From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 3.x development tree branch, master, updated. d63e0994e5b6afaeb826f3a9191f9dba136bda5b Date: Wed, 20 Sep 2023 18:02:06 +0000 Message-ID: <4RrRFC19mDz2xSw@people01.haj.ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============6623980918608922120==" List-Id: --===============6623980918608922120== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 3.x development tree". The branch, master has been updated via d63e0994e5b6afaeb826f3a9191f9dba136bda5b (commit) via 8fba252434588c44ca191703f11b90cc1cb20c66 (commit) via 48056522d59277b883e98c54736eae2c1aeca7c7 (commit) via 3112a0d0d29641ab9da010bd609ccd7acbb94765 (commit) via 46aaeef058de03a4b442d4ded6a3a2eb4b5e44df (commit) via 749a96e6008d8e79f899e6de74b98cdddead578d (commit) via f6f8dae8dc9197388ef773820d730a2fda12541c (commit) via 8ace966462d1a403fb81b02445111486d2bd8a8a (commit) via ead1dbde19a505044087aef224b0b9a3f097f988 (commit) via bc43262f04da7e7d6bf68e2dea8271a86c073a49 (commit) from 73a6884a80d67b9e1186295db26b1d4503efe54e (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit d63e0994e5b6afaeb826f3a9191f9dba136bda5b Author: Adolf Belka Date: Wed Sep 20 19:01:16 2023 +0200 tcpdump: Update to version 4.99.4-1 =20 - IPFire-3.x - Update from version 4.99.1-2 to 4.99.4-1 - Changelog 4.99.4 Source code: Fix spaces before tabs in indentation. Updated printers: LSP ping: Fix "Unused value" warnings from Coverity. CVE-2023-1801: Fix an out-of-bounds write in the SMB printer. DNS: sync resource types with IANA. ICMPv6: Update the output to show a RPL DAO field name. Geneve: Fix the Geneve UDP port test. Building and testing: Require at least autoconf 2.69. Don't check for strftime(), as it's in C90 and beyond. Update config.{guess,sub}, timestamps 2023-01-01,2023-01-21. Documentation: man: Document TCP flag names better. 4.99.3 Updated printers: PTP: Use the proper values for the control field and print un-allo= cated values for the message field as "Reserved" instead of "none". Source code: smbutil.c: Replace obsolete function call (asctime) Building and testing: cmake: Update the minimum required version to 2.8.12 (except Windo= ws). CI: Introduce and use TCPDUMP_CMAKE_TAINTED. Makefile.in: Add the releasecheck target. Makefile.in: Add "make -s install" in the releasecheck target. Cirrus CI: Run the "make releasecheck" command in the Linux task. Makefile.in: Add the whitespacecheck target. Cirrus CI: Run the "make whitespacecheck" command in the Linux tas= k. Address all shellcheck warnings in update-test.sh. Makefile.in: Get rid of a remain of gnuc.h. Documentation: Reformat the installation notes (INSTALL.txt) in Markdown. Convert CONTRIBUTING to Markdown. CONTRIBUTING.md: Document the use of "protocol: " in a commit summ= ary. Add a README file for NetBSD. Fix CMake build to set man page section numbers in tcpdump.1 4.99.2 Updated printers: BGP: Update cease notification decoding to RFC 9003. BGP: decode BGP link-bandwidth extended community properly. BGP: Fix parsing the AIGP attribute BGP: make sure the path attributes don't go past the end of the pa= cket. BGP: Shutdown message can be up to 255 bytes length according to r= fc9003 DSA: correctly determine VID. EAP: fix some length checks and output issues. 802.11: Fix the misleading comment regarding "From DS", "To DS" Fr= ame Control Flags. 802.11: Fetch the CF and TIM IEs a field at a time. 802.15.4, BGP, LISP: fix some length checks, compiler warnings, and undefined behavior warnings. PFLOG: handle LINKTYPE_PFLOG/DLT_PFLOG files from all OSes on all OSes. RRCP: support more Realtek protocols than just RRCP. MPLS: show the EXP field as TC, as per RFC 5462. ICMP: redo MPLS Extension code as general ICMP Extension code. VQP: Do not print unknown error codes twice. Juniper: Add some bounds checks. Juniper: Don't treat known DLT_ types as "Unknown". lwres: Fix a length check, update a variable type. EAP: Fix some undefined behaviors at runtime. Ethernet: Rework the length checks, add a length check. IPX: Add two length checks. Zephyr: Avoid printing non-ASCII characters. VRRP: Print the protocol name before any GET_(). DCCP: Get rid of trailing commas in lists. Juniper: Report invalid packets as invalid, not truncated. IPv6: Remove an obsolete code in an always-false #if wrapper. ISAKMP: Use GET_U_1() to replace a direct dereference. RADIUS: Use GET_U_1() to replace a direct dereference. TCP: Fix an invalid check. RESP: Fix an invalid check. RESP: Remove an unnecessary test. Arista: Refine the output format and print HwInfo. sFlow: add support for IPv6 agent, add a length check. VRRP: add support for IPv6. OSPF: Update to match the Router Properties registry. OSPF: Remove two unnecessary dereferences. OSPF: Add support bit Nt RFC3101. OSPFv3: Remove two unnecessary dereferences. ICMPv6: Fix output for Router Renumbering messages. ICMPv6: Fix the Node Information flags. ICMPv6: Remove an unused macro and extra blank lines. ICMPv6: Add a length check in the rpl_dio_print() function. ICMPv6: Use GET_IP6ADDR_STRING() in the rpl_dio_print() function. IPv6: Add some checks for the Hop-by-Hop Options header IPv6: Add a check for the Jumbo Payload Hop-by-Hop option. NFS: Fix the format for printing an unsigned int PTP: fix printing of the correction fields PTP: Use ND_LCHECK_U for checking invalid length. WHOIS: Add its own printer source file and printer function MPTCP: print length before subtype inside MPTCP options ESP: Add a workaround to a "use-of-uninitialized-value". PPP: Add tests to avoid incorrectly re-entering ppp_hdlc(). PPP: Don't process further if protocol is unknown (-e option). PPP: Change the pointer to packet data. ZEP: Add three length checks. Add some const qualifiers. Building and testing: Update config.guess and config.sub. Use AS_HELP_STRING macro instead of AC_HELP_STRING. Handle some Autoconf/make errors better. Fix an error when cross-compiling. Use "git archive" for the "make releasetar" process. Remove the release candidate rcX targets. Mend "make check" on Solaris 9 with Autoconf. Address assorted compiler warnings. Fix auto-enabling of Capsicum on FreeBSD with Autoconf. Treat "msys" as Windows for test exit statuses. Clean up some help messages in configure. Use unified diff by default. Remove awk code from mkdep. Fix configure test errors with Clang 15 CMake: Prevent stripping of the RPATH on installation. AppVeyor CI: update Npcap site, update to 1.12 SDK. Cirrus CI: Use the same configuration as for the main branch. CI: Add back running tcpdump -J/-L and capture, now with Cirrus VM= s. Remove four test files (They are now in the libpcap tests director= y). On Solaris, for 64-bit builds, use the 64-bit pcap-config. Tell CMake not to check for a C++ compiler. CMake: Add a way to request -Werror and equivalents. configure: Special-case macOS /usr/bin/pcap-config as we do in CMa= ke. configure: Use pcap-config --static-pcap-only if available. configure: Use ac_c_werror_flag to force unknown compiler flags to= fail. configure: Use AC_COMPILE_IFELSE() and AC_LANG_SOURCE() for testing flags. Run the test that fails on OpenBSD only if we're not on OpenBSD. Source code: Fix some snapend-changing routines to protect against pointer underflow. Use __func__ from C99 in some function calls. Memory allocator: Update nd_add_alloc_list() to a static function. addrtoname.c: Fix two invalid tests. Use more S_SUCCESS and S_ERR_HOST_PROGRAM in main(). Add some comments about "don't use GET_IP6ADDR_STRING()". Assign ndo->ndo_packetp in pretty_print_packet(). Add ND_LCHECKMSG_U, ND_LCHECK_U, ND_LCHECKMSG_ZU and ND_LCHECK_ZU = macros. Update tok2strbuf() to a static function. netdissect.h: Keep the link-layer dissectors names sorted. setsignal(): Set SA_RESTART on non-lethal signals (REQ_INFO, FLUSH= _PCAP) to avoid corrupting binary pcap output. Use __builtin_unreachable(). Fail if nd_push_buffer() or nd_push_snaplen() fails. Improve code style and fix many typos. Documentation: Some man page cleanups. Update the print interface for the packet count to stdout. Note that we require compilers to support at least some of C99. Update AIX and Solaris-related specifics. INSTALL.txt: Add doc/README.*, delete the deleted win32 directory. Update README.md and README.Win32.md. Update some comments with new RFC numbers. =20 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 8fba252434588c44ca191703f11b90cc1cb20c66 Author: Adolf Belka Date: Wed Sep 20 19:01:15 2023 +0200 tar: Update to version 1.35-1 =20 - IPFire-3.x - Update from version 1.34-1 to 1.35-1 - Changelog 1.35 This is mainly a bug-fixing release. Noteworthy changes in this release: * Fail when building GNU tar, if the platform supports 64-bit time_t but the build uses only 32-bit time_t. * Leave the devmajor and devminor fields empty (rather than zero) for non-special files, as this is more compatible with traditional tar. Bug fixes ** Fix interaction of --update with --wildcards. ** When extracting archives into an empty directory, do not create hard links to files outside that directory. ** Handle partial reads from regular files. ** Warn "file changed as we read it" less often. Formerly, tar warned if the file's size or ctime changed. However, this generated a false positive if tar read a file while another process hard-linked to it, changing its ctime. Now, tar warns if the file's size, mtime, user ID, group ID, or mode changes. Although neither heuristic is perfect, the new one should work better in practice. ** Fix --ignore-failed-read to ignore file-changed read errors as far as exit status is concerned. You can now suppress file-changed issues entirely with --ignore-failed-read --warning=3Dno-file-changed. ** Fix --remove-files to not remove a file that changed while we read it. ** Fix --atime-preserve=3Dreplace to not fail if there was no need to re= place, either because we did not read the file, or the atime did not change. ** Fix race when creating a parent directory while another process is also doing so. ** Fix handling of prefix keywords not followed by "." in pax headers. ** Fix handling of out-of-range sparse entries in pax headers. ** Fix handling of --transform=3D's/s/@/2'. ** Fix treatment of options ending in / in files-from list. ** Fix crash on 'tar --checkpoint-action exec=3D\"'. ** Fix low-memory crash when reading incremental dumps. ** Fix --exclude-vcs-ignores memory allocation misuse. =20 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 48056522d59277b883e98c54736eae2c1aeca7c7 Author: Adolf Belka Date: Wed Sep 20 19:01:14 2023 +0200 squashfs-tools: Update to version 4.6.1-1 =20 - IPFire-3.x - Update from version 4.5.1-1 to 4.6.1-1 - Changelog 4.6.1 Bug fix release to fix race condition and XATTRs code 1. Race condition which can cause corruption of the "fragment table" fixed. This is a regression introduced in August 2022, and it has been seen when tailend packing is used (-tailends option). 2. Fix build failure when the tools are being built without extended attribute (XATTRs) support. 3. Fix XATTR error message when an unrecognised prefix is found (Christian Hesse). 4. Fix incorrect free of pointer when an unrecognised XATTR prefix is found. 4.6 Major improvements in extended attribute handling, pseudo file handling, and miscellaneous new options and improvements 1. Extended attribute handling improved in Mksquashfs and Sqfstar 1.1.New -xattrs-exclude option to exclude extended attributes from files using a regular expression. 1.2 New -xattrs-include option to include extended attributes from files using a regular expression. 1.3 New -xattrs-add option to add extended attributes to files. 1.4 New Pseudo file xattr definition to add extended attributes to files. 1.5 New xattrs-add Action to add extended attributes to files (Mksquashfs only). 2. Extended attribute handling improved in Unsquashfs 2.1 New -xattrs-exclude option to exclude extended attributes from files using a regular expression. 2.2 New -xattrs-include option to include extended attributes from files using a regular expression. 2.3 Extended attributes are now supported in Pseudo file output. 3. Other major improvements 3.1 Unsquashfs can now output Pseudo files to standard out. 3.2 Mksquashfs can now input Pseudo files from standard in. 3.3 Squashfs filesystems can now be converted (different block size compression etc) without unpacking to an intermediate filesystem or mounting, by piping the output of Unsquashfs to Mksquashfs. 3.4 Pseudo files are now supported by Sqfstar. 3.5 "Non-anchored" excludes are now supported by Unsquashfs. 4. Mksquashfs minor improvements 4.1 A new -max-depth option has been added, which limits the depth Mksquashfs descends when creating the filesystem. 4.2 A new -mem-percent option which allows memory for caches to be specified as a percentage of physical RAM, rather than requiring an absolute value. 4.3 A new -percentage option added which rather than generating the full progress-bar instead outputs a percentage. This can be used with dialog --gauge etc. 4.4 -mkfs-time, -all-time and -root-time options now take a human date string, in addition to the seconds since the epoch of 1970 00:00 UTC. For example "now", "last week", "Wed Mar 8 05:55:01 GMT 2023" are supported. 4.5 -root-uid, -root-gid, -force-uid and -force-gid options now take a user/group name in addition to the integer uid/gid. 4.6 A new -mem-default option which displays default memory usage for caches in Mbytes. 4.7 A new -no-compression option which produces no compression, and it is a short-cut for -noI, -noD, -noF and -noX. 4.8 A new -pseudo-override option which makes pseudo file uids and gids override -all-root, -force-uid and -force-gid options. Normally these options take precedence. 5. Unsquashfs minor improvements 5.1 New -all-time option which sets all file timestamps to