-GD-TextUtil (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-HTML-Parser (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-HTML-Tagset (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-HTML-Template (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-HTTP-Date (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-HTTP-Message (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-IO-Socket-SSL (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-IO-String (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-IO-Stringy (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Imager (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Imager-QRCode (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-LWP-Protocol-https (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-MIME-Base32 (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-MIME-Lite (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-MIME-Tools (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Mail-Tools (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Net-CIDR-Lite (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Net-DNS (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Net-HTTP (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Net-IPv4Addr (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Net-Server (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Net-Telnet (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-NetAddr-IP (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Net_SSLeay (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-PDF-API2 (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Sort-Naturally (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Switch (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Text-CSV_XS (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Try-Tiny (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-URI (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-URI-Encode (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-Unix-Syslog (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-XML-Parser (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-YAML-Tiny (100%) rename config/rootfiles/{core => oldcore}/171/filelists/perl-libwww (100%) rename config/rootfiles/{core => oldcore}/171/filelists/rrdtool (100%) rename config/rootfiles/{core => oldcore}/171/filelists/sqlite (100%) rename config/rootfiles/{core => oldcore}/171/filelists/squid (100%) rename config/rootfiles/{core => oldcore}/171/filelists/strongswan (100%) rename config/rootfiles/{core => oldcore}/171/filelists/suricata (100%) rename config/rootfiles/{core => oldcore}/171/filelists/sysvinit (100%) rename config/rootfiles/{core => oldcore}/171/filelists/udev (100%) rename config/rootfiles/{core => oldcore}/171/filelists/unbound (100%) rename config/rootfiles/{core => oldcore}/171/filelists/wireless-regdb (100%) rename config/rootfiles/{core => oldcore}/171/filelists/x86_64/binutils (100%) rename config/rootfiles/{core => oldcore}/171/filelists/x86_64/efivar (100%) rename config/rootfiles/{core => oldcore}/171/filelists/x86_64/gcc (100%) rename config/rootfiles/{core => oldcore}/171/filelists/x86_64/glibc (100%) rename config/rootfiles/{core => oldcore}/171/filelists/x86_64/linux (100%) rename config/rootfiles/{core => oldcore}/171/filelists/x86_64/syslinux (100%) rename config/rootfiles/{core => oldcore}/171/filelists/x86_64/util-linux (100%) rename config/rootfiles/{core => oldcore}/171/update.sh (100%) create mode 100644 src/patches/libloc-0.9.15-Makefile-reset-Python-path.patch create mode 100644 src/patches/libloc-0.9.15-export-Fix-generating-file-names-for-ipset-output.patch delete mode 100644 src/patches/samba-4.16.4-glibc-headers.patch Difference in files: diff --git a/config/backup/backup.pl b/config/backup/backup.pl index 54957a814..6fd9e45bb 100644 --- a/config/backup/backup.pl +++ b/config/backup/backup.pl @@ -184,6 +184,9 @@ restore_backup() { # move nobeeps if exist [ -e "/var/ipfire/ppp/nobeeps" ] && mv /var/ipfire/ppp/nobeeps /var/ipfire/red/nobeeps + # Update OpenVPN CRL + /etc/fcron.daily/openvpn-crl-updater + return 0 } diff --git a/config/rootfiles/common/libloc b/config/rootfiles/common/libloc index 2b9562b58..7eb94217e 100644 --- a/config/rootfiles/common/libloc +++ b/config/rootfiles/common/libloc @@ -1,3 +1,5 @@ +#etc/cron.daily +#etc/cron.daily/location-update usr/bin/location #usr/bin/location-importer #usr/include/libloc diff --git a/config/rootfiles/common/strongswan b/config/rootfiles/common/strongswan index dd0fd233a..22adf24b4 100644 --- a/config/rootfiles/common/strongswan +++ b/config/rootfiles/common/strongswan @@ -70,7 +70,6 @@ etc/strongswan.d/charon/xauth-generic.conf etc/strongswan.d/charon/xauth-noauth.conf etc/strongswan.d/charon/xcbc.conf etc/strongswan.d/pki.conf -etc/strongswan.d/scepclient.conf etc/strongswan.d/starter.conf etc/strongswan.d/swanctl.conf #etc/swanctl @@ -170,7 +169,6 @@ usr/lib/ipsec/plugins/libstrongswan-xcbc.so #usr/libexec/ipsec usr/libexec/ipsec/_updown usr/libexec/ipsec/charon -usr/libexec/ipsec/scepclient usr/libexec/ipsec/starter usr/libexec/ipsec/stroke usr/libexec/ipsec/xfrmi @@ -178,6 +176,8 @@ usr/sbin/ipsec usr/sbin/swanctl #usr/share/man/man1/pki---acert.1 #usr/share/man/man1/pki---dn.1 +#usr/share/man/man1/pki---est.1 +#usr/share/man/man1/pki---estca.1 #usr/share/man/man1/pki---gen.1 #usr/share/man/man1/pki---issue.1 #usr/share/man/man1/pki---keyid.1 @@ -185,6 +185,8 @@ usr/sbin/swanctl #usr/share/man/man1/pki---print.1 #usr/share/man/man1/pki---pub.1 #usr/share/man/man1/pki---req.1 +#usr/share/man/man1/pki---scep.1 +#usr/share/man/man1/pki---scepca.1 #usr/share/man/man1/pki---self.1 #usr/share/man/man1/pki---signcrl.1 #usr/share/man/man1/pki---verify.1 @@ -194,7 +196,6 @@ usr/sbin/swanctl #usr/share/man/man5/strongswan.conf.5 #usr/share/man/man5/swanctl.conf.5 #usr/share/man/man8/ipsec.8 -#usr/share/man/man8/scepclient.8 #usr/share/man/man8/swanctl.8 #usr/share/strongswan #usr/share/strongswan/templates @@ -260,6 +261,5 @@ usr/sbin/swanctl #usr/share/strongswan/templates/config/strongswan.d/charon-logging.conf #usr/share/strongswan/templates/config/strongswan.d/charon.conf #usr/share/strongswan/templates/config/strongswan.d/pki.conf -#usr/share/strongswan/templates/config/strongswan.d/scepclient.conf #usr/share/strongswan/templates/config/strongswan.d/starter.conf #usr/share/strongswan/templates/config/strongswan.d/swanctl.conf diff --git a/config/rootfiles/common/tzdata b/config/rootfiles/common/tzdata index f6903a057..b64e19681 100644 --- a/config/rootfiles/common/tzdata +++ b/config/rootfiles/common/tzdata @@ -465,6 +465,7 @@ usr/share/zoneinfo #usr/share/zoneinfo/Europe/Kaliningrad #usr/share/zoneinfo/Europe/Kiev #usr/share/zoneinfo/Europe/Kirov +#usr/share/zoneinfo/Europe/Kyiv #usr/share/zoneinfo/Europe/Lisbon #usr/share/zoneinfo/Europe/Ljubljana #usr/share/zoneinfo/Europe/London @@ -1082,6 +1083,7 @@ usr/share/zoneinfo #usr/share/zoneinfo/posix/Europe/Kaliningrad #usr/share/zoneinfo/posix/Europe/Kiev #usr/share/zoneinfo/posix/Europe/Kirov +#usr/share/zoneinfo/posix/Europe/Kyiv #usr/share/zoneinfo/posix/Europe/Lisbon #usr/share/zoneinfo/posix/Europe/Ljubljana #usr/share/zoneinfo/posix/Europe/London @@ -1699,6 +1701,7 @@ usr/share/zoneinfo #usr/share/zoneinfo/right/Europe/Kaliningrad #usr/share/zoneinfo/right/Europe/Kiev #usr/share/zoneinfo/right/Europe/Kirov +#usr/share/zoneinfo/right/Europe/Kyiv #usr/share/zoneinfo/right/Europe/Lisbon #usr/share/zoneinfo/right/Europe/Ljubljana #usr/share/zoneinfo/right/Europe/London diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 7af787f29..26ce13c3f 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.1.19 +usr/lib/libunbound.so.8.1.20 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/config/rootfiles/core/171/core-files b/config/rootfiles/core/172/core-files similarity index 100% rename from config/rootfiles/core/171/core-files rename to config/rootfiles/core/172/core-files diff --git a/config/rootfiles/core/171/exclude b/config/rootfiles/core/172/exclude similarity index 100% rename from config/rootfiles/core/171/exclude rename to config/rootfiles/core/172/exclude diff --git a/config/rootfiles/core/171/filelists/core-files b/config/rootfiles/core/172/filelists/core-files similarity index 100% rename from config/rootfiles/core/171/filelists/core-files rename to config/rootfiles/core/172/filelists/core-files diff --git a/config/rootfiles/core/172/filelists/files b/config/rootfiles/core/172/filelists/files new file mode 100644 index 000000000..206a50369 --- /dev/null +++ b/config/rootfiles/core/172/filelists/files @@ -0,0 +1,2 @@ +usr/local/bin/openvpnctrl +var/ipfire/backup/bin/backup.pl diff --git a/config/rootfiles/core/171/filelists/libloc b/config/rootfiles/core/172/filelists/libloc similarity index 100% rename from config/rootfiles/core/171/filelists/libloc rename to config/rootfiles/core/172/filelists/libloc diff --git a/config/rootfiles/core/172/filelists/openssh b/config/rootfiles/core/172/filelists/openssh new file mode 120000 index 000000000..d8c77fd8e --- /dev/null +++ b/config/rootfiles/core/172/filelists/openssh @@ -0,0 +1 @@ +../../../common/openssh \ No newline at end of file diff --git a/config/rootfiles/core/171/filelists/strongswan b/config/rootfiles/core/172/filelists/strongswan similarity index 100% rename from config/rootfiles/core/171/filelists/strongswan rename to config/rootfiles/core/172/filelists/strongswan diff --git a/config/rootfiles/core/172/filelists/tzdata b/config/rootfiles/core/172/filelists/tzdata new file mode 120000 index 000000000..5a6e3252f --- /dev/null +++ b/config/rootfiles/core/172/filelists/tzdata @@ -0,0 +1 @@ +../../../common/tzdata \ No newline at end of file diff --git a/config/rootfiles/core/171/filelists/unbound b/config/rootfiles/core/172/filelists/unbound similarity index 100% rename from config/rootfiles/core/171/filelists/unbound rename to config/rootfiles/core/172/filelists/unbound diff --git a/config/rootfiles/core/172/update.sh b/config/rootfiles/core/172/update.sh new file mode 100644 index 000000000..643a262bc --- /dev/null +++ b/config/rootfiles/core/172/update.sh @@ -0,0 +1,84 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 3 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2022 IPFire-Team <info(a)ipfire.org>. # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh +/usr/local/bin/backupctrl exclude >/dev/null 2>&1 + +core=172 + +# Remove old core updates from pakfire cache to save space... +for (( i=1; i<=$core; i++ )); do + rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire +done + +# Stop services +/etc/rc.d/init.d/ipsec stop +/etc/rc.d/init.d/sshd stop +/etc/rc.d/init.d/unbound stop + +# Remove files +rm -rvf \ + /etc/strongswan.d/scepclient.conf \ + /usr/lib/libunbound.so.8.1.1* \ + /usr/libexec/ipsec/scepclient + +# Extract files +extract_files + +# update linker config +ldconfig + +# Update Language cache +/usr/local/bin/update-lang-cache + +# Filesytem cleanup +/usr/local/bin/filesystem-cleanup + +# Apply local configuration to sshd_config +/usr/local/bin/sshctrl + +# Start services +/etc/init.d/unbound start +if grep -q "ENABLE_SSH=on" /var/ipfire/remote/settings; then + /etc/init.d/sshd start +fi +if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then + /etc/init.d/ipsec start +fi + +# This update needs a reboot... +#touch /var/run/need_reboot + +# Finish +/etc/init.d/fireinfo start +sendprofile + +# Update grub config to display new core version +if [ -e /boot/grub/grub.cfg ]; then + grub-mkconfig -o /boot/grub/grub.cfg +fi + +sync + +# Don't report the exitcode last command +exit 0 diff --git a/config/rootfiles/oldcore/171/core-files b/config/rootfiles/oldcore/171/core-files new file mode 100644 index 000000000..0dec37e53 --- /dev/null +++ b/config/rootfiles/oldcore/171/core-files @@ -0,0 +1,5 @@ +etc/system-release +etc/issue +etc/os-release +srv/web/ipfire/cgi-bin/credits.cgi +var/ipfire/langs diff --git a/config/rootfiles/oldcore/171/exclude b/config/rootfiles/oldcore/171/exclude new file mode 100644 index 000000000..378c2d563 --- /dev/null +++ b/config/rootfiles/oldcore/171/exclude @@ -0,0 +1,34 @@ +boot/config.txt +boot/grub/grub.cfg +boot/grub/grubenv +boot/uEnv.txt +etc/alternatives +etc/collectd.custom +etc/default/grub +etc/ipsec.conf +etc/ipsec.secrets +etc/ipsec.user.conf +etc/ipsec.user.secrets +etc/localtime +etc/shadow +etc/snort/snort.conf +etc/ssl/openssl.cnf +etc/sudoers +etc/sysconfig/firewall.local +etc/sysconfig/rc.local +etc/udev/rules.d/30-persistent-network.rules +srv/web/ipfire/html/proxy.pac +var/ipfire/dma +var/ipfire/time +var/ipfire/firewall/locationblock +var/ipfire/fwhosts/customlocationgrp +var/ipfire/ovpn +var/ipfire/urlfilter/blacklist +var/ipfire/urlfilter/settings +var/lib/alternatives +var/lib/location/database.db +var/log/cache +var/log/dhcpcd.log +var/log/messages +var/state/dhcp/dhcpd.leases +var/updatecache diff --git a/config/rootfiles/core/171/filelists/aarch64/binutils b/config/rootfiles/oldcore/171/filelists/aarch64/binutils similarity index 100% rename from config/rootfiles/core/171/filelists/aarch64/binutils rename to config/rootfiles/oldcore/171/filelists/aarch64/binutils diff --git a/config/rootfiles/core/171/filelists/aarch64/efivar b/config/rootfiles/oldcore/171/filelists/aarch64/efivar similarity index 100% rename from config/rootfiles/core/171/filelists/aarch64/efivar rename to config/rootfiles/oldcore/171/filelists/aarch64/efivar diff --git a/config/rootfiles/core/171/filelists/aarch64/gcc b/config/rootfiles/oldcore/171/filelists/aarch64/gcc similarity index 100% rename from config/rootfiles/core/171/filelists/aarch64/gcc rename to config/rootfiles/oldcore/171/filelists/aarch64/gcc diff --git a/config/rootfiles/core/171/filelists/aarch64/glibc b/config/rootfiles/oldcore/171/filelists/aarch64/glibc similarity index 100% rename from config/rootfiles/core/171/filelists/aarch64/glibc rename to config/rootfiles/oldcore/171/filelists/aarch64/glibc diff --git a/config/rootfiles/core/171/filelists/aarch64/linux b/config/rootfiles/oldcore/171/filelists/aarch64/linux similarity index 100% rename from config/rootfiles/core/171/filelists/aarch64/linux rename to config/rootfiles/oldcore/171/filelists/aarch64/linux diff --git a/config/rootfiles/core/171/filelists/aarch64/u-boot b/config/rootfiles/oldcore/171/filelists/aarch64/u-boot similarity index 100% rename from config/rootfiles/core/171/filelists/aarch64/u-boot rename to config/rootfiles/oldcore/171/filelists/aarch64/u-boot diff --git a/config/rootfiles/core/171/filelists/aarch64/util-linux b/config/rootfiles/oldcore/171/filelists/aarch64/util-linux similarity index 100% rename from config/rootfiles/core/171/filelists/aarch64/util-linux rename to config/rootfiles/oldcore/171/filelists/aarch64/util-linux diff --git a/config/rootfiles/core/171/filelists/armv6l/binutils b/config/rootfiles/oldcore/171/filelists/armv6l/binutils similarity index 100% rename from config/rootfiles/core/171/filelists/armv6l/binutils rename to config/rootfiles/oldcore/171/filelists/armv6l/binutils diff --git a/config/rootfiles/core/171/filelists/armv6l/gcc b/config/rootfiles/oldcore/171/filelists/armv6l/gcc similarity index 100% rename from config/rootfiles/core/171/filelists/armv6l/gcc rename to config/rootfiles/oldcore/171/filelists/armv6l/gcc diff --git a/config/rootfiles/core/171/filelists/armv6l/glibc b/config/rootfiles/oldcore/171/filelists/armv6l/glibc similarity index 100% rename from config/rootfiles/core/171/filelists/armv6l/glibc rename to config/rootfiles/oldcore/171/filelists/armv6l/glibc diff --git a/config/rootfiles/core/171/filelists/armv6l/linux b/config/rootfiles/oldcore/171/filelists/armv6l/linux similarity index 100% rename from config/rootfiles/core/171/filelists/armv6l/linux rename to config/rootfiles/oldcore/171/filelists/armv6l/linux diff --git a/config/rootfiles/core/171/filelists/armv6l/u-boot b/config/rootfiles/oldcore/171/filelists/armv6l/u-boot similarity index 100% rename from config/rootfiles/core/171/filelists/armv6l/u-boot rename to config/rootfiles/oldcore/171/filelists/armv6l/u-boot diff --git a/config/rootfiles/core/171/filelists/armv6l/util-linux b/config/rootfiles/oldcore/171/filelists/armv6l/util-linux similarity index 100% rename from config/rootfiles/core/171/filelists/armv6l/util-linux rename to config/rootfiles/oldcore/171/filelists/armv6l/util-linux diff --git a/config/rootfiles/core/171/filelists/bind b/config/rootfiles/oldcore/171/filelists/bind similarity index 100% rename from config/rootfiles/core/171/filelists/bind rename to config/rootfiles/oldcore/171/filelists/bind diff --git a/config/rootfiles/core/171/filelists/ca-certificates b/config/rootfiles/oldcore/171/filelists/ca-certificates similarity index 100% rename from config/rootfiles/core/171/filelists/ca-certificates rename to config/rootfiles/oldcore/171/filelists/ca-certificates diff --git a/config/rootfiles/core/171/filelists/collectd b/config/rootfiles/oldcore/171/filelists/collectd similarity index 100% rename from config/rootfiles/core/171/filelists/collectd rename to config/rootfiles/oldcore/171/filelists/collectd diff --git a/config/rootfiles/oldcore/171/filelists/core-files b/config/rootfiles/oldcore/171/filelists/core-files new file mode 120000 index 000000000..709d6c14c --- /dev/null +++ b/config/rootfiles/oldcore/171/filelists/core-files @@ -0,0 +1 @@ +../core-files \ No newline at end of file diff --git a/config/rootfiles/core/171/filelists/curl b/config/rootfiles/oldcore/171/filelists/curl similarity index 100% rename from config/rootfiles/core/171/filelists/curl rename to config/rootfiles/oldcore/171/filelists/curl diff --git a/config/rootfiles/core/171/filelists/dhcp b/config/rootfiles/oldcore/171/filelists/dhcp similarity index 100% rename from config/rootfiles/core/171/filelists/dhcp rename to config/rootfiles/oldcore/171/filelists/dhcp diff --git a/config/rootfiles/core/171/filelists/expat b/config/rootfiles/oldcore/171/filelists/expat similarity index 100% rename from config/rootfiles/core/171/filelists/expat rename to config/rootfiles/oldcore/171/filelists/expat diff --git a/config/rootfiles/core/171/filelists/files b/config/rootfiles/oldcore/171/filelists/files similarity index 100% rename from config/rootfiles/core/171/filelists/files rename to config/rootfiles/oldcore/171/filelists/files diff --git a/config/rootfiles/core/171/filelists/hdparm b/config/rootfiles/oldcore/171/filelists/hdparm similarity index 100% rename from config/rootfiles/core/171/filelists/hdparm rename to config/rootfiles/oldcore/171/filelists/hdparm diff --git a/config/rootfiles/core/171/filelists/iproute2 b/config/rootfiles/oldcore/171/filelists/iproute2 similarity index 100% rename from config/rootfiles/core/171/filelists/iproute2 rename to config/rootfiles/oldcore/171/filelists/iproute2 diff --git a/config/rootfiles/core/171/filelists/kbd b/config/rootfiles/oldcore/171/filelists/kbd similarity index 100% rename from config/rootfiles/core/171/filelists/kbd rename to config/rootfiles/oldcore/171/filelists/kbd diff --git a/config/rootfiles/core/171/filelists/libarchive b/config/rootfiles/oldcore/171/filelists/libarchive similarity index 100% rename from config/rootfiles/core/171/filelists/libarchive rename to config/rootfiles/oldcore/171/filelists/libarchive diff --git a/config/rootfiles/core/171/filelists/libhtp b/config/rootfiles/oldcore/171/filelists/libhtp similarity index 100% rename from config/rootfiles/core/171/filelists/libhtp rename to config/rootfiles/oldcore/171/filelists/libhtp diff --git a/config/rootfiles/oldcore/171/filelists/libloc b/config/rootfiles/oldcore/171/filelists/libloc new file mode 120000 index 000000000..ff4a92429 --- /dev/null +++ b/config/rootfiles/oldcore/171/filelists/libloc @@ -0,0 +1 @@ +../../../common/libloc \ No newline at end of file diff --git a/config/rootfiles/core/171/filelists/liboping b/config/rootfiles/oldcore/171/filelists/liboping similarity index 100% rename from config/rootfiles/core/171/filelists/liboping rename to config/rootfiles/oldcore/171/filelists/liboping diff --git a/config/rootfiles/core/171/filelists/libsodium b/config/rootfiles/oldcore/171/filelists/libsodium similarity index 100% rename from config/rootfiles/core/171/filelists/libsodium rename to config/rootfiles/oldcore/171/filelists/libsodium diff --git a/config/rootfiles/core/171/filelists/nettle b/config/rootfiles/oldcore/171/filelists/nettle similarity index 100% rename from config/rootfiles/core/171/filelists/nettle rename to config/rootfiles/oldcore/171/filelists/nettle diff --git a/config/rootfiles/core/171/filelists/openvpn b/config/rootfiles/oldcore/171/filelists/openvpn similarity index 100% rename from config/rootfiles/core/171/filelists/openvpn rename to config/rootfiles/oldcore/171/filelists/openvpn diff --git a/config/rootfiles/core/171/filelists/perl b/config/rootfiles/oldcore/171/filelists/perl similarity index 100% rename from config/rootfiles/core/171/filelists/perl rename to config/rootfiles/oldcore/171/filelists/perl diff --git a/config/rootfiles/core/171/filelists/perl-Apache-Htpasswd b/config/rootfiles/oldcore/171/filelists/perl-Apache-Htpasswd similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Apache-Htpasswd rename to config/rootfiles/oldcore/171/filelists/perl-Apache-Htpasswd diff --git a/config/rootfiles/core/171/filelists/perl-Archive-Tar b/config/rootfiles/oldcore/171/filelists/perl-Archive-Tar similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Archive-Tar rename to config/rootfiles/oldcore/171/filelists/perl-Archive-Tar diff --git a/config/rootfiles/core/171/filelists/perl-Archive-Zip b/config/rootfiles/oldcore/171/filelists/perl-Archive-Zip similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Archive-Zip rename to config/rootfiles/oldcore/171/filelists/perl-Archive-Zip diff --git a/config/rootfiles/core/171/filelists/perl-BerkeleyDB b/config/rootfiles/oldcore/171/filelists/perl-BerkeleyDB similarity index 100% rename from config/rootfiles/core/171/filelists/perl-BerkeleyDB rename to config/rootfiles/oldcore/171/filelists/perl-BerkeleyDB diff --git a/config/rootfiles/core/171/filelists/perl-CGI b/config/rootfiles/oldcore/171/filelists/perl-CGI similarity index 100% rename from config/rootfiles/core/171/filelists/perl-CGI rename to config/rootfiles/oldcore/171/filelists/perl-CGI diff --git a/config/rootfiles/core/171/filelists/perl-Canary-Stability b/config/rootfiles/oldcore/171/filelists/perl-Canary-Stability similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Canary-Stability rename to config/rootfiles/oldcore/171/filelists/perl-Canary-Stability diff --git a/config/rootfiles/core/171/filelists/perl-Compress-Zlib b/config/rootfiles/oldcore/171/filelists/perl-Compress-Zlib similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Compress-Zlib rename to config/rootfiles/oldcore/171/filelists/perl-Compress-Zlib diff --git a/config/rootfiles/core/171/filelists/perl-Convert-TNEF b/config/rootfiles/oldcore/171/filelists/perl-Convert-TNEF similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Convert-TNEF rename to config/rootfiles/oldcore/171/filelists/perl-Convert-TNEF diff --git a/config/rootfiles/core/171/filelists/perl-Convert-UUlib b/config/rootfiles/oldcore/171/filelists/perl-Convert-UUlib similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Convert-UUlib rename to config/rootfiles/oldcore/171/filelists/perl-Convert-UUlib diff --git a/config/rootfiles/core/171/filelists/perl-Crypt-PasswdMD5 b/config/rootfiles/oldcore/171/filelists/perl-Crypt-PasswdMD5 similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Crypt-PasswdMD5 rename to config/rootfiles/oldcore/171/filelists/perl-Crypt-PasswdMD5 diff --git a/config/rootfiles/core/171/filelists/perl-DBD-SQLite b/config/rootfiles/oldcore/171/filelists/perl-DBD-SQLite similarity index 100% rename from config/rootfiles/core/171/filelists/perl-DBD-SQLite rename to config/rootfiles/oldcore/171/filelists/perl-DBD-SQLite diff --git a/config/rootfiles/core/171/filelists/perl-DBI b/config/rootfiles/oldcore/171/filelists/perl-DBI similarity index 100% rename from config/rootfiles/core/171/filelists/perl-DBI rename to config/rootfiles/oldcore/171/filelists/perl-DBI diff --git a/config/rootfiles/core/171/filelists/perl-Data-UUID b/config/rootfiles/oldcore/171/filelists/perl-Data-UUID similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Data-UUID rename to config/rootfiles/oldcore/171/filelists/perl-Data-UUID diff --git a/config/rootfiles/core/171/filelists/perl-Device-Modem b/config/rootfiles/oldcore/171/filelists/perl-Device-Modem similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Device-Modem rename to config/rootfiles/oldcore/171/filelists/perl-Device-Modem diff --git a/config/rootfiles/core/171/filelists/perl-Device-SerialPort b/config/rootfiles/oldcore/171/filelists/perl-Device-SerialPort similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Device-SerialPort rename to config/rootfiles/oldcore/171/filelists/perl-Device-SerialPort diff --git a/config/rootfiles/core/171/filelists/perl-Digest b/config/rootfiles/oldcore/171/filelists/perl-Digest similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Digest rename to config/rootfiles/oldcore/171/filelists/perl-Digest diff --git a/config/rootfiles/core/171/filelists/perl-Digest-HMAC b/config/rootfiles/oldcore/171/filelists/perl-Digest-HMAC similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Digest-HMAC rename to config/rootfiles/oldcore/171/filelists/perl-Digest-HMAC diff --git a/config/rootfiles/core/171/filelists/perl-Digest-SHA1 b/config/rootfiles/oldcore/171/filelists/perl-Digest-SHA1 similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Digest-SHA1 rename to config/rootfiles/oldcore/171/filelists/perl-Digest-SHA1 diff --git a/config/rootfiles/core/171/filelists/perl-Email-Date-Format b/config/rootfiles/oldcore/171/filelists/perl-Email-Date-Format similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Email-Date-Format rename to config/rootfiles/oldcore/171/filelists/perl-Email-Date-Format diff --git a/config/rootfiles/core/171/filelists/perl-File-Remove b/config/rootfiles/oldcore/171/filelists/perl-File-Remove similarity index 100% rename from config/rootfiles/core/171/filelists/perl-File-Remove rename to config/rootfiles/oldcore/171/filelists/perl-File-Remove diff --git a/config/rootfiles/core/171/filelists/perl-Font-TTF b/config/rootfiles/oldcore/171/filelists/perl-Font-TTF similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Font-TTF rename to config/rootfiles/oldcore/171/filelists/perl-Font-TTF diff --git a/config/rootfiles/core/171/filelists/perl-GD b/config/rootfiles/oldcore/171/filelists/perl-GD similarity index 100% rename from config/rootfiles/core/171/filelists/perl-GD rename to config/rootfiles/oldcore/171/filelists/perl-GD diff --git a/config/rootfiles/core/171/filelists/perl-GD-Graph b/config/rootfiles/oldcore/171/filelists/perl-GD-Graph similarity index 100% rename from config/rootfiles/core/171/filelists/perl-GD-Graph rename to config/rootfiles/oldcore/171/filelists/perl-GD-Graph diff --git a/config/rootfiles/core/171/filelists/perl-GD-TextUtil b/config/rootfiles/oldcore/171/filelists/perl-GD-TextUtil similarity index 100% rename from config/rootfiles/core/171/filelists/perl-GD-TextUtil rename to config/rootfiles/oldcore/171/filelists/perl-GD-TextUtil diff --git a/config/rootfiles/core/171/filelists/perl-HTML-Parser b/config/rootfiles/oldcore/171/filelists/perl-HTML-Parser similarity index 100% rename from config/rootfiles/core/171/filelists/perl-HTML-Parser rename to config/rootfiles/oldcore/171/filelists/perl-HTML-Parser diff --git a/config/rootfiles/core/171/filelists/perl-HTML-Tagset b/config/rootfiles/oldcore/171/filelists/perl-HTML-Tagset similarity index 100% rename from config/rootfiles/core/171/filelists/perl-HTML-Tagset rename to config/rootfiles/oldcore/171/filelists/perl-HTML-Tagset diff --git a/config/rootfiles/core/171/filelists/perl-HTML-Template b/config/rootfiles/oldcore/171/filelists/perl-HTML-Template similarity index 100% rename from config/rootfiles/core/171/filelists/perl-HTML-Template rename to config/rootfiles/oldcore/171/filelists/perl-HTML-Template diff --git a/config/rootfiles/core/171/filelists/perl-HTTP-Date b/config/rootfiles/oldcore/171/filelists/perl-HTTP-Date similarity index 100% rename from config/rootfiles/core/171/filelists/perl-HTTP-Date rename to config/rootfiles/oldcore/171/filelists/perl-HTTP-Date diff --git a/config/rootfiles/core/171/filelists/perl-HTTP-Message b/config/rootfiles/oldcore/171/filelists/perl-HTTP-Message similarity index 100% rename from config/rootfiles/core/171/filelists/perl-HTTP-Message rename to config/rootfiles/oldcore/171/filelists/perl-HTTP-Message diff --git a/config/rootfiles/core/171/filelists/perl-IO-Socket-SSL b/config/rootfiles/oldcore/171/filelists/perl-IO-Socket-SSL similarity index 100% rename from config/rootfiles/core/171/filelists/perl-IO-Socket-SSL rename to config/rootfiles/oldcore/171/filelists/perl-IO-Socket-SSL diff --git a/config/rootfiles/core/171/filelists/perl-IO-String b/config/rootfiles/oldcore/171/filelists/perl-IO-String similarity index 100% rename from config/rootfiles/core/171/filelists/perl-IO-String rename to config/rootfiles/oldcore/171/filelists/perl-IO-String diff --git a/config/rootfiles/core/171/filelists/perl-IO-Stringy b/config/rootfiles/oldcore/171/filelists/perl-IO-Stringy similarity index 100% rename from config/rootfiles/core/171/filelists/perl-IO-Stringy rename to config/rootfiles/oldcore/171/filelists/perl-IO-Stringy diff --git a/config/rootfiles/core/171/filelists/perl-Imager b/config/rootfiles/oldcore/171/filelists/perl-Imager similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Imager rename to config/rootfiles/oldcore/171/filelists/perl-Imager diff --git a/config/rootfiles/core/171/filelists/perl-Imager-QRCode b/config/rootfiles/oldcore/171/filelists/perl-Imager-QRCode similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Imager-QRCode rename to config/rootfiles/oldcore/171/filelists/perl-Imager-QRCode diff --git a/config/rootfiles/core/171/filelists/perl-LWP-Protocol-https b/config/rootfiles/oldcore/171/filelists/perl-LWP-Protocol-https similarity index 100% rename from config/rootfiles/core/171/filelists/perl-LWP-Protocol-https rename to config/rootfiles/oldcore/171/filelists/perl-LWP-Protocol-https diff --git a/config/rootfiles/core/171/filelists/perl-MIME-Base32 b/config/rootfiles/oldcore/171/filelists/perl-MIME-Base32 similarity index 100% rename from config/rootfiles/core/171/filelists/perl-MIME-Base32 rename to config/rootfiles/oldcore/171/filelists/perl-MIME-Base32 diff --git a/config/rootfiles/core/171/filelists/perl-MIME-Lite b/config/rootfiles/oldcore/171/filelists/perl-MIME-Lite similarity index 100% rename from config/rootfiles/core/171/filelists/perl-MIME-Lite rename to config/rootfiles/oldcore/171/filelists/perl-MIME-Lite diff --git a/config/rootfiles/core/171/filelists/perl-MIME-Tools b/config/rootfiles/oldcore/171/filelists/perl-MIME-Tools similarity index 100% rename from config/rootfiles/core/171/filelists/perl-MIME-Tools rename to config/rootfiles/oldcore/171/filelists/perl-MIME-Tools diff --git a/config/rootfiles/core/171/filelists/perl-Mail-Tools b/config/rootfiles/oldcore/171/filelists/perl-Mail-Tools similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Mail-Tools rename to config/rootfiles/oldcore/171/filelists/perl-Mail-Tools diff --git a/config/rootfiles/core/171/filelists/perl-Net-CIDR-Lite b/config/rootfiles/oldcore/171/filelists/perl-Net-CIDR-Lite similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Net-CIDR-Lite rename to config/rootfiles/oldcore/171/filelists/perl-Net-CIDR-Lite diff --git a/config/rootfiles/core/171/filelists/perl-Net-DNS b/config/rootfiles/oldcore/171/filelists/perl-Net-DNS similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Net-DNS rename to config/rootfiles/oldcore/171/filelists/perl-Net-DNS diff --git a/config/rootfiles/core/171/filelists/perl-Net-HTTP b/config/rootfiles/oldcore/171/filelists/perl-Net-HTTP similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Net-HTTP rename to config/rootfiles/oldcore/171/filelists/perl-Net-HTTP diff --git a/config/rootfiles/core/171/filelists/perl-Net-IPv4Addr b/config/rootfiles/oldcore/171/filelists/perl-Net-IPv4Addr similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Net-IPv4Addr rename to config/rootfiles/oldcore/171/filelists/perl-Net-IPv4Addr diff --git a/config/rootfiles/core/171/filelists/perl-Net-Server b/config/rootfiles/oldcore/171/filelists/perl-Net-Server similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Net-Server rename to config/rootfiles/oldcore/171/filelists/perl-Net-Server diff --git a/config/rootfiles/core/171/filelists/perl-Net-Telnet b/config/rootfiles/oldcore/171/filelists/perl-Net-Telnet similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Net-Telnet rename to config/rootfiles/oldcore/171/filelists/perl-Net-Telnet diff --git a/config/rootfiles/core/171/filelists/perl-NetAddr-IP b/config/rootfiles/oldcore/171/filelists/perl-NetAddr-IP similarity index 100% rename from config/rootfiles/core/171/filelists/perl-NetAddr-IP rename to config/rootfiles/oldcore/171/filelists/perl-NetAddr-IP diff --git a/config/rootfiles/core/171/filelists/perl-Net_SSLeay b/config/rootfiles/oldcore/171/filelists/perl-Net_SSLeay similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Net_SSLeay rename to config/rootfiles/oldcore/171/filelists/perl-Net_SSLeay diff --git a/config/rootfiles/core/171/filelists/perl-PDF-API2 b/config/rootfiles/oldcore/171/filelists/perl-PDF-API2 similarity index 100% rename from config/rootfiles/core/171/filelists/perl-PDF-API2 rename to config/rootfiles/oldcore/171/filelists/perl-PDF-API2 diff --git a/config/rootfiles/core/171/filelists/perl-Sort-Naturally b/config/rootfiles/oldcore/171/filelists/perl-Sort-Naturally similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Sort-Naturally rename to config/rootfiles/oldcore/171/filelists/perl-Sort-Naturally diff --git a/config/rootfiles/core/171/filelists/perl-Switch b/config/rootfiles/oldcore/171/filelists/perl-Switch similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Switch rename to config/rootfiles/oldcore/171/filelists/perl-Switch diff --git a/config/rootfiles/core/171/filelists/perl-Text-CSV_XS b/config/rootfiles/oldcore/171/filelists/perl-Text-CSV_XS similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Text-CSV_XS rename to config/rootfiles/oldcore/171/filelists/perl-Text-CSV_XS diff --git a/config/rootfiles/core/171/filelists/perl-Try-Tiny b/config/rootfiles/oldcore/171/filelists/perl-Try-Tiny similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Try-Tiny rename to config/rootfiles/oldcore/171/filelists/perl-Try-Tiny diff --git a/config/rootfiles/core/171/filelists/perl-URI b/config/rootfiles/oldcore/171/filelists/perl-URI similarity index 100% rename from config/rootfiles/core/171/filelists/perl-URI rename to config/rootfiles/oldcore/171/filelists/perl-URI diff --git a/config/rootfiles/core/171/filelists/perl-URI-Encode b/config/rootfiles/oldcore/171/filelists/perl-URI-Encode similarity index 100% rename from config/rootfiles/core/171/filelists/perl-URI-Encode rename to config/rootfiles/oldcore/171/filelists/perl-URI-Encode diff --git a/config/rootfiles/core/171/filelists/perl-Unix-Syslog b/config/rootfiles/oldcore/171/filelists/perl-Unix-Syslog similarity index 100% rename from config/rootfiles/core/171/filelists/perl-Unix-Syslog rename to config/rootfiles/oldcore/171/filelists/perl-Unix-Syslog diff --git a/config/rootfiles/core/171/filelists/perl-XML-Parser b/config/rootfiles/oldcore/171/filelists/perl-XML-Parser similarity index 100% rename from config/rootfiles/core/171/filelists/perl-XML-Parser rename to config/rootfiles/oldcore/171/filelists/perl-XML-Parser diff --git a/config/rootfiles/core/171/filelists/perl-YAML-Tiny b/config/rootfiles/oldcore/171/filelists/perl-YAML-Tiny similarity index 100% rename from config/rootfiles/core/171/filelists/perl-YAML-Tiny rename to config/rootfiles/oldcore/171/filelists/perl-YAML-Tiny diff --git a/config/rootfiles/core/171/filelists/perl-libwww b/config/rootfiles/oldcore/171/filelists/perl-libwww similarity index 100% rename from config/rootfiles/core/171/filelists/perl-libwww rename to config/rootfiles/oldcore/171/filelists/perl-libwww diff --git a/config/rootfiles/core/171/filelists/rrdtool b/config/rootfiles/oldcore/171/filelists/rrdtool similarity index 100% rename from config/rootfiles/core/171/filelists/rrdtool rename to config/rootfiles/oldcore/171/filelists/rrdtool diff --git a/config/rootfiles/core/171/filelists/sqlite b/config/rootfiles/oldcore/171/filelists/sqlite similarity index 100% rename from config/rootfiles/core/171/filelists/sqlite rename to config/rootfiles/oldcore/171/filelists/sqlite diff --git a/config/rootfiles/core/171/filelists/squid b/config/rootfiles/oldcore/171/filelists/squid similarity index 100% rename from config/rootfiles/core/171/filelists/squid rename to config/rootfiles/oldcore/171/filelists/squid diff --git a/config/rootfiles/oldcore/171/filelists/strongswan b/config/rootfiles/oldcore/171/filelists/strongswan new file mode 120000 index 000000000..90c727e26 --- /dev/null +++ b/config/rootfiles/oldcore/171/filelists/strongswan @@ -0,0 +1 @@ +../../../common/strongswan \ No newline at end of file diff --git a/config/rootfiles/core/171/filelists/suricata b/config/rootfiles/oldcore/171/filelists/suricata similarity index 100% rename from config/rootfiles/core/171/filelists/suricata rename to config/rootfiles/oldcore/171/filelists/suricata diff --git a/config/rootfiles/core/171/filelists/sysvinit b/config/rootfiles/oldcore/171/filelists/sysvinit similarity index 100% rename from config/rootfiles/core/171/filelists/sysvinit rename to config/rootfiles/oldcore/171/filelists/sysvinit diff --git a/config/rootfiles/core/171/filelists/udev b/config/rootfiles/oldcore/171/filelists/udev similarity index 100% rename from config/rootfiles/core/171/filelists/udev rename to config/rootfiles/oldcore/171/filelists/udev diff --git a/config/rootfiles/oldcore/171/filelists/unbound b/config/rootfiles/oldcore/171/filelists/unbound new file mode 120000 index 000000000..66adf0924 --- /dev/null +++ b/config/rootfiles/oldcore/171/filelists/unbound @@ -0,0 +1 @@ +../../../common/unbound \ No newline at end of file diff --git a/config/rootfiles/core/171/filelists/wireless-regdb b/config/rootfiles/oldcore/171/filelists/wireless-regdb similarity index 100% rename from config/rootfiles/core/171/filelists/wireless-regdb rename to config/rootfiles/oldcore/171/filelists/wireless-regdb diff --git a/config/rootfiles/core/171/filelists/x86_64/binutils b/config/rootfiles/oldcore/171/filelists/x86_64/binutils similarity index 100% rename from config/rootfiles/core/171/filelists/x86_64/binutils rename to config/rootfiles/oldcore/171/filelists/x86_64/binutils diff --git a/config/rootfiles/core/171/filelists/x86_64/efivar b/config/rootfiles/oldcore/171/filelists/x86_64/efivar similarity index 100% rename from config/rootfiles/core/171/filelists/x86_64/efivar rename to config/rootfiles/oldcore/171/filelists/x86_64/efivar diff --git a/config/rootfiles/core/171/filelists/x86_64/gcc b/config/rootfiles/oldcore/171/filelists/x86_64/gcc similarity index 100% rename from config/rootfiles/core/171/filelists/x86_64/gcc rename to config/rootfiles/oldcore/171/filelists/x86_64/gcc diff --git a/config/rootfiles/core/171/filelists/x86_64/glibc b/config/rootfiles/oldcore/171/filelists/x86_64/glibc similarity index 100% rename from config/rootfiles/core/171/filelists/x86_64/glibc rename to config/rootfiles/oldcore/171/filelists/x86_64/glibc diff --git a/config/rootfiles/core/171/filelists/x86_64/linux b/config/rootfiles/oldcore/171/filelists/x86_64/linux similarity index 100% rename from config/rootfiles/core/171/filelists/x86_64/linux rename to config/rootfiles/oldcore/171/filelists/x86_64/linux diff --git a/config/rootfiles/core/171/filelists/x86_64/syslinux b/config/rootfiles/oldcore/171/filelists/x86_64/syslinux similarity index 100% rename from config/rootfiles/core/171/filelists/x86_64/syslinux rename to config/rootfiles/oldcore/171/filelists/x86_64/syslinux diff --git a/config/rootfiles/core/171/filelists/x86_64/util-linux b/config/rootfiles/oldcore/171/filelists/x86_64/util-linux similarity index 100% rename from config/rootfiles/core/171/filelists/x86_64/util-linux rename to config/rootfiles/oldcore/171/filelists/x86_64/util-linux diff --git a/config/rootfiles/core/171/update.sh b/config/rootfiles/oldcore/171/update.sh similarity index 100% rename from config/rootfiles/core/171/update.sh rename to config/rootfiles/oldcore/171/update.sh diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index 66b210a08..2d8f0ae0d 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -154,8 +154,8 @@ usr/lib/libndr-standard.so usr/lib/libndr-standard.so.0 usr/lib/libndr-standard.so.0.0.1 usr/lib/libndr.so -usr/lib/libndr.so.2 -usr/lib/libndr.so.2.0.0 +usr/lib/libndr.so.3 +usr/lib/libndr.so.3.0.0 usr/lib/libnetapi.so usr/lib/libnetapi.so.1 usr/lib/libnetapi.so.1.0.0 @@ -166,6 +166,7 @@ usr/lib/libsamba-credentials.so.1 usr/lib/libsamba-credentials.so.1.0.0 usr/lib/libsamba-errors.so usr/lib/libsamba-errors.so.1 +usr/lib/libsamba-errors.so.1.0.0 usr/lib/libsamba-hostconfig.so usr/lib/libsamba-hostconfig.so.0 usr/lib/libsamba-hostconfig.so.0.0.1 @@ -282,13 +283,31 @@ usr/lib/python3.10/site-packages/samba/emulate/traffic_packets.py usr/lib/python3.10/site-packages/samba/forest_update.py usr/lib/python3.10/site-packages/samba/gensec.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/getopt.py -usr/lib/python3.10/site-packages/samba/gp_cert_auto_enroll_ext.py -usr/lib/python3.10/site-packages/samba/gp_chromium_ext.py -usr/lib/python3.10/site-packages/samba/gp_ext_loader.py -usr/lib/python3.10/site-packages/samba/gp_firefox_ext.py -usr/lib/python3.10/site-packages/samba/gp_firewalld_ext.py -usr/lib/python3.10/site-packages/samba/gp_gnome_settings_ext.py -usr/lib/python3.10/site-packages/samba/gp_msgs_ext.py +usr/lib/python3.10/site-packages/samba/gp +usr/lib/python3.10/site-packages/samba/gp/gp_centrify_crontab_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_centrify_sudoers_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_cert_auto_enroll_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_chromium_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_ext_loader.py +usr/lib/python3.10/site-packages/samba/gp/gp_firefox_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_firewalld_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_gnome_settings_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_msgs_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_scripts_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_sec_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_smb_conf_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_sudoers_ext.py +usr/lib/python3.10/site-packages/samba/gp/gpclass.py +usr/lib/python3.10/site-packages/samba/gp/util +usr/lib/python3.10/site-packages/samba/gp/util/logging.py +usr/lib/python3.10/site-packages/samba/gp/vgp_access_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_files_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_issue_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_motd_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_openssh_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_startup_scripts_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_sudoers_ext.py +usr/lib/python3.10/site-packages/samba/gp/vgp_symlink_ext.py #usr/lib/python3.10/site-packages/samba/gp_parse usr/lib/python3.10/site-packages/samba/gp_parse/__init__.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_aas.py @@ -296,11 +315,6 @@ usr/lib/python3.10/site-packages/samba/gp_parse/gp_csv.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_inf.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_ini.py usr/lib/python3.10/site-packages/samba/gp_parse/gp_pol.py -usr/lib/python3.10/site-packages/samba/gp_scripts_ext.py -usr/lib/python3.10/site-packages/samba/gp_sec_ext.py -usr/lib/python3.10/site-packages/samba/gp_smb_conf_ext.py -usr/lib/python3.10/site-packages/samba/gp_sudoers_ext.py -usr/lib/python3.10/site-packages/samba/gpclass.py usr/lib/python3.10/site-packages/samba/gpo.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/graph.py usr/lib/python3.10/site-packages/samba/hostconfig.py @@ -375,12 +389,14 @@ usr/lib/python3.10/site-packages/samba/samba3/libsmb_samba_internal.py usr/lib/python3.10/site-packages/samba/samba3/mdscli.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/samba3/param.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/samba3/passdb.cpython-310-x86_64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/samba3/smbconf.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/samba3/smbd.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/samdb.py usr/lib/python3.10/site-packages/samba/schema.py usr/lib/python3.10/site-packages/samba/sd_utils.py usr/lib/python3.10/site-packages/samba/security.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/sites.py +usr/lib/python3.10/site-packages/samba/smbconf.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/subnets.py #usr/lib/python3.10/site-packages/samba/subunit usr/lib/python3.10/site-packages/samba/subunit/__init__.py @@ -407,6 +423,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/downgradedatabase.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/mdsearch.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/ndrdump.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_dns.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_json.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/samba_dnsupdate.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls.py @@ -498,7 +515,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgs_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kpasswd_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/ms_kile_client_principal_lookup_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/nt_hash_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/pac_align_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/protected_users_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/raw_testcase.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_constants.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1.py @@ -521,6 +540,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/ldap_upn_sam_account.py #usr/lib/python3.10/site-packages/samba/tests/libsmb.py #usr/lib/python3.10/site-packages/samba/tests/loadparm.py +#usr/lib/python3.10/site-packages/samba/tests/logfiles.py #usr/lib/python3.10/site-packages/samba/tests/lsa_string.py #usr/lib/python3.10/site-packages/samba/tests/messaging.py #usr/lib/python3.10/site-packages/samba/tests/ndr.py @@ -537,6 +557,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/ntlmdisabled.py #usr/lib/python3.10/site-packages/samba/tests/pam_winbind.py #usr/lib/python3.10/site-packages/samba/tests/pam_winbind_chauthtok.py +#usr/lib/python3.10/site-packages/samba/tests/pam_winbind_setcred.py #usr/lib/python3.10/site-packages/samba/tests/pam_winbind_warn_pwd_expire.py #usr/lib/python3.10/site-packages/samba/tests/param.py #usr/lib/python3.10/site-packages/samba/tests/password_hash.py @@ -606,8 +627,10 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/sddl.py #usr/lib/python3.10/site-packages/samba/tests/security.py #usr/lib/python3.10/site-packages/samba/tests/segfault.py +#usr/lib/python3.10/site-packages/samba/tests/sid_strings.py #usr/lib/python3.10/site-packages/samba/tests/smb-notify.py #usr/lib/python3.10/site-packages/samba/tests/smb.py +#usr/lib/python3.10/site-packages/samba/tests/smbconf.py #usr/lib/python3.10/site-packages/samba/tests/smbd_base.py #usr/lib/python3.10/site-packages/samba/tests/smbd_fuzztest.py #usr/lib/python3.10/site-packages/samba/tests/source.py @@ -624,14 +647,6 @@ usr/lib/python3.10/site-packages/samba/trust_utils.py usr/lib/python3.10/site-packages/samba/upgrade.py usr/lib/python3.10/site-packages/samba/upgradehelpers.py usr/lib/python3.10/site-packages/samba/uptodateness.py -usr/lib/python3.10/site-packages/samba/vgp_access_ext.py -usr/lib/python3.10/site-packages/samba/vgp_files_ext.py -usr/lib/python3.10/site-packages/samba/vgp_issue_ext.py -usr/lib/python3.10/site-packages/samba/vgp_motd_ext.py -usr/lib/python3.10/site-packages/samba/vgp_openssh_ext.py -usr/lib/python3.10/site-packages/samba/vgp_startup_scripts_ext.py -usr/lib/python3.10/site-packages/samba/vgp_sudoers_ext.py -usr/lib/python3.10/site-packages/samba/vgp_symlink_ext.py usr/lib/python3.10/site-packages/samba/werror.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/xattr.py usr/lib/python3.10/site-packages/samba/xattr_native.cpython-310-x86_64-linux-gnu.so diff --git a/lfs/libloc b/lfs/libloc index 8fea42315..579982f11 100644 --- a/lfs/libloc +++ b/lfs/libloc @@ -24,8 +24,8 @@ include Config -VER = 0.9.13 -DB_DATE = 2022-08-04 +VER = 0.9.15 +DB_DATE = 2022-10-15 THISAPP = libloc-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -43,8 +43,8 @@ objects = $(DL_FILE) \ $(DL_FILE) = https://source.ipfire.org/releases/libloc/$(DL_FILE) location-$(DB_DATE).db.xz = https://location.ipfire.org/databases/1/archive/location-$(DB_DATE).db.xz -$(DL_FILE)_BLAKE2 = 5fccd6f0564899499939c63af8975f20b1f7d5267a8cf6c15e14ab377b9d5c008ae5e154c804ac6a1106471aaeebac97dc4ebe6b70fc1e59f416fe2cc02c52a7 -location-$(DB_DATE).db.xz_BLAKE2 = 11b6e9735c911f3dd548fc1759f72ae983eacbe6262f211a4a0080b5b13e3d9704d5080dc9ed0cee289b9ca2643d2adbf266d8a8a25f39129318c3e370a7c9a9 +$(DL_FILE)_BLAKE2 = f3db0fc75ac930805f0df2892b00ffb8f31123a5f28a8cade78f8f1614c0cd806ea365810c5192720d067531b199c342a2c6039f3cd5370c4c9efeded4e31857 +location-$(DB_DATE).db.xz_BLAKE2 = b34b554923a8291ea60ec34c98609da1d71aab66bc1aa2f973ea2e6fd14b6f750559d1e9365df4dd3f707a8dce373aba5f79381c61a4953f272b3557be88af2c install : $(TARGET) @@ -77,12 +77,20 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar xvf $(DIR_DL)/$(DL_FILE) + + # https://lists.ipfire.org/pipermail/location/2022-October/000596.html + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/libloc-0.9.15-Makefile-reset-Python-path.patch + + # https://bugzilla.ipfire.org/show_bug.cgi?id=12944 + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/libloc-0.9.15-export-Fix-generating-file-names-for-ipset-output.patch + cd $(DIR_APP) && ./autogen.sh cd $(DIR_APP) && ./configure \ --prefix=/usr \ --sysconfdir=/etc \ --localstatedir=/var \ - --disable-man-pages + --disable-man-pages \ + --with-database-path=/var/lib/location/database.db cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install diff --git a/lfs/openssh b/lfs/openssh index 302ae6041..452676b70 100644 --- a/lfs/openssh +++ b/lfs/openssh @@ -24,7 +24,7 @@ include Config -VER = 9.0p1 +VER = 9.1p1 THISAPP = openssh-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 49724a400951964d659d136908657940f79e150056728cc4dadf8ff8652a832f7fd46eebb47b15085e57fca4b00c77d1ec4dd1b056ea2bbcee89f54a121ed5e2 +$(DL_FILE)_BLAKE2 = 287b6b1cc4858b27af88f4a4674670afff1fb5b99461892083393c53ef3747c5a0fcd90cba95d2c27465a919e00f7f42732c93af4f306665ba0393bbb7a534f5 install : $(TARGET) diff --git a/lfs/samba b/lfs/samba index 67ebebc2f..f743bfa30 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.16.4 +VER = 4.17.0 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 87 +PAK_VER = 88 DEPS = avahi cups libtirpc perl-Parse-Yapp perl-JSON @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = e685511a76770272cabd1292f36d2b005e2d21212e4782cdf4fd05039f7667b35501873cffa9a53547d523805b2a91ffeba0881aaee905304968c42efef22dfa +$(DL_FILE)_BLAKE2 = d05b17748092bc151b0b627156b1da4a8b30b603569adcef376640745425321617a755add41315af0b38876344323a20185063e131c342c9b6fdcb9542be73f1 install : $(TARGET) @@ -80,7 +80,6 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/samba-4.16.4-glibc-headers.patch cd $(DIR_APP) && ./configure \ --prefix=/usr \ --libdir=/usr/lib/ \ diff --git a/lfs/tzdata b/lfs/tzdata index 34e7b9fd1..26500bba2 100644 --- a/lfs/tzdata +++ b/lfs/tzdata @@ -24,7 +24,7 @@ include Config -VER = 2022a +VER = 2022e TZDATA_VER = $(VER) TZCODE_VER = $(VER) @@ -45,8 +45,8 @@ objects = tzdata$(TZDATA_VER).tar.gz tzcode$(TZCODE_VER).tar.gz tzdata$(TZDATA_VER).tar.gz = $(DL_FROM)/tzdata$(TZDATA_VER).tar.gz tzcode$(TZCODE_VER).tar.gz = $(DL_FROM)/tzcode$(TZCODE_VER).tar.gz -tzdata$(TZDATA_VER).tar.gz_BLAKE2 = 0af5b785a6f5d871b017237ad58d3d9bedd0de38cf18ac51b32cd8df9811215af7af913d8cd3966de695ce65df3f49f52e239196e93b953094763814cc56ecd0 -tzcode$(TZCODE_VER).tar.gz_BLAKE2 = f9b3bb5eedc51896c2a1dd77fe8118518c8a1f35152325fa6c4163e11dd34aeb0c88b16b17a27ad022feb2f6818996ec0e40e06a7e1edd454187f586c3739070 +tzdata$(TZDATA_VER).tar.gz_BLAKE2 = 0c1aa99ac8c8f1a7a10602132da1e61921053ff7ed87449be73c45d23440457f28a2abe4dffd9775c4764e294dd9f92d15d3d401caf07a9d6d046fa27c4148f2 +tzcode$(TZCODE_VER).tar.gz_BLAKE2 = 874dca6d7f347276a87a055853617c8943b3b297fd89c80a3e8d6318c81df15af88f8c58bc05d5088359c30aba0d496089df4835f888c3f76cb0ecf6cd231d3a install : $(TARGET) diff --git a/lfs/unbound b/lfs/unbound index 636fe8bf9..3852c2e6a 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.16.3 +VER = 1.17.0 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b97deade78ab903363e06ff9d71b9895c754378ec276bb17556de62c48a88af5fbabd26f97fb47313d1e631fe75dee245aa38fbf42a865ac3e764882a1124a51 +$(DL_FILE)_BLAKE2 = 611c1b96ff84e6dd8f7a592135cc17f416cd810d0f35d27c8cedd56af069badd8dca112cc5927a1fe50ec3335c377b6bd6fc4e1a6d63a332a90d676e3c23dcef install : $(TARGET) diff --git a/make.sh b/make.sh index e25eeef17..58220d046 100755 --- a/make.sh +++ b/make.sh @@ -23,7 +23,7 @@ NAME="IPFire" # Software name SNAME="ipfire" # Short name # If you update the version don't forget to update backupiso and add it to core update VERSION="2.27" # Version number -CORE="171" # Core Level (Filename) +CORE="172" # Core Level (Filename) SLOGAN="www.ipfire.org" # Software slogan CONFIG_ROOT=/var/ipfire # Configuration rootdir MAX_RETRIES=1 # prefetch/check loop diff --git a/src/misc-progs/openvpnctrl.c b/src/misc-progs/openvpnctrl.c index b9e4fd2a6..92b5989e9 100644 --- a/src/misc-progs/openvpnctrl.c +++ b/src/misc-progs/openvpnctrl.c @@ -497,6 +497,8 @@ void startDaemon(void) { fprintf(stderr, "OpenVPN is not enabled on any interface\n"); exit(1); } else { + snprintf(command, STRING_SIZE-1, "/etc/fcron.daily/openvpn-crl-updater"); + executeCommand(command); snprintf(command, STRING_SIZE-1, "/sbin/modprobe tun"); executeCommand(command); snprintf(command, STRING_SIZE-1, "/usr/sbin/openvpn --config /var/ipfire/ovpn/server.conf"); diff --git a/src/patches/libloc-0.9.15-Makefile-reset-Python-path.patch b/src/patches/libloc-0.9.15-Makefile-reset-Python-path.patch new file mode 100644 index 000000000..2d2a99887 --- /dev/null +++ b/src/patches/libloc-0.9.15-Makefile-reset-Python-path.patch @@ -0,0 +1,22 @@ +commit bed4777fc99494854335a90c5a6e7fc2e30edf4d +Author: Michael Tremer <michael.tremer(a)ipfire.org> +Date: Sat Oct 1 11:56:31 2022 +0000 + + Makefile: Reset Python path + + Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> + +diff --git a/Makefile.am b/Makefile.am +index 81bd992..ec737d0 100644 +--- a/Makefile.am ++++ b/Makefile.am +@@ -56,8 +56,7 @@ databasedir = $(localstatedir)/lib/location + pkgconfigdir = $(libdir)/pkgconfig + + # Overwrite Python path +-#pkgpythondir = $(pythondir)/location +-pkgpythondir = /usr/lib/python3/dist-packages/location ++pkgpythondir = $(pythondir)/location + + %: %.in Makefile + $(SED_PROCESS) diff --git a/src/patches/libloc-0.9.15-export-Fix-generating-file-names-for-ipset-output.patch b/src/patches/libloc-0.9.15-export-Fix-generating-file-names-for-ipset-output.patch new file mode 100644 index 000000000..19fe42f12 --- /dev/null +++ b/src/patches/libloc-0.9.15-export-Fix-generating-file-names-for-ipset-output.patch @@ -0,0 +1,36 @@ +commit cd214f295797e5cc8dbc296753924863b33ab8bd +Author: Michael Tremer <michael.tremer(a)ipfire.org> +Date: Tue Oct 4 08:47:03 2022 +0000 + + export: Fix generating file names for ipset output + + The tag that is being used in the filename was set after creating the + filename. The order has now been fixed and the export works fine for me. + + Fixes: #12944 + Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> + +diff --git a/src/python/location/export.py b/src/python/location/export.py +index f5ed37f..3f58498 100644 +--- a/src/python/location/export.py ++++ b/src/python/location/export.py +@@ -48,6 +48,9 @@ class OutputWriter(object): + self.family = family + self.directory = directory + ++ # Tag ++ self.tag = self._make_tag() ++ + # Open output file + if f: + self.f = f +@@ -58,9 +61,6 @@ class OutputWriter(object): + else: + self.f = io.StringIO() + +- # Tag +- self.tag = self._make_tag() +- + # Call any custom initialization + self.init() + diff --git a/src/patches/samba-4.16.4-glibc-headers.patch b/src/patches/samba-4.16.4-glibc-headers.patch deleted file mode 100644 index 8c75a4172..000000000 --- a/src/patches/samba-4.16.4-glibc-headers.patch +++ /dev/null @@ -1,62 +0,0 @@ -From 766151bf5b7ef95ae4c8c98b8994e5c21c5bbec0 Mon Sep 17 00:00:00 2001 -From: Andreas Schneider <asn(a)samba.org> -Date: Tue, 2 Aug 2022 07:55:46 +0200 -Subject: [PATCH] lib:replace: Only include <sys/mount.h> on non-Linux systems -MIME-Version: 1.0 -Content-Type: text/plain; charset=utf8 -Content-Transfer-Encoding: 8bit - -Details at: -https://sourceware.org/glibc/wiki/Release/2.36#Usage_of_.3Clinux.2Fmount.h.3E_and_.3Csys.2Fmount.h.3E - -BUG: https://bugzilla.samba.org/show_bug.cgi?id=15132 - -Signed-off-by: Andreas Schneider <asn(a)samba.org> -Reviewed-by: Ralph Boehme <slow(a)samba.org> - -Autobuild-User(master): Ralph BÃ¶hme <slow(a)samba.org> -Autobuild-Date(master): Tue Aug 2 11:05:14 UTC 2022 on sn-devel-184 ---- - lib/replace/system/filesys.h | 4 +++- - lib/replace/wscript | 3 +++ - 2 files changed, 6 insertions(+), 1 deletion(-) - -diff --git a/lib/replace/system/filesys.h b/lib/replace/system/filesys.h -index 034e5d5886c..bb9482c69af 100644 ---- a/lib/replace/system/filesys.h -+++ b/lib/replace/system/filesys.h -@@ -36,7 +36,8 @@ - #include <sys/param.h> - #endif - --#ifdef HAVE_SYS_MOUNT_H -+/* This include is required on UNIX (*BSD, AIX, ...) for statfs() */ -+#if !defined(LINUX) && defined(HAVE_SYS_MOUNT_H) - #include <sys/mount.h> - #endif - -@@ -44,6 +45,7 @@ - #include <mntent.h> - #endif - -+/* This include is required on Linux for statfs() */ - #ifdef HAVE_SYS_VFS_H - #include <sys/vfs.h> - #endif -diff --git a/lib/replace/wscript b/lib/replace/wscript -index 4c774d9f0c3..dd9b19219a1 100644 ---- a/lib/replace/wscript -+++ b/lib/replace/wscript -@@ -31,6 +31,9 @@ def configure(conf): - - conf.env.standalone_replace = conf.IN_LAUNCH_DIR() - -+ if sys.platform.rfind('linux') > -1: -+ conf.DEFINE('LINUX', '1') -+ - conf.DEFINE('BOOL_DEFINED', 1) - conf.DEFINE('HAVE_LIBREPLACE', 1) - conf.DEFINE('LIBREPLACE_NETWORK_CHECKS', 1) --- -2.30.2 - hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree tag, v2.27-core171, created. ee2e7db90bf12ab1c028f5f3b955afaf9cdf76f5
by Michael Tremer 18 Oct '22

18 Oct '22

1 0

[git.ipfire.org] IPFire 2.x development tree branch, core171, created. ee2e7db90bf12ab1c028f5f3b955afaf9cdf76f5
by Michael Tremer 18 Oct '22

18 Oct '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core171 has been created at ee2e7db90bf12ab1c028f5f3b955afaf9cdf76f5 (commit) - Log ----------------------------------------------------------------- commit ee2e7db90bf12ab1c028f5f3b955afaf9cdf76f5 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 17 16:26:19 2022 +0000 linux: Add upstream patches for CVE-2022-4{1674,2719-2722} https://lists.ipfire.org/pipermail/development/2022-October/014562.html Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit a40977958b051de976b515b30be1fc3f17f19785 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Oct 10 18:41:10 2022 +0000 core171: Ship dhcp Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit cdc5f9705ac252e099f89101dc4179d6e06179c7 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Fri Oct 7 21:59:21 2022 +0200 dhcp: Update to 4.4.3-P1 For details see: https://downloads.isc.org/isc/dhcp/4.4.3-P1/dhcp-4.4.3-P1-RELNOTES Changelog since 4.4.1 is rather long... Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 437fb4d72bd2814946d6bfc0425c36ae98b04284 Author: Jon Murphy <jon.murphy(a)ipfire.org> Date: Fri Oct 7 13:45:17 2022 -0500 manualpages: add and update help links to Wiki - add help links for two new ipblocklist WebGUI pages - update help links to proxy accounting - add links to OpenVPN Net-to-Net Statistics, MD Raid State, Update Accelerator, OpenVPN Roadwarrior Connections Log Signed-off-by: Jon Murphy <jon.murphy(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 692d18285f59f78cfea96b5e2d9f21bed01360ba Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Oct 7 16:24:15 2022 +0000 glibc: Fix added whitespace in syslog messages Fixes: #12949 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit dc84e16d4d058460febe9332435307d93d36d82e Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Oct 7 16:21:16 2022 +0000 firewall: Fix missing whitespace for blocklist messages Fixes: #12934 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit ca4de263184e2d62239cc6d63caf2a0812d492b5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Oct 4 13:32:47 2022 +0000 unbound-dhcp-leases-bridge: Fall back to the default domain When the bridge cannot detect a domain name for any of the leases, it uses localdomain which is not always the best choice. So instead, this patches changes the behaviour that we read the default domain of the firewall. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Reviewed-by: Bernhard Bitsch <bbitsch(a)ipfire.org> commit a308f5bcdefa59a744584a8276b03d80acd97517 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Tue Oct 4 14:48:04 2022 +0000 Core Update 171: Ship setclock initscript Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 9745a212d4aff2b9cd50de34e30c79c624d21b3c Author: Mathew McBride <matt(a)traverse.com.au> Date: Mon Oct 3 06:20:19 2022 +0000 initscripts: load RTC module (RX8025) for Ten64 board For reasons I have not been able to determine, the RTC module for the Ten64 board (rtc-rx8025) is not automatically loaded at startup, despite every other relevant modules being loaded. modprobe it manually if we are on a Ten64 board. Signed-off-by: Mathew McBride <matt(a)traverse.com.au> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 6efb611cbc97908cbd893806ceb82c167cddeb6a Author: Mathew McBride <matt(a)traverse.com.au> Date: Mon Oct 3 06:20:18 2022 +0000 config: u-boot: bypass the u-boot script on Traverse Ten64 The Ten64 board runs a U-Boot which works best directly booting EFI. Attempting to load your own DTB or other steps will cause issues. (see https://ten64doc.traverse.com.au/faq/#common-issues) The current stable Ten64 firmware unfortunately searches for boot.scr before bootaa64.efi. So redirect it back to the EFI path. A future Ten64 firmware package will prefer EFI first before any boot script avoiding this issue. I will provide a patch reversing this when that day comes. Signed-off-by: Mathew McBride <matt(a)traverse.com.au> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit e77ef3639579e88f1fe86ef332d9c831b4e200ca Author: Mathew McBride <matt(a)traverse.com.au> Date: Mon Oct 3 06:20:17 2022 +0000 kernel: add patches for SFP support on NXP Layerscape/DPAA2 (arm64) These two patches are needed to support SFP's on NXP DPAA2 platforms (e.g Traverse Ten64). The deadlock issue patch was submitted upstream a while ago and rejected, however I am not aware of any better solutions at present. The 10G mode additions are part of mainline since 5.16. These two .patches were sourced from our patchset over here: https://gitlab.com/traversetech/traverse-kernel-patches/-/tree/lts-5-15/pat… Signed-off-by: Mathew McBride <matt(a)traverse.com.au> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 8399123461b7b790b43d4a8c6ebf27928a44929d Author: Mathew McBride <matt(a)traverse.com.au> Date: Mon Oct 3 06:20:16 2022 +0000 linux: enable options for NXP Layerscape This change enables support for NXP's QorIQ/Layerscape platforms, specifically the Traverse Technologies Ten64 (LS1088A). Signed-off-by: Mathew McBride <matt(a)traverse.com.au> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit a4e5b6d689a7f3094b916251b52e04ff0825add4 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Oct 4 12:54:42 2022 +0200 rsync: Update to version 3.2.6 and fix Bug#12947 - Update from version 3.2.4 plus CVE-2022-29154 patch to 3.2.6 - Patch for CVE-2022-29154 applied in CU170 turned out to have a bug within it causing rsync to fail with an error. Four additional commits were done to fix this bug and its consequences but these were all applied in the rsync git repo after the patch had been merged into CU170. - Version 3.2.5 onwards contains the CVE-2022-29154 fix and associated commits. - No update of rootfile required. - Changelog NEWS for rsync 3.2.6 (9 Sep 2022) BUG FIXES: More path-cleaning improvements in the file-list validation code to avoid rejecting of valid args. A file-list validation fix for a --files-from file that ends without a line-terminating character. Added a safety check that prevents the sender from removing destination files when a local copy using --remove-source-files has some files that are shared between the sending & receiving hierarchies, including the case where the source dir & destination dir are identical. Fixed a bug in the internal MD4 checksum code that could cause the digest to be sporadically incorrect (the openssl version was/is fine). A minor tweak to rrsync added "copy-devices" to the list of known args, but left it disabled by default. ENHANCEMENTS: Rename --protect-args to --secluded-args to make it clearer how it differs from the default backslash-escaped arg-protecting behavior of rsync. The old option names are still accepted. The environment-variable override did not change its name. PACKAGING RELATED: The configure option --with-protected-args was renamed to --with-secluded-args. This option makes --secluded-args the default rsync behavior instead of using backslash escaping for protecting args. The mkgitver script now makes sure that a .git dir/file is in the top-level source dir before calling git describe. It also runs a basic check on the version value. This should avoid using an unrelated git description for rsync's version. DEVELOPER RELATED: The configure script no longer sets the -⁠pedantic-errors CFLAG (which it used to try to do only for gcc). The name_num_obj struct was modified to allow its dynamic name_num_item list to be initialized in a better way. NEWS for rsync 3.2.5 (14 Aug 2022) SECURITY FIXES: Added some file-list safety checking that helps to ensure that a rogue sending rsync can't add unrequested top-level names and/or include recursive names that should have been excluded by the sender. These extra safety checks only require the receiver rsync to be updated. When dealing with an untrusted sending host, it is safest to copy into a dedicated destination directory for the remote content (i.e. don't copy into a destination directory that contains files that aren't from the remote host unless you trust the remote host). Fixes CVE-2022-29154. A fix for CVE-2022-37434 in the bundled zlib (buffer overflow issue). BUG FIXES: Fixed the handling of filenames specified with backslash-quoted wildcards when the default remote-arg-escaping is enabled. Fixed the configure check for signed char that was causing a host that defaults to unsigned characters to generate bogus rolling checksums. This made rsync send mostly literal data for a copy instead of finding matching data in the receiver's basis file (for a file that contains high-bit characters). Lots of manpage improvements, including an attempt to better describe how include/exclude filters work. If rsync is compiled with an xxhash 0.8 library and then moved to a system with a dynamically linked xxhash 0.7 library, we now detect this and disable the XX3 hashes (since these routines didn't stabilize until 0.8). ENHANCEMENTS: The --trust-sender option was added as a way to bypass the extra file-list safety checking (should that be required). PACKAGING RELATED: A note to those wanting to patch older rsync versions: the changes in this release requires the quoted argument change from 3.2.4. Then, you'll want every single code change from 3.2.5 since there is no fluff in this release. The build date that goes into the manpages is now based on the developer's release date, not on the build's local-timezone interpretation of the date. DEVELOPER RELATED: Configure now defaults GETGROUPS_T to gid_t when cross compiling. Configure now looks for the bsd/string.h include file in order to fix the build on a host that has strlcpy() in the main libc but not defined in the main string.h file. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 6d0e3c5a5719ea66a47f1859871808d8b2095fa4 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 3 21:58:25 2022 +0000 libseccomp: Bump package version Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 16eb2d5379757076c23b4cdd14a8af595fd9d1bc Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 19 12:35:41 2022 +0000 linux: Enable seccomp filter on ARM Since last time we checked, the kernel's security features on ARM have improved notably (see CONFIG_RANDOMIZE_BASE discussion). This patch therefore proposes to give the seccomp filter on both 32- and 64-bit ARM another try, since it provides significant security benefit to applications using it. Due to operational constraints, rootfile changes have been omitted, and will be conducted, should this patch be approved. Note to future self: Once this patch is approved, applications using seccomp (OpenSSH, Tor) need to be updated/shipped on ARM. Fixes: #12366 Fixes: #12370 Cc: Arne Fitzenreiter <arne.fitzenreiter(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 25a3d87645609b3deffdc45a153eb2e2696032f9 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Oct 2 14:47:52 2022 +0000 linux: Remove user-space probe support From the kernels' documentation: > Uprobes is the user-space counterpart to kprobes: they > enable instrumentation applications (such as 'perf probe') > to establish unintrusive probes in user-space binaries and > libraries, by executing handler functions when the probes > are hit by user-space applications. > > ( These probes come in the form of single-byte breakpoints, > managed by the kernel and kept transparent to the probed > application. ) To the best of the authors' understanding, no application on IPFire needs this functionality, and given its abuse potential, we should probably not enable it. As expected, strace functionality is not impaired by this. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit e79c4372ceb87d3fa91cd440745cb6125c57e23e Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Thu Sep 29 22:35:18 2022 +0200 suricata 6.0.8 - suggested change in 'suricata.yaml': set app-layer mqtt: enabled: yes Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Acked-by: Peter Müller <peter.mueller(a)ipfire.org> commit 9826ac9bc299360a89c7f3f5bf3df0b9dfc05217 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 3 10:21:24 2022 +0000 modules.d: Drop orphaned blacklist statements Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit c480cb54f00ff60e4c55898f67bfb5276db7a961 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 3 10:07:49 2022 +0000 Update contributor list Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit eee65ac34f16babf3ca47274df7c31da5c6ad955 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 3 09:22:57 2022 +0000 backup: Fix file permissions of in-/exclude files, again Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit c153f735529a7a9b766e523b26bb578c520e2862 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Oct 2 10:20:38 2022 +0000 Core Update 171: Do not ship /sbin/tipc Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 415afe55b2e16f06e72adce457f747b04cf63932 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Oct 2 09:46:47 2022 +0000 Core Update 171: Fix Suricata stop/start My fault, again. :-/ Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit c309bdcf3d0c983d2c4a169ea65ce7ef749eba80 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Oct 2 09:43:47 2022 +0000 Avoid manpages from being shipped and delete them on existing installations Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 18f9c27601d1777e862913428c7a7fc5289b3035 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Oct 2 08:51:03 2022 +0000 Core Update 171: Ship proxy.cgi Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit e0be9eab47d621545e5498c32c0fef39f7ef84a9 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Fri Sep 30 21:05:56 2022 +0200 proxy.cgi: Fix for Bug #12826 'squid >=5 crashes on literal IPv6 addresses' Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Bernhard Bitsch <bbitsch(a)ipfire.org> commit 1c8e23c869a9b3bfe9f1b194b561331eae3c8e65 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Oct 2 08:49:53 2022 +0000 backup: Increase chown verbosiness Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 2a06a0057120d25fe55f9c326a44c4f6cc3399d4 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 30 22:09:31 2022 +0000 langs: Fix missing spaces for proxy password length error message Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 5a44d68fc77bf72adf2d2d961e044510bfebd4f5 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 30 21:18:38 2022 +0000 ncat: Update to 7.92 This was forgotten when updating nmap to 7.92. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 6e8e9cba2a2865dd207dfbf8224e3a6c92941d9d Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 30 17:20:37 2022 +0000 linux: Update to 5.15.71 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 2689789ec088dfb2a24d4b9ae85b001a4b8576fb Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 30 17:20:17 2022 +0000 configroot: Increase verbosiness of chown operations Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 2f0fb4492901771f6a830876155f3caf0b9d560b Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 30 15:48:03 2022 +0000 Core Update 171: Ship and restart Suricata Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 12697266f4004bf3dc99296bb56d76213cccf0c0 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Thu Sep 29 22:21:57 2022 +0200 libhtp: Update to 0.5.41 Needed for 'suricata 6.0.8' For details see: https://github.com/OISF/libhtp/releases/tag/0.5.41 "trim white space of invalid folding for first header clear buffered data for body data minor optimization for decompression code" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit b655b21a45b550714e8bb75efeae5bdd36791956 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Thu Sep 29 22:21:56 2022 +0200 suricata: Update to 6.0.8 Changelog: "6.0.8 -- 2022-09-27 Task #5552: libhtp 0.5.41 6.0.7 -- 2022-09-27 Security #5430: mqtt: DOS by quadratic with too many transactions in one parse (6.0.x backport) Bug #5559: BUG_ON triggered from TmThreadsInjectFlowById (6.0.x backport) Bug #5549: Failed assert DeStateSearchState (6.0.x) Bug #5548: tcp: assertion failed in DoInsertSegment (BUG_ON) (6.0.x) Bug #5547: rules: less strict parsing of unexpected flowbit options Bug #5546: rules: don't error on bad hex in content Bug #5540: detect: transform strip whitespace creates a 0-sized variable-length array: backport6 Bug #5505: http2: slow http2_frames_get_header_value_vec because of allocation [backport6] Bug #5471: Reject action is no longer working (6.0.x backport) Bug #5467: rules: more graceful handling of anomalies for stable versions Bug #5459: Counters are not initialized in all places. (6.0.x backport) Bug #5448: nfs: add maximum number of operations per compound (6.0.x backport) Bug #5436: Infinite loop if the sniffing interface temporarily goes down (6.0.x backports) Bug #5335: flow: vlan.use-for-tracking is not used for ICMPv4 (6.0.x backport) Bug #4421: flow manager: using too much CPU during idle (6.0.x backport) Feature #5535: ips: add "reject" action to exception policies (6.0.x backport) Feature #5500: ips: midstream: add "exception policy" for midstream (6.0.x backport) Task #5551: doc: add exception policy documentation (6.0.x) Task #5533: detect/parse: add tests for parsing signatures with reject and drop action (6.0.x backport) Task #5525: exceptions: error out when invalid configuration value is passed (6.0.x backport) Task #5381: add `alert-queue-expand-fails` command-line option (6.0.x backport) Task #5328: python: distutils deprecation warning (6.0.x backport)" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit 520d214419650f90cb9491b6aea5cfe3763688b8 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Tue Sep 27 10:54:45 2022 +0000 Core Update 171: Fix backup {ex,in}clude file permissions Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit bd053b99b3feb2e7036822dbbac24b5ce80ce2df Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 26 18:50:08 2022 +0000 backup: Set owner of {ex,in}clude{,.user} files to "root" Since these files are static, there is no legitimate reason why they should be owned (hence writable) by "nobody". Also, according to configroot's LFS file, this is the intended behaviour for the *.user files, which is then overwritten by the backup LFS file. Therefore, set the file mode of these statically - configroot does not feature other files in /var/ipfire/backup/ anyway. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit d62babe08e3284c3f18ad574b2a255195348c309 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 26 19:18:51 2022 +0000 Core Update 171: Remove some orphaned files Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 4075ce139b0531e4e90880d76a3db086bee229c9 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 26 08:54:36 2022 +0000 Core Update 171: Ship ipblocklist/sources Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit f128ac2a5c88d7094c768fdcada1d0c5d0f81ab1 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sat Sep 24 13:53:12 2022 +0200 ipblocklist-sources: Correct the info url - Fixes bug#12938 - With the .html ending the link gets a 404 Page not found error Fixes: Bug#12938 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Bernhard Bitsch <bbitsch(a)ipfire.org> commit 1c154e5180a9920e579c8b6dccafc5540f0d6123 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 23 10:43:27 2022 +0000 Core Update 171: Ship expat Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit aa4d18a8fbcdfc6123b3aea85a8df4d71e7a22e4 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Sep 21 19:16:11 2022 +0200 expat: Update to version 2.4.9 - Update from version 2.4.8 to 2.4.9 - Update of rootfile - Changelog Release 2.4.9 Tue September 20 2022 Security fixes: #629 #640 CVE-2022-40674 -- Heap use-after-free vulnerability in function doContent. Expected impact is denial of service or potentially arbitrary code execution. Bug fixes: #634 MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0 #614 docs: Fix documentation on effect of switch XML_DTD on symbol visibility in doc/reference.html Other changes: #638 MinGW: Make fix-xmltest-log.sh drop more Wine bug output #596 #625 Autotools: Sync CMake templates with CMake 3.22 #608 CMake: Migrate from use of CMAKE_*_POSTFIX to dedicated variables EXPAT_*_POSTFIX to stop affecting other projects #597 #599 Windows|CMake: Add missing -DXML_STATIC to test runners and fuzzers #512 #621 Windows|CMake: Render .def file from a template to fix linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON #611 #621 MinGW|CMake: Apply MSVC .def file when linking #622 #624 MinGW|CMake: Sync library name with GNU Autotools, i.e. produce libexpat-1.dll rather than libexpat.dll by default. Filename libexpat.dll.a is unaffected. #632 MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in toolchain file "cmake/mingw-toolchain.cmake" to avoid error "windres: Command not found" on e.g. Ubuntu 20.04 #597 #627 CMake: Unify inconsistent use of set() and option() in context of public build time options to take need for set(.. FORCE) in projects using Expat by means of add_subdirectory(..) off Expat's users' shoulders #626 #641 Stop exporting API symbols when building a static library #644 Resolve use of deprecated "fgrep" by "grep -F" #620 CMake: Make documentation on variables a bit more consistent #636 CMake: Drop leading whitespace from a #cmakedefine line in file expat_config.h.cmake #594 xmlwf: Fix harmless variable mix-up in function nsattcmp #592 #593 #610 Address Cppcheck warnings #643 Address Clang 15 compiler warnings #642 #644 Version info bumped from 9:8:8 to 9:9:8; see https://verbump.de/ for what these numbers do Infrastructure: #597 #598 CI: Windows: Start covering MSVC 2022 #619 CI: macOS: Migrate off deprecated macOS 10.15 #632 CI: Linux: Make migration off deprecated Ubuntu 18.04 work #643 CI: Upgrade Clang from 14 to 15 #637 apply-clang-format.sh: Add support for BSD find #633 coverage.sh: Exclude MinGW headers #635 coverage.sh: Fix name collision for -funsigned-char Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit 80305dd4d3c783bc1ee4cb5b3936235117d40c6d Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 23 10:42:14 2022 +0000 Core Update 171: Delete stale Bind 9.16.32 libraries Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit abb32f5e608d3e5f0c3176a4087426affbc860a3 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Fri Sep 23 09:03:02 2022 +0200 bind: Update to 9.16.33 For details see: https://downloads.isc.org/isc/bind9/9.16.33/doc/arm/html/notes.html#notes-f… "Security Fixes Previously, there was no limit to the number of database lookups performed while processing large delegations, which could be abused to severely impact the performance of named running as a recursive resolver. This has been fixed. (CVE-2022-2795) ISC would like to thank Yehuda Afek from Tel-Aviv University and Anat Bremler-Barr & Shani Stajnrod from Reichman University for bringing this vulnerability to our attention. [GL #3394] named running as a resolver with the stale-answer-client-timeout option set to 0 could crash with an assertion failure, when there was a stale CNAME in the cache for the incoming query. This has been fixed. (CVE-2022-3080) [GL #3517] A memory leak was fixed that could be externally triggered in the DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177) [GL #3487] Memory leaks were fixed that could be externally triggered in the DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178) [GL #3487] Feature Changes Response Rate Limiting (RRL) code now treats all QNAMEs that are subject to wildcard processing within a given zone as the same name, to prevent circumventing the limits enforced by RRL. [GL #3459] Zones using dnssec-policy now require dynamic DNS or inline-signing to be configured explicitly. [GL #3381] A backward-compatible approach was implemented for encoding internationalized domain names (IDN) in dig and converting the domain to IDNA2008 form; if that fails, BIND tries an IDNA2003 conversion. [GL #3485] Bug Fixes A serve-stale bug was fixed, where BIND would try to return stale data from cache for lookups that received duplicate queries or queries that would be dropped. This bug resulted in premature SERVFAIL responses, and has now been resolved. [GL #2982]" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit a76f7d82240ccfe47765eabe84b24fef98e0e2f0 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 23 10:39:57 2022 +0000 Core Update 171: Ship manualpages Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 75bbee2ae34e169393fe00e90b84ab0c8e3fdb5b Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Thu Sep 22 13:43:10 2022 +0200 manualpages: Correct link to wiki for Network (other) - Network (other) help link was set to go to Network (internal) wiki page Link modified - Running the check_manualpages.pl script requires it to be executable so the build changed the permissions mode from 644 to 755 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Bernhard Bitsch <bbitsch(a)ipfire.org> commit c073cb7f920c5047029f76147b5124e9aa191e0d Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 23 10:39:04 2022 +0000 Core Update 171: Ship and rebuild crontab Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 73b404314372b36c788b709bcf18793f0a1abcbc Author: Jon Murphy <jon.murphy(a)ipfire.org> Date: Wed Aug 24 19:31:29 2022 -0500 crontab: add periodic cleanup the collectd RRD (graphs) - Created (mostly) for old openvpn graphs - RRD removed when no graph modification for +365 days - chosen since graph max out is 365 days - fcron job runs once per week - chosen since this is just a cleanup and it doesnt need to run everyday Note: logging can be added if needed. Signed-off-by: Jon Murphy <jon.murphy(a)ipfire.org> Reviewed-by: Bernhard Bitsch <bbitsch(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit c2993d5e587f5111943d3d0452e8a9b1646b69f0 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 23 10:37:33 2022 +0000 Core Update 171: Ship log.dat Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit a15c20fde98a4ab34242dd3cefd9bbb890394188 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Mon Sep 19 15:15:18 2022 +0200 log.dat: Add NUT entry for System Logs - Fixes bug#12921 - Also aligned all the code entries in %sections and %trsections Suggested-by: Michael <ip.fire(a)die-fritzens.de> Tested-by: Michael <ip.fire(a)die-fritzens.de> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Bernhard Bitsch <bbitsch(a)ipfire.org> commit 7bb62b122541633c0e79538120b1175faaa521bb Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Sep 21 12:37:19 2022 +0200 cpufrequtils: Remove SERVICES entry for this package - fixes Bug#12933 - cpufrequtils is a set of "tools" to manage and set cpu freq settings. - There is an initscript but this is only loading the cpu dependent kernel modules that are required by cpufrequtils. - Therefore cpufrequtils is not a service but a set of tools that are used when required. - SERVICES line made blank so that this addon does not show up in the services addon table. - Modified install initscript line to not use SERVICES variable Fixes: Bug#12933 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Bernhard Bitsch <bbitsch(a)ipfire.org> commit 64fc136084e7fa759c7261a3f6e54d9eea72d5fc Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Sep 23 10:35:39 2022 +0000 Core Update 171: Ship and restart Unbound Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 21236acd00c12ea0c33a8f5b4a8829e0310b3290 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Fri Sep 23 09:09:38 2022 +0200 unbound: Update to 1.16.3 For details see: https://lists.nlnetlabs.nl/pipermail/unbound-users/2022-September/007885.ht… "This release fixes CVE-2022-3204 Non-Responsive Delegation Attack. It was reported by Yehuda Afek from Tel-Aviv University and Anat Bremler-Barr and Shani Stajnrod from Reichman University. This fixes for better performance when under load, by cutting promiscuous queries for nameserver discovery and limiting the number of times a delegation point can look in the cache for missing records. Bug Fixes - Patch for CVE-2022-3204 Non-Responsive Delegation Attack." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit abb185bf5ab05fae490db310c6c166dc33a380b7 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Sep 21 13:36:59 2022 +0000 linux: Align configurations and rootfiles for ARM Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit d33651d74f2479bb169dcda6934dceb40132b77b Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Tue Sep 20 14:30:28 2022 +0000 linux: Prepare CONFIG_DEBUG_FS disabling on non-x86_64 architectures Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 423685839a056f233b5289e2c47a55da47cebc47 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Tue Sep 20 10:39:08 2022 +0000 Core Update 171: Ship kernel and regenerate initial ramdisks locally Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit ae185d6f9d0578486f9a91c5e371f159a5a41a23 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 19 12:28:14 2022 +0000 linux: Update to 5.15.68 Please refer to https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.68 for the changelog of this release. Due to the lack of local build hardware, ARM rootfile and configuration changes have been omitted. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 12d339e725cf093947c2d0243a724e014d5ef8d4 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 19:24:46 2022 +0000 kernel: Disable CONFIG_DEBUG_FS According to the kernel's documentation, > debugfs is a virtual file system that kernel developers use to put > debugging files into. Enable this option to be able to read and > write to these files. There is no legitimate reason why one has to do so on an IPFire machine. Further, the vast debugging options (i.e. related to various drivers) have never been enabled, limiting the use of this virtual file system even further. This patch therefore proposes to disable it entirely, since its potential security impact outweights its benefits. Due to operational constraints, changes to ARM kernel configurations will be made if this patch is approved for x86_64. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit ae49226866aef4b8ec700be2e739871c694d55c8 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 19 12:37:45 2022 +0000 Core Update 171: Ship backupiso Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit c799e441a447863ff94cd27eb418616bc1200855 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sun Sep 18 13:45:17 2022 +0200 backupiso: Update to ISO file naming - bug#12932 - commit https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=fbd0608c2cb5372fff78570… aligned the ISO file name to the image file name. This change also needed to be added to backupiso as the filename is used to download the iso from the IPFire server when creating an ISO backup. Fixes: Bug#12932 Suggested-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Bernhard Bitsch <bbitsch(a)ipfire.org> commit e80e1fda2d8de851db1a489a89ab828061c671c2 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 18 20:55:51 2022 +0000 Guardian: Bump package version for Perl changes Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit ee1cfd760cc2851930ee8528b4d38b405d535d3c Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 18 20:27:12 2022 +0000 Core Update 171: Ship libloc Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit b029818d1ad011837dee87724c1bad8762368833 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 18 20:24:50 2022 +0000 Core Update 171: Stop and restart collectd Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 492c9fb64b8744fca6a8f403dd3741f12a417397 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 18 20:21:24 2022 +0000 Fix restarting Squid and OpenVPN during Core Update 171 My fault, again. :-/ Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 79fb08749b6d9304818d3bada92302cdfab682c0 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 18 08:02:14 2022 +0000 Core Update 171: Stop Apache before applying the upgrade Since we replace Perl, users most likely get to see some nasty "Internal Server Error" messages during the upgrade. To suppres them, and to limit the chance of side effects, stop Apache before applying the update, and start it again afterwards. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 3ce996ffc3bb0c0c4f0cadc2442f8417b9cab172 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 18 08:01:18 2022 +0000 Core Update 171: Only start services if they are actually enabled Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 78ba0514867f5b0bff0f15dd8600c8969a5f63b5 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 18 07:58:39 2022 +0000 Core Update 171: Ship and restart strongSwan Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 4943252194a553dea1475a709f0ef1fbbc9e51c5 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 08:21:23 2022 +0000 strongSwan: Update to 5.9.7 Please refer to https://github.com/strongswan/strongswan/releases/tag/5.9.7 for the release notes of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 8017c5cf1f972301c3728da23f26dc29d611119f Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 21:18:41 2022 +0000 Core Update 171: Ship wireless-regdb Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit c8e3e7ea785aef12f8dcd43b927d94dad2dd3682 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 16:50:22 2022 +0000 wireless-regdb: Update to 2022-08-12 No changelog is provided, please refer to https://git.kernel.org/pub/scm/linux/kernel/git/sforshee/wireless-regdb.git… for the commits since 2022-02-18. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> commit f114e95c1c3197699bf81ce3208d84b90edc747d Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 21:18:19 2022 +0000 Core Update 171: Ship ca-certificates Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 4f24cba032496e624259b423ce0341fbabe0bccc Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 10:07:58 2022 +0000 ca-certificates: Update root CA certificates bundle Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 76d9ce6b11f01600c88641f022dc64a260fdf9b1 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 16:53:36 2022 +0000 Core Update 171: Ship libsodium Fixes: #12929 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> commit bd94d363353a7caa2f4089fe91770b465a75936e Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 09:45:30 2022 +0000 Update contributors Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 311d609d74fcd7aca55324e3c9510a4ac069e8f4 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 09:44:40 2022 +0000 Tor: Bump package version Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 6c0022149b6ad3d0671e026464687ac91990d208 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 11 14:14:43 2022 +0000 Tor: Update to 0.4.7.10 Changes in version 0.4.7.10 - 2022-08-12 This version updates the geoip cache that we generate from IPFire location database to use the August 9th, 2022 one. Everyone MUST update to this latest release else circuit path selection and relay metrics are badly affected. o Major bugfixes (geoip data): - IPFire informed us on August 12th that databases generated after (including) August 10th did not have proper ARIN network allocations. We are updating the database to use the one generated on August 9th, 2022. Fixes bug 40658; bugfix on 0.4.7.9. Changes in version 0.4.7.9 - 2022-08-11 This version contains several major fixes aimed at reducing memory pressure on relays and possible side-channel. It also contains a major bugfix related to congestion control also aimed at reducing memory pressure on relays. Finally, there is last one major bugfix related to Vanguard L2 layer node selection. We strongly recommend to upgrade to this version especially for Exit relays in order to help the network defend against this ongoing DDoS. o Major bugfixes (congestion control): - Implement RFC3742 Limited Slow Start. Congestion control was overshooting the congestion window during slow start, particularly for onion service activity. With this fix, we now update the congestion window more often during slow start, as well as dampen the exponential growth when the congestion window grows above a capping parameter. This should reduce the memory increases guard relays were seeing, as well as allow us to set lower queue limits to defend against ongoing DoS attacks. Fixes bug 40642; bugfix on 0.4.7.5-alpha. o Major bugfixes (relay): - Remove OR connections btrack subsystem entries when the connections close normally. Before this, we would only remove the entry on error and thus leaking memory for each normal OR connections. Fixes bug 40604; bugfix on 0.4.0.1-alpha. - Stop sending TRUNCATED cell and instead close the circuit from which we received a DESTROY cell. This makes every relay in the circuit path to stop queuing cells. Fixes bug 40623; bugfix on 0.1.0.2-rc. o Major bugfixes (vanguards): - We had omitted some checks for whether our vanguards (second layer guards from proposal 333) overlapped. Now make sure to pick each of them to be independent. Also, change the design to allow them to come from the same family. Fixes bug 40639; bugfix on 0.4.7.1-alpha. o Minor features (dirauth): - Add a torrc option to control the Guard flag bandwidth threshold percentile. Closes ticket 40652. - Add an AuthDirVoteGuard torrc option that can allow authorities to assign the Guard flag to the given fingerprints/country code/IPs. This is a needed feature mostly for defense purposes in case a DoS hits the network and relay start losing the Guard flags too fast. - Make UPTIME_TO_GUARANTEE_STABLE, MTBF_TO_GUARANTEE_STABLE, TIME_KNOWN_TO_GUARANTEE_FAMILIAR WFU_TO_GUARANTEE_GUARD tunable from torrc. o Minor features (fallbackdir): - Regenerate fallback directories generated on August 11, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/08/11. o Minor bugfixes (congestion control): - Add a check for an integer underflow condition that might happen in cases where the system clock is stopped, the ORconn is blocked, and the endpoint sends more than a congestion window worth of non- data control cells at once. This would cause a large congestion window to be calculated instead of a small one. No security impact. Fixes bug 40644; bugfix on 0.4.7.5-alpha. o Minor bugfixes (defense in depth): - Change a test in the netflow padding code to make it more _obviously_ safe against remotely triggered crashes. (It was safe against these before, but not obviously so.) Fixes bug 40645; bugfix on 0.3.1.1-alpha. o Minor bugfixes (relay): - Do not propagate either forward or backward a DESTROY remote reason when closing a circuit in order to avoid a possible side channel. Fixes bug 40649; bugfix on 0.1.2.4-alpha. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit da65b2892f2c9c91778443cf255b2cd611294a86 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 09:42:51 2022 +0000 Core Update 171: Do not ship obsolete Intel BT firmware Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 8f31296112faf5ad91f86c6fc0a9b655b671734e Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 09:41:06 2022 +0000 linux-firmware: Drop dedicated Bluetooth BLOBs Since we disabled Bluetooth support in the kernel a long time ago due to security reasons, these do not serve any purpose anymore. Therefore, do not ship them and delete them on existing installations. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit bc38ca3b00c284ea7ccea8d55d8524f27a768e2c Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 09:15:57 2022 +0000 strip: Exclude /lib/firmware/qcom/sc8280xp/LENOVO/21BX for stage 2 For some reason, stripper crashes processing this directory: strip: error: the input file '/lib/firmware/qcom/sc8280xp/LENOVO/21BX/qccdsp8280.mbn' has no sections Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 3b01f08a3cee8cc41db7ad6cee15cdb604f824fe Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 08:49:30 2022 +0000 Core Update 171: Ship linux-firmware changes Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 2862b0e73bbde5fd12e6333de43c500853fe24f2 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Sep 17 08:32:21 2022 +0000 linux-firmware: Update to 20220913 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 9852e4f5e1ff33418e696f03552815e7caeebad7 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Thu Sep 15 19:45:26 2022 +0000 lcdproc: Bump package version Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit b8098b5c4727413cce17401d598e7a257d364bde Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Thu Sep 15 15:52:55 2022 +0200 lcdproc: Update to commit 0e2ce9b version - fixes bug#12920 - The lcd2usb portion of the hd44780 driver in in the latest release version of lcdproc (0.5.9) are only coded for libusb-0.1, which was removed from IPFire in recent times. - Commits have been merged into the lcdproc repository that enable lcd2usb to work with the libusb-1.0 series but no release has been made since 2017. - This patch downloaded a zip archive from the status of the lcdproc repository at commit 0e2ce9b. This zip archive was then converted into a tar.gx archive. The lfs and rootfile have been updated in line with this. - The lcdproc-0e2ce9b-4.ipfire file created by this build has been tested by the bug reporter, Rolf Schreiber, and confirmed to fix the issue raised with the bug. - This patch brings lcdproc upto date with the 149 commits that have been made between 2017 and Dec 2021, the date of the last commit. - The version number has been defined as the last commit number. - The -enable-libusb option has to be left in place as it turned out that -enable-libusb-1-0 only works if -enable-libusb is also set. It looks like this was identified in the lcdproc issues list but has not yet been fixed. Fixes: Bug#12920 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit 3890da81da9dba0c4035c61f26ef2fb080644319 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Thu Sep 15 19:36:29 2022 +0000 curl: Fix build on armv6l https://github.com/curl/curl/pull/9054 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 609f0e129bc33ecfaf6f9eda2d911f6ef5826e84 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Thu Sep 15 19:25:48 2022 +0000 Core Update 171: Add missing changes related to Perl update Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 98f43d8ba8d3c29682807275eba52163ae6bb123 Merge: 4446d9763 c183124f5 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Thu Sep 15 19:12:10 2022 +0000 Merge branch 'master' into next commit 4446d9763ec364d9646a357c930706190ad0e973 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Thu Sep 15 07:47:36 2022 +0000 efivar: Update aarch64 rootfile as well Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit b415bb533e4ad62346e2da09569e2b73c631ebd6 Merge: f58f047fa 9125d3671 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Tue Sep 13 11:43:06 2022 +0000 Merge branch 'next' into temp-c171-development commit f58f047fa9ab442afb46ac605f5ebaf7160a35a6 Merge: 1564096b5 2e6def380 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Tue Sep 13 07:33:30 2022 +0000 Merge branch 'next' into temp-c171-development commit 1564096b51b8fda9045e5956ad614500b6aeb616 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 12 09:52:04 2022 +0000 Core Update 171: Delete stale efivar files Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit f7384566ea1cbe14709968cb110acf22ddeb518d Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 24 09:49:30 2022 +0200 mandoc: Build dependency for efivar version 38 onwards - New build only dependency Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit 922747b2055277559ebb404a8fde2433eeb1d3fa Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 24 09:49:29 2022 +0200 efivar: Update to version 38 - Update from version 37 to 38 - Update of rootfile - mandoc is now a build dependency for efivar - Old compile fixes patches are no longer required with version 38 - Details for lfs build of version 38 obtained from Beyond Linux From Scratch - Changelog bug fixes Rework some makefile bits to make overriding some options simpler. by @vathpela in #140 Handle /sys/devices/virtual/{nvme-fabrics,nvme-subsystem} devices by @vathpela in #139 guids.S: Include <cet.h> when CET is enabled by @hjl-tools in #149 Fix /sys/block sysfs parsing for eMMC-s by @jwrdegoede in #150 Properly check mmap return error by @hannob in #152 Fix s{yt,ty}le typo in efi_get_variable(3) by @nabijaczleweli in #162 Handle NULL set_variable() by @lcp in #159 Fix parsing for nvme-subsystem devices by @dannf in #158 Attempt to fix the identified thread safety bugs by @vathpela in #155 Make thread-test depend on libefivar.so by @hjl-tools in #176 Upstream a local patch from rawhide by @frozencemetery in #177 Fix conversion from UTF8 to UCS2 by @freedge in #171 efivar: make docs match current code for 'efivar -A' by @vathpela in #178 Migrate CI to Github actions by @frozencemetery in #179 Add code of conduct by @frozencemetery in #180 Misc minor fixes by @vathpela in #182 Add efi_time_t declarations and helper functions. by @vathpela in #183 More misc fixes by @vathpela in #185 Run CI on more targets by @vathpela in #187 Coverity fixes 20211208 by @vathpela in #189 CI: run abicheck by @frozencemetery in #190 Fix linux virtual root device parsing by @vathpela in #188 efivar.spec.in: fix license to be valid SPDX by @frozencemetery in #192 Add efisecdb tooling by @vathpela in #184 Fix linker string comparison for dash by @frozencemetery in #194 Full changelog diff between version 37 and 38 is available in github repo https://github.com/rhboot/efivar/compare/37...38 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit c6e683d07dc64e93e8876045b0c94c8089ce572f Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 12 09:44:05 2022 +0000 Core Update 171: Ship nettle Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 0f4ecb9fc38d08a0b302d049fbd536b9f363c335 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 24 09:50:47 2022 +0200 nettle: Update to version 3.8.1 - Update from version 3.7.3 to 3.8.1 - Update of rootfile - Changelog 3.8.1 release This is a bugfix release, fixing a few portability issues reported for Nettle-3.8. Bug fixes: * Avoid non-posix m4 argument references in the chacha implementation for arm64, powerpc64 and s390x. Reported by Christian Weisgerber, fix contributed by Mamone Tarsha. * Use explicit .machine pseudo-ops where needed in s390x assembly files. Bug report by Andreas K. Huettel, fix contributed by Mamone Tarsha. Optimizations: * Implemented runtime detection of cpu features for OpenBSD on arm64. Contributed by Christian Weisgerber. The new version is intended to be fully source and binary compatible with Nettle-3.6. The shared library names are libnettle.so.8.6 and libhogweed.so.6.6, with sonames libnettle.so.8 and libhogweed.so.6. 3.8 release This release includes a couple of new features, and many performance improvements. It adds assembly code for two more architectures: ARM64 and S390x. The new version is intended to be fully source and binary compatible with Nettle-3.6. The shared library names are libnettle.so.8.5 and libhogweed.so.6.5, with sonames libnettle.so.8 and libhogweed.so.6. New features: * AES keywrap (RFC 3394), contributed by Nicolas Mora. * SM3 hash function, contributed by Tianjia Zhang. * New functions cbc_aes128_encrypt, cbc_aes192_encrypt, cbc_aes256_encrypt. On processors where AES is fast enough, e.g., x86_64 with aesni instructions, the overhead of using Nettle's general cbc_encrypt can be significant. The new functions can be implemented in assembly, to do multiple blocks with reduced per-block overhead. Note that there's no corresponding new decrypt functions, since the general cbc_decrypt doesn't suffer from the same performance problem. Bug fixes: * Fix fat builds for x86_64 windows, these appear to never have worked. Optimizations: * New ARM64 implementation of AES, GCM, Chacha, SHA1 and SHA256, for processors supporting crypto extensions. Great speedups, and fat builds are supported. Contributed by Mamone Tarsha. * New s390x implementation of AES, GCM, Chacha, memxor, SHA1, SHA256, SHA512 and SHA3. Great speedups, and fat builds are supported. Contributed by Mamone Tarsha. * New PPC64 assembly for ecc modulo/redc operations, contributed by Amitay Isaacs, Martin Schwenke and Alastair D´Silva. * The x86_64 AES implementation using aesni instructions has been reorganized with one separate function per key size, each interleaving the processing of two blocks at a time (when the caller processes multiple blocks with each call). This gives a modest performance improvement on some processors. * Rewritten and faster x86_64 poly1305 assembly. Known issues: * Nettle's testsuite doesn't work out-of-the-box on recent MacOS, due to /bin/sh discarding the DYLD_LIBRARY_PATH environment variable. Nettle's test scripts handle this in some cases, but currently fails the test cases that are themselves written as /bin/sh scripts. As a workaround, use make check EMULATOR='env DYLD_LIBRARY_PATH=$(TEST_SHLIB_DIR)' Miscellaneous: * Updated manual to current makeinfo conventions, with no explicit node pointers. Generate pdf version with texi2pdf, to get working hyper links. * Added square root functions for NIST ecc curves, as a preparation for supporting compact point representation. * Reworked internal GCM/ghash interfaces, simplifying assembly implementations. Deleted unused GCM C implementation variants with less than 8-bit lookup table. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit fa100fdd54bc0e62b79e11d122b2f1f3b9595128 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 12 09:43:05 2022 +0000 Core Update 171: Ship iproute2 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 085446d6fb83ee6f20874585173c5e9c29faabf7 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 24 09:50:20 2022 +0200 iproute2: Update to version 5.19.0 - Update from 5.17.0 to 5.19.0 - Update of rootfile - Changelog is only available as the lsit fo commits from the git repository https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/ Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit 97f5feb1fbcd13f964eef90f4114133693a586ab Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 24 09:50:02 2022 +0200 fetchmail: Update to version 6.4.32 - Update from version 6.4.19 to 6.4.32 - Update of rootfile not required - Changelog - range of security and bug fixes fetchmail-6.4.32 (released 2022-07-30, 31696 LoC): # FIXES: * Use configure to find rst2html, some systems install it only with .py suffix, others only without, and some install both. * Update README.maintainer # TRANSLATIONS: language translations were updated by these fine people: (in alphabetical order of language codes so as not to prefer people): * cs: Petr Pisar [Czech] * es: Cristian Othón Martínez Vera [Spanish] * ja: Takeshi Hamasaki [Japanese] * pl: Jakub Bogusz [Polish] * ro: Remus-Gabriel Chelu [Romanian] * sq: Besnik Bleta [Albanian] * sv: Göran Uddeborg [Swedish] fetchmail-6.4.31 (released 2022-07-16, 31694 LoC): # BUG FIXES: * Try to fix ./configure --with-ssl=... for systems that have multiple OpenSSL versions installed. Issues reported by Dennis Putnam. * The netrc parser now reports its errors to syslog or logfile when appropriate, previously it would always log to stderr. * Add error checking to .netrc parser. # CHANGES: * manpage: use .UR/.UE macros instead of .URL for URIs. * manpage: fix contractions. Found with FreeBSD's igor tool. * manpage: HTML now built with pandoc -> python-docutils (manServer.pl was dropped) fetchmail-6.4.30 (released 2022-04-26, 31666 LoC): # BREAKING CHANGES: * Bump wolfSSL minimum required version to 5.2.0 to pull in security fix. # CHANGES: * Using OpenSSL 1.* before 1.1.1n elicits a compile-time warning. * Using OpenSSL 3.* before 3.0.2 elicits a compile-time warning. * configure.ac was tweaked in order to hopefully fix cross-compilation issues report, and different patch suggested, by Fabrice Fontaine, https://gitlab.com/fetchmail/fetchmail/-/merge_requests/42 # TRANSLATIONS: language translations were updated by this fine person: * ro: Remus-Gabriel Chelu [Romanian] fetchmail-6.4.29 (released 2022-03-20, 31661 LoC): # TRANSLATIONS: language translations were updated by this fine person: * vi: Trần Ngọc Quân [Vietnamese] fetchmail-6.4.28 (released 2022-03-05, 31661 LoC): # DOCUMENTATION: * Fix a typo in the manual page, courtesy of Jeremy Petch. # TRANSLATIONS: language translations were updated by this fine person: * es: Cristian Othón Martínez Vera [Spanish] fetchmail-6.4.27 (released 2022-01-26, 31661 LoC): # BREAKING CHANGES: * Bump wolfSSL minimum required version to 5.1.1 to pull in security fix. # TRANSLATIONS: language translations were updated by this fine person: * ro: Remus-Gabriel Chelu [Romanian] fetchmail-6.4.26 (released 2021-12-26, 31661 LoC): # FIXES: * When using wolfSSL 5.0.0, work around a bug that appears to hit wolfSSL when receiving handshake records while still in SSL_peek(). Workaround is to read 1 byte and cache it, then call SSL_peek() again. This affects only some servers. https://github.com/wolfSSL/wolfssl/issues/4593 # TRANSLATIONS: language translations were updated by this fine person: * sr: Мирослав Николић (Miroslav Nikolić) [Serbian] fetchmail-6.4.25 (released 2021-12-10, 31653 LoC): # BREAKING CHANGES: * Since distributions continue patching for LibreSSL use, which cannot be linked legally, block out LibreSSL in configure.ac and socket.c, and refer to COPYING, unless on OpenBSD (which ships it in the base system). OpenSSL and wolfSSL 5 can be used. SSL-related documentation was updated, do re-read COPYING, INSTALL, README, README.packaging, README.SSL. * Bump OpenSSL version requirement to 1.0.2f in order to safely remove the obsolete OpenSSL flag SSL_OP_SINGLE_DH_USE. This blocks out 1.0.2e and older 1.0.2 versions. 1.0.2f was a security fix release, and 1.0.2u is publicly available from https://www.openssl.org/source/old/1.0.2/ * Some of the configure.ac fiddling MIGHT have broken cross-compilation again. The maintainer does not test cross-compiling fetchmail; if you have difficulties, try setting PKG_CONFIG_LIBDIR to the pkg-config path containing your target/host libraries, or see if --with-ssl-prefix or --with-wolfssl-prefix, or overriding LDFLAGS/LIBS/CPPFLAGS, can help. Feedback solicited on compliant systems that are before end-of-life. # BUG FIXES: * 6.4.24's workaround for OpenSSL 1.0.2's X509_V_FLAG_TRUSTED_FIRST flag contained a typo and would not kick in properly. * Library and/or rpath setting from configure.ac was fixed. # ADDITIONS: * Added an example systemd unit file and instructions to contrib/systemd/ which runs fetchmail as a daemon with 5-minute poll intervals. Courteously contributed by Barak A. Pearlmutter, Debian Bug#981464. * fetchmail can now be used with wolfSSL 5's OpenSSL compatibility layer, see INSTALL and README.SSL. This is considered experimental. Feedback solicited. # CHANGES: * The getstats.py dist-tool now counts lines of .ac and .am files. * ./configure --with-ssl now supports pkg-config module names, too. See INSTALL. # TRANSLATIONS: language translations were updated by these fine people: (in reverse alphabetical order of language codes so as not to prefer people): * sv: Göran Uddeborg [Swedish] * sq: Besnik Bleta [Albanian] * pl: Jakub Bogusz [Polish] * ja: Takeshi Hamasaki [Japanese] * fr: Frédéric Marchal [French] * eo: Keith Bowes [Esperanto] * cs: Petr Pisar [Czech] fetchmail-6.4.24 (released 2021-11-20, 30218 LoC): # OPENSSL AND LICENSING NOTE: > see fetchmail-6.4.22 below, and the file COPYING. Note that distribution of packages linked with LibreSSL is not feasible due to a missing GPLv2 clause 2(b) exception. # COMPATIBILITY: * Bison 3.8 dropped yytoknum altogether, breaking compilation due to a warning workaround. Remove the cast of yytoknum to void. This may cause a compiler warning to reappear with older Bison versions. * OpenSSL 1.0.2: Workaround for systems that keep the expired DST Root CA X3 certificate in its trust store because OpenSSL by default prefers the untrusted certificate and fails. Fetchmail now sets the X509_V_FLAG_TRUSTED_FIRST flag (on OpenSSL 1.0.2 only). This is workaround #2 from the OpenSSL Blog. For details, see both: https://www.openssl.org/blog/blog/2021/09/13/LetsEncryptRootCertExpire/ https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ NOTE: OpenSSL 1.0.2 is end of life, it is assumed that the OpenSSL library is kept up to date by a distributor or via OpenSSL support contract. Where this is not the case, please upgrade to a supported OpenSSL version. # DOCUMENTATION: * The manual page was revised after re-checking with mandoc -Tlint, aspell, igor. Some more revisions were made for clarity. # TRANSLATIONS: language translations were updated by these fine people: * sv: Göran Uddeborg [Swedish] * pl: Jakub Bogusz [Polish] * fr: Frédéric Marchal [French] * cs: Petr Pisar [Czech] * eo: Keith Bowes [Esperanto] * ja: Takeshi Hamasaki [Japanese] fetchmail-6.4.23 (released 2021-10-31, 30206 LoC): # USABILITY: * For common ssh-based IMAP PREAUTH setups (i. e. those that use a plugin - no matter its contents - and that set auth ssh), change the STARTTLS error message to suggest sslproto '' instead. This is a commonly reported issue after the CVE-2021-39272 fix in 6.4.22. Fixes Redhat Bugzilla 2008160. Fixes GitLab #39. # TRANSLATIONS: language translations were updated by these fine people: * ja: Takeshi Hamasaki [Japanese] * sr: Мирослав Николић (Miroslav Nikolić) [Serbian] fetchmail-6.4.22 (released 2021-09-13, 30201 LoC): # OPENSSL AND LICENSING NOTE: * fetchmail 6.4.22 is compatible with OpenSSL 1.1.1 and 3.0.0. OpenSSL's licensing changed between these releases from dual OpenSSL/SSLeay license to Apache License v2.0, which is considered incompatible with GPL v2 by the FSF. For implications and details, see the file COPYING. # SECURITY FIXES: * CVE-2021-39272: fetchmail-SA-2021-02: On IMAP connections, without --ssl and with nonempty --sslproto, meaning that fetchmail is to enforce TLS, and when the server or an attacker sends a PREAUTH greeting, fetchmail used to continue an unencrypted connection. Now, log the error and abort the connection. --Recommendation for servers that support SSL/TLS-wrapped or "implicit" mode on a dedicated port (default 993): use --ssl, or the ssl user option in an rcfile. --Reported by: Andrew C. Aitchison, based on the USENIX Security 21 paper "Why TLS is better without STARTTLS - A Security Analysis of STARTTLS in the Email Context" by Damian Poddebniak, Fabian Ising, Hanno Böck, and Sebastian Schinzel. The paper did not mention fetchmail. * On IMAP and POP3 connections, --auth ssh no longer prevents STARTTLS negotiation. * On IMAP connections, fetchmail does not permit overriding a server-side LOGINDISABLED with --auth password any more. * On POP3 connections, the possibility for RPA authentication (by probing with an AUTH command without arguments) no longer prevents STARTTLS negotiation. * For POP3 connections, only attempt RPA if the authentication type is "any". # BUG FIXES: * On IMAP connections, when AUTHENTICATE EXTERNAL fails and we have received the tagged (= final) response, do not send "*". * On IMAP connections, AUTHENTICATE EXTERNAL without username will properly send a "=" for protocol compliance. * On IMAP connections, AUTHENTICATE EXTERNAL will now check if the server advertised SASL-IR (RFC-4959) support and otherwise refuse (fetchmail <= 6.4 has not supported and does not support the separate challenge/response with command continuation) * On IMAP connections, when --auth external is requested but not advertised by the server, log a proper error message. * Fetchmail no longer crashes when attempting a connection with --plugin "" or --plugout "". * Fetchmail no longer leaks memory when processing the arguments of --plugin or --plugout on connections. * On POP3 connections, the CAPAbilities parser is now caseblind. * Fix segfault on configurations with "defaults ... no envelope". Reported by Bjørn Mork. Fixes Debian Bug#992400. This is a regression in fetchmail 6.4.3 and happened when plugging memory leaks, which did not account for that the envelope parameter is special when set as "no envelope". The segfault happens in a constant strlen(-1), triggered by trusted local input => no vulnerability. * Fix program abort (SIGABRT) with "internal error" when invalid sslproto is given with OpenSSL 1.1.0 API compatible SSL implementations. # CHANGES: * IMAP: When fetchmail is in not-authenticated state and the server volunteers CAPABILITY information, use it and do not re-probe. (After STARTTLS, fetchmail must and will re-probe explicitly.) * For typical POP3/IMAP ports 110, 143, 993, 995, if port and --ssl option do not match, emit a warning and continue. Closes Gitlab #31. (cherry-picked from 6.5 beta branch "legacy_6x") * fetchmail.man and README.SSL were updated in line with RFC-8314/8996/8997 recommendations to prefer Implicit TLS (--ssl/ssl) and TLS v1.2 or newer, placing --sslproto tls1.2+ more prominently. The defaults shall not change between 6.4.X releases for compatibility. # TRANSLATIONS: language translations were updated by these fine people: * sq: Besnik Bleta [Albanian] * cs: Petr Pisar [Czech] * eo: Keith Bowes [Esperanto] * fr: Frédéric Marchal [French] * pl: Jakub Bogusz [Polish] * sv: Göran Uddeborg [Swedish] fetchmail-6.4.21 (released 2021-08-09, 30042 LoC): # REGRESSION FIX: * The new security fix in 6.4.20 for CVE-2021-36386 caused truncation of messages logged to buffered outputs, from --logfile and --syslog. This also caused lines in the logfile to run into one another because the fragment containing the '\n' line-end character was usually lost. Reason is that on all modern systems (with <stdarg.h> header and vsnprintf() interface), the length of log message fragments was added up twice, so that these ended too deep into a freshly allocated buffer, after the '\0' byte. Unbuffered outputs flushed the fragments right away, which masked the bug. fetchmail-6.4.20 (released 2021-07-28, 30042 LoC): # SECURITY FIX: * When a log message exceeds c. 2 kByte in size, for instance, with very long header contents, and depending on verbosity option, fetchmail can crash or misreport each first log message that requires a buffer reallocation. fetchmail then reallocates memory and re-runs vsnprintf() without another call to va_start(), so it reads garbage. The exact impact depends on many factors around the compiler and operating system configurations used and the implementation details of the stdarg.h interfaces of the two functions mentioned before. To fix CVE-2021-36386. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit 6ccf4650ec93a7107e69e8cbaae811ac9b71a317 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 24 09:49:04 2022 +0200 efibootmgr: Update to version 18 - Update from version 17 to 18 - Update of rootfile not required - Changelog bug fixes fixed the simple run example by @Katana-Steel in #88 Restore activation error message in efibootmgr by @rbisewski in #89 Android: correct the sources list by @cwhuang in #124 remove-dupes: update error message by @raharper in #127 Fix typo in manual page by @ferivoz in #136 README: Note efivarfs as the current required kernel module by @cjmayo in #145 Fix possible read out of bounds in ucs2_to_utf8 by @dlrobertson in #147 Migrate CI by @frozencemetery in #153 Add code of conduct by @frozencemetery in #154 Fix help messages by @robert-scheck in #156 Add option for insertion location of new entries by @frozencemetery in #166 Full changelog can be found from the github repository comparing versio 17 to 18 https://github.com/rhboot/efibootmgr/compare/17...18 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit c46d6ee4aba5881f46ccb0af1d5a0c8ef452f74e Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sun Aug 21 22:01:41 2022 +0200 elfutils: Update to version 0.187 - Update from version 0.186 to 0.187 - Update of rootfile - Changelog 0.187 * NEWS * debuginfod: Support -C option for connection thread pooling. debuginfod-client: Negative cache file are now zero sized instead of no-permission files. addr2line: The -A, --absolute option, which shows file names including the full compilation directory is now the default. To get the old behavior use the new option --relative. readelf, elflint: Recognize FDO Packaging Metadata ELF notes libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And when DEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. * GIT SHORTLOG * debuginfod: Include "IPv4 IPv6" in server startup message PR29022: 000-permissions files cause problems for backups debuginfod: Use the debuginfod-size response header debuginfod: ensure X-DEBUGINFOD-SIZE contains file size config: simplify profile.*sh.in debuginfod/debuginfod-client.c: use long for cache time configurations readelf: Don't consider padding DT_NULL as dynamic section entry debuginfod: correct concurrency bug in fdcache metrics PR28661: debuginfo connection thread pool support man debuginfod-client-config.7: Elaborate $DEBUGINFOD_URLS PR28708: debuginfod: use MHD_USE_EPOLL for microhttpd threads debuginfod: use single ipv4+ipv6 microhttpd daemon configuration AUTHORS: Use generator script & git mailmap libebl: recognize FDO Packaging Metadata ELF note tests: Don't set DEBUGINFOD_TIMEOUT tests: Add -rdynamic to dwfl_proc_attach_LDFLAGS debuginfod: Use gmtime_r instead of gmtime to avoid data race debuginfod: sqlite3_sharedprefix_fn should not compare past end of string debuginfod: Fix some memory leaks on debuginfod-client error paths. debuginfod: Clear and reset debuginfod_client winning_headers on reuse libdwfl: Don't read beyond end of file in dwfl_segment_report_module debuginfod: Check result of calling MHD_add_response_header. readelf: Workaround stringop-truncation error tests: varlocs workaround format-overflow errors debuginfod: Fix debuginfod_pool leak configure: Add --enable-sanitize-address debuginfod: Don't format clog using 'right' or 'setw(20)'. libdwfl: Don't try to convert too many bytes in dwfl_link_map_report libdwfl: Make sure we know the phdr entry size before searching phdrs. libdwfl: Don't trust e_shentsize in dwfl_segment_report_module libdwfl: Don't install an Elf handle in a Dwfl_Module twice libdwfl: Don't try to convert too many dyns in dwfl_link_map_report libdwfl: Don't allocate more than SIZE_MAX in dwfl_segment_report_module. libelf: Use offsetof to get field of unaligned libdwfl: Make sure phent is sane and there is at least one phdr libdwfl: Add overflow check while iterating in dwfl_segment_report_module tests: Use /bin/sh instead of /bin/ls as always there binary libdwfl: Make sure there is at least one dynamic entry libdwfl: Make sure there is at least one phdr libdwfl: Make sure note data is properly aligned. libdwfl: Make dwfl_segment_report_module aware of maximum Elf size libdwfl: Make sure the note len increases each iteration libelf: Only set shdr state when there is at least one shdr libdwfl: Make sure that ph_buffer_size has room for at least one phdr libdwfl: Make sure dyn_filesz has a sane size libdwfl: Rewrite GElf_Nhdr reading in dwfl_segment_report_module libdwfl: Handle unaligned Ehdr in dwfl_segment_report_module libdwfl: Handle unaligned Phdr in dwfl_segment_report_module libdwfl: Handle unaligned Nhdr in dwfl_segment_report_module libdwfl: Always clean up build_id.memory libdwfl: Make sure dwfl_elf_phdr_memory_callback returns at least minread libdwfl: Call xlatetom on aligned buffers in dwfl_link_map_report libdwfl: Calculate addr to read by hand in link_map.c read_addrs. libdwfl: Fix overflow check in link_map.c read_addrs libdwfl: Handle unaligned Dyns in dwfl_segment_report_module libdwfl: Declare possible zero sized arrays only when non-zero backends: Use PTRACE_GETREGSET for ppc_set_initial_registers_tid configure: Test for _FORTIFY_SOURCE=3 support. addr2line: Make --absolute the default, add --relative option. configure: Use AS_HELP_STRING instead of AC_HELP_STRING. libelf: Take map offset into account for Shdr alignment check in elf_begin libelf: Make sure ar_size starts with a digit before calling atol. libelf: Check alignment of Verdef, Verdaux, Verneed and Vernaux offsets libdwfl: Close ar members when they cannot be processed. libdwfl: Use memcpy to assign image header field values libelf: Don't overflow offsets in elf_cvt_Verneed and elf_cvt_Verdef libelf: Correct alignment of ELF_T_GNUHASH data for ELFCLASS64 tests: Check addsections test binary is 64bit for run-large-elf-file.sh configure: Don't check whether -m64 works for 32bit host biarch check libelf: Sync elf.h from glibc. elflint: Recognize NT_FDO_PACKAGING_METADATA Introduce error_exit as a noreturn variant of error (EXIT_FAILURE, ...) libelf: Also copy/convert partial datastructures in xlate functions libelf: Return already gotten Elf_Data from elf_getdata_rawchunk config: Add versioned requires on libs/libelf for debuginfod-client libdw: Add DWARF5 package file section identifiers, DW_SECT_* tests: Don't try to corrupt sqlite database during test. libdw: Remove unused atomics.h include from libdwP.h readelf: Define dyn_mem outside the while loop. tests: Lower parallel lookups in run-debuginfod-webapi-concurrency.sh debuginfod: Use MHD_USE_ITC in MHD_start_daemon flags elfclassify: Fix --no-stdin flag libelf: Check for mremap, elf_update needs it for ELF_C_RDWR_MMAP debuginfod, libdwfl: Initialize libcurl and dlopen debuginfod-client lazily dwfl: fix potential overflow when reporting on kernel modules debuginfod: fix compilation on platforms without <error.h> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit 0892c58e0cc86772ba23a55bf82a630de4415b3f Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 12 06:09:22 2022 +0000 Core Update 171: This update needs a reboot Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit af9cd948b388f764cebc131cbe07240fe2099494 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 24 09:50:34 2022 +0200 libarchive: Update to version 3.6.1 - Update from version 3.6.0 to 3.6.1 - Update of rootfile - Changelog Libarchive 3.6.1 is a bugfix and security release. Security fixes: 7zip reader: fix PPMD read beyond boundary (#1671) ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672) ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685) RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0) fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50) fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77) fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715) Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit e955dbdca3769b755571d6889840e127c0276540 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 12 06:08:25 2022 +0000 Core Update 171: Ship and restart OpenVPN Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 43ee894734eb71e7d55e42292300d48b1507e141 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 24 09:51:01 2022 +0200 openvpn: Update to version 2.5.7 - Update from version 2.5.6 to 2.5.7 - Update of rootfile not required - Changelog 2.5.7. This is mostly a bugfix release, but adds limited support for OpenSSL 3.0. Full support will arrive in OpenVPN 2.6. networking: use OPENVPN_ETH_ALEN instead of ETH_ALEN networking_iproute2: don't pass M_WARN to openvpn_execve_check() t_net.sh: delete dummy iface using iproute command auth-pam.c: add missing include limits.h Add insecure tls-cert-profile options Refactor early initialisation and uninitialisation into methods Allow loading of non default providers Add ubuntu 22.04 to Github Actions Add macos OpenSSL 3.0 and ASAN builds Add --with-openssl-engine autoconf option (auto|yes|no) Fix allowing/showing unsupported ciphers and digests Remove dependency on BF-CBC existance from test_ncp Add message when decoding PKCS12 file fails. Translate OpenSSL 3.0 digest names to OpenSSL 1.1 digest names Fix client-pending-auth error message to say ERROR instead of SUCCESS cipher-negotiation.rst missing from doc/Makefile.am vcpkg-ports\pkcs11-helper: shorten patch filename msvc: adjust build options to harden binaries vcpkg-ports: remove openssl port vcpkg: switch to manifest Fix M_ERRNO behavior on Windows vcpkg-ports/pkcs11-helper: bump to release 1.29 tapctl: Resolve MSVC C4996 warnings Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit c49899dc54d196b4c12e952ec68b719063642acc Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 12 06:07:41 2022 +0000 Core Update 171: Ship sqlite Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 94ed0a10e09a929b040b28a7105c302efed26725 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 24 09:51:15 2022 +0200 sqlite: Update to version 3390200 - Update from version 3390000 to 3390200 - Update of rootfile not required - Changelog version 3.39.2 (2022-07-21): Fix a performance regression in the query planner associated with rearranging the order of FROM clause terms in the presences of a LEFT JOIN. Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and 1345947, forum post 3607259d3c, and other minor problems discovered by internal testing. version 3.39.1 (2022-07-13): Fix an incorrect result from a query that uses a view that contains a compound SELECT in which only one arm contains a RIGHT JOIN and where the view is not the first FROM clause term of the query that contains the view. forum post 174afeae5734d42d. Fix some harmless compiler warnings. Fix a long-standing problem with ALTER TABLE RENAME that can only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set to a very small value. Fix a long-standing problem in FTS3 that can only arise when compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time option. Fix the build so that is works when the SQLITE_DEBUG and SQLITE_OMIT_WINDOWFUNC compile-time options are both provided at the same time. Fix the initial-prefix optimization for the REGEXP extension so that it works correctly even if the prefix contains characters that require a 3-byte UTF8 encoding. Enhance the sqlite_stmt virtual table so that it buffers all of its output. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit 4c4953a0d081a8a521e319b599f189cd701086d0 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 12 06:07:03 2022 +0000 Core Update 171: Delete orphaned Bind libraries Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit ef0e70ee442fa8fd67c758c3b07c0a3b3f25da10 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 12 06:05:42 2022 +0000 Core Update 171: Ship util-linux Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 9f54f60bb15b642d8fcd7f4dd64549ea5d3b6185 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 24 09:51:32 2022 +0200 util-linux: Update to version 2.38.1 - Update from version 2.38 to 2.38.1 - Update of rootfile not required - Changelog util-linux 2.38.1 Release Notes BSD: - Use byteswap.h and endian.h defined macos when present [Warner Losh] column: - fix buffer overflow when -l specified [Karel Zak] - fix greedy mode on -l [Karel Zak] configure.ac: - add lsns option [Fabrice Fontaine] dmesg: - fix --since and --until [Karel Zak] docs: - update AUTHORS file [Karel Zak] fstrim: - Remove all skipped entries before de-duplication [Scott Shambarger] - check for ENOSYS when using --quiet-unsupported [Narthorn] hardlink: - Document '-c' option in manpage [FeRD (Frank Dana)] - Fix man page docs for '-v/--verbose' [FeRD (Frank Dana)] - Move -c option in --help [FeRD (Frank Dana)] - require statfs_magic.h only when reflink support enabled [Karel Zak] - use info rather than warning message [Karel Zak] irqtop: - fix compiler warning [-Werror=format-truncation=] [Karel Zak] - remove unused variable [Karel Zak] lib/fileutils: - fix compiler warning [Karel Zak] lib/logindefs: - fix compiler warning [-Werror=format-truncation=] [Karel Zak] lib/strutils: - add ul_strchr_escaped() [Karel Zak] libblkid: - (bsd) fix buffer pointer use [fuzzing] [Karel Zak] - (hfs) fix label use [fuzzing] [Karel Zak] - (hfs) fix make sure buffer is large enough [Karel Zak] - (mac) make sure block size is large enough [fuzzing] [Karel Zak] - (probe) fix size and offset overflows [fuzzing] [Karel Zak] - (swap) fix magic string memcmp [fuzzing] [Karel Zak] - simplify 'leaf' detection [Karel Zak] - update documentation of BLOCK_SIZE tag [Andrey Albershteyn] libfdisk: - (gpt) Add UUID for Marvell Armada 3700 Boot partition [Pali Rohár] - meson.build fix typo [Anatoly Pugachev] libmount: - fix and improve utab update on MS_MOVE [Karel Zak] - when moving a mount point, all sub mount entries in utab should also be updated [Franck Bui] libuuid: - (man) uuid_copy() -- add missing parenthesis [Andrew Price] - improve cache handling [d032747] logger: - make sure structured data are escaped [Karel Zak] loopdev: - set block_size when using LOOP_CONFIGURE [Hideki EIRAKU] losetup: - Fix typo for the --sector-size docs [Alberto Ruiz] lsblk: - fix JSON output when without --bytes [Karel Zak] lscpu: - keep bogomips locale output locale sensitive [Karel Zak] lsfd: - add static modifier to nodev_table [Masatake YAMATO] - delete __unused__ attribute for an used parameter [Masatake YAMATO] - fix compiler warning [-Werror=maybe-uninitialized] [Karel Zak] - fix crash triggered by an empty filter expression [Masatake YAMATO] lsirq: - improve --sort IRQ [Karel Zak] lslogins: - fix free() invalid pointer [Karel Zak] - improve prefixes interpretation [Karel Zak] lsns: - (man) add ip-netns to "SEE ALSO" section [Masatake YAMATO] - improve dependence on NS_GET_ ioctls [Karel Zak] meson: - fix compilation without systemd [Rosen Penev] - fix when HAVE_CLOCK_GETTIME is set [Nicolas Caramelli] more: - avoid infinite loop on --squeeze [Karel Zak] po: - merge changes [Karel Zak] - update de.po (from translationproject.org) [Mario Blättermann] - update hr.po (from translationproject.org) [Božidar Putanec] - update ja.po (from translationproject.org) [Takeshi Hamasaki] - update uk.po (from translationproject.org) [Yuri Chornoivan] po-man: - merge changes [Karel Zak] - update fr.po (from translationproject.org) [Frédéric Marchal] - update uk.po (from translationproject.org) [Yuri Chornoivan] sfdiks: - (man) fix example [Karel Zak] sulogin: - fix includes [Karel Zak] switch_root: - (man) fix return code description [Karel Zak] taskset: - fix use of err_affinity() [csbo98] tests: - don't compile lsfd/mkfds helper on macos, since it's linux only [Anatoly Pugachev] - fdisk/bsd update expected output for ppc64le [Chris Hofstaedtler] - fix misc/setarch run in a docker environment [Anatoly Pugachev] - make libmount tests more portable [Karel Zak] - report failed tests [Karel Zak] unshare: - Fix "you (user xxxx) don't exist" error when uid differs from primary gid [Sol Boucher] uuidd: - allow AF_INET in systemd service [Karel Zak] - remove also PrivateNetwork=yes from systemd service [Karel Zak] zramctl: - fix compiler warning [-Werror=maybe-uninitialized] [Karel Zak] Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit a6178c7ce784a826fce4f15a21fb0d067395ca3f Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Sep 12 06:04:36 2022 +0000 Core Update 171: Ship Bind Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit ceff14d956a92c0eecb8d0902af3a9d536dcd733 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Sat Aug 27 09:02:00 2022 +0200 bind: Update to 9.16.32 For details see: https://downloads.isc.org/isc/bind9/9.16.32/doc/arm/html/notes.html#notes-f… Excerpt from changelog: "5934. [func] Improve fetches-per-zone fetch limit logging to log the final allowed and spilled values of the fetch counters before the counter object gets destroyed. [GL #3461] 5933. [port] Automatically disable RSASHA1 and NSEC3RSASHA1 in named on Fedorda 33, Oracle Linux 9 and RHEL9 when they are disabled by the security policy. [GL #3469] 5932. [bug] Fix rndc dumpdb -expired and always include expired RRsets, not just for RBTDB_VIRTUAL time window. [GL #3462] 5929. [bug] The "max-zone-ttl" option in "dnssec-policy" was not fully effective; it was used for timing key rollovers but did not actually place an upper limit on TTLs when loading a zone. This has been corrected, and the documentation has been clarified to indicate that the old "max-zone-ttl" zone option is now ignored when "dnssec-policy" is in use. [GL #2918] 5924. [func] When it's necessary to use AXFR to respond to an IXFR request, a message explaining the reason is now logged at level info. [GL #2683] 5923. [bug] Fix inheritance for dnssec-policy when checking for inline-signing. [GL #3438] 5922. [bug] Forwarding of UPDATE message could fail with the introduction of netmgr. This has been fixed. [GL #3389]" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit c5f2199d82d64254b8fc1d9405b4cae8096b9663 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 11 08:51:42 2022 +0000 Core Update 171: Ship udev Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 6a1c2abd73323c30042624c9401f48d1a6a30169 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sun Aug 21 22:01:56 2022 +0200 udev: Update to version 3.2.11 - Update from version 3.2.6 to 3.2.11 - Update of rootfile - Changelog Release 3.2.11 Latest add actions workflows to check compilation on glibc and musl (devuan, alpine) by @ArsenArsen in #206 Add build instructions by @slicer69 in #207 src/libudev/conf-files.c: fix bug of using basename by @xfan1024 in #198 Permit eudev to work with rules which include escaped double-quotes by @slicer69 in #208 sync src/ata_id/ata_id.c by @bbonev in #201 sync src/v4l_id/v4l_id.c by @bbonev in #202 sync src/scsi_id/scsi_id.c by @bbonev in #203 sync src/mtd_probe/*.[ch] by @bbonev in #204 sparse: avoid clash with __bitwise and __force from 4.10 linux/types.… by @bbonev in #209 Silence deprecation warnings by @bbonev in #210 update CONTRIBUTING to reflect updated governance, clarify systemd commit hash requirements by @kaniini in #211 hashmap: don't initialize devt_hash_ops in the header by @kaniini in #212 Update to latest Devuan stable by @wwuck in #213 hwdb: sync with systemd/main by @bbonev in #215 Add getrandom(2) system call number for PowerPC by @Low-power in #216 No changelog for versions prior to 3.2.11 found. Looks like they are in nthe systemd releases and not easily extracted. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Acked-by: Michael Tremer <michael.tremer(a)ipfire.org> Acked-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 3915db3d4fa892ec36e9105366fb2c2c2bd2774c Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 11 08:50:47 2022 +0000 Core Update 171: Ship curl Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit a0cd3eb0f0212d2173ee0826e6b4ff1c468f7067 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sun Aug 21 22:01:18 2022 +0200 curl: Update to version 7.84.0 - Update from version 7.83.1 to 7.84.0 - Update of rootfile - Changelog 7.84.0 - June 27 2022 Changes: curl: add --rate to set max request rate per time unit curl: deprecate --random-file and --egd-file curl_version_info: add CURL_VERSION_THREADSAFE CURLINFO_CAPATH/CAINFO: get the default CA paths from libcurl lib: make curl_global_init() threadsafe when possible libssh2: add CURLOPT_SSH_HOSTKEYFUNCTION opts: deprecate RANDOM_FILE and EGDSOCKET socks: support unix sockets for socks proxy Bugfixes: aws-sigv4: fix potentional NULL pointer arithmetic bindlocal: don't use a random port if port number would wrap c-hyper: mark status line as status for Curl_client_write() ci: avoid `cmake -Hpath` CI: bump FreeBSD 13.0 to 13.1 ci: update github actions cmake: add libpsl support cmake: do not add libcurl.rc to the static libcurl library cmake: enable curl.rc for all Windows targets cmake: fix detecting libidn2 cmake: support adding a suffix to the OS value configure: skip libidn2 detection when winidn is used configure: use the SED value to invoke sed configure: warn about rustls being experimental content_encoding: return error on too many compression steps cookie: address secure domain overlay cookie: apply limits copyright.pl: parse and use .reuse/dep5 for skips copyright: make repository REUSE compliant curl.1: add a few see also --tls-max curl.1: mention exit code zero too curl: re-enable --no-remote-name curl_easy_pause.3: remove explanation of progress function curl_getdate.3: document that some illegal dates pass through Curl_parsenetrc: don't access local pwbuf outside of scope curl_url_set.3: clarify by default using known schemes only CURLOPT_ALTSVC.3: document the file format CURLOPT_FILETIME.3: fix the protocols this works with CURLOPT_HTTPHEADER.3: improve comment in example CURLOPT_NETRC.3: document the .netrc file format CURLOPT_PORT.3: We discourage using this option CURLOPT_RANGE.3: remove ranged upload advice digest: added detection of more syntax error in server headers digest: tolerate missing "realm" digest: unquote realm and nonce before processing DISABLED: disable 1021 for hyper again docs/cmdline-opts: add copyright and license identifier to each file docs/CONTRIBUTE.md: document the 'needs-votes' concept docs: clarify data replacement policy for MIME API doh: remove UNITTEST macro definition examples/crawler.c: use the curl license examples: remove fopen.c and rtsp.c FAQ: Clarify Windows double quote usage fopen: add Curl_fopen() for better overwriting of files ftp: restore protocol state after http proxy CONNECT ftp: when failing to do a secure GSSAPI login, fail hard GHA/hyper: enable debug in the build gssapi: improve handling of errors from gss_display_status gssapi: initialize gss_buffer_desc strings headers api: remove EXPERIMENTAL tag http2: always debug print stream id in decimal with %u http2: reject overly many push-promise headers http: restore header folding behavior hyper: use 'alt-used' krb5: return error properly on decode errors lib: make more protocol specific struct fields #ifdefed libcurl-security.3: add "Secrets in memory" libcurl-security.3: document CRLF header injection libssh: skip the fake-close when libssh does the right thing links: update dead links to the curl-wiki log2changes: do not indent empty lines [ci skip] macos9: remove partial support Makefile.am: fix portability issues Makefile.m32: delete obsolete options, improve -On [ci skip] Makefile.m32: delete two obsolete OpenSSL options [ci skip] Makefile.m32: stop forcing XP target with ipv6 enabled [ci skip] max-time.d: clarify max-time sets max transfer time mprintf: ignore clang non-literal format string netrc: check %USERPROFILE% as well on Windows netrc: support quoted strings ngtcp2: allow curl to send larger UDP datagrams ngtcp2: correct use of ngtcp2 and nghttp3 signed integer types ngtcp2: enable Linux GSO ngtcp2: extend QUIC transport parameters buffer ngtcp2: fix alert_read_func return value ngtcp2: fix typo in preprocessor condition ngtcp2: handle error from ngtcp2_conn_submit_crypto_data ngtcp2: send appropriate connection close error code ngtcp2: support boringssl crypto backend ngtcp2: use helper funcs to simplify TLS handshake integration ntlm: provide a fixed fake host name projects: fix third-party SSL library build paths for Visual Studio quic: add Curl_quic_idle quiche: support ca-fallback rand: stop detecting /dev/urandom in cross-builds remote-name.d: mention --output-dir runtests.pl: add the --repeat parameter to the --help output runtests: fix skipping tests not done event-based runtests: skip starting the ssh server if user name is lacking scripts/copyright.pl: fix the exclusion to not ignore man pages sectransp: check for a function defined when __BLOCKS__ is undefined select: return error from "lethal" poll/select errors server/sws: support spaces in the HTTP request path speed-limit/time.d: mention these affect transfers in either direction strcase: some optimisations test 2081: add a valid reply for the second request test 675: add missing CR so the test passes when run through Privoxy test414: add the '--resolve' keyword test681: verify --no-remote-name tests 266, 116 and 1540: add a small write delay tests/data/test1501: kill ftp server after slow LIST response tests/getpart: fix getpartattr to work with "data" and "data2" tests/server/sws.c: change the HTTP writedelay unit to milliseconds test{440,441,493,977}: add "HTTP proxy" keywords tool_getparam: fix --parallel-max maximum value constraint tool_operate: make sure --fail-with-body works with --retry transfer: fix potential NULL pointer dereference transfer: maintain --path-as-is after redirects transfer: upload performance; avoid tiny send url: free old conn better on reuse url: remove redundant #ifdefs in allocate_conn() url: URL encode the path when extracted, if spaces were set urlapi: make curl_url_set(url, CURLUPART_URL, NULL, 0) clear all parts urlapi: support CURLU_URLENCODE for curl_url_get() urldata: reduce size of a few struct fields urldata: remove three unused booleans from struct UserDefined urldata: store tcp_keepidle and tcp_keepintvl as ints version: allow stricmp() for sorting the feature list vtls: make curl_global_sslset thread-safe wolfssh.h: removed wolfssl: correct the failf() message when a handle can't be made wolfSSL: explicitly use compatibility layer x509asn1: mark msnprintf return as unchecked Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 71ee5abefec2f7150b9bfe0697ddb02a9df34807 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 11 08:48:31 2022 +0000 Core Update 171: Ship urlfilter.dat Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 3da3c1848e5f19c2f993b8a188df82e9920fbda8 Author: Jon Murphy <jon.murphy(a)ipfire.org> Date: Tue Sep 6 14:30:01 2022 -0500 urlfilter.dat: change ipcop to ipfire - Removed remnant from IPCop on URL Filter Logs Export page. Signed-off-by: Jon Murphy <jon.murphy(a)ipfire.org> Reviewed-by: Bernhard Bitsch <bbitsch(a)ipfire.org> commit a15a75829294d71530c05ddc0d4393d4e2c79831 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 11 08:46:48 2022 +0000 {libvirt,qemu,samba}: Bump package versions for glibc changes Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 8f4b4833c906f8f4b5368c55156015a4e5dd3ae1 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 11 08:45:39 2022 +0000 Core Update 171: Ship glibc 2.36 changes Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit c0637090b84d6e451b2d1b821d46c6e0e2bea256 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:53 2022 +0000 u-boot: Ignore LOAD segments with RWX permissions This is a new check in binutils which has to be disabled for some legacy bootloaders. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 2743dd7eba1d8abb2c3aabf31bdd1b6c5d3edea5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:52 2022 +0000 installer: Fix build against glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit cc388c104eb88af53cd2ecd37444ef72fe7e789e Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:51 2022 +0000 syslinux: Fix build against glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 34097d0bd3f6d1106e830e2c3b1d74ab9fbb13cf Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:50 2022 +0000 libvirt: Fix build against glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 9060a9c9074d753bad930b9458af2155baaccd57 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:49 2022 +0000 collected: Fix build with glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 692416302ca59ba4f94c0da85a66a1ce08c396e5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:48 2022 +0000 qemu: Fix build against glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit b62124581563f9926aae7f3eb36bfa526e30796c Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:47 2022 +0000 samba: Fix build with glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit fac5f144bb6fca3058ecfdf98b183e76c499c795 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:46 2022 +0000 hdparm: Fix build with glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 03d57d8f1e7cd3aef6be6c4a71e44227f329a68e Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:45 2022 +0000 libarchive: Fix build with glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 79c4be107dd463ac465942e40b8fab091bdf184e Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:44 2022 +0000 efivars: Fix build with glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 025c5d44de81c3b538487ecb4400e9eb6016356b Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:43 2022 +0000 make.sh: Bump toolchain version Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 2a4ab94d1bc46adb4d74788134eb1f1548ecfaa2 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:42 2022 +0000 glibc: Update to 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit a6098f80c241a196162529b3a5d1cddd0ffbdadb Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:41 2022 +0000 binutils: Update to 2.39 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 7eda830bfde9962fc53211b872698724dab34e4a Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:40 2022 +0000 gcc: Fix build against glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 11bea269b0a90fa3b956dc76cd78eefc33a8c65b Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Aug 15 17:17:39 2022 +0000 sysvinit: Fix build against glibc 2.36 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 608b536e78422bfc97e59260b1cc2b5a56dd466c Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 11 08:35:48 2022 +0000 Core Update 171: Ship kbd Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 5e39d521a85108ecd0ab32f2b6014f4b3b73b116 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Aug 7 09:44:19 2022 +0000 kbd: Update to 2.5.1 Changes since 2.2.0 can be obtained from https://github.com/legionus/kbd/releases. See also: #12857 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit ddbc886c4cf2977bddf7f645f6c19992e50710be Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 11 08:34:40 2022 +0000 Core Update 171: Ship and restart Squid Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 9ae861b273bf534e898717c552637fd3c4bea05e Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Thu Sep 8 19:00:30 2022 +0200 squid: Update to 5.7 For details see: http://www.squid-cache.org/Versions/v5/changesets/SQUID_5_7.html Excerpt from changelog: "Changes in squid-5.7 (05 Sep 2022): - Regression Fix: Typo in manager ACL - Bug 5186: noteDestinationsEnd check failed: transportWait - Bug 5160: Test suite fails with -flto=auto - Bug 3193 pt2: NTLM decoder truncating strings - Bug 5133: OpenSSL 3.0 support - ext_session_acl: fix TDB key lookup - forward_max_tries: Do not count discarded connections - ... and many compile and debugging fixes" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit 41a518ae1b638d6531c2c8891822e46f775f19b1 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 11 08:29:52 2022 +0000 Core Update 171: Ship Perl changes Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit ce455a00a647e6ecef540114a7a5ade658b0e038 Merge: 2fbd66d90 a981a365a Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Sep 11 08:20:29 2022 +0000 Merge branch 'next' into temp-c171-development commit 2fbd66d90e86a6e616d597de700d1382c427884f Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:42 2022 +0200 perl-Apache-Htpasswd: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 41b11b16547dfceb6e19e6d28f2812fd95d219ba Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:41 2022 +0200 perl-Archive-Tar: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 9c4ca202eb528cfa03ccec2421b8df4e3988dccb Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:40 2022 +0200 perl-Archive-Zip: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 7d9fb46e33ff12ab964dc6ba61cdfdfc12060496 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:39 2022 +0200 perl-BerkeleyDB: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit a56c5c1bd9fbe43048886943cb6457e57210eec0 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:38 2022 +0200 perl-CGI: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 21d7365c92f6a6dec8ff0d8aa04d5b49a03aa143 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:37 2022 +0200 perl-Canary-Stability: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit c32e4c315315fb18f6e39ae84bb90f899a5f9d4b Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:36 2022 +0200 perl-Compress-Zlib: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit db5479f558b7be4164d48ca9e7b3bd715ecc8c6b Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:35 2022 +0200 perl-Convert-TNEF: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 5e361fdebcb3a0e870bf842a94793419dd6c83cc Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:34 2022 +0200 perl-Convert-UUlib: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit e99c56a20b8abe6e5bf5dc4c0e6f45828544077a Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:33 2022 +0200 perl-Crypt-PasswdMD5: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit c8aec11f8b54ae8edab141fbad7dd339d7c966a7 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:32 2022 +0200 perl-DBD-SQLite: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 93c80c7b1e36e1bc596aada95517d34eb0f0cad8 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:31 2022 +0200 perl-DBI: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit b3bceb1f6b2f7273e066144f793e33b284479ce4 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:30 2022 +0200 perl-Data-UUID: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 9a88568665d01819b7edff4171bef9578ebf0e18 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:29 2022 +0200 perl-Device-Modem: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit c7f4d9d198ed3e83400a47e8730166fddafed7a4 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:28 2022 +0200 perl-Device-SerialPort: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 3c151aed9832e43237993f48c245fa3ab8991c8a Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:27 2022 +0200 perl-Digest-SHA1: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 83c83b347b1ebbd5064fa9d94d7f55842cb848dd Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:26 2022 +0200 perl-Digest-HMAC: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 748b960a45d65e096b455714adfb9b7523882858 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:25 2022 +0200 perl-Digest: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 0bc788757421f23b0765e8b243e77dd15f009a48 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:24 2022 +0200 perl-Email-Date-Format: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 210d41959ad2d6e5287ce9f818bbee15918b7506 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:23 2022 +0200 perl-ExtUtils-PkgConfig: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 976532247f3423513b4dbec58ad6936931fad6b4 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:22 2022 +0200 perl-File-Remove: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 4862cf1246b8544ac18681578053d4c9a15fb136 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:21 2022 +0200 perl-Font-TTF: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit ad6893021d69670bc353673abe8ba171429d1204 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:20 2022 +0200 perl-GD-Graph: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 58c7c288135b063637837b320cee1f1b42e5ac69 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:19 2022 +0200 perl-GD-TextUtil: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit fcd9e588d3ceb11df988e0225e5595c93dba60fe Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:18 2022 +0200 perl-GD: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 3d449ad1417880b9e05f44adc73e6c05b2d3481d Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:17 2022 +0200 perl-HTML-Parser: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit af585a72cb4f05ac98e4103e324502b0c69d157f Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:16 2022 +0200 perl-HTML-Tagset: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit ce01f64c81469fb8f6182d0649700cc0c0405a0e Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:15 2022 +0200 perl-HTML-Template: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit e21ae3a785cfb7d75c4c849e38bb976d48a15068 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:14 2022 +0200 perl-HTTP-Date: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 09e37c64d09c4542812f46d441f3bc98da67e98b Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:13 2022 +0200 perl-HTTP-Message: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 1c3fdbb10f6a38ae5c05d7d356e0f58d08049d41 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:12 2022 +0200 perl-IO-Socket-SSL: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 808aa3753284de1af7eb4ee20eee73ac365e2cfc Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:11 2022 +0200 perl-IO-Stringy: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit f70dba09a1484920c32e8446617bc74efd312fc4 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:10 2022 +0200 perl-IO-String: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit ca426ccf049faee40ff45169216feefdd73c09b0 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:09 2022 +0200 perl-Imager-QRCode: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 0889e4c137cc76061f96145031fce167cd22222b Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:08 2022 +0200 perl-Imager: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit d4db32be4d2e373b23f056d394fbc8eb763af7a2 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:07 2022 +0200 perl-LWP-Protocol-https: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 05c79f479302e89b3399306de9ccaad3ae2d8a1e Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:06 2022 +0200 perl-MIME-Base32: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit aed984f25ef92275cea19bac96d8e1797884cf76 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:05 2022 +0200 perl-MIME-Lite: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 9a898c94bd888ebb36e5df73baafbf9eaf8564df Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:04 2022 +0200 perl-MIME-Tools: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 7aaa698071442180be785c9089fb0f89981f7a10 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:03 2022 +0200 perl-Mail-Tools: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 4fd0eea5f308e25c3a41e32104305496f615f698 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:02 2022 +0200 perl-Module-Build: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 0d3e6dd3929c849a45210b938701666a3ea032a1 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:01 2022 +0200 perl-Module-Install: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit c300a993d0a600f9eb293f362d349ed8f444d6cb Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:43:00 2022 +0200 perl-Module-ScanDeps: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 59aac1c61dbff7e8a74a4cfd6013a0d44280f719 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:59 2022 +0200 perl-Net-CIDR-Lite: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit e605c8dd8d26c6da0f69b80387beb4855ed3703e Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:58 2022 +0200 perl-Net-DNS: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 5d62cade3d4474f70efb5dd62b371059970a2eba Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:57 2022 +0200 perl-Net-HTTP: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 0dcf7b22bb88f6a01c97a93f74cff792f1a8a983 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:56 2022 +0200 perl-Net-IPv4Addr: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 33f4cbf04af5d7fcbc4e288af05311b51006ea43 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:55 2022 +0200 perl-Net-Server: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit db9b30dc61ab4a430b03b1ebc4261976190cff7c Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:54 2022 +0200 perl-Net-Telnet: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 63ba8d2f9ada06a5ff6be19d24738f234eb43ed7 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:53 2022 +0200 perl-NetAddr-IP: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 54bc3ecda5059a67b5ea104660eec056fa16b3d5 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:52 2022 +0200 perl-Net_SSLeay: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 6251450b950d1689f0b58e81faf4d0c552db87cd Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:51 2022 +0200 perl-PDF-API2: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 3609c7e4d5708d1b5870e4c0ba86a55f12a3fa63 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:50 2022 +0200 perl-Sort-Naturally: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 378777d46279b815eb3c5cfb7c46cc0aa8af36f3 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:49 2022 +0200 perl-Switch: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit e9ce9aea39567f34c14f5b37481d6cc929beb349 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:48 2022 +0200 perl-Text-CSV_XS: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit c0ec961a1a9bfc3a54f7c3e12f5fe63083e0cdaa Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:47 2022 +0200 perl-Text-Tabs+Wrap: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 834e0bcce6f526e14ca51d65161bc79a742c7953 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:46 2022 +0200 perl-Try-Tiny: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 57bf32920c624767ad398cdbb5c0b76069c74211 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:45 2022 +0200 perl-URI-Encode: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 0d0d0de6b1c746fa7c0f1d59ea2da16c613474c7 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:44 2022 +0200 perl-URI: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 5b5cf76c3575ced6190af66d4a01b02c43a899b4 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:43 2022 +0200 perl-Unix-Syslog: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 63e9047970005fb4f1cdbdc39399367807d308c2 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:42 2022 +0200 perl-XML-Parser: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 02f36960265421b7a041210c318c1ea03383a98e Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:41 2022 +0200 perl-YAML-Tiny: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 061b0e067ec0266aefbeb649eb7ea9b2a4354f37 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:40 2022 +0200 perl-libwww: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 5e75c717e8e14faa4c5f39e4bc3145d6dc3f601a Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:39 2022 +0200 rrdtool: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 2a42c557203dc8657781fad35dbafb692b3a16a6 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:38 2022 +0200 liboping: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 75ccec947c1c7bab754b61e6d14efad1387a3f48 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:37 2022 +0200 libloc: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit cb6bf1ee7f7bf724184023e06e37517db8508001 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:36 2022 +0200 swatch: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 0133d507d3cb025440da24016b7e99596199ceba Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:35 2022 +0200 netsnmpd: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 287b9662079968641b0802267998d9b97c50031b Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:34 2022 +0200 mpfire: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 1431b7066e8ea43c595d12290e1ba20afc3bcfc6 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:33 2022 +0200 guardian: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit e0c4900717ea89c35cdcd36f4d04c3d8980a1c3e Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:32 2022 +0200 gnump3d: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 5bbc59b88cbb68853e8843dfe7bc0095c7b80f2f Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:31 2022 +0200 foomatic: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 5e339063faa7076e1893d15dfcb3ec4bc8a073a6 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:30 2022 +0200 perl-inotify2: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 5f94e693c95fa7457e1510ced0124394240d3924 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:29 2022 +0200 perl-gettext: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit b4c17f0a66ac39a5600e2e545562331bfe166390 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:28 2022 +0200 perl-common-sense: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 898f3e335cfc58a9cf70e1e77623fb1c14102942 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:27 2022 +0200 perl-TimeDate: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit ae681241a47109920f995529ac932e45aa5c0eb8 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:26 2022 +0200 perl-Parse-Yapp: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 16f5f45f34c318726a478db03d8aec54bde6f33d Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:25 2022 +0200 perl-Net-SMTP-SSL: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 327f007bf1ef9bb7df69aa3b140b968b6f059994 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:24 2022 +0200 perl-Net-IP: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 592bb59006f7ce930775db3292ba78392379d416 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:23 2022 +0200 perl-MIME-Base64: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 4880f2edbd212d9806c148509818cc704b650800 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:22 2022 +0200 perl-JSON: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 6773041e9196fbbafda1a96a7fa1052a69350f5f Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:21 2022 +0200 perl-File-Tail: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 248a2cfe2cdf11bcf058df2c25acf4a28f72f7d9 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:20 2022 +0200 perl-File-ReadBackwards: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit b7602caac3753ed6edb35c48967ba00c02417006 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:19 2022 +0200 perl-Date-Manip: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit bf0ec79839806ce7b12b87b6f0c0e9aa5a732c67 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:18 2022 +0200 perl-Date-Calc: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 6f5a90c37248686d0b73457dff526921ec497e6d Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:17 2022 +0200 perl-Carp-Clan: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit e075fd5dc798e50fb0020ebbe56b6803a9695508 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:16 2022 +0200 perl-Authen-SASL: Update to perl 5.36.0 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 9d110cba45e9a40902beb3766bb00970ec2d57f3 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Aug 16 12:42:15 2022 +0200 perl: Update to version 5.36.0 - Update from version 5.32.1 to 5.36.0 - Update of rootfile - Changelog is too large to include here. Version 5.34.0 can be found at https://perldoc.perl.org/5.34.0/perldelta Version 5.34.1 can be found at https://perldoc.perl.org/5.34.1/perldelta Version 5.36.0 can be found at https://perldoc.perl.org/5.36.0/perldelta Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 8c179661f01b7f99012985892f1c81c0cd78bd62 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Thu Sep 1 21:16:16 2022 +0000 Core Update 171: Ship index.cgi Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit a61509b99580fcffb30025954c3e0ba8faf17235 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Sun Aug 14 16:28:49 2022 +0000 index.cgi: Show deprecation warning for armv6l Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit ae84a789f8247f9d140ae7159a46a3859ce24ecf Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Aug 31 23:00:21 2022 +0200 hplip: Update to version 3.22.6 - Update from version 3.22.4 to 3.22.6 - Update of rootfile - Changelog HPLIP 3.22.6 - This release has the following changes: Added support for following new Distro's: Mx Linux 21.1 Ubuntu 22.04 Fedora 36 Added support for the following new Printers: HP Color LaserJet Managed MFP E785dn HP Color LaserJet Managed MFP E78523dn HP Color LaserJet Managed MFP E78528dn HP Color LaserJet Managed MFP E786dn HP Color LaserJet Managed MFP E786 Core Printer HP Color LaserJet Managed MFP E78625dn HP Color LaserJet Managed FlowMFP E786z HP Color LaserJet Managed Flow MFP E78625z HP Color LaserJet Managed MFP E78630dn HP Color LaserJet Managed Flow MFP E78630z HP Color LaserJet Managed MFP E78635dn HP Color LaserJet Managed Flow MFP E78635z HP LaserJet Managed MFP E731dn HP LaserJet Managed MFP E731 Core Printer HP LaserJet Managed MFP E73130dn HP LaserJet Managed Flow MFP E731z HP LaserJet Managed Flow MFP E73130z HP LaserJet Managed MFP E73135dn HP LaserJet Managed Flow MFP E73135z HP LaserJet Managed MFP E73140dn HP LaserJet Managed Flow MFP E73140z HP Color LaserJet Managed MFP E877dn HP Color LaserJet Managed MFP E877 Core Printer HP Color LaserJet Managed MFP E87740dn HP Color LaserJet Managed Flow MFP E877z HP Color LaserJet Managed Flow MFP E87740z HP Color LaserJet Managed MFP E87750dn HP Color LaserJet Managed Flow MFP E87750z HP Color LaserJet Managed MFP E87760dn HP Color LaserJet Managed Flow MFP E87760z HP Color LaserJet Managed MFP E87770dn HP Color LaserJet Managed Flow MFP E87770z HP LaserJet Managed MFP E826dn HP LaserJet Managed MFP E826 Core Printer HP LaserJet Managed MFP E82650dn HP LaserJet Managed Flow MFP E826z HP LaserJet Managed Flow MFP E82650z HP LaserJet Managed MFP E82660dn HP LaserJet Managed Flow MFP E82660z HP LaserJet Managed MFP E82670dn HP LaserJet Managed Flow MFP E82670z HP LaserJet Managed MFP E730dn HP LaserJet Managed MFP E73025dn HP LaserJet Managed MFP E73030dn HP LaserJet Pro MFP 3101fdwe HP LaserJet Pro MFP 3101fdw HP LaserJet Pro MFP 3102fdwe HP LaserJet Pro MFP 3102fdw HP LaserJet Pro MFP 3103fdw HP LaserJet Pro MFP 3104fdw HP LaserJet Pro MFP 3101fdne HP LaserJet Pro MFP 3101fdn HP LaserJet Pro MFP 3102fdne HP LaserJet Pro MFP 3102fdn HP LaserJet Pro MFP 3103fdn HP LaserJet Pro MFP 3104fdn HP LaserJet Pro 3001dwe HP LaserJet Pro 3001dw HP LaserJet Pro 3002dwe HP LaserJet Pro 3002dw HP LaserJet Pro 3003dw HP LaserJet Pro 3004dw HP LaserJet Pro 3001dne HP LaserJet Pro 3001dn HP LaserJet Pro 3002dne HP LaserJet Pro 3002dn HP LaserJet Pro 3003dn HP LaserJet Pro 3004dn Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> commit 67eff38da8605bdc840ebbfbe0157d43353fdcf1 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Thu Sep 1 21:14:33 2022 +0000 Start Core Update 171 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. ee2e7db90bf12ab1c028f5f3b955afaf9cdf76f5
by Michael Tremer 17 Oct '22

17 Oct '22

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. ee2e7db90bf12ab1c028f5f3b955afaf9cdf76f5
by Peter Müller 17 Oct '22

17 Oct '22

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. a40977958b051de976b515b30be1fc3f17f19785
by Michael Tremer 14 Oct '22

14 Oct '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via a40977958b051de976b515b30be1fc3f17f19785 (commit) via cdc5f9705ac252e099f89101dc4179d6e06179c7 (commit) from 437fb4d72bd2814946d6bfc0425c36ae98b04284 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit a40977958b051de976b515b30be1fc3f17f19785 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Oct 10 18:41:10 2022 +0000 core171: Ship dhcp Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit cdc5f9705ac252e099f89101dc4179d6e06179c7 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Fri Oct 7 21:59:21 2022 +0200 dhcp: Update to 4.4.3-P1 For details see: https://downloads.isc.org/isc/dhcp/4.4.3-P1/dhcp-4.4.3-P1-RELNOTES Changelog since 4.4.1 is rather long... Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/{oldcore/111 => core/171}/filelists/dhcp | 0 config/rootfiles/core/171/update.sh | 1 + lfs/dhcp | 6 +++--- 3 files changed, 4 insertions(+), 3 deletions(-) copy config/rootfiles/{oldcore/111 => core/171}/filelists/dhcp (100%) Difference in files: diff --git a/config/rootfiles/core/171/filelists/dhcp b/config/rootfiles/core/171/filelists/dhcp new file mode 120000 index 000000000..32d8da443 --- /dev/null +++ b/config/rootfiles/core/171/filelists/dhcp @@ -0,0 +1 @@ +../../../common/dhcp \ No newline at end of file diff --git a/config/rootfiles/core/171/update.sh b/config/rootfiles/core/171/update.sh index 3174122ba..abbbd67fb 100644 --- a/config/rootfiles/core/171/update.sh +++ b/config/rootfiles/core/171/update.sh @@ -245,6 +245,7 @@ fi if [ -f /var/ipfire/proxy/enable ]; then /etc/init.d/squid start fi +/etc/init.d/dhcp restart # Regenerate all initrds dracut --regenerate-all --force diff --git a/lfs/dhcp b/lfs/dhcp index 93471954f..6849e7dff 100644 --- a/lfs/dhcp +++ b/lfs/dhcp @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 4.4.1 +VER = 4.4.3-P1 THISAPP = dhcp-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = fd3c65d8802c42cb936ff75ee19784e4f533c9b36aa08a61280aa8acae5cf581c67cd70222b46eb24b1f9a571e1c028cc853952feac4b6a12f9b7d7d3dbc2fc9 +$(DL_FILE)_BLAKE2 = 6cc16f7472efb1e1f6b7a83cafd9a81a16f10af7361da079c48a5eff0d9e310f475dcc82e984c20936c64867183402d00d26e5366e75bf7463ec2aea4a6f68a4 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. a40977958b051de976b515b30be1fc3f17f19785
by Michael Tremer 10 Oct '22

10 Oct '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via a40977958b051de976b515b30be1fc3f17f19785 (commit) via cdc5f9705ac252e099f89101dc4179d6e06179c7 (commit) from 437fb4d72bd2814946d6bfc0425c36ae98b04284 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit a40977958b051de976b515b30be1fc3f17f19785 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Oct 10 18:41:10 2022 +0000 core171: Ship dhcp Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit cdc5f9705ac252e099f89101dc4179d6e06179c7 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Fri Oct 7 21:59:21 2022 +0200 dhcp: Update to 4.4.3-P1 For details see: https://downloads.isc.org/isc/dhcp/4.4.3-P1/dhcp-4.4.3-P1-RELNOTES Changelog since 4.4.1 is rather long... Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/{oldcore/111 => core/171}/filelists/dhcp | 0 config/rootfiles/core/171/update.sh | 1 + lfs/dhcp | 6 +++--- 3 files changed, 4 insertions(+), 3 deletions(-) copy config/rootfiles/{oldcore/111 => core/171}/filelists/dhcp (100%) Difference in files: diff --git a/config/rootfiles/core/171/filelists/dhcp b/config/rootfiles/core/171/filelists/dhcp new file mode 120000 index 000000000..32d8da443 --- /dev/null +++ b/config/rootfiles/core/171/filelists/dhcp @@ -0,0 +1 @@ +../../../common/dhcp \ No newline at end of file diff --git a/config/rootfiles/core/171/update.sh b/config/rootfiles/core/171/update.sh index 3174122ba..abbbd67fb 100644 --- a/config/rootfiles/core/171/update.sh +++ b/config/rootfiles/core/171/update.sh @@ -245,6 +245,7 @@ fi if [ -f /var/ipfire/proxy/enable ]; then /etc/init.d/squid start fi +/etc/init.d/dhcp restart # Regenerate all initrds dracut --regenerate-all --force diff --git a/lfs/dhcp b/lfs/dhcp index 93471954f..6849e7dff 100644 --- a/lfs/dhcp +++ b/lfs/dhcp @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 4.4.1 +VER = 4.4.3-P1 THISAPP = dhcp-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = fd3c65d8802c42cb936ff75ee19784e4f533c9b36aa08a61280aa8acae5cf581c67cd70222b46eb24b1f9a571e1c028cc853952feac4b6a12f9b7d7d3dbc2fc9 +$(DL_FILE)_BLAKE2 = 6cc16f7472efb1e1f6b7a83cafd9a81a16f10af7361da079c48a5eff0d9e310f475dcc82e984c20936c64867183402d00d26e5366e75bf7463ec2aea4a6f68a4 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 437fb4d72bd2814946d6bfc0425c36ae98b04284
by Michael Tremer 10 Oct '22

10 Oct '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via 437fb4d72bd2814946d6bfc0425c36ae98b04284 (commit) via 692d18285f59f78cfea96b5e2d9f21bed01360ba (commit) via dc84e16d4d058460febe9332435307d93d36d82e (commit) from ca4de263184e2d62239cc6d63caf2a0812d492b5 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 437fb4d72bd2814946d6bfc0425c36ae98b04284 Author: Jon Murphy <jon.murphy(a)ipfire.org> Date: Fri Oct 7 13:45:17 2022 -0500 manualpages: add and update help links to Wiki - add help links for two new ipblocklist WebGUI pages - update help links to proxy accounting - add links to OpenVPN Net-to-Net Statistics, MD Raid State, Update Accelerator, OpenVPN Roadwarrior Connections Log Signed-off-by: Jon Murphy <jon.murphy(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 692d18285f59f78cfea96b5e2d9f21bed01360ba Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Oct 7 16:24:15 2022 +0000 glibc: Fix added whitespace in syslog messages Fixes: #12949 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit dc84e16d4d058460febe9332435307d93d36d82e Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Oct 7 16:21:16 2022 +0000 firewall: Fix missing whitespace for blocklist messages Fixes: #12934 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/cfgroot/manualpages | 12 +- config/firewall/rules.pl | 2 +- lfs/glibc | 2 + src/patches/glibc-2.36-syslog-large-messages.patch | 336 +++++++++++++++++++++ src/patches/glibc-2.36-syslog-whitespace-fix.patch | 58 ++++ 5 files changed, 404 insertions(+), 6 deletions(-) create mode 100644 src/patches/glibc-2.36-syslog-large-messages.patch create mode 100644 src/patches/glibc-2.36-syslog-whitespace-fix.patch Difference in files: diff --git a/config/cfgroot/manualpages b/config/cfgroot/manualpages index 0b904de42..e99986899 100644 --- a/config/cfgroot/manualpages +++ b/config/cfgroot/manualpages @@ -24,19 +24,19 @@ netexternal.cgi=configuration/status/network_ext netinternal.cgi=configuration/status/network_int netother.cgi=configuration/status/network_other netovpnrw.cgi=configuration/status/network_ovpnrw -#netovpnsrv.cgi= +netovpnsrv.cgi=configuration/status/network_ovpnn2n wio.cgi=addons/wio hardwaregraphs.cgi=configuration/status/hardware_diagrams connections.cgi=configuration/status/connections traffic.cgi=configuration/status/nettraffic -#mdstat.cgi= +mdstat.cgi=configuration/status/mdstat # Network menu zoneconf.cgi=configuration/network/zoneconf dns.cgi=dns proxy.cgi=configuration/network/proxy urlfilter.cgi=configuration/network/proxy/url-filter -#updatexlrator.cgi=configuration/network/proxy/update_accelerator +updatexlrator.cgi=configuration/network/proxy/update_accelerator dhcp.cgi=configuration/network/dhcp captive.cgi=configuration/network/captive connscheduler.cgi=configuration/network/connectionscheduler @@ -60,6 +60,7 @@ firewall.cgi=configuration/firewall fwhosts.cgi=configuration/firewall/fwgroups optionsfw.cgi=configuration/firewall/options ids.cgi=configuration/firewall/ips +ipblocklist.cgi=configuration/firewall/ipblocklist location-block.cgi=configuration/firewall/geoip-block wireless.cgi=configuration/firewall/accesstoblue iptables.cgi=configuration/firewall/iptables @@ -76,12 +77,13 @@ logs.cgi/summary.dat=configuration/logs/summary logs.cgi/config.dat=configuration/logs/logsettings logs.cgi/proxylog.dat=configuration/logs/proxy logs.cgi/calamaris.dat=configuration/logs/proxyreports -logs.cgi/accounting.dat=addons/squid-accounting +accounting.cgi=addons/accounting logs.cgi/firewalllog.dat=configuration/logs/firewall logs.cgi/firewalllogip.dat=configuration/logs/firewall-ip logs.cgi/firewalllogport.dat=configuration/logs/firewall-port logs.cgi/firewalllogcountry.dat=configuration/logs/firewall-country logs.cgi/ids.dat=configuration/logs/ips -#logs.cgi/ovpnclients.dat= +logs.cgi/ipblocklists.dat=configuration/firewall/ipblocklist +logs.cgi/ovpnclients.dat=configuration/logs/ovpnrw logs.cgi/urlfilter.dat=configuration/logs/url-filter logs.cgi/log.dat=configuration/logs/system diff --git a/config/firewall/rules.pl b/config/firewall/rules.pl index e1d7718a8..30ad20df1 100644 --- a/config/firewall/rules.pl +++ b/config/firewall/rules.pl @@ -760,7 +760,7 @@ sub ipblocklist () { # Check if logging is enabled. if($blocklistsettings{'LOGGING'} eq "on") { # Create logging rule. - run("$IPTABLES -A ${blocklist}_DROP -j LOG -m limit --limit 10/second --log-prefix \"BLKLST_$blocklist\" "); + run("$IPTABLES -A ${blocklist}_DROP -j LOG -m limit --limit 10/second --log-prefix \"BLKLST_$blocklist \""); } # Create Drop rule. diff --git a/lfs/glibc b/lfs/glibc index 798f3ed8a..b4dc7b7eb 100644 --- a/lfs/glibc +++ b/lfs/glibc @@ -112,6 +112,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @mkdir $(DIR_SRC)/glibc-build cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-localedef-no-archive.patch + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.36-syslog-large-messages.patch + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/glibc-2.36-syslog-whitespace-fix.patch ifneq "$(TOOLCHAIN)" "1" ifeq "$(BUILD_ARCH)" "x86_64" diff --git a/src/patches/glibc-2.36-syslog-large-messages.patch b/src/patches/glibc-2.36-syslog-large-messages.patch new file mode 100644 index 000000000..a490e7c59 --- /dev/null +++ b/src/patches/glibc-2.36-syslog-large-messages.patch @@ -0,0 +1,336 @@ +From b0e7888d1fa2dbd2d9e1645ec8c796abf78880b9 Mon Sep 17 00:00:00 2001 +From: Adhemerval Zanella <adhemerval.zanella(a)linaro.org> +Date: Sun, 28 Aug 2022 16:52:53 -0300 +Subject: [PATCH] syslog: Fix large messages (BZ#29536) + +The a583b6add407c17cd change did not handle large messages that +would require a heap allocation correctly, where the message itself +is not take in consideration. + +This patch fixes it and extend the tst-syslog to check for large +messages as well. + +Checked on x86_64-linux-gnu. + +Reviewed-by: Siddhesh Poyarekar <siddhesh(a)sourceware.org> +(cherry picked from commit 52a5be0df411ef3ff45c10c7c308cb92993d15b1) +--- + misc/syslog.c | 18 +++--- + misc/tst-syslog.c | 152 +++++++++++++++++++++++++++++++++++++++------- + 2 files changed, 142 insertions(+), 28 deletions(-) + +diff --git a/misc/syslog.c b/misc/syslog.c +index 554089bfc4..b88f66c835 100644 +--- a/misc/syslog.c ++++ b/misc/syslog.c +@@ -193,28 +193,32 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, + int vl = __vsnprintf_internal (bufs + l, sizeof bufs - l, fmt, apc, + mode_flags); + if (0 <= vl && vl < sizeof bufs - l) +- { +- buf = bufs; +- bufsize = l + vl; +- } ++ buf = bufs; ++ bufsize = l + vl; + + va_end (apc); + } + + if (buf == NULL) + { +- buf = malloc (l * sizeof (char)); ++ buf = malloc ((bufsize + 1) * sizeof (char)); + if (buf != NULL) + { + /* Tell the cancellation handler to free this buffer. */ + clarg.buf = buf; + + if (has_ts) +- __snprintf (bufs, sizeof bufs, ++ __snprintf (buf, l + 1, + SYSLOG_HEADER (pri, timestamp, &msgoff, pid)); + else +- __snprintf (bufs, sizeof bufs, ++ __snprintf (buf, l + 1, + SYSLOG_HEADER_WITHOUT_TS (pri, &msgoff)); ++ ++ va_list apc; ++ va_copy (apc, ap); ++ __vsnprintf_internal (buf + l, bufsize - l + 1, fmt, apc, ++ mode_flags); ++ va_end (apc); + } + else + { +diff --git a/misc/tst-syslog.c b/misc/tst-syslog.c +index e550d15796..1d332ece53 100644 +--- a/misc/tst-syslog.c ++++ b/misc/tst-syslog.c +@@ -68,21 +68,19 @@ static const int priorities[] = + LOG_DEBUG + }; + +-enum +- { +- ident_length = 64, +- msg_length = 64 +- }; ++#define IDENT_LENGTH 64 ++#define MSG_LENGTH 1024 + + #define SYSLOG_MSG_BASE "syslog_message" + #define OPENLOG_IDENT "openlog_ident" ++static char large_message[MSG_LENGTH]; + + struct msg_t + { + int priority; + int facility; +- char ident[ident_length]; +- char msg[msg_length]; ++ char ident[IDENT_LENGTH]; ++ char msg[MSG_LENGTH]; + pid_t pid; + }; + +@@ -147,6 +145,37 @@ check_syslog_message (const struct msg_t *msg, int msgnum, int options, + return true; + } + ++static void ++send_syslog_large (int options) ++{ ++ int facility = LOG_USER; ++ int priority = LOG_INFO; ++ ++ syslog (facility | priority, "%s %d %d", large_message, facility, ++ priority); ++} ++ ++static void ++send_vsyslog_large (int options) ++{ ++ int facility = LOG_USER; ++ int priority = LOG_INFO; ++ ++ call_vsyslog (facility | priority, "%s %d %d", large_message, facility, ++ priority); ++} ++ ++static bool ++check_syslog_message_large (const struct msg_t *msg, int msgnum, int options, ++ pid_t pid) ++{ ++ TEST_COMPARE (msg->facility, LOG_USER); ++ TEST_COMPARE (msg->priority, LOG_INFO); ++ TEST_COMPARE_STRING (msg->msg, large_message); ++ ++ return false; ++} ++ + static void + send_openlog (int options) + { +@@ -179,6 +208,17 @@ send_openlog (int options) + closelog (); + } + ++static void ++send_openlog_large (int options) ++{ ++ /* Define a non-default IDENT and a not default facility. */ ++ openlog (OPENLOG_IDENT, options, LOG_LOCAL0); ++ ++ syslog (LOG_INFO, "%s %d %d", large_message, LOG_LOCAL0, LOG_INFO); ++ ++ closelog (); ++} ++ + static bool + check_openlog_message (const struct msg_t *msg, int msgnum, + int options, pid_t pid) +@@ -189,7 +229,7 @@ check_openlog_message (const struct msg_t *msg, int msgnum, + int expected_priority = priorities[msgnum % array_length (priorities)]; + TEST_COMPARE (msg->priority, expected_priority); + +- char expected_ident[ident_length]; ++ char expected_ident[IDENT_LENGTH]; + snprintf (expected_ident, sizeof (expected_ident), "%s%s%.0d%s:", + OPENLOG_IDENT, + options & LOG_PID ? "[" : "", +@@ -211,15 +251,38 @@ check_openlog_message (const struct msg_t *msg, int msgnum, + return true; + } + ++static bool ++check_openlog_message_large (const struct msg_t *msg, int msgnum, ++ int options, pid_t pid) ++{ ++ char expected_ident[IDENT_LENGTH]; ++ snprintf (expected_ident, sizeof (expected_ident), "%s%s%.0d%s:", ++ OPENLOG_IDENT, ++ options & LOG_PID ? "[" : "", ++ options & LOG_PID ? pid : 0, ++ options & LOG_PID ? "]" : ""); ++ ++ TEST_COMPARE_STRING (msg->ident, expected_ident); ++ TEST_COMPARE_STRING (msg->msg, large_message); ++ TEST_COMPARE (msg->priority, LOG_INFO); ++ TEST_COMPARE (msg->facility, LOG_LOCAL0); ++ ++ return false; ++} ++ + static struct msg_t + parse_syslog_msg (const char *msg) + { + struct msg_t r = { .pid = -1 }; + int number; + ++#define STRINPUT(size) XSTRINPUT(size) ++#define XSTRINPUT(size) "%" # size "s" ++ + /* The message in the form: +- <179>Apr 8 14:51:19 tst-syslog: syslog message 176 3 */ +- int n = sscanf (msg, "<%3d>%*s %*d %*d:%*d:%*d %32s %64s %*d %*d", ++ <179>Apr 8 14:51:19 tst-syslog: message 176 3 */ ++ int n = sscanf (msg, "<%3d>%*s %*d %*d:%*d:%*d " STRINPUT(IDENT_LENGTH) ++ " " STRINPUT(MSG_LENGTH) " %*d %*d", + &number, r.ident, r.msg); + TEST_COMPARE (n, 3); + +@@ -246,7 +309,7 @@ parse_syslog_console (const char *msg) + + /* The message in the form: + openlog_ident: syslog_message 128 0 */ +- int n = sscanf (msg, "%32s %64s %d %d", ++ int n = sscanf (msg, STRINPUT(IDENT_LENGTH) " " STRINPUT(MSG_LENGTH) " %d %d", + r.ident, r.msg, &facility, &priority); + TEST_COMPARE (n, 4); + +@@ -281,7 +344,7 @@ check_syslog_udp (void (*syslog_send)(int), int options, + int msgnum = 0; + while (1) + { +- char buf[512]; ++ char buf[2048]; + size_t l = xrecvfrom (server_udp, buf, sizeof (buf), 0, + (struct sockaddr *) &addr, &addrlen); + buf[l] = '\0'; +@@ -325,7 +388,7 @@ check_syslog_tcp (void (*syslog_send)(int), int options, + + int client_tcp = xaccept (server_tcp, NULL, NULL); + +- char buf[512], *rb = buf; ++ char buf[2048], *rb = buf; + size_t rbl = sizeof (buf); + size_t prl = 0; /* Track the size of the partial record. */ + int msgnum = 0; +@@ -393,20 +456,34 @@ check_syslog_console_read (FILE *fp) + } + + static void +-check_syslog_console (void) ++check_syslog_console_read_large (FILE *fp) ++{ ++ char buf[2048]; ++ TEST_VERIFY (fgets (buf, sizeof (buf), fp) != NULL); ++ struct msg_t msg = parse_syslog_console (buf); ++ ++ TEST_COMPARE_STRING (msg.ident, OPENLOG_IDENT ":"); ++ TEST_COMPARE_STRING (msg.msg, large_message); ++ TEST_COMPARE (msg.priority, LOG_INFO); ++ TEST_COMPARE (msg.facility, LOG_LOCAL0); ++} ++ ++static void ++check_syslog_console (void (*syslog_send)(int), ++ void (*syslog_check)(FILE *fp)) + { + xmkfifo (_PATH_CONSOLE, 0666); + + pid_t sender_pid = xfork (); + if (sender_pid == 0) + { +- send_openlog (LOG_CONS); ++ syslog_send (LOG_CONS); + _exit (0); + } + + { + FILE *fp = xfopen (_PATH_CONSOLE, "r+"); +- check_syslog_console_read (fp); ++ syslog_check (fp); + xfclose (fp); + } + +@@ -425,16 +502,28 @@ send_openlog_callback (void *clousure) + } + + static void +-check_syslog_perror (void) ++send_openlog_callback_large (void *clousure) ++{ ++ int options = *(int *) clousure; ++ send_openlog_large (options); ++} ++ ++static void ++check_syslog_perror (bool large) + { + struct support_capture_subprocess result; +- result = support_capture_subprocess (send_openlog_callback, ++ result = support_capture_subprocess (large ++ ? send_openlog_callback_large ++ : send_openlog_callback, + &(int){LOG_PERROR}); + + FILE *mfp = fmemopen (result.err.buffer, result.err.length, "r"); + if (mfp == NULL) + FAIL_EXIT1 ("fmemopen: %m"); +- check_syslog_console_read (mfp); ++ if (large) ++ check_syslog_console_read_large (mfp); ++ else ++ check_syslog_console_read (mfp); + xfclose (mfp); + + support_capture_subprocess_check (&result, "tst-openlog-child", 0, +@@ -462,10 +551,31 @@ do_test (void) + check_syslog_tcp (send_openlog, LOG_PID, check_openlog_message); + + /* Check the LOG_CONS option. */ +- check_syslog_console (); ++ check_syslog_console (send_openlog, check_syslog_console_read); + + /* Check the LOG_PERROR option. */ +- check_syslog_perror (); ++ check_syslog_perror (false); ++ ++ /* Similar tests as before, but with a large message to trigger the ++ syslog path that uses dynamically allocated memory. */ ++ memset (large_message, 'a', sizeof large_message - 1); ++ large_message[sizeof large_message - 1] = '\0'; ++ ++ check_syslog_udp (send_syslog_large, 0, check_syslog_message_large); ++ check_syslog_tcp (send_syslog_large, 0, check_syslog_message_large); ++ ++ check_syslog_udp (send_vsyslog_large, 0, check_syslog_message_large); ++ check_syslog_tcp (send_vsyslog_large, 0, check_syslog_message_large); ++ ++ check_syslog_udp (send_openlog_large, 0, check_openlog_message_large); ++ check_syslog_tcp (send_openlog_large, 0, check_openlog_message_large); ++ ++ check_syslog_udp (send_openlog_large, LOG_PID, check_openlog_message_large); ++ check_syslog_tcp (send_openlog_large, LOG_PID, check_openlog_message_large); ++ ++ check_syslog_console (send_openlog_large, check_syslog_console_read_large); ++ ++ check_syslog_perror (true); + + return 0; + } +-- +2.30.2 + diff --git a/src/patches/glibc-2.36-syslog-whitespace-fix.patch b/src/patches/glibc-2.36-syslog-whitespace-fix.patch new file mode 100644 index 000000000..0e80cea7f --- /dev/null +++ b/src/patches/glibc-2.36-syslog-whitespace-fix.patch @@ -0,0 +1,58 @@ +From 645d94808aaa90fb1b20a25ff70bb50d9eb1d55b Mon Sep 17 00:00:00 2001 +From: Adhemerval Zanella <adhemerval.zanella(a)linaro.org> +Date: Mon, 5 Sep 2022 09:34:39 -0300 +Subject: [PATCH] syslog: Remove extra whitespace between timestamp and message + (BZ#29544) + +The rfc3164 clear states that a single space character must follow +the timestamp field. + +Checked on x86_64-linux-gnu. +--- + misc/syslog.c | 2 +- + misc/tst-syslog.c | 9 ++++++--- + 2 files changed, 7 insertions(+), 4 deletions(-) + +diff --git a/misc/syslog.c b/misc/syslog.c +index b88f66c835..f67d4b58a4 100644 +--- a/misc/syslog.c ++++ b/misc/syslog.c +@@ -167,7 +167,7 @@ __vsyslog_internal (int pri, const char *fmt, va_list ap, + _nl_C_locobj_ptr); + + #define SYSLOG_HEADER(__pri, __timestamp, __msgoff, pid) \ +- "<%d>%s %n%s%s%.0d%s: ", \ ++ "<%d>%s%n%s%s%.0d%s: ", \ + __pri, __timestamp, __msgoff, \ + LogTag == NULL ? __progname : LogTag, \ + "[" + (pid == 0), pid, "]" + (pid == 0) +diff --git a/misc/tst-syslog.c b/misc/tst-syslog.c +index 1d332ece53..3560b518a2 100644 +--- a/misc/tst-syslog.c ++++ b/misc/tst-syslog.c +@@ -275,16 +275,19 @@ parse_syslog_msg (const char *msg) + { + struct msg_t r = { .pid = -1 }; + int number; ++ int wsb, wsa; + + #define STRINPUT(size) XSTRINPUT(size) + #define XSTRINPUT(size) "%" # size "s" + + /* The message in the form: +- <179>Apr 8 14:51:19 tst-syslog: message 176 3 */ +- int n = sscanf (msg, "<%3d>%*s %*d %*d:%*d:%*d " STRINPUT(IDENT_LENGTH) ++ <179>Apr 8 14:51:19 tst-syslog: message 176 3 */ ++ int n = sscanf (msg, "<%3d>%*s %*d %*d:%*d:%*d%n %n" STRINPUT(IDENT_LENGTH) + " " STRINPUT(MSG_LENGTH) " %*d %*d", +- &number, r.ident, r.msg); ++ &number, &wsb, &wsa, r.ident, r.msg); + TEST_COMPARE (n, 3); ++ /* It should only one space between timestamp and message. */ ++ TEST_COMPARE (wsa - wsb, 1); + + r.facility = number & LOG_FACMASK; + r.priority = number & LOG_PRIMASK; +-- +2.30.2 + hooks/post-receive -- IPFire 2.x development tree

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM October 2022