This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, core172 has been created at 9ea8de7c39ee35d6fcabc3bfca4a7754344e6610 (commit) - Log ----------------------------------------------------------------- commit 9ea8de7c39ee35d6fcabc3bfca4a7754344e6610 Author: Peter Müller Date: Sat Dec 17 14:48:00 2022 +0000 Revert "lsof: Update to version 4.96.4" This reverts commit 80274cc875304fa2c1e83b9e25ca8cbcb9805e33. See: #13015 Signed-off-by: Peter Müller commit bbbb0b9e01d342a5a5b4db14a37641a427786844 Author: Peter Müller Date: Sat Dec 17 14:46:32 2022 +0000 backup(.pl): Replace OpenVPN DH parameter with ffdhe4096 This ensures restoring a backup won't silently bring back an insecure Diffie-Hellman parameter (which could also not be inspected through the web interface anymore). Reported-by: Michael Tremer Signed-off-by: Peter Müller commit ee7944fe32e49c73abcaeb2509c1f1630b645b32 Author: Peter Müller Date: Sat Dec 17 14:44:49 2022 +0000 Core Updatr 172: Properly replace DH parameter in /var/ipfire/ovpn/n2nconf/*/*.conf https://lists.ipfire.org/pipermail/development/2022-December/015001.html Reported-by: Michael Tremer Signed-off-by: Peter Müller commit 6619aed611693d4bca7c009867c838b2fbaf85ac Author: Peter Müller Date: Tue Dec 13 15:27:30 2022 +0000 Revert "openvpn-authenticator: Avoid infinite loop when losing socket connection" This reverts commit 92a9ce54bc63ebea153fc46365a1aa299856fbbe. commit 6d4110d214cd2b7bae59a560f01a3ed3501a98c8 Author: Peter Müller Date: Tue Dec 13 15:26:45 2022 +0000 Revert "openvpn-authenticator: Break read loop when daemon goes away" This reverts commit 7ec3664c320707b51407fce854e19b6254eb4836. commit 4acb701b84f2f6a950e0d03d8e2234018bacb9df Author: Peter Müller Date: Sun Dec 11 11:57:34 2022 +0000 Tor: Update to 0.4.7.12 Full changelog: Changes in version 0.4.7.12 - 2022-12-06 This version contains a major change that is a new key for moria1. Also, new metrics are exported on the MetricsPort for the congestion control subsystem. o Directory authority changes (moria1): - Rotate the relay identity key and v3 identity key for moria1. They have been online for more than a decade and refreshing keys periodically is good practice. Advertise new ports too, to avoid confusion. Closes ticket 40722. o Minor feature (Congestion control metrics): - Add additional metricsport relay metrics for congestion control. Closes ticket 40724. o Minor features (fallbackdir): - Regenerate fallback directories generated on December 06, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/12/06. o Minor bugfixes (cpuworker, relay): - Fix an off by one overload calculation on the number of CPUs being used by our thread pool. Fixes bug 40719; bugfix on 0.3.5.1-alpha. Signed-off-by: Peter Müller commit 7ec3664c320707b51407fce854e19b6254eb4836 Author: Michael Tremer Date: Tue Dec 6 10:01:44 2022 +0000 openvpn-authenticator: Break read loop when daemon goes away Fixes: #12963 Signed-off-by: Michael Tremer Tested-by: Adolf Belka commit d7618ccba8ba312916593e6ebbadee1d90575c0f Author: Michael Tremer Date: Tue Dec 6 10:01:43 2022 +0000 openvpn-authenticator: Drop some dead code Signed-off-by: Michael Tremer Tested-by: Adolf Belka commit 92a9ce54bc63ebea153fc46365a1aa299856fbbe Author: Michael Tremer Date: Tue Dec 6 10:01:42 2022 +0000 openvpn-authenticator: Avoid infinite loop when losing socket connection This patch will gracefully terminate the daemon when it loses its connection to the OpenVPN daemon. Fixes: #12963 Signed-off-by: Michael Tremer Tested-by: Adolf Belka commit 9e7d4102b84c17e7f743e0c8ce6aae92ae0d53d8 Author: Adolf Belka Date: Mon Dec 5 09:40:15 2022 +0100 Language files update: Signed-off-by: Adolf Belka commit 19a417c2a10df279b2aa0e0644838bf892410a07 Author: Adolf Belka Date: Mon Dec 5 09:40:14 2022 +0100 ovpnmain.cgi: Fix for bug in WUI menu on CU172 Testing - On CU172 Testing Build: master/eb9e29f9 when selecting the OpenVPN menu it showed the Diffie-Hellman info and pressing back took you to the same DH page. - Tested patch suggestion from Erik on vm testbed and confirmed that it worked. Suggested-by: Erik Kapfer Tested-by: Adolf Belka Signed-off-by: Adolf Belka commit e9062718d1247375422920a7d69ca8fd00b8b949 Author: Michael Tremer Date: Tue Dec 6 10:07:19 2022 +0000 Revert "Core Update 172: Remove powertop add-on, if installed" This reverts commit d3a4fcc7097a3df6e45f4d2b15960ccb61f0152f. Signed-off-by: Michael Tremer commit 7a22b050fa84ffef05dff3b145282ecfbfea9734 Author: Michael Tremer Date: Tue Dec 6 10:05:47 2022 +0000 Revert "Drop powertop" This reverts commit f7b0247e02ed5af880f03932807d039ef9008d91. https://community.ipfire.org/t/will-the-powertop-add-on-be-available-in-future-updates/9012 Signed-off-by: Michael Tremer commit eb9e29f9a742d5472180371b99c2e17b966852f1 Author: Peter Müller Date: Sat Dec 3 11:57:18 2022 +0100 Core Update 172: Extract files before removing any Note to self: Also do this in further Core Updates. Suggested-by: Michael Tremer Signed-off-by: Peter Müller commit 41dfd30c9a34faeff8d8cd549e5583ad2919ce4f Author: Peter Müller Date: Sat Dec 3 11:39:25 2022 +0100 Core Update 172: Do not delete liblzma.so.5.2.5 Again, xz currently present on an IPFire machine is linked against this. Thus, deleting this file causes the unpack routine to fail, which is why we should have never deleted it in the first place. Reported-by: Adolf Belka Signed-off-by: Peter Müller commit ebcb8d53c440d0454a14514d5284ce32770e8025 Author: Peter Müller Date: Sat Dec 3 11:38:58 2022 +0100 Core Update 172: Ship packages that miss dependencies Signed-off-by: Peter Müller commit dc9f7554c13ebdadb45f27c8f38f14b9d16468d2 Author: Peter Müller Date: Fri Dec 2 17:43:04 2022 +0100 Core Update 172: Zut alors, keep libhistory.so.8.1 around as well My fault, again. :-/ Reported-by: Adolf Belka Signed-off-by: Peter Müller commit a3e3e6c3d1c61e59f83aebc030e430014b10a796 Author: Peter Müller Date: Fri Dec 2 09:56:49 2022 +0100 Core Update 172: Do not delete libreadline.so.8.1 Doing so causes the shell in which the update script is currently executed to crash before extracting files, which results in a completely broken system. See also: https://community.ipfire.org/t/core-172-testing-fails/9002/1 Signed-off-by: Peter Müller commit 509bde09ae1277a948d18605bd51fd01e5a5bf2b Author: Peter Müller Date: Thu Dec 1 18:01:28 2022 +0100 Core Update 172: Ship ca-certificates Signed-off-by: Peter Müller commit 8d1f604b4a635f3fc4d62283cd262cd21d5a1765 Author: Peter Müller Date: Thu Dec 1 10:46:57 2022 +0100 ca-certificates: Remove TrustCor Systems root CAs On November 30, 2022, Mozilla decided to take the following actions as a response to the concerns raised about the merits of this root CA operator (excerpt taken from https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ): > 1. Set "Distrust for TLS After Date" and "Distrust for S/MIME > After Date" to November 30, 2022, for the 3 TrustCor root > certificates (TrustCor RootCert CA-1, TrustCor ECA-1, > TrustCor RootCert CA-2) that are currently included in > Mozilla's root store. > > 2. Remove those root certificates from Mozilla's root store > after the existing end-entity TLS certificates have expired. As far as the latter is concerned, the offending certificates have these expiry dates set: - TrustCor RootCert CA-1: Mon, 31 Dec 2029 17:23:16 GMT - TrustCor RootCert CA-2: Sun, 31 Dec 2034 17:26:39 GMT - TrustCor ECA-1: Mon, 31 Dec 2029 17:28:07 GMT The way IPFire 2 currently processes Mozilla's trust store does not feature a way of incorporate a "Distrust for XYZ After Date" attribute. This means that despite TrustCor Systems root CAs are no longer trusted by browsers using Mozilla's trust store, IPFire would still accept certificates directly or indirectly issued by this CA until December 2029 or December 2034. To protect IPFire users, this patch therefore suggests to patch our copy of Mozilla's trust store in order to remove TrustCor Systems' root CAs: The vast majority of HTTPS connections established from an IPFire machine take place in a non-interactive context, so there is no security benefit from a "Distrust After Date" information. Instead, if we do not want IPFire installations to trust this CA, we have no other option other than remove it unilaterally from our copy of Mozilla's trust store. See also: https://lists.ipfire.org/pipermail/development/2022-November/014681.html Signed-off-by: Peter Müller Reviewed-by: Michael Tremer commit 1e83347070b96f08ca22c0a40db9a423e371edbe Author: Jon Murphy Date: Tue Nov 29 19:10:00 2022 -0600 Language files update: Fix for bug 13007 - Update en.pl, it.pl, pl.pl, and ru.pl to replace "e-mail: ipfire(a)foo.org" with "email: ipfire(a)foo.org" Signed-off-by: Jon Murphy Reviewed-by: Peter Müller commit 986d1bca1118c1bee96758a7241ba95e14fa56a0 Author: Peter Müller Date: Tue Nov 29 17:23:29 2022 +0100 samba: Update aarch64 rootfile Signed-off-by: Peter Müller commit 78e0fef411974834040b6f668560b0ddd4aee63f Author: Peter Müller Date: Tue Nov 29 14:41:00 2022 +0100 Core Update 172: Ship and restart Suricata Signed-off-by: Peter Müller commit 2b990133770045bb8ef3a081ad27b8a0813ac24e Author: Peter Müller Date: Tue Nov 29 14:38:49 2022 +0100 libhtp: Update to 0.5.42 Signed-off-by: Peter Müller commit 959fe5103b4c72725476657d9e5f42f3abc2f534 Author: Peter Müller Date: Tue Nov 29 14:32:57 2022 +0100 suricata: Update to 6.0.9 Full changelog: Security #5710: smb: crash inside of streaming buffer Grow() (6.0.x backport) Security #5694: smtp/base64: crash / memory corruption (6.0.x backport) Security #5688: decoder/tunnel: tunnel depth not limited properly (6.0.x backport) Security #5600: ips: encapsulated packet logged as dropped, but not actually dropped (6.0.x backport) Bug #5715: smb: file not tracked on smb2 async (6.0.x backport) Bug #5714: SMB2 async responses are not matched with its request (6.0.x backport) Bug #5709: HTTP/2 decompression bug (6.0.x backport) Bug #5696: Integer overflow at dcerpc.rs:846 (6.0.x backport) Bug #5695: readthedocs: not showing pdf download option for recent versions (6.0.x backport) Bug #5683: FlowSwapFileFlags function is incorrect (6.0.x backport) Bug #5635: track by_rule|by_both incorrectly rejected for global thresholds (6.0.x backport) Bug #5633: Pass rules on 6.0.8 are generating alert events when passing tunneled traffic Bug #5608: base64: skip over all invalid characters for RFC 2045 mode (6.0.x backport) Bug #5607: base64_decode does not populate base64_data buffer once hitting non-base64 chars (6.0.x backport) Bug #5602: dcerpc: rust integer underflow (6.0.x backport) Bug #5599: eve: mac address logging for packet records reverses direction (6.0.x backport) Bug #5598: detect/tag: timeout handling issues on windows (6.0.x backport) Bug #5594: ips/tap: in layer 2 ips/tap setups, warn that mixed usage of ips and tap will be removed in 8.0 (6.0.x backport) Bug #4883: Netmap configuration -- need a configuration option for non-standard library locations (6.0.x backport) Feature #5478: Support for RFC2231 (6.0.x backport) Task #5698: libhtp 0.5.42 Task #5570: transversal: update references to suricata webpage version 2 (backport 6.0.x) Task #4852: netmap: new API version (14) supports multi-ring software mode (6.0.x backport) Signed-off-by: Peter Müller commit 73955514ac319aa4758cdfc56467f2ba47b66935 Author: Adolf Belka Date: Mon Nov 28 18:24:55 2022 +0100 shairport-sync: ship package due to new ffmpeg version Signed-off-by: Adolf Belka commit 96f000490bca314e36788e05cfcb0075310d3382 Author: Adolf Belka Date: Mon Nov 28 18:24:54 2022 +0100 mpd: ship package due to new ffmpeg version Signed-off-by: Adolf Belka commit fab147214ff98593c02a16081fd8aee9ddca804b Author: Adolf Belka Date: Mon Nov 28 18:24:53 2022 +0100 minidlna: ship package due to new ffmpeg version Signed-off-by: Adolf Belka commit 08c5fc0a6757d890deafa41bde349b36034a63e7 Author: Adolf Belka Date: Fri Nov 25 18:38:25 2022 +0100 flac: Update to version 1.4.2 - Update from version 1.3.3 to 1.4.2 - Update of rootfile - several libraries with so bump. Checked with find-dependencies - nothing flagged - Changelog This changelog is not exhaustive, review [the git commit log (https://github.com/xiph/flac/commits) for an exhaustive list of changes. ## FLAC 1.4.2 (22-Oct-2022) Once again, this release only has a few changes. A problem with FLAC playback in GStreamer (and possibly other libFLAC users) was the reason for the short time since the last release * General * Remove xmms plugin (Martijn van Beurden, TokyoBlackHole) * Remove all pure assembler, removing build dependency on nasm * Made console output more uniform across different platforms and CPUs * Improve ability to tune compile for a certain system (for example with -march=native) when combining with --disable-asm-optimizations: plain C functions can now be better optimized * Build system * Default CFLAGS are now prepended instead of dropped when user CFLAGS are set * -msse2 is no longer added by default (was only applicable to x86) * Fix cross-compiling and out-of-tree building when pandoc and doxygen are not available * Fix issue with Clang not compiling functions with intrinsics * Fix detection of bswap intrinsics (Ozkan Sezer) * Improve search for libssp on MinGW (Ozkan Sezer, Martijn van Beurden) * libFLAC * Fix issue when the libFLAC user seeks in a file instead of libFLAC itself ## FLAC 1.4.1 (22-Sep-2022) This release only has a few changes. It was triggered by a problem in the 1.4.0 tarball: man pages were empty and api documentation missing * CMake fixes (Tomasz Kłoczko) * Add checks that man pages and api docs end up in tarball * Enable installation of prebuilt man pages and api docs * Fix compiler warnings (Johannes Kauffmann, Ozkan Sezer) * Fix format specifier (manxorist) * Enable building on Universal Windows Platform (Steve Lhomme) * Fix versioning from git ## FLAC 1.4.0 (09-Sep-2022) As there have been changes to the library interfaces, the libFLAC version number is incremented to 12, the libFLAC++ version number is incremented to 10. As some changes were breaking, the version age numbers (see [libtool versioning](https://www.gnu.org/software/libtool/manual/libtool.html#Libtool-versioning)) have been reset to 0. For more details on the changes to the API, see the [porting guide](https://xiph.org/flac/api/group__porting__1__3__4__to__1__4__0.html). The XMMS plugin and 'common' plugin code (used only by the XMMS plugin) are deprecated, they will be removed in a future release. * General: * It is now possible to limit the minimum bitrate of a FLAC file generated by libFLAC and with the `flac` tool to 1 bit/sample. This function can be used to aid live streaming, for example for internet radio * Encoding files with sample rates up to 1'048'575Hz is now possible. (Con Kolivas) * Compression of preset -3 through -8 was slightly improved at the cost of a small decrease in encoding speed by increasing the precision with which autocorrelation was calculated (Martijn van Beurden) * Encoding speed of preset -0, -1 and -2 was slightly improved * Compression of presets -1 and -4 was slighly improved on certain material by changing the adaptive mid-side heuristics * Speedups specifically targeting 64-bit ARMv8 devices using NEON were integrated (Ronen Gvili, Martijn van Beurden) * Speedups for x86_64 CPUs having the FMA instruction set extention are added * Encoding and decoding of 32-bit PCM is now possible * (Ogg) FLAC format: * The FLAC format document is being rewritten by the IETF CELLAR working group. The latest draft can be found on [https://datatracker.ietf.org/doc/draft-ietf-cellar-flac/](https://datatracker.ietf.org/doc/draft-ietf-cellar-flac/) * The FLAC format document specifies no bounds for the residual. In other to match current decoder implementations, it is proposed to bound the residual to the range provided by a 32-bit int signed two's complement. This limit must be checked by FLAC encoders as to keep FLAC decoders free from the complexity of being to decode a residual exceeding a 32-bit int. * There is now a set of files available to test whether a FLAC decoder implements the format correctly. This FLAC decoder testbench can be found at [https://github.com/ietf-wg-cellar/flac-test-files](https://github.com/ietf-wg-cellar/flac-test-files). Also, results of testing hard- and software can be found here at [https://wiki.hydrogenaud.io/index.php?title=FLAC_decoder_testbench](https://wiki.hydrogenaud.io/index.php?title=FLAC_decoder_testbench). * flac: * The option --limit-min-bitrate was added to aid streaming, see [github #264](https://github.com/xiph/flac/pull/264) * The option --keep-foreign-metadata-if-present is added. This option works the same as --keep-foreign-metadata, but does return a warning instead of an error if no foreign metadata was found to store or restore * The warning returned by the foreign metadata handling is now clearer in case a user tries to restore foreign metadata of the wrong type, for example decoding a FLAC file containing AIFF foreign metadata to a WAV file * A problem when using the analyse function causing the first frame to have a wrong size and offset was fixed * Fix bug where channel mask of a file is unintentionally reused when several files are processed with one command * The order of compression-related commands is no longer important, i.e. -8ep gives the same result as -ep8. Previously, a compression level (like -8) would override a more specific setting (like -e or -p). This is no longer the case * flac now checks the block-align property of WAV files to ensure non-standard WAV files (for which flac has no handling) are not mangled * metaflac: * (none) * build system: * MSVC and Makefile.lite build system files have been removed. Building with MSVC (Visual Studio) can be done by using CMake * Various CMake improvements, especially for creating MSVC build files (Martijn van Beurden, martinRenou, CookiePLMonster, David Callu, Tyler Dunn, Cameron Cawley) * Various fixes for MinGW (Martijn van Beurden, Cameron Cawley) * Removed obsolete autotools macro's to silence warnings * Fixes for FreeBSD PowerPC (pkubaj) * Fixed some compiler warnings (Martijn van Beurden, Tyler Dunn) * Fix building with uclibc (Fabrice Fontaine) * testing/validation: * Addition of new encoder fuzzer, adding fuzzing for 8, 24 and 32-bit inputs * Addition of new decoder fuzzer, adding coverage of seeking code * Addition of metadata fuzzer, adding coverage of metadata APIs * Various improvements to fuzzers to improve code coverage, fuzzing speed and stability * Many changes to test suite to improve cross-platform compatibility (Rosen Penev) * Windows CI now also builds the whole test suite * Clang-format file added (Rosen Penev) * Add warning on using v141_xp platform toolset with /MT (Martijn van Beurden, Paul Sanders) * libraries: * Various seeking fixes (Martijn van Beurden, Robert Kausch) * Various bugs fixed found by fuzzing * On decoding, it is now checked whether residuals can be contained by a 32-bit int, preventing integer overflow * Add check that samples supplied to libFLAC actually fall within the bps set * Add checks when parsing metadata blocks to not allocate excessive amounts of memory and not overread * Undocumented Windows-only utf8 functions are no longer exported to the DLL interface * Removed all assembler and intrinsics code from the decoder to improve fuzzing, as they provided only a small speed benefit * The bitwriter buffer is limited in size to 2^24 bytes, so it cannot write excessively large files. This is a backup in case another bug in this area creeps (back) in. * The metadata iterations should now never return a vorbiscomment entry with NULL as an entry, now always at least an empty string is returned * documentation: * Removed html documentation and generate man pages from markdown * Interface changes: * libFLAC: * Addition of FLAC__stream_encoder_set_limit_min_bitrate() and FLAC__stream_encoder_get_limit_min_bitrate(), see [github #264](https://github.com/xiph/flac/pull/264) * get_client_data_from_decoder is renamed FLAC__get_decoder_client_data(), see [github #124](https://github.com/xiph/flac/pull/124) * All API functions taking a filename as an argument now take UTF-8 filenames on Windows, and no longer accept filenames using the current codepage * FLAC__Frame struct has changed: warmup samples are now stored in FLAC__int64 instead of FLAC__int32 types, and verbatim samples can now be stored in either FLAC__int32 or FLAC__int64 depending on whether samples fix the former or latter * The FLAC__StreamMetadata struct now has a tag, so it can be forward declared * libFLAC++: * Addition of ::set_limit_min_bitrate() and ::get_limit_min_bitrate(), see [github #264](https://github.com/xiph/flac/pull/264) * All API functions taking a filename as an argument now take UTF-8 filenames on Windows, and no longer accept filenames using the current codepage * The ::FLAC__Frame struct has changed, see the libFLAC interface change. ## FLAC 1.3.4 (20-Feb-2022) This release mostly fixes (security related) bugs. When building with MSVC, using CMake is preferred, see the README under "Building with CMake" for more information. Building with MSVC using solution files is deprecated and these files will be removed in the future. As there have been no changes to the library interfaces, the libFLAC version number remains 11, and libFLAC++ version number remains 9. * General: * Fix 12 decoder bugs found by oss-fuzz, including CVE-2020-0499 (erikd, Martijn van Beurden) * Fix encoder bug CVE-2021-0561 (NeelkamalSemwal) * Integrate oss-fuzzers (erikd, Guido Vranken) * Seeking fixes (NeelkamalSemwal, Robert Kausch) * Various fixes and improvements (Andrei Astafev, Rosen Penev, Håkan Kvist, oreo639, erikd, Tamás Zahola, Ulrik Mikaelsson, Tyler Dunn, tmkk) * FLAC format: * (none) * Ogg FLAC format: * (none) * flac: * Various fixes and improvements (Andrei Astafev, Martijn van Beurden) * metaflac: * (none) * build system: * CMake improvements (evpobr, Vitaliy Kirsanov, erikd, Ozkan Sezer, Tyler Dunn, tg-m DeadSix27, ericLemanissier, Chocobo1). * Fixes for MinGW and MSVC (Ozkan Sezer). * Fix for clang (Ozkan Sezer) * Fix for PowerPC (Peter Seiderer, Thomas BERNARD) * Fix for FreeBSD PowerPC (pkubaj). * testing/validation: * Add Windows target to CI, improve logging (Ralph Giles) * CI improvements (Ralph Giles, Ewout ter Hoeven) * documentation: * Doxygen fixes (Tyler Dunn) * Fix typos (Tim Gates, maxz) * Interface changes: * libFLAC: * (none) * libFLAC++: * (none) Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 1985774f80b285b26e1bc6264e8e8724fc7afb91 Author: Adolf Belka Date: Mon Nov 28 14:24:15 2022 +0100 make.sh: Update check for static linked qemu files - In Arch Linux the file -L command comes up with "static-pie linked" instead of "statically linked" - This patch makes the grep look for either one of those strings. Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit dc3a5d19aca2ca1c4804ae24d7b6a5f680b7f080 Author: Peter Müller Date: Tue Nov 29 13:43:08 2022 +0100 Core Update 172: Ship sysstat Signed-off-by: Peter Müller commit 8005b23bc4fd1d6a6225b67718330a5c3471893a Author: Adolf Belka Date: Mon Nov 28 14:24:00 2022 +0100 sysstat: Update to version 12.7.1 - Update from version 12.5.4 to 12.7.1 - Update of rootfile - Changelog 2022/11/06: Version 12.7.1: Fix possible overflow in sa_common.c (GHSL-2022-074) [12.6.1]. sadf: Add support for option -t with SVG output to make it possible to display timestamps in the same locale as that of the file creator. sadf: Print timezone instead of UTC in true time mode. Timezone is also displayed in local time. sadf: PCP: Fix timestamps written to PCP archive file. sar: Add new environment variable S_REPEAT_HEADER. pidstat: Return exit code of the process that was monitored with option -e. mpstat: Add option -H to handle vCPU physical hotplug. Add local, xlocal and debug targets to iconfig script. Turn off gcc's tree-slp-vectorize option which was making sadf crash in some situations. sa_conv.c: Make size of statistics structures from older sysstat versions immutable [12.6.1]. [Bernhard M. Wiedemann]: Declare sadc dependency on libsyscom.a [12.6.1]. [Steve Kay]: Fix gcc v11.2 warnings [12.6.1]. [Steve Kay]: Various cosmetic fixes [12.6.1]. [Jan Christoph Uhde]: sar: Remove `-I int_list` from man-page and help [12.6.1]. [Frank Dana]: Consolidate systemctl commands in README file [12.6.1]. [Rong Tao]: Remove whitespace characters at the end of lines [12.6.1]. Update configure file to deal with newer autoconf version. configure.in file is renamed to configure.ac. Update DTD and XSD documents. sar and sysstat manual pages updated. NLS updated. Add new Georgian translation. Non regression tests updated. 2022/05/29: Version 12.6.0: sar: Fix maximum value for A_IRQ activity. sar/sadf: A_NET_SOFT: Add new metric softnet network backlog. sadc: A_NET_SOFT: Use CPU id from /proc/net/softnet_stat. Update DTD and XSD documents (softnet backlog). [Chris Bagwell]: sar/sadf: Convert 64-bit time value to time_t as needed. sadf: Add basic colorization to sadf's output. sadf: Add sanity checks on values read from file. sadf: PCP: Fix multiple metrics name problems. sa_common.c: Remove unneeded variable assignment. [Lukáš Zaoral]: Take into account LDFLAGS passer to configure script. Various janitorial fixes and updated. Update FAQ. Update sar manual page. Update NLS translations. Update non regression tests. 2022/02/28: Version 12.5.6: sar/sadc: Rewrite code used to collect and display interrupts statistics. Statistics are now collected from /proc/interrupts (instead of /proc/stat) and are displayed for each installed CPU. sar/sadf: Add new "--int=" option to enter a list of interrupts on the command line. sadf: Update the various output formats to deal with the new per-CPU interrupts statistics. Update DTD and XSD documents. CPU elements may be non-existent when all selected CPU are offline. Update sar and sadf manual pages. mpstat: Create its own function to read the total number of interrupts from /proc/stat file. mpstat: Remove unneeded "aligned" attribute from struct stats_irqcpu definition. sar: Fix index value used in online_cpu_bitmap array. sar/sadf: Make sure that datafiles with unknown activities can be read by sar and sadf [12.4.5]. sar/sadf: Don't reallocate buffers for activities not present in file [12.4.5]. sar: Make sure that all buffers are copied in copy_structures() function [12.4.5]. PCP: Fix flow_limit_count metric's unit (A_NET_SOFT activity). PCP: Fix instance names for getattr call (A_NET_NFS(D) activities). Use sizeof() macro instead of hard-coded values with snprintf() functions. rndr_stats.c: Use NOVAL instead of NULL as last argument for cons() function. Use strings definitions whenever possible. Add new non regression tests. Update some existing ones. Various cosmetic fixes. 2021/12/05: Version 12.5.5: iostat: Add --compact option. iostat: Always display persistent names with option -j [12.4.4]. iostat: Fix how device mapper names are taken into account when entered on the command line [12.4.4]. iostat: Update manual page. mpstat: Don't display offline CPU [12.4.4]. mpstat: Fix values displayed when an offline CPU goes back online [12.4.4]. mpstat: Fix untrusted loop bound [12.4.4]. mpstat: Update non regression tests [12.4.4]. sar: Tell the user to convert the file when needed. sadc: Reuse count results for sub-items. [Ville Skyttä]: Use `grep -E` instead of deprecated `egrep` [12.4.4]. [Ville Skyttä]: Spelling and grammar fixes [12.4.4]. Update FAQ. [Nathan Naze]: Update man pages with correct spelling of "JavaScript" [12.4.4]. Update non regression tests. Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 28c939b78f0a282bc2389e127edf9f898284940a Author: Adolf Belka Date: Mon Nov 28 14:23:49 2022 +0100 samba: Update to version 4.17.3 - Update from version 4.17.0 to 4.17.3 - Update of rootfile (x86_64) - other architectures will need to be adjusted. - Changelog Release Notes for Samba 4.17.3 This is a security release in order to address the following defects: o CVE-2022-42898: Samba's Kerberos libraries and AD DC failed to guard against integer overflows when parsing a PAC on a 32-bit system, which allowed an attacker with a forged PAC to corrupt the heap. https://www.samba.org/samba/security/CVE-2022-42898.html o Joseph Sutton * BUG 15203: CVE-2022-42898 o Nicolas Williams * BUG 15203: CVE-2022-42898 Release Notes for Samba 4.17.2 This is a security release in order to address the following defects: o CVE-2022-3437: There is a limited write heap buffer overflow in the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal (included in Samba). https://www.samba.org/samba/security/CVE-2022-3437.html o CVE-2022-3592: A malicious client can use a symlink to escape the exported directory. https://www.samba.org/samba/security/CVE-2022-3592.html o Volker Lendecke * BUG 15207: CVE-2022-3592. o Joseph Sutton * BUG 15134: CVE-2022-3437. Release Notes for Samba 4.17.1 o Jeremy Allison * BUG 14611: CVE-2021-20251 [SECURITY] Bad password count not incremented atomically. * BUG 15174: smbXsrv_connection_shutdown_send result leaked. * BUG 15182: Flush on a named stream never completes. * BUG 15195: Permission denied calling SMBC_getatr when file not exists. o Douglas Bagnall * BUG 15189: Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC. * BUG 15191: pytest: add file removal helpers for TestCaseInTempDir. o Andrew Bartlett * BUG 14611: CVE-2021-20251 [SECURITY] Bad password count not incremented atomically. * BUG 15189: Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later. over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC. o Ralph Boehme * BUG 15182: Flush on a named stream never completes. o Volker Lendecke * BUG 15151: vfs_gpfs silently garbles timestamps > year 2106. o Gary Lockyer * BUG 14611: CVE-2021-20251 [SECURITY] Bad password count not incremented atomically. o Stefan Metzmacher * BUG 15200: multi-channel socket passing may hit a race if one of the involved processes already existed. * BUG 15201: memory leak on temporary of struct imessaging_post_state and struct tevent_immediate on struct imessaging_context (in rpcd_spoolss and maybe others). o Noel Power * BUG 15205: Since popt1.19 various use after free errors using result of poptGetArg are now exposed. o Anoop C S * BUG 15192: Remove special case for O_CREAT in SMB_VFS_OPENAT from vfs_glusterfs. o Andreas Schneider * BUG 15169: GETPWSID in memory cache grows indefinetly with each NTLM auth. o Joseph Sutton * BUG 14611: CVE-2021-20251 [SECURITY] Bad password count not incremented atomically. Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit bf81d068067bd4369feb0bcc647effba50a22c0d Author: Adolf Belka Date: Mon Nov 28 14:23:38 2022 +0100 rsync: Update to version 3.2.7 - Update from version 3.2.6 to 3.2.7 - Update of rootfile not required - Changelog # NEWS for rsync 3.2.7 (20 Oct 2022) ### BUG FIXES: - Fixed the client-side validating of the remote sender's filtering behavior. - More fixes for the "unrequested file-list name" name, including a copy of "/" with `--relative` enabled and a copy with a lot of related paths with `--relative` enabled (often derived from a `--files-from` list). - When rsync gets an unpack error on an ACL, mention the filename. - Avoid over-setting sanitize_paths when a daemon is serving "/" (even if "use chroot" is false). ### ENHANCEMENTS: - Added negotiated daemon-auth support that allows a stronger checksum digest to be used to validate a user's login to the daemon. Added SHA512, SHA256, and SHA1 digests to MD5 & MD4. These new digests are at the highest priority in the new daemon-auth negotiation list. - Added support for the SHA1 digest in file checksums. While this tends to be overkill, it is available if someone really needs it. This overly-long checksum is at the lowest priority in the normal checksum negotiation list. See [`--checksum-choice`](rsync.1#opt) (`--cc`) and the `RSYNC_CHECKSUM_LIST` environment var for how to customize this. - Improved the xattr hash table to use a 64-bit key without slowing down the key's computation. This should make extra sure that a hash collision doesn't happen. - If the `--version` option is repeated (e.g. `-VV`) then the information is output in a (still readable) JSON format. Client side only. - The script `support/json-rsync-version` is available to get the JSON style version output from any rsync. The script accepts either text on stdin **or** an arg that specifies an rsync executable to run with a doubled `--version` option. If the text we get isn't already in JSON format, it is converted. Newer rsync versions will provide more complete json info than older rsync versions. Various tweaks are made to keep the flag names consistent across versions. - The [`use chroot`](rsyncd.conf.5#) daemon parameter now defaults to "unset" so that rsync can use chroot when it works and a sanitized copy when chroot is not supported (e.g., for a non-root daemon). Explicitly setting the parameter to true or false (on or off) behaves the same way as before. - The `--fuzzy` option was optimized a bit to try to cut down on the amount of computations when considering a big pool of files. The simple heuristic from Kenneth Finnegan resuled in about a 2x speedup. - If rsync is forced to use protocol 29 or before (perhaps due to talking to an rsync before 3.0.0), the modify time of a file is limited to 4-bytes. Rsync now interprets this value as an unsigned integer so that a current year past 2038 can continue to be represented. This does mean that years prior to 1970 cannot be represented in an older protocol, but this trade-off seems like the right choice given that (1) 2038 is very rapidly approaching, and (2) newer protocols support a much wider range of old and new dates. - The rsync client now treats an empty destination arg as an error, just like it does for an empty source arg. This doesn't affect a `host:` arg (which is treated the same as `host:.`) since the arg is not completely empty. The use of [`--old-args`](rsync.1#opt) (including via `RSYNC_OLD_ARGS`) allows the prior behavior of treating an empty destination arg as a ".". ### PACKAGING RELATED: - The checksum code now uses openssl's EVP methods, which gets rid of various deprecation warnings and makes it easy to support more digest methods. On newer systems, the MD4 digest is marked as legacy in the openssl code, which makes openssl refuse to support it via EVP. You can choose to ignore this and allow rsync's MD4 code to be used for older rsync connections (when talking to an rsync prior to 3.0.0) or you can choose to configure rsync to tell openssl to enable legacy algorithms (see below). - A simple openssl config file is supplied that can be installed for rsync to use. If you install packaging/openssl-rsync.cnf to a public spot (such as `/etc/ssl/openssl-rsync.cnf`) and then run configure with the option `--with-openssl-conf=/path/name.cnf`, this will cause rsync to export the configured path in the OPENSSL_CONF environment variable (when the variable is not already set). This will enable openssl's MD4 code for rsync to use. - The packager may wish to include an explicit "use chroot = true" in the top section of their supplied /etc/rsyncd.conf file if the daemon is being installed to run as the root user (though rsync should behave the same even with the value unset, a little extra paranoia doesn't hurt). - I've noticed that some packagers haven't installed support/nameconvert for users to use in their chrooted rsync configs. Even if it is not installed as an executable script (to avoid a python3 dependency) it would be good to install it with the other rsync-related support scripts. - It would be good to add support/json-rsync-version to the list of installed support scripts. Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit c2eb7f254cac0c6f079432f9e5ab1b2a72b82646 Author: Peter Müller Date: Tue Nov 29 13:41:44 2022 +0100 Core Update 172: Ship poppler Signed-off-by: Peter Müller commit 47b5dd080a01c21c3f78e366624c5f2e644dc889 Author: Adolf Belka Date: Mon Nov 28 14:23:27 2022 +0100 poppler: Update to version 22.11.0 - Update from 22.04.0 to 22.11.0 - Update of rootfile - Changelog Release 22.11.0: core: * CairoOutputDev: Update font after restore * Protect against broken files * Small code refactoring Release 22.10.0: core: * SplashOutputDev::tilingPatternFill: Properly restore CTM on failure. Issue #1292 * Protect against malformed files * Refactor code to not use strndup * Other small code refactoring utils: * pdftoppm: Avoid round-off errors when determining raster dimensions * pdftocairo: Avoid round-off errors when determining raster dimensions * pdftotext: Simplify memory handling qt: * Take into account flagNoView when getting/setting the visible status. KDE bug #456313 build system: * Fix sed invocation Release 22.09.0: core: * Splash: Do not truncate line dash patterns with more than 20 entries. Issue #1281 * Various signature related improvements * Fix FormField::getFullyQualifiedName in some scenarios * Splash: Small optimization on dash pattern handling * JBIG2Stream::readHalftoneRegionSeg: Fix potential memory leak * Fix crashes on malformed files. Including CVE-2022-38784 * Fix string formatting in error reporting glib: * Fix two potential memory leaks in poppler_document_create_dests_tree utils: * pdfsig: List signature field names when listing signature information * pdfsig: Add support for specifying signature by field name * pdfunite: Fix crashes on malformed files * pdfunite: Fix potential memory leak of docs Release 22.08.0: core: * Fix rendering text on some forms * CairoOutputDev: Support Type3 charprocs having Resources * Fix crashes on malformed files Release 22.07.0: core: * Fix crash when filling in forms in some files. Issue #1258 * Fix first lines of Annotations sometimes being cut off. Issue #1246 * Signatures: Don't crash if the signature doesn't have a common name * CairoFontEngine: increment font_face reference when retrieving from the cache * Add ToUnicode support for lessorequalslant and greaterorequalslant glib: * Add support for stamp annotation build system: * Tweaks on how gperf is run Release 22.06.0: core: * Forms: Fix crash in forms with their own DR * Refactor CairoFontEngine caching * CairoOutputDev: preserve text color when drawing type 3 glyphs * Windows: font code simplification * Minor code improvements cpp: * Add missing header utils: * pdfattach: Assume filename is utf8 encoded * pdftohtml: Fix type 3 font size calculation Release 22.05.0: core: * Annotations: Make sure we embed fonts for the FreeText annots * Forms: Make sure we embedd fonts as needed * Signatures: Make sure we embed the needed fonts * CairoOutputDev: color type 3 fonts * fix two bugs in multiline find_text() * code improvements utils: * pdftotext: added TSV mode * HtmlOutputDev: don't use png.h cpp: * Use time_t for time * Add page_transition::durationReal qt: * Pass leftFontSize down to `FormWidgetSignature::signDocumentWithAppearence` Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit d1ade1d63f14c2095f0501ac2dc28882f54f45fe Author: Adolf Belka Date: Mon Nov 28 14:23:14 2022 +0100 meson: Update to version 0.64.1 - Update from version 0.62.1 to 0.64.1 - Update of rootfile - Changelog is too long to include here. Details can be found at 0.63.0 https://mesonbuild.com/Release-notes-for-0-63-0.html 0.64.0 https://mesonbuild.com/Release-notes-for-0-64-0.html Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 9ee4dd21a95a9dc14adb574004c8a150936ab3cf Author: Peter Müller Date: Tue Nov 29 13:39:39 2022 +0100 Core Update 172: Ship lsof Signed-off-by: Peter Müller commit 80274cc875304fa2c1e83b9e25ca8cbcb9805e33 Author: Adolf Belka Date: Mon Nov 28 14:22:49 2022 +0100 lsof: Update to version 4.96.4 - Update from version 4.95.0 to 4.96.4 - Update of rootfile not required - bz2 version of source tarball is no longer provided. - Changelog 4.96.4 October 18, 2022 [FreeBSD] sys/files.h no longer needs _KERNEL defined to include it (bsdimp #256) docs: Describe fd number truncation in output (#261) 4.96.3 September 16, 2022 [FreeBSD] Fix kqueue compat for releases < 14 4.96.2 September 16, 2022 [FreeBSD] fix FreeBSD < 14 4.96.1 September 16, 2022 [FreeBSD] Unconditionally define HASKQUEUE (mjguzik) 4.96.0 September 16, 2022 [linux] fix hash functions used for finding local tcp/udp IPCs There were typos in the code calculating hash values. The typos might break the flatness of hashtables where the endpoint information about locally used tcp/udp was stored. Theoretically, this fix may improve the performance of lsof with [+|-]E option. Inspired by the issue #206 reported by Tomasz Kłoczko (@kloczek). Show copyright notice in --version output. [linux] compile with -Wall option [linux] Avoid some easy collissions for udp/udp6 sockets when hashing [linux] Changing the number of ipcbuckets to 4096 [darwin] fix build with -fno-common (Cfp redefinition) gcc-10 and llvm-11 changed the default from -fcommon to -fno-common: https://gcc.gnu.org/PR85678 As a result build fails as: duplicate symbol '_Cfp' in: ddev.o dfile.o Cfp is already explicitly defined in dstore.c. The change turns header definition into declaration. Provided by Sergei Trofimovich (@trofi) in #221. The same fix is applied to libproc backend by Jiajie Chen (@jiegec) in #226. [linux] Make build reproducible by checking SOURCE_DATE_EPOCH and considering LSOF_{HOST,LOGNAME,SYSINFO,USER} as "none" when it is set. Provided by Danilo Spinella in #217 [darwin] remove /usr/include prefix from include for Darwin 19+ The /usr/include path is missing since macOS Catalina. Fixes issue #234. Provided by Jiajie Chen in #235 [linux] obtain correct information of memory-mapped file. Provided by Teng Hu in #239 [FreeBSD] configure: suggest variable to set if FreeBSD sys not found submitted by @emaste Updated 00FAQ with lookup to open files via mountpoint Provided by Jacob Chapman in #240 [FreeBSD] modernize API usage and remove legacy FreeBSD releases Contributor DamjanJovanovic (#184) Ed Maste (#250, #251, #252), Warner Losh (#253) Signed-off-by: Adolf Belka commit a0751fde7894fb1f352caab56be8720861ce1c34 Author: Peter Müller Date: Tue Nov 29 13:37:45 2022 +0100 Core Update 172: Ship libtasn1 and libtiff My fault, again. :-/ Signed-off-by: Peter Müller commit 366cd034015c6b52f74a90e7cd293a2c05b6b3a1 Author: Peter Müller Date: Tue Nov 29 13:31:55 2022 +0100 Core Update 172: Remove gnu-netcat addon Signed-off-by: Peter Müller commit a8b3a69b9dea078d216b0065b49889624736689e Author: Adolf Belka Date: Mon Nov 28 18:24:21 2022 +0100 gnu-netcat: Removal of package - gnu-netcat was last updated in 2004 and is not used as a dependency for any IPFire addon. - IPFire has ncat which is used as a dependency for ipfire-netboot, libshout, libvirt and squid. gnu-netcat not being required for libvcirt was confirmed by Jonatan. - nmap/ncat is being actively updated. - Based on the above this patch is removing gnu-netcat from IPFire. Signed-off-by: Adolf Belka commit 47c2e4c0aab69ff7f629e03d40e8e59f845ce3d3 Author: Adolf Belka Date: Mon Nov 28 18:24:36 2022 +0100 sdl2: Update to version 2.26.0 - Update from version 2.0.22 to 2.26.0 - Update of rootfile - Changelog 2.26.0: General: * Updated OpenGL headers to the latest API from The Khronos Group Inc. * Added SDL_GetWindowSizeInPixels() to get the window size in pixels, which may differ from the window coordinate size for windows with high-DPI support * Added simulated vsync synchronization for the software renderer * Added the mouse position to SDL_MouseWheelEvent * Added SDL_ResetHints() to reset all hints to their default values * Added SDL_GetJoystickGUIDInfo() to get device information encoded in a joystick GUID * Added the hint SDL_HINT_JOYSTICK_HIDAPI_XBOX_360 to control whether the HIDAPI driver for XBox 360 controllers should be used * Added the hint SDL_HINT_JOYSTICK_HIDAPI_XBOX_360_PLAYER_LED to control whether the player LEDs should be lit to indicate which player is associated with an Xbox 360 controller * Added the hint SDL_HINT_JOYSTICK_HIDAPI_XBOX_360_WIRELESS to control whether the HIDAPI driver for XBox 360 wireless controllers should be used * Added the hint SDL_HINT_JOYSTICK_HIDAPI_XBOX_ONE to control whether the HIDAPI driver for XBox One controllers should be used * Added the hint SDL_HINT_JOYSTICK_HIDAPI_XBOX_ONE_HOME_LED to control the brightness of the XBox One guide button LED * Added support for PS3 controllers to the HIDAPI driver, enabled by default on macOS, controlled by the SDL_HINT_JOYSTICK_HIDAPI_PS3 hint * Added support for Nintendo Wii controllers to the HIDAPI driver, not enabled by default, controlled by the SDL_HINT_JOYSTICK_HIDAPI_WII hint * Added the hint SDL_HINT_JOYSTICK_HIDAPI_WII_PLAYER_LED to control whether the player LED should be lit on the Nintendo Wii controllers * Added the hint SDL_HINT_JOYSTICK_HIDAPI_VERTICAL_JOY_CONS to control whether Nintendo Switch Joy-Con controllers will be in vertical mode when using the HIDAPI driver * Added access to the individual left and right gyro sensors of the combined Joy-Cons controller * Added a microsecond timestamp to SDL_SensorEvent and SDL_ControllerSensorEvent, when the hardware provides that information * Added SDL_SensorGetDataWithTimestamp() and SDL_GameControllerGetSensorDataWithTimestamp() to retrieve the last sensor data with the associated microsecond timestamp * Added the hint SDL_HINT_HIDAPI_IGNORE_DEVICES to have the SDL HID API ignore specific devices * SDL_GetRevision() now includes more information about the SDL build, including the git commit hash if available Windows: * Added the hint SDL_HINT_MOUSE_RELATIVE_SYSTEM_SCALE to control whether the system mouse acceleration curve is used for relative mouse motion macOS: * Implemented vsync synchronization on macOS 12 Linux: * Added SDL_SetPrimarySelectionText(), SDL_GetPrimarySelectionText(), and SDL_HasPrimarySelectionText() to interact with the X11 primary selection clipboard * Added the hint SDL_HINT_VIDEO_WAYLAND_EMULATE_MOUSE_WARP to control whether mouse pointer warp emulation is enabled under Wayland Android: * Enabled IME soft keyboard input * Added version checking to make sure the SDL Java and C code are compatible 2.24.0: General: * New version numbering scheme, similar to GLib and Flatpak. * An even number in the minor version (second component) indicates a production-ready stable release such as 2.24.0, which would have been 2.0.24 under the old system. * The patchlevel (micro version, third component) indicates a bugfix-only update: for example, 2.24.1 would be a bugfix-only release to fix bugs in 2.24.0, without adding new features. * An odd number in the minor version indicates a prerelease such as 2.23.0. Stable distributions should not use these prereleases. * The patchlevel indicates successive prereleases, for example 2.23.1 and 2.23.2 would be prereleases during development of the SDL 2.24.0 stable release. * Added SDL_GetPointDisplayIndex() and SDL_GetRectDisplayIndex() to get the display associated with a point and rectangle in screen space * Added SDL_bsearch(), SDL_crc16(), and SDL_utf8strnlen() to the stdlib routines * Added SDL_CPUPauseInstruction() as a macro in SDL_atomic.h * Added SDL_size_mul_overflow() and SDL_size_add_overflow() for better size overflow protection * Added SDL_ResetHint() to reset a hint to the default value * Added SDL_ResetKeyboard() to reset SDL's internal keyboard state, generating key up events for all currently pressed keys * Added the hint SDL_HINT_MOUSE_RELATIVE_WARP_MOTION to control whether mouse warping generates motion events in relative mode. This hint defaults off. * Added the hint SDL_HINT_TRACKPAD_IS_TOUCH_ONLY to control whether trackpads are treated as touch devices or mice. By default touchpads are treated as mouse input. * The hint SDL_HINT_JOYSTICK_HIDAPI_JOY_CONS now defaults on * Added support for mini-gamepad mode for Nintendo Joy-Con controllers using the HIDAPI driver * Added the hint SDL_HINT_JOYSTICK_HIDAPI_COMBINE_JOY_CONS to control whether Joy-Con controllers are automatically merged into a unified gamepad when using the HIDAPI driver. This hint defaults on. * The hint SDL_HINT_JOYSTICK_HIDAPI_SWITCH_HOME_LED can be set to a floating point value to set the brightness of the Home LED on Nintendo Switch controllers * Added the hint SDL_HINT_JOYSTICK_HIDAPI_JOYCON_HOME_LED to set the Home LED brightness for the Nintendo Joy-Con controllers. By default the Home LED is not modified. * Added the hint SDL_HINT_JOYSTICK_HIDAPI_SWITCH_PLAYER_LED to control whether the player LED should be lit on the Nintendo Joy-Con controllers * Added support for Nintendo Online classic controllers using the HIDAPI driver * Added the hint SDL_HINT_JOYSTICK_HIDAPI_NINTENDO_CLASSIC to control whether the HIDAPI driver for Nintendo Online classic controllers should be used * Added support for the NVIDIA Shield Controller to the HIDAPI driver, supporting rumble and battery status * Added support for NVIDIA SHIELD controller to the HIDAPI driver, and a hint SDL_HINT_JOYSTICK_HIDAPI_SHIELD to control whether this is used * Added functions to get the platform dependent name for a joystick or game controller: * SDL_JoystickPathForIndex() * SDL_JoystickPath() * SDL_GameControllerPathForIndex() * SDL_GameControllerPath() * Added SDL_GameControllerGetFirmwareVersion() and SDL_JoystickGetFirmwareVersion(), currently implemented for DualSense(tm) Wireless Controllers using HIDAPI * Added SDL_JoystickAttachVirtualEx() for extended virtual controller support * Added joystick event SDL_JOYBATTERYUPDATED for when battery status changes * Added SDL_GUIDToString() and SDL_GUIDFromString() to convert between SDL GUID and string * Added SDL_HasLSX() and SDL_HasLASX() to detect LoongArch SIMD support * Added SDL_GetOriginalMemoryFunctions() * Added SDL_GetDefaultAudioInfo() to get the name and format of the default audio device, currently implemented for PipeWire, PulseAudio, WASAPI, and DirectSound * Added HIDAPI driver for the NVIDIA SHIELD controller (2017 model) to enable support for battery status and rumble * Added support for opening audio devices with 3 or 5 channels (2.1, 4.1). All channel counts from Mono to 7.1 are now supported. * Rewrote audio channel converters used by SDL_AudioCVT, based on the channel matrix coefficients used as the default for FAudio voices * SDL log messages are no longer limited to 4K and can be any length * Fixed a long-standing calling convention issue with dynapi affecting OpenWatcom or OS/2 builds Windows: * Added initial support for building for Windows and Xbox with Microsoft's Game Development Kit (GDK), see docs/README-gdk.md for details * Added a D3D12 renderer implementation and SDL_RenderGetD3D12Device() to retrieve the D3D12 device associated with it * Added the hint SDL_HINT_WINDOWS_DPI_AWARENESS to set whether the application is DPI-aware. This hint must be set before initializing the video subsystem * Added the hint SDL_HINT_WINDOWS_DPI_SCALING to control whether the SDL coordinates are in DPI-scaled points or pixels * Added the hint SDL_HINT_DIRECTINPUT_ENABLED to control whether the DirectInput driver should be used * Added support for SDL_GetAudioDeviceSpec to the DirectSound backend Linux: * Support for XVidMode has been removed, mode changes are only supported using the XRandR extension * Added the hint SDL_HINT_VIDEO_WAYLAND_MODE_EMULATION to control whether to expose a set of emulated modes in addition to the native resolution modes available on Wayland * Added the hint SDL_HINT_KMSDRM_DEVICE_INDEX to specify which KMSDRM device to use if the default is not desired * Added the hint SDL_HINT_LINUX_DIGITAL_HATS to control whether to treat hats as digital rather than checking to see if they may be analog * Added the hint SDL_HINT_LINUX_HAT_DEADZONES to control whether to use deadzones on analog hats macOS: * Bumped minimum OS deployment version to macOS 10.9 * Added SDL_GL_FLOATBUFFERS to allow Cocoa GL contexts to use EDR * Added the hint SDL_HINT_MAC_OPENGL_ASYNC_DISPATCH to control whether dispatching OpenGL context updates should block the dispatching thread until the main thread finishes processing. This hint defaults to blocking, which is the safer option on modern macOS. Signed-off-by: Adolf Belka commit 465995c33841a724169d8e8d5068cb735c0de3ed Author: Adolf Belka Date: Thu Nov 24 14:22:28 2022 +0100 es.pl: Update of Spanish Language file - Update of Spanish language files provided by Roberto Peña. - ./make.sh lang run before this commit. Suggested-by: Roberto Peña Signed-off-by: Adolf Belka Acked-by: Peter Müller commit 2e498d7403713fc8b40db4ca553f73b0e91f0b18 Author: Arne Fitzenreiter Date: Sun Nov 27 16:53:18 2022 +0000 core172: add missing armv6 rootfile link for python3 this fix build of core172 for armv6. Signed-off-by: Arne Fitzenreiter Reviewed-by: Peter Müller commit 5de05890581d85f8959b0f6ee81b667436df7e03 Author: Arne Fitzenreiter Date: Sun Nov 27 20:51:59 2022 +0000 python3-msgpack: update armv6 rootfile Signed-off-by: Arne Fitzenreiter commit d7cb4f6535e224f6875c113b4739c2f919e87985 Author: Adolf Belka Date: Sat Nov 26 14:43:03 2022 +0100 liburcu: Update to version 0.13.2 - Update from version 0.13.0 to 0.13.2 - Update of rootfile - Changelog 2022-08-18 Userspace RCU 0.13.2 * Revert "Fix: remove type constness in URCU_FORCE_CAST's C++ version" * Fix: futex.h: include headers outside extern C * Fix: add missing unused attribute to _rcu_dereference * Fix: change method used by _rcu_dereference to strip type constness * Fix: remove type constness in URCU_FORCE_CAST's C++ version * Move extern "C" down in include/urcu/urcu-bp.h * fix: ifdef linux specific cpu count compat * Set git-review branch to stable-0.13 * fix: sysconf(_SC_NPROCESSORS_CONF) can be less than max cpu id * Fix: revise obsolete command in README.md * Fix: workqueue: remove unused variable "ret" * Fix: urcu-qsbr: futex wait: handle spurious futex wakeups * Fix: urcu: futex wait: handle spurious futex wakeups * Fix: urcu-wait: futex wait: handle spurious futex wakeups * Fix: defer_rcu: futex wait: handle spurious futex wakeups * Fix: call_rcu: futex wait: handle spurious futex wakeups * Fix: workqueue: futex wait: handle spurious futex wakeups * Fix: Use %lu rather than %ld to print count 2022-01-05 Userspace RCU 0.13.1 * fix: properly detect 'cmpxchg' on x86-32 * fix: use urcu-tls compat with c++ compiler * fix: remove autoconf features default value in help message * fix: add missing pkgconfig file for memb flavour lib * Make temporary variable in _rcu_dereference non-const * Fix: x86 and s390: uatomic __hp() macro C++ support * Fix: x86 and s390: uatomic __hp() macro clang support * Fix: x86 and s390 uatomic: __hp() macro warning with gcc 11 * Fix: changelog: v0.13.0 was released in 2021 Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 8f591d729f209fc1d243a18850a9cd321212f2a4 Author: Peter Müller Date: Mon Nov 28 13:17:07 2022 +0100 Core Update 172: Ship libtiff Signed-off-by: Peter Müller commit 194dd04102958403c130791fd4d1dda0de8c12a9 Author: Adolf Belka Date: Sat Nov 26 14:42:49 2022 +0100 libtiff: Update to version 4.4.0 - Update from version 4.3.0 to 4.4.0 - Update of rootfile - Changelog is too long to include here (~1000 lines). Details can be found in ChangeLog file in the source tarball. There are at least 31 bug closures in this release. Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 05dd992b96c40e32c955223c93563f8651b237ae Author: Peter Müller Date: Mon Nov 28 13:10:37 2022 +0100 Core Update 172: Ship libtasn Signed-off-by: Peter Müller commit 4bdb98bc2574dd3a5027d7bb33586cbef483594a Author: Adolf Belka Date: Sat Nov 26 14:42:38 2022 +0100 libtasn1: Update to version 4.19.0 - Update from version 4.18.0 to 4.19.0 - Update of rootfile - Changelog * Noteworthy changes in release 4.19.0 (2022-08-23) [stable] - Clarify libtasn1.map license. Closes: #38. - Fix ETYPE_OK out of bounds read. Closes: #32. - Update gnulib files and various maintenance fixes. Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 749537f0d7638ffa6e6c3b6ee082a82d3b5250cb Author: Peter Müller Date: Mon Nov 28 13:09:28 2022 +0100 Core Update 172: Ship iproute2 Signed-off-by: Peter Müller commit 4d9cdf1e4f67fa08221b350281879ccc63f71de5 Author: Adolf Belka Date: Sat Nov 26 14:42:22 2022 +0100 iproute2: Update to version 6.0.0 - Update from 5.19.0 to 6.0.0 - Update of rootfile - Changelog can only be obtained by reviewing the git commits from https://git.kernel.org/pub/scm/network/iproute2/iproute2.git Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit a6dcf0addcec8944bf3f8ca6da4697a438deb32b Author: Peter Müller Date: Mon Nov 28 13:08:43 2022 +0100 Core Update 172: Ship iana-etc Signed-off-by: Peter Müller commit 2ae0c4b7b4c48326b1c55910c35c084bee6996ce Author: Adolf Belka Date: Sat Nov 26 14:42:11 2022 +0100 iana-etc: Update to version 20221107 - Update from version 20220414 to 20221107 - Update of rootfile not required - Update of iana protocols and services info Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 435dcefe08a8665152e58dcb09a3abd579b62437 Author: Adolf Belka Date: Sat Nov 26 14:41:59 2022 +0100 git: Update to version 2.38.1 - Update from version 2.37.1 to 2.38.1 - Update of rootfile - Changelog Git v2.38.1 Release Notes This release merges the security fix that appears in v2.30.6; see the release notes for that version for details. Git v2.38 Release Notes * "git remote show [-n] frotz" now pays attention to negative pathspec. * "git push" sometimes performs poorly when reachability bitmaps are used, even in a repository where other operations are helped by bitmaps. The push.useBitmaps configuration variable is introduced to allow disabling use of reachability bitmaps only for "git push". * "git grep -m" is a way to limit the hits shown per file. * "git merge-tree" learned a new mode where it takes two commits and computes a tree that would result in the merge commit, if the histories leading to these two commits were to be merged. * "git mv A B" in a sparsely populated working tree can be asked to move a path between directories that are "in cone" (i.e. expected to be materialized in the working tree) and "out of cone" (i.e. expected to be hidden). The handling of such cases has been improved. * Earlier, HTTP transport clients learned to tell the server side what locale they are in by sending Accept-Language HTTP header, but this was done only for some requests but not others. * Introduce a safe.barerepository configuration variable that allows users to forbid discovery of bare repositories. * Various messages that come from the pack-bitmap codepaths have been tweaked. * "git rebase -i" learns to update branches whose tip appear in the rebased range with "--update-refs" option. * "git ls-files" learns the "--format" option to tweak its output. * "git cat-file" learned an option to use the mailmap when showing commit and tag objects. * When "git merge" finds that it cannot perform a merge, it should restore the working tree to the state before the command was initiated, but in some corner cases it didn't. * Operating modes like "--batch" of "git cat-file" command learned to take NUL-terminated input, instead of one-item-per-line. * "git rm" has become more aware of the sparse-index feature. * "git rev-list --disk-usage" learned to take an optional value "human" to show the reported value in human-readable format, like "3.40MiB". * The "diagnose" feature to create a zip archive for diagnostic material has been lifted from "scalar" and made into a feature of "git bugreport". * The namespaces used by "log --decorate" from "refs/" hierarchy by default has been tightened. * "git rev-list --ancestry-path=C A..B" is a natural extension of "git rev-list A..B"; instead of choosing a subset of A..B to those that have ancestry relationship with A, it lets a subset with ancestry relationship with C. * "scalar" now enables built-in fsmonitor on enlisted repositories, when able. * The bash prompt (in contrib/) learned to optionally indicate when the index is unmerged. * "git clone" command learned the "--bundle-uri" option to coordinate with hosting sites the use of pre-prepared bundle files. * "git range-diff" learned to honor pathspec argument if given. * "git format-patch --from=" can be told to add an in-body "From:" line even for commits that are authored by the given with "--force-in-body-from" option. * The built-in fsmonitor refuses to work on a network mounted repositories; a configuration knob for users to override this has been introduced. * The "scalar" addition from Microsoft is now part of the core Git installation. * Collection of what is referenced by objects in promisor packs have been optimized to inspect these objects in the in-pack order. * Introduce a helper to see if a branch is already being worked on (hence should not be newly checked out in a working tree), which performs much better than the existing find_shared_symref() to replace many uses of the latter. * Teach "git archive" to (optionally and then by default) avoid spawning an external "gzip" process when creating ".tar.gz" (and ".tgz") archives. * Allow large objects read from a packstream to be streamed into a loose object file straight, without having to keep it in-core as a whole. * Further preparation to turn git-submodule.sh into a builtin continues. * Apply Coccinelle rule to turn raw memmove() into MOVE_ARRAY() cpp macro, which would improve maintainability and readability. * Teach "make all" to build gitweb as well. * Tweak tests so that they still work when the "git init" template did not create .git/info directory. * Add Coccinelle rules to detect the pattern of initializing and then finalizing a structure without using it in between at all, which happens after code restructuring and the compilers fail to recognize as an unused variable. * The code to convert between GPG trust level strings and internal constants we use to represent them have been cleaned up. * Support for libnettle as SHA256 implementation has been added. * The way "git multi-pack" uses parse-options API has been improved. * A Coccinelle rule (in contrib/) to encourage use of COPY_ARRAY macro has been improved. * API tweak to make it easier to run fuzz testing on commit-graph parser. * Omit fsync-related trace2 entries when their values are all zero. * The codepath to write multi-pack index has been taught to release a large chunk of memory that holds an array of objects in the packs, as soon as it is done with the array, to reduce memory consumption. * Add a level of redirection to array allocation API in xdiff part, to make it easier to share with the libgit2 project. * "git fetch" client logs the partial clone filter used in the trace2 output. * The "bundle URI" design gets documented. * The common ancestor negotiation exchange during a "git fetch" session now leaves trace log. * Test portability improvements. (merge 4d1d843be7 mt/rot13-in-c later to maint). * The "subcommand" mode is introduced to parse-options API and update the command line parser of Git commands with subcommands. * The pack bitmap file gained a bitmap-lookup table to speed up locating the necessary bitmap for a given commit. * The assembly version of SHA-1 implementation for PPC has been removed. * The server side that responds to "git fetch" and "git clone" request has been optimized by allowing it to send objects in its object store without recomputing and validating the object names. * Annotate function parameters that are not used (but cannot be removed for structural reasons), to prepare us to later compile with -Wunused warning turned on. * Share the text used to explain configuration variables used by "git " in "git help " with the text from "git help config". * "git mv A B" in a sparsely populated working tree can be asked to move a path from a directory that is "in cone" to another directory that is "out of cone". Handling of such a case has been improved. * The chainlint script for our tests has been revamped. * Rewrite of "git add -i" in C that appeared in Git 2.25 didn't correctly record a removed file to the index, which was fixed. * Certain diff options are currently ignored when combined-diff is shown; mark them as incompatible with the feature. * Adjust technical/bitmap-format to be formatted by AsciiDoc, and add some missing information to the documentation. * Fixes for tests when the source directory has unusual characters in its path, e.g. whitespaces, double-quotes, etc. * "git mktree --missing" lazily fetched objects that are missing from the local object store, which was totally unnecessary for the purpose of creating the tree object(s) from its input. * Give _() markings to fatal/warning/usage: labels that are shown in front of these messages. * References to commands-to-be-typed-literally in "git rebase" documentation mark-up have been corrected. * In a non-bare repository, the behavior of Git when the core.worktree configuration variable points at a directory that has a repository as its subdirectory, regressed in Git 2.27 days. * Recent update to vimdiff layout code has been made more robust against different end-user vim settings. * Plug various memory leaks, both in the main code and in test-tool commands. * Fixes a long-standing corner case bug around directory renames in the merge-ort strategy. * The resolve-undo information in the index was not protected against GC, which has been corrected. * A corner case bug where lazily fetching objects from a promisor remote resulted in infinite recursion has been corrected. * "git clone" from a repository with some ref whose HEAD is unborn did not set the HEAD in the resulting repository correctly, which has been corrected. * An earlier attempt to plug leaks placed a clean-up label to jump to at a bogus place, which as been corrected. * Variable quoting fix in the vimdiff driver of "git mergetool" * "git shortlog -n" relied on the underlying qsort() to be stable, which shouldn't have. Fixed. * A fix for a regression in test framework. * mkstemp() emulation on Windows has been improved. * Add missing documentation for "include" and "includeIf" features in "git config" file format, which incidentally teaches the command line completion to include them in its offerings. * Avoid "white/black-list" in documentation and code comments. * Workaround for a compiler warning against use of die() in osx-keychain (in contrib/). * Workaround for a false positive compiler warning. * "git p4" working on UTF-16 files on Windows did not implement CRLF-to-LF conversion correctly, which has been corrected. * "git p4" did not handle non-ASCII client name well, which has been corrected. * "rerere-train" script (in contrib/) used to honor commit.gpgSign while recreating the throw-away merges. * "git checkout" miscounted the paths it updated, which has been corrected. * Fix for a bug that makes write-tree to fail to write out a non-existent index as a tree, introduced in 2.37. * There was a bug in the codepath to upgrade generation information in commit-graph from v1 to v2 format, which has been corrected. * Gitweb had legacy URL shortener that is specific to the way projects hosted on kernel.org used to (but no longer) work, which has been removed. * Fix build procedure for Windows that uses CMake so that it can pick up the shell interpreter from local installation location. * Conditionally allow building Python interpreter on Windows * Fix to lstat() emulation on Windows. * Older gcc with -Wall complains about the universal zero initializer "struct s = { 0 };" idiom, which makes developers' lives inconvenient (as -Werror is enabled by DEVELOPER=YesPlease). The build procedure has been tweaked to help these compilers. * Plug memory leaks in the failure code path in the "merge-ort" merge strategy backend. * "git symbolic-ref symref non..sen..se" is now diagnosed as an error. * A follow-up fix to a fix for a regression in 2.36 around hooks. * Avoid repeatedly running getconf to ask libc version in the test suite, and instead just as it once per script. * Platform-specific code that determines if a directory is OK to use as a repository has been taught to report more details, especially on Windows. * "vimdiff3" regression fix. * "git fsck" reads mode from tree objects but canonicalizes the mode before passing it to the logic to check object sanity, which has hid broken tree objects from the checking logic. This has been corrected, but to help existing projects with broken tree objects that they cannot fix retroactively, the severity of anomalies this code detects has been demoted to "info" for now. * Fixes to sparse index compatibility work for "reset" and "checkout" commands. * An earlier optimization discarded a tree-object buffer that is still in use, which has been corrected. * Fix deadlocks between main Git process and subprocess spawned via the pipe_command() API, that can kill "git add -p" that was reimplemented in C recently. * The sequencer machinery translated messages left in the reflog by mistake, which has been corrected. * xcalloc(), imitating calloc(), takes "number of elements of the array", and "size of a single element", in this order. A call that does not follow this ordering has been corrected. * The preload-index codepath made copies of pathspec to give to multiple threads, which were left leaked. * Update the version of Ubuntu used for GitHub Actions CI from 18.04 to 22.04. * The auto-stashed local changes created by "git merge --autostash" was mixed into a conflicted state left in the working tree, which has been corrected. * Multi-pack index got corrupted when preferred pack changed from one pack to another in a certain way, which has been corrected. (merge 99e4d084ff tb/midx-with-changing-preferred-pack-fix later to maint). * The clean-up of temporary files created via mks_tempfile_dt() was racy and attempted to unlink() the leading directory when signals are involved, which has been corrected. (merge babe2e0559 rs/tempfile-cleanup-race-fix later to maint). * FreeBSD portability fix for "git maintenance" that spawns "crontab" to schedule tasks. (merge ee69e7884e bc/gc-crontab-fix later to maint). * Those who use diff-so-fancy as the diff-filter noticed a regression or two in the code that parses the diff output in the built-in version of "add -p", which has been corrected. (merge 0a101676e5 js/add-p-diff-parsing-fix later to maint). * Segfault fix-up to an earlier fix to the topic to teach "git reset" and "git checkout" work better in a sparse checkout. (merge 037f8ea6d9 vd/sparse-reset-checkout-fixes later to maint). * "git diff --no-index A B" managed its the pathnames of its two input files rather haphazardly, sometimes leaking them. The command line argument processing has been straightened out to clean it up. (merge 2b43dd0eb5 rs/diff-no-index-cleanup later to maint). * "git rev-list --verify-objects" ought to inspect the contents of objects and notice corrupted ones, but it didn't when the commit graph is in use, which has been corrected. (merge b27ccae34b jk/rev-list-verify-objects-fix later to maint). * More fixes to "add -p" (merge 64ec8efb83 js/builtin-add-p-portability-fix later to maint). * The parser in the script interface to parse-options in "git rev-parse" has been updated to diagnose a bogus input correctly. (merge f20b9c36d0 ow/rev-parse-parseopt-fix later to maint). * The code that manages list-object-filter structure, used in partial clones, leaked the instances, which has been plugged. (merge 66eede4a37 jk/plug-list-object-filter-leaks later to maint). * Fix another UI regression in the reimplemented "add -p". (merge f6f0ee247f rs/add-p-worktree-mode-prompt-fix later to maint). * "git fetch" over protocol v2 sent an incorrect ref prefix request to the server and made "git pull" with configured fetch refspec that does not cover the remote branch to merge with fail, which has been corrected. (merge 49ca2fba39 jk/proto-v2-ref-prefix-fix later to maint). * A result from opendir() was leaking in the commit-graph expiration codepath, which has been plugged. (merge 12f1ae5324 ml/commit-graph-expire-dir-leak-fix later to maint). * Just like we have coding guidelines, we now have guidelines for reviewers. (merge e01b851923 vd/doc-reviewing-guidelines later to maint). * Other code cleanup, docfix, build fix, etc. (merge 77b9e85c0f vd/fix-perf-tests later to maint). (merge 0682bc43f5 jk/test-crontab-fixes later to maint). (merge b46dd1726c cc/doc-trailer-whitespace-rules later to maint). Git 2.37.4 Release Notes This primarily is to backport various fixes accumulated on the 'master' front since 2.37.3, and also includes the same security fixes as in v2.30.6. * CVE-2022-39253: When relying on the `--local` clone optimization, Git dereferences symbolic links in the source repository before creating hardlinks (or copies) of the dereferenced link in the destination repository. This can lead to surprising behavior where arbitrary files are present in a repository's `$GIT_DIR` when cloning from a malicious repository. Git will no longer dereference symbolic links via the `--local` clone mechanism, and will instead refuse to clone repositories that have symbolic links present in the `$GIT_DIR/objects` directory. Additionally, the value of `protocol.file.allow` is changed to be "user" by default. Credit for finding CVE-2022-39253 goes to Cory Snider of Mirantis. The fix was authored by Taylor Blau, with help from Johannes Schindelin. * CVE-2022-39260: An overly-long command string given to `git shell` can result in overflow in `split_cmdline()`, leading to arbitrary heap writes and remote code execution when `git shell` is exposed and the directory `$HOME/git-shell-commands` exists. `git shell` is taught to refuse interactive commands that are longer than 4MiB in size. `split_cmdline()` is hardened to reject inputs larger than 2GiB. Credit for finding CVE-2022-39260 goes to Kevin Backhouse of GitHub. The fix was authored by Kevin Backhouse, Jeff King, and Taylor Blau. * An earlier optimization discarded a tree-object buffer that is still in use, which has been corrected. * Fix deadlocks between main Git process and subprocess spawned via the pipe_command() API, that can kill "git add -p" that was reimplemented in C recently. * xcalloc(), imitating calloc(), takes "number of elements of the array", and "size of a single element", in this order. A call that does not follow this ordering has been corrected. * The preload-index codepath made copies of pathspec to give to multiple threads, which were left leaked. * Update the version of Ubuntu used for GitHub Actions CI from 18.04 to 22.04. * The auto-stashed local changes created by "git merge --autostash" was mixed into a conflicted state left in the working tree, which has been corrected. Also contains other minor documentation updates and code clean-ups. Git 2.37.3 Release Notes This primarily is to backport various fixes accumulated on the 'master' front since 2.37.2. * The build procedure for Windows that uses CMake has been updated to pick up the shell interpreter from local installation location. * Conditionally allow building Python interpreter on Windows * Fix to lstat() emulation on Windows. * Older gcc with -Wall complains about the universal zero initializer "struct s = { 0 };" idiom, which makes developers' lives inconvenient (as -Werror is enabled by DEVELOPER=YesPlease). The build procedure has been tweaked to help these compilers. * Plug memory leaks in the failure code path in the "merge-ort" merge strategy backend. * Avoid repeatedly running getconf to ask libc version in the test suite, and instead just as it once per script. * Platform-specific code that determines if a directory is OK to use as a repository has been taught to report more details, especially on Windows. * "vimdiff3" regression has been corrected. * "git fsck" reads mode from tree objects but canonicalizes the mode before passing it to the logic to check object sanity, which has hid broken tree objects from the checking logic. This has been corrected, but to help exiting projects with broken tree objects that they cannot fix retroactively, the severity of anomalies this code detects has been demoted to "info" for now. * Fixes to sparse index compatibility work for "reset" and "checkout" commands. * Documentation for "git add --renormalize" has been improved. Also contains other minor documentation updates and code clean-ups. Git 2.37.2 Release Notes This primarily is to backport various fixes accumulated on the 'master' front since 2.37.1. * "git shortlog -n" relied on the underlying qsort() to be stable, which shouldn't have. Fixed. * Variable quoting fix in the vimdiff driver of "git mergetool". * An earlier attempt to plug leaks placed a clean-up label to jump to at a bogus place, which as been corrected. * Fixes a long-standing corner case bug around directory renames in the merge-ort strategy. * Recent update to vimdiff layout code has been made more robust against different end-user vim settings. * In a non-bare repository, the behavior of Git when the core.worktree configuration variable points at a directory that has a repository as its subdirectory, regressed in Git 2.27 days. * References to commands-to-be-typed-literally in "git rebase" documentation mark-up have been corrected. * Give _() markings to fatal/warning/usage: labels that are shown in front of these messages. * "git mktree --missing" lazily fetched objects that are missing from the local object store, which was totally unnecessary for the purpose of creating the tree object(s) from its input. * Fixes for tests when the source directory has unusual characters in its path, e.g. whitespaces, double-quotes, etc. * Adjust technical/bitmap-format to be formatted by AsciiDoc, and add some missing information to the documentation. * Certain diff options are currently ignored when combined-diff is shown; mark them as incompatible with the feature. * "git clone" from a repository with some ref whose HEAD is unborn did not set the HEAD in the resulting repository correctly, which has been corrected. * mkstemp() emulation on Windows has been improved. * Add missing documentation for "include" and "includeIf" features in "git config" file format, which incidentally teaches the command line completion to include them in its offerings. * Avoid "white/black-list" in documentation and code comments. * Workaround for a compiler warning against use of die() in osx-keychain (in contrib/). * Workaround for a false positive compiler warning. * The resolve-undo information in the index was not protected against GC, which has been corrected. * A corner case bug where lazily fetching objects from a promisor remote resulted in infinite recursion has been corrected. * "git p4" working on UTF-16 files on Windows did not implement CRLF-to-LF conversion correctly, which has been corrected. * "git p4" did not handle non-ASCII client name well, which has been corrected. * "rerere-train" script (in contrib/) used to honor commit.gpgSign while recreating the throw-away merges. * "git checkout" miscounted the paths it updated, which has been corrected. * Fix for a bug that makes write-tree to fail to write out a non-existent index as a tree, introduced in 2.37. * There was a bug in the codepath to upgrade generation information in commit-graph from v1 to v2 format, which has been corrected. Also contains minor documentation updates and code clean-ups. Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 90d43e54c21bf7f0c201979f50a25a2660ed62a3 Author: Adolf Belka Date: Sat Nov 26 14:41:25 2022 +0100 fmt: Update to version 9.1.0 - Update from version 9.0.0 to 9.1.0 - Update of rootfile - Changelog 9.1.0 - 2022-08-27 * ``fmt::formatted_size`` now works at compile time `#3026 `_ For example (`godbolt `__): .. code:: c++ #include int main() { using namespace fmt::literals; constexpr size_t n = fmt::formatted_size("{}"_cf, 42); fmt::print("{}\n", n); // prints 2 } * Fixed handling of invalid UTF-8 `#3038 `_, `#3044 `_, `#3056 `_ * Improved Unicode support in ``ostream`` overloads of ``print`` `#2994 `_, `#3001 `_, `#3025 `_ * Fixed handling of the sign specifier in localized formatting on systems with 32-bit ``wchar_t`` `#3041 `_). * Added support for wide streams to ``fmt::streamed`` `#2994 `_ * Added the ``n`` specifier that disables the output of delimiters when formatting ranges `#2981 `_, `#2983 `_ For example (`godbolt `__): .. code:: c++ #include #include int main() { auto v = std::vector{1, 2, 3}; fmt::print("{:n}\n", v); // prints 1, 2, 3 } * Worked around problematic ``std::string_view`` constructors introduced in C++23 `#3030 `_, `#3050 `_ * Improve handling (exclusion) of recursive ranges `#2968 `_, `#2974 `_ * Improved error reporting in format string compilation `#3055 `_ * Improved the implementation of `Dragonbox `_, the algorithm used for the default floating-point formatting `#2984 `_ * Fixed issues with floating-point formatting on exotic platforms. * Improved the implementation of chrono formatting `#3010 `_ * Improved documentation `#2966 `_, `#3009 `_, `#3020 `_, `#3037 `_ * Improved build configuration `#2991 `_, `#2995 `_, `#3004 `_, `#3007 `_, `#3040 `_ * Fixed various warnings and compilation issues `#2969 `_, `#2971 `_, `#2975 `_, `#2982 `_, `#2985 `_, `#2988 `_, `#3000 `_, `#3006 `_, `#3014 `_, `#3015 `_, `#3021 `_, `#3023 `_, `#3024 `_, `#3029 `_, `#3043 `_, `#3052 `_, `#3053 `_, `#3054 `_ Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 670b07b39f4a951da093e6b737629a1c329f6d43 Author: Adolf Belka Date: Fri Nov 25 18:38:12 2022 +0100 mpd: Update to version 0.23.10 - Update from version 0.23.8 to 0.23.10 - Update required to allow successful build with updated ffmpeg - Update of rootfile not required - Changelog ver 0.23.10 (2022/10/14) * storage - curl: fix file time stamps * decoder - ffmpeg: fix libfmt 9 compiler warning * encoder - flac: fix failure when libFLAC is built without Ogg support * output - alsa: fix crash bug * Windows - log to stdout by default, don't require "log_file" setting ver 0.23.9 (2022/08/18) * input - cdio_paranoia: add options "mode" and "skip" * decoder - ffmpeg: support FFmpeg 5.1 * filter - replay gain: fix delayed volume display with handler=mixer * output - pipewire: set app icon * fix bogus volume levels with multiple partitions * improve iconv detection * macOS: fix macOS 10 build problem (0.23.8 regression) * Android - load mpd.conf from app data directory Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 4745cff3df93f3c2ca06d91287b8e82d5091008e Author: Adolf Belka Date: Fri Nov 25 18:38:11 2022 +0100 ffmpeg: Update to version 5.1.2 - Update from version 4.4 to 5.1.2 - Update of rootfile - avresample has been removed from ffmpeg and so ./configure option had to be removed - many libraries had an so bump so checked with find-dependencies - nothing flagged - Changelog version 5.1.2: - avcodec/dstdec: Check for overflow in build_filter() - avformat/spdifdec: Use 64bit to compute bit rate - avformat/rpl: Use 64bit for duration computation - avformat/xwma: Use av_rescale() for duration computation - avformat/sdsdec: Use av_rescale() to avoid intermediate overflow in duration calculation - avformat/sbgdec: Check ts_int in genrate_intervals - avformat/sbgdec: clamp end_ts - avformat/rmdec: check tag_size - avformat/nutdec: Check fields - avformat/flvdec: Use 64bit for sum_flv_tag_size - avformat/jacosubdec: Fix overflow in get_shift() - avformat/genh: Check nb_channels for IMA ADPCM - avformat/dxa: avoid bpc overflows - avformat/dhav: Use 64bit seek_back - avformat/cafdec: Check that nb_frasmes fits within 64bit - avformat/asfdec_o: Limit packet offset - avformat/apm: Use 64bit for bit_rate computation - avformat/ape: Check frames size - avformat/icodec: Check nb_pal - avformat/aiffdec: Use 64bit for block_duration use - avformat/aiffdec: Check block_duration - avformat/mxfdec: only probe max run in - avformat/mxfdec: Check run_in is within 65536 - avcodec/mjpegdec: Check for unsupported bayer case - avcodec/apedec: Fix integer overflow in filter_3800() - avcodec/tta: Check 24bit scaling for overflow - avcodec/mobiclip: Check quantizer for overflow - avcodec/exr: Check preview psize - avcodec/tiff: Fix loop detection - libavformat/hls: Free keys - avcodec/fmvc: Move frame allocation to a later stage - avfilter/vf_showinfo: remove backspaces - avcodec/speedhq: Check width - avcodec/bink: disallow odd positioned scaled blocks - avformat/cafenc: derive Opus frame size from the relevant stream parameters - avformat/dashdec: Fix crash on invalid input/ENOMEM, fix leak - lavc/videotoolbox: do not pass AVCodecContext to decoder output callback - lavc/pthread_frame: always transfer stashed hwaccel state - avcodec/arm/sbcenc: avoid callee preserved vfp registers - avformat/riffdec: don't unconditionally overwrite WAVEFORMATEXTENSIBLE layout - avfilter/vf_scale: overwrite the width and height expressions with the original values - lavc/pthread_frame: avoid leaving stale hwaccel state in worker threads - avutil/tests/.gitignore: Add channel_layout testtool version 5.1.1: - avformat/asfdec_o: limit recursion depth in asf_read_unknown() - avformat/mov: Check count sums in build_open_gop_key_points() - doc/git-howto.texi: Document commit signing - libavcodec/8bps: Check that line lengths fit within the buffer - avcodec/midivid: Perform lzss_uncompress() before ff_reget_buffer() - libavformat/iff: Check for overflow in body_end calculation - avformat/avidec: Prevent entity expansion attacks - avcodec/h263dec: Sanity check against minimal I/P frame size - avcodec/hevcdec: Check s->ref in the md5 path similar to hwaccel - avcodec/mpegaudiodec_template: use unsigned shift in handle_crc() - avformat/subviewerdec: Make read_ts() more flexible - avcodec/mjpegdec: bayer and rct are incompatible - MAINTAINERS: Add ED25519 key for signing my commits in the future - avcodec/pngdec: Fix APNG_DISPOSE_OP_BACKGROUND - avcodec/libvpx: fix assembling vp9 packets with alpha channel - fftools/ffmpeg_opt: try to propagate the requested output channel layout - avcodec/libsvtav1: properly initialize the flush EbBufferHeaderType struct - configure: enable the av1_frame_split bsf for the av1 decoder - swresample/swresample: fill the correct buffer to print the output layout string - ffprobe: restore reporting error code for failed inputs - ipfsgateway: Remove default gateway - avcodec/libspeexdec: Fix use of uninitialized value - avformat/avisynth: use ch_layout.nb_channels for channel count - fate/lavf-image: Disable file checksums for exr tests - tests/fate-run: Allow to skip file checksums for lavf_image - fate/imf: Rename IMF fate-target - avcodec/alac: don't fail if channels aren't set during init() when extradata is valid - configure: properly require libx264 if enabled version 5.1: - add ipfs/ipns protocol support - dialogue enhance audio filter - dropped obsolete XvMC hwaccel - pcm-bluray encoder - DFPWM audio encoder/decoder and raw muxer/demuxer - SITI filter - Vizrt Binary Image encoder/decoder - avsynctest source filter - feedback video filter - pixelize video filter - colormap video filter - colorchart video source filter - multiply video filter - PGS subtitle frame merge bitstream filter - blurdetect filter - tiltshelf audio filter - QOI image format support - ffprobe -o option - virtualbass audio filter - VDPAU AV1 hwaccel - PHM image format support - remap_opencl filter - added chromakey_cuda filter version 5.0: - ADPCM IMA Westwood encoder - Westwood AUD muxer - ADPCM IMA Acorn Replay decoder - Argonaut Games CVG demuxer - Argonaut Games CVG muxer - Concatf protocol - afwtdn audio filter - audio and video segment filters - Apple Graphics (SMC) encoder - hsvkey and hsvhold video filters - adecorrelate audio filter - atilt audio filter - grayworld video filter - AV1 Low overhead bitstream format muxer - swscale slice threading - MSN Siren decoder - scharr video filter - apsyclip audio filter - morpho video filter - amr parser - (a)latency filters - GEM Raster image decoder - asdr audio filter - speex decoder - limitdiff video filter - xcorrelate video filter - varblur video filter - huesaturation video filter - colorspectrum source video filter - RTP packetizer for uncompressed video (RFC 4175) - bitpacked encoder - VideoToolbox VP9 hwaccel - VideoToolbox ProRes hwaccel - support loongarch. - aspectralstats audio filter - adynamicsmooth audio filter - libplacebo filter - vflip_vulkan, hflip_vulkan and flip_vulkan filters - adynamicequalizer audio filter - yadif_videotoolbox filter - VideoToolbox ProRes encoder - anlmf audio filter - IMF demuxer (experimental) Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit fd4f8278c4a67cdf5b76bf1bb458682edbbb9301 Author: Adolf Belka Date: Fri Nov 25 18:37:53 2022 +0100 fetchmail: Update to version 6.4.34 - Update from version 6.4.32 to 6.4.34 - Update of rootfile not required. - Changelog Fetchmail Release Notes # ADVANCE WARNING OF FEATURES TO BE REMOVED OR CHANGED IN FUTURE VERSIONS (There are no plans to remove features from a 6.4.X release, but they may be removed from a 6.5.0 or newer release.) * Future fetchmail releases may require compilers and operating systems that adhere to standards issued 2011 or later. (Currently, C89 and Single Unix Specification V2 should suffice.) * Future fetchmail releases may tighten up security and lean towards it a bit more by, for instance, implementing recommendations from RFC-7817 or RFC-8314. This may, for instance, require that TLS v1.1 or newer be used. * The MX and host alias DNS lookups that fetchmail performs in multidrop mode are based on assumptions that are rarely met in practice, somewhat defective, deprecated and may be removed from a future fetchmail version. They have never supported IPv6 (including IPv6-mapped IPv4). Non-DNS based alias keywords such as "aka" will remain in fetchmail. * The monitor and interface options may be removed from a future fetchmail version as they are not reasonably portable across operating systems. * POP2 is obsolete, support will be removed from a future fetchmail version. * IMAP2 and IMAP4 (not IMAP4r1) are obsolete, support may be removed from a future fetchmail version. * RPOP is obsolete, support will be removed from a future fetchmail release. * The multidrop To/Cc guessing code along with the fragile duplicate suppressor is deprecated and may be removed from a future release. * The "envelope Received" option may be removed from a future release, because the Received header was never meant to be machine-readable, the format varies widely, and various other differences in behavior make parsing Received an unreliable undertaking. The envelope option as such will remain though, in order to support Delivered-To, X-Envelope-To, X-Original-To and similar. See also . * The --enable-fallback (fall back to MDA if MTA unavailable) will be removed from a future fetchmail release, because it makes fetchmail's behavior inconsistent and confusing. * The "protocol auto" default inside fetchmail may be removed from a future fetchmail release. Explicit configuration of the protocol is recommended. * Kerberos IV support may be removed from a future fetchmail release. * Kerberos 5 support may be removed from a future fetchmail release. * The --principal option may be removed from a future fetchmail release. * SIGHUP wakeup support may be removed from a future fetchmail release and cause fetchmail to terminate - it was broken for many years. * Support for operating systems that are not sufficiently POSIX compliant may be removed or operation on such systems may be suboptimal for future releases. This means that fetchmail may only continue to work on C99 and POSIX 2001 based systems. * The maintainer may migrate fetchmail to C++ with STL or C#, and impose further requirements (dependencies), such as Boost or other class libraries. * The softbounce option default will change to "false" in the next release. * The --bsmtp - mode of operation may be removed in a future release. * SSLv3 support may be removed from a future fetchmail release. It has been obsolete for many years and found insecure. Use TLS. * Fetchmailconf is deprecated and will be removed from a future release. * Fetchmail does not guarantee compatibility with EOL OpenSSL versions. Support for end-of-life OpenSSL versions may be removed even from patchlevel releases. * Nonstandard authentication schemes (such as RPA) may be removed from future fetchmail versions. * Nonstandard protocol extensions (such as SDPS/*ENV) may be removed from future fetchmail versions. * Future fetchmail releases (even minor ones) may change undocumented parts of the .netrc parser in incompatible ways to enhance compatibility with typical ftp(1) .netrc parsers. * Apparently OPIE is dying. I only have this support on FreeBSD, and FreeBSD 14 (slated for release in 2023) is about to remove it. # KNOWN BUGS AND WORKAROUNDS * Fetchmail does not handle messages without Message-ID header well (See sourceforge.net bug #780933) * Fetchmail currently uses 31-bit signed integers in several places where unsigned and/or wider types should have been used, for instance, for mailbox sizes, and misreports sizes of 2 GibiB and beyond. Fixing this requires C89 compatibility to be relinquished. * BSMTP is mostly untested and errors can cause corrupt output. * Fetchmail does not track pending deletes across crashes. * The command line interface is sometimes a bit stubborn, for instance, fetchmail -s doesn't work with a daemon running. * Linux systems may return duplicates of an IP address in some circumstances if no or no global IPv6 addresses are configured. (No workaround. Ubuntu Bug#582585, Novell Bug#606980.) * Kerberos 5 may be broken, particularly on Heimdal, and provide bogus error messages. This will not be fixed, because the maintainer has no Kerberos 5 server to test against. Use GSSAPI. * For IMAP connections, fetchmail will print "will idle after poll" in verbose mode even though --idle is not given, as an artifact of the 6.4.22 security fixes. Fetchmail means "could idle after poll", but this would have required another loop through the translators. * aka ... hostnames are not considered for upstream server X.509 certificate verification, aka was meant for alias detection with multidrop mailboxes. * When compiled against wolfSSL, some diagnostics and messages of fetchmail are hardcoded to read "OpenSSL"; this was found only after the call for translations had been sent out already. * FreeBSD's OPIE implementation cannot be found when using a C++ compiler. This should not affect the normal build, which uses a C compiler. fetchmail-6.4.34 (released 2022-10-15, 31701 LoC): # CRITICAL BUG FIXES: * When an SMTP receiver refuses delivery, a message would be deleted from the mail store in spite of a softbounce option that is enabled. Bug report, analysis and patch by Horváth Zsolt. Gitlab, fixes #50. # BUILD NOTE: * If you are reusing config.cache from prior builds, this may cause issues with finding Python or some libraries. In case of trouble, remove config.cache and retry. # TRANSLATIONS: language translations were updated by this fine person: * sr: Мирослав Николић (Miroslav Nikolić) [Serbian] fetchmail-6.4.33 (released 2022-08-27, 31696 LoC): # TRANSLATIONS: language translations were updated by this fine person: * fr: Frédéric Marchal [French] # CONTRIBUTED SCRIPT CHANGES: * contrib/fetchsetup improvements by Matěj Cepl * contrib/runfetchmail improvements by Matěj Cepl Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit c0fc77b0a7caafcb7aa2072155ec235aa79bc446 Author: Peter Müller Date: Mon Nov 28 13:06:14 2022 +0100 Core Update 172: Ship ethtools Signed-off-by: Peter Müller commit 504a2df6668a6c4c05849a7c05e8e90f5c11e954 Author: Adolf Belka Date: Fri Nov 25 18:37:41 2022 +0100 ethtool: Update to version 6.0 - Update from version 5.16 to 6.0 - Update of rootfile not required - Changelog Version 6.0 - October 10, 2022 * Fix: advertisement modes autoselection by lanes (-s) Version 5.19 - August 22, 2022 * Feature: get/set tx push (-g and -G) * Feature: register dump support for TI CPSW (-d) * Feature: register dump support for lan743x chipset (-d) * Fix: fix missing sff-8472 output in netlink path (-m) * Fix: fix EEPROM byte write (-E) Version 5.18 - June 14, 2022 * Feature: get/set cqe size (-g and -G) * Fix: fix typo in man page * Fix: fix help text alignment * Fix: improve attribute label (--show-fec) Version 5.17 - April 4, 2022 * Feature: transceiver module power mode (--set-module) * Feature: transceiver module extended state (--show-module) * Feature: get/set rx buffer length (-g and -G) * Feature: tx copybreak buffer size (--get-tunable and --set-tunable) * Feature: JSON output for features (-k) * Feature: support OSFP transceiver modules (-m) * Fix: add missing free() calls (--get-tunable and --set-tunable) Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer commit 55b4bb70ec7e12339d1b37d3a89c7515f4aeef52 Author: Peter Müller Date: Mon Nov 28 13:05:31 2022 +0100 Core Update 172: Ship elinks Signed-off-by: Peter Müller commit bcef2fe0f613bb4e3201f11c2403a54d99a4aed8 Author: Adolf Belka Date: Fri Nov 25 18:37:30 2022 +0100 elinks: Update to version 0.15.1 - Update from version 0.12pre6 (2012) to 0.15.1 (July 2022) - Update of rootfile - Original elinks was last updated in 2012. In Jan 2020 a fork was made of the package and has been maintained since then on an ongoing basis. This new fork is used by Arch Linux - elinks has not been an addon since CU141 but the lfs file was still in the addon format This has been adjusted to make it in line with a core program - The previous patches related to ssl have been removed as the fixes are now part of the source tarball. - Changelog ELinks 0.15.1 Released on 2022-07-31 * about:config * option --always-load-config #137 * compilation fixes on Windows #140 * added ui.background_char #142 * sample build scripts and docker files * experimental DGI support * DOS port based on links code * configurable Accept-Header #143 * minor compilation fixes ELinks 0.15.0 Released on 2021-12-24 * Serbian translation update ELinks 0.15.0rc2 Released on 2021-12-19 * Serbian translation update * HOME_ETC ELinks 0.15.0rc1 Released on 2021-12-04 * removed -Wno-pointer-sign from CFLAGS * close stdin before calling a background program (sgerwk) and options related to it #108, #109, #110, #113 * gemini protocol and text/gemini mime type * changed rendering of blockquote element * avoid tmpfile in lua (sgerwk) #115, #118 * console.log in js (mtatton) #93 * localstorage (mtatton) #98 * options document.browse.search.beginning_only document.browse.search.ignore_history ui.double_esc * ui.temperature.* to show temperature of CPU * document.plain.fixup_tables * enhanced ecmascript code. Added QuickJS * Notes on ECMAScript: requires C++ compiler, sqlite3, libxml++5 >= 5.0.1.GIT and either mozjs78-dev or QuickJS-2021-03-27 Most sites don't work, some crash. Some workarounds were implemented: a) ECMAScript is disabled by default b) ~/.elinks/allow.txt and ~/.elinks/disallow.txt with url prefixes c) Added toggle-ecmascript action. You can bind it to some key * other small fixes ELinks 0.14.3 Released on 2021-09-26 * Fix issue with negative value of cells #126 ELinks 0.14.2 Released on 2021-08-29 * crash in nttp #114 * XSS in gopher #125 ELinks 0.14.1 Released on 2021-05-30 * Disable spidermonkey by default #85 * Show error message about libgcrypt-config. #86 * off by two. #88 * Check NULL. #99 * fix error message when no previous search was performed #100 * alert when moving to the next match of a failed search #101 * include unistd.h and errno.h to define safe_read() #107 ELinks 0.14.0 Released on 2020-12-27 No changes since 0.14.0rc2. ELinks 0.14.0rc2 Released on 2020-12-13 * ~/.elinks/allow.txt - list of allowed url prefixes for js ELinks 0.14.0rc1 Released on 2020-12-06 * dblatex for pdf. PR #64 * fixes CTRL-Z. #65 * changes in mime handlers. PR #66 * fixes in data protocol. #67, #68, #71, #72, #73 * allow to wrap text in PRE. #69 * pass #fragment to external command. #75 * introduced "document.browse.search.reset". #76 * added meson as alternative build system * in #77 I'm going to attach static binaries for released versions * mozjs dependency updated to 52.* Note that, to compile with javascript support you must compile by g++ with -fpermissive option. There is a lot of warnings. Unfortunately JS often crashes. Without help from someone familiar with SpiderMonkey, we won't go far. As you might notice, I renamed repo to elinks. Thanks to all involved in this release. ELinks 0.13.5 Released on 2020-08-30 * added clipboard selection using keyboard. #59 * fixed drawing menus over emoji characters. #60 * encoding to utf-8 and decoding back in python's pre_format_html_hook This is likely the last release of 0.13.x series. ELinks 0.13.4: Released on 2020-07-31. * fixed segfault with gnutls. introduced in 0.13.3 * updated smart and dumb prefixes to https. Thanks Guido Cella. PR #54 * added the st terminal to config options. PR #55 * doc updates PR #57 * also pass the uri as %u to external handler. Thanks sgerwk. PR #58 * added the ui.clipboard_file config option ELinks 0.13.3: Released on 2020-06-29. * configure option --with-luapkg=name You can choose lua version at compilation time. For example: --with-luapkg=luajit * config option connection.ssl.https_by_default (Thanks Guido Cella) not enabled by default * docs updates (Guido Cella) * fixes related to ui.mouse_disable and xterm-like terminals (Thanks sgerwk) * show an alert when the search string is not found (sgerwk) ELinks 0.13.2: Released on 2020-05-31. * command line option -remote search(...) (thanks sgerwk) * command line option -bind-address * config option ui.mouse_disable (sgerwk) * config option ui.tostop * config option ui.sessions.fork_on_start * compatibility (compilability) with lua-5.2 and 5.3 * modified cookies code (not well tested) ELinks 0.13.1: Released on 2020-01-31. * Fixed issue with uploading files to local cgi. * Python scripts in contrib converted to python3. ELinks 0.13.0: Released on 2019-12-27. Incompatibilities: * The protocol.fsp.sort option has been removed. ELinks always sorts. * bug 1024: Verify the host name or IP address in the server certificate if connection.ssl.cert_verify is not 0. Miscellaneous: * The configure script is no longer part of tarball, you must generate it. For example running ./autogen.sh * major bug 181: Slave ELinks processes can now run an external editor. This used to work in the master process only. * major bug 722: Filter CSS according to media types. New option document.css.media. * bug 638: Propagate the existence of $DISPLAY from slave terminals to mailcap test commands. * bugs 762, 1082: Small memory leak in goto_current_link/goto_imgmap * bug 963: New option document.css.ignore_display_none. * bug 977: Fixed crash when opening in new tab a non link with onclick attribute. * bug 1008: File upload fields in HTML forms now stream the files to the server, instead of reading them to memory in advance. This lets you upload larger files. The downsides are that ELinks may use a cached response even if you have modified a file between requests, and that ELinks can send inconsistent data if you modify a file while it is being uploaded. * bug 1054: Don't abort downloads when closing the terminal from which they were started. When such a download ends, display the message in the most recently used terminal. If the user chooses ``Background and Notify'' via the download manager in some terminal, reassociate the download with that terminal. These changes do not apply to downloads to external handlers. * Really retry forever when connection.retries = 0. * enhancement: Session-specific options. Any options changed with toggle-* actions no longer affect other tabs or other terminals. * Do not crash when document.browse.minimum_refresh_time = 0 and a document has a meta refresh with a delay of 0. * Properly update link highlighting and status bar information when the repeat prefix is changed. * Handle SSL rehandshakes * Fix compatibility with Ruby >= 1.9 * enhancement 15: Domain-specific options. Use set_domain in elinks.conf to e.g. disable cookies for google.com. The option manager window does not yet support this. * enhancement 867: Use bracketed paste mode on xterm. This requires xterm patch #228 or later configured with --enable-readline-mouse. * enhancement 824: Experimental support for combining characters. See features.conf for details. * enhancement: Add a new entry Link Info under Link main menu. * enhancement: Indicate backgrounded downloads using an unused led. * enhancement: Display the number of ECMAScript interpreters that have been allocated for documents in the Resources dialog. * Fedora enhancement 346861: Add support for nss_compat_ossl library (OpenSSL replacement). * enhancement: ``elinks --dump'' uses box-drawing characters if supported by the charset. * enhancement 1070: Support 256 colors on fbterm-1.4. * enhancement 1075: Scrolling the entire contents of dialog boxes. Especially useful for multi-file BitTorrent downloads. * Report if the Lua function edit_bookmark_dialog receives the wrong number or types of arguments instead of silently failing. * enhancement: Add ``Invalidate'' button to the cache manager. * enhancement: Add ``Search contents'' button to the cache manager with which one can search through the cache items' data rather than their metadata. * enhancement: Add rudimentary support for the HTML5 media elements,