IPFire-SCM May 2022

ipfire-scm@lists.ipfire.org

1 participants
37 discussions

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. c36610e051b931b4ae497b633ca41713e03d53e7
by Peter Müller 05 May '22

05 May '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via c36610e051b931b4ae497b633ca41713e03d53e7 (commit) from 3bd471b8203b878e9e270d833d49e08921c584e3 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit c36610e051b931b4ae497b633ca41713e03d53e7 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Apr 12 12:33:36 2022 +0200 haproxy: Update to version 2.5.5 - Update from 2.4.15 to 2.5.5 - Update of rootfile not required - Changelog 2.5.5 - CI: github actions: add the output of $CC -dM -E- - CI: github actions: use cache for OpenTracing - CI: refactor OpenTracing build script - CI: github actions: use cache for SSL libs - CI: Consistently use actions/checkout@v2 - BUILD: atomic: make the old HA_ATOMIC_LOAD() support const pointers - BUILD: tree-wide: mark a few numeric constants as explicitly long long - BUG/MEDIUM: mux-fcgi: Don't rely on SI src/dst addresses for FCGI health-checks - BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks() - REGTESTS: fix the race conditions in normalize_uri.vtc - REGTESTS: fix the race conditions in secure_memcmp.vtc - BUG/MEDIUM: httpclient/lua: infinite appctx loop with POST - BUG/MINOR: pool: always align pool_heads to 64 bytes - BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed - BUILD: fix kFreeBSD build. - MINOR: pools: add a new global option "no-memory-trimming" - MINOR: stats: Add dark mode support for socket rows - BUILD: pools: fix backport of no-memory-trimming on non-linux OS - BUILD: fix recent build breakage of freebsd caused by kFreeBSD build fix - BUG/MINOR: add missing modes in proxy_mode_str() - BUG/MINOR: cli: shows correct mode in "show sess" - BUG/MINOR: httpclient: Set conn-stream/channel EOI flags at the end of request - BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request - BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request - BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request - BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request - BUG/MEDIUM: stream: Use the front analyzers for new listener-less streams - DEBUG: cache: Update underlying buffer when loading HTX message in cache applet - BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing - DEBUG: stream: Add the missing descriptions for stream trace events - DEBUG: stream: Fix stream trace message to print response buffer state - BUG/MAJOR: mux-pt: Always destroy the backend connection on detach - BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd() - BUG/MEDIUM: httpclient: don't consume data before it was analyzed - CLEANUP: htx: remove unused co_htx_remove_blk() - BUG/MINOR: httpclient: consume partly the blocks when necessary - BUG/MINOR: httpclient: remove the UNUSED block when parsing headers - BUG/MEDIUM: httpclient: must manipulate head, not first - REGTESTS: fix the race conditions in be2hex.vtc 2.5.4 - BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message - BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer - BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer - DOC: Fix usage/examples of deprecated ACLs - BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy() - REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks - CI: github: enable pool debugging by default - BUG/MEDIUM: stream: Abort processing if response buffer allocation fails 2.5.3 - MINOR: sock: move the unused socket cleaning code into its own function - BUG/MEDIUM: mworker: close unused transferred FDs on load failure - BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload - BUG/MINOR: sink: Use the right field in appctx context in release callback - BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names - BUG/MEDIUM: fd: always align fdtab[] to 64 bytes - BUG/MAJOR: compiler: relax alignment constraints on certain structures - MINOR: httpclient: Don't limit data transfer to 1024 bytes - BUG/MINOR: httpclient: reinit flags in httpclient_start() - BUG/MINOR: mailers: negotiate SMTP, not ESMTP - BUG/MINOR: ssl: Add missing return value check in ssl_ocsp_response_print - BUG/MINOR: ssl: Fix leak in "show ssl ocsp-response" CLI command - BUG/MINOR: ssl: Missing return value check in ssl_ocsp_response_print - CLEANUP: httpclient/cli: fix indentation alignment of the help message - BUG/MINOR: tools: url2sa reads ipv4 too far - BUG/MEDIUM: httpclient: limit transfers to the maximum available room - DEBUG: buffer: check in __b_put_blk() whether the buffer room is respected 2.5.2 - BUG/MEDIUM: connection: properly leave stopping list on error - BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer - BUG/MINOR: httpclient: don't send an empty body - BUG/MINOR: httpclient: set default Accept and User-Agent headers - BUG/MINOR: httpclient/lua: don't pop the lua stack when getting headers - BUILD/MINOR: fix solaris build with clang. - BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl - DOC: management: mark "set server ssl" as deprecated - MEDIUM: cli: yield between each pipelined command - MINOR: channel: add new function co_getdelim() to support multiple delimiters - BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands - MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change - BUG/MEDIUM: cli: Never wait for more data on client shutdown - BUG/MEDIUM: mcli: do not try to parse empty buffers - BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them - BUG/MINOR: stream: make the call_rate only count the no-progress calls - DEBUG: cli: add a new "debug dev fd" expert command - BUILD: debug/cli: condition test of O_ASYNC to its existence - DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY - REGTESTS: ssl: Fix ssl_errors regtest with OpenSSL 1.0.2 - BUG/MEDIUM: mworker: don't lose the stats socket on failed reload - BUG/MINOR: mworker: does not add the -sf in wait mode - BUG/MINOR: pools: always flush pools about to be destroyed - DEBUG: pools: add extra sanity checks when picking objects from a local cache - DEBUG: pools: let's add reverse mapping from cache heads to thread and pool - DEBUG: pools: replace the link pointer with the caller's address on pool_free() - BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks - BUG/MINOR: mworker: does not erase the pidfile upon reload - DEBUG: fd: make sure we never try to insert/delete an impossible FD number - MINOR: listener: replace the listener's spinlock with an rwlock - BUG/MEDIUM: listener: read-lock the listener during accept() - BUG/MINOR: httpclient: Revisit HC request and response buffers allocation - BUG/MEDIUM: httpclient: Xfer the request when the stream is created - BUG/MINOR: ssl: Remove empty lines from "show ssl ocsp-response <id>" output - BUG/MINOR: jwt: Double free in deinit function - BUG/MINOR: jwt: Missing pkey free during cleanup - BUG/MINOR: jwt: Memory leak if same key is used in multiple jwt_verify calls - BUG/MINOR: httpclient/cli: display junk characters in vsn - BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies - BUG/MAJOR: spoe: properly detach all agents when releasing the applet - REGTESTS: server: close an occasional race on dynamic_server_ssl.vtc - REGTESTS: peers: leave a bit more time to peers to synchronize - BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change - BUG/MINOR: mux-h2: update the session's idle delay before creating the stream 2.5.1 - BUG/MINOR: cache: Fix loop on cache entries in "show cache" - BUG/MINOR: httpclient: allow to replace the host header - BUG/MINOR: lua: don't expose internal proxies - BUG/MINOR: lua: remove loop initial declarations - BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time - BUILD: evports: remove a leftover from the dead_fd cleanup - BUG/MINOR: vars: Fix the set-var and unset-var converters - BUG/MINOR: server: Don't rely on last default-server to init server SSL context - BUG/MEDIUM: resolvers: Detach query item on response error - BUG/MAJOR: segfault using multiple log forward sections. - BUG/MEDIUM: h1: Properly reset h1m flags when headers parsing is restarted - BUG/MEDIUM: mworker: FD leak of the eventpoll in wait mode - BUG/MINOR: mworker: deinit of thread poller was called when not initialized - MINOR: mux-h1: Improve H1 traces by adding info about http parsers - BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH - BUG/MEDIUM: sample: Fix memory leak in sample_conv_jwt_member_query - MINOR: cli: "show version" displays the current process version - BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types - IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode - MINOR: http-rules: Add capture action to http-after-response ruleset - BUG/MINOR: cli/server: Don't crash when a server is added with a custom id - DOC: spoe: Clarify use of the event directive in spoe-message section - DOC: config: Specify %Ta is only available in HTTP mode - DOC: config: retry-on list is space-delimited - DOC: config: fix error-log-format example - BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode - MINOR: ssl: Remove empty lines from "show ssl ocsp-response" output - MINOR: pools: work around possibly slow malloc_trim() during gc - BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch - BUG/MEDIUM: peers: properly skip conn_cur from incoming messages - BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message - BUG/MINOR: mux-h1: Fix splicing for messages with unknown length - BUILD: ssl: unbreak the build with newer libressl - DOC: fix misspelled keyword "resolve_retries" in resolvers - DEBUG: ssl: make sure we never change a servername on established connections - BUILD: opentracing: display warning in case of using OT_USE_VARS at compile time - BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server - REGTESTS: ssl: fix ssl_default_server.vtc - MINOR: compat: detect support for dl_iterate_phdr() - MINOR: debug: add ability to dump loaded shared libraries - MINOR: debug: add support for -dL to dump library names at boot - MINOR: proxy: add option idle-close-on-response - MINOR: cpuset: switch to sched_setaffinity for FreeBSD 14 and above. - BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning - CI: Github Actions: do not show VTest failures if build failed - BUG/MINOR: ssl: free the fields in srv->ssl_ctx - BUG/MEDIUM: ssl: free the ckch instance linked to a server - REGTESTS: ssl: update of a crt with server deletion - BUILD/MINOR: cpuset FreeBSD 14 build fix. - CI: github actions: update OpenSSL to 3.0.1 - BUILD/MINOR: tools: solaris build fix on dladdr. - BUG/MINOR: cli: fix _getsocks with musl libc - BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry - BUG/MEDIUM: mworker: don't use _getsocks in wait mode - BUG/MINOR: ssl: Store client SNI in SSL context in case of ClientHello error - BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data - BUILD: cpuset: fix build issue on macos introduced by previous change - CI: github actions: clean default step conditions 2.5.0 - BUILD: SSL: add quictls build to scripts/build-ssl.sh - BUILD: SSL: add QUICTLS to build matrix - CLEANUP: sock: Wrap `accept4_broken = 1` into additional parenthesis - BUILD: cli: clear a maybe-unused warning on some older compilers - BUG/MEDIUM: cli: make sure we can report a warning from a bind keyword - BUG/MINOR: ssl: make SSL counters atomic - CLEANUP: assorted typo fixes in the code and comments - BUG/MINOR: ssl: free correctly the sni in the backend SSL cache - MINOR: version: mention that it's stable now Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/haproxy | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) Difference in files: diff --git a/lfs/haproxy b/lfs/haproxy index 96911574d..7fa3b024e 100644 --- a/lfs/haproxy +++ b/lfs/haproxy @@ -26,7 +26,7 @@ include Config SUMMARY = The Reliable, High Performance TCP/HTTP Load Balancer -VER = 2.4.15 +VER = 2.5.5 # From: https://www.haproxy.org/download/2.4/src/haproxy-2.4.15.tar.gz @@ -36,7 +36,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = haproxy -PAK_VER = 20 +PAK_VER = 21 DEPS = @@ -54,7 +54,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 425444a54e22cca8d15cb808283be3baefcd2ce56447d91bce3b4f4b7f6606e03d2eb8a242891c619cfd0fad9aba5bb84026c68d41f07cd55f083481df234899 +$(DL_FILE)_BLAKE2 = 0680925026edf56f4369c71092c39f4ff3956a8cf04320326623b3031f719d62077acdca457a6cfd82f6bcbf510920113a0328a2d8cd4a208c3d9e49e1d431b5 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 3bd471b8203b878e9e270d833d49e08921c584e3
by Peter Müller 05 May '22

05 May '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 3bd471b8203b878e9e270d833d49e08921c584e3 (commit) from 05a1fe1362b633b82b696a88801bb29fb1070872 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 3bd471b8203b878e9e270d833d49e08921c584e3 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Thu May 5 14:23:30 2022 +0000 Core Update 168: Ship boost and delete orphaned libraries Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/{oldcore/151 => core/168}/filelists/aarch64/boost | 0 config/rootfiles/{oldcore/159 => core/168}/filelists/armv6l/boost | 0 config/rootfiles/{oldcore/151 => core/168}/filelists/x86_64/boost | 0 config/rootfiles/core/168/update.sh | 1 + 4 files changed, 1 insertion(+) copy config/rootfiles/{oldcore/151 => core/168}/filelists/aarch64/boost (100%) copy config/rootfiles/{oldcore/159 => core/168}/filelists/armv6l/boost (100%) copy config/rootfiles/{oldcore/151 => core/168}/filelists/x86_64/boost (100%) Difference in files: diff --git a/config/rootfiles/core/168/filelists/aarch64/boost b/config/rootfiles/core/168/filelists/aarch64/boost new file mode 120000 index 000000000..807ad06be --- /dev/null +++ b/config/rootfiles/core/168/filelists/aarch64/boost @@ -0,0 +1 @@ +../../../../common/aarch64/boost \ No newline at end of file diff --git a/config/rootfiles/core/168/filelists/armv6l/boost b/config/rootfiles/core/168/filelists/armv6l/boost new file mode 120000 index 000000000..42aa7cd23 --- /dev/null +++ b/config/rootfiles/core/168/filelists/armv6l/boost @@ -0,0 +1 @@ +../../../../common/armv6l/boost \ No newline at end of file diff --git a/config/rootfiles/core/168/filelists/x86_64/boost b/config/rootfiles/core/168/filelists/x86_64/boost new file mode 120000 index 000000000..9ed31e1d5 --- /dev/null +++ b/config/rootfiles/core/168/filelists/x86_64/boost @@ -0,0 +1 @@ +../../../../common/x86_64/boost \ No newline at end of file diff --git a/config/rootfiles/core/168/update.sh b/config/rootfiles/core/168/update.sh index 1a1ad44a9..45b530c90 100644 --- a/config/rootfiles/core/168/update.sh +++ b/config/rootfiles/core/168/update.sh @@ -42,6 +42,7 @@ rm -rvf \ /usr/bin/dnet-config \ /usr/bin/sdparm \ /usr/lib/libart_lgpl_2.so* \ + /usr/lib/libboost_python38* \ /usr/lib/libdnet.la \ /usr/lib/libdnet.so* \ /usr/lib/libevent-1.4.so* \ hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 05a1fe1362b633b82b696a88801bb29fb1070872
by Peter Müller 05 May '22

05 May '22

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. c22d834ca84af6155eab7020c6b031e1e8c7e764
by Arne Fitzenreiter 02 May '22

02 May '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via c22d834ca84af6155eab7020c6b031e1e8c7e764 (commit) from 1bd22b04242bfc3a77a151e74d0f1428e0d1f0fe (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit c22d834ca84af6155eab7020c6b031e1e8c7e764 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon May 2 21:57:42 2022 +0000 core167: generate uInit ramdisk images for u-boot Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/167/update.sh | 10 ++++++++++ 1 file changed, 10 insertions(+) Difference in files: diff --git a/config/rootfiles/core/167/update.sh b/config/rootfiles/core/167/update.sh index 399978bcc..f447a924b 100644 --- a/config/rootfiles/core/167/update.sh +++ b/config/rootfiles/core/167/update.sh @@ -385,6 +385,16 @@ hardlink -c -vv /lib/firmware # Regenerate all initrds dracut --regenerate-all --force +case "$(uname -m)" in + armv*) + mkimage -A arm -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire + rm /boot/initramfs-${KVER}-ipfire.img + ;; + aarch64) + mkimage -A arm64 -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire + # dont remove initramfs because grub need this to boot. + ;; +esac # Replace /etc/mtab by symlink as mount no longer writes it rm -vf /etc/mtab hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 98b761a5576204b9cd0c8a441f2eeb4d530cadd6
by Peter Müller 02 May '22

02 May '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 98b761a5576204b9cd0c8a441f2eeb4d530cadd6 (commit) from eac8a6fbb86b8befb00adc318d0675a1c4748ed5 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 98b761a5576204b9cd0c8a441f2eeb4d530cadd6 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon May 2 20:26:46 2022 +0000 download-rust-crate: Switch from MD5 to BLAKE2 https://wiki.ipfire.org/devel/telco/2022-05-02 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: tools/download-rust-crate | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) Difference in files: diff --git a/tools/download-rust-crate b/tools/download-rust-crate index bae6b60be..f6a0fe035 100755 --- a/tools/download-rust-crate +++ b/tools/download-rust-crate @@ -50,8 +50,8 @@ main() { fi # Hash the downloaded file - local md5sum="$(md5sum "${download}" | awk '{ print $1 }')" - if [ -z "${md5sum}" ]; then + local b2sum="$(b2sum "${download}" | awk '{ print $1 }')" + if [ -z "${b2sum}" ]; then echo "${0}: Could not hash download" >&2 unlink "${download}" return 1 @@ -73,7 +73,7 @@ main() { sed < "${RUST_TEMPLATE}" > "lfs/rust-${name}" \ -e "s/^VER.*/VER = ${version}/" \ -e "s/^THISAPP.*/THISAPP = ${name}-\$(VER)/" \ - -e "s/^\$(DL_FILE)_MD5.*/\$(DL_FILE)_MD5 = ${md5sum}/" + -e "s/^\$(DL_FILE)_BLAKE2.*/\$(DL_FILE)_BLAKE2 = ${b2sum}/" echo "Done" return 0 hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. eac8a6fbb86b8befb00adc318d0675a1c4748ed5
by Peter Müller 02 May '22

02 May '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via eac8a6fbb86b8befb00adc318d0675a1c4748ed5 (commit) via 66c022d88741a79228575189aadbd106abe668f6 (commit) via 944454beecf07808814a3cd9271883e1a4b2e22b (commit) via 69a72eb43924e14164d2a5ec142e1f544219198b (commit) via 1d683be87622e80b3c672b252c89c9d6c376bed5 (commit) via 45bae9ac918b3ff937a8805506f3cf2084ee214b (commit) from e1ea4c0ad2ccda7ecd09c581203f7ebce12f6c5c (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit eac8a6fbb86b8befb00adc318d0675a1c4748ed5 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Fri Apr 29 14:05:22 2022 +0200 mpc: Update to version 0.34 - Update from version 0.33 to 0.34 - Combined this patch with update to mpd as mpc depends on mpd - Changelog 0.34 (2021/11/30) * add commands "albumart", "readpicture" * don't print status after error * custom status format * support grouping "list" results * meson: auto-build libmpdclient if not available * require libmpdclient 2.16 or newer * require MPD 0.21 or newer Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 66c022d88741a79228575189aadbd106abe668f6 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Fri Apr 29 14:05:21 2022 +0200 fmt: Addition of new build time dependency for mpd - lfs and rootfile created - Added fmt to make.sh Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 944454beecf07808814a3cd9271883e1a4b2e22b Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Fri Apr 29 14:05:20 2022 +0200 mpd: Update to version 0.23.6 - Update from version 0.22.6 to 0.23.6 - Update of rootfile not required - Since version 0.23 there is a new build time dependency for libfmt so a separate patch has been created to add fmt to the system but only for build - Changelog ver 0.23.6 (2022/03/14) * protocol - support filename "cover.webp" for "albumart" command - support "readcomments" and "readpicture" on CUE tracks * decoder - ffmpeg: fix end-of-file check (update stuck at empty files) - opus: fix "readpicture" on Opus files * output - pipewire: fix crash bug if setting volume before playback starts - wasapi: fix resume after pause ver 0.23.5 (2021/12/01) * protocol - support relative offsets for "searchadd" - fix "searchaddpl" bug (bogus error "Bad position") * database - upnp: fix crash bug * tags - fix MixRamp support * migrate to PCRE2 * GCC 12 build fixes ver 0.23.4 (2021/11/11) * protocol - add optional position parameter to "searchaddpl" * decoder - ffmpeg: support libavcodec 59 * output - alsa: add option "thesycon_dsd_workaround" to work around device bug * fix crash on debug builds if startup fails * systemd - remove "RuntimeDirectory" directive because it caused problems - ignore the "pid_file" setting if started as systemd service * Windows - enable the "openmpt" decoder plugin ver 0.23.3 (2021/10/31) * protocol - add optional position parameter to "add" and "playlistadd" - allow range in "playlistdelete" * database - fix scanning files with question mark in the name - inotify: fix use-after-free bug * output - alsa: add option "stop_dsd_silence" to work around DSD DAC noise * macOS: fix libfmt related build failure * systemd: add "RuntimeDirectory" directive ver 0.23.2 (2021/10/22) * protocol - fix "albumart" timeout bug * input - nfs: fix playback bug * output - pipewire: send artist and title to PipeWire - pipewire: DSD support * neighbor - mention failed plugin name in error message * player - fix cross-fade regression * fix crash with libfmt versions older than 7 ver 0.23.1 (2021/10/19) * protocol - use decimal notation instead of scientific notation - "load" supports relative positions * output - emit "mixer" idle event when replay gain changes volume - pipewire: emit "mixer" idle events on external volume change - pipewire: attempt to change the graph sample rate - snapcast: fix time stamp bug which caused "Failed to get chunk" * fix libfmt linker problems * fix broken password authentication ver 0.23 (2021/10/14) * protocol - new command "getvol" - show the audio format in "playlistinfo" - support "listfiles" with arbitrary storage plugins - support relative positions in "addid" - fix relative positions in "move" and "moveid" - add "position" parameter to "findadd" and "searchadd" - add position parameter to "load" * database - proxy: require MPD 0.20 or later - proxy: require libmpdclient 2.11 or later - proxy: split search into chunks to avoid exceeding the output buffer - simple: add option to hide CUE target songs - upnp: support libnpupnp instead of libupnp * archive - zzip, iso9660: ignore file names which are invalid UTF-8 * decoder - openmpt: new plugin - wavpack: fix WVC file support * player - do not cross-fade songs shorter than 20 seconds * output - oss: support DSD over PCM - pipewire: new plugin - snapcast: new plugin * tags - new tags "ComposerSort", "Ensemble", "Movement", "MovementNumber", and "Location" * split permission "player" from "control" * add option "host_permissions" * new build-time dependency: libfmt ver 0.22.11 (2021/08/24) * protocol - fix "albumart" crash * filter - ffmpeg: pass "channel_layout" instead of "channels" to buffersrc - ffmpeg: fix "av_buffersink_get_frame() failed: Resource temporarily unavailable" - ffmpeg: support double-precision samples (by converting to single precision) * Android - build with NDK r23 - playlist_directory defaults to "/sdcard/Android/data/org.musicpd/files/playlists" ver 0.22.10 (2021/08/06) * protocol - support "albumart" for virtual tracks in CUE sheets * database - simple: fix crash bug - simple: fix absolute paths in CUE "as_directory" entries - simple: prune CUE entries from database for non-existent songs * input - curl: fix crash bug after stream with Icy metadata was closed by peer - tidal: remove defunct unmaintained plugin * tags - fix crash caused by bug in TagBuilder and a few potential reference leaks * output - httpd: fix missing tag after seeking into a new song - oss: fix channel order of multi-channel files * mixer - alsa: fix yet more rounding errors ver 0.22.9 (2021/06/23) * database - simple: load all .mpdignore files of all parent directories * tags - fix "readcomments" and "readpicture" on remote files with ID3 tags * decoder - ffmpeg: support the tags "sort_album", "album-sort", "artist-sort" - ffmpeg: fix build failure with FFmpeg 3.4 * Android - fix auto-start on boot in Android 8 or later * Windows - fix build failure with SQLite ver 0.22.8 (2021/05/22) * fix crash bug in "albumart" command (0.22.7 regression) ver 0.22.7 (2021/05/19) * protocol - don't use glibc extension to parse time stamps - optimize the "albumart" command * input - curl: send user/password in the first request, save one roundtrip * decoder - ffmpeg: fix build problem with FFmpeg 3.4 - gme: support RSN files * storage - curl: don't use glibc extension * database - simple: fix database corruption bug * output - fix crash when pausing with multiple partitions - jack: enable on Windows - httpd: send header "Access-Control-Allow-Origin: *" - wasapi: add algorithm for finding usable audio format - wasapi: use default device only if none was configured - wasapi: add DoP support Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 69a72eb43924e14164d2a5ec142e1f544219198b Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sun May 1 16:00:00 2022 +0200 apcupsd: Force update to get new libgd library Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 1d683be87622e80b3c672b252c89c9d6c376bed5 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sun May 1 15:59:59 2022 +0200 icinga: Force update to get new libgd library Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 45bae9ac918b3ff937a8805506f3cf2084ee214b Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sun May 1 15:59:58 2022 +0200 sarg: Force update to get new libgd library Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/fmt | 23 +++++++++++++++++++++++ lfs/apcupsd | 2 +- lfs/{libssh => fmt} | 18 +++++++++++------- lfs/icinga | 2 +- lfs/mpc | 6 +++--- lfs/mpd | 6 +++--- lfs/sarg | 2 +- make.sh | 1 + 8 files changed, 44 insertions(+), 16 deletions(-) create mode 100644 config/rootfiles/common/fmt copy lfs/{libssh => fmt} (87%) Difference in files: diff --git a/config/rootfiles/common/fmt b/config/rootfiles/common/fmt new file mode 100644 index 000000000..d9067f14a --- /dev/null +++ b/config/rootfiles/common/fmt @@ -0,0 +1,23 @@ +#usr/include/fmt +#usr/include/fmt/args.h +#usr/include/fmt/chrono.h +#usr/include/fmt/color.h +#usr/include/fmt/compile.h +#usr/include/fmt/core.h +#usr/include/fmt/format-inl.h +#usr/include/fmt/format.h +#usr/include/fmt/locale.h +#usr/include/fmt/os.h +#usr/include/fmt/ostream.h +#usr/include/fmt/printf.h +#usr/include/fmt/ranges.h +#usr/include/fmt/xchar.h +#usr/lib/cmake/fmt +#usr/lib/cmake/fmt/fmt-config-version.cmake +#usr/lib/cmake/fmt/fmt-config.cmake +#usr/lib/cmake/fmt/fmt-targets-release.cmake +#usr/lib/cmake/fmt/fmt-targets.cmake +#usr/lib/libfmt.so +#usr/lib/libfmt.so.8 +#usr/lib/libfmt.so.8.1.1 +#usr/lib/pkgconfig/fmt.pc diff --git a/lfs/apcupsd b/lfs/apcupsd index 8514ee644..724caaebc 100644 --- a/lfs/apcupsd +++ b/lfs/apcupsd @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = apcupsd -PAK_VER = 7 +PAK_VER = 8 DEPS = diff --git a/lfs/fmt b/lfs/fmt new file mode 100644 index 000000000..754de03b1 --- /dev/null +++ b/lfs/fmt @@ -0,0 +1,83 @@ +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see <http://www.gnu.org/licenses/>. # +# # +############################################################################### + +############################################################################### +# Definitions +############################################################################### + +include Config + +VER = 8.1.1 + +THISAPP = fmt-$(VER) +DL_FILE = $(THISAPP).tar.gz +DL_FROM = $(URL_IPFIRE) +DIR_APP = $(DIR_SRC)/$(THISAPP) +TARGET = $(DIR_INFO)/$(THISAPP) + +############################################################################### +# Top-level Rules +############################################################################### + +objects = $(DL_FILE) + +$(DL_FILE) = $(DL_FROM)/$(DL_FILE) + +$(DL_FILE)_BLAKE2 = 8f3eafd72c0eff62cfcf26a8a37e4d89c8f4a2cec6e427e3ea8d0de3010dd6e5e45ce4486335d3b433308a967915b38ca4d422d789ceda4196153329128056b9 + +install : $(TARGET) + +check : $(patsubst %,$(DIR_CHK)/%,$(objects)) + +download :$(patsubst %,$(DIR_DL)/%,$(objects)) + +b2 : $(subst %,%_BLAKE2,$(objects)) + +dist: + @$(PAK) + +############################################################################### +# Downloading, checking, b2sum +############################################################################### + +$(patsubst %,$(DIR_CHK)/%,$(objects)) : + @$(CHECK) + +$(patsubst %,$(DIR_DL)/%,$(objects)) : + @$(LOAD) + +$(subst %,%_BLAKE2,$(objects)) : + @$(B2SUM) + +############################################################################### +# Installation Details +############################################################################### + +$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) + @$(PREBUILD) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && mkdir -pv build + cd $(DIR_APP)/build && cmake .. \ + -DCMAKE_INSTALL_PREFIX=/usr \ + -DBUILD_SHARED_LIBS=TRUE + cd $(DIR_APP)/build && make $(MAKETUNING) + cd $(DIR_APP)/build && make install + @rm -rf $(DIR_APP) + @$(POSTBUILD) diff --git a/lfs/icinga b/lfs/icinga index c3ac0e494..b251608ba 100644 --- a/lfs/icinga +++ b/lfs/icinga @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = icinga -PAK_VER = 5 +PAK_VER = 6 DEPS = nagios-plugins diff --git a/lfs/mpc b/lfs/mpc index 06aa9c890..78fd9488c 100644 --- a/lfs/mpc +++ b/lfs/mpc @@ -26,7 +26,7 @@ include Config SUMMARY = Client for the Music Player Daemon -VER = 0.33 +VER = 0.34 THISAPP = mpc-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = mpc -PAK_VER = 8 +PAK_VER = 9 DEPS = mpd libmpdclient @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 220848e088964297fbaddeedf61d5ddc90386df360a6af81b2d3753517f7ee36ff3d9462242f38b17c991996927a7d1fc253e1006253f2f875023ddb75a800c2 +$(DL_FILE)_BLAKE2 = 709f54ceebd66f703e5b1bf6ff8deb890e484fdc29c0b2198922763e347caac89d6eec5f74101f9fa860436e7493e2b02cc6b1b26e800e783546fe5a0c6e0d8f install : $(TARGET) diff --git a/lfs/mpd b/lfs/mpd index 90c8cec41..e4381fc1b 100644 --- a/lfs/mpd +++ b/lfs/mpd @@ -26,7 +26,7 @@ include Config SUMMARY = Music Player Daemon -VER = 0.22.6 +VER = 0.23.6 THISAPP = mpd-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/${THISAPP} TARGET = $(DIR_INFO)/$(THISAPP) PROG = mpd -PAK_VER = 24 +PAK_VER = 25 SUP_ARCH = aarch64 armv6l x86_64 DEPS = alsa avahi faad2 ffmpeg flac lame libmad libshout libogg libid3tag libvorbis opus soxr @@ -49,7 +49,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 675b876415a343ba387e26ad800b2e562b40a5e3aaacdff31e0ec9d6ad09f0117406f82e519a08ba3187020b482dcd0434267f9e84dd13e9e1bf8565d1967c2c +$(DL_FILE)_BLAKE2 = 5ccb4a7c06c4317e3285846a261438bdcc10db5eaf71fcba969bcae8321ca50bb26fe9317e23e38eca1c4a8785015596064d5bfc692bf66f8007d0d2a1b71cbb install : $(TARGET) diff --git a/lfs/sarg b/lfs/sarg index b75d185ed..d38933fb0 100644 --- a/lfs/sarg +++ b/lfs/sarg @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = sarg -PAK_VER = 5 +PAK_VER = 6 DEPS = diff --git a/make.sh b/make.sh index f794dec0e..d46d2a6c0 100755 --- a/make.sh +++ b/make.sh @@ -1549,6 +1549,7 @@ buildipfire() { lfsmake2 vdr_dvbapi lfsmake2 vdr_eepg lfsmake2 w_scan + lfsmake2 fmt lfsmake2 mpd lfsmake2 libmpdclient lfsmake2 mpc hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. e1e94ae75b5cb4835d9a35a7c054db66778a8114
by Peter Müller 01 May '22

01 May '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via e1e94ae75b5cb4835d9a35a7c054db66778a8114 (commit) from 53736cfe67a21848b095746b123119c96b2d5dac (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit e1e94ae75b5cb4835d9a35a7c054db66778a8114 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sat Apr 30 19:34:58 2022 +0200 minidlna: Addition of patches to fix CVE-2022-26505 - CVE-2022-26505 A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files. CVE created on 6th March 2022 - minidlna have created the patches to fix CVE-2022-26505 and have created a git tag for version 1.3.1 but have not provided any 1.3.1 source tarballs. A ticket was raised on 14th March 2022 in the source forge support system asking to "Please publish a tarball for 1.3.1" but there was no reply from the developer so far. - In the NIST National Vulnerability Database it refers to a fix implemented in 1.3.1 but the link to the sourceforge page is only the patches applied for the fix - I used those diff descriptions to create a patch to implement on the existing 1.3.0 version in IPFire and this patch submission applies that fix - Incremented the lfs PAK_VER Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/minidlna | 3 +- ....0-fix-DNS-rebinding-issue-CVE-2022-26505.patch | 44 ++++++++++++++++++++++ 2 files changed, 46 insertions(+), 1 deletion(-) create mode 100644 src/patches/minidlna-1.3.0-fix-DNS-rebinding-issue-CVE-2022-26505.patch Difference in files: diff --git a/lfs/minidlna b/lfs/minidlna index 17cf76339..0fa7aec96 100644 --- a/lfs/minidlna +++ b/lfs/minidlna @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = minidlna -PAK_VER = 8 +PAK_VER = 9 DEPS = ffmpeg flac libexif libid3tag libogg @@ -84,6 +84,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) $(UPDATE_AUTOMAKE) + cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/minidlna-1.3.0-fix-DNS-rebinding-issue-CVE-2022-26505.patch cd $(DIR_APP) && ./configure --prefix=/usr cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) cd $(DIR_APP) && make install diff --git a/src/patches/minidlna-1.3.0-fix-DNS-rebinding-issue-CVE-2022-26505.patch b/src/patches/minidlna-1.3.0-fix-DNS-rebinding-issue-CVE-2022-26505.patch new file mode 100644 index 000000000..c28425811 --- /dev/null +++ b/src/patches/minidlna-1.3.0-fix-DNS-rebinding-issue-CVE-2022-26505.patch @@ -0,0 +1,44 @@ +--- minidlna-1.3.0/upnphttp.c.orig 2020-11-24 19:53:50.000000000 +0100 ++++ minidlna-1.3.0/upnphttp.c 2022-04-30 12:59:23.432073807 +0200 +@@ -273,6 +273,11 @@ + p = colon + 1; + while(isspace(*p)) + p++; ++ n = 0; ++ while(p[n] >= ' ') ++ n++; ++ h->req_Host = p; ++ h->req_HostLen = n; + for(n = 0; n < n_lan_addr; n++) + { + for(i = 0; lan_addr[n].str[i]; i++) +@@ -909,6 +914,18 @@ + } + + DPRINTF(E_DEBUG, L_HTTP, "HTTP REQUEST: %.*s\n", h->req_buflen, h->req_buf); ++ if(h->req_Host && h->req_HostLen > 0) { ++ const char *ptr = h->req_Host; ++ DPRINTF(E_MAXDEBUG, L_HTTP, "Host: %.*s\n", h->req_HostLen, h->req_Host); ++ for(i = 0; i < h->req_HostLen; i++) { ++ if(*ptr != ':' && *ptr != '.' && (*ptr > '9' || *ptr < '0')) { ++ DPRINTF(E_ERROR, L_HTTP, "DNS rebinding attack suspected (Host: %.*s)", h->req_HostLen, h->req_Host); ++ Send404(h);/* 403 */ ++ return; ++ } ++ ptr++; ++ } ++ } + if(strcmp("POST", HttpCommand) == 0) + { + h->req_command = EPost; +--- minidlna-1.3.0/upnphttp.h.orig 2020-11-24 19:53:50.000000000 +0100 ++++ minidlna-1.3.0/upnphttp.h 2022-04-30 13:00:22.619152312 +0200 +@@ -89,6 +89,8 @@ + struct client_cache_s * req_client; + const char * req_soapAction; + int req_soapActionLen; ++ const char * req_Host; /* Host: header */ ++ int req_HostLen; + const char * req_Callback; /* For SUBSCRIBE */ + int req_CallbackLen; + const char * req_NT; hooks/post-receive -- IPFire 2.x development tree

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM May 2022