[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 1e080b8a80cf44050a6bfa21b28f1c2e307577b2
This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".
The branch, next has been updated via 1e080b8a80cf44050a6bfa21b28f1c2e307577b2 (commit) via c6dc627d4e40054594ed9f3f5082ffacdf6ee8d5 (commit) via e47742c02f9c16395603c07c4b803e21add22929 (commit) via 27b249b8d452a54890aea2ba58d5c2be1132bd6a (commit) via a861e02508e031cfa6b0ccda592942f4a13f83f9 (commit) via 8b048fec5e74c2253e848f10c4071af895c83ae4 (commit) via cd9bd30ad6f4682b2c26697292716559a60d1809 (commit) via 2db2b593247967a76f5492a235b8ffd93d97c8ba (commit) via 14df78791b554b1947174ac3e34949e3839abafb (commit) via 9758b336639adfa849bfbffcec396304448283f1 (commit) via 5d747ddb70e74c9f5503618cc8aaa79b8f728cb3 (commit) from 00facd0112cd34e7844f8d47ae34e5dc7cd2a92f (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit 1e080b8a80cf44050a6bfa21b28f1c2e307577b2 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Mar 18 11:21:12 2021 +0000
core156: Ship sudo
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c6dc627d4e40054594ed9f3f5082ffacdf6ee8d5 Author: Adolf Belka adolf.belka@ipfire.org Date: Wed Mar 17 22:42:22 2021 +0100
sudo: Update to 1.9.6p1
- Update from 1.9.5p2 to 1.9.6p1 - Update not required for rootfile - Changelog Major changes between version 1.9.6p1 and 1.9.6: Fixed a regression introduced in sudo 1.9.6 that resulted in an error message instead of a usage message when sudo is run with no arguments. Major changes between version 1.9.6 and 1.9.5p2: Fixed a sudo_sendlog compilation problem with the AIX xlC compiler. Fixed a regression introduced in sudo 1.9.4 where the --disable-root-mailer configure option had no effect. Added a --disable-leaks configure option that avoids some memory leaks on exit that would otherwise occur. This is intended to be used with development tools that measure memory leaks. It is not safe to use in production at this time. Plugged some memory leaks identified by oss-fuzz and ASAN. Fixed the handling of sudoOptions for an LDAP sudoRole that contains multiple sudoCommands. Previously, some of the options would only be applied to the first sudoCommand. Fixed a potential out of bounds read in the parsing of NOTBEFORE and NOTAFTER sudoers command options (and their LDAP equivalents). The parser used for reading I/O log JSON files is now more resilient when processing invalid JSON. Fixed typos that prevented make uninstall from working. GitHub issue #87. Fixed a regression introduced in sudo 1.9.4 where the last line in a sudoers file might not have a terminating NUL character added if no newline was present. Integrated oss-fuzz and LLVM's libFuzzer with sudo. The new --enable-fuzzer configure option can be combined with the --enable-sanitizer option to build sudo with fuzzing support. Multiple fuzz targets are available for fuzzing different parts of sudo. Fuzzers are built and tested via make fuzz or as part of make check (even when sudo is not built with fuzzing support). Fuzzing support currently requires the LLVM clang compiler (not gcc). Fixed the --enable-static-sudoers configure option. GitHub issue #92. Fixed a potential out of bounds read sudo when is run by a user with more groups than the value of max_groups in sudo.conf. Added an admin_flag sudoers option to make the use of the ~/.sudo_as_admin_successful file configurable on systems where sudo is build with the --enable-admin-flag configure option. This mostly affects Ubuntu and its derivatives. GitHub issue #56. The max_groups setting in sudo.conf is now limited to 1024. This setting is obsolete and should no longer be needed. Fixed a bug in the tilde expansion of CHROOT=dir and CWD=dir sudoers command options. A path ~/foo was expanded to /home/userfoo instead of /home/user/foo. This also affects the runchroot and runcwd Defaults settings. Fixed a bug on systems without a native getdelim(3) function where very long lines could cause parsing of the sudoers file to end prematurely. Bug #960. Fixed a potential integer overflow when converting the timestamp_timeout and passwd_timeout sudoers settings to a timespec struct. The default for the group_source setting in sudo.conf is now dynamic on macOS. Recent versions of macOS do not reliably return all of a user's non-local groups via getgroups(2), even when _DARWIN_UNLIMITED_GETGROUPS is defined. Bug #946. Fixed a potential use-after-free in the PAM conversation function. Bug #967. Fixed potential redefinition of sys/stat.h macros in sudo_compat.h. Bug #968.
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit e47742c02f9c16395603c07c4b803e21add22929 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Mar 18 11:20:45 2021 +0000
core156: Ship attr
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 27b249b8d452a54890aea2ba58d5c2be1132bd6a Author: Adolf Belka adolf.belka@ipfire.org Date: Wed Mar 17 22:41:48 2021 +0100
attr: Update to 2.5.1
- Update from 2.4.48 to 2.5.1 - Update rootfile - Changelog Version 2.5.1 Fix libtool library versioning regression Andreas Gruenbacher Version 2.4.48 Update po files and German translation Andreas Gruenbacher getfattr: Add --one-file-system option Andreas Gruenbacher Move struct stat into struct walk_tree_args Andreas Gruenbacher Move list of open directories into struct walk_tree_args Andreas Gruenbacher Move walk_tree_rec arguments into a separate struct Andreas Gruenbacher xattr.conf: Indicate afs metadata xattrs should be skipped when copying David Howells Fix typos in manual pages Samanta Navarro Update my email address Andreas Gruenbacher man: add examples to setfattr.1 Achilles Gaikwad install-data: Don't remove unrelated empty directories Andreas Gruenbacher attr: Replace bzero with memset Rosen Penev getfattr: don't count terminating NULL in well_enough_printable Jeff Layton attr_list, attr_listf: Guard against unterminated buffer Andreas Gruenbacher attr_multi, attr_multif: Don't set errno to -EINVAL Andreas Gruenbacher Switch back to syscall() Andreas Gruenbacher attr_list.3: Fix the attributes.h include path Andreas Gruenbacher getfattr.1: by default only user namespace attributes are dumped Simon Ruderich Enable large-file support on systems that do not enable it by default Dmitry V. Levin man: standardize AUTHORS section Mike Frysinger man: fix bold style in SEE ALSO section Mike Frysinger test: escape left brace in a regex in test/run Troy Dawson
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit a861e02508e031cfa6b0ccda592942f4a13f83f9 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Mar 18 11:20:23 2021 +0000
core156: Ship acl
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 8b048fec5e74c2253e848f10c4071af895c83ae4 Author: Adolf Belka adolf.belka@ipfire.org Date: Wed Mar 17 22:41:31 2021 +0100
acl: Update to 2.3.1
- Update from 2.2.53 to 2.3.1 - Updated rootfile - Changelog Version 2.3.1 Fix libtool library versioning regression Andreas Gruenbacher Version 2.3.0 Update po files and German translation Andreas Gruenbacher getfacl: fix indent in --help output Valentin Vidic getfacl: Add --one-file-system optionnext Pavel Polacek Move struct stat into struct walk_tree_args Andreas Gruenbacher Move list of open directories into struct walk_tree_args Andreas Gruenbacher Move walk_tree_rec arguments into a separate struct Andreas Gruenbacher acl_from_mode, acl_copy_int: Fix segfault on allocation failure Tavian Barnes __acl_create_entry_obj: do not break strict aliasing rules Kamil Dudka Fix typo in getfacl(1) man page Anthony Sottile
Signed-off-by: Adolf Belka adolf.belka@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit cd9bd30ad6f4682b2c26697292716559a60d1809 Merge: 00facd011 2db2b5932 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Mar 18 11:17:35 2021 +0000
Merge remote-tracking branch 'origin/master' into next
-----------------------------------------------------------------------
Summary of changes: config/rootfiles/common/acl | 6 +----- config/rootfiles/common/attr | 2 +- config/rootfiles/{oldcore/104 => core/156}/filelists/acl | 0 config/rootfiles/{oldcore/106 => core/156}/filelists/attr | 0 config/rootfiles/{oldcore/112 => core/156}/filelists/sudo | 0 config/rootfiles/oldcore/155/update.sh | 10 +++++++++- lfs/acl | 6 +++--- lfs/attr | 8 ++++---- lfs/sudo | 4 ++-- 9 files changed, 20 insertions(+), 16 deletions(-) copy config/rootfiles/{oldcore/104 => core/156}/filelists/acl (100%) copy config/rootfiles/{oldcore/106 => core/156}/filelists/attr (100%) copy config/rootfiles/{oldcore/112 => core/156}/filelists/sudo (100%)
Difference in files: diff --git a/config/rootfiles/common/acl b/config/rootfiles/common/acl index 19ce21ca0..a3476d9a5 100644 --- a/config/rootfiles/common/acl +++ b/config/rootfiles/common/acl @@ -7,7 +7,7 @@ usr/bin/setfacl #usr/lib/libacl.la usr/lib/libacl.so usr/lib/libacl.so.1 -usr/lib/libacl.so.1.1.2253 +usr/lib/libacl.so.1.1.2301 #usr/lib/pkgconfig/libacl.pc #usr/share/doc/acl #usr/share/doc/acl/CHANGES @@ -17,11 +17,7 @@ usr/lib/libacl.so.1.1.2253 #usr/share/doc/acl/extensions.txt #usr/share/doc/acl/libacl.txt #usr/share/locale/de/LC_MESSAGES/acl.mo -#usr/share/locale/en@boldquot -#usr/share/locale/en@boldquot/LC_MESSAGES #usr/share/locale/en@boldquot/LC_MESSAGES/acl.mo -#usr/share/locale/en@quot -#usr/share/locale/en@quot/LC_MESSAGES #usr/share/locale/en@quot/LC_MESSAGES/acl.mo #usr/share/locale/es/LC_MESSAGES/acl.mo #usr/share/locale/fr/LC_MESSAGES/acl.mo diff --git a/config/rootfiles/common/attr b/config/rootfiles/common/attr index ba3ed7db7..536cfb9fc 100644 --- a/config/rootfiles/common/attr +++ b/config/rootfiles/common/attr @@ -11,7 +11,7 @@ usr/bin/setfattr #usr/lib/libattr.la #usr/lib/libattr.so usr/lib/libattr.so.1 -usr/lib/libattr.so.1.1.2448 +usr/lib/libattr.so.1.1.2501 #usr/lib/pkgconfig/libattr.pc #usr/share/doc/attr #usr/share/doc/attr/CHANGES diff --git a/config/rootfiles/core/156/filelists/acl b/config/rootfiles/core/156/filelists/acl new file mode 120000 index 000000000..d819f9c48 --- /dev/null +++ b/config/rootfiles/core/156/filelists/acl @@ -0,0 +1 @@ +../../../common/acl \ No newline at end of file diff --git a/config/rootfiles/core/156/filelists/attr b/config/rootfiles/core/156/filelists/attr new file mode 120000 index 000000000..c80801751 --- /dev/null +++ b/config/rootfiles/core/156/filelists/attr @@ -0,0 +1 @@ +../../../common/attr \ No newline at end of file diff --git a/config/rootfiles/core/156/filelists/sudo b/config/rootfiles/core/156/filelists/sudo new file mode 120000 index 000000000..0d3c45e04 --- /dev/null +++ b/config/rootfiles/core/156/filelists/sudo @@ -0,0 +1 @@ +../../../common/sudo \ No newline at end of file diff --git a/config/rootfiles/oldcore/155/update.sh b/config/rootfiles/oldcore/155/update.sh index 1434ce666..90647b253 100644 --- a/config/rootfiles/oldcore/155/update.sh +++ b/config/rootfiles/oldcore/155/update.sh @@ -33,6 +33,8 @@ done
# Remove files rm -vrf \ + /lib/libcrypt.so.1 \ + /lib/libcrypt-2.32.so \ /lib/libhistory.so.6 \ /lib/libhistory.so.6.3 \ /lib/libreadline.so.6 \ @@ -60,10 +62,16 @@ extract_files # update linker config ldconfig
+# Create a symlink from /run/initctl to /dev/initctl +ln -s /dev/initctl /run/initctl + # Disable all connection tracking helper sed -E -e "s/^CONNTRACK_(.*?)=on/CONNTRACK_\1=off/g" \ -i /var/ipfire/optionsfw/settings
+# Apply local configuration to sshd_config +/usr/local/bin/sshctrl + # Update Language cache /usr/local/bin/update-lang-cache
@@ -79,7 +87,7 @@ sed -E -e "s/^CONNTRACK_(.*?)=on/CONNTRACK_\1=off/g" \ /etc/init.d/suricata restart
# This update needs a reboot... -#touch /var/run/need_reboot +touch /var/run/need_reboot
# Finish /etc/init.d/fireinfo start diff --git a/lfs/acl b/lfs/acl index 5cf262ef9..cecdb8334 100644 --- a/lfs/acl +++ b/lfs/acl @@ -24,10 +24,10 @@
include Config
-VER = 2.2.53 +VER = 2.3.1
THISAPP = acl-$(VER) -DL_FILE = $(THISAPP).tar.gz +DL_FILE = $(THISAPP).tar.xz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 007aabf1dbb550bcddde52a244cd1070 +$(DL_FILE)_MD5 = 95ce715fe09acca7c12d3306d0f076b2
install : $(TARGET)
diff --git a/lfs/attr b/lfs/attr index e1edd6076..6c8db290c 100644 --- a/lfs/attr +++ b/lfs/attr @@ -24,10 +24,10 @@
include Config
-VER = 2.4.48 +VER = 2.5.1
THISAPP = attr-$(VER) -DL_FILE = $(THISAPP).tar.gz +DL_FILE = $(THISAPP).tar.xz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = bc1e5cb5c96d99b24886f1f527d3bb3d +$(DL_FILE)_MD5 = e459262266bbd82b3dd348fc8cc68a6d
install : $(TARGET)
@@ -69,7 +69,7 @@ $(subst %,%_MD5,$(objects)) :
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) - @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) $(UPDATE_AUTOMAKE) cd $(DIR_APP) && ./configure cd $(DIR_APP) && make diff --git a/lfs/sudo b/lfs/sudo index bb2279e8f..6c09fac10 100644 --- a/lfs/sudo +++ b/lfs/sudo @@ -24,7 +24,7 @@
include Config
-VER = 1.9.5p2 +VER = 1.9.6p1
THISAPP = sudo-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = e6bc4c18c06346e6b3431637a2b5f3d5 +$(DL_FILE)_MD5 = 334f8337d497f2f5df2db72448bd259d
install : $(TARGET)
hooks/post-receive -- IPFire 2.x development tree
-
Michael Tremer