IPFire-SCM March 2024

ipfire-scm@lists.ipfire.org

1 participants
48 discussions

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 4f39eaeb793547386ab45879c999eaae9b24b577
by Michael Tremer 09 Mar '24

09 Mar '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 4f39eaeb793547386ab45879c999eaae9b24b577 (commit) via 09bfdb62e5a18f5c09cd5fc576659a4acdc857cf (commit) from 8b4cc72d4e64803a41d432541170b74d19f51eae (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 4f39eaeb793547386ab45879c999eaae9b24b577 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Sat Mar 9 12:14:51 2024 +0100 unbound: Update to 1.19.2 For details see: https://nlnetlabs.nl/projects/unbound/download/#unbound-1-19-2 "Bug Fixes Fix CVE-2024-1931, Denial of service when trimming EDE text on positive replies." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 09bfdb62e5a18f5c09cd5fc576659a4acdc857cf Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Sat Mar 9 21:55:28 2024 +0000 dnsdist: Update to 1.9.0 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/unbound | 2 +- lfs/dnsdist | 6 +++--- lfs/unbound | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) Difference in files: diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 1badd605a..f5274dcd1 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.1.24 +usr/lib/libunbound.so.8.1.25 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/lfs/dnsdist b/lfs/dnsdist index ac5c602b4..7f09cf222 100644 --- a/lfs/dnsdist +++ b/lfs/dnsdist @@ -26,7 +26,7 @@ include Config SUMMARY = A highly DNS-, DoS- and abuse-aware loadbalancer -VER = 1.8.0 +VER = 1.9.0 THISAPP = dnsdist-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = dnsdist -PAK_VER = 17 +PAK_VER = 18 SUP_ARCH = x86_64 aarch64 @@ -52,7 +52,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 47cfcfe3756cdc4520c1ba1e11b7d60191125ef900ba829ff7437ac2041352b845ab5f7183f53fea9b3aa6f44c5745de3878c2b72f2be048fa57d2c2e9325c0c +$(DL_FILE)_BLAKE2 = 9e14f275d83429ab3e83bdbbd6fe8d97b3212763398798d704adcc18d07ad8aebe16c5345425cdb589f6166155717d9649c16546bf981eb265e1349e74d11134 install : $(TARGET) diff --git a/lfs/unbound b/lfs/unbound index b852f75b9..0a5106064 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.19.1 +VER = 1.19.2 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = a48c5b9493eb0a9aa2171956e08677e1cfb7c49b53731c1b05f9192434c4d815eba972aab110ba0ee25fee1e7a57192c8b48e59bb21fb76ad7fd1c7d2d260012 +$(DL_FILE)_BLAKE2 = f8dcee649e5e1dfaab9285964419b4d957f0035e484021e3131784512fed842ee46c25d7b47304aca4f03a0480877b939968bca22e80620434d1d2cb7013c9b6 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 8b4cc72d4e64803a41d432541170b74d19f51eae
by Michael Tremer 07 Mar '24

07 Mar '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 8b4cc72d4e64803a41d432541170b74d19f51eae (commit) via 9612bc11334234371c561ad3150ae3665675f1b5 (commit) from f6474f325c00f213c9f5ff7747fa52a641780ad9 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 8b4cc72d4e64803a41d432541170b74d19f51eae Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Thu Mar 7 19:07:54 2024 +0000 core185: Ship squid Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 9612bc11334234371c561ad3150ae3665675f1b5 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Thu Mar 7 18:38:39 2024 +0100 squid: Update to 6.8 For details see: https://github.com/squid-cache/squid/commits/v6 Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/{oldcore/100 => core/185}/filelists/squid | 0 config/rootfiles/core/185/update.sh | 5 ++++- lfs/squid | 4 ++-- 3 files changed, 6 insertions(+), 3 deletions(-) copy config/rootfiles/{oldcore/100 => core/185}/filelists/squid (100%) Difference in files: diff --git a/config/rootfiles/core/185/filelists/squid b/config/rootfiles/core/185/filelists/squid new file mode 120000 index 000000000..2dc8372a0 --- /dev/null +++ b/config/rootfiles/core/185/filelists/squid @@ -0,0 +1 @@ +../../../common/squid \ No newline at end of file diff --git a/config/rootfiles/core/185/update.sh b/config/rootfiles/core/185/update.sh index 0a3fae638..a24f61692 100644 --- a/config/rootfiles/core/185/update.sh +++ b/config/rootfiles/core/185/update.sh @@ -33,6 +33,7 @@ done # Stop services /etc/init.d/ntp stop +/etc/init.d/squid stop # Extract files extract_files @@ -87,7 +88,9 @@ telinit u /etc/init.d/suricata restart /etc/init.d/unbound restart /etc/init.d/ntp start - +if [ -f /var/ipfire/proxy/enable ]; then + /etc/init.d/squid start +f ## Modify ovpnconfig according to bug 13548 for no-pass entry for N2N client connections # Check if ovpnconfig exists and is not empty if [ -s /var/ipfire/ovpn/ovpnconfig ]; then diff --git a/lfs/squid b/lfs/squid index 3a2d1039c..882a8842e 100644 --- a/lfs/squid +++ b/lfs/squid @@ -24,7 +24,7 @@ include Config -VER = 6.7 +VER = 6.8 THISAPP = squid-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -46,7 +46,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = f91b0f617b6b32138c33575d5daec0bc6dfcb0d356939b6c01e9d4c33b77886ffb55c38678f31aeed9bf4d5d5e488c751d41098b846a956383c8b6db8c851cab +$(DL_FILE)_BLAKE2 = 771de358d395a6b4bb5d94b02325755d1ba891c24f2cc1bdc80d91a73467a475c2cb7f0e1c24aed2f714c0de38858a24ac3864a5b772b6828beeb014da827d9d install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. f6474f325c00f213c9f5ff7747fa52a641780ad9
by Michael Tremer 06 Mar '24

06 Mar '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via f6474f325c00f213c9f5ff7747fa52a641780ad9 (commit) via 22e3210eff579628e76081606e6d005058d59f86 (commit) via 1dc90e7d07ba43219ceef69824c4085728709b67 (commit) via 9546ab3f5c79272a7a950e188391fe7c5c48436e (commit) via 1f75cc04ca4fe89db54747da3c0ca77742ce9edc (commit) via e7624fcefa3a4f6bb5b0fc3b5fd3fc4de8bb8752 (commit) via 99d70a15508f10a6f13a0d09ccaef042a8873ee0 (commit) via 869d7be4f4b0f7a27aab9c191c8f4227156c13df (commit) via d28dbdc0c0602aaa570a61f00467cbea714ab2fd (commit) via 9f94857120dbae6fee6df3c0240d2280c4daed22 (commit) via 91aefa33f9fc626acce7eb2b197f91effb719d25 (commit) via bc98c579cb6d6d8547d79e6c2fed6d7536e3f0d9 (commit) via 730be02c8eb83ba5e6404d450bbe26b8aa19c264 (commit) via 97f69f7768df9dc15563794226649432e5740266 (commit) via fc22e74b79d146f37509f48789f736bdd5fe9ca6 (commit) via 05512cabe0220d8208c12fddd293cee9d305b0a2 (commit) via 60e990fe3dd5771ffab24072858e8b9b01add0a1 (commit) via 01925627b1f59cb3b1348bcff7200c48dc477553 (commit) via 49ed7f690203cf3052f62c476808f8a57b052c98 (commit) from 825871b9782085fadc5d78524714c9ca501767fb (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit f6474f325c00f213c9f5ff7747fa52a641780ad9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 6 21:38:15 2024 +0000 core185: Ship xz Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 22e3210eff579628e76081606e6d005058d59f86 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Mar 5 12:24:05 2024 +0100 xz: Update to version 5.6.0 - Update from version 5.4.6 to 5.6.0 - Update of rootfile - Changelog 5.6.0 (2024-02-24) This bumps the minor version of liblzma because new features were added. The API and ABI are still backward compatible with liblzma 5.4.x and 5.2.x and 5.0.x. NOTE: As described in the NEWS for 5.5.2beta, the core components are now under the BSD Zero Clause License (0BSD). Since 5.5.2beta: * liblzma: - Disabled the branchless C variant in the LZMA decoder based on the benchmark results from the community. - Disabled x86-64 inline assembly on x32 to fix the build. * Sandboxing support in xz: - Landlock is now used even when xz needs to create files. In this case the sandbox is has to be more permissive than when no files need to be created. A similar thing was already in use with pledge(2) since 5.3.4alpha. - Landlock and pledge(2) are now stricter when reading from more than one input file and only writing to standard output. - Added support for Landlock ABI version 4. * CMake: - Default to -O2 instead of -O3 with CMAKE_BUILD_TYPE=Release. -O3 is not useful for speed and makes the code larger. - Now builds lzmainfo and lzmadec. - xzdiff, xzgrep, xzless, xzmore, and their symlinks are now installed. The scripts are also tested during "make test". - Added translation support for xz, lzmainfo, and the man pages. - Applied the symbol versioning workaround for MicroBlaze that is used in the Autotools build. - The general XZ Utils and liblzma API documentation is now installed. - The CMake component names were changed a little and several were added. liblzma_Runtime and liblzma_Development are unchanged. - Minimum required CMake version is now 3.14. However, translation support is disabled with CMake versions older than 3.20. - The CMake-based build is now close to feature parity with the Autotools-based build. Most importantly a few tests aren't run yet. Testing the CMake-based build on different operating systems would be welcome now. See the comment at the top of CMakeLists.txt. * Fixed a bug in the Autotools feature test for ARM64 CRC32 instruction support for old versions of Clang. This did not affect the CMake build. * Windows: - The build instructions in INSTALL and windows/INSTALL*.txt were revised completely. - windows/build-with-cmake.bat along with the instructions in windows/INSTALL-MinGW-w64_with_CMake.txt should make it very easy to build liblzma.dll and xz.exe on Windows using CMake and MinGW-w64 with either GCC or Clang/LLVM. - windows/build.bash was updated. It now works on MSYS2 and on GNU/Linux (cross-compiling) to create a .zip and .7z package for 32-bit and 64-bit x86 using GCC + MinGW-w64. * The TODO file is no longer installed as part of the documentation. The file is out of date and does not reflect the actual tasks that will be completed in the future. * Translations: - Translated lzmainfo man pages are now installed. These had been forgotten in earlier versions. - Updated Croatian, Esperanto, German, Hungarian, Korean, Polish, Romanian, Spanish, Swedish, Vietnamese, and Ukrainian translations. - Updated German, Korean, Romanian, and Ukrainian man page translations. * Added a few tests. Summary of new features added in the 5.5.x development releases: * liblzma: - LZMA decoder: Speed optimizations to the C code and added GCC & Clang compatible inline assembly for x86-64. - Added lzma_mt_block_size() to recommend a Block size for multithreaded encoding. - Added CLMUL-based CRC32 on x86-64 and E2K with runtime processor detection. Similar to CRC64, on 32-bit x86 it isn't available unless --disable-assembler is used. - Optimized the CRC32 calculation on ARM64 platforms using the CRC32 instructions. Runtime detection for the instruction is used on GNU/Linux, FreeBSD, Windows, and macOS. If the compiler flags indicate unconditional CRC32 instruction support (+crc) then the generic version is not built. - Added definitions of mask values like LZMA_INDEX_CHECK_MASK_CRC32 to <lzma/index.h>. * xz: - Multithreaded mode is now the default. This improves compression speed and creates .xz files that can be decompressed in multithreaded mode. The downsides are increased memory usage and slightly worse compression ratio. - Added a new command line option --filters to set the filter chain using the liblzma filter string syntax. - Added new command line options --filters1 ... --filters9 to set additional filter chains using the liblzma filter string syntax. The --block-list option now allows specifying filter chains that were set using these new options. - Ported the command line tools to Windows MSVC. Visual Studio 2015 or later is required. * Added lz4 support to xzdiff/xzcmp and xzgrep. 5.5.2beta (2024-02-14) * Licensing change: The core components are now under the BSD Zero Clause License (0BSD). In XZ Utils 5.4.6 and older and 5.5.1alpha these components are in the public domain and obviously remain so; the change affects the new releases only. 0BSD is an extremely permissive license which doesn't require retaining or reproducing copyright or license notices when distributing the code, thus in practice there is extremely little difference to public domain. * liblzma - Significant speed optimizations to the LZMA decoder were made. There are now three variants that can be chosen at build time: * Basic C version: This is a few percent faster than 5.4.x due to some new optimizations. * Branchless C: This is currently the default on platforms for which there is no assembly code. This should be a few percent faster than the basic C version. * x86-64 inline assembly. This works with GCC and Clang. The default choice can currently be overridden by setting LZMA_RANGE_DECODER_CONFIG in CPPFLAGS: 0 means the basic version and 3 means that branchless C version. - Optimized the CRC32 calculation on ARM64 platforms using the CRC32 instructions. The instructions are optional in ARMv8.0 and are required in ARMv8.1 and later. Runtime detection for the instruction is used on GNU/Linux, FreeBSD, Windows, and macOS. If the compiler flags indicate unconditional CRC32 instruction support (+crc) then the generic version is not built. * Added lz4 support to xzdiff/xzcmp and xzgrep. * Man pages of xzdiff/xzcmp, xzgrep, and xzmore were rewritten to simplify licensing of the man page translations. * Translations: - Updated Chinese (simplified), German, Korean, Polish, Romanian, Spanish, Swedish, and Ukrainian translations. - Updated German, Korean, Romanian, and Ukrainian man page translations. * Small improvements to the tests. * Added doc/examples/11_file_info.c. It was added to the Git repository in 2017 but forgotten to be added into distribution tarballs. * Removed doc/examples_old. These were from 2012. * Removed the macos/build.sh script. It had not been updated since 2013. 5.5.1alpha (2024-01-26) * Added a new filter for RISC-V binaries. The filter can be used for 32-bit and 64-bit binaries with either little or big endianness. In liblzma, the Filter ID is LZMA_FILTER_RISCV (0x0B) and the xz option is --riscv. liblzma filter string syntax recognizes this filter as "riscv". * liblzma: - Added lzma_mt_block_size() to recommend a Block size for multithreaded encoding - Added CLMUL-based CRC32 on x86-64 and E2K with runtime processor detection. Similar to CRC64, on 32-bit x86 it isn't available unless --disable-assembler is used. - Implemented GNU indirect function (IFUNC) as a runtime function dispatching method for CRC32 and CRC64 fast implementations on x86. Only GNU/Linux (glibc) and FreeBSD builds will use IFUNC, unless --enable-ifunc is specified to configure. - Added definitions of mask values like LZMA_INDEX_CHECK_MASK_CRC32 to <lzma/index.h>. - The XZ logo is now included in the Doxygen generated documentation. It is licensed under Creative Commons Attribution-ShareAlike 4.0. * xz: - Multithreaded mode is now the default. This improves compression speed and creates .xz files that can be decompressed multithreaded at the cost of increased memory usage and slightly worse compression ratio. - Added new command line option --filters to set the filter chain using liblzma filter string syntax. - Added new command line options --filters1 ... --filters9 to set additional filter chains using liblzma filter string syntax. The --block-list option now allows specifying filter chains that were set using these new options. - Added support for Linux Landlock as a sandboxing method. - xzdec now supports pledge(2), Capsicum, and Linux Landlock as sandboxing methods. - Progress indicator time stats remain accurate after pausing xz with SIGTSTP. - Ported xz and xzdec to Windows MSVC. Visual Studio 2015 or later is required. * CMake Build: - Supports pledge(2), Capsicum, and Linux Landlock sandboxing methods. - Replacement functions for getopt_long() are used on platforms that do not have it. * Enabled unaligned access by default on PowerPC64LE and on RISC-V targets that define __riscv_misaligned_fast. * Tests: - Added two new fuzz targets to OSS-Fuzz. - Implemented Continuous Integration (CI) testing using GitHub Actions. * Changed quoting style from `...' to '...' in all messages, scripts, and documentation. * Added basic Codespell support to help catch typo errors. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 1dc90e7d07ba43219ceef69824c4085728709b67 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 6 21:37:40 2024 +0000 core185: Ship whois Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 9546ab3f5c79272a7a950e188391fe7c5c48436e Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Mar 5 12:24:04 2024 +0100 whois: Update to version 5.5.21 - Update from version 5.5.18 to 5.5.21 - Update of rootfile not required - Changelog 5.5.21 * Updated the .cv and .sd TLD servers. * Remove 4 new gTLDs which are no longer active. 5.5.20 * Added the .gn TLD server. * Removed 6 new gTLDs which are no longer active. * Enabled getopt_long(3) support on Solaris. 5.5.19 * Fixed english support for Japanese queries to not add again the /e argument if it had already been provided by the user. (Closes: #1050171) * Added the .ye and .বাংলা (.xn--54b7fta0cc, Bangladesh) TLD servers. * Updated the .ba, .bb, .dk, .es, .gt, .jo, .ml, .mo, .pa, .pn, .sv, .uy, .ﺍﻻﺭﺪﻧ (.xn--mgbayh7gpa, Jordan) and .澳門 (.xn--mix891f, Macao) TLD servers. * Upgraded the TLD URLs to HTTPS whenever possible. * Updated the charset for whois.jprs.jp. * Removed 3 new gTLDs which are no longer active. * Removed support for the obsolete as32 dot notation. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 1f75cc04ca4fe89db54747da3c0ca77742ce9edc Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 6 21:36:55 2024 +0000 core185: Ship util-linux Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit e7624fcefa3a4f6bb5b0fc3b5fd3fc4de8bb8752 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Mar 5 12:24:03 2024 +0100 util-linux: Update to version 2.39.3 - Update from version 2.39.2 to 2.39.3 - Update of rootfile not required - Changelog 2.39.3 autotools: - fix AC_DEFINE_UNQUOTED() use [Karel Zak] - fix librtas check [Karel Zak] - fix typos [Karel Zak] blkid: - fix call to err_exclusive_options [Thomas Weißschuh] blkpr: - store return value of getopt_long in int [Thomas Weißschuh] build-sys: - fix libmount/src/hooks.c use [Karel Zak] disk-utils: - add SPDX and Copyright notices [Karel Zak] docs: - add SPDX to boilerplate.c [Karel Zak] - update AUTHORS file [Karel Zak] - use HTTPS for GitHub clone URLs [Jakub Wilk] include: - add DragonFlyBSD GPT partition types [Thomas Weißschuh] include/audit-arch: - add missing SPDX [Karel Zak] ldattach: - don't call exit() from signal handler [Thomas Weißschuh] lib/env: - avoid underflow of read_all_alloc() return value [Thomas Weißschuh] lib/idcache: - always gracefully handle null cache [Thomas Weißschuh] lib/path: - Set errno in case of fgets failure [Tobias Stoeckmann] - fix possible out of boundary access [Tobias Stoeckmann] - fix typos [Tobias Stoeckmann] - set errno in case of error [Tobias Stoeckmann] libblkid: - (bcachefs) adapt to major.minor version [Thomas Weißschuh] - (bcachefs) add support for sub-device labels [Thomas Weißschuh] - (bcachefs) fix compiler warning [-Werror=sign-compare] [Karel Zak] - (bcachefs) fix not detecting large superblocks [Colin Gillespie] - (bcachefs) fix size validation [Thomas Weißschuh] - (jmicron_raid) avoid modifying shared buffer [Thomas Weißschuh] - (jmicron_raid) use checksum APIs [Thomas Weißschuh] - (ntfs) validate that sector_size is a power of two [Thomas Weißschuh] - (probe) handle probe without chain gracefully [Thomas Weißschuh] - (vfat) avoid modifying shared buffer [Thomas Weißschuh] - (vxfs) report endianness [Thomas Weißschuh] - (zonefs) avoid modifying shared buffer [Thomas Weißschuh] - avoid memory leak of cachefile path [Thomas Weißschuh] - exfat fix fail to find volume label [Yuezhang Mo] - reset errno before calling probefuncs [Thomas Weißschuh] libfdisk: - handle allocation failure in fdisk_new_partition [Thomas Weißschuh] - reset errno before calling read() [Thomas Weißschuh] libmount: - Fix regression when mounting with atime [Filipe Manana] - accept '\' as escape for options separator [Karel Zak] - fix possible NULL dereference [coverity scan] [Karel Zak] - fix statx() includes [Karel Zak] - gracefully handle NULL path in mnt_resolve_target() [Thomas Weißschuh] - improve mnt_table_next_child_fs() [Karel Zak] - make.stx_mnt_id use more robust [Karel Zak] - report statx in features list [Karel Zak] libsmartcols: - handle nameless tables in export format [Thomas Weißschuh] libuuid: - avoid truncate clocks.txt to improve performance [Goldwyn Rodrigues] libuuid/src/gen_uuid.c: - fix cs_min declaration [Fabrice Fontaine] login: - Use pid_t for child_pid [Tobias Stoeckmann] - move comment [Tobias Stoeckmann] losetup: - fix JSON MAJ MIN [Karel Zak] lscpu: - Use 4K buffer size instead of BUFSIZ [Khem Raj] - fix caches separator for --parse=<list> [Karel Zak] - Add Phytium FTC862 cpu model. fix: lsfd: - (man) fix the form for the optional argument of --inet option [Masatake YAMATO] - avoid undefined behavior [Thomas Weißschuh] - fix memory leak in append_filter_expr() [Karel Zak] lslogins: - (man) fix -y option formatting [Thomas Weißschuh] - fix realloc() loop allocation size [Thomas Weißschuh] meson: - install wall executable with group 'tty' [Christian Hesse] - install write executable with group 'tty' [Christian Hesse] more: - avoid out-of-bound access [Thomas Weißschuh] po: - add ro.po (from translationproject.org) [Remus-Gabriel Chelu] - merge changes [Karel Zak] - update es.po (from translationproject.org) [Antonio Ceballos Roa] po-man: - merge changes [Karel Zak] script-playutils: - close filestream in case ignore_line() fails [Thomas Weißschuh] setpriv: - fix group argument completion [Thomas Weißschuh] setterm: - avoid restoring flags from uninitialized memory [Chris Hofstaedtler] tests: - add ts_skip_docker [Thomas Weißschuh] - skip broken tests on docker [Thomas Weißschuh] umount: - handle bindmounts during --recursive [Thomas Weißschuh] - Add Phytium FTC310 & FTC664 support [zuoqian] - Fix man page for col to correct documentation error [Connor-GH] - Update col.c to fix option mistake [Connor-GH] - Use empty libuser config file. [Anatoly Pugachev] Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 99d70a15508f10a6f13a0d09ccaef042a8873ee0 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 6 21:35:41 2024 +0000 qpdf: Don't ship header files Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 869d7be4f4b0f7a27aab9c191c8f4227156c13df Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 6 21:35:21 2024 +0000 core185: Ship qpdf Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit d28dbdc0c0602aaa570a61f00467cbea714ab2fd Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Mar 5 12:24:02 2024 +0100 qpdf: Update to version 11.9.0 - Update from version 11.7.0 to 11.9.0 - Update of rootfile - Changelog 11.9.0 * Add ENABLE_COVERAGE cmake option to assist with generating coverage reports. * From M. Holger: add QPDFObjectHandle::writeJSON to directly write a JSON representation to a pipeline. This is much faster than writing the serialized result of getJSON. * The previous fix to #1056 was incomplete. When setting a check box value, the previous fix allowed any value other than /Off to mean checked. Now we also set the actual value based on the allowable non-/Off value in the normal appearance dictionary. Fixes #1056. * Add fuzz testing for JSON. * Add JSON::getDictItem (from m-holger) * Allow --overlay and --underlay to be repeated. They may appear multiple times on the command-line and will be stacked in the order in which they appear. In QPDFJob JSON, the overlay and underlay keys may contain arrays. For compatibility, they may also contain a single dictionary. * Add new command-line arguments --file and --range which can be used within --pages in place of positional arguments. Allow --file to be used inside of --overlay and --underlay as well. These new options can be freely intermixed with positional arguments. Also add file(), range(), and password() to QPDFJob::PagesConfig as an alternative to pageSpec. 11.8.0 * Bug fix: treat references to older generations of objects as null. * When recovering a file's xref table, attempt to find xref streams if a traditional trailer dictionary is not found. Fixes #1103. * Add --set-page-labels command-line argument and supporting API. Fixes #939. - QPDFJob::Config::setPageLabels - pdf_page_label_e enumerated type - QPDFPageLabelDocumentHelper::pageLabelDict * Support comma-separated numeric values with --collate to select different group sizes from different files. Fixes #505. * Support "x" before a group in a numeric range to exclude a group from the previous group. Details are in the manual. Fixes #564, #790. * When flattening annotations, preserve annotations without any appearance information at all, such as types /Link, /Popup, and /Projection. Fixes #1039. * Detect overlong UTF-8 in the UTF-8 decoder, and fix detection of 8-bit characters in erroneous UTF-8 strings. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 9f94857120dbae6fee6df3c0240d2280c4daed22 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 6 21:34:35 2024 +0000 core185: Ship pixman Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 91aefa33f9fc626acce7eb2b197f91effb719d25 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Mar 5 12:24:01 2024 +0100 pixman: Update to version 0.43.4 - Update from version 0.43.0 to 0.43.4 - Update of rootfile - Changelog 0.43.4 Revert the changes to fix the problem in big-endian architectures Allow to build pixman on clang/arm32 pixman-arm: Fix build on clang/arm32 pixman-x86: Use cpuid.h header pixman-x86: Move #include "cpuid.h" inside conditionals Revert "Allow to build pixman on clang/arm32" pixman-arm: Use unified syntax 0.43.2 Note, in the past pixman used a numbering scheme with odd minor number numbers for development versions and even minor number for stable versions. This is no longer the case, all releases (including this one) are stable production versions now. Drop automatic DEBUG define Drop ChangeLog Drop contrib/ci.sh Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit bc98c579cb6d6d8547d79e6c2fed6d7536e3f0d9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 6 21:34:03 2024 +0000 core185: Ship pciutils Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 730be02c8eb83ba5e6404d450bbe26b8aa19c264 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Mar 5 12:24:00 2024 +0100 pciutils: Update to version 3.11.1 - Update from version 3.10.0 to 3.11.1 - Update of rootfile - Changelog 3.11.1 * Fixed wrong API version in lib/pci.h. * Updated README.Windows. * Fix compilation on Windows. 3.11.0 * update-pciids now supports XZ compression. If libpci is configured with support for compression, all downloaded files are recompressed as gzip. Otherwise they are stored as plain text. * update-pciids now sends itself as the User-Agent. * Added a pcilmr utility for PCIe lane margining. Thanks to Nikita Proshkin for contributing it. * Re-factored access to i386 ports on all relevant platforms. * Added i386 port access on OpenBSD. * Back-ends for Windows received many bug fixes and improvements. * ECAM back-end now scans ACPI and BIOS memory faster. * Linux systems without pread/pwrite are no longer supported as they are hopefully long gone. This helps avoid the tricky check for presence of pread which was found to fail on musl libc. * Improved decoding of PCIe control and status registers. * Decoding of CXL capabilities now supports up to CXL 3.0. * lspci now displays interrupt message numbers consistently across different capabilities. * Cache of IDs resolved via DNS, which was located in ~/.pci-ids by default, is now stored according to the XDG base directory specification in $XDG_CACHE_HOME/pci-ids. * All source files now have SPDX license identifiers. * Internal: The "aux" fields of structs pci_access and pci_dev reserved for use by back-ends were renamed to backend_data to better reflect their meaning. * As usually, various minor bug fixes and updated pci.ids. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 97f69f7768df9dc15563794226649432e5740266 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 6 21:33:36 2024 +0000 core185: Ship pango Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit fc22e74b79d146f37509f48789f736bdd5fe9ca6 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Mar 5 12:23:59 2024 +0100 pango: Update to version 1.52.0 - Update from version 1.50.13 to 1.52.0 - Update of rootfile - Changelog 1.52.0 - Add pango_font_map_reload_font - Improve formatting of font sizes 1.51.2 - Build improvements on Windows - Use single fontconfig thread - Fix problems with spaces at line ends - Allow custom fonts on Windows - pango-viewer: Fix hint-metrics options - Pangofont: Add properties 1.51.0 - itemize: Improve script itemization - build: Check for cairo DWrite dependency - win32: Fix various issues and crashes - layout: Add a missing switch case 1.50.14 - Fix underline thickness in scaled contexts Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 05512cabe0220d8208c12fddd293cee9d305b0a2 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 6 21:31:59 2024 +0000 core185: Ship expat Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 60e990fe3dd5771ffab24072858e8b9b01add0a1 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Mar 5 12:23:58 2024 +0100 expat: Update to version 2.6.1 - Update from version 6.2.0 to 6.2.1 - Update of rootfile - Changelog 2.6.1 Thu February 29 2024 Bug fixes: #817 Make tests independent of CPU speed, and thus more robust #828 #836 Expose billion laughs API with XML_DTD defined and XML_GE undefined, regression from 2.6.0 Other changes: #829 Hide test-only code behind new internal macro #833 Autotools: Reject expat_config.h.in defining SIZEOF_VOID_P #819 Address compiler warnings #832 #834 Version info bumped from 10:0:9 (libexpat*.so.1.9.0) to 10:1:9 (libexpat*.so.1.9.1); see https://verbump.de/ for what these numbers do Infrastructure: #818 CI: Adapt to breaking changes in clang-format Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 01925627b1f59cb3b1348bcff7200c48dc477553 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 6 21:31:24 2024 +0000 core185: Ship ethtool Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 49ed7f690203cf3052f62c476808f8a57b052c98 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Mar 5 12:23:57 2024 +0100 ethtool: Update to version 6.7 - Update from version 6.3 to 6.7 - Update of rootfile not required - Changelog 6.7 - January 29, 2024 * Feature: support for setting TCP data split * Fix: fix new gcc14 warning * Fix: fix SFF-8472 transceiver module identification (-m) * Misc: code cleanup 6.6 - November 23, 2023 * Feature: support for more CMIS transceiver modules (-m) * Fix: fix build on systems with old kernel uapi headers 6.5 - September 12, 2023 * Feature: register dump for hns3 driver (-d) * Fix: fix fallback to ioctl for sset (-s) * Fix: fix empty slot search in rmgr (-N) 6.4 - July 1, 2023 * Feature: get/set Tx push buffer length (-G) * Feature: sff-8636 and cmis: report LOL / LOS / Tx Fault (-m) * Fix: fix duplex setting parser (-s) * Misc: check and require C11 language standard * Misc: clean up obsolete pre-build checks Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/expat | 21 ++++++------- config/rootfiles/common/pango | 7 +++-- config/rootfiles/common/pciutils | 3 +- config/rootfiles/common/pixman | 3 +- config/rootfiles/common/qpdf | 4 ++- config/rootfiles/common/xz | 35 ++++++++-------------- .../155 => core/185}/filelists/aarch64/util-linux | 0 .../{oldcore/158 => core/185}/filelists/ethtool | 0 .../{oldcore/106 => core/185}/filelists/expat | 0 .../{oldcore/163 => core/185}/filelists/pango | 0 .../{oldcore/101 => core/185}/filelists/pciutils | 0 .../{oldcore/110 => core/185}/filelists/pixman | 0 .../{oldcore/110 => core/185}/filelists/qpdf | 0 .../180 => core/185}/filelists/riscv64/util-linux | 0 .../{oldcore/162 => core/185}/filelists/whois | 0 .../112 => core/185}/filelists/x86_64/util-linux | 0 .../{oldcore/100 => core/185}/filelists/xz | 0 lfs/ethtool | 6 ++-- lfs/expat | 4 +-- lfs/pango | 6 ++-- lfs/pciutils | 6 ++-- lfs/pixman | 4 +-- lfs/qpdf | 6 ++-- lfs/util-linux | 6 ++-- lfs/whois | 6 ++-- lfs/xz | 4 +-- 26 files changed, 58 insertions(+), 63 deletions(-) copy config/rootfiles/{oldcore/155 => core/185}/filelists/aarch64/util-linux (100%) copy config/rootfiles/{oldcore/158 => core/185}/filelists/ethtool (100%) copy config/rootfiles/{oldcore/106 => core/185}/filelists/expat (100%) copy config/rootfiles/{oldcore/163 => core/185}/filelists/pango (100%) copy config/rootfiles/{oldcore/101 => core/185}/filelists/pciutils (100%) copy config/rootfiles/{oldcore/110 => core/185}/filelists/pixman (100%) copy config/rootfiles/{oldcore/110 => core/185}/filelists/qpdf (100%) copy config/rootfiles/{oldcore/180 => core/185}/filelists/riscv64/util-linux (100%) copy config/rootfiles/{oldcore/162 => core/185}/filelists/whois (100%) copy config/rootfiles/{oldcore/112 => core/185}/filelists/x86_64/util-linux (100%) copy config/rootfiles/{oldcore/100 => core/185}/filelists/xz (100%) Difference in files: diff --git a/config/rootfiles/common/expat b/config/rootfiles/common/expat index 499f99f8e..26da642ec 100644 --- a/config/rootfiles/common/expat +++ b/config/rootfiles/common/expat @@ -3,21 +3,22 @@ #usr/include/expat_config.h #usr/include/expat_external.h #usr/lib/cmake -#usr/lib/cmake/expat-2.6.0 -#usr/lib/cmake/expat-2.6.0/expat-config-version.cmake -#usr/lib/cmake/expat-2.6.0/expat-config.cmake -#usr/lib/cmake/expat-2.6.0/expat-noconfig.cmake -#usr/lib/cmake/expat-2.6.0/expat.cmake +#usr/lib/cmake/expat-2.6.1 +#usr/lib/cmake/expat-2.6.1/expat-config-version.cmake +#usr/lib/cmake/expat-2.6.1/expat-config.cmake +#usr/lib/cmake/expat-2.6.1/expat-noconfig.cmake +#usr/lib/cmake/expat-2.6.1/expat.cmake #usr/lib/libexpat.la #usr/lib/libexpat.so usr/lib/libexpat.so.1 -usr/lib/libexpat.so.1.9.0 +usr/lib/libexpat.so.1.9.1 #usr/lib/pkgconfig/expat.pc #usr/share/doc/expat -#usr/share/doc/expat-2.6.0 -#usr/share/doc/expat-2.6.0/ok.min.css -#usr/share/doc/expat-2.6.0/reference.html -#usr/share/doc/expat-2.6.0/style.css +#usr/share/doc/expat-2.6.1 +#usr/share/doc/expat-2.6.1/ok.min.css +#usr/share/doc/expat-2.6.1/reference.html +#usr/share/doc/expat-2.6.1/style.css #usr/share/doc/expat/AUTHORS #usr/share/doc/expat/changelog #usr/share/man/man1/xmlwf.1 + diff --git a/config/rootfiles/common/pango b/config/rootfiles/common/pango index a50610e7c..9433f224b 100644 --- a/config/rootfiles/common/pango +++ b/config/rootfiles/common/pango @@ -41,16 +41,17 @@ usr/bin/pango-view #usr/include/pango-1.0/pango/pangoft2.h #usr/lib/libpango-1.0.so usr/lib/libpango-1.0.so.0 -usr/lib/libpango-1.0.so.0.5000.13 +usr/lib/libpango-1.0.so.0.5200.0 #usr/lib/libpangocairo-1.0.so usr/lib/libpangocairo-1.0.so.0 -usr/lib/libpangocairo-1.0.so.0.5000.13 +usr/lib/libpangocairo-1.0.so.0.5200.0 #usr/lib/libpangoft2-1.0.so usr/lib/libpangoft2-1.0.so.0 -usr/lib/libpangoft2-1.0.so.0.5000.13 +usr/lib/libpangoft2-1.0.so.0.5200.0 #usr/lib/pkgconfig/pango.pc #usr/lib/pkgconfig/pangocairo.pc #usr/lib/pkgconfig/pangofc.pc #usr/lib/pkgconfig/pangoft2.pc #usr/lib/pkgconfig/pangoot.pc #usr/share/man/man1/pango-view.1 + diff --git a/config/rootfiles/common/pciutils b/config/rootfiles/common/pciutils index 491bf0567..e09a780b1 100644 --- a/config/rootfiles/common/pciutils +++ b/config/rootfiles/common/pciutils @@ -1,7 +1,7 @@ bin/lspci bin/setpci lib/libpci.so.3 -lib/libpci.so.3.10.0 +lib/libpci.so.3.11.1 sbin/update-pciids #usr/include/pci #usr/include/pci/config.h @@ -10,3 +10,4 @@ sbin/update-pciids #usr/include/pci/types.h #usr/lib/libpci.so #usr/lib/pkgconfig/libpci.pc + diff --git a/config/rootfiles/common/pixman b/config/rootfiles/common/pixman index c48845cde..982ff2e99 100644 --- a/config/rootfiles/common/pixman +++ b/config/rootfiles/common/pixman @@ -3,5 +3,6 @@ #usr/include/pixman-1/pixman.h #usr/lib/libpixman-1.so usr/lib/libpixman-1.so.0 -usr/lib/libpixman-1.so.0.43.0 +usr/lib/libpixman-1.so.0.43.4 #usr/lib/pkgconfig/pixman-1.pc + diff --git a/config/rootfiles/common/qpdf b/config/rootfiles/common/qpdf index 4bc9120cc..1e6265dc2 100644 --- a/config/rootfiles/common/qpdf +++ b/config/rootfiles/common/qpdf @@ -66,6 +66,7 @@ usr/bin/qpdf #usr/include/qpdf/auto_job_c_enc.hh #usr/include/qpdf/auto_job_c_main.hh #usr/include/qpdf/auto_job_c_pages.hh +#usr/include/qpdf/auto_job_c_set_page_labels.hh #usr/include/qpdf/auto_job_c_uo.hh #usr/include/qpdf/qpdf-c.h #usr/include/qpdf/qpdfjob-c.h @@ -77,10 +78,11 @@ usr/bin/qpdf #usr/lib/cmake/qpdf/qpdfConfigVersion.cmake #usr/lib/libqpdf.so usr/lib/libqpdf.so.29 -usr/lib/libqpdf.so.29.7.0 +usr/lib/libqpdf.so.29.9.0 #usr/lib/pkgconfig/libqpdf.pc #usr/share/doc/qpdf #usr/share/doc/qpdf/README-doc.txt #usr/share/man/man1/fix-qdf.1 #usr/share/man/man1/qpdf.1 #usr/share/man/man1/zlib-flate.1 + diff --git a/config/rootfiles/common/xz b/config/rootfiles/common/xz index c38db650a..47804e133 100644 --- a/config/rootfiles/common/xz +++ b/config/rootfiles/common/xz @@ -41,17 +41,18 @@ usr/bin/xzmore #usr/lib/liblzma.la #usr/lib/liblzma.so usr/lib/liblzma.so.5 -usr/lib/liblzma.so.5.4.6 +usr/lib/liblzma.so.5.6.0 #usr/lib/pkgconfig/liblzma.pc #usr/share/doc/xz #usr/share/doc/xz/AUTHORS #usr/share/doc/xz/COPYING +#usr/share/doc/xz/COPYING.0BSD #usr/share/doc/xz/COPYING.GPLv2 #usr/share/doc/xz/NEWS #usr/share/doc/xz/README #usr/share/doc/xz/THANKS -#usr/share/doc/xz/TODO #usr/share/doc/xz/api +#usr/share/doc/xz/api/COPYING.CC-BY-SA-4.0 #usr/share/doc/xz/api/annotated.html #usr/share/doc/xz/api/base_8h.html #usr/share/doc/xz/api/bc_s.png @@ -120,16 +121,15 @@ usr/lib/liblzma.so.5.4.6 #usr/share/doc/xz/api/tabs.css #usr/share/doc/xz/api/version_8h.html #usr/share/doc/xz/api/vli_8h.html +#usr/share/doc/xz/api/xz-logo.png #usr/share/doc/xz/examples #usr/share/doc/xz/examples/00_README.txt #usr/share/doc/xz/examples/01_compress_easy.c #usr/share/doc/xz/examples/02_decompress.c #usr/share/doc/xz/examples/03_compress_custom.c #usr/share/doc/xz/examples/04_compress_easy_mt.c +#usr/share/doc/xz/examples/11_file_info.c #usr/share/doc/xz/examples/Makefile -#usr/share/doc/xz/examples_old -#usr/share/doc/xz/examples_old/xz_pipe_comp.c -#usr/share/doc/xz/examples_old/xz_pipe_decomp.c #usr/share/doc/xz/faq.txt #usr/share/doc/xz/history.txt #usr/share/doc/xz/lzma-file-format.txt @@ -168,6 +168,7 @@ usr/lib/liblzma.so.5.4.6 #usr/share/man/de/man1/lzless.1 #usr/share/man/de/man1/lzma.1 #usr/share/man/de/man1/lzmadec.1 +#usr/share/man/de/man1/lzmainfo.1 #usr/share/man/de/man1/lzmore.1 #usr/share/man/de/man1/unlzma.1 #usr/share/man/de/man1/unxz.1 @@ -184,21 +185,16 @@ usr/lib/liblzma.so.5.4.6 #usr/share/man/fr #usr/share/man/fr/man1 #usr/share/man/fr/man1/lzcat.1 -#usr/share/man/fr/man1/lzcmp.1 -#usr/share/man/fr/man1/lzdiff.1 #usr/share/man/fr/man1/lzless.1 #usr/share/man/fr/man1/lzma.1 #usr/share/man/fr/man1/lzmadec.1 -#usr/share/man/fr/man1/lzmore.1 +#usr/share/man/fr/man1/lzmainfo.1 #usr/share/man/fr/man1/unlzma.1 #usr/share/man/fr/man1/unxz.1 #usr/share/man/fr/man1/xz.1 #usr/share/man/fr/man1/xzcat.1 -#usr/share/man/fr/man1/xzcmp.1 #usr/share/man/fr/man1/xzdec.1 -#usr/share/man/fr/man1/xzdiff.1 #usr/share/man/fr/man1/xzless.1 -#usr/share/man/fr/man1/xzmore.1 #usr/share/man/ko #usr/share/man/ko/man1 #usr/share/man/ko/man1/lzcat.1 @@ -210,6 +206,7 @@ usr/lib/liblzma.so.5.4.6 #usr/share/man/ko/man1/lzless.1 #usr/share/man/ko/man1/lzma.1 #usr/share/man/ko/man1/lzmadec.1 +#usr/share/man/ko/man1/lzmainfo.1 #usr/share/man/ko/man1/lzmore.1 #usr/share/man/ko/man1/unlzma.1 #usr/share/man/ko/man1/unxz.1 @@ -249,27 +246,16 @@ usr/lib/liblzma.so.5.4.6 #usr/share/man/pt_BR #usr/share/man/pt_BR/man1 #usr/share/man/pt_BR/man1/lzcat.1 -#usr/share/man/pt_BR/man1/lzcmp.1 -#usr/share/man/pt_BR/man1/lzdiff.1 -#usr/share/man/pt_BR/man1/lzegrep.1 -#usr/share/man/pt_BR/man1/lzfgrep.1 -#usr/share/man/pt_BR/man1/lzgrep.1 #usr/share/man/pt_BR/man1/lzless.1 #usr/share/man/pt_BR/man1/lzma.1 #usr/share/man/pt_BR/man1/lzmadec.1 -#usr/share/man/pt_BR/man1/lzmore.1 +#usr/share/man/pt_BR/man1/lzmainfo.1 #usr/share/man/pt_BR/man1/unlzma.1 #usr/share/man/pt_BR/man1/unxz.1 #usr/share/man/pt_BR/man1/xz.1 #usr/share/man/pt_BR/man1/xzcat.1 -#usr/share/man/pt_BR/man1/xzcmp.1 #usr/share/man/pt_BR/man1/xzdec.1 -#usr/share/man/pt_BR/man1/xzdiff.1 -#usr/share/man/pt_BR/man1/xzegrep.1 -#usr/share/man/pt_BR/man1/xzfgrep.1 -#usr/share/man/pt_BR/man1/xzgrep.1 #usr/share/man/pt_BR/man1/xzless.1 -#usr/share/man/pt_BR/man1/xzmore.1 #usr/share/man/ro #usr/share/man/ro/man1 #usr/share/man/ro/man1/lzcat.1 @@ -281,6 +267,7 @@ usr/lib/liblzma.so.5.4.6 #usr/share/man/ro/man1/lzless.1 #usr/share/man/ro/man1/lzma.1 #usr/share/man/ro/man1/lzmadec.1 +#usr/share/man/ro/man1/lzmainfo.1 #usr/share/man/ro/man1/lzmore.1 #usr/share/man/ro/man1/unlzma.1 #usr/share/man/ro/man1/unxz.1 @@ -305,6 +292,7 @@ usr/lib/liblzma.so.5.4.6 #usr/share/man/uk/man1/lzless.1 #usr/share/man/uk/man1/lzma.1 #usr/share/man/uk/man1/lzmadec.1 +#usr/share/man/uk/man1/lzmainfo.1 #usr/share/man/uk/man1/lzmore.1 #usr/share/man/uk/man1/unlzma.1 #usr/share/man/uk/man1/unxz.1 @@ -318,3 +306,4 @@ usr/lib/liblzma.so.5.4.6 #usr/share/man/uk/man1/xzgrep.1 #usr/share/man/uk/man1/xzless.1 #usr/share/man/uk/man1/xzmore.1 + diff --git a/config/rootfiles/core/185/filelists/aarch64/util-linux b/config/rootfiles/core/185/filelists/aarch64/util-linux new file mode 120000 index 000000000..9c253c689 --- /dev/null +++ b/config/rootfiles/core/185/filelists/aarch64/util-linux @@ -0,0 +1 @@ +../../../../common/aarch64/util-linux \ No newline at end of file diff --git a/config/rootfiles/core/185/filelists/ethtool b/config/rootfiles/core/185/filelists/ethtool new file mode 120000 index 000000000..494a53e9d --- /dev/null +++ b/config/rootfiles/core/185/filelists/ethtool @@ -0,0 +1 @@ +../../../common/ethtool \ No newline at end of file diff --git a/config/rootfiles/core/185/filelists/expat b/config/rootfiles/core/185/filelists/expat new file mode 120000 index 000000000..e1923cf63 --- /dev/null +++ b/config/rootfiles/core/185/filelists/expat @@ -0,0 +1 @@ +../../../common/expat \ No newline at end of file diff --git a/config/rootfiles/core/185/filelists/pango b/config/rootfiles/core/185/filelists/pango new file mode 120000 index 000000000..6c37231c7 --- /dev/null +++ b/config/rootfiles/core/185/filelists/pango @@ -0,0 +1 @@ +../../../common/pango \ No newline at end of file diff --git a/config/rootfiles/core/185/filelists/pciutils b/config/rootfiles/core/185/filelists/pciutils new file mode 120000 index 000000000..aeb45e7b3 --- /dev/null +++ b/config/rootfiles/core/185/filelists/pciutils @@ -0,0 +1 @@ +../../../common/pciutils \ No newline at end of file diff --git a/config/rootfiles/core/185/filelists/pixman b/config/rootfiles/core/185/filelists/pixman new file mode 120000 index 000000000..fdb6346ae --- /dev/null +++ b/config/rootfiles/core/185/filelists/pixman @@ -0,0 +1 @@ +../../../common/pixman \ No newline at end of file diff --git a/config/rootfiles/core/185/filelists/qpdf b/config/rootfiles/core/185/filelists/qpdf new file mode 120000 index 000000000..2d6c43dec --- /dev/null +++ b/config/rootfiles/core/185/filelists/qpdf @@ -0,0 +1 @@ +../../../common/qpdf \ No newline at end of file diff --git a/config/rootfiles/core/185/filelists/riscv64/util-linux b/config/rootfiles/core/185/filelists/riscv64/util-linux new file mode 120000 index 000000000..f8e680205 --- /dev/null +++ b/config/rootfiles/core/185/filelists/riscv64/util-linux @@ -0,0 +1 @@ +../../../../common/riscv64/util-linux \ No newline at end of file diff --git a/config/rootfiles/core/185/filelists/whois b/config/rootfiles/core/185/filelists/whois new file mode 120000 index 000000000..60cbd1894 --- /dev/null +++ b/config/rootfiles/core/185/filelists/whois @@ -0,0 +1 @@ +../../../common/whois \ No newline at end of file diff --git a/config/rootfiles/core/185/filelists/x86_64/util-linux b/config/rootfiles/core/185/filelists/x86_64/util-linux new file mode 120000 index 000000000..7b5558d2c --- /dev/null +++ b/config/rootfiles/core/185/filelists/x86_64/util-linux @@ -0,0 +1 @@ +../../../../common/x86_64/util-linux \ No newline at end of file diff --git a/config/rootfiles/core/185/filelists/xz b/config/rootfiles/core/185/filelists/xz new file mode 120000 index 000000000..734e926c7 --- /dev/null +++ b/config/rootfiles/core/185/filelists/xz @@ -0,0 +1 @@ +../../../common/xz \ No newline at end of file diff --git a/lfs/ethtool b/lfs/ethtool index e6d65ea12..c6b54aa4e 100644 --- a/lfs/ethtool +++ b/lfs/ethtool @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 6.3 +VER = 6.7 THISAPP = ethtool-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = c06509525db47f8ee7c220d0b880fe80323a4a00036e9698432b1b9c85ad75045e98b23498f6283497728cafd187ca173b15f3ad60f8e6f8b4d0c5688d84a1f9 +$(DL_FILE)_BLAKE2 = 94a6fd8d29ff479eb894fe56bf991f522fff9af5a94c176d06be2819fe2520125cb48dbded229df1a9f5a0308aeaec503c55caf5d248eef87640c7f90f1132ec install : $(TARGET) diff --git a/lfs/expat b/lfs/expat index acfdba6ea..484e27125 100644 --- a/lfs/expat +++ b/lfs/expat @@ -24,7 +24,7 @@ include Config -VER = 2.6.0 +VER = 2.6.1 THISAPP = expat-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2f0117317bde4e03d8662bcac1ff6c2bbb1af694846b21a82ac12d11ccd43032b481af72fa35298c3cb19b7426dba6a67e703904ca7b05663ffd854a42348bd0 +$(DL_FILE)_BLAKE2 = 21a177ae8d70ca1bf41cae75c299a3021a9fc1b9d5eb01eb2945b16d7b24dcbeabad855379bdd8a14de804e1a1648105ce03b505f68c2beb4096a81020e35848 install : $(TARGET) diff --git a/lfs/pango b/lfs/pango index 19b510059..016c3b043 100644 --- a/lfs/pango +++ b/lfs/pango @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.50.13 +VER = 1.52.0 THISAPP = pango-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 8524d5ff478137e6f3795aff8428a8bc864d72338d93c579c039c94eba368526d38f999b7a9b1964e3649d748393dbe2fffaa29a11732df5bd0adff010d79e05 +$(DL_FILE)_BLAKE2 = 3b90c1b104fc2624d0d3c5f35262dc6718f7d795a8932ee6d674ab107c12896f9fced16e9eaa1028db1e92833a108d9d608741df17c0a3aaa7fdf43a6b68e754 install : $(TARGET) diff --git a/lfs/pciutils b/lfs/pciutils index eb9a0b2d7..bb06ba029 100644 --- a/lfs/pciutils +++ b/lfs/pciutils @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 3.10.0 +VER = 3.11.1 THISAPP = pciutils-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2e1255eb5508c9d1339f5bc772c2592a03cae4d8d097e8939748c9bb5d5d949be53d705d1b7d903f7ea88b2abeea91e39de16e39d2f46f0a1f62f8a9e32c6faa +$(DL_FILE)_BLAKE2 = 447d0e3fa209d2d27a0310a5824a75b543b539c459caed23e9218f4ff3f9a3c2a99c65dd5ddf92a56c2b880ecfaeff6f3edc458c3e5973a1a4937325740915ac install : $(TARGET) diff --git a/lfs/pixman b/lfs/pixman index a1f362feb..8b4644757 100644 --- a/lfs/pixman +++ b/lfs/pixman @@ -24,7 +24,7 @@ include Config -VER = 0.43.0 +VER = 0.43.4 THISAPP = pixman-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 1a807d4d5598a5fe6077d6bbc7786cba41a698a1f03801cc5367ade8707500ee215a0faf65afe85f9e040b0380f1074c2fdfd31c0805dc41a4e5e34e36416764 +$(DL_FILE)_BLAKE2 = c31e5700bfadcd72f522af50509a4a6cd7bbf90c918c75b108e50246f1c76e858125138902a222040ada192710ec788deb43eb65085416f3eff88e3ed970933e install : $(TARGET) diff --git a/lfs/qpdf b/lfs/qpdf index b91ca693f..fabb4565b 100644 --- a/lfs/qpdf +++ b/lfs/qpdf @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 11.7.0 +VER = 11.9.0 THISAPP = qpdf-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = aa10e154899a7fd53d696b9521cc8a44d4a336094711ddc2a506dac8841ae12ce5bcd604555725d2b6bae3c63a6a3f6ef0e9ab6baf38dd3d7fa71507234378a3 +$(DL_FILE)_BLAKE2 = 3f79bef4b8d276cb73db1a08eb72cc67dec803c942c5e6f5322ecfc2fb017c7169aebb6b0790f1789970c86f4c8790465d0315ff8b355dd7e395a02192a605cb install : $(TARGET) diff --git a/lfs/util-linux b/lfs/util-linux index 3252f8f46..d99ded13f 100644 --- a/lfs/util-linux +++ b/lfs/util-linux @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.39.2 +VER = 2.39.3 THISAPP = util-linux-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 963c257b86f8a025a3452f102656f479382b9e03dd8ce39b9561302b484c595005aa0bbce9b91422d9be038037143772483363c2a1eec569355316fc8d5d5765 +$(DL_FILE)_BLAKE2 = cd7b2b3c820e920d4a6ecd46fd807e018fc8e54439292f5e62c5f6863dd0f2505df3ec02c470d9be255a437c6ee8e4077908ac78d19a0d1273854d99eb571df0 install : $(TARGET) diff --git a/lfs/whois b/lfs/whois index fc2b99b6e..2bda1fcc9 100644 --- a/lfs/whois +++ b/lfs/whois @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 5.5.18 +VER = 5.5.21 THISAPP = whois-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 86809c2bd7175947191f1b516702e62dcb8ad1ee7bb65091a598ba7c5501e628886245d1f61ce141de869c923cfe67247038b61d6e8875c7c6c712c6a61fa119 +$(DL_FILE)_BLAKE2 = b1cf42f1a60e5009e5882f154432d5974f45c1bf89d8b36b73f6e5f55ff2dba02e8ca7900926d2824200f5422d5e9f00abde524d4e2d8a25ba37376cc2e8d04a install : $(TARGET) diff --git a/lfs/xz b/lfs/xz index e0b905a22..1dae1c0db 100644 --- a/lfs/xz +++ b/lfs/xz @@ -24,7 +24,7 @@ include Config -VER = 5.4.6 +VER = 5.6.0 THISAPP = xz-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = d609590f1e9f13404988050e1bfdc623b996794b603cf2e39d2fd592be1967c97d8beaba9196eae4a0d448a432b1d7499986b7f669e736b65ec67590a04af9f7 +$(DL_FILE)_BLAKE2 = a297ad6fd1fe0c90bfdd0187dcc2d9377bc8fd047e4688676d7f3d6861b6f6d116f08f913bd1ca60b875b3b97cad04b367cde4666f95693c15e2ed7e43a17af6 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 825871b9782085fadc5d78524714c9ca501767fb
by Michael Tremer 04 Mar '24

04 Mar '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 825871b9782085fadc5d78524714c9ca501767fb (commit) via 16d664b2bd4cb546cc2f1d5b7f36b2983f93f5d3 (commit) from 0c051ce27903e9d18c8ee247d92535c633ef93a2 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 825871b9782085fadc5d78524714c9ca501767fb Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Mar 4 20:53:12 2024 +0000 core185: Ship ovpn.cnf Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 16d664b2bd4cb546cc2f1d5b7f36b2983f93f5d3 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Mon Feb 19 15:16:32 2024 +0100 ovpn.cnf: Removal of SKID & AKID from server section - Fixes Bug#13595 - The update to openssl-3.2.x introduced a bug fix which now gives an error if the subjectKeyIdentifier (SKID) or authorityKeyIdentifier (AKID) is in the x509 extensions for a CSR. - See the following discssion in the openssl github issues https://github.com/openssl/openssl/issues/22966#issuecomment-1858396738 - The SKID & AKID should never have been specified in the CSR but due to a bug they were never flagged with an error, just ignored. Since the bug fix for that bug was put into OpenSSL-3.2.0 the prescence of the SKID & AKID in the CSR causes an error to be flagged. - The consequence of this is that in CU183 trying to create a new x509 root/host certificate gives an error when the CSR is generated so only the root certificate is created and not the host certificate. - Tested out the removal of the SKID & AKID lines from the [ server ] section of the ovpn.cnf file and the root/host certificate set was created without any issue. - Then tested the creation of a RW client connection and that worked with no problems. Also creating a fresh N2N connection worked without any problems. - Also tested restoring from an earlier backup. The RW and N2N connections worked without issues with the AKID and SKID missing from the [ server ] section. - It would be good if this could be merged into CU184 for final testing. Fixes: Bug#13595 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/ovpn/openssl/ovpn.cnf | 3 --- config/rootfiles/core/185/filelists/files | 1 + 2 files changed, 1 insertion(+), 3 deletions(-) Difference in files: diff --git a/config/ovpn/openssl/ovpn.cnf b/config/ovpn/openssl/ovpn.cnf index 96c3dcb09d..bfa7ad744c 100644 --- a/config/ovpn/openssl/ovpn.cnf +++ b/config/ovpn/openssl/ovpn.cnf @@ -79,13 +79,10 @@ extendedKeyUsage = clientAuth keyUsage = digitalSignature [ server ] - # JY ADDED -- Make a cert with nsCertType set to "server" basicConstraints = CA:FALSE nsCertType = server nsComment = "OpenSSL Generated Server Certificate" -subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid,issuer:always extendedKeyUsage = serverAuth keyUsage = digitalSignature, keyEncipherment diff --git a/config/rootfiles/core/185/filelists/files b/config/rootfiles/core/185/filelists/files index d87f365293..3a197e9310 100644 --- a/config/rootfiles/core/185/filelists/files +++ b/config/rootfiles/core/185/filelists/files @@ -49,3 +49,4 @@ srv/web/ipfire/cgi-bin/dns.cgi srv/web/ipfire/cgi-bin/index.cgi srv/web/ipfire/cgi-bin/ovpnmain.cgi var/ipfire/backup/bin/backup.pl +var/ipfire/ovpn/openssl/ovpn.cnf hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 0c051ce27903e9d18c8ee247d92535c633ef93a2
by Michael Tremer 04 Mar '24

04 Mar '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 0c051ce27903e9d18c8ee247d92535c633ef93a2 (commit) from 6dac44d40c4e1e80c497959f7098158462b033cb (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 0c051ce27903e9d18c8ee247d92535c633ef93a2 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Mar 4 15:22:52 2024 +0100 alsa: Don't fail on upgrading the package If alsa has not been started on a system the upgrade script fails with exit code 1 and prevents Pakfire from completing the update. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: src/paks/alsa/update.sh | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) Difference in files: diff --git a/src/paks/alsa/update.sh b/src/paks/alsa/update.sh index 14cf836b2d..6ea2cdbb25 100644 --- a/src/paks/alsa/update.sh +++ b/src/paks/alsa/update.sh @@ -22,8 +22,19 @@ ############################################################################ # . /opt/pakfire/lib/functions.sh -mv /etc/asound.state /tmp + +# Backup /etc/asound.state +if [ -e "/etc/asound.state" ]; then + mv /etc/asound.state /tmp/asound.state +fi + extract_backup_includes ./uninstall.sh ./install.sh -mv /tmp/asound.state /etc + +# Restore asound.state +if [ -e "/tmp/asound.state" ]; then + mv /tmp/asound.state /etc/asound.state +fi + +exit 0 hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 6dac44d40c4e1e80c497959f7098158462b033cb
by Michael Tremer 03 Mar '24

03 Mar '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 6dac44d40c4e1e80c497959f7098158462b033cb (commit) via 4a0648243b991b00130aca4fcc615e717ddb1003 (commit) from 6ea7d8c67e0ea53188d6dc356b9cdbc5bf7b5d97 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 6dac44d40c4e1e80c497959f7098158462b033cb Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Thu Feb 22 13:43:39 2024 +0100 update.sh: Fixes bug#13548 - make key 41 contain no-pass for N2N connections - This code ensures that all existing N2N connections have no-pass in key 41 in place of disabled for some of them. - Tested out and confirmed on my vm testbed. Fixes: Bug#13548 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 4a0648243b991b00130aca4fcc615e717ddb1003 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Thu Feb 22 13:43:38 2024 +0100 ovpnmain.cgi: Fixes bug#13548 - imported N2N client connections get disabled instead of no-pass - When bug#11408 was fixed it was missed that key 41 has disabled inserted into it when uploading into the N2N client. This replaced the no-pass entry for all N2N connections resulting in the ovpnmain.cgi not being able to show the status correctly as the code looks for pass or no-pass. - The disabled entry has been present for a very long time and is not utilised anywhere in the code. - This fix ensures that key 41 in the uploaded N2N connection has no-pass entered - Tested out and confirmed in my vm testbed. Fixes: Bug#13548 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/185/update.sh | 21 +++++++++++++++++++++ html/cgi-bin/ovpnmain.cgi | 2 +- 2 files changed, 22 insertions(+), 1 deletion(-) Difference in files: diff --git a/config/rootfiles/core/185/update.sh b/config/rootfiles/core/185/update.sh index 903fe1753..0a3fae638 100644 --- a/config/rootfiles/core/185/update.sh +++ b/config/rootfiles/core/185/update.sh @@ -88,6 +88,27 @@ telinit u /etc/init.d/unbound restart /etc/init.d/ntp start +## Modify ovpnconfig according to bug 13548 for no-pass entry for N2N client connections +# Check if ovpnconfig exists and is not empty +if [ -s /var/ipfire/ovpn/ovpnconfig ]; then + # Add blank line at top of ovpnconfig otherwise the first roadwarrior entry is treated like a blank line and missed out from update + awk 'NR==1{print ""}1' /var/ipfire/ovpn/ovpnconfig > /var/ipfire/ovpn/tmp_file && mv /var/ipfire/ovpn/tmp_file /var/ipfire/ovpn/ovpnconfig + + # Make all N2N connections 'no-pass' since they do not use encryption + awk '{FS=OFS=","} {if($5=="net") {$43="no-pass"; print $0}}' /var/ipfire/ovpn/ovpnconfig >> /var/ipfire/ovpn/ovpnconfig.new + + # Copy all RW connections unchanged to the new ovpnconfig file + for y in $(awk -F',' '/host/ { print $3 }' /var/ipfire/ovpn/ovpnconfig); do + awk -v var="$y" '{FS=OFS=","} {if($3==var) {print $0}}' /var/ipfire/ovpn/ovpnconfig >> /var/ipfire/ovpn/ovpnconfig.new + + done +fi + +# Replace existing ovpnconfig with updated index +mv /var/ipfire/ovpn/ovpnconfig.new /var/ipfire/ovpn/ovpnconfig +# Set correct ownership +chown nobody:nobody /var/ipfire/ovpn/ovpnconfig + # This update needs a reboot... #touch /var/run/need_reboot diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index 98900b277..c92d0237d 100755 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -3472,7 +3472,7 @@ foreach my $dkey (keys %confighash) { $confighash{$key}[31] = $n2ntunmtu[1]; $confighash{$key}[39] = $n2nauth[1]; $confighash{$key}[40] = $n2ncipher[1]; - $confighash{$key}[41] = 'disabled'; + $confighash{$key}[41] = 'no-pass'; &General::writehasharray("${General::swroot}/ovpn/ovpnconfig", \%confighash); hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 6ea7d8c67e0ea53188d6dc356b9cdbc5bf7b5d97
by Arne Fitzenreiter 03 Mar '24

03 Mar '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 6ea7d8c67e0ea53188d6dc356b9cdbc5bf7b5d97 (commit) via d71c37a6329ceeed4657e28c4f51a138e55056dc (commit) from 6dd7451f11385e984b2d24afff99360919f2d3a9 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 6ea7d8c67e0ea53188d6dc356b9cdbc5bf7b5d97 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 3 09:05:35 2024 +0100 core185: add index.cgi to update Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit d71c37a6329ceeed4657e28c4f51a138e55056dc Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Mar 3 09:03:22 2024 +0100 index.cgi exclude efivarfs from disk free check on some systems this filesystem is always reported as full so this is now excluded. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/185/filelists/files | 1 + html/cgi-bin/index.cgi | 1 + 2 files changed, 2 insertions(+) Difference in files: diff --git a/config/rootfiles/core/185/filelists/files b/config/rootfiles/core/185/filelists/files index aa37655cf..d87f36529 100644 --- a/config/rootfiles/core/185/filelists/files +++ b/config/rootfiles/core/185/filelists/files @@ -46,5 +46,6 @@ lib/firmware/nvidia/tegra186/vic.bin lib/firmware/nvidia/tegra210/vic.bin srv/web/ipfire/cgi-bin/dhcp.cgi srv/web/ipfire/cgi-bin/dns.cgi +srv/web/ipfire/cgi-bin/index.cgi srv/web/ipfire/cgi-bin/ovpnmain.cgi var/ipfire/backup/bin/backup.pl diff --git a/html/cgi-bin/index.cgi b/html/cgi-bin/index.cgi index 65773244c..5e32ce038 100644 --- a/html/cgi-bin/index.cgi +++ b/html/cgi-bin/index.cgi @@ -564,6 +564,7 @@ my $temp2=(); my @df = `/bin/df -B M -P -x rootfs`; foreach my $line (@df) { next if $line =~ m/^Filesystem/; + next if $line =~ m/^efivarfs/; if ($line =~ m/root/ ) { $line =~ m/^.* (\d+)M.*$/; @temp = split(/ +/,$line); hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 6dd7451f11385e984b2d24afff99360919f2d3a9
by Michael Tremer 01 Mar '24

01 Mar '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 6dd7451f11385e984b2d24afff99360919f2d3a9 (commit) via 1c9dcaf97639d229abef169c13a74b8beca82d19 (commit) via c3019331df2bb393c96def62a56d33abdec72e8c (commit) via dd8ef8cc107a867d4b2a739913b399f6966b34ff (commit) from bff53f09ffb26cee1e410a2ee812efe4b83538d3 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 6dd7451f11385e984b2d24afff99360919f2d3a9 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Mar 1 16:14:14 2024 +0000 core185: Ship initscript functions Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 1c9dcaf97639d229abef169c13a74b8beca82d19 Merge: bff53f09ff c3019331df Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Mar 1 16:13:45 2024 +0000 Merge remote-tracking branch 'ms/initscripts' into next commit c3019331df2bb393c96def62a56d33abdec72e8c Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Thu Jan 11 15:59:34 2024 +0100 initscripts: Implement storing PIDs in loadproc Some programs do not write their own PID files any more, but since our initscripts heavily rely on those, this extension allows to store it easily. Signed-off-by: Daniel Weismüller <daniel.weismueller(a)ipfire.org> commit dd8ef8cc107a867d4b2a739913b399f6966b34ff Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Thu Jan 11 15:57:50 2024 +0100 initscripts: Fix wrong variable check for $PIDFILE in getpids getpids() checked whether it needed to pass a pid file to pidofproc, but the check was inverted. Signed-off-by: Daniel Weismüller <daniel.weismueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/185/filelists/files | 1 + src/initscripts/system/functions | 10 +++++++++- 2 files changed, 10 insertions(+), 1 deletion(-) Difference in files: diff --git a/config/rootfiles/core/185/filelists/files b/config/rootfiles/core/185/filelists/files index 8a0e5c49f..aa37655cf 100644 --- a/config/rootfiles/core/185/filelists/files +++ b/config/rootfiles/core/185/filelists/files @@ -1,3 +1,4 @@ +etc/rc.d/init.d/functions etc/sudoers.d/logwatch-mdadm lib/firmware/brcm/BCM-0a5c-6410.hcd lib/firmware/brcm/brcmfmac43012-sdio.bin diff --git a/src/initscripts/system/functions b/src/initscripts/system/functions index 6f53a941b..5a26aef45 100644 --- a/src/initscripts/system/functions +++ b/src/initscripts/system/functions @@ -407,7 +407,7 @@ pidofproc() # This will ensure compatibility with previous LFS Bootscripts getpids() { - if [ -z "${PIDFILE}" ]; then + if [ -n "${PIDFILE}" ]; then pidofproc -s -p "${PIDFILE}" $@ else pidofproc -s $@ @@ -446,6 +446,7 @@ loadproc() local pidfile="" local forcestart="" local nicelevel="" + local pid # This will ensure compatibility with previous LFS Bootscripts if [ -n "${PIDFILE}" ]; then @@ -521,12 +522,19 @@ loadproc() ( ${cmd} &>/dev/null ) & + pid="$!" evaluate_retval else ${cmd} + pid="$!" evaluate_retval # This is "Probably" not LSB compliant, but required to be compatible with older bootscripts fi + # Write the pidfile + if [ -n "${pid}" -a -n "${pidfile}" ]; then + echo "${pid}" > "${pidfile}" + fi + return 0 } hooks/post-receive -- IPFire 2.x development tree

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM March 2024