[git.ipfire.org] IPFire 2.x development tree branch, next, updated. c004ed4755890f575729aefefad567ac033c8cb5
This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".
The branch, next has been updated via c004ed4755890f575729aefefad567ac033c8cb5 (commit) via df2bef7d7844b5b3a920a5830034178f9cfc1573 (commit) via 7f2dcfc3c630eba5bc7e65fab2188c9cf4b3ac5e (commit) via a3a7f558f6e1b87007736482b896defb24ff5890 (commit) via 212b478b7ac1a8f6d0cbeb22876ca4e69bc7abeb (commit) via c419a39aaa8ccd04d68526a3a4121f1f1f85edc2 (commit) via 0cdad09a6365d9187107262a9498ba8d2307c086 (commit) via 8ded4c550e8346c26e5b3698d14ea4f3eeded826 (commit) via 98819de0e7bede8b513f789edc35b963eaa1b963 (commit) via e12b927c107d4773541da8a51dbf47a067f4757b (commit) via 736d1d3458dbc6a95c98d66f8a09f3275195e88f (commit) via 1fe3a28a1162642956477ffa9e44cf5017cccaf1 (commit) via b339479762d361faea1727df92730ca3db2c8581 (commit) via 0d5afc054418873f37dedbf07dd7b165cd1f0d08 (commit) via aab1c3d6c123bddcdcf0dd03bac082b4fa5729f5 (commit) via 9435f5d771da46180043863e3c49b71ad53b0715 (commit) via 2d47222b6828431966a21250035bf803a7c4e855 (commit) via a0bf3c9d1d78a9007054b50554b6e8edabcce33d (commit) via 4dc89aca1eb36ce79f30bb401f51bcfe91d4472d (commit) via 5a91471b29456d585ece283eb230387ac0787c4a (commit) via 8c946062ec66e72da2f00fc52433a6f41bb5fa4d (commit) via 89e87940aa96279a2feffb9c0ead752e616a19c3 (commit) via 7d13ce53b9227464718d603c7c122118d318d7a3 (commit) via ebb345e9e054166ebfd57a2f11ef16131529e380 (commit) via 413ae40a16ee16326bc3f0d13b5c60d66e833f84 (commit) via 51ed86d877d2b460129858d614936d8203dafd40 (commit) via 110505bd4a0023da57e79ae3e70cb3ccc59d119c (commit) via a67c8e78c7146d0fc73b4b7af61c0e2699927958 (commit) via a9db42e0da4c6f6fb56cb1ce99aea4ea2e47f155 (commit) via 1f58338afe0c09fd6b7a0d2c8eceec7f44bbc71f (commit) via c4e77b29357812f4859deb0cfe3b0bf614e44cd8 (commit) via 20c522c5956009444fea7801a82e914e4443122f (commit) via baaed917d61f7aa59a1fdab0a586dcbd54957606 (commit) via d068c6a5898cec2ac90169f809c6702716d9cd0d (commit) via b7513eb4e82e9f0551daaffec995a4aa98dc6993 (commit) via de8ed87d05887907740bef72180b6e8f63d01416 (commit) from 4df6f0b66e70a9410468a1101f6d0d32ddd0e77f (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit c004ed4755890f575729aefefad567ac033c8cb5 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 10:05:31 2024 +0100
core191: ship libxml2
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit df2bef7d7844b5b3a920a5830034178f9cfc1573 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:11:06 2024 +0100
libxml2: Update to version 2.13.5
- Update from version 2.13.3 to 2.13.5 - Update of rootfile - Changelog 2.13.5 ### Regressions - xmlIO: Fix reading from non-regular files like pipes (Nick Wellnhofer) - xmlreader: Fix return value of xmlTextReaderReadString (Nick Wellnhofer) - parser: Fix loading of parameter entities in external DTDs (Nick Wellnhofer) - parser: Fix downstream code that swaps DTDs (Nick Wellnhofer) - parser: Fix detection of duplicate attributes (Nick Wellnhofer) - string: Fix va_copy fallback (Nick Wellnhofer) ### Bug fixes - xpath: Fix parsing of non-ASCII names (Nick Wellnhofer) 2.13.4 ### Regressions - parser: Make unsupported encodings an error in declarations - io: don't set the executable bit when creating files (triallax) - xmlcatalog: Improved fix for #699 - Revert "catalog: Fetch XML catalog before dumping" - io: Add missing calls to xmlInitParser - tree: Restore return value of xmlNodeListGetString with NULL list - parser: Fix error handling after reaching limit - parser: Make xmlParseChunk return an error if parser was stopped ### Bug fixes - python: Fix SAX driver with character streams ### Improvements - xpath: Make recursion check work with xmlXPathCompile - parser: Report at least one fatal error ### Portability - include: Check whether _MSC_VER is defined
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 7f2dcfc3c630eba5bc7e65fab2188c9cf4b3ac5e Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 10:04:20 2024 +0100
core191: ship libuv
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit a3a7f558f6e1b87007736482b896defb24ff5890 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:11:05 2024 +0100
libuv: Update to version 1.49.2
- Update from version 1.48.0 to 1.49.2 - Update of rootfile not required - Changelog 1.49.2 * win,fs: remove trailing slash in junctions (Hüseyin Açacak) * Revert "linux: eliminate a read on eventfd per wakeup" (Ben Noordhuis) * win: Fix linked list logic in getaddrinfo (Thad House) * win: fix compilation against Windows 24H2 SDK (Thad House) * win: remap ERROR_NOACCESS and ERROR_BUFFER_OVERFLOW (Jameson Nash) * win,fs: match trailing slash presence in junctions to user input (Jameson Nash) 1.49.1 * build: add darwin-syscalls.h to release tarball (Ben Noordhuis) * linux: use IORING_SETUP_NO_SQARRAY when available (Ben Noordhuis) * linux: use IORING_OP_FTRUNCATE when available (Ben Noordhuis) * win: fix pNtQueryDirectoryFile check (Rialbat) * win: fix WriteFile() error translation (Santiago Gimeno) * win,fs: uv_fs_rmdir() to return ENOENT on file (Santiago Gimeno) * win,pipe: ipc code does not support async read (Jameson Nash) * netbsd: fix build (Adam) * win,fs: fix bug in fs__readdir (Hüseyin Açacak) * unix: workaround gcc bug on armv7 (Santiago Gimeno) * unix: work around arm-linux-gnueabihf-gcc bug (Ben Noordhuis) * unix: fix uv_tcp_keepalive in smartOS (Santiago Gimeno) * unix: fix uv_getrusage ru_maxrss on solaris (Poul T Lomholt) 1.49.0 * test: fix -Wpointer-to-int-cast on 32 bits systems (Ben Noordhuis) * build: add alias for libuv to CMakeLists.txt (Anthony Alayo) * linux: create io_uring sqpoll ring lazily (Ben Noordhuis) * misc: run sample CI when code changes (Jameson Nash) * linux: fix uv_available_parallelism using cgroup (Thomas Walter) * doc: fix tty example segfault (hiiizxf) * udp,unix: fix sendmsg use-after-free (Geddy) * cygwin: implement uv_resident_set_memory (Farzin Monsef) * win: almost fix race detecting ESRCH in uv_kill (Santiago Gimeno) * test: disable env var test under win32+asan (Ben Noordhuis) * unix,fs: fix realpath calls that use the system allocator (Saúl Ibarra Corretgé) * sunos: sync tcp keep-alive with other unices (Andy Pan) * linux: fix /proc/self/stat executable name parsing (Farzin Monsef) * test,ci: fix [AM]San, disable ASLR (Ben Noordhuis) * win: remove _alloca usage (Ben Noordhuis) * unix: reinstate preadv/pwritev fallback code (Ben Noordhuis) * linux: don't delay EPOLL_CTL_DEL operations (Ben Noordhuis) * doc: fix typos in ChangeLog (tgolang) * unix,win: error on zero delay tcp keepalive (Saúl Ibarra Corretgé) * win: simplify uv_once implementation (Saúl Ibarra Corretgé) * doc: correct udp socket options documentation (Ben Noordhuis) * linux: don't use sendmmsg() for single datagrams (Ben Noordhuis) * unix: fix fd leaks in SCM_RIGHTS error path (Ben Noordhuis) * win: robustify uv_os_getenv() error checking (Ben Noordhuis) * test: use newer ASSERT_MEM_EQ macro (Ben Noordhuis) * unix: de-duplicate conditions for using kqueue (Brad King) * darwin: simplify uv_hrtime (Saúl Ibarra Corretgé) * mailmap: update saghul's main email address (Saúl Ibarra Corretgé) * win: remove no longer needed define (Saúl Ibarra Corretgé) * doc: fix some typos (josedelinux) * linux,darwin: make `uv_fs_copyfile` behaves like `cp -r` (Juan José Arboleda) * dragonfly: disable SO_REUSEPORT for UDP socket bindings (Andy Pan) * test: remove the obsolete HAVE_KQUEUE macro (Andy Pan) * unix: use the presence of SOCK_* instead of OS macros for socketpair (Andy Pan) * bsd: support pipe2() on *BSD (Andy Pan) * unix: support SO_REUSEPORT with load balancing for TCP (Andy Pan) * doc: add entries for extended getpw (Juan José Arboleda) * test: fix the flaky test-tcp-reuseport (Andy Pan) * aix,ibmi: fix compilation errors in fs_copyfile (Jeffrey H. Johnson) * unix: support SO_REUSEPORT with load balancing for UDP (Andy Pan) * tcpkeepalive: distinguish OS versions and use proper time units (Andy Pan) * win: map ERROR_BAD_EXE_FORMAT to UV_EFTYPE (Hüseyin Açacak) * doc: add instruction how to install with Conan (Uilian Ries) * unix,win: remove unused req parameter from macros (Viacheslav Muravyev) * build: fix android ci build (Ben Noordhuis) * unix,win: export wtf8 functions properly (Ben Noordhuis) * hurd: add includes and macro prerequisites (Olivier Valentin) * hurd: stub uv_thread_setpriority() (Olivier Valentin) * ci: use macOS 12 for macOS and iOS builds (Saúl Ibarra Corretgé) * darwin: fix crash on iOS(arm64) (郑苏波 (Super Zheng)) * Create dependabot.yml for updating github-actions (Jameson Nash) * doc: correct names of Win32 APIs in fs.rst (zeertzjq) * ci: bump upload and download-artifact versions (dependabot[bot]) * ci: bump actions/setup-python from 4 to 5 (dependabot[bot]) * ci: bump KyleMayes/install-llvm-action from 1 to 2 (dependabot[bot]) * win,error: remap ERROR_NO_DATA to EAGAIN (Jameson Nash) * test: handle zero-length udp datagram (Ben Noordhuis) * misc: remove splay trees macros (Viacheslav Muravyev) * test,openbsd: remove superfluous ifdef guard (Ben Noordhuis) * win,fs: use posix delete semantics, if supported (Ian Butterworth) * win: fix env var in uv_os_homedir and uv_os_tmpdir (Hüseyin Açacak) * fsevents: detect watched directory removal (Santiago Gimeno) * ci: bump actions/checkout to 4 (dependabot[bot]) * linux: eliminate a read on eventfd per wakeup (Andy Pan) * test: pipe_overlong_path handle ENAMETOOLONG (Abdirahim Musse) * win,fs: use the new Windows fast stat API (Hüseyin Açacak) * win,pipe: fix race with concurrent readers (Jameson Nash) * win,signal: fix data race dispatching SIGWINCH (Jameson Nash) * build: ubsan fixes (Matheus Izvekov) * linux: disable SQPOLL io_uring by default (Santiago Gimeno) * win: fix fs.c ubsan failure (Matheus Izvekov) * test: rmdir can return `EEXIST` or `ENOTEMPTY` (Richard Lau) * test: check for `UV_CHANGE` or `UV_RENAME` event (Richard Lau) * unix,fs: silence -Wunused-result warning (Santiago Gimeno) * linux: support abstract unix socket autobinding (Ben Noordhuis) * kqueue: use EVFILT_USER for async if available (Andy Pan) * win: remove deprecated GetVersionExW call (Shelley Vohr) * doc: document uv_loop_option (握猫猫) * doc: fix the `uv_*_set_data` series of functions (握猫猫) * doc: properly label enumerations and types (握猫猫) * doc: document specific macOS fs_event behavior (Santiago Gimeno) * win,pipe: restore fallback handling for blocking pipes (Jameson Nash) * unix,win: remove unused rb-tree macro parameters (Viacheslav Muravyev) * win: compute parallelism from process cpu affinity (Ben Noordhuis) * win: use NtQueryInformationProcess in uv_os_getppid (Zuohui Yang) * win,pipe: fix missing assignment to success (Jameson Nash) * win: fix uv_available_parallelism on win32 (Ben Noordhuis) * win,pipe: fix another missing assignment to success (Jameson Nash) * kqueue: disallow ill-suited file descriptor kinds (Andy Pan) * unix: restore tty attributes on handle close (Ben Noordhuis) * test: delete test with invalid assumption (Ben Noordhuis) * dragonflybsd: fix compilation failure (Jeffrey H. Johnson) * test: run android tests on ci (Edigleysson Silva (Edy)) * darwin: add udp mmsg support (Raihaan Shouhell) * unix: work around arm-linux-gnueabihf-gcc bug (Ben Noordhuis) * unix: expand uv_available_parallelism() to support more platforms (Ondřej Surý) * doc: add known issue in armv7 (Santiago Gimeno)
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 212b478b7ac1a8f6d0cbeb22876ca4e69bc7abeb Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 10:03:07 2024 +0100
core191: ship libtirpc
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit c419a39aaa8ccd04d68526a3a4121f1f1f85edc2 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:11:03 2024 +0100
libtirpc: Update to version 1.3.6
- Update from version 1.3.5 to 1.3.6 - Update of rootfile not required - Changelog 1.3.6 configure.ac: Using autoupdate updated to the latest autoconf macros svc_fd_create: skip getsockname on a non-network socket As svcfd_create(3) said, it can: Create a service on top of any open file descriptor. But getsockname and getpeername in svc_fd_create assume that fd should be a connected socket. This patch will leave xp_raddr and xp_laddr uninitialized if fd is not a connected socket. detect whether linker supports --version-script check for gss_pname_to_uid or hardcode an early return if we can't use aname to localname test for IPV6_PKTINFO and potentially define __APPLE_USE_RFC_3542 to expose macos supports both RFC 2292 and RFC 3542 versions of ipv6 options and you choose which to expose, with a define macos uses the same mutex primitives as linux and so can use these defines check for struct rpcent in netdb.h before redefining macos defines it in netdb.h include string.h when we need a memset prototype for attempt to use machine/endian.h if endian.h does not exist macos has the former, not the latter updated macOS support for tirpc [2/7] SOL_IP vs IPPROTO_IP in order to have protocol numbers on macOS, we need to first determine we don't have SOL_IP, and then that we do have IPPROTO_IP, and then define the former as the latter. do the same for IPV6 check for getpeereid macos ships with it, this avoids trying to build a replacement for a defined function rpcb_prot.x: Update _PATH_RPCBINDSOCK 2f9ce0c updated rpcb_prot.h, but rpcb_prot.x must be updated as well. Move rpcbind.sock to /run Most of the distros have /var/run as symlink to /run. Because /var may be a separate partition, and could even be mounted via NFS, having to look directly to /run help to avoid issues rpcbind startup early in boot when /var might not be available.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 0cdad09a6365d9187107262a9498ba8d2307c086 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 10:01:56 2024 +0100
core191: ship libpipeline
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 8ded4c550e8346c26e5b3698d14ea4f3eeded826 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:11:02 2024 +0100
libpipeline: Update to version 1.5.8
- Update from version 1.5.7 to 1.5.8 - Update of rootfile - Changelog 1.5.8 * Upgrade to Gnulib `stable-202407`. Building libpipeline now requires Automake >= 1.14. * Use C23-style `nullptr`.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 98819de0e7bede8b513f789edc35b963eaa1b963 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 10:00:07 2024 +0100
core191: ship libpcap
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit e12b927c107d4773541da8a51dbf47a067f4757b Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:11:01 2024 +0100
libpcap: Update to version 1.10.5
- Update from version 1.10.4 to 1.10.5 - Update of rootfile - Fixes for 2 CVE's - Changelog 1.10.5 Source code: Spell WirelessHART details properly. Mark pcap_vasprintf() as printf-like. Finalize moving of bpf_filter.c. (GH #1166) Remove an unneeded argument from gen_mcode6(). Don't do some Berkeley YACC workarounds with YACC releases not requiring them. Use correct data types rather than int in some cases. Squelch compiler warning in grammar.c. Fix findalldevtest compilation if IPv6 isn't enabled. Rename helper routines for pcap modules to have names beginning with pcapint_, to avoid namespace collisions for code linking statically with libpcap. Avoid casting hack for the Windows cleanup-on-exit routine. Use %zu format for one case of printing a size_t. Fix some Coverity errors. Fix availabilities of some functions to match reality. pcap: make the seconds and microseconds/nanoseconds fields unsigned. Remove the unused pcap-rpcap-int.h header file. Thread safety: Make some static variables thread-local; fixes issue #1174. Packet filtering: Improve reporting of some invalid filter expressions. Return an error from pcap_compile() if the scanner fails to initialize. Optimizer fix from Archit Shah to recompute dominators after moving code (#976); fixes #945 (although the resulting filter isn't empty). Optimizer fix from Archit Shah to mark value as unknown when store of that value is deleted (#972); fixes #143, #434, #436, #437, and #1076. Linux: Properly return warnings. Don't use DLT_LINUX_SLL2 for anything other than the "any" device. Avoid 32-bit unsigned integer overflow in USB captures. Fixes issues #1134 and #1205. Fix a file descriptor leak. Properly report warnings about unknown ARPHRD_ types. Fix DLT_CAN_SOCKETCAN handling of CAN FD. Add CAN XL support to DLT_CAN_SOCKETCAN. Clean up the code that sets the "real" ("original") length for isochronous USB transfers. Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and Bluetoth modules. Solaris: Handle BPF returning ESRCH for unknown devices. List the "any" device if it's supported. Report {non-existent zone}/{interface} errors appropriately. Allow attaching to links owned by a non-global zone. (Based on pull request #1202.) Fix AF_LINK handling on illumos. macOS: Redid the availability macros to be closer to what Apple's doing in recent SDKs, including tagging pcap-namedb.h routines. Fix the install name of the installed shared library to have a full path when building with CMake. Fix universal builds. Haiku: Convert the module to C. Fixes issue #1114. Address a few compiler warnings. Fixes issue #1114. Fix various build problems. Fixes issue #1114. Report non-existent devices correctly. Fix handling of packet statistics. Fix packet timestamping. Fix packet filtering with low snaplen. Improve connection status reporting. Add support for promiscuous mode. Detect DLTs and loopback capture support at run time. Report IEEE 802.11 as PCAP_IF_WIRELESS. Windows: Fix internal handling of "not supported" error codes from NPF. Work around a bug in Npcap 1.00 in case of driver version mismatch. Don't call WSACleanup() when handling a failed WSAStartup(). BSD, macOS, AIX, Solaris 11, Linux: Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture mechanism is not present, in the hopes that, for example, attempts to capture on Windows Services for Linux 1, in which the NT kernel attempts to simulate Linux system calls but does not support packet sockets, can get an error that better indicates the underlying problem. AirPcap: Format an error message if we run out of memory. nflog: Fix count of dropped packets. Make sure we don't overflow when rounding up the TLV length. rpcap: Handle routines removed in at least some OpenSSL libraries. CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid double frees in some cases. Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int on UN*Xes and as SOCKET on Windows. CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a file:// URL with a path to a directory that cannot be opened. Savefiles: Handle DLT_/LINKTYPE_ mapping better, to handle some OpenBSD-specific link types better. Treat if_tsoffset as signed in pcapng files, as the spec says. Don't try to fix the "real" length for isochronous USB transfers if the number of USB descriptors is too large. Reject pcap files where one of the reserved fields in the "link-layer type plus other stuff" is non-zero. Building and testing: Add a configure option to help debugging (--enable-instrument-functions). Improved tests and error reporting for uses of pkg-config, and improve help message. Fix Haiku build. With CMake, install headers in CMAKE_INSTALL_INCLUDEDIR rather than just include. Build libpcap.a before building test programs. Print address family numerically, as well as symbolically, in findalldevstest. Fail with suggestions, rather than failing over to no capture support, if no capture mechanism was found. Fixes issue #1016. Don't indent comments in Make, as that may cause them not to be recognized as comments. Don't check for libssl if we aren't going to use it. Better handle enabling and disabling of sanitizers. Fixes issue #1171. CMakeLists.txt: Print "Symlinking: /some/path to ..." conditionally. Evaluate CMAKE_INSTALL_PREFIX at install time. cmake: Update the minimum required version to 2.8.12 (except Windows). cmake: suppress CMP0042 OLD deprecated warning. Makefile.in: Add the releasecheck target. Cirrus CI: Add the "make releasecheck" command in the Linux task. Makefile.in: Add the whitespacecheck target. Cirrus CI: Run the "make whitespacecheck" command in the Linux task. Autoconf: Update config.{guess,sub}, timestamps 2024-01-01. Autoconf: Update the install-sh script to the 2020-11-14.01 version. Compile with '-Wnull-pointer-subtraction', '-Wunused-but-set-parameter', and '-Wunused-but-set-variable' in devel mode if supported. Don't ignore spaces between CMAKE_C_FLAGS and DPDK_C_FLAGS with CMake. Use noreturn and __format__ with XL C 7.0 and later. Check for the same -W flags in autotools and CMake. Autoconf: Add autogen.sh, remove configure and config.h.in and put these generated files in the release tarball. Autoconf: Get the size of a time_t. Fix propagation of cc_werr_cflags() output. Makefile.in(s): Fix the depend target. mkdep: Exit with a non-zero status if a command fails. Fix HCI_CHANNEL_MONITOR detection with musl libc. Extend "make shellcheck" onto mkdep too. Add initial support for building with TinyCC. Address all known compiler warnings specific to illumos, Linux, NetBSD, Solaris and Sun C; in CI expect warnings specific to TinyCC only. Documentation: Update and fix pcap-filter man page. Add a README.haiku.md file. Document pcap-config better. Man page formatting and prose fixes. Rename doc/README.Win32.md to doc/README.windows.md. Update pcap-savefile man page to match the Internet-Draft for pcap. Fix CMake issues for target used by other projects. Explain "any" device better in pcap_open_live(3PCAP). Update INSTALL.md. Note in man pages that errbuf arguments must point to an error buffer. Note that if pcap_findalldevs() fails it sets *alldevsp to NULL; there's no devices list to free. Explain "other addresses" in pcap_findalldevs(3PCAP). Document pcap_lookupnet(3PCAP) a bit better.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 736d1d3458dbc6a95c98d66f8a09f3275195e88f Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:58:58 2024 +0100
core191: ship liboping
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 1fe3a28a1162642956477ffa9e44cf5017cccaf1 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:11:00 2024 +0100
liboping: Update to version 1.10.0
- Update from version 1.3.4 (2009) to 1.10.0 (2017) - Update of rootfile - Changelog 1.10.0 * Build system: Search the "rt" library for clock_gettime(). This fixes build issues on Mac OS X. Thanks to Yann E. Morni for this fix. #9 * Build system: The "--with[out]-ncurses" option has been added and allows to enforce/disable the building of "noping". Thanks to Thomas Deutschmann for the patch. #15 * Build system: Compatibility code to work with pkg-config < 0.27 has been added. #22 * liboping: Creation of ICMPv4 packets has been fixed: due to an incorrect sizeof() the payload may have been prefixed by 20 zero bytes, resulting in larger packets than desired. Thanks to Kyle Zhou for reporting and fixing this. #10 * liboping: The number of file descriptors used has been reduced to at most two (from one per host). This and a few other optimizations significantly improve performance. Thanks to Luke Heberling for the patch. #11 * oping, noping: Handling of the "-O" command line flag has been fixed. * oping, noping: The "-b" option has been added and enables a bell whenever an echo reply is received. Thanks to Antoine Beaupré for the patch. #6 * noping: The background color has been changed to use the terminal default. Thanks to @middleO. #18 * noping: The ability to add hosts after noping has started (the "a" key) has been added. Thanks to Hamish Coleman for the patch. #20, #23 1.9.0 * liboping: The new "PING_OPT_MARK" option allows to mark packets, which can be used for filtering and routing such packets on Linux. * oping, noping: The new "-m" command line option allows to set a mark on packets sent by the tool. * oping, noping: The new "-O" command line option allows to write measurements to an CSV file. * oping, noping: The new "-w" command line option allows to specify the timeout after which a packet/reply is considered "dropped". 1.8.0 * oping, noping: Average and standard deviation have been removed from the status output, which show median and 95th percentile instead. The percentile can be chosen with the "-P" option. * noping: The additional graph types "histogram" and "boxplot" have been added, which can be selected with the "-g" option. 1.7.0 * oping, noping: The new -Z option allows the exit status to indicate the number of failing hosts. Thanks to Barak Pearlmutter for the patch. * noping: The ability to print a "prettyping" style graph has been added. Thanks to Antoine Beaupré for his work! * src/liboping.c: Build issues on Solaris have been fixed. Thanks Scott Severtson for the fix! * Build system: Creation and installation of a pkg-config file has been added. Thanks to Barak Pearlmutter for the patch. 1.6.2 * Build system: Setting capabilities and the set-UID bit has been made more fault-tolerant, so that it will work with Debian's fakeroot(1) utility. * src/liboping.c: Fixed a compiler warning about an non-static format string. Thanks to Brian Edwards for pointing this out. * src/liboping.c: Fixed compilation under Mac OS X and Solaris. Thanks to Clayton O'Neill for his patch. 1.6.1 * Build system: If "make install" is executed as root, the CAP_NET_RAW capability is added to the binary (on Linux) or the set-UID bit is set (other Unixes). * src/oping.c: Fix compiler warnings which may abort the build. Thanks to James Bromberger for reporting the problem. * noping: Compatibility with ncurses 5.8 has been fixed. Thanks to Gaetan Bisson for his patch. 1.6.0 * liboping: Improve timing of received network packets using SO_TIMESTAMP if available. Thanks to Bruno Prémont for his patch. 1.5.1 * oping, noping: Alias for the “Voice Admit” DSCP has been added. * src/oping.c, src/liboping.c: Compiler warnings / errors have been fixed. Thanks to James Bromberger for reporting one of them. 1.5.0 * src/liboping.c: The possibility to set the QoS byte of outgoing IPv4 and IPv6 packets and read the byte from incoming packets has been added. Thanks to Vladimir Melnikov for his patch. * oping, noping: Add the ability to configure the QoS field on the command line. If either the QoS field of outgoing or incoming packets is non-standard, the QoS byte of incoming packets will be printed. * liboping: The library has been relicensed under the LGPL 2.1. 1.4.0 * noping: A new front-end to liboping, using the ncurses library, has been added. The new command line application displays ping statistics online and highlights aberrant round-trip times.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit b339479762d361faea1727df92730ca3db2c8581 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:57:45 2024 +0100
core191: ship libnl-3
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 0d5afc054418873f37dedbf07dd7b165cd1f0d08 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:59 2024 +0100
libnl-3: Update to version 3.11.0
- Update from version 3.10.0 to 3.11.0 - Update of rootfile not required - Changelog details are only available by viewing the git repo commits https://github.com/thom311/libnl/commits/main/
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit aab1c3d6c123bddcdcf0dd03bac082b4fa5729f5 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:54:58 2024 +0100
core191: ship jibjpeg
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 9435f5d771da46180043863e3c49b71ad53b0715 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:58 2024 +0100
libjpeg: Update to version 3.0.4
- Update from version 3.0.3 to 3.0.4 - Update of rootfile not required - Changelog 3.0.4 1. Fixed an issue whereby the CPU usage of the default marker processor in the decompressor grew exponentially with the number of markers. This caused an unreasonable slow-down in `jpeg_read_header()` if an application called `jpeg_save_markers()` to save markers of a particular type and then attempted to decompress a JPEG image containing an excessive number of markers of that type. 2. Hardened the default marker processor in the decompressor to guard against an issue (exposed by 3.0 beta2[6]) whereby attempting to decompress a specially-crafted malformed JPEG image (specifically an image with a complete 12-bit-per-sample Start Of Frame segment followed by an incomplete 8-bit-per-sample Start Of Frame segment) using buffered-image mode and input prefetching caused a segfault if the `fill_input_buffer()` method in the calling application's custom source manager incorrectly returned `FALSE` in response to a prematurely-terminated JPEG data stream. 3. Fixed an issue in cjpeg whereby, when generating a 12-bit-per-sample or 16-bit-per-sample lossless JPEG image, specifying a point transform value greater than 7 resulted in an error ("Invalid progressive/lossless parameters") unless the `-precision` option was specified before the `-lossless` option. 4. Fixed a regression introduced by 3.0.3[3] that made it impossible for calling applications to generate 12-bit-per-sample arithmetic-coded lossy JPEG images using the TurboJPEG API. 5. Fixed an error ("Destination buffer is not large enough") that occurred when attempting to generate a full-color lossless JPEG image using the TurboJPEG Java API's `byte[] TJCompressor.compress()` method if the value of `TJ.PARAM_SUBSAMP` was not `TJ.SAMP_444`. 6. Fixed a segfault in djpeg that occurred if a negative width was specified with the `-crop` option. Since the cropping region width was read into an unsigned 32-bit integer, a negative width was interpreted as a very large value. With certain negative width and positive left boundary values, the bounds checks in djpeg and `jpeg_crop_scanline()` overflowed and did not detect the out-of-bounds width, which caused a buffer overrun in the upsampling or color conversion routine. Both bounds checks now use 64-bit integers to guard against overflow, and djpeg now checks for negative numbers when it parses the crop specification from the command line. 7. Fixed an issue whereby the TurboJPEG lossless transformation function and methods checked the specified cropping region against the source image dimensions and level of chrominance subsampling rather than the destination image dimensions and level of chrominance subsampling, which caused some cropping regions to be unduly rejected when performing 90-degree rotation, 270-degree rotation, transposition, transverse transposition, or grayscale conversion. 8. Fixed an issue whereby the TurboJPEG lossless transformation function and methods did not honor `TJXOPT_COPYNONE`/`TJTransform.OPT_COPYNONE` unless it was specified for all lossless transforms.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 2d47222b6828431966a21250035bf803a7c4e855 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:53:28 2024 +0100
core191: ship libgpg-error
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit a0bf3c9d1d78a9007054b50554b6e8edabcce33d Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:57 2024 +0100
libgpg-error: Update to version 1.51
- Update from version 1.50 to 1.51 - Update of rootfile - Changelog 1.51 * Allow initialization of new Windows threads to utf8 mode. [T7185] * Add GPGRT_PROCESS_ALLOW_SET_FG for gpgrt_process_spawn. [rEb79d4206f4] * Add new spawn function to modify the environment. [T7307] * Fix missing environ var for macOS and others. [T7169,T7307] * Fix forgotten _gpgrt_post_syscall on create pipe failure. [rEbcab96484d] * Let gpgrt_poll return an error for a closed fd. [rE4a3dc85f69] * Fix build error introduced by C-committee stupidity. [T7344] * Interface changes relative to the 1.50 release: _gpg_w32_gettext_use_utf8 EXTN (new value 2). gpgrt_spawn_actions_set_env_rev NEW. GPGRT_PROCESS_ALLOW_SET_FG NEW.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 4dc89aca1eb36ce79f30bb401f51bcfe91d4472d Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:52:03 2024 +0100
core191: ship libedit
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 5a91471b29456d585ece283eb230387ac0787c4a Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:56 2024 +0100
libedit: Update to version 20240808-3.1
- Update from version 20240517-3.1 to 20240808-3.1 - Update of rootfile - Changelog 20240808-3.1 * all: sync with upstream source * doc/Makefile.am: fix regression. Name all manpage links as el_* (e.g. el_history.3) to avoid conflicts. Reported by Zopolis4
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 8c946062ec66e72da2f00fc52433a6f41bb5fa4d Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:50:34 2024 +0100
core191: ship libcap
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 89e87940aa96279a2feffb9c0ead752e616a19c3 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:55 2024 +0100
libcap: Update to version 2.72
- Update from version 2.70 to 2.72 - Update of rootfile - Changelog 2.72 ERRATA: Failed to support more modern Linux architectures including arm64. Fix provided by Xi Ruoyao. This specific release is devoted to a wholesale rewrite of libpsx to operate on native Linux threads (aka LWP = Light Weight Processes). Given the potential for misbehavior, we're isolating this release to that change. Should some issue(s) arise, and folk need to roll back, this will hopefully make downstream packagers' lives a bit easier: skip this release altogether. This addresses LCAP-CR-23-102 (SEVERITY) NONE from the libcap-2.69 security audit. This addresses Bug 217476. This addresses C++ std::thread libpsx support. This addresses Bug 218607 reported by Vini Ipsmaker. Included a test case for this: contrib/bug218607/ This now allows the PSX mechanism to apply to threads launched by loaded .so plugins. This addresses Bug 219174 reported by Stas Sergeev. Included a test case for this: tests/b219174.c The rewrite has significantly reduced the need for any odd linking of the -lpsx library. Namely, if code makes use of the psx_syscall*() functions, there is no need for anything other than -lpsx on the link line. Updated a whole lot of documentation that warned folk about the -wrap=pthread_create linking need not being needed any more. (Bug 219456) Linking -lcap and -lpsx still requires some extra care. Updated cap_get_proc(3) manual page to explain. Was unable to figure out how to work around the pre-go1.16.* bug related to cgo and interrupt handling while thread exit with the rewritten libpsx code. Decided to abandon full support for earlier versions of Go. Explanation is Bug 219478 which points to old Go bug. Transitioned key used for signing Go package tags to use the 0D23D34C577B08C4082CFD76430C5CFF993116B1 key. Very tiny documentation change for the cap package to try again to get a runnable example to show up on the pkg.go.dev website. 2.71 Reduce the need for CAP_SETPCAP in IAB setting to the specific instances in which the kernel requires it. This addresses Bug 219169 reported by Christopher Head. Resolve subtle libpsx linker flag issue related to -Bsymbolic-functions. This addresses Bug 219169 reported by Stas Sergeev. Add new GPG signing key. At this stage, none of the older keys have been retired. This addresses Bug 218860 requested by David Runge at Arch Linux. Key details: $ gpg --fingerprint 0D23D34C577B08C4082CFD76430C5CFF993116B1 pub ed25519 2024-10-26 [SC] 0D23 D34C 577B 08C4 082C FD76 430C 5CFF 9931 16B1 uid [ultimate] Andrew G. Morgan (2024+ libcap signing key) morgan@kernel.org sub cv25519 2024-10-26 [E] Expand use of various $(xFLAGS) to building simple binaries in the build tree. Requested by Pierre-Clément Tosi. Numerous documentation updates and clarifications. Added a programming example to the cap package documentation. Exploring how to embed viewer runnable content in the automatically generated online pkg.go.dev documentation. Work around a longstanding glibc segfault annoyance for in-build-tree testing.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 7d13ce53b9227464718d603c7c122118d318d7a3 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:49:27 2024 +0100
core191: ship libarchive
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit ebb345e9e054166ebfd57a2f11ef16131529e380 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:54 2024 +0100
libarchive: Update to version 3.7.7
- Update from version 3.7.4 to 3.7.7 - Update of rootfile - Fixes for 3 CVE's in 3.7.5 - Changelog 3.7.7 Security fixes: gzip: prevent a hang when processing a malformed gzip inside a gzip (#2366, OSS-Fuzz) tar: don't crash on truncated tar archives (#2364, OSS-Fuzz) tar: fix two leaks in tar header parsing (#2377) Important bugfixes: 7-zip: read/write symlink paths as UTF-8 (#2252) cpio: exit with an error code if an entry could not be extracted (#2371) rar5: report encrypted entries (#2096) tar: fix truncation of entry pathnames in specific archives (#2360) windows: fix ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS (#2363) 3.7.6 This release fixes a tar regression introduced in libarchive 3.7.5 (#2331, #2337) Important bugfixes. tar: clean up linkpath between entries (#2343) tar: fix memory leaks when processing symlinks or parsing pax headers (#2338) iso: be more cautious about parsing ISO-9660 timestamps (#2330) 3.7.5 Security fixes: fix multiple vulnerabilities identified by SAST (#2251, #2256) cpio: ignore out-of-range gid/uid/size/ino and harden AFIO parsing (#2258) lzop: prevent integer overflow (#2174) rar4: protect copy_from_lzss_window_to_unp() (#2172, CVE-2024-20696) rar4: fix CVE-2024-26256 (#2269, CVS-2024-26256) rar4: fix OOB in delta and audio filter (#2148, #2149) rar4: fix out of boundary access with large files (#2179) rar4: add boundary checks to rgb filter (#2210) rar4: fix OOB access with unicode filenames (#2203) rar5: clear 'data ready' cache on window buffer reallocs (#2265) rpm: calculate huge header sizes correctly (#2158) unzip: unify EOF handling (#2175) util: fix out of boundary access in mktemp functions (#2160) uu: stop processing if lines are too long (#2168) Important bugfixes: 7zip: fix issue when skipping first file in 7zip archive that is a multiple of 65536 bytes (#2245) ar: fix archive entries having no type (#2290) lha: do not allow negative file sizes (#2155) lha: fix integer truncation on 32-bit systems (#2161) shar: check strdup return value (#2173) rar5: don't try to read rediculously long names (#2259) xar: fix another infinite loop and expat error handling (#2150) many Windows fixes, cleanups and improvements
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 413ae40a16ee16326bc3f0d13b5c60d66e833f84 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:48:11 2024 +0100
core191: ship less
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 51ed86d877d2b460129858d614936d8203dafd40 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:53 2024 +0100
less: Update to version 668
- Update from version 661 to 668 - Update of rootfile not required - Changelog 668 * Make 256/true colors work better on Windows without -Da (github #539, github #546, github #562). * Fix build using --with-secure (github #544). * Fix crash when using --header on command line (github #545). * Fix possible crash when scrolling left/right or toggling -S (github #547). * Fix bug when using #stop in a lesskey file (github #551). * Fix bug when using --shift or --match-shift on command line with a parameter starting with '.' (github #554). * Fix bug in R command when file size changes (github #553). * Fix bug using --header when file does not fill screen (github #556). * Fix ^X bug when output is not a terminal (github #558). * Fix bug where ^Z is not handled immediately (github #563). * Fix bug where first byte from a LESSOPEN filter is deleted if it is greater than 0x7F (github #568). * Fix uninitialized variable in edit_ifile (github #573). * Fix incorrect handling of UTF-8 chars in prompts (github #576).
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 110505bd4a0023da57e79ae3e70cb3ccc59d119c Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:46:49 2024 +0100
core191: ship krb5
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit a67c8e78c7146d0fc73b4b7af61c0e2699927958 Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:52 2024 +0100
krb5: Update to version 1.21.3
- Update from version 1.21.2 to 1.21.3 - Update of rootfile not required - Changelog 1.21.3 * Fix vulnerabilities in GSS message token handling [CVE-2024-37370, CVE-2024-37371]. * Fix a potential bad pointer free in krb5_cccol_have_contents(). * Fix a memory leak in the macOS ccache type.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit a9db42e0da4c6f6fb56cb1ce99aea4ea2e47f155 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:45:42 2024 +0100
core191: ship knot
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 1f58338afe0c09fd6b7a0d2c8eceec7f44bbc71f Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:51 2024 +0100
knot: Update to version 3.4.2
- Update from version 3.3.8 to 3.4.2 - Update of rootfile - Changelog 3.4.2 Improvements: - knotd: new warning log upon every incremental update if previous zone signing failed - mod-cookies: support for two secret values specification - keymgr: key pregenerate works even when a KSK exists - libs: upgraded embedded libngtcp2 to 1.8.1 Bugfixes: - knotd: server can crash when processing just a terminal label as QNAME - knotd: failed to compile if no atomic operations available - kjournalprint: failed to merge zone-in-journal if followed by a non-first changeset - knot-exporter: faulty escape sequence in time value parsing - knot-exporter: failed to parse zone-status output - kxdpgun: periodic statistics doesn't work correctly for longer time periods 3.4.1 Features: - knotd: ACL configuration allows protocol specification (see 'acl.protocol') - knotc: support for benevolent zone updates (see zone-begin with '+benevolent') - knotd: implemented TLS session resumption - knotd: pending TLS connections leak memory when the server shuts down - kjournalprint: added print merged changesets mode (see '-M') - libknot: added NXNAME meta type (Thanks to Jan Včelák) Improvements: - knotd: DNSKEY synchronization event logs removed/added *DNSKEYs - knotd: control command log message contains filters and flags in the debug mode - knotc: zone status prints running, pending, and frozen duration - knotd,knotc: unification of control flags and filters - keymgr: key listing reports configured keys that are inaccessible - libs: upgraded embedded libngtcp2 to 1.8.0 - doc: various fixes and updates Bugfixes: - knotd: missing support for IPv6 link local address configuration - knotd: zone reload occasionally causes a core dump #939 (Thanks to lidcc2) - knotd: race condition in DDNS over QUIC processing - knotd: imperfect signal handling on some auxiliary threads - knotd: EDNS EXPIRE not updated when zone signing results in up-to-date - knotd: failed to reload autogenerated QUIC/TLS key after process ownership change - knotc: zone backup filter +keysonly doesn't disable other defaults - kxdpgun: failed to receive more data over QUIC until 1-RTT handshake is done - knsupdate: memory leak if rdata parsing fails - doc: failed to install manual pages from a tarball - Dockerfile: TCP port 853 not exposed for DoT 3.4.0 Features: - knotd: full DNS over TLS (DoT, RFC 7858) implementation (see 'DNS over TLS') - knotd: bidirectional XFR over TLS (XoT) support with opportunistic, strict, and mutual authentication profiles - knotd: support for DDNS over QUIC and TLS - knotd: DNSSEC validation requires the remaining RRSIG validity is longer than 'rrsig-refresh' - knotd: new event for automatic DNSSEC revalidation - knotd: if enabled DNSSEC signing, EDNS expire is adjusted to the earliest RRSIG expiration - knotd: added support for libdbus as an alternative to systemd dbus (see '--enable-dbus=libdbus' configure parameter) - knotd: new XDP-related configuration options (see 'xdp.ring-size', 'xdp.busypoll-budget', and 'xdp.busypoll-timeout') - knotc: new command for explicit triggering DNSSEC validation (see 'zone-validate' command) - keymgr: SKR verification requires end of DNSKEY RRSIG validity covers next DNSKEY snapshot - kdig: +nocrypto applies also to CERT, DS, SSHFP, DHCID, TLSA, ZONEMD, and TSIG - knsupdate: added support for DDNS over QUIC and TLS (see '-Q' and '-S' parameters) - kxdpgun: support for reading a binary input file (see '-B' parameter) - kxdpgun: support for output in JSON (see '-j' parameter) - kxdpgun: support for periodical output (see '-S' parameter) - mod-rrl: module offers limiting of non-UDP protocols based on consumed time (see 'mod-rrl.time-rate-limit' and 'mod-rrl.time-instant-limit') - utils: -VV option for listing compile time configuration summary Improvements: - knotd: up to eight DDNS queries can be queued per zone when frozen - knotd: the number of created/validated RRSIGs is logged - knotd: overhaul of atomic operations usage - knotd: unified DNAME semantic errors with the CNAME ones (see 'Handling CNAME and DNAME-related updates') - knotd: better DDNS pre-check to prevent dropping a bulk of updates - knotd: extended SOA presence semantic checks - knotd: disallowed concurrent control zone and config transactions to avoid deadlock - knotd: disallowed opening zone transaction when blocking command is running to avoid deadlock - knotd: new XDP statistic counters - knotd: remote zone serial is logged upon received incoming transfer - knotd: zone backup stores and zone restore checks the CPU architecture compatibility - knotd: time configuration options support 'w', 'M', and 'y' units - knotd: some control commands can be processed asynchronously - knotc: zone backup overwrites already existing backupdir in the force mode - kdig: EDNS is enabled by default - kdig: the default EDNS payload size was lowered to 1232 - mod-rrl: completely reimplemented UDP rate limiting using an efficient query-counting mechanism on several address prefix lengths - mod-rrl: module no longer requires explicit configuration - libknot: various XDP improvements and new configuration parameters - docker: increased -D_FORTIFY_SOURCE to 3 Bugfixes: - knotd: deadlock during zone-ksk-submitted processing of a frozen zone - kxdpgun: race condition in SIGUSR1 signal processing - doc: parallel build is unreliable #928 Compatibility: - configure: increase minimal GnuTLS version to 3.6.10 - configure: removed deprecated libidn 1 support - configure: removed liburcu search fallback - configure: required GCC or LLVM Clang compiler with C11 support - knotd: removed already ignored obsolete configuration options - keymgr: removed legacy parameter '--brief' - kjournalprint: removed legacy parameter '--no-color' - kjournalprint: removed legacy database specification without '--dir' - kcatalogprint: removed legacy database specification without '--dir' - packaging: CentOS 7, Debian 10, and Ubuntu 18.04 no longer supported - doc: removed info pages 3.3.9 Improvements: - libknot: added EDE code 30 - libknot: improved performance of knot_rrset_to_wire_extra() - libs: upgraded embedded libngtcp2 to 1.7.0 - doc: various fixes and updates Bugfixes: - keymgr: pregenerate clears future timestamps of old keys and creates new keys - mod-dnsproxy: defective TSIG processing - mod-dnsproxy: TCP not detected in the XDP mode - kxdpgun: unsuccessful interface initialization leaks memory - packaging: libknot not installed with python3-libknot
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit c4e77b29357812f4859deb0cfe3b0bf614e44cd8 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:44:38 2024 +0100
core191: ship kmod
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 20c522c5956009444fea7801a82e914e4443122f Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:50 2024 +0100
kmod: Update to version 33
- Update from version 32 to 33 - Update of rootfile - Changelog 33 - Improvements - Allow to handle compressed modules even without decompression libraries linked in. Previously we would detect if the kernel supported the decompression algorithm and pass the module directly through finit_module(). However it wouldn't consider the file if the respective decompression library was compiled out. Now it's possible to completely disable all libraries and still have module load working with libkmod. Tools that inspect module content themselves like modinfo and depmod won't work if the decompression library is not enabled. - Add weak dependencies - these are similar to pre softdep, but they don't cause the dependency to be loaded by libkmod: when a module has a weak dependency, it is expected that module may or may not be used, with decision happening in runtime by the kernel. It's purpose is to be informational for other tools like ones used to create initramfs, so the module is made available before switch_root(), but doesn't imply it to be loaded when not needed. - Improve compatibility with non-gnu libc like musl and uClibc. Now it's possible to build and use libkmod and tools without any additional compat patches. - Move manpages from xsltproc to scdoc, which is now needed during build. - Improve documentation in manpages, fixing typos, rewording sentences, detailing how configuration files are handled with precedence order and making all the manpages more consistent on how to reference options, environment variables, configuration, authors, etc. - Speed up zstd decompression, particularly when not using glibc. - Stop parsing .alias files from modprobe.d directories. Configuration files were always documented as needing the .conf extension. For compatibility reason with module-init-tools, kmod also parsed .alias files. However that was also done in module-init-tools for compatibility reasons and not documented anywhere. From inspection on what distros are using, none use .alias files in practice, so stop parsing those files and follow what's documented. - Adopt SPDX for license and cleanup comments on individual files. - Since kmod 29 there's a github mirror for the repository. Now it's also used for issues and improvement tracking. With that, the old TODO file has been removed and distros/users are encouraged to file issues in github. - Bug fixes - Move kmod.pc to the right dir, ${datadir}/pkgconfig, as it's related to kmod, not libkmod. - Fix error handling while loading a file and mmap fails. - Fix error handling while handling errors from the decompression libraries. - Add missing documentation for KMOD_INDEX_MODULES_BUILTIN that was added in v27 breaking the ABI. A wide search has found one external tool using it, which hasn't been updated in the past 12 years. It was deemed safe to simply update the documentation to include the missing enum. - Move kmod_module_new_from_name_lookup() to the correct symbol version. It was added by mistake to @LIBKMOD_5 when v30 got released. No external user of this API was found, so it was considered safe to just move it. - Others - Overwrite symlinks when installing tools. - General cleanup of how (de)compression libraries are integrated. - Add CI infrastructure to automatically test in several distros before applying commit series. Currently the latest versions of Alpine, Archlinux, Fedora and Ubuntu are covered. More distros are easy to add as they are all containerized.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit baaed917d61f7aa59a1fdab0a586dcbd54957606 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:43:20 2024 +0100
core191: ship json-c
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit d068c6a5898cec2ac90169f809c6702716d9cd0d Author: Adolf Belka adolf.belka@ipfire.org Date: Tue Nov 19 22:10:49 2024 +0100
json-c: Update to version 0.18
- Update from version 0.17 to 0.18 - Update of rootfile - Changelog 0.18 Deprecated and removed features: * Clean up pre-3.9 CMake support in CMakeLists.txt New features * Build pkg-config for msvc as well Significant changes and bug fixes * Critical fix for binary compatibility with 0.16: Move the json_tokener_error_memory entry to the end of enum json_tokener_error. * Issue #829: attempt to detect clang-cl.exe and pass MSVC-compatile command line arguments. * PR #831 - rename WIN32 to _WIN32 * PR #839 - Fix gcc 5 "may be used uninitialized" failure in json_pointer.c * PR #849 - random_seed.c: add a Coverity Scan suppression * Issue #854: Set error=json_tokener_error_memory in json_tokener_parser_verbose() when allocating the tokener fails. * Issue #857: fix a few places where json_tokener should have been returning json_tokener_error_memory but wasn't. * Handle yet another out-of-memory condition in json_tokener, duplocate can return NULL. * Various fixes in the fuzzers * A few minor doc fixes
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit b7513eb4e82e9f0551daaffec995a4aa98dc6993 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 13 09:41:24 2024 +0100
core191: ship dnsforward.cgi
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit de8ed87d05887907740bef72180b6e8f63d01416 Author: Wayne waynetsun@ucpix.de Date: Thu Oct 24 16:03:07 2024 +0200
Makes entries in dnsforward.cgi visible
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
-----------------------------------------------------------------------
Summary of changes: config/rootfiles/common/json-c | 2 +- config/rootfiles/common/kmod | 5 ++-- config/rootfiles/common/knot | 4 +-- config/rootfiles/common/libarchive | 2 +- config/rootfiles/common/libcap | 4 +-- config/rootfiles/common/libedit | 33 +++++++++++----------- config/rootfiles/common/libgpg-error | 2 +- config/rootfiles/common/liboping | 5 ++-- config/rootfiles/common/libpcap | 2 +- config/rootfiles/common/libpipeline | 2 +- config/rootfiles/common/libxml2 | 2 +- config/rootfiles/core/191/filelists/files | 1 + .../{oldcore/125 => core/191}/filelists/json-c | 0 .../{oldcore/125 => core/191}/filelists/kmod | 0 .../{oldcore/128 => core/191}/filelists/knot | 0 .../{oldcore/169 => core/191}/filelists/krb5 | 0 .../{oldcore/103 => core/191}/filelists/less | 0 .../{oldcore/104 => core/191}/filelists/libarchive | 0 .../{oldcore/104 => core/191}/filelists/libcap | 0 .../{oldcore/128 => core/191}/filelists/libedit | 0 .../106 => core/191}/filelists/libgpg-error | 0 .../{oldcore/107 => core/191}/filelists/libjpeg | 0 .../{oldcore/158 => core/191}/filelists/libnl-3 | 0 .../{oldcore/136 => core/191}/filelists/liboping | 0 .../{oldcore/109 => core/191}/filelists/libpcap | 0 config/rootfiles/core/191/filelists/libpipeline | 1 + .../{oldcore/173 => core/191}/filelists/libtirpc | 0 .../{oldcore/162 => core/191}/filelists/libuv | 0 .../{oldcore/101 => core/191}/filelists/libxml2 | 0 html/cgi-bin/dnsforward.cgi | 2 +- lfs/json-c | 6 ++-- lfs/kmod | 6 ++-- lfs/knot | 4 +-- lfs/krb5 | 6 ++-- lfs/less | 4 +-- lfs/libarchive | 4 +-- lfs/libcap | 4 +-- lfs/libedit | 4 +-- lfs/libgpg-error | 4 +-- lfs/libjpeg | 4 +-- lfs/libnl-3 | 4 +-- lfs/liboping | 6 ++-- lfs/libpcap | 10 +++---- lfs/libpipeline | 6 ++-- lfs/libtirpc | 4 +-- lfs/libuv | 6 ++-- lfs/libxml2 | 4 +-- 47 files changed, 80 insertions(+), 73 deletions(-) copy config/rootfiles/{oldcore/125 => core/191}/filelists/json-c (100%) copy config/rootfiles/{oldcore/125 => core/191}/filelists/kmod (100%) copy config/rootfiles/{oldcore/128 => core/191}/filelists/knot (100%) copy config/rootfiles/{oldcore/169 => core/191}/filelists/krb5 (100%) copy config/rootfiles/{oldcore/103 => core/191}/filelists/less (100%) copy config/rootfiles/{oldcore/104 => core/191}/filelists/libarchive (100%) copy config/rootfiles/{oldcore/104 => core/191}/filelists/libcap (100%) copy config/rootfiles/{oldcore/128 => core/191}/filelists/libedit (100%) copy config/rootfiles/{oldcore/106 => core/191}/filelists/libgpg-error (100%) copy config/rootfiles/{oldcore/107 => core/191}/filelists/libjpeg (100%) copy config/rootfiles/{oldcore/158 => core/191}/filelists/libnl-3 (100%) copy config/rootfiles/{oldcore/136 => core/191}/filelists/liboping (100%) copy config/rootfiles/{oldcore/109 => core/191}/filelists/libpcap (100%) create mode 120000 config/rootfiles/core/191/filelists/libpipeline copy config/rootfiles/{oldcore/173 => core/191}/filelists/libtirpc (100%) copy config/rootfiles/{oldcore/162 => core/191}/filelists/libuv (100%) copy config/rootfiles/{oldcore/101 => core/191}/filelists/libxml2 (100%)
Difference in files: diff --git a/config/rootfiles/common/json-c b/config/rootfiles/common/json-c index f050376cb..dbf87f32c 100644 --- a/config/rootfiles/common/json-c +++ b/config/rootfiles/common/json-c @@ -21,5 +21,5 @@ #usr/lib/cmake/json-c/json-c-targets.cmake #usr/lib/libjson-c.so usr/lib/libjson-c.so.5 -usr/lib/libjson-c.so.5.3.0 +usr/lib/libjson-c.so.5.4.0 #usr/lib/pkgconfig/json-c.pc diff --git a/config/rootfiles/common/kmod b/config/rootfiles/common/kmod index 4ba8225b7..952031a78 100644 --- a/config/rootfiles/common/kmod +++ b/config/rootfiles/common/kmod @@ -15,7 +15,8 @@ sbin/rmmod #usr/lib/libkmod.la #usr/lib/libkmod.so usr/lib/libkmod.so.2 -usr/lib/libkmod.so.2.4.2 -#usr/lib/pkgconfig/kmod.pc +usr/lib/libkmod.so.2.5.0 #usr/lib/pkgconfig/libkmod.pc #usr/share/bash-completion/completions/kmod +#usr/share/pkgconfig +#usr/share/pkgconfig/kmod.pc diff --git a/config/rootfiles/common/knot b/config/rootfiles/common/knot index 0fc076c10..5d0ab19d3 100644 --- a/config/rootfiles/common/knot +++ b/config/rootfiles/common/knot @@ -9,7 +9,7 @@ usr/lib/libdnssec.so.9.0.0 #usr/lib/libknot.la #usr/lib/libknot.lai #usr/lib/libknot.so -usr/lib/libknot.so.14 -usr/lib/libknot.so.14.0.0 +usr/lib/libknot.so.15 +usr/lib/libknot.so.15.0.0 #usr/lib/libknotus.a #usr/lib/libknotus.la diff --git a/config/rootfiles/common/libarchive b/config/rootfiles/common/libarchive index 2f38c29a7..0e6d2087b 100644 --- a/config/rootfiles/common/libarchive +++ b/config/rootfiles/common/libarchive @@ -7,7 +7,7 @@ #usr/lib/libarchive.la #usr/lib/libarchive.so usr/lib/libarchive.so.13 -usr/lib/libarchive.so.13.7.4 +usr/lib/libarchive.so.13.7.7 #usr/lib/pkgconfig/libarchive.pc #usr/share/man/man1/bsdcat.1 #usr/share/man/man1/bsdcpio.1 diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap index ea90c7564..82754304e 100644 --- a/config/rootfiles/common/libcap +++ b/config/rootfiles/common/libcap @@ -6,10 +6,10 @@ sbin/setcap #usr/include/sys/psx_syscall.h #usr/lib/libcap.so usr/lib/libcap.so.2 -usr/lib/libcap.so.2.70 +usr/lib/libcap.so.2.72 #usr/lib/libpsx.so #usr/lib/libpsx.so.2 -usr/lib/libpsx.so.2.70 +usr/lib/libpsx.so.2.72 #usr/lib/pkgconfig/libcap.pc #usr/lib/pkgconfig/libpsx.pc #usr/lib/security diff --git a/config/rootfiles/common/libedit b/config/rootfiles/common/libedit index 7d4a13ea6..f910fb74e 100644 --- a/config/rootfiles/common/libedit +++ b/config/rootfiles/common/libedit @@ -4,7 +4,7 @@ #usr/lib/libedit.la #usr/lib/libedit.so usr/lib/libedit.so.0 -usr/lib/libedit.so.0.0.73 +usr/lib/libedit.so.0.0.74 #usr/lib/pkgconfig/libedit.pc #usr/share/man/man3/editline.3 #usr/share/man/man3/el_deletestr.3 @@ -12,6 +12,12 @@ usr/lib/libedit.so.0.0.73 #usr/share/man/man3/el_get.3 #usr/share/man/man3/el_getc.3 #usr/share/man/man3/el_gets.3 +#usr/share/man/man3/el_history.3 +#usr/share/man/man3/el_history_end.3 +#usr/share/man/man3/el_history_init.3 +#usr/share/man/man3/el_history_w.3 +#usr/share/man/man3/el_history_wend.3 +#usr/share/man/man3/el_history_winit.3 #usr/share/man/man3/el_init.3 #usr/share/man/man3/el_init_fd.3 #usr/share/man/man3/el_insertstr.3 @@ -22,6 +28,16 @@ usr/lib/libedit.so.0.0.73 #usr/share/man/man3/el_resize.3 #usr/share/man/man3/el_set.3 #usr/share/man/man3/el_source.3 +#usr/share/man/man3/el_tok_end.3 +#usr/share/man/man3/el_tok_init.3 +#usr/share/man/man3/el_tok_line.3 +#usr/share/man/man3/el_tok_reset.3 +#usr/share/man/man3/el_tok_str.3 +#usr/share/man/man3/el_tok_wend.3 +#usr/share/man/man3/el_tok_winit.3 +#usr/share/man/man3/el_tok_wline.3 +#usr/share/man/man3/el_tok_wreset.3 +#usr/share/man/man3/el_tok_wstr.3 #usr/share/man/man3/el_wdeletestr.3 #usr/share/man/man3/el_wget.3 #usr/share/man/man3/el_wgetc.3 @@ -31,20 +47,5 @@ usr/lib/libedit.so.0.0.73 #usr/share/man/man3/el_wparse.3 #usr/share/man/man3/el_wpush.3 #usr/share/man/man3/el_wset.3 -#usr/share/man/man3/history_end.3 -#usr/share/man/man3/history_init.3 -#usr/share/man/man3/history_w.3 -#usr/share/man/man3/history_wend.3 -#usr/share/man/man3/history_winit.3 -#usr/share/man/man3/tok_end.3 -#usr/share/man/man3/tok_init.3 -#usr/share/man/man3/tok_line.3 -#usr/share/man/man3/tok_reset.3 -#usr/share/man/man3/tok_str.3 -#usr/share/man/man3/tok_wend.3 -#usr/share/man/man3/tok_winit.3 -#usr/share/man/man3/tok_wline.3 -#usr/share/man/man3/tok_wreset.3 -#usr/share/man/man3/tok_wstr.3 #usr/share/man/man5/editrc.5 #usr/share/man/man7/editline.7 diff --git a/config/rootfiles/common/libgpg-error b/config/rootfiles/common/libgpg-error index b6742cde6..ec61ac1f8 100644 --- a/config/rootfiles/common/libgpg-error +++ b/config/rootfiles/common/libgpg-error @@ -6,7 +6,7 @@ usr/bin/gpg-error #usr/lib/libgpg-error.la #usr/lib/libgpg-error.so usr/lib/libgpg-error.so.0 -usr/lib/libgpg-error.so.0.37.0 +usr/lib/libgpg-error.so.0.38.0 #usr/lib/pkgconfig/gpg-error.pc #usr/share/aclocal/gpg-error.m4 #usr/share/aclocal/gpgrt.m4 diff --git a/config/rootfiles/common/liboping b/config/rootfiles/common/liboping index 9ab1c24d5..60ae21bc3 100644 --- a/config/rootfiles/common/liboping +++ b/config/rootfiles/common/liboping @@ -1,15 +1,16 @@ +usr/bin/noping usr/bin/oping #usr/include/oping.h #usr/lib/liboping.a #usr/lib/liboping.la usr/lib/liboping.so usr/lib/liboping.so.0 -usr/lib/liboping.so.0.2.3 +usr/lib/liboping.so.0.3.0 usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/Net/Oping.pm #usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/Net/Oping #usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/Net/Oping/.packlist -#usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/Net/Oping/Oping.bs usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/Net/Oping/Oping.so +#usr/lib/pkgconfig/liboping.pc #usr/share/man/man3/Net::Oping.3 #usr/share/man/man3/liboping.3 #usr/share/man/man3/ping_construct.3 diff --git a/config/rootfiles/common/libpcap b/config/rootfiles/common/libpcap index 43c9140ea..7497e2cb1 100644 --- a/config/rootfiles/common/libpcap +++ b/config/rootfiles/common/libpcap @@ -21,7 +21,7 @@ #usr/lib/libpcap.a usr/lib/libpcap.so usr/lib/libpcap.so.1 -usr/lib/libpcap.so.1.10.4 +usr/lib/libpcap.so.1.10.5 #usr/lib/pkgconfig/libpcap.pc #usr/share/man/man1/pcap-config.1 #usr/share/man/man3/pcap.3pcap diff --git a/config/rootfiles/common/libpipeline b/config/rootfiles/common/libpipeline index b706294aa..9fd2226a3 100644 --- a/config/rootfiles/common/libpipeline +++ b/config/rootfiles/common/libpipeline @@ -2,7 +2,7 @@ #usr/lib/libpipeline.la #usr/lib/libpipeline.so #usr/lib/libpipeline.so.1 -#usr/lib/libpipeline.so.1.5.7 +#usr/lib/libpipeline.so.1.5.8 #usr/lib/pkgconfig/libpipeline.pc #usr/share/man/man3/libpipeline.3 #usr/share/man/man3/pipecmd_arg.3 diff --git a/config/rootfiles/common/libxml2 b/config/rootfiles/common/libxml2 index 0eadee10c..7fa288199 100644 --- a/config/rootfiles/common/libxml2 +++ b/config/rootfiles/common/libxml2 @@ -54,7 +54,7 @@ #usr/lib/libxml2.la #usr/lib/libxml2.so usr/lib/libxml2.so.2 -usr/lib/libxml2.so.2.13.3 +usr/lib/libxml2.so.2.13.5 #usr/lib/pkgconfig/libxml-2.0.pc #usr/share/aclocal/libxml.m4 #usr/share/doc/libxml2 diff --git a/config/rootfiles/core/191/filelists/files b/config/rootfiles/core/191/filelists/files index a35c93ed4..b6dea7f6b 100644 --- a/config/rootfiles/core/191/filelists/files +++ b/config/rootfiles/core/191/filelists/files @@ -1 +1,2 @@ +srv/web/ipfire/cgi-bin/dnsforward.cgi srv/web/ipfire/cgi-bin/services.cgi diff --git a/config/rootfiles/core/191/filelists/json-c b/config/rootfiles/core/191/filelists/json-c new file mode 120000 index 000000000..2da263e3d --- /dev/null +++ b/config/rootfiles/core/191/filelists/json-c @@ -0,0 +1 @@ +../../../common/json-c \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/kmod b/config/rootfiles/core/191/filelists/kmod new file mode 120000 index 000000000..0020e197e --- /dev/null +++ b/config/rootfiles/core/191/filelists/kmod @@ -0,0 +1 @@ +../../../common/kmod \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/knot b/config/rootfiles/core/191/filelists/knot new file mode 120000 index 000000000..28e96f878 --- /dev/null +++ b/config/rootfiles/core/191/filelists/knot @@ -0,0 +1 @@ +../../../common/knot \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/krb5 b/config/rootfiles/core/191/filelists/krb5 new file mode 120000 index 000000000..082c3cbcd --- /dev/null +++ b/config/rootfiles/core/191/filelists/krb5 @@ -0,0 +1 @@ +../../../common/krb5 \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/less b/config/rootfiles/core/191/filelists/less new file mode 120000 index 000000000..65c0e0771 --- /dev/null +++ b/config/rootfiles/core/191/filelists/less @@ -0,0 +1 @@ +../../../common/less \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libarchive b/config/rootfiles/core/191/filelists/libarchive new file mode 120000 index 000000000..551f1f743 --- /dev/null +++ b/config/rootfiles/core/191/filelists/libarchive @@ -0,0 +1 @@ +../../../common/libarchive \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libcap b/config/rootfiles/core/191/filelists/libcap new file mode 120000 index 000000000..ed67d950a --- /dev/null +++ b/config/rootfiles/core/191/filelists/libcap @@ -0,0 +1 @@ +../../../common/libcap \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libedit b/config/rootfiles/core/191/filelists/libedit new file mode 120000 index 000000000..03fc483da --- /dev/null +++ b/config/rootfiles/core/191/filelists/libedit @@ -0,0 +1 @@ +../../../common/libedit \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libgpg-error b/config/rootfiles/core/191/filelists/libgpg-error new file mode 120000 index 000000000..cad431339 --- /dev/null +++ b/config/rootfiles/core/191/filelists/libgpg-error @@ -0,0 +1 @@ +../../../common/libgpg-error \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libjpeg b/config/rootfiles/core/191/filelists/libjpeg new file mode 120000 index 000000000..3b1a782fb --- /dev/null +++ b/config/rootfiles/core/191/filelists/libjpeg @@ -0,0 +1 @@ +../../../common/libjpeg \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libnl-3 b/config/rootfiles/core/191/filelists/libnl-3 new file mode 120000 index 000000000..00e61c261 --- /dev/null +++ b/config/rootfiles/core/191/filelists/libnl-3 @@ -0,0 +1 @@ +../../../common/libnl-3 \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/liboping b/config/rootfiles/core/191/filelists/liboping new file mode 120000 index 000000000..3ae1904e7 --- /dev/null +++ b/config/rootfiles/core/191/filelists/liboping @@ -0,0 +1 @@ +../../../common/liboping \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libpcap b/config/rootfiles/core/191/filelists/libpcap new file mode 120000 index 000000000..c7f9f52a8 --- /dev/null +++ b/config/rootfiles/core/191/filelists/libpcap @@ -0,0 +1 @@ +../../../common/libpcap \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libpipeline b/config/rootfiles/core/191/filelists/libpipeline new file mode 120000 index 000000000..385d9d2c8 --- /dev/null +++ b/config/rootfiles/core/191/filelists/libpipeline @@ -0,0 +1 @@ +../../../common/libpipeline \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libtirpc b/config/rootfiles/core/191/filelists/libtirpc new file mode 120000 index 000000000..7ff318291 --- /dev/null +++ b/config/rootfiles/core/191/filelists/libtirpc @@ -0,0 +1 @@ +../../../common/libtirpc \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libuv b/config/rootfiles/core/191/filelists/libuv new file mode 120000 index 000000000..c74f52510 --- /dev/null +++ b/config/rootfiles/core/191/filelists/libuv @@ -0,0 +1 @@ +../../../common/libuv \ No newline at end of file diff --git a/config/rootfiles/core/191/filelists/libxml2 b/config/rootfiles/core/191/filelists/libxml2 new file mode 120000 index 000000000..242e69fa3 --- /dev/null +++ b/config/rootfiles/core/191/filelists/libxml2 @@ -0,0 +1 @@ +../../../common/libxml2 \ No newline at end of file diff --git a/html/cgi-bin/dnsforward.cgi b/html/cgi-bin/dnsforward.cgi index 4af5ed200..d5a46b675 100644 --- a/html/cgi-bin/dnsforward.cgi +++ b/html/cgi-bin/dnsforward.cgi @@ -325,7 +325,7 @@ foreach my $line (@current) $col="bgcolor='${Header::colouryellow}'"; } elsif ($disable_dnssec eq 'on') { print "<tr>"; - $col="bgcolor='${Header::colourred}' style='color: white'"; } + $col="bgcolor='${Header::colourred}' style='color: black'"; } elsif ($id % 2) { print "<tr>"; $col="bgcolor='$color{'color22'}'"; } diff --git a/lfs/json-c b/lfs/json-c index e529eb141..edca5d3b2 100644 --- a/lfs/json-c +++ b/lfs/json-c @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2024 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 0.17 +VER = 0.18
THISAPP = json-c-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 26be25141447f2b652fa09d7096141a8bf7992469bcc53b275c1bc0108fc36a8898a8185c381218d3146d00fa03bdd0b837be073410fc93af943b5f083dbaa69 +$(DL_FILE)_BLAKE2 = d39bab289976cb2f76bcf3ad8254f7f5b4d11e2aa4dedebd60dc7d131a3f6ec57beacdc575aeeb191cf449d16c549d424172e78464731eeb66305f47f72371c2
install : $(TARGET)
diff --git a/lfs/kmod b/lfs/kmod index 2719083e5..96c39ad70 100644 --- a/lfs/kmod +++ b/lfs/kmod @@ -24,7 +24,9 @@
include Config
-VER = 32 +VER = 33 + +# https://www.kernel.org/pub/linux/utils/kernel/kmod/
THISAPP = kmod-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 5b5dac4639406549b23bb1da44bedd86a42885304ef4c7c67344dc8fd70b9e0ca3f83d033c6b80f6e00371d7188e205f4b68fadc56a9ddbf9d6a9d28e9b1e9a4 +$(DL_FILE)_BLAKE2 = 5fb4ea9d96217f8c94cba752b07a1b53228c6ae79dbaa605030cd84e3c6ca8d9c1a703a0253cea1d6c78a78f1507e2a1d9c6215d28dcb01b9e7f8b98a9fde425
install : $(TARGET)
diff --git a/lfs/knot b/lfs/knot index a016f3f91..6645c7be5 100644 --- a/lfs/knot +++ b/lfs/knot @@ -24,7 +24,7 @@
include Config
-VER = 3.3.8 +VER = 3.4.2
THISAPP = knot-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = a51e756f34d8641b2bc8ce32cb37c68c19ce1b5e13e981647e165634644ee005bb0a31b869148d50b3cd0a040f6952857df726e8ff67c5a46204270fa02396c5 +$(DL_FILE)_BLAKE2 = 0b633b27b22665db243bc4222f05028a17ee7ec6ba5960ff1cfe503d27bf3d26218f771cb15b70bbf8782898bcc7748bd5c27d55747607a1d93f784cdadddad7
install : $(TARGET)
diff --git a/lfs/krb5 b/lfs/krb5 index cf5daa54a..73f249e8b 100644 --- a/lfs/krb5 +++ b/lfs/krb5 @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2024 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config
SUMMARY = Kerberos
-VER = 1.21.2 +VER = 1.21.3
THISAPP = krb5-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -44,7 +44,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 2afb3ff962a343bc07182fdab0c0ffb221632ff38baab74278cfc721ae72deacc260221470de36e420584f00b780e13221d2e511d4831bca8e1270b7f3d9e824 +$(DL_FILE)_BLAKE2 = e909a55eaedab68e5c829bb7bbd26cec5db2d7b8d97f3b034de94d8f957003f16977ac619afee3b862f288e59f05c5e44f41e65b8883961c8b22a26e2f4733bc
install : $(TARGET)
diff --git a/lfs/less b/lfs/less index 8f94a2eeb..e5d87e3a2 100644 --- a/lfs/less +++ b/lfs/less @@ -24,7 +24,7 @@
include Config
-VER = 661 +VER = 668
THISAPP = less-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = c1fa9a7a646fcc1203945e00c35fe41bddef0c564e30f120a37e417ecd5c60d234e0253a2e18123508dd5c0313bce346dc7752e96cdc1b067bd07a2a39818b42 +$(DL_FILE)_BLAKE2 = 0f6a85a1c66577dd2a28682a6f8399e42fdbe9fc1498b2e89c6bb7c47109e8d3ab934abe5dd998b2c8dfacfb174ad9daeb79b3d4c13df22fa035ea792b2eaf5e
install : $(TARGET)
diff --git a/lfs/libarchive b/lfs/libarchive index 668f2a87e..3f4eccff0 100644 --- a/lfs/libarchive +++ b/lfs/libarchive @@ -24,7 +24,7 @@
include Config
-VER = 3.7.4 +VER = 3.7.7
THISAPP = libarchive-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 128f72235da61e112201046c0cfe62a8c580cf73b426c4cfe270ae913356f6ad430ba33a663dcd617b082c7baf45ada8d1c9928c45fea16fd57e8020693a60bc +$(DL_FILE)_BLAKE2 = e118c693f7a78e86ab868fc6c2c77beba539cf5c7d5999e270cdceb225e9f85c68c938ec6ce3a33f75b2a44a6f7debe2c280d2573c1bcf05806300e8dce1a4f0
install : $(TARGET)
diff --git a/lfs/libcap b/lfs/libcap index 51e32f9c6..c4a50b2c7 100644 --- a/lfs/libcap +++ b/lfs/libcap @@ -24,7 +24,7 @@
include Config
-VER = 2.70 +VER = 2.72
THISAPP = libcap-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 77b72acee53032117ea481e3380d1b497f9264b6193b9523542508c7c3e46070248ca4ed910d35809ce6e52caa60cbb31edb125c47221627eeda35c61bd0914b +$(DL_FILE)_BLAKE2 = 2c854fd9a714ab1daae3831829b4b7a890a0894953ba88ae1e190274e7fc635275ce4bf2c668b390ba8196248cb1f953fafb3a9af3907e688c1ab40774f7c6e0
install : $(TARGET)
diff --git a/lfs/libedit b/lfs/libedit index c0d50aad6..eeaf1ddca 100644 --- a/lfs/libedit +++ b/lfs/libedit @@ -24,7 +24,7 @@
include Config
-VER = 20240517-3.1 +VER = 20240808-3.1
THISAPP = libedit-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 6326a428204c020864b47db938973a13afb3580f9bb4e7b4d3cb861743c75e1cee99b569cb2baad3e1c7d6dc6986af5282492b5dd9f421a8243bf1d583a87e15 +$(DL_FILE)_BLAKE2 = c10a53d155a7dfbffdaa177aa41206c4bdca54efe8debd7df8cc3ddeaacf574e3cdd69bce9d30801c533f92907e757a92011fde989ee3a39ec91a73b9f80aa41
install : $(TARGET)
diff --git a/lfs/libgpg-error b/lfs/libgpg-error index e06a34937..74604d343 100644 --- a/lfs/libgpg-error +++ b/lfs/libgpg-error @@ -24,7 +24,7 @@
include Config
-VER = 1.50 +VER = 1.51
THISAPP = libgpg-error-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 621d9a604585daa1fbd08aaa94f3b177f6265046ccf452317e126e73079c567c555cbb8ab8b63e09b76bdf4f11a1aad7effd118651fe9e9cbcf01229f20ab297 +$(DL_FILE)_BLAKE2 = 8727a993fb5e589beceafce9d06d843b28ceff80398c33a5655608bdcd3d92ee363389bc209a1dff675b9f78d56f13b78d77e55696c0736612b09275ae0da7f3
install : $(TARGET)
diff --git a/lfs/libjpeg b/lfs/libjpeg index 311ce4bc9..b835bff29 100644 --- a/lfs/libjpeg +++ b/lfs/libjpeg @@ -24,7 +24,7 @@
include Config
-VER = 3.0.3 +VER = 3.0.4
THISAPP = libjpeg-turbo-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 9d141dadd0dce970bf857b51352c57a8e15180438abd7d6d66f9dfd24e23889add8c6c89120b84026e40ab61611516b0567984bd1db37e9c45b41917cf32e9a6 +$(DL_FILE)_BLAKE2 = cf951582ce7cdf0dce39075bb1cc58f6a61fa0bdaca4874a4f06a03d2cd11775bc626c8d391d4fc76574d302a781ba47e5c90e2aa2d6a21a8b8d06712437e241
install : $(TARGET)
diff --git a/lfs/libnl-3 b/lfs/libnl-3 index e91cf7bda..ecedaf470 100644 --- a/lfs/libnl-3 +++ b/lfs/libnl-3 @@ -24,7 +24,7 @@
include Config
-VER = 3.10.0 +VER = 3.11.0
THISAPP = libnl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 13383c4ef49be3bcf89122b24d1d5dc9834353aa7128f04f50993203add14aa7f97a4500164982ddcb82f481f7324a26efc2375036d5a23bfa62b15c4fe07473 +$(DL_FILE)_BLAKE2 = 8e2792620f56e1e9e05e4fe1f9bece70938c82c2d1a9f4e0f9de1ce0b1a7a2bf60f31a42e6056407b383875c08c575b26df87b9bd6b421d5053e96983e193c54
install : $(TARGET)
diff --git a/lfs/liboping b/lfs/liboping index 7ea7d753b..0160b3635 100644 --- a/lfs/liboping +++ b/lfs/liboping @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2024 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 1.3.4 +VER = 1.10.0
THISAPP = liboping-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = e60b59cad18f9f458c63ec08465eaac5c40b954a9c6aa6844029a1b3e2973de19e0b46846cb99edb465f315310f552b8578280f243acbe726b92034e396a07f9 +$(DL_FILE)_BLAKE2 = 2fa8719df251116c51aa93262697751df72b93368d543e5bb34668eb1bb07d7c0be143c943b32b23ee8d02e94ac2cc66f46f923ee4ab672b414ef16ce2f75acf
install : $(TARGET)
diff --git a/lfs/libpcap b/lfs/libpcap index 0dfe562bf..abdba19da 100644 --- a/lfs/libpcap +++ b/lfs/libpcap @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2024 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,10 +24,10 @@
include Config
-VER = 1.10.4 +VER = 1.10.5
THISAPP = libpcap-$(VER) -DL_FILE = $(THISAPP).tar.gz +DL_FILE = $(THISAPP).tar.xz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 05a7eafc1e1817f7844008db89d8fb10cd2525c22f7ee6c9e3d582b14229412f38ccced5e9d80a96dd459ef9eab12eccb5c1dd4978ddc9f66267469212005e4c +$(DL_FILE)_BLAKE2 = eafc01c0b865f7e7917dcf353ce8e79cea8981eb68068a20b50d9650e1aa89874d3fd6bbfa93ff61ec9edbb610d22cd5f09c0723c12e95005725c66436658d2b
install : $(TARGET)
@@ -71,7 +71,7 @@ $(subst %,%_BLAKE2,$(objects)) :
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) - @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && ./configure \ --prefix=/usr \ --enable-bluetooth=no \ diff --git a/lfs/libpipeline b/lfs/libpipeline index ece978708..ba281df70 100644 --- a/lfs/libpipeline +++ b/lfs/libpipeline @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2024 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@
include Config
-VER = 1.5.7 +VER = 1.5.8
THISAPP = libpipeline-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = b8f9ff6886f8df12e3fefbfaa0cbcb1e07d7baaa8a1dfcf4bc01c17c6632b8c6a40e55395f1e4870ca391eefb1535ebbc3931fcdee51cf5f4293741e437a2f25 +$(DL_FILE)_BLAKE2 = 1feb1a9493fd0850b4e3e446619e7e042bd97d8c0bbb3e13a91d90d6cde3ca2c17fb8a3ca256f65291dadc4d8703ad5d3a795839bf8280adc4547b3ec3d2da7d
install : $(TARGET)
diff --git a/lfs/libtirpc b/lfs/libtirpc index 493e9444f..d902b08ff 100644 --- a/lfs/libtirpc +++ b/lfs/libtirpc @@ -26,7 +26,7 @@ include Config
SUMMARY = Transport Independent RPC Library
-VER = 1.3.5 +VER = 1.3.6
THISAPP = libtirpc-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -44,7 +44,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 1ae1cc0be1c52bca8fbe2300159d9298b069b3f81adde7f50da3fb7049f9b9f628393dfe94e9276facfeea2b1ccdc9a52632fee4af432c36e457fd3ff2b0963c +$(DL_FILE)_BLAKE2 = 521e1e3d2ceefd668f1b0d52b7c0342b97952d322eeb7bf740bb1eb1fb88a14b0a2fce57f07a9fd3797d289f57f511085924bba3d8984f15c799468d30f47500
install : $(TARGET)
diff --git a/lfs/libuv b/lfs/libuv index c2d1903e1..295c30182 100644 --- a/lfs/libuv +++ b/lfs/libuv @@ -25,9 +25,9 @@
include Config
-VER = 1.48.0 +VER = 1.49.2
-THISAPP = libuv-$(VER) +THISAPP = libuv-v$(VER) DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) @@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = b58d2eab78555ae80a16e35c7d18c7145d386e7996d4d17d73d13bc543acb465215cdce3c64082ccd2596a73a43b45112fe97b795c1f4fa33cd54317c50e2abe +$(DL_FILE)_BLAKE2 = a4a3367053ab3d5b87c502ef4a25b569fc829b3580005333adf2d3f02a799e6fefec9b6c2cf354eb0e8fe003eff4d3bd5d0f91980dd44702595bfdc54a9fad66
install : $(TARGET)
diff --git a/lfs/libxml2 b/lfs/libxml2 index 9c98ef0b5..5ecea8db7 100644 --- a/lfs/libxml2 +++ b/lfs/libxml2 @@ -24,7 +24,7 @@
include Config
-VER = 2.13.3 +VER = 2.13.5
THISAPP = libxml2-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 446dce96b7386961877812b4f7bd804b236ca676ba5738c4b058b8b6ac610ae2e8eb1871884bfe7ca9130088820312b8fdf6878c8ea85d3c4d4d63f8591816f6 +$(DL_FILE)_BLAKE2 = 46c280630638e2c8009c593bbbcf90ccbfffe9ddcc99987c4d91c2223043759f2b4d6511b31b2357c5250ac3b40d96ef05c17b4d2adc61972665f8a0d899dfe8
install : $(TARGET)
hooks/post-receive -- IPFire 2.x development tree
-
Arne Fitzenreiter