IPFire-SCM

ipfire-scm@lists.ipfire.org

1 participants
7825 discussions

[git.ipfire.org] IPFire 2.x development tree branch, core186, updated. 1ed2ed6310a80510304af993b68c35060731ceff
by Michael Tremer 10 Jun '24

10 Jun '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core186 has been updated via 1ed2ed6310a80510304af993b68c35060731ceff (commit) from d545c338f0d14ecec48623e15efc1c28b44cbce7 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 1ed2ed6310a80510304af993b68c35060731ceff Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Jun 10 15:37:16 2024 +0000 core186: Ship ovpnmain.cgi Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/186/filelists/files | 1 + 1 file changed, 1 insertion(+) Difference in files: diff --git a/config/rootfiles/core/186/filelists/files b/config/rootfiles/core/186/filelists/files index d23b4a838..0c4756337 100644 --- a/config/rootfiles/core/186/filelists/files +++ b/config/rootfiles/core/186/filelists/files @@ -12,6 +12,7 @@ etc/rc.d/init.d/grub-btrfsd etc/rc.d/rc0.d/K01grub-btrfsd etc/rc.d/rc3.d/S99grub-btrfsd etc/rc.d/rc6.d/K01grub-btrfsd +srv/web/ipfire/cgi-bin/ovpnmain.cgi srv/web/ipfire/cgi-bin/vulnerabilities.cgi usr/local/bin/ipsec-interfaces usr/sbin/unbound-dhcp-leases-bridge hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, core186, updated. d545c338f0d14ecec48623e15efc1c28b44cbce7
by Michael Tremer 08 Jun '24

08 Jun '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core186 has been updated via d545c338f0d14ecec48623e15efc1c28b44cbce7 (commit) from 73363b89bc6cb1749b83fb42e4f55d960f974f26 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit d545c338f0d14ecec48623e15efc1c28b44cbce7 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Sat Jun 8 10:22:39 2024 +0000 openvpn: Fix broken paths Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/openvpn | 2 +- config/rootfiles/core/186/filelists/files | 2 +- lfs/openvpn | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) Difference in files: diff --git a/config/rootfiles/common/openvpn b/config/rootfiles/common/openvpn index c0d49bfad..8a36d4bb4 100644 --- a/config/rootfiles/common/openvpn +++ b/config/rootfiles/common/openvpn @@ -25,7 +25,7 @@ usr/sbin/openvpn-authenticator #usr/share/doc/openvpn/openvpn.8.html #usr/share/man/man5/openvpn-examples.5 #usr/share/man/man8/openvpn.8 -usr/share/openvpn/openssl.cnf +usr/share/openvpn/ovpn.cnf var/ipfire/ovpn/ca var/ipfire/ovpn/caconfig var/ipfire/ovpn/ccd diff --git a/config/rootfiles/core/186/filelists/files b/config/rootfiles/core/186/filelists/files index 89b92cd1f..d23b4a838 100644 --- a/config/rootfiles/core/186/filelists/files +++ b/config/rootfiles/core/186/filelists/files @@ -15,6 +15,6 @@ etc/rc.d/rc6.d/K01grub-btrfsd srv/web/ipfire/cgi-bin/vulnerabilities.cgi usr/local/bin/ipsec-interfaces usr/sbin/unbound-dhcp-leases-bridge -usr/share/openvpn/openssl.cnf +usr/share/openvpn/ovpn.cnf var/ipfire/header.pl var/ipfire/ipblocklist/sources diff --git a/lfs/openvpn b/lfs/openvpn index 0704aa438..b686cc930 100644 --- a/lfs/openvpn +++ b/lfs/openvpn @@ -105,7 +105,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) mkdir -pv /usr/share/openvpn mv -v /var/ipfire/ovpn/openssl/ovpn.cnf \ /usr/share/openvpn/ - rmdir -v /usr/share/openvpn + rmdir -v /var/ipfire/ovpn/openssl # Install authenticator install -v -m 755 $(DIR_SRC)/config/ovpn/openvpn-authenticator \ hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, core186, updated. 73363b89bc6cb1749b83fb42e4f55d960f974f26
by Michael Tremer 07 Jun '24

07 Jun '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core186 has been updated via 73363b89bc6cb1749b83fb42e4f55d960f974f26 (commit) via 04acd0b7ce1ffaa36641344d49199256956f3973 (commit) via 4697a1f7f73a5f7ba869c8ad2ce267bd6d65fcc5 (commit) via 51c8b155d1b888f45b234b86cb67b58512853294 (commit) from f3d6e2a0fbb21b78e3a5247049bc7b21595f2153 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 73363b89bc6cb1749b83fb42e4f55d960f974f26 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Jun 7 16:06:40 2024 +0000 core186: Ship the changed location of the OpenSSL configuration for OpenVPN Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 04acd0b7ce1ffaa36641344d49199256956f3973 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Jun 7 16:05:04 2024 +0000 core186: Ship OpenSSL Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 4697a1f7f73a5f7ba869c8ad2ce267bd6d65fcc5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Jun 7 16:01:07 2024 +0000 OpenVPN: Move the OpenSSL configuration file out of /var/ipfire We should not have any configuration files that we share in this place, therefore this patch is moving it into /usr/share/openvpn where we should be able to update it without any issues. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 51c8b155d1b888f45b234b86cb67b58512853294 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Jun 7 15:01:27 2024 +0000 openssl: Update to 3.2.2 https://www.openssl.org/news/openssl-3.2-notes.html Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/ovpn/openvpn-crl-updater | 3 +-- config/rootfiles/common/openssl | 5 +++++ config/rootfiles/common/openvpn | 2 +- config/rootfiles/core/186/filelists/files | 1 + .../{oldcore/100 => core/186}/filelists/openssl | 0 config/rootfiles/core/186/update.sh | 4 ++-- html/cgi-bin/ovpnmain.cgi | 20 ++++++++++---------- lfs/openssl | 4 ++-- lfs/openvpn | 6 ++++++ 9 files changed, 28 insertions(+), 17 deletions(-) copy config/rootfiles/{oldcore/100 => core/186}/filelists/openssl (100%) Difference in files: diff --git a/config/ovpn/openvpn-crl-updater b/config/ovpn/openvpn-crl-updater index 5fbe21080..5008d6725 100644 --- a/config/ovpn/openvpn-crl-updater +++ b/config/ovpn/openvpn-crl-updater @@ -43,7 +43,6 @@ OVPN="/var/ipfire/ovpn" CRL="${OVPN}/crls/cacrl.pem" CAKEY="${OVPN}/ca/cakey.pem" CACERT="${OVPN}/ca/cacert.pem" -OPENSSLCONF="${OVPN}/openssl/ovpn.cnf" # Check if CRL is presant or if OpenVPN is active if [ ! -e "${CAKEY}" ]; then @@ -76,7 +75,7 @@ UPDATE="14" ## Mainpart # Check if OpenVPNs CRL needs to be renewed if [ ${NEXTUPDATE} -le ${UPDATE} ]; then - if openssl ca -gencrl -keyfile "${CAKEY}" -cert "${CACERT}" -out "${CRL}" -config "${OPENSSLCONF}"; then + if openssl ca -gencrl -keyfile "${CAKEY}" -cert "${CACERT}" -out "${CRL}" -config "/usr/share/openvpn/ovpn.cnf"; then logger -t openvpn "CRL has been updated" else logger -t openvpn "error: Could not update CRL" diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl index a3664a521..d5f4f3814 100644 --- a/config/rootfiles/common/openssl +++ b/config/rootfiles/common/openssl @@ -797,6 +797,7 @@ usr/lib/ossl-modules/legacy.so #usr/share/doc/openssl/html/man3/SSL_set_incoming_stream_policy.html #usr/share/doc/openssl/html/man3/SSL_set_retry_verify.html #usr/share/doc/openssl/html/man3/SSL_set_session.html +#usr/share/doc/openssl/html/man3/SSL_set_session_secret_cb.html #usr/share/doc/openssl/html/man3/SSL_set_shutdown.html #usr/share/doc/openssl/html/man3/SSL_set_verify_result.html #usr/share/doc/openssl/html/man3/SSL_shutdown.html @@ -966,6 +967,7 @@ usr/lib/ossl-modules/legacy.so #usr/share/doc/openssl/html/man7/OSSL_PROVIDER-default.html #usr/share/doc/openssl/html/man7/OSSL_PROVIDER-legacy.html #usr/share/doc/openssl/html/man7/OSSL_PROVIDER-null.html +#usr/share/doc/openssl/html/man7/OSSL_STORE-winstore.html #usr/share/doc/openssl/html/man7/RAND.html #usr/share/doc/openssl/html/man7/RSA-PSS.html #usr/share/doc/openssl/html/man7/X25519.html @@ -5515,6 +5517,7 @@ usr/lib/ossl-modules/legacy.so #usr/share/man/man3/SSL_set_security_level.3ossl #usr/share/man/man3/SSL_set_session.3ossl #usr/share/man/man3/SSL_set_session_id_context.3ossl +#usr/share/man/man3/SSL_set_session_secret_cb.3ossl #usr/share/man/man3/SSL_set_shutdown.3ossl #usr/share/man/man3/SSL_set_split_send_fragment.3ossl #usr/share/man/man3/SSL_set_srp_server_param.3ossl @@ -6703,6 +6706,7 @@ usr/lib/ossl-modules/legacy.so #usr/share/man/man3/sk_TYPE_value.3ossl #usr/share/man/man3/sk_TYPE_zero.3ossl #usr/share/man/man3/ssl_ct_validation_cb.3ossl +#usr/share/man/man3/tls_session_secret_cb_fn.3ossl #usr/share/man/man5/config.5ossl #usr/share/man/man5/fips_config.5ossl #usr/share/man/man5/x509v3_config.5ossl @@ -6828,6 +6832,7 @@ usr/lib/ossl-modules/legacy.so #usr/share/man/man7/OSSL_PROVIDER-default.7ossl #usr/share/man/man7/OSSL_PROVIDER-legacy.7ossl #usr/share/man/man7/OSSL_PROVIDER-null.7ossl +#usr/share/man/man7/OSSL_STORE-winstore.7ossl #usr/share/man/man7/RAND.7ossl #usr/share/man/man7/RSA-PSS.7ossl #usr/share/man/man7/RSA.7ossl diff --git a/config/rootfiles/common/openvpn b/config/rootfiles/common/openvpn index d9848a579..c0d49bfad 100644 --- a/config/rootfiles/common/openvpn +++ b/config/rootfiles/common/openvpn @@ -25,6 +25,7 @@ usr/sbin/openvpn-authenticator #usr/share/doc/openvpn/openvpn.8.html #usr/share/man/man5/openvpn-examples.5 #usr/share/man/man8/openvpn.8 +usr/share/openvpn/openssl.cnf var/ipfire/ovpn/ca var/ipfire/ovpn/caconfig var/ipfire/ovpn/ccd @@ -35,7 +36,6 @@ var/ipfire/ovpn/certs/serial var/ipfire/ovpn/crls var/ipfire/ovpn/n2nconf #var/ipfire/ovpn/openssl -var/ipfire/ovpn/openssl/ovpn.cnf var/ipfire/ovpn/openvpn-authenticator var/ipfire/ovpn/ovpn-leases.db var/ipfire/ovpn/ovpnconfig diff --git a/config/rootfiles/core/186/filelists/files b/config/rootfiles/core/186/filelists/files index 3f0d11ae2..89b92cd1f 100644 --- a/config/rootfiles/core/186/filelists/files +++ b/config/rootfiles/core/186/filelists/files @@ -15,5 +15,6 @@ etc/rc.d/rc6.d/K01grub-btrfsd srv/web/ipfire/cgi-bin/vulnerabilities.cgi usr/local/bin/ipsec-interfaces usr/sbin/unbound-dhcp-leases-bridge +usr/share/openvpn/openssl.cnf var/ipfire/header.pl var/ipfire/ipblocklist/sources diff --git a/config/rootfiles/core/186/filelists/openssl b/config/rootfiles/core/186/filelists/openssl new file mode 120000 index 000000000..e011a9266 --- /dev/null +++ b/config/rootfiles/core/186/filelists/openssl @@ -0,0 +1 @@ +../../../common/openssl \ No newline at end of file diff --git a/config/rootfiles/core/186/update.sh b/config/rootfiles/core/186/update.sh index 5d7add89f..02f799af8 100644 --- a/config/rootfiles/core/186/update.sh +++ b/config/rootfiles/core/186/update.sh @@ -104,8 +104,8 @@ done extract_files # Remove files -#rm -rvf \ -# /XXX +rm -rvf \ + /var/ipfire/ovpn/openssl # update linker config ldconfig diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index c92d0237d..f0172978f 100755 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -1836,7 +1836,7 @@ END '-days', '999999', '-newkey', 'rsa:4096', '-sha512', '-keyout', "${General::swroot}/ovpn/ca/cakey.pem", '-out', "${General::swroot}/ovpn/ca/cacert.pem", - '-config',"${General::swroot}/ovpn/openssl/ovpn.cnf")) { + '-config', "/usr/share/openvpn/ovpn.cnf")) { $errormessage = "$Lang::tr{'cant start openssl'}: $!"; goto ROOTCERT_ERROR; } @@ -1868,7 +1868,7 @@ END '-keyout', "${General::swroot}/ovpn/certs/serverkey.pem", '-out', "${General::swroot}/ovpn/certs/serverreq.pem", '-extensions', 'server', - '-config', "${General::swroot}/ovpn/openssl/ovpn.cnf" )) { + '-config', "/usr/share/openvpn/ovpn.cnf" )) { $errormessage = "$Lang::tr{'cant start openssl'}: $!"; unlink ("${General::swroot}/ovpn/certs/serverkey.pem"); unlink ("${General::swroot}/ovpn/certs/serverreq.pem"); @@ -1885,7 +1885,7 @@ END '-in', "${General::swroot}/ovpn/certs/serverreq.pem", '-out', "${General::swroot}/ovpn/certs/servercert.pem", '-extensions', 'server', - '-config', "${General::swroot}/ovpn/openssl/ovpn.cnf"); + '-config', "/usr/share/openvpn/ovpn.cnf"); if ($?) { $errormessage = "$Lang::tr{'openssl produced an error'}: $?"; unlink ("${General::swroot}/ovpn/ca/cakey.pem"); @@ -1904,7 +1904,7 @@ END # System call is safe, because all arguments are passed as array. system('/usr/bin/openssl', 'ca', '-gencrl', '-out', "${General::swroot}/ovpn/crls/cacrl.pem", - '-config', "${General::swroot}/ovpn/openssl/ovpn.cnf" ); + '-config', "/usr/share/openvpn/ovpn.cnf" ); if ($?) { $errormessage = "$Lang::tr{'openssl produced an error'}: $?"; unlink ("${General::swroot}/ovpn/certs/serverkey.pem"); @@ -2426,8 +2426,8 @@ else if ($confighash{$cgiparams{'KEY'}}) { # Revoke certificate if certificate was deleted and rewrite the CRL - &General::system("/usr/bin/openssl", "ca", "-revoke", "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1]cert.pem", "-config", "${General::swroot}/ovpn/openssl/ovpn.cnf"); - &General::system("/usr/bin/openssl", "ca", "-gencrl", "-out", "${General::swroot}/ovpn/crls/cacrl.pem", "-config", "${General::swroot}/ovpn/openssl/ovpn.cnf"); + &General::system("/usr/bin/openssl", "ca", "-revoke", "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1]cert.pem", "-config", "/usr/share/openvpn/ovpn.cnf"); + &General::system("/usr/bin/openssl", "ca", "-gencrl", "-out", "${General::swroot}/ovpn/crls/cacrl.pem", "-config", "/usr/share/openvpn/ovpn.cnf"); ### # m.a.d net2net @@ -2480,7 +2480,7 @@ else &General::system("/usr/local/bin/openvpnctrl", "-drrd", "$confighash{$cgiparams{'KEY'}}[1]"); delete $confighash{$cgiparams{'KEY'}}; - &General::system("/usr/bin/openssl", "ca", "-gencrl", "-out", "${General::swroot}/ovpn/crls/cacrl.pem", "-config", "${General::swroot}/ovpn/openssl/ovpn.cnf"); + &General::system("/usr/bin/openssl", "ca", "-gencrl", "-out", "${General::swroot}/ovpn/crls/cacrl.pem", "-config", "/usr/share/openvpn/ovpn.cnf"); &General::writehasharray("${General::swroot}/ovpn/ovpnconfig", \%confighash); } else { @@ -4053,7 +4053,7 @@ if ($cgiparams{'TYPE'} eq 'net') { '-batch', '-notext', '-in', $filename, '-out', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}cert.pem", - '-config',"${General::swroot}/ovpn/openssl/ovpn.cnf"); + '-config', "/usr/share/openvpn/ovpn.cnf"); if ($?) { $errormessage = "$Lang::tr{'openssl produced an error'}: $?"; unlink ($filename); @@ -4266,7 +4266,7 @@ if ($cgiparams{'TYPE'} eq 'net') { '-newkey', 'rsa:4096', '-keyout', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}key.pem", '-out', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}req.pem", - '-config',"${General::swroot}/ovpn/openssl/ovpn.cnf")) { + '-config', "/usr/share/openvpn/ovpn.cnf")) { $errormessage = "$Lang::tr{'cant start openssl'}: $!"; unlink ("${General::swroot}/ovpn/certs/$cgiparams{'NAME'}key.pem"); unlink ("${General::swroot}/ovpn/certs/$cgiparams{'NAME'}req.pem"); @@ -4280,7 +4280,7 @@ if ($cgiparams{'TYPE'} eq 'net') { '-batch', '-notext', '-in', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}req.pem", '-out', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}cert.pem", - '-config',"${General::swroot}/ovpn/openssl/ovpn.cnf"); + '-config', "/usr/share/openvpn/ovpn.cnf"); if ($?) { $errormessage = "$Lang::tr{'openssl produced an error'}: $?"; unlink ("${General::swroot}/ovpn/certs/$cgiparams{'NAME'}key.pem"); diff --git a/lfs/openssl b/lfs/openssl index 695035742..d6f565df2 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -24,7 +24,7 @@ include Config -VER = 3.2.1 +VER = 3.2.2 THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -72,7 +72,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 960222e0305166160e5ab000e29650b92063bf726551ee9ad46060166d99738d1e3a5b86fd28b14c8f4fb3a72f5aa70850defb87c02990acff3dbcbdac40b347 +$(DL_FILE)_BLAKE2 = f42d44f31dc9ccf26ffe1fdd4a0119506a211808f92e860a34118109eae2ee7bcb5b0f43cbdf9eb811cd185cb53e092e62d652f7c0c0ce55b13289f7489073c9 install : $(TARGET) diff --git a/lfs/openvpn b/lfs/openvpn index b71b4ccc9..0704aa438 100644 --- a/lfs/openvpn +++ b/lfs/openvpn @@ -101,6 +101,12 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) chown root:root /etc/fcron.daily/openvpn-crl-updater chmod 750 /etc/fcron.daily/openvpn-crl-updater + # Move the OpenSSL configuration file out of /var/ipfire + mkdir -pv /usr/share/openvpn + mv -v /var/ipfire/ovpn/openssl/ovpn.cnf \ + /usr/share/openvpn/ + rmdir -v /usr/share/openvpn + # Install authenticator install -v -m 755 $(DIR_SRC)/config/ovpn/openvpn-authenticator \ /usr/sbin/openvpn-authenticator hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, core186, created. f3d6e2a0fbb21b78e3a5247049bc7b21595f2153
by Arne Fitzenreiter 05 Jun '24

05 Jun '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core186 has been created at f3d6e2a0fbb21b78e3a5247049bc7b21595f2153 (commit) - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree tag, v2.29-core186, created. f3d6e2a0fbb21b78e3a5247049bc7b21595f2153
by Arne Fitzenreiter 05 Jun '24

05 Jun '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The tag, v2.29-core186 has been created at f3d6e2a0fbb21b78e3a5247049bc7b21595f2153 (commit) - Log ----------------------------------------------------------------- commit f3d6e2a0fbb21b78e3a5247049bc7b21595f2153 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Jun 4 14:08:53 2024 +0200 kernel: reset asix88179 twice like in older kernels the kernel developers has removed a reset at bring the device first up to save time. At my test's this result in not detecting the link correct. This readd the reset and at my tests the device has worked. fixes #13692 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 98278fef4c3321387c1673bddaa652fb0adb922d
by Arne Fitzenreiter 04 Jun '24

04 Jun '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 98278fef4c3321387c1673bddaa652fb0adb922d (commit) via a03adc928e832b8b6617cdb153aabea3a3ff42ef (commit) via ed562f8ddee52bc52ee319d965f713c7f72962aa (commit) via c7235a2c63651d629c728bdce8e21b03d2687dd3 (commit) via dec072b2441be3efb091463a61b105fc85e1ae48 (commit) via c375bcf8cd703e23ca2da222c469a4784b5bfd67 (commit) via db27ff326e5d39d68dce72ef39b2b0f5ec54092e (commit) via f3d6e2a0fbb21b78e3a5247049bc7b21595f2153 (commit) from f62e4836012046ecb3c9ecc2ed104b9f8f07b032 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 98278fef4c3321387c1673bddaa652fb0adb922d Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed May 29 21:03:13 2024 +0200 nut: Update to version 2.8.2 - Update from version 2.8.1 to 2.8.2 - Update of rootfile - Changelog 2.8.2 - Fix fallout of development in NUT v2.8.0 and/or v2.8.1: * dstate machinery: a segmentation fault (null pointer dereference) was possible with `INSTCMD` processing of commands without parameters nor `TRACKING` identifier. [#2155] * USB bus number detection for libusb-1.0 builds was overly zealous and wrongly considered zero values as an error. [#2198] * `upsmon` recognition of `CAL` state could linger after the calibration activity was completed by the hardware, which led to mis-processing of shutdown triggers. Also, notification was added to report "finished calibration". [issue #2168, PR #2169] * `upsmon` recognition of `OFF` state as a trigger for FSD (forced shut down) criticality considered also the input line state, which may be an independently evolving circumstance. [issue #2278, PR #2279] * `upsmon` support for `POLLFAIL_LOG_THROTTLE_MAX` did not neuter the applied setting when live-reloading configuration, so commenting it away in `upsmon.conf` did not have the effect of resetting the logging frequency to default. It also did not reset the counters to certainly follow the new configuration for existing faults. [issue #2207, PR #2209] * `upsmon` support for `POLLFAIL_LOG_THROTTLE_MAX` had an off-by-one error (e.g. reporting "Data stale" or "Driver not connected" every 30 sec with `POLLFAIL_LOG_THROTTLE_MAX 5` and `POLLFREQ 5` settings). [#2207] * Drivers running with non-default user account (e.g. with `user=root` in their configuration) failed to apply group ownership and permissions to their Unix socket file for interaction with the local data server. [#2185, #2096] * Dispatcher script `scripts/python/app/NUT-Monitor` referenced `py3qt3` instead of the correct `py3qt5`. It also tries to check both `py2gtk2` and `py3qt5` implementations verbosely, even if one is not installed. [#2199, #2201] * Set the `DesktopFileName` in `scripts/python/app/NUT-Monitor-py3qt5`, this binds the application with the desktop file and allow the Open Desktop compatible implementation to display the proper icon and application name. [#2205] * Original recipe for `apc_modbus` strictly required USB support even if building NUT without it. [#2262] * Builds requested with a specific C/C++ language standard revision via `CFLAGS` and `CXXFLAGS` should again be honoured. [PR #2306] * Allow requesting detailed debug builds (with disabled optimizations for binaries to best match the source code) for supported compilers using `configure` script option `--with-debuginfo`. Note that default autoconf behavior usually embeds moderate optimizations and debug information on its own. [PR #2310] * A fix applied among clean-ups between NUT v2.7.4 and v2.8.0 releases backfired for `usbhid-ups` subdriver `belkin-hid` which in practice relied on the broken older behavior; more details in its entry below. [PR #2371] - nut-usbinfo.pl, nut-scanner and libnutscan: * Library API version for `libnutscan` was bumped from 2.2.0 to 2.5.0 during evolution of this NUT release. * USB VendorID:ProductID support list files generated by the script for different OS frameworks now include a comment with other possibly compatible driver names, where the respective file format allows for comments. * Added the concept of `alt_driver_names` in `nutscan_device_t` structure for ability to suggest a comment with other possibly compatible driver names in configuration snippets generated by `nut-scanner`; practical support implemented for USB connected drivers. * Added the concept of commented-away suggested option values `comment_tag` and a method to `nutscan_add_commented_option_to_device()`, instead of hacks in prepared config data which broke some use-cases. [#2221] * Command-line option `-U` for USB scan can now be specified several times to increase the detail level about hardware link to the device (this was previously always suggested, but may be not reliable if USB enumeration gets changed over time). [#2221] * Added generation of FreeBSD/pfSense quirks for USB devices supported by NUT (may get installed to `$datadir` e.g. `/usr/local/share/nut` and need to be pasted into your `/boot/loader.conf.local`). [#2159] * nut-scanner now avoids creating ambiguous `nutdevN` device section names when called separately to scan different media buses (one at a time). Now the "bus" name would be embedded (e.g. non-colliding `nutdev-usb1` and `nutdev-snmp1`). [#2247] * nut-scanner can now discover NUT simulated devices (`.dev` and `.seq` files) located in your sysconfig directory, and prepare configuration sections with the simulation driver (currently `dummy-ups`). [#2246] * nut-scanner now reports `dummy-ups` as driver when scanning NUT "bus" with Old or Avahi method. [#2236, #2245] - upsd: Fixed conditions for "no listening interface available" diagnosis to check how many listeners we succeeded with, not whether the first one succeeded or not. If not all requested (non-localhost) listeners were available, default to fail the daemon start-up attempt; support for an `ALLOW_NOT_ALL_LISTENERS` setting was added to control this behavior. [#723] - NUT CI improvements: * Added publishing recipes for PyNUT client bindings for NUT, so it ends up in the link:https://pypi.org/project/PyNUTClient[PyPI repository]. [#2158] * Added support for new `ccache` namespace concept, where possible. [#2256] * Fixed an issue for builds configured `--without-usb`. [#2263] * Added a fallback for `libgd` discovery (for CGI etc. builds). [#2287] * Made `aspell` TeX module detection more reliable. [#2206] * Fixed recipes for completely out-of-tree builds to pass with documentation generation and checking on all tested "make" implementations. [#2318] * Various other recipe and documentation clean-up efforts. [#2284, #2269, #2261] - main driver core codebase: * Help users of drivers that can be built to support optionally USB and other media (like `nutdrv_qx` built for serial-only support), and built in fact without USB support but used for USB devices, with some more information to make troubleshooting easier. [issue #2259, PR #2260] * Driver programs with debug tracing support via `-D` CLI option and/or the `NUT_DEBUG_LEVEL` environment variable now check those earlier in their life-time, so that initialization routine can be debugged. [#2259] * Multiple USB-capable drivers got options to customize `usb_config_index` `usb_hid_rep_index`, `usb_hid_desc_index`, `usb_hid_ep_in` and `usb_hid_ep_out` hardware connection settings via `ups.conf` options. This is treated as experimental, not all code paths may be actually using such values from `struct usb_communication_subdriver_t` rather than hard-coded defaults. Discovery of correct values is up to the user at the moment (using `lsusb`, internet search, luck...) [#2149] - nut-driver-enumerator (NDE) service/script: * The optional daemon mode (primarily useful for systems which monitor a large and dynamic population of power devices) was enhanced with a `--daemon-after` variant which parses the configuration once before daemonization and this has a chance to fail while not forked off, as well as to allow only completing the service unit initialization when everything is actually ready to work (so further dependencies can start at the proper time). [#682] * Also applied other optimizations to the script implementation. [#682] - powerpanel text driver now handles status responses in any format and should support most devices. [#2156] - tripplite_usb driver now allows any device to match if a particular Unit ID was not specified in `ups.conf`. [PR #2297, issues #2282 and #2258] - snmp-ups driver: * added support for Eaton EMP002 sensor for ATS16 NM2 sub-driver. [#2286] * mapping table updates for apc-mib sub-driver. [#2264] - usbhid-ups driver: * `arduino-hid` subdriver was enhanced from "initial bare bones" experimental set of mapped data points to support some 20 more mappings to make it more useful as an UPS driver, not just a controller developer sandbox. [#2188] * `cps-hid` subdriver now supports devices branded as Cyber Energy and built by cooperation with Cyber Power Systems. [#2312] * `belkin-hid` subdriver now supports Liebert PSI5 devices which have a different numeric reading scale than earlier handled models. [issue #2271, PR #2272, PR #2369] Generally the wrong-scale processing was addressed, including a regression in NUT v2.8.0 which led to zero values in voltage data points which NUT v2.7.4 reported well [#2371] * The `onlinedischarge` configuration flag name was too ambiguous and got deprecated (will be supported but no longer promoted by documentation), introducing `onlinedischarge_onbattery` as the meaningful alias. [#2213] * Logged notifications about `OL+DISCHRG` state should now be throttled (see the driver manual page for more details) [#2214, #2215]: - If `battery.charge` is available, make the message when entering the state and then only if the charge differs from that when we posted the earlier message (e.g. really discharging) and is under `onlinedischarge_log_throttle_hovercharge` value (defaults to 100%); - Also can throttle to a time frequency configurable by a new option `onlinedischarge_log_throttle_sec`, by default 30 sec if `battery.charge` is not reported by the device (should be frequent by default, in case the UPS-reported state combination does reflect a bad power condition). - nutdrv_qx driver: * Fixed handling of `battery_voltage_reports_one_pack` configuration flag introduced in NUT v2.8.1. [originally by PR #1279; fixed by PR #2324, issue #2325] - Various code and documentation fixes for NSS crypto support. [#2274, #2268] - Laid foundations for the SmartNUT effort (aiming to integrate drivers with some other backends than the networked NUT data server process). - Eaton contributed recipes and scripts used to create the IPP for Unix bundle (aka Eaton IPSS Unix or UPP), a freely available value-added packaging of NUT distributed as the UPS software companion for OSes where their more complex UPS monitoring/management tools had not been ported. This allows for delivery of NUT packages with an interactive installer and some system integration scripts (events, notifications, status, shutdown daemon...), and was contributed to the NUT upstream project by Eaton -- provided "as is" at the moment, and may later serve as foundation or inspiration for new NUT features. [#2288] - nutconf (C++ library and tool to read and manage NUT configuration files) was started in the open by Eaton employees and used in the IPP installer, but the code lingered in a side branch. It was now brushed up to our common best practices and added to the main codebase. As of this import, there are known deficiencies in Windows platform support, as well as some un-awareness about configuration key words which appeared in NUT since 2013. [#2290] - The `tools/gitlog2changelog.py.in` script was revised, in particular to convert section titles (with contributor names coming from Git metadata) into plain ASCII character set, for `dblatex` versions which do not allow diacritics and other kinds of non-trivial characters in sections. This can cause successful builds of `ChangeLog.pdf` file on more platforms, but at expense of a semi-cosmetic difference in those names. [PR #2360, PR #2366] Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit a03adc928e832b8b6617cdb153aabea3a3ff42ef Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sun Jun 2 12:14:16 2024 +0200 postfix: Update to version 3.9.0 - Update from version 3.8.4 to 3.9.0 - Update of rootfile - With version 3.9.0 the option smtpd_forbid_bare_newline default value is now yes. With previous versions the default value was no but to prevent the possibility of an smtp smuggling attack the option should be yes. Previous version therefore actively set the value to yes and added it to the main.cf file when being installed. With version 3.9.0 the default value is now yes so the option no longer needs to be added into main.cf, so smtp smuggling attack is protected by default now. - Removed the section from the install.sh file that added the option into main.cf with version 3.8.4. From 3.9.0 onwards the default value is yes so no longer needs to be actively added into main.cf - Changelog is too large to paste here. It can be read in the file RELEASE_NOTES in the source tarball. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit ed562f8ddee52bc52ee319d965f713c7f72962aa Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed May 29 18:01:01 2024 +0200 samba: Update to version 4.20.1 - This v2 version increments the PAK_VER number - Update from version 4.19.5 to 4.20.1 - Update of rootfile - Changelog 4.20.1 * BUG 15630: dns update debug message is too noisy. * BUG 15635: Do not fail PAC validation for RFC8009 checksums types. * BUG 15605: Improve performance of lookup_groupmem() in idmap_ad. * BUG 15636: Smbcacls incorrectly propagates inheritance with Inherit-Only flag. * BUG 15611: http library doesn't support 'chunked transfer encoding'. * BUG 15600: Provide a systemd service file for the background queue daemon. 4.20.0 The changelog is too large to show here. Details can be found at https://www.samba.org/samba/history/samba-4.20.0.html I did not identify any changes related to how samba is configured in IPFire 4.19.6 * BUG 15527: fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(). * BUG 15588: samba-gpupdate: Correctly implement site support. * BUG 15527: fd_handle_destructor() panics within an smbd_smb2_close() if vfs_stat_fsp() fails in fd_close(). * BUG 15588: samba-gpupdate: Correctly implement site support. * BUG 15599: libgpo: Segfault in python bindings. * BUG 15580: Packet marshalling push support missing for CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and CTDB_CONTROL_TCP_CLIENT_PASSED. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit c7235a2c63651d629c728bdce8e21b03d2687dd3 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Mon Jun 3 11:50:56 2024 +0200 rsync: Update to version 3.3.0 - Update from version 3.2.7 to 3.3.0 - Update of rootfile not required - Changelog 3.3.0 ### BUG FIXES: - Fixed a bug with `--sparse --inplace` where a trailing gap in the source file would not clear out the trailing data in the destination file. - Fixed an buffer overflow in the checksum2 code if SHA1 is being used for the checksum2 algorithm. - Fixed an issue when rsync is compiled using `_FORTIFY_SOURCE` so that the extra tests don't complain about a strlcpy() limit value (which was too large, even though it wasn't possible for the larger value to cause an overflow). - Add a backtick to the list of characters that the filename quoting needs to escape using backslashes. - Fixed a string-comparison issue in the internal handling of `--progress` (a locale such as tr_TR.utf-8 needed the internal triggering of `--info` options to use upper-case flag names to ensure that they match). - Make sure that a local transfer marks the sender side as trusted. - Change the argv handling to work with a newer popt library -- one that likes to free more data than it used to. - Rsync now calls `OpenSSL_add_all_algorithms()` when compiled against an older openssl library. - Fixed a problem in the daemon auth for older protocols (29 and before) if the openssl library is being used to compute MD4 checksums. - Fixed `rsync -VV` on Cygwin -- it needed a flush of stdout. - Fixed an old stats bug that counted devices as symlinks. ### ENHANCEMENTS: - Enhanced rrsync with the `-no-overwrite` option that allows you to ensure that existing files on your restricted but writable directory can't be modified. - Enhanced the manpages to mark links with .UR & .UE. If your nroff doesn't support these idioms, touch the file `.md2man-force` in the source directory so that `md-convert` gets called with the `--force-link-text` option, and that should ensure that your manpages are still readable even with the ignored markup. - Some manpage improvements on the handling of [global] modules. - Changed the mapfrom & mapto perl scripts (in the support dir) into a single python script named idmap. Converted a couple more perl scripts into python. - Changed the mnt-excl perl script (in the support dir) into a python script. ### DEVELOPER RELATED: - Updated config.guess (timestamp 2023-01-01) and config.sub (timestamp 2023-01-21). Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit dec072b2441be3efb091463a61b105fc85e1ae48 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Mon Jun 3 16:47:28 2024 +0200 git: Update to version 2.45.2 - Update from version 2.44.0 to 2.45.2 - Update of rootfile not required - Changelog 2.45.2 In preparing security fixes for four CVEs, we made overly aggressive "defense in depth" changes that broke legitimate use cases like 'git lfs' and 'git annex.' This release is to revert these misguided, if well-intentioned, changes that were shipped in 2.45.1 and were not direct security fixes. send-email: drop FakeTerm hack send-email: avoid creating more than one Term::ReadLine object ci: drop mention of BREW_INSTALL_PACKAGES variable ci: avoid bare "gcc" for osx-gcc job ci: stop installing "gcc-13" for osx-gcc hook: plug a new memory leak init: use the correct path of the templates directory again Revert "core.hooksPath: add some protection while cloning" tests: verify that `clone -c core.hooksPath=/dev/null` works again clone: drop the protections where hooks aren't run Revert "Add a helper function to compare file contents" Revert "fsck: warn about symlink pointing inside a gitdir" 2.45.1 This release merges up the fix that appears in v2.39.4, v2.40.2, v2.41.1, v2.42.2, v2.43.4 and v2.44.1 to address the security issues CVE-2024-32002, CVE-2024-32004, CVE-2024-32020, CVE-2024-32021 and CVE-2024-32465; see the release notes for these versions for details. 2.45.0 Backward Compatibility Notes UI, Workflows & Features * Integrate the reftable code into the refs framework as a backend. With "git init --ref-format=reftable", hopefully it would be a lot more efficient to manage a repository with many references. * "git checkout -p" and friends learned that that "@" is a synonym for "HEAD". * Variants of vimdiff learned to honor mergetool.<variant>.layout settings. * "git reflog" learned a "list" subcommand that enumerates known reflogs. * When a merge conflicted at a submodule, merge-ort backend used to unconditionally give a lengthy message to suggest how to resolve it. Now the message can be squelched as an advice message. * "git for-each-ref" learned "--include-root-refs" option to show even the stuff outside the 'refs/' hierarchy. * "git rev-list --missing=print" has learned to optionally take "--allow-missing-tips", which allows the objects at the starting points to be missing. * "git merge-tree" has learned that the three trees involved in the 3-way merge only need to be trees, not necessarily commits. * "git log --merge" learned to pay attention to CHERRY_PICK_HEAD and other kinds of *_HEAD pseudorefs. * Platform specific tweaks for OS/390 has been added to config.mak.uname. * Users with safe.bareRepository=explicit can still work from within $GIT_DIR of a seconary worktree (which resides at .git/worktrees/$name/) of the primary worktree without explicitly specifying the $GIT_DIR environment variable or the --git-dir=<path> option. * The output format for dates "iso-strict" has been tweaked to show a time in the Zulu timezone with "Z" suffix, instead of "+00:00". * "git diff" and friends learned two extra configuration variables, diff.srcPrefix and diff.dstPrefix. * The status.showUntrackedFiles configuration variable had a name that tempts users to set a Boolean value expressed in our usual "false", "off", and "0", but it only took "no". This has been corrected so "true" and its synonyms are taken as "normal", while "false" and its synonyms are taken as "no". * Remove an ancient and not well maintained Hg-to-git migration script from contrib/. * Hints that suggest what to do after resolving conflicts can now be squelched by disabling advice.mergeConflict. * Allow git-cherry-pick(1) to automatically drop redundant commits via a new `--empty` option, similar to the `--empty` options for git-rebase(1) and git-am(1). Includes a soft deprecation of `--keep-redundant-commits` as well as some related docs changes and sequencer code cleanup. * "git config" learned "--comment=<message>" option to leave a comment immediately after the "variable = value" on the same line in the configuration file. * core.commentChar used to be limited to a single byte, but has been updated to allow an arbitrary multi-byte sequence. * "git add -p" and other "interactive hunk selection" UI has learned to skip showing the hunk immediately after it has already been shown, and an additional action to explicitly ask to reshow the current hunk. * "git pack-refs" learned the "--auto" option, which defers the decision of whether and how to pack to the ref backend. This is used by the reftable backend to avoid repacking of an already-optimal ref database. The new mode is triggered from "git gc --auto". * "git add -u <pathspec>" and "git commit [-i] <pathspec>" did not diagnose a pathspec element that did not match any files in certain situations, unlike "git add <pathspec>" did. * The userdiff patterns for C# has been updated. * Git writes a "waiting for your editor" message on an incomplete line after launching an editor, and then append another error message on the same line if the editor errors out. It now clears the "waiting for..." line before giving the error message. * The filename used for rejected hunks "git apply --reject" creates was limited to PATH_MAX, which has been lifted. * When "git bisect" reports the commit it determined to be the culprit, we used to show it in a format that does not honor common UI tweaks, like log.date and log.decorate. The code has been taught to use "git show" to follow more customizations. Performance, Internal Implementation, Development Support etc. * The code to iterate over refs with the reftable backend has seen some optimization. * More tests that are marked as "ref-files only" have been updated to improve test coverage of reftable backend. * Some parts of command line completion script (in contrib/) have been micro-optimized. * The way placeholders are to be marked-up in documentation have been specified; use "_<placeholder>_" to typeset the word inside a pair of <angle-brackets> emphasized. * "git --no-lazy-fetch cmd" allows to run "cmd" while disabling lazy fetching of objects from the promisor remote, which may be handy for debugging. * The implementation in "git clean" that makes "-n" and "-i" ignore clean.requireForce has been simplified, together with the documentation. * Uses of xwrite() helper have been audited and updated for better error checking and simpler code. * Some trace2 events that lacked def_param have learned to show it, enriching the output. * The parse-options code that deals with abbreviated long option names have been cleaned up. * The code in reftable backend that creates new table files works better with the tempfile framework to avoid leaving cruft after a failure. * The reftable code has its own custom binary search function whose comparison callback has an unusual interface, which caused the binary search to degenerate into a linear search, which has been corrected. * The code to iterate over reflogs in the reftable has been optimized to reduce memory allocation and deallocation. * Work to support a repository that work with both SHA-1 and SHA-256 hash algorithms has started. * A new fuzz target that exercises config parsing code has been added. * Fix the way recently added tests interpolate variables defined outside them, and document the best practice to help future developers. * Introduce an experimental protocol for contributors to propose the topic description to be used in the "What's cooking" report, the merge commit message for the topic, and in the release notes and document it in the SubmittingPatches document. * The t/README file now gives a hint on running individual tests in the "t/" directory with "make t<num>-*.sh t<num>-*.sh". (merge 8d383806fc pb/test-scripts-are-build-targets later to maint). * The "hint:" messages given by the advice mechanism, when given a message with a blank line, left a line with trailing whitespace, which has been cleansed. * Documentation rules has been explicitly described how to mark-up literal parts and a few manual pages have been updated as examples. * The .editorconfig file has been taught that a Makefile uses HT indentation. * t-prio-queue test has been cleaned up by using C99 compound literals; this is meant to also serve as a weather-balloon to smoke out folks with compilers who have trouble compiling code that uses the feature. * Windows binary used to decide the use of unix-domain socket at build time, but it learned to make the decision at runtime instead. * The "shared repository" test in the t0610 reftable test failed under restrictive umask setting (e.g. 007), which has been corrected. * Document and apply workaround for a buggy version of dash that mishandles "local var=val" construct. * The codepaths that reach date_mode_from_type() have been updated to pass "struct date_mode" by value to make them thread safe. * The strategy to compact multiple tables of reftables after many operations accumulate many entries has been improved to avoid accumulating too many tables uncollected. * The code to iterate over reftable blocks has seen some optimization to reduce memory allocation and deallocation. * The way "git fast-import" handles paths described in its input has been tightened up and more clearly documented. * The cvsimport tests required that the platform understands traditional timezone notations like CST6CDT, which has been updated to work on those systems as long as they understand POSIX notation with explicit tz transition dates. * The code to format trailers have been cleaned up. 2.44.0 * "git apply" on a filesystem without filemode support have learned to take a hint from what is in the index for the path, even when not working with the "--index" or "--cached" option, when checking the executable bit match what is required by the preimage in the patch. (merge 45b625142d cp/apply-core-filemode later to maint). * "git column" has been taught to reject negative padding value, as it would lead to nonsense behaviour including division by zero. (merge 76fb807faa kh/column-reject-negative-padding later to maint). * "git am --help" now tells readers what actions are available in "git am --whitespace=<action>", in addition to saying that the option is passed through to the underlying "git apply". (merge a171dac734 jc/am-whitespace-doc later to maint). * "git tag --column" failed to check the exit status of its "git column" invocation, which has been corrected. (merge 92e66478fc rj/tag-column-fix later to maint). * Credential helper based on libsecret (in contrib/) has been updated to handle an empty password correctly. (merge 8f1f2023b7 mh/libsecret-empty-password-fix later to maint). * "git difftool --dir-diff" learned to honor the "--trust-exit-code" option; it used to always exit with 0 and signalled success. (merge eb84c8b6ce ps/difftool-dir-diff-exit-code later to maint). * The code incorrectly attempted to use textconv cache when asked, even when we are not running in a repository, which has been corrected. (merge affe355fe7 jk/textconv-cache-outside-repo-fix later to maint). * Remove an empty file that shouldn't have been added in the first place. (merge 4f66942215 js/remove-cruft-files later to maint). * The logic to access reflog entries by date and number had ugly corner cases at the boundaries, which have been cleaned up. (merge 5edd126720 jk/reflog-special-cases-fix later to maint). * An error message from "git upload-pack", which responds to "git fetch" requests, had a trailing NUL in it, which has been corrected. (merge 3f4c7a0805 sg/upload-pack-error-message-fix later to maint). * Clarify wording in the CodingGuidelines that requires <git-compat-util.h> to be the first header file. (merge 4e89f0e07c jc/doc-compat-util later to maint). * "git commit -v --cleanup=scissors" used to add the scissors line twice in the log message buffer, which has been corrected. (merge e90cc075cc jt/commit-redundant-scissors-fix later to maint). * A custom remote helper no longer cannot access the newly created repository during "git clone", which is a regression in Git 2.44. This has been corrected. (merge 199f44cb2e ps/remote-helper-repo-initialization-fix later to maint). * Various parts of upload-pack have been updated to bound the resource consumption relative to the size of the repository to protect from abusive clients. (merge 6cd05e768b jk/upload-pack-bounded-resources later to maint). * The upload-pack program, when talking over v2, accepted the packfile-uris protocol extension from the client, even if it did not advertise the capability, which has been corrected. (merge a922bfa3b5 jk/upload-pack-v2-capability-cleanup later to maint). * Make sure failure return from merge_bases_many() is properly caught. (merge 25fd20eb44 js/merge-base-with-missing-commit later to maint). * FSMonitor client code was confused when FSEvents were given in a different case on a case-insensitive filesystem, which has been corrected. (merge 29c139ce78 jh/fsmonitor-icase-corner-case-fix later to maint). * The "core.commentChar" configuration variable only allows an ASCII character, which was not clearly documented, which has been corrected. (merge fb7c556f58 kh/doc-commentchar-is-a-byte later to maint). * With release 2.44 we got rid of all uses of test_i18ngrep and there is no in-flight topic that adds a new use of it. Make a call to test_i18ngrep a hard failure, so that we can remove it at the end of this release cycle. (merge 381a83dfa3 jc/test-i18ngrep later to maint). * The command line completion script (in contrib/) learned to complete "git reflog" better. (merge 1284f9cc11 rj/complete-reflog later to maint). * The logic to complete the command line arguments to "git worktree" subcommand (in contrib/) has been updated to correctly honor things like "git -C dir" etc. (merge 3574816d98 rj/complete-worktree-paths-fix later to maint). * When git refuses to create a branch because the proposed branch name is not a valid refname, an advice message is given to refer the user to exact naming rules. (merge 8fbd903e58 kh/branch-ref-syntax-advice later to maint). * Code simplification by getting rid of code that sets an environment variable that is no longer used. (merge 72a8d3f027 pw/rebase-i-ignore-cherry-pick-help-environment later to maint). * The code to find the effective end of log messages can fall into an endless loop, which has been corrected. (merge 2541cba2d6 fs/find-end-of-log-message-fix later to maint). * Mark-up used in the documentation has been improved for consistency. (merge 45d5ed3e50 ja/doc-markup-fixes later to maint). * The status.showUntrackedFiles configuration variable was incorrectly documented to accept "false", which has been corrected. * Leaks from "git restore" have been plugged. (merge 2f64da0790 rj/restore-plug-leaks later to maint). * "git bugreport --no-suffix" was not supported and instead segfaulted, which has been corrected. (merge b3b57c69da js/bugreport-no-suffix-fix later to maint). * The documentation for "%(trailers[:options])" placeholder in the "--pretty" option of commands in the "git log" family has been updated. (merge bff85a338c bl/doc-key-val-sep-fix later to maint). * "git checkout --conflict=bad" reported a bad conflictStyle as if it were given to a configuration variable; it has been corrected to report that the command line option is bad. (merge 5a99c1ac1a pw/checkout-conflict-errorfix later to maint). * Code clean-up in the "git log" machinery that implements custom log message formatting. (merge 1c10b8e5b0 jk/pretty-subject-cleanup later to maint). * "git config" corrupted literal HT characters written in the configuration file as part of a value, which has been corrected. (merge e6895c3f97 ds/config-internal-whitespace-fix later to maint). * A unit test for reftable code tried to enumerate all files in a directory after reftable operations and expected to see nothing but the files it wanted to leave there, but was fooled by .nfs* cruft files left, which has been corrected. (merge 0068aa7946 ps/reftable-unit-test-nfs-workaround later to maint). * The implementation and documentation of "object-format" option exchange between the Git itself and its remote helpers did not quite match, which has been corrected. * The "--pretty=<shortHand>" option of the commands in the "git log" family, defined as "[pretty] shortHand = <expansion>" should have been looked up case insensitively, but was not, which has been corrected. (merge f999d5188b bl/pretty-shorthand-config-fix later to maint). * "git apply" failed to extract the filename the patch applied to, when the change was about an empty file created in or deleted from a directory whose name ends with a SP, which has been corrected. (merge 776ffd1a30 jc/apply-parse-diff-git-header-names-fix later to maint). * Update a more recent tutorial doc. (merge 95ab557b4b dg/myfirstobjectwalk-updates later to maint). * The test script had an incomplete and ineffective attempt to avoid clobbering the testing user's real crontab (and its equivalents), which has been completed. (merge 73cb87773b es/test-cron-safety later to maint). * Use advice_if_enabled() API to rewrite a simple pattern to call advise() after checking advice_enabled(). (merge 6412d01527 rj/use-adv-if-enabled later to maint). * Another "set -u" fix for the bash prompt (in contrib/) script. (merge d7805bc743 vs/complete-with-set-u-fix later to maint). * "git checkout/switch --detach foo", after switching to the detached HEAD state, gave the tracking information for the 'foo' branch, which was pointless. * "git apply" has been updated to lift the hardcoded pathname length limit, which in turn allowed a mksnpath() function that is no longer used. (merge 708f7e0590 rs/apply-lift-path-length-limit later to maint). * A file descriptor leak in an error codepath, used when "git apply --reject" fails to create the *.rej file, has been corrected. (merge 2b1f456adf rs/apply-reject-fd-leakfix later to maint). * A config parser callback function fell through instead of returning after recognising and processing a variable, wasting cycles, which has been corrected. (merge a816ccd642 ds/fetch-config-parse-microfix later to maint). * Fix was added to work around a regression in libcURL 8.7.0 (which has already been fixed in their tip of the tree). (merge 92a209bf24 jk/libcurl-8.7-regression-workaround later to maint). * The variable that holds the value read from the core.excludefile configuration variable used to leak, which has been corrected. (merge 0e0fefb29f jc/unleak-core-excludesfile later to maint). * vreportf(), which is used by error() and friends, has been taught to give the error message printf-format string when its vsnprintf() call fails, instead of showing nothing useful to identify the nature of the error. (merge c63adab961 rs/usage-fallback-to-show-message-format later to maint). * Adjust to an upcoming changes to GNU make that breaks our Makefiles. (merge 227b8fd902 tb/make-indent-conditional-with-non-spaces later to maint). * Git 2.44 introduced a regression that makes the updated code to barf in repositories with multi-pack index written by older versions of Git, which has been corrected. * When .git/rr-cache/ rerere database gets corrupted or rerere is fed to work on a file with conflicted hunks resolved incompletely, the rerere machinery got confused and segfaulted, which has been corrected. (merge 167395bb47 mr/rerere-crash-fix later to maint). * The "receive-pack" program (which responds to "git push") was not converted to run "git maintenance --auto" when other codepaths that used to run "git gc --auto" were updated, which has been corrected. (merge 7bf3057d9c ps/run-auto-maintenance-in-receive-pack later to maint). * Other code cleanup, docfix, build fix, etc. (merge f0e578c69c rs/use-xstrncmpz later to maint). (merge 83e6eb7d7a ba/credential-test-clean-fix later to maint). (merge 64562d784d jb/doc-interactive-singlekey-do-not-need-perl later to maint). (merge c431a235e2 cp/t9146-use-test-path-helpers later to maint). (merge 82d75402d5 ds/doc-send-email-capitalization later to maint). (merge 41bff66e35 jc/doc-add-placeholder-fix later to maint). (merge 6835f0efe9 jw/remote-doc-typofix later to maint). (merge 244001aa20 hs/rebase-not-in-progress later to maint). (merge 2ca6c07db2 jc/no-include-of-compat-util-from-headers later to maint). (merge 87bd7fbb9c rs/fetch-simplify-with-starts-with later to maint). (merge f39addd0d9 rs/name-rev-with-mempool later to maint). (merge 9a97b43e03 rs/submodule-prefix-simplify later to maint). (merge 40b8076462 ak/rebase-autosquash later to maint). (merge 3223204456 eg/add-uflags later to maint). (merge 5f78d52dce es/config-doc-sort-sections later to maint). (merge 781fb7b4c2 as/option-names-in-messages later to maint). (merge 51d41dc243 jk/doc-remote-helpers-markup-fix later to maint). (merge e1aaf309db pb/ci-win-artifact-names-fix later to maint). (merge ad538c61da jc/index-pack-fsck-levels later to maint). (merge 67471bc704 ja/doc-formatting-fix later to maint). (merge 86f9ce7dd6 bl/doc-config-fixes later to maint). (merge 0d527842b7 az/grep-group-error-message-update later to maint). (merge 7c43bdf07b rs/strbuf-expand-bad-format later to maint). (merge 8b68b48d5c ds/typofix-core-config-doc later to maint). (merge 39bb692152 rs/imap-send-use-xsnprintf later to maint). (merge 8d320cec60 jc/t2104-style-fixes later to maint). (merge b4454d5a7b pw/t3428-cleanup later to maint). (merge 84a7c33a4b pf/commitish-committish later to maint). (merge 8882ee9d68 la/mailmap-entry later to maint). (merge 44bdba2fa6 rs/no-openssl-compilation-fix-on-macos later to maint). (merge f412d72c19 yb/replay-doc-linkfix later to maint). (merge 5da40be8d7 xx/rfc2822-date-format-in-doc later to maint). Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit c375bcf8cd703e23ca2da222c469a4784b5bfd67 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed May 29 09:35:03 2024 +0000 vectorscan: Don't build for riscv64 This architecture does not seem to be support and since we don't support this as a primary architecture just yet, we will build without this package. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit db27ff326e5d39d68dce72ef39b2b0f5ec54092e Merge: f62e483601 f3d6e2a0fb Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Jun 4 14:15:20 2024 +0200 Merge remote-tracking branch 'origin/master' into next ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/{ => aarch64}/vectorscan | 0 config/rootfiles/common/x86_64/vectorscan | 1 + config/rootfiles/packages/nut | 3 +- config/rootfiles/packages/postfix | 1 + config/rootfiles/packages/x86_64/samba | 317 +++++++++++++-------- lfs/git | 6 +- lfs/linux | 3 + lfs/nut | 8 +- lfs/postfix | 8 +- lfs/rsync | 8 +- lfs/samba | 6 +- lfs/vectorscan | 1 + src/paks/postfix/install.sh | 4 - .../linux/linux-6.6.32-asix88179_reset.patch | 17 ++ 14 files changed, 234 insertions(+), 149 deletions(-) rename config/rootfiles/common/{ => aarch64}/vectorscan (100%) create mode 120000 config/rootfiles/common/x86_64/vectorscan create mode 100644 src/patches/linux/linux-6.6.32-asix88179_reset.patch Difference in files: diff --git a/config/rootfiles/common/vectorscan b/config/rootfiles/common/aarch64/vectorscan similarity index 100% rename from config/rootfiles/common/vectorscan rename to config/rootfiles/common/aarch64/vectorscan diff --git a/config/rootfiles/common/x86_64/vectorscan b/config/rootfiles/common/x86_64/vectorscan new file mode 120000 index 0000000000..d9581de701 --- /dev/null +++ b/config/rootfiles/common/x86_64/vectorscan @@ -0,0 +1 @@ +../aarch64/vectorscan \ No newline at end of file diff --git a/config/rootfiles/packages/nut b/config/rootfiles/packages/nut index 1acab9d514..4d1d17887d 100644 --- a/config/rootfiles/packages/nut +++ b/config/rootfiles/packages/nut @@ -39,6 +39,7 @@ usr/bin/mge-utalk usr/bin/microdowell usr/bin/microsol-apc usr/bin/nut-scanner +usr/bin/nutconf usr/bin/nutdrv_atcl_usb usr/bin/nutdrv_qx usr/bin/nutdrv_siemens-sitop @@ -77,7 +78,7 @@ usr/lib/libnutclientstub.so.1.0.1 #usr/lib/libnutscan.la #usr/lib/libnutscan.so usr/lib/libnutscan.so.2 -usr/lib/libnutscan.so.2.0.2 +usr/lib/libnutscan.so.2.0.5 #usr/lib/libupsclient.la #usr/lib/libupsclient.so usr/lib/libupsclient.so.6 diff --git a/config/rootfiles/packages/postfix b/config/rootfiles/packages/postfix index 23e1efb255..b77a5b42aa 100644 --- a/config/rootfiles/packages/postfix +++ b/config/rootfiles/packages/postfix @@ -96,6 +96,7 @@ usr/sbin/sendmail.postfix #usr/share/man/man5/lmdb_table.5 #usr/share/man/man5/master.5 #usr/share/man/man5/memcache_table.5 +#usr/share/man/man5/mongodb_table.5 #usr/share/man/man5/mysql_table.5 #usr/share/man/man5/nisplus_table.5 #usr/share/man/man5/pcre_table.5 diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index 7a44b9cdb2..f511e0101f 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -46,6 +46,7 @@ usr/bin/tdbrestore usr/bin/tdbtool usr/bin/testparm usr/bin/wbinfo +usr/bin/wspsearch #usr/include/samba-4.0 #usr/include/samba-4.0/charset.h #usr/include/samba-4.0/core @@ -109,6 +110,7 @@ usr/bin/wbinfo #usr/include/samba-4.0/samba/version.h #usr/include/samba-4.0/share.h #usr/include/samba-4.0/smb2_lease_struct.h +#usr/include/samba-4.0/smb3posix.h #usr/include/samba-4.0/smb_ldap.h #usr/include/samba-4.0/smbconf.h #usr/include/samba-4.0/smbldap.h @@ -156,8 +158,8 @@ usr/lib/libndr-standard.so usr/lib/libndr-standard.so.0 usr/lib/libndr-standard.so.0.0.1 usr/lib/libndr.so -usr/lib/libndr.so.3 -usr/lib/libndr.so.3.0.1 +usr/lib/libndr.so.4 +usr/lib/libndr.so.4.0.0 usr/lib/libnetapi.so usr/lib/libnetapi.so.1 usr/lib/libnetapi.so.1.0.0 @@ -186,7 +188,7 @@ usr/lib/libsamdb.so.0 usr/lib/libsamdb.so.0.0.1 usr/lib/libsmbclient.so usr/lib/libsmbclient.so.0 -usr/lib/libsmbclient.so.0.7.0 +usr/lib/libsmbclient.so.0.8.0 usr/lib/libsmbconf.so usr/lib/libsmbconf.so.0 usr/lib/libsmbconf.so.0.0.1 @@ -235,6 +237,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/atsvc.cpython-310-xxxMACHINExxx-li usr/lib/python3.10/site-packages/samba/dcerpc/auth.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/base.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/claims.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/conditional_ace.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/dcerpc.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/dfs.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/dns.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -244,6 +247,8 @@ usr/lib/python3.10/site-packages/samba/dcerpc/drsblobs.cpython-310-xxxMACHINExxx usr/lib/python3.10/site-packages/samba/dcerpc/drsuapi.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/echo.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/epmapper.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/gkdi.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/gmsa.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/idmap.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/initshutdown.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/irpc.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -261,6 +266,8 @@ usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-xxxMACHINExxx-lin usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-xxxMACHINExxx-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/smbXsrv.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb_acl.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/spoolss.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/srvsvc.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -288,12 +295,14 @@ usr/lib/python3.10/site-packages/samba/forest_update.py usr/lib/python3.10/site-packages/samba/functional_level.py usr/lib/python3.10/site-packages/samba/gensec.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/getopt.py +usr/lib/python3.10/site-packages/samba/gkdi.py usr/lib/python3.10/site-packages/samba/gp usr/lib/python3.10/site-packages/samba/gp/__init__.py usr/lib/python3.10/site-packages/samba/gp/gp_centrify_crontab_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_centrify_sudoers_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_cert_auto_enroll_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_chromium_ext.py +usr/lib/python3.10/site-packages/samba/gp/gp_drive_maps_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_ext_loader.py usr/lib/python3.10/site-packages/samba/gp/gp_firefox_ext.py usr/lib/python3.10/site-packages/samba/gp/gp_firewalld_ext.py @@ -324,6 +333,7 @@ usr/lib/python3.10/site-packages/samba/gp_parse/gp_pol.py usr/lib/python3.10/site-packages/samba/gpo.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/graph.py usr/lib/python3.10/site-packages/samba/hostconfig.py +usr/lib/python3.10/site-packages/samba/hresult.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/idmap.py usr/lib/python3.10/site-packages/samba/join.py #usr/lib/python3.10/site-packages/samba/kcc @@ -381,7 +391,9 @@ usr/lib/python3.10/site-packages/samba/netcmd/domain/models/auth_silo.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/claim_type.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/exceptions.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/fields.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/models/group.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/model.py +usr/lib/python3.10/site-packages/samba/netcmd/domain/models/query.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/schema.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/site.py usr/lib/python3.10/site-packages/samba/netcmd/domain/models/subnet.py @@ -410,12 +422,42 @@ usr/lib/python3.10/site-packages/samba/netcmd/processes.py usr/lib/python3.10/site-packages/samba/netcmd/pso.py usr/lib/python3.10/site-packages/samba/netcmd/rodc.py usr/lib/python3.10/site-packages/samba/netcmd/schema.py +usr/lib/python3.10/site-packages/samba/netcmd/shell.py usr/lib/python3.10/site-packages/samba/netcmd/sites.py usr/lib/python3.10/site-packages/samba/netcmd/spn.py usr/lib/python3.10/site-packages/samba/netcmd/testparm.py -usr/lib/python3.10/site-packages/samba/netcmd/user.py +#usr/lib/python3.10/site-packages/samba/netcmd/user +usr/lib/python3.10/site-packages/samba/netcmd/user/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/user/add.py +usr/lib/python3.10/site-packages/samba/netcmd/user/add_unix_attrs.py +#usr/lib/python3.10/site-packages/samba/netcmd/user/auth +usr/lib/python3.10/site-packages/samba/netcmd/user/auth/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/user/auth/policy.py +usr/lib/python3.10/site-packages/samba/netcmd/user/auth/silo.py +usr/lib/python3.10/site-packages/samba/netcmd/user/delete.py +usr/lib/python3.10/site-packages/samba/netcmd/user/disable.py +usr/lib/python3.10/site-packages/samba/netcmd/user/edit.py +usr/lib/python3.10/site-packages/samba/netcmd/user/enable.py +usr/lib/python3.10/site-packages/samba/netcmd/user/getgroups.py +usr/lib/python3.10/site-packages/samba/netcmd/user/list.py +usr/lib/python3.10/site-packages/samba/netcmd/user/move.py +usr/lib/python3.10/site-packages/samba/netcmd/user/password.py +#usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/__init__.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/common.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/get_kerberos_ticket.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/getpassword.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/show.py +usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/syncpasswords.py +usr/lib/python3.10/site-packages/samba/netcmd/user/rename.py +usr/lib/python3.10/site-packages/samba/netcmd/user/sensitive.py +usr/lib/python3.10/site-packages/samba/netcmd/user/setexpiry.py +usr/lib/python3.10/site-packages/samba/netcmd/user/setpassword.py +usr/lib/python3.10/site-packages/samba/netcmd/user/setprimarygroup.py +usr/lib/python3.10/site-packages/samba/netcmd/user/unlock.py usr/lib/python3.10/site-packages/samba/netcmd/validators.py usr/lib/python3.10/site-packages/samba/netcmd/visualize.py +usr/lib/python3.10/site-packages/samba/nt_time.py usr/lib/python3.10/site-packages/samba/ntacls.py usr/lib/python3.10/site-packages/samba/ntstatus.cpython-310-xxxMACHINExxx-linux-gnu.so usr/lib/python3.10/site-packages/samba/param.cpython-310-xxxMACHINExxx-linux-gnu.so @@ -471,16 +513,21 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/__init__.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/bug13653.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/check_output.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/claims.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/downgradedatabase.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/http_chunk.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/mdsearch.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/ndrdump.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_dns.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_json.py +usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/samba_dnsupdate.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_basic.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_dfs_propagate_inherit.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_propagate_inhertance.py +#usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_save_restore.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcontrol.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcontrol_process.py #usr/lib/python3.10/site-packages/samba/tests/blackbox/traffic_learner.py @@ -489,6 +536,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/common.py #usr/lib/python3.10/site-packages/samba/tests/complex_expressions.py #usr/lib/python3.10/site-packages/samba/tests/compression.py +#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_assembler.py +#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_bytes.py +#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_claims.py #usr/lib/python3.10/site-packages/samba/tests/core.py #usr/lib/python3.10/site-packages/samba/tests/cred_opt.py #usr/lib/python3.10/site-packages/samba/tests/credentials.py @@ -541,6 +591,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/gensec.py #usr/lib/python3.10/site-packages/samba/tests/get_opt.py #usr/lib/python3.10/site-packages/samba/tests/getdcname.py +#usr/lib/python3.10/site-packages/samba/tests/gkdi.py #usr/lib/python3.10/site-packages/samba/tests/glue.py #usr/lib/python3.10/site-packages/samba/tests/gpo.py #usr/lib/python3.10/site-packages/samba/tests/gpo_member.py @@ -563,14 +614,17 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/krb5/claims_in_pac.py #usr/lib/python3.10/site-packages/samba/tests/krb5/claims_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/compatability_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/conditional_ace_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/device_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/etype_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/fast_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/gkdi_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/group_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kcrypto.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_base_test.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgs_tests.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgt_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/kpasswd_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/lockout_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/ms_kile_client_principal_lookup_tests.py @@ -581,6 +635,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/krb5/raw_testcase.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_constants.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1.py +#usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1_generated.py #usr/lib/python3.10/site-packages/samba/tests/krb5/rodc_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/s4u_tests.py #usr/lib/python3.10/site-packages/samba/tests/krb5/salt_tests.py @@ -605,7 +660,10 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/logfiles.py #usr/lib/python3.10/site-packages/samba/tests/lsa_string.py #usr/lib/python3.10/site-packages/samba/tests/messaging.py -#usr/lib/python3.10/site-packages/samba/tests/ndr.py +#usr/lib/python3.10/site-packages/samba/tests/ndr +#usr/lib/python3.10/site-packages/samba/tests/ndr/gkdi.py +#usr/lib/python3.10/site-packages/samba/tests/ndr/gmsa.py +#usr/lib/python3.10/site-packages/samba/tests/ndr/wbint.py #usr/lib/python3.10/site-packages/samba/tests/net_join.py #usr/lib/python3.10/site-packages/samba/tests/net_join_no_spnego.py #usr/lib/python3.10/site-packages/samba/tests/netbios.py @@ -654,7 +712,6 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/contact.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/demote.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/dnscmd.py -#usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_policy.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_silo.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_claim.py @@ -680,10 +737,15 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/provision_userPassword_crypt.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/rodc.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/schema.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/silo_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/sites.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/timecmd.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_auth_policy.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_auth_silo.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_check_password_script.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_get_kerberos_ticket.py +#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_getpassword_gmsa.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA_base.py #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA_gpg.py @@ -695,7 +757,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/samdb.py #usr/lib/python3.10/site-packages/samba/tests/samdb_api.py #usr/lib/python3.10/site-packages/samba/tests/sddl.py +#usr/lib/python3.10/site-packages/samba/tests/sddl_conditional_ace.py #usr/lib/python3.10/site-packages/samba/tests/security.py +#usr/lib/python3.10/site-packages/samba/tests/security_descriptors.py #usr/lib/python3.10/site-packages/samba/tests/segfault.py #usr/lib/python3.10/site-packages/samba/tests/sid_strings.py #usr/lib/python3.10/site-packages/samba/tests/smb-notify.py @@ -711,6 +775,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py #usr/lib/python3.10/site-packages/samba/tests/strings.py #usr/lib/python3.10/site-packages/samba/tests/subunitrun.py #usr/lib/python3.10/site-packages/samba/tests/tdb_util.py +#usr/lib/python3.10/site-packages/samba/tests/token_factory.py #usr/lib/python3.10/site-packages/samba/tests/upgrade.py #usr/lib/python3.10/site-packages/samba/tests/upgradeprovision.py #usr/lib/python3.10/site-packages/samba/tests/upgradeprovisionneeddc.py @@ -750,126 +815,126 @@ usr/lib/samba/ldb/sample.so usr/lib/samba/ldb/server_sort.so usr/lib/samba/ldb/skel.so usr/lib/samba/ldb/tdb.so -usr/lib/samba/libCHARSET3-samba4.so -usr/lib/samba/libLIBWBCLIENT-OLD-samba4.so -usr/lib/samba/libMESSAGING-SEND-samba4.so -usr/lib/samba/libMESSAGING-samba4.so -usr/lib/samba/libREG-FULL-samba4.so -usr/lib/samba/libRPC-SERVER-LOOP-samba4.so -usr/lib/samba/libRPC-WORKER-samba4.so -usr/lib/samba/libaddns-samba4.so -usr/lib/samba/libads-samba4.so -usr/lib/samba/libasn1-samba4.so -usr/lib/samba/libasn1util-samba4.so -usr/lib/samba/libauth-samba4.so -usr/lib/samba/libauth-unix-token-samba4.so -usr/lib/samba/libauth4-samba4.so -usr/lib/samba/libauthkrb5-samba4.so -usr/lib/samba/libcli-cldap-samba4.so -usr/lib/samba/libcli-ldap-common-samba4.so -usr/lib/samba/libcli-ldap-samba4.so -usr/lib/samba/libcli-nbt-samba4.so -usr/lib/samba/libcli-smb-common-samba4.so -usr/lib/samba/libcli-spoolss-samba4.so -usr/lib/samba/libcliauth-samba4.so -usr/lib/samba/libclidns-samba4.so -usr/lib/samba/libcluster-samba4.so -usr/lib/samba/libcmdline-contexts-samba4.so -usr/lib/samba/libcmdline-samba4.so -usr/lib/samba/libcmocka-samba4.so -usr/lib/samba/libcom-err-samba4.so -usr/lib/samba/libcommon-auth-samba4.so -usr/lib/samba/libdbwrap-samba4.so -usr/lib/samba/libdcerpc-pkt-auth-samba4.so -usr/lib/samba/libdcerpc-samba-samba4.so -usr/lib/samba/libdcerpc-samba4.so -usr/lib/samba/libdnsserver-common-samba4.so -usr/lib/samba/libdsdb-module-samba4.so -usr/lib/samba/libevents-samba4.so -usr/lib/samba/libflag-mapping-samba4.so -usr/lib/samba/libgenrand-samba4.so -usr/lib/samba/libgensec-samba4.so -usr/lib/samba/libgpext-samba4.so -usr/lib/samba/libgpo-samba4.so -usr/lib/samba/libgse-samba4.so -usr/lib/samba/libgss-preauth-samba4.so -usr/lib/samba/libgssapi-samba4.so -usr/lib/samba/libhcrypto-samba4.so -usr/lib/samba/libhdb-samba4.so -usr/lib/samba/libheimbase-samba4.so -usr/lib/samba/libheimntlm-samba4.so -usr/lib/samba/libhttp-samba4.so -usr/lib/samba/libhx509-samba4.so -usr/lib/samba/libidmap-samba4.so -usr/lib/samba/libinterfaces-samba4.so -usr/lib/samba/libiov-buf-samba4.so -usr/lib/samba/libkdc-samba4.so -usr/lib/samba/libkrb5-samba4.so -usr/lib/samba/libkrb5samba-samba4.so -usr/lib/samba/libldb-cmdline-samba4.so -usr/lib/samba/libldb-key-value-samba4.so -usr/lib/samba/libldb-samba4.so -usr/lib/samba/libldb-tdb-err-map-samba4.so -usr/lib/samba/libldb-tdb-int-samba4.so -usr/lib/samba/libldbsamba-samba4.so -usr/lib/samba/liblibcli-lsa3-samba4.so -usr/lib/samba/liblibcli-netlogon3-samba4.so -usr/lib/samba/liblibsmb-samba4.so -usr/lib/samba/libmessages-dgm-samba4.so -usr/lib/samba/libmessages-util-samba4.so -usr/lib/samba/libmscat-samba4.so -usr/lib/samba/libmsghdr-samba4.so -usr/lib/samba/libmsrpc3-samba4.so -usr/lib/samba/libndr-samba-samba4.so -usr/lib/samba/libndr-samba4.so -usr/lib/samba/libnet-keytab-samba4.so -usr/lib/samba/libnetif-samba4.so -usr/lib/samba/libnpa-tstream-samba4.so -usr/lib/samba/libnss-info-samba4.so -usr/lib/samba/libposix-eadb-samba4.so -usr/lib/samba/libprinter-driver-samba4.so -usr/lib/samba/libprinting-migrate-samba4.so -usr/lib/samba/libpyldb-util.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libpytalloc-util.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libregistry-samba4.so -usr/lib/samba/libreplace-samba4.so -usr/lib/samba/libroken-samba4.so -usr/lib/samba/libsamba-cluster-support-samba4.so -usr/lib/samba/libsamba-debug-samba4.so -usr/lib/samba/libsamba-modules-samba4.so -usr/lib/samba/libsamba-net.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libsamba-python.cpython-310-x86-64-linux-gnu-samba4.so -usr/lib/samba/libsamba-security-samba4.so -usr/lib/samba/libsamba-sockets-samba4.so -usr/lib/samba/libsamba3-util-samba4.so -usr/lib/samba/libsamdb-common-samba4.so -usr/lib/samba/libsecrets3-samba4.so -usr/lib/samba/libserver-id-db-samba4.so -usr/lib/samba/libserver-role-samba4.so -usr/lib/samba/libshares-samba4.so -usr/lib/samba/libsmb-transport-samba4.so -usr/lib/samba/libsmbclient-raw-samba4.so -usr/lib/samba/libsmbd-base-samba4.so -usr/lib/samba/libsmbd-shim-samba4.so -usr/lib/samba/libsmbldaphelper-samba4.so -usr/lib/samba/libsmbpasswdparser-samba4.so -usr/lib/samba/libsocket-blocking-samba4.so -usr/lib/samba/libstable-sort-samba4.so -usr/lib/samba/libsys-rw-samba4.so -usr/lib/samba/libtalloc-report-printf-samba4.so -usr/lib/samba/libtalloc-report-samba4.so -usr/lib/samba/libtalloc-samba4.so -usr/lib/samba/libtdb-samba4.so -usr/lib/samba/libtdb-wrap-samba4.so -usr/lib/samba/libtevent-samba4.so -usr/lib/samba/libtime-basic-samba4.so -usr/lib/samba/libtorture-samba4.so -usr/lib/samba/libtrusts-util-samba4.so -usr/lib/samba/libutil-reg-samba4.so -usr/lib/samba/libutil-setid-samba4.so -usr/lib/samba/libutil-tdb-samba4.so -usr/lib/samba/libwind-samba4.so -usr/lib/samba/libxattr-tdb-samba4.so +usr/lib/samba/libCHARSET3-private-samba.so +usr/lib/samba/libLIBWBCLIENT-OLD-private-samba.so +usr/lib/samba/libMESSAGING-SEND-private-samba.so +usr/lib/samba/libMESSAGING-private-samba.so +usr/lib/samba/libREG-FULL-private-samba.so +usr/lib/samba/libRPC-SERVER-LOOP-private-samba.so +usr/lib/samba/libRPC-WORKER-private-samba.so +usr/lib/samba/libaddns-private-samba.so +usr/lib/samba/libads-private-samba.so +usr/lib/samba/libasn1-private-samba.so +usr/lib/samba/libasn1util-private-samba.so +usr/lib/samba/libauth-private-samba.so +usr/lib/samba/libauth-unix-token-private-samba.so +usr/lib/samba/libauth4-private-samba.so +usr/lib/samba/libauthkrb5-private-samba.so +usr/lib/samba/libcli-cldap-private-samba.so +usr/lib/samba/libcli-ldap-common-private-samba.so +usr/lib/samba/libcli-ldap-private-samba.so +usr/lib/samba/libcli-nbt-private-samba.so +usr/lib/samba/libcli-smb-common-private-samba.so +usr/lib/samba/libcli-spoolss-private-samba.so +usr/lib/samba/libcliauth-private-samba.so +usr/lib/samba/libclidns-private-samba.so +usr/lib/samba/libcluster-private-samba.so +usr/lib/samba/libcmdline-contexts-private-samba.so +usr/lib/samba/libcmdline-private-samba.so +usr/lib/samba/libcmocka-private-samba.so +usr/lib/samba/libcom-err-private-samba.so +usr/lib/samba/libcommon-auth-private-samba.so +usr/lib/samba/libdbwrap-private-samba.so +usr/lib/samba/libdcerpc-pkt-auth-private-samba.so +usr/lib/samba/libdcerpc-samba-private-samba.so +usr/lib/samba/libdcerpc-samba4-private-samba.so +usr/lib/samba/libdnsserver-common-private-samba.so +usr/lib/samba/libdsdb-module-private-samba.so +usr/lib/samba/libevents-private-samba.so +usr/lib/samba/libflag-mapping-private-samba.so +usr/lib/samba/libgenrand-private-samba.so +usr/lib/samba/libgensec-private-samba.so +usr/lib/samba/libgpext-private-samba.so +usr/lib/samba/libgpo-private-samba.so +usr/lib/samba/libgse-private-samba.so +usr/lib/samba/libgss-preauth-private-samba.so +usr/lib/samba/libgssapi-private-samba.so +usr/lib/samba/libhcrypto-private-samba.so +usr/lib/samba/libhdb-private-samba.so +usr/lib/samba/libheimbase-private-samba.so +usr/lib/samba/libheimntlm-private-samba.so +usr/lib/samba/libhttp-private-samba.so +usr/lib/samba/libhx509-private-samba.so +usr/lib/samba/libidmap-private-samba.so +usr/lib/samba/libinterfaces-private-samba.so +usr/lib/samba/libiov-buf-private-samba.so +usr/lib/samba/libkdc-private-samba.so +usr/lib/samba/libkrb5-private-samba.so +usr/lib/samba/libkrb5samba-private-samba.so +usr/lib/samba/libldb-cmdline-private-samba.so +usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-private-samba.so +usr/lib/samba/libldb-tdb-err-map-private-samba.so +usr/lib/samba/libldb-tdb-int-private-samba.so +usr/lib/samba/libldbsamba-private-samba.so +usr/lib/samba/liblibcli-lsa3-private-samba.so +usr/lib/samba/liblibcli-netlogon3-private-samba.so +usr/lib/samba/liblibsmb-private-samba.so +usr/lib/samba/libmessages-dgm-private-samba.so +usr/lib/samba/libmessages-util-private-samba.so +usr/lib/samba/libmscat-private-samba.so +usr/lib/samba/libmsghdr-private-samba.so +usr/lib/samba/libmsrpc3-private-samba.so +usr/lib/samba/libndr-samba-private-samba.so +usr/lib/samba/libndr-samba4-private-samba.so +usr/lib/samba/libnet-keytab-private-samba.so +usr/lib/samba/libnetif-private-samba.so +usr/lib/samba/libnpa-tstream-private-samba.so +usr/lib/samba/libnss-info-private-samba.so +usr/lib/samba/libposix-eadb-private-samba.so +usr/lib/samba/libprinter-driver-private-samba.so +usr/lib/samba/libprinting-migrate-private-samba.so +usr/lib/samba/libpyldb-util.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libpytalloc-util.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libregistry-private-samba.so +usr/lib/samba/libreplace-private-samba.so +usr/lib/samba/libroken-private-samba.so +usr/lib/samba/libsamba-cluster-support-private-samba.so +usr/lib/samba/libsamba-debug-private-samba.so +usr/lib/samba/libsamba-modules-private-samba.so +usr/lib/samba/libsamba-net.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-python.cpython-310-x86-64-linux-gnu-private-samba.so +usr/lib/samba/libsamba-security-private-samba.so +usr/lib/samba/libsamba-sockets-private-samba.so +usr/lib/samba/libsamba3-util-private-samba.so +usr/lib/samba/libsamdb-common-private-samba.so +usr/lib/samba/libsecrets3-private-samba.so +usr/lib/samba/libserver-id-db-private-samba.so +usr/lib/samba/libserver-role-private-samba.so +usr/lib/samba/libshares-private-samba.so +usr/lib/samba/libsmb-transport-private-samba.so +usr/lib/samba/libsmbclient-raw-private-samba.so +usr/lib/samba/libsmbd-base-private-samba.so +usr/lib/samba/libsmbd-shim-private-samba.so +usr/lib/samba/libsmbldaphelper-private-samba.so +usr/lib/samba/libsmbpasswdparser-private-samba.so +usr/lib/samba/libsocket-blocking-private-samba.so +usr/lib/samba/libstable-sort-private-samba.so +usr/lib/samba/libsys-rw-private-samba.so +usr/lib/samba/libtalloc-private-samba.so +usr/lib/samba/libtalloc-report-printf-private-samba.so +usr/lib/samba/libtalloc-report-private-samba.so +usr/lib/samba/libtdb-private-samba.so +usr/lib/samba/libtdb-wrap-private-samba.so +usr/lib/samba/libtevent-private-samba.so +usr/lib/samba/libtime-basic-private-samba.so +usr/lib/samba/libtorture-private-samba.so +usr/lib/samba/libtrusts-util-private-samba.so +usr/lib/samba/libutil-reg-private-samba.so +usr/lib/samba/libutil-setid-private-samba.so +usr/lib/samba/libutil-tdb-private-samba.so +usr/lib/samba/libwind-private-samba.so +usr/lib/samba/libxattr-tdb-private-samba.so usr/lib/samba/nss_info usr/lib/samba/nss_info/hash.so usr/lib/samba/nss_info/rfc2307.so diff --git a/lfs/git b/lfs/git index d10ca469c2..98b82c2a21 100644 --- a/lfs/git +++ b/lfs/git @@ -24,7 +24,7 @@ include Config -VER = 2.44.0 +VER = 2.45.2 SUMMARY = Fast, scalable, distributed revision control system THISAPP = git-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = git -PAK_VER = 32 +PAK_VER = 33 DEPS = perl-Authen-SASL perl-MIME-Base64 perl-Net-SMTP-SSL @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 6dc145e20e737763fb738ccb4a65ba2f8d6f35bb4e30520a0c79f4fcc0eaaaf4e99a9be00eaa9e14dec231ed122d54be7dfa9212a3e5a75707730256391896d4 +$(DL_FILE)_BLAKE2 = 477acc786c26e0b04843ad6d07333607b2274d587263d72c6d036cade725e6f62f8c773903f401c799de71527d0473589afc507eec02f445e0c148dd7cbf407c install : $(TARGET) diff --git a/lfs/linux b/lfs/linux index ca3b051191..3f5e608385 100644 --- a/lfs/linux +++ b/lfs/linux @@ -133,6 +133,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) # https://bugzilla.ipfire.org/show_bug.cgi?id=12760 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-5.15-NFQUEUE-Hold-RCU-read-lock-while-calling-nf_reinject.patch + # reset ax88179 twice like in older kernels + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-6.6.32-asix88179_reset.patch + # Fix external module compile cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-6.0-fix_external_module_build.patch diff --git a/lfs/nut b/lfs/nut index ea133b6209..732211628f 100644 --- a/lfs/nut +++ b/lfs/nut @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Network UPS Tools Core (Uninterruptible Power Supply Monitoring) -VER = 2.8.1 +VER = 2.8.2 THISAPP = nut-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nut -PAK_VER = 11 +PAK_VER = 12 DEPS = @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 370a1759beec6eaae6479b5174762b2bc600ca07543aad531cf74e179d8e000b4b3a8dd111c7556eb4fb545ebf8baee24fbb75f6235d03cefe239ba08f042ea5 +$(DL_FILE)_BLAKE2 = 87187293d8acda72c2d807d6f41f2601a318540f63a0ea93782b115402c6b43a0b61ecc710fd6de126d25e59dd4e03681f2b859a87549e9d5f7617ac7b2dad8c install : $(TARGET) diff --git a/lfs/postfix b/lfs/postfix index 7f2625a4e8..4971682674 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = A fast, secure, and flexible mailer -VER = 3.8.4 +VER = 3.9.0 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 44 +PAK_VER = 45 DEPS = @@ -70,7 +70,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 200ce3d72444da05e42fc8627002d53d68c1b3d78b7f74b0130ac958c23d16454783ef4849a8c9a4e3cba8ae36646e921f7e94ac4fb819b597e1a5ab1a875272 +$(DL_FILE)_BLAKE2 = e07a525d9cbea43d3ed11f3d672452cf94f88ca7bbaf3c3254bf5be4ef675a1797a5fff2444c0db60c6eb53e43734a388a91faed72bb2fb4e3e5a353535602b0 install : $(TARGET) diff --git a/lfs/rsync b/lfs/rsync index 7e55437042..fcbcd0ab90 100644 --- a/lfs/rsync +++ b/lfs/rsync @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Versatile tool for fast incremental file transfer -VER = 3.2.7 +VER = 3.3.0 THISAPP = rsync-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = rsync -PAK_VER = 18 +PAK_VER = 19 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 1b910b321e8d6b49af9f26bef813509f0da12dedd6857897de136d3617c68d38368ce05de13b9b0ef35a5452dca141ebdcdfb6af8456151d0ca0ad546452b504 +$(DL_FILE)_BLAKE2 = 75a3cc50452086aebd16f42d7a309c173cbc1ea156227afb10d2106d0b9043e973676995b8199d22840775ae3df8db97d1c0de5f3aa58afa130c5b1348c3f825 install : $(TARGET) diff --git a/lfs/samba b/lfs/samba index df78113139..ec6ef832ad 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.19.5 +VER = 4.20.1 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 100 +PAK_VER = 101 DEPS = avahi cups perl-Parse-Yapp perl-JSON wsdd @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0f0081380ad459cca914e5e4cf505a4783ce97f0fb8c0471a6e558c747c16b0b327e545358265f365599c3807540985bcddb68aa67d14136cee4dbcb5158090c +$(DL_FILE)_BLAKE2 = 5516b3d74705ee829971119d9931ccd339aaa857647dc46e40fda96f65ec5ba695db107f91075a46e1a7135cfdcc0a56ee67aa3475649b314260be03e4e44657 install : $(TARGET) diff --git a/lfs/vectorscan b/lfs/vectorscan index 0b60e19c9c..0bcc1bcf40 100644 --- a/lfs/vectorscan +++ b/lfs/vectorscan @@ -31,6 +31,7 @@ DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) +SUP_ARCH = x86_64 aarch64 # The compiler uses a lot of memory to compile hyperscan, hence we reduce # the total number of processes a little bit to be able to build on diff --git a/src/paks/postfix/install.sh b/src/paks/postfix/install.sh index 2e04e74a86..830970e1ea 100644 --- a/src/paks/postfix/install.sh +++ b/src/paks/postfix/install.sh @@ -25,10 +25,6 @@ extract_files restore_backup ${NAME} -# change main.cf parameter from default value to prevent smtp smuggling attack -# will not be required once postfix-3.9.x is released as default will then be yes -postconf -e 'smtpd_forbid_bare_newline = yes' - postalias /etc/aliases # Set postfix's hostname postconf -e "myhostname=$(hostname -f)" diff --git a/src/patches/linux/linux-6.6.32-asix88179_reset.patch b/src/patches/linux/linux-6.6.32-asix88179_reset.patch new file mode 100644 index 0000000000..f0e7d09f16 --- /dev/null +++ b/src/patches/linux/linux-6.6.32-asix88179_reset.patch @@ -0,0 +1,17 @@ +diff -Naur linux-6.6.32.org/drivers/net/usb/ax88179_178a.c linux-6.6.32/drivers/net/usb/ax88179_178a.c +--- linux-6.6.32.org/drivers/net/usb/ax88179_178a.c 2024-05-25 16:22:56.000000000 +0200 ++++ linux-6.6.32/drivers/net/usb/ax88179_178a.c 2024-06-04 10:45:18.113453100 +0200 +@@ -1678,10 +1678,10 @@ + { + struct ax88179_data *ax179_data = dev->driver_priv; + +- if (ax179_data->initialized) ++// if (ax179_data->initialized) + ax88179_reset(dev); +- else +- ax179_data->initialized = 1; ++// else ++// ax179_data->initialized = 1; + + return 0; + } hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. f3d6e2a0fbb21b78e3a5247049bc7b21595f2153
by Arne Fitzenreiter 04 Jun '24

04 Jun '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via f3d6e2a0fbb21b78e3a5247049bc7b21595f2153 (commit) from 03de90cc3c56e72865d3c4543d12ad301840d606 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit f3d6e2a0fbb21b78e3a5247049bc7b21595f2153 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Tue Jun 4 14:08:53 2024 +0200 kernel: reset asix88179 twice like in older kernels the kernel developers has removed a reset at bring the device first up to save time. At my test's this result in not detecting the link correct. This readd the reset and at my tests the device has worked. fixes #13692 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/linux | 3 +++ src/patches/linux/linux-6.6.32-asix88179_reset.patch | 17 +++++++++++++++++ 2 files changed, 20 insertions(+) create mode 100644 src/patches/linux/linux-6.6.32-asix88179_reset.patch Difference in files: diff --git a/lfs/linux b/lfs/linux index ca3b05119..3f5e60838 100644 --- a/lfs/linux +++ b/lfs/linux @@ -133,6 +133,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) # https://bugzilla.ipfire.org/show_bug.cgi?id=12760 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-5.15-NFQUEUE-Hold-RCU-read-lock-while-calling-nf_reinject.patch + # reset ax88179 twice like in older kernels + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-6.6.32-asix88179_reset.patch + # Fix external module compile cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-6.0-fix_external_module_build.patch diff --git a/src/patches/linux/linux-6.6.32-asix88179_reset.patch b/src/patches/linux/linux-6.6.32-asix88179_reset.patch new file mode 100644 index 000000000..f0e7d09f1 --- /dev/null +++ b/src/patches/linux/linux-6.6.32-asix88179_reset.patch @@ -0,0 +1,17 @@ +diff -Naur linux-6.6.32.org/drivers/net/usb/ax88179_178a.c linux-6.6.32/drivers/net/usb/ax88179_178a.c +--- linux-6.6.32.org/drivers/net/usb/ax88179_178a.c 2024-05-25 16:22:56.000000000 +0200 ++++ linux-6.6.32/drivers/net/usb/ax88179_178a.c 2024-06-04 10:45:18.113453100 +0200 +@@ -1678,10 +1678,10 @@ + { + struct ax88179_data *ax179_data = dev->driver_priv; + +- if (ax179_data->initialized) ++// if (ax179_data->initialized) + ax88179_reset(dev); +- else +- ax179_data->initialized = 1; ++// else ++// ax179_data->initialized = 1; + + return 0; + } hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. f62e4836012046ecb3c9ecc2ed104b9f8f07b032
by Arne Fitzenreiter 27 May '24

27 May '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via f62e4836012046ecb3c9ecc2ed104b9f8f07b032 (commit) via cea994660b35b2aa6c908aea79a4f6ba068ae39d (commit) via 03de90cc3c56e72865d3c4543d12ad301840d606 (commit) from ee5b84beabf05b6a8b2ee1edecc62ca95e2f5de6 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit f62e4836012046ecb3c9ecc2ed104b9f8f07b032 Merge: cea994660b 03de90cc3c Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon May 27 22:08:11 2024 +0200 Merge branch 'master' into next commit cea994660b35b2aa6c908aea79a4f6ba068ae39d Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon May 27 22:07:21 2024 +0200 core187: ship suricata and vectorscan Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/kernel/kernel.config.x86_64-ipfire | 2 +- config/rootfiles/{oldcore/131 => core/187}/filelists/suricata | 0 config/rootfiles/core/187/filelists/vectorscan | 1 + lfs/linux | 4 ++-- 4 files changed, 4 insertions(+), 3 deletions(-) copy config/rootfiles/{oldcore/131 => core/187}/filelists/suricata (100%) create mode 120000 config/rootfiles/core/187/filelists/vectorscan Difference in files: diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index af4bd81d0..10502dc3c 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.6.31-ipfire Kernel Configuration +# Linux/x86 6.6.32-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/config/rootfiles/core/187/filelists/suricata b/config/rootfiles/core/187/filelists/suricata new file mode 120000 index 000000000..f671f6993 --- /dev/null +++ b/config/rootfiles/core/187/filelists/suricata @@ -0,0 +1 @@ +../../../common/suricata \ No newline at end of file diff --git a/config/rootfiles/core/187/filelists/vectorscan b/config/rootfiles/core/187/filelists/vectorscan new file mode 120000 index 000000000..d684465f3 --- /dev/null +++ b/config/rootfiles/core/187/filelists/vectorscan @@ -0,0 +1 @@ +../../../common/vectorscan \ No newline at end of file diff --git a/lfs/linux b/lfs/linux index 42d61e67d..ca3b05119 100644 --- a/lfs/linux +++ b/lfs/linux @@ -24,7 +24,7 @@ include Config -VER = 6.6.31 +VER = 6.6.32 THISAPP = linux-$(VER) DL_FILE = linux-$(VER).tar.xz @@ -72,7 +72,7 @@ objects = \ $(DL_FILE) = $(URL_IPFIRE)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 521d01b10be736cc7be1108ad0fe9b046aad0ba5af02539d3d0425e424d5c081aaa69446e9f861e5ff4166c0f99201cb827b044d5a70816e4059f53f417c945f +$(DL_FILE)_BLAKE2 = 6456fcafe10eae6c0cf962b651aa567ba9ad522c4df0c87301ab0060313b8179a818a1d305e0af21599bc5b7bf42e2f61121a2ee0658a065524d098eb2947f0e install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 03de90cc3c56e72865d3c4543d12ad301840d606
by Arne Fitzenreiter 27 May '24

27 May '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via 03de90cc3c56e72865d3c4543d12ad301840d606 (commit) from bf4bd9dd36470b9091ad03856e9f7cfd89d9e98d (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 03de90cc3c56e72865d3c4543d12ad301840d606 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Mon May 27 22:03:14 2024 +0200 kernel: update to 6.6.32 I hope this fix the problems with ASIX AX99179 USB LAN adaptors Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/kernel/kernel.config.x86_64-ipfire | 2 +- lfs/linux | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) Difference in files: diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index af4bd81d0..10502dc3c 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.6.31-ipfire Kernel Configuration +# Linux/x86 6.6.32-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/lfs/linux b/lfs/linux index 42d61e67d..ca3b05119 100644 --- a/lfs/linux +++ b/lfs/linux @@ -24,7 +24,7 @@ include Config -VER = 6.6.31 +VER = 6.6.32 THISAPP = linux-$(VER) DL_FILE = linux-$(VER).tar.xz @@ -72,7 +72,7 @@ objects = \ $(DL_FILE) = $(URL_IPFIRE)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 521d01b10be736cc7be1108ad0fe9b046aad0ba5af02539d3d0425e424d5c081aaa69446e9f861e5ff4166c0f99201cb827b044d5a70816e4059f53f417c945f +$(DL_FILE)_BLAKE2 = 6456fcafe10eae6c0cf962b651aa567ba9ad522c4df0c87301ab0060313b8179a818a1d305e0af21599bc5b7bf42e2f61121a2ee0658a065524d098eb2947f0e install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. ee5b84beabf05b6a8b2ee1edecc62ca95e2f5de6
by Arne Fitzenreiter 25 May '24

25 May '24

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via ee5b84beabf05b6a8b2ee1edecc62ca95e2f5de6 (commit) via 71421e6c17783f9e5957482fc77ffbed37a4baa3 (commit) via 8cfce31dc5fb4a905161934fef5ab591974071a7 (commit) via 1ecccbdfca9bc198d73b004f1e16f8f577e095f0 (commit) via 5f3c1f65b7e487c3bd844a81ef12873e5fe5a420 (commit) via 861110f53b319f5059f2dcf3d839e00ae637112f (commit) via 26f53e2c2e70aa5e6adb06f53f7a2414bbe0e518 (commit) from 2d0b52b932d6738a7be84f94d84927bf82de0768 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit ee5b84beabf05b6a8b2ee1edecc62ca95e2f5de6 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue May 14 12:39:56 2024 +0200 hyperscan: Remove from IPFire. - hyperscan will move from BSD licence to a proprietary paid for licence from version 5.5 onwards. - hyperscan will be replaced by vectorscan, a fork of hyperscan. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 71421e6c17783f9e5957482fc77ffbed37a4baa3 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue May 14 12:39:55 2024 +0200 vectorscan: Install vectorscan to replace hypersan - It has been announced that from hyperscan-5.5 onwards the licence for this package will change from BSD tp proprietarty paid for version - This patch submission installs vectorscan whihc was created as a fork from hyperscan andf that is being maintained and has indicated it will suay Open Source - Created new lfs file - Created nbew rootfile. This looks to match the hyperscan rootfile closely - Added vector scan to the make.sh file and removed hyperscan from it. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 8cfce31dc5fb4a905161934fef5ab591974071a7 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue May 14 10:04:12 2024 +0000 dnsdist: Update to 1.9.4 This release fixes CVE-2024-25581, a denial of service security issue affecting versions 1.9.0, 1.9.1, 1.9.2 and 1.9.3 only. Earlier versions are not affected. When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer (AXFR or IXFR) over DNS over HTTPS, causing the process to stop and thus leading to a Denial of Service. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 1ecccbdfca9bc198d73b004f1e16f8f577e095f0 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat May 25 10:58:35 2024 +0200 core187: ship unbound Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 5f3c1f65b7e487c3bd844a81ef12873e5fe5a420 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Mon May 13 20:21:02 2024 +0200 unbound: Update to 1.20.0 For details see: https://nlnetlabs.nl/projects/unbound/download/#unbound-1-20-0 Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 861110f53b319f5059f2dcf3d839e00ae637112f Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sat May 25 10:54:24 2024 +0200 core187: ship e2fsprogs Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> commit 26f53e2c2e70aa5e6adb06f53f7a2414bbe0e518 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sat May 11 13:27:23 2024 +0200 e2fsprogs: Fixes bug#13073 - Update to version 1.47.0 - Previously this patch was reverted due to Grub not being able to boot with it. This was fixed in Grub-2.12 - Confirmed on my vm testbed that a CU186 install with this e2fsprogs version was able to complete the install when the reboot button at the end of the first install stage was completed. - Update from version 1.46.5 to 1.47.0 - Update of rootfile not required - Changelog E2fsprogs 1.47.0 (February 5, 2023) Updates/Fixes since v1.46.6: UI and Features Add support for the orphan_file feature, which speeds up workloads that are deleting or truncating a large number files in parallel. This compat feature was first supported in the v5.15 Linux kernel. The mke2fs program (via the mke2fs.conf file) now enables the metadata_csum_seed and orphan_file features by default. The metadata_csum_seed feature is an incompat feature which is first supported in the Linux kernel starting in the 4.4 kernel and e2fsprogs 1.43. Mke2fs now supports the extended option "assume_storage_prezeroed" which causes mke2fs to skip zeroing the journal and inode tables and to mark the inode tables as zeroed. Add support to tune2fs and e2label to set the label and UUID for a mounted file system using a ioctl, which is more reliable than modifying the superblock via writing to the block device. The kernel support for setting the label landed in v5.17, while the support for adding the UUID landed in v6.0. If the ioctls are not supported, tune2fs and e2label will fall back old strategy of directly modifying the superblock. Allow tune2fs to disable the casefold feature after scanning all of the directories do not have the Casefold flag set. Fixes Fix a potential unbalanced mutex unlock when there is a short read while using the bounce buffer when using direct I/O. Performance, Internal Implementation, Development Support etc. Fix various Coverity and compiler warnings. Add the new function ext2fs_xattrs_read_inode() which takes an in-memory inode to avoid needing to reread an inode that was already read into memory. Teach debugfs logdump command the -n option which forces printing a specified number of transactions, even when a block missing a magic number would have stopped the logdump. (This is for debugging journalling problems.) E2fsprogs 1.46.6 (February 1, 2023) Updates/Fixes since v1.46.5: UI and Features Debugfs's ncheck command now allows the inode number to be surrounded by angle brackets, to be consistent with other debugfs commands. Debugfs no longer prints a scary message when debugfs -c (which enables "catastrophic mode") is used. This was intended to allow debugfs to operate on very badly corrupted file systems, but it is now sometimes used to suppress reading the block and inode bitmaps when they are not needed. Resize2fs will round down the requested new file system size to the nearest cluster boundary when resizing bigalloc file systems. Improve error messages issued by badblocks. Fuse2fs now supports an offset=<bytes> option which allows operating on a file system image which is located starting at the specified offset from the beginning of the image. Fixes Pre-v6.2 Linux kernels had long-standing bug in how the extended attribute hash was calculated when there were non-ASCII characters in the xattr name, when the hash would be different depending on whether the C 'char' type was signed or unsigned. To address this bug, starting with e2fsprogs 1.46.6+ and Linux 6.2+, we will accept either the signed or unsigned hash variant, but only set the unsigned hash variant. Since extended attribute names are in practice composed of ASCII characters, other than various tests (such as generic/454), most users will hopefully not notice this change. Avoid triggering udev in dumpe2fs and "resize2fs -P" for file systems with MMP enabled by opening the device read-only when reading the MMP block. Fix MMP handling so it can notice when another writer has modify the MMP block out from under it when stopping a MMP sessions. Fix tune2fs so it will detect another device stealing the MMP sessions while rewriting metadata checksums. E2fsck will now check to make sure the journal inode does not have the encrypt flag set. Fix a deadlock bug in e2fsck's error handler when there are errors trying to write to the file system. Fix a bug where e2fsck could fail when specifying an undo file and an explicit superblock number. Fix e2image so it won't potentially loop forever for certain invalid file systems. Fix resize2fs to honor the E2FSPROGS_FAKE_TIME environment variable. This allows embedded system builders who use resize2fs as part of their image build process to create reproducible images. Fix tune2fs to avoid a crash if the journal replay fails and to make sure its exit status is non-zero if there is some failure. Fix tune2fs, fuse2fs, and debugsfs to update j_tail_sequence when replaying the journal. Add additional bullet-proofing for very badly corrupted file systems. Try avoid UBSAN warnings, null pointer derferences, and other memory bugs. (Addresses CVE-2022-1304) Don't fail when the source directory for mke2fs -d doesn't support extended attributese. Check for and handle malloc() failures when computing the log filename in e2fsck and in the libss library. Fix tune2fs and e2fsck to accept pathames which include '=' characters. Previously arguments to tune2fs and e2fsck which included '=' characters are presumed to be blkid specifiers such as UUID=xxx or LABEL=yyy. If a specifier is both a valid pathname name and blkid tag name specifier, priority is given to a blkid resolved pathname. Improve tune2fs's error messages. Fix a bug in tune2fs which could cause it to crash if device goes off-line just as it being opened. Fix the fsck driver so if it is interrupted while running fsck -N it doesn't end up kllling all processes on the system. Fix a crash in badblocks when the user specifies an overly large number of blocks tested at a time in read/write or nondestructive mode. Update and clarify's chattr's man page and usage message. Fix spelling typo's in a variety of different man pages and comments. Performance, Internal Implementation, Development Support etc. Update to autoconf 2.71. Update flags used to create shared library on Darwin/MacOS. Speed up e2fsck's clonning of multiply-claimed blocks so it is substantially faster on very large file systems. Add tests/fuzz directory with fuzzers from oss-fuzz. Add a Github Actions configuration file so that Github will run CI tests on Linux, Windows and MacOS on a push to the e2fsprogs github repo. Make the mtab parsing in ext2fs_check_mount_point() more careful so it won't get confused when a block device shows up in the mnt_name field for a virtual file system. Fix the libss's Makefile to create the man page directory before trying to install its man page. Fix various Coverity and compiler warnings. Make tests more portable on various different OS's and system configurations (e.g., with SELinux enabled, MacOS, and Windows) Use mallinfo2() instead of mallinfo() where avilable, since mallinfo() is deprecated on newer glibc versions. E2fsck will no longer do a full scan of disconnected directory when trying to print the parent directory, which is pointless and can slow down e2fsck if there are a large number of disconnected directories. Debugfs will now print the extended attribute's e_hash field. Fix the setup-schroot script to work on non-Linux platforms. Fix ext2fs_compare_generic_bmap() so it correctly compares all of the bits in the bitmap, and so that it works correctly when comparing a bitarray bitmap with a rbtree-based bitmap. (Fortunately, none of the programs in e2fsprogs uses bitmap comparison functions.) Fix memory leaks on error paths. Add support for the configure option --enable-largefile so that e2fsprogs can utilize largefile support for the MUSL C library. Add an note that the dict library code has been modified, as required by the Kazlib license. Synchronized changes from Android's AOSP e2fsprogs tree. Updated config.guess and config.sub with newer versions from the FSF. Add Friulian translation. Update Chinese, Czech, Dutch, French, German, Malay, Polish, Serbian, Spanish, Swedish, and Ukrainian translations. Fixes: bug#13073 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/unbound | 2 +- config/rootfiles/common/vectorscan | 13 ++++++++++++ config/rootfiles/common/x86_64/hyperscan | 18 ---------------- .../{oldcore/101 => core/187}/filelists/e2fsprogs | 0 .../{oldcore/106 => core/187}/filelists/unbound | 0 config/rootfiles/core/187/update.sh | 3 ++- lfs/dnsdist | 6 +++--- lfs/e2fsprogs | 6 +++--- lfs/unbound | 4 ++-- lfs/{hyperscan => vectorscan} | 17 +++++++-------- make.sh | 2 +- ...yperscan-5.4.0-fix-undefined-reference-to.patch | 24 ---------------------- 12 files changed, 32 insertions(+), 63 deletions(-) create mode 100644 config/rootfiles/common/vectorscan delete mode 100644 config/rootfiles/common/x86_64/hyperscan copy config/rootfiles/{oldcore/101 => core/187}/filelists/e2fsprogs (100%) copy config/rootfiles/{oldcore/106 => core/187}/filelists/unbound (100%) rename lfs/{hyperscan => vectorscan} (85%) delete mode 100644 src/patches/hyperscan-5.4.0-fix-undefined-reference-to.patch Difference in files: diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 95dafc4dae..79612c6346 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.1.26 +usr/lib/libunbound.so.8.1.27 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/config/rootfiles/common/vectorscan b/config/rootfiles/common/vectorscan new file mode 100644 index 0000000000..160dc3ae7c --- /dev/null +++ b/config/rootfiles/common/vectorscan @@ -0,0 +1,13 @@ +#usr/include/hs +#usr/include/hs/hs.h +#usr/include/hs/hs_common.h +#usr/include/hs/hs_compile.h +#usr/include/hs/hs_runtime.h +#usr/include/hs/hs_version.h +#usr/lib/libhs.so +usr/lib/libhs.so.5 +usr/lib/libhs.so.5.4.11 +#usr/lib/libhs_runtime.so +usr/lib/libhs_runtime.so.5 +usr/lib/libhs_runtime.so.5.4.11 +#usr/lib/pkgconfig/libhs.pc diff --git a/config/rootfiles/common/x86_64/hyperscan b/config/rootfiles/common/x86_64/hyperscan deleted file mode 100644 index 006e0fff9a..0000000000 --- a/config/rootfiles/common/x86_64/hyperscan +++ /dev/null @@ -1,18 +0,0 @@ -#usr/include/hs -#usr/include/hs/hs.h -#usr/include/hs/hs_common.h -#usr/include/hs/hs_compile.h -#usr/include/hs/hs_runtime.h -#usr/lib/libhs.so -usr/lib/libhs.so.5 -usr/lib/libhs.so.5.4.0 -usr/lib/libhs_runtime.so -usr/lib/libhs_runtime.so.5 -usr/lib/libhs_runtime.so.5.4.0 -#usr/lib/pkgconfig/libhs.pc -#usr/share/doc/hyperscan -#usr/share/doc/hyperscan/examples -#usr/share/doc/hyperscan/examples/README.md -#usr/share/doc/hyperscan/examples/patbench.cc -#usr/share/doc/hyperscan/examples/pcapscan.cc -#usr/share/doc/hyperscan/examples/simplegrep.c diff --git a/config/rootfiles/core/187/filelists/e2fsprogs b/config/rootfiles/core/187/filelists/e2fsprogs new file mode 120000 index 0000000000..37b55de698 --- /dev/null +++ b/config/rootfiles/core/187/filelists/e2fsprogs @@ -0,0 +1 @@ +../../../common/e2fsprogs \ No newline at end of file diff --git a/config/rootfiles/core/187/filelists/unbound b/config/rootfiles/core/187/filelists/unbound new file mode 120000 index 0000000000..66adf09242 --- /dev/null +++ b/config/rootfiles/core/187/filelists/unbound @@ -0,0 +1 @@ +../../../common/unbound \ No newline at end of file diff --git a/config/rootfiles/core/187/update.sh b/config/rootfiles/core/187/update.sh index 3aded31af3..d2e86a3202 100644 --- a/config/rootfiles/core/187/update.sh +++ b/config/rootfiles/core/187/update.sh @@ -48,9 +48,10 @@ ldconfig /usr/local/bin/filesystem-cleanup # Start services +/etc/init.d/unbound restart # This update needs a reboot... -#touch /var/run/need_reboot +touch /var/run/need_reboot # Finish /etc/init.d/fireinfo start diff --git a/lfs/dnsdist b/lfs/dnsdist index d1b23b75be..5a8c0ac702 100644 --- a/lfs/dnsdist +++ b/lfs/dnsdist @@ -26,7 +26,7 @@ include Config SUMMARY = A highly DNS-, DoS- and abuse-aware loadbalancer -VER = 1.9.3 +VER = 1.9.4 THISAPP = dnsdist-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = dnsdist -PAK_VER = 21 +PAK_VER = 23 SUP_ARCH = x86_64 aarch64 @@ -52,7 +52,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 663b8a2161c5a7b94541cd775f135a99997024648c5bb57fd2ec18c7ede29aebda142452f97332300c45af32b5131e4dd5f9c1f904a1d68962398fa9a28c474e +$(DL_FILE)_BLAKE2 = a8cfc5c2da135ed96b857f9f1b6c3caa796b27f66ff7ead6e976b871a5e5db208ef3ce275c23085318bd7ff2f0fa2ec19e28ad36234991d84b8d13e74acb2f34 install : $(TARGET) diff --git a/lfs/e2fsprogs b/lfs/e2fsprogs index 4758b54010..ce1ba19a42 100644 --- a/lfs/e2fsprogs +++ b/lfs/e2fsprogs @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.46.5 +VER = 1.47.0 THISAPP = e2fsprogs-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 8d8c02e891c464782a7cff518c41d793fc73366b57e17d80ffc5afd96e6144e354290e667e9710509a9dde4e5dab7e7185c5bf084c5bfd26219f05e5e92e0830 +$(DL_FILE)_BLAKE2 = 84f58b05a9f0e14e1a66c6e5171ff23b022f51c4e9a02d4d6d1d26c91909f3c7ec9c9f0462663a4457b4479043774502b8891f691e58a61f4ef6bf9ba33f33aa install : $(TARGET) diff --git a/lfs/unbound b/lfs/unbound index f09e76b1b9..904744bc21 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.19.3 +VER = 1.20.0 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 5d9cbc26510afc2b92ecce6307cd9924a1b450892f7839f076535177ab35f78059d271e628e2aa995b62f5cf97add2363561a819d6e0181beb6b44421661d8f0 +$(DL_FILE)_BLAKE2 = b272a6b8c0118819d9803f0c7f7a4b7eff77e37682f4a9a0f749cafa08da4d4de01cd7bf71698b8fc5a7cdf5ca03685978e6b4395c586c35d1d13bebb7cbb538 install : $(TARGET) diff --git a/lfs/hyperscan b/lfs/vectorscan similarity index 85% rename from lfs/hyperscan rename to lfs/vectorscan index 56c6290b55..0b60e19c9c 100644 --- a/lfs/hyperscan +++ b/lfs/vectorscan @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2024 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,14 +24,13 @@ include Config -VER = 5.4.0 +VER = 5.4.11 -THISAPP = hyperscan-$(VER) +THISAPP = vectorscan-vectorscan-$(VER) DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) -SUP_ARCH = x86_64 # The compiler uses a lot of memory to compile hyperscan, hence we reduce # the total number of processes a little bit to be able to build on @@ -46,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 1a5af88655854b4c1ec58e6663b6c9c4b6fca0aa9d3e4daad3992daf911b8f359f48a95b65e4f05c71aa644e0271471d016fafaca05d547b838a9c52ea016e27 +$(DL_FILE)_BLAKE2 = a8f5a1230af0ddf7d9fb9299769ec1736d37ac3284f6a98b1e650af461206cf459eac35d13a47beb6683786c6529539b2d082edf426e7d4890ed11804c76268b install : $(TARGET) @@ -75,13 +74,11 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) - @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/hyperscan-5.4.0-fix-undefined-reference-to.patch + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && cmake . \ -DCMAKE_INSTALL_PREFIX:PATH=/usr \ - -DBUILD_SHARED_LIBS:BOOL=ON \ - -DBUILD_STATIC_AND_SHARED:BOOL=OFF \ - -DCMAKE_BUILD_TYPE=Release \ + -DBUILD_SHARED_LIBS=ON \ + -DCMAKE_BUILD_TYPE=RELEASE \ -DBUILD_EXAMPLES=OFF cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install diff --git a/make.sh b/make.sh index 7b99ea11a4..f8221bc2c7 100755 --- a/make.sh +++ b/make.sh @@ -1402,7 +1402,7 @@ buildipfire() { lfsmake2 libhtp lfsmake2 colm lfsmake2 ragel - lfsmake2 hyperscan + lfsmake2 vectorscan lfsmake2 suricata lfsmake2 ids-ruleset-sources lfsmake2 ipblocklist-sources diff --git a/src/patches/hyperscan-5.4.0-fix-undefined-reference-to.patch b/src/patches/hyperscan-5.4.0-fix-undefined-reference-to.patch deleted file mode 100644 index fdd2543f1f..0000000000 --- a/src/patches/hyperscan-5.4.0-fix-undefined-reference-to.patch +++ /dev/null @@ -1,24 +0,0 @@ -From 66189546403e5476c560bdbad89d24c3df87b172 Mon Sep 17 00:00:00 2001 -From: Yue Ni <niyue.com(a)gmail.com> -Date: Tue, 19 Jan 2021 17:03:02 +0800 -Subject: [PATCH] Fix hyperscan compilation issue for - https://github.com/intel/hyperscan/issues/292, avoid the compilation error - reporting 'undefined reference to `avx2_snprintf`'. - ---- - cmake/build_wrapper.sh | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/cmake/build_wrapper.sh b/cmake/build_wrapper.sh -index 1962813f..895610c0 100755 ---- a/cmake/build_wrapper.sh -+++ b/cmake/build_wrapper.sh -@@ -17,7 +17,7 @@ KEEPSYMS=$(mktemp -p /tmp keep.syms.XXXXX) - LIBC_SO=$("$@" --print-file-name=libc.so.6) - cp ${KEEPSYMS_IN} ${KEEPSYMS} - # get all symbols from libc and turn them into patterns --nm -f p -g -D ${LIBC_SO} | sed -s 's/$[^ ]*$.*/^\1$/' >> ${KEEPSYMS} -+nm -f p -g -D ${LIBC_SO} | sed -s 's/$[^ @]*$.*/^\1$/' >> ${KEEPSYMS} - # build the object - "$@" - # rename the symbols in the object hooks/post-receive -- IPFire 2.x development tree

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM