This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".

The branch, master has been updated via 4322d0c7276f305db3bcf4f09889cb828e54b514 (commit) via 0f334f0ef36c8751fccbdbdbe3c1cae7b7306f7f (commit) via 6d5aecef8c4136fff8c9832324d4614b2b07c3c3 (commit) via 90147c2c330eccc64391cd05e5f2427d3ae11160 (commit) from 7f782be5e35a91d4a5d7e936799b561531f6ebfb (commit)

Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.

- Log ----------------------------------------------------------------- commit 4322d0c7276f305db3bcf4f09889cb828e54b514 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Sep 28 09:19:07 2023 +0000

core180: Ship bind

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 0f334f0ef36c8751fccbdbdbe3c1cae7b7306f7f Author: Matthias Fischer matthias.fischer@ipfire.org Date: Fri Sep 22 21:04:56 2023 +0200

bind: Update to 9.16.44

For details see: https://downloads.isc.org/isc/bind9/9.16.44/doc/arm/html/notes.html#notes-fo...

Changes since 9.16.40:

9.16.44: "Previously, sending a specially crafted message over the control channel could cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly. This has been fixed. (CVE-2023-3341)"

9.16.43: "Processing already-queued queries received over TCP could cause an assertion failure, when the server was reconfigured at the same time or the cache was being flushed. This has been fixed."

9.16.42: "The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. (CVE-2023-2828)

A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. This has been fixed. (CVE-2023-2911)

Previously, it was possible for a delegation from cache to be returned to the client after the stale-answer-client-timeout duration. This has been fixed."

9.16.41: "When removing delegations from an opt-out range, empty-non-terminal NSEC3 records generated by those delegations were not cleaned up. This has been fixed."

Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 6d5aecef8c4136fff8c9832324d4614b2b07c3c3 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Sep 28 09:18:12 2023 +0000

core180: Ship extrahd.pl

Signed-off-by: Michael Tremer michael.tremer@ipfire.org

commit 90147c2c330eccc64391cd05e5f2427d3ae11160 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Sep 27 17:04:08 2023 +0200

extrahd: add forgotten udev_event handler to mount partitions via udev

Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org

-----------------------------------------------------------------------

Summary of changes: config/extrahd/extrahd.pl | 17 +++++++++++++++++ config/rootfiles/common/bind | 14 +++++++------- .../rootfiles/{oldcore/100 => core/180}/filelists/bind | 0 config/rootfiles/core/180/filelists/files | 1 + lfs/bind | 4 ++-- 5 files changed, 27 insertions(+), 9 deletions(-) copy config/rootfiles/{oldcore/100 => core/180}/filelists/bind (100%)

Difference in files: diff --git a/config/extrahd/extrahd.pl b/config/extrahd/extrahd.pl index cc85228d5..bcde077d0 100644 --- a/config/extrahd/extrahd.pl +++ b/config/extrahd/extrahd.pl @@ -116,7 +116,21 @@ extrahd_umount() { done < /var/ipfire/extrahd/devices }

+handle_udev_event() { + case "${ACTION}" in + add) + if [ -n "${ID_FS_UUID}" ]; then + extrahd_mount "UUID=${ID_FS_UUID}" || return $? + fi + ;; + esac + + return 0 +} + main() { + ( echo "$@"; set ) > /tmp/extrahd.$$ + local command="${1}" shift

@@ -129,6 +143,9 @@ main() { umount) extrahd_umount "${@}" || rc="${rc}" ;; + udev-event) + handle_udev_event "${@}" || rc="${rc}" + ;; scanhd) exec /usr/local/bin/scanhd "${@}" ;; diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index eeeee6e94..ca3f17011 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -271,24 +271,24 @@ usr/bin/nsupdate #usr/include/pk11/site.h #usr/include/pkcs11 #usr/include/pkcs11/pkcs11.h -usr/lib/libbind9-9.16.40.so +usr/lib/libbind9-9.16.44.so #usr/lib/libbind9.la #usr/lib/libbind9.so -usr/lib/libdns-9.16.40.so +usr/lib/libdns-9.16.44.so #usr/lib/libdns.la #usr/lib/libdns.so -usr/lib/libirs-9.16.40.so +usr/lib/libirs-9.16.44.so #usr/lib/libirs.la #usr/lib/libirs.so -usr/lib/libisc-9.16.40.so +usr/lib/libisc-9.16.44.so #usr/lib/libisc.la #usr/lib/libisc.so -usr/lib/libisccc-9.16.40.so +usr/lib/libisccc-9.16.44.so #usr/lib/libisccc.la #usr/lib/libisccc.so -usr/lib/libisccfg-9.16.40.so +usr/lib/libisccfg-9.16.44.so #usr/lib/libisccfg.la #usr/lib/libisccfg.so -usr/lib/libns-9.16.40.so +usr/lib/libns-9.16.44.so #usr/lib/libns.la #usr/lib/libns.so diff --git a/config/rootfiles/core/180/filelists/bind b/config/rootfiles/core/180/filelists/bind new file mode 120000 index 000000000..48a0ebaef --- /dev/null +++ b/config/rootfiles/core/180/filelists/bind @@ -0,0 +1 @@ +../../../common/bind \ No newline at end of file diff --git a/config/rootfiles/core/180/filelists/files b/config/rootfiles/core/180/filelists/files index 8b44a36b1..986085e5e 100644 --- a/config/rootfiles/core/180/filelists/files +++ b/config/rootfiles/core/180/filelists/files @@ -9,3 +9,4 @@ opt/pakfire/lib/functions.pl srv/web/ipfire/cgi-bin/extrahd.cgi srv/web/ipfire/cgi-bin/index.cgi var/ipfire/main/manualpages +var/ipfire/extrahd/bin/extrahd.pl diff --git a/lfs/bind b/lfs/bind index 850e3f93a..6779bb3d9 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@

include Config

-VER = 9.16.40 +VER = 9.16.44

THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -43,7 +43,7 @@ objects = $(DL_FILE)

$(DL_FILE) = $(DL_FROM)/$(DL_FILE)

-$(DL_FILE)_BLAKE2 = 1ebfec11cc6902480113b1edadcbdb2f819050d779aaa1556ef79491c580a28106d3eff186da89bdecec03025e4e672342602f54e6b0e6f9619a181a1399e070 +$(DL_FILE)_BLAKE2 = cdca8289639d900ab8162e4b0252a495fa0c579b9399326c7df42699346c2f0bca24762dad29de187f142c0896f4012c3f5f3785126d325e7d30ccb73f1530d8

install : $(TARGET)

hooks/post-receive -- IPFire 2.x development tree