webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-21 16:32:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
20,527 Commits 2 Branches 1 Tag
0bead24b3dce225aba3db047a1349965b6ea812a
Commit Graph

8866 Commits

Author SHA1 Message Date
Adolf Belka
730fa3189b less: Update to version 633 
- Update from version 608 to 633
- Update of rootfile not required
- Changelog
    Major changes between "less" versions 632 and 633
	* Fix build on systems which have ncurses/termcap.h or
	  ncursesw/termcap.h but not termcap.h.
    Major changes between "less" versions 608 and 632
	* Add LESSUTFCHARDEF environment variable (github #275).
	* Add # command (github #330).
	* Add ^S search modifier (github #196).
	* Add --wordwrap option (github #113).
	* Add --no-vbell option (github #304).
	* Add --no-search-headers option (github #44).
	* Add --modelines option (github #89).
	* Add --intr option (github #224).
	* Add --proc-backspace, --proc-tab and --proc-return options (github #335).
	* Add --show-preproc-errors option (github #258).
	* Add LESS_LINES and LESS_COLUMNS environment variables (github #84).
	* Add LESS_DATA_DELAY environment variable (github #337).
	* Allow empty "lines" field in --header option.
	* Update Unicode tables.
	* Improve ability of ^X to interrupt F command (github #49).
	* Status column (-J) shows off-screen matches.
	* Parenthesized sub-patterns in searches are colored with unique colors,
	  if supported by the regular expression library (github #196).
	* Don't allow opening a tty as file input unless -f is set (github #309).
	* Don't require newline input after +&... option (github #339).
	* Fix incorrect handling of some Private Use Unicode characters.
	* Fix ANSI color bug when overstriking with colored chars (github #276).
	* Fix compiler const warning (github #279).
	* Fix signal race in iread (github #280).
	* Fix reading procfs files on Linux (github #282).
	* Fix --ignore-case with ctrl-R (no regex) search (github #300).
	* Fix bug doing repeat search after setting & filter (github #299).
	* Fix bug doing repeat search before non-repeat search.
	* Fix crash with -R and certain line lengths (github #338).
	* Fix input of Windows dead keys (github #352).
	* Don't retain search options from a cancelled search (github #302).
	* Don't call realpath on fake filenames like "-" (github #289).
	* Implement lesstest test suite.
	* Convert function parameter definitions from K&R to C89 (github #316).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-06-15 09:31:04 +00:00
Adolf Belka
0919eca9dd grep: Update to version 3.11 
- Update from version 3.10 to 3.11
- Update of rootfile not required
- Changelog
* Noteworthy changes in release 3.11 (2023-05-13) [stable]
	** Bug fixes
	  With -P, patterns like [\d] now work again.  Fixing this has caused
	  grep to revert to the behavior of grep 3.8, in that patterns like \w
	  and \b go back to using ASCII rather than Unicode interpretations.
	  However, future versions of GNU grep and/or PCRE2 are likely to fix
	  this and change the behavior of \w and \b back to Unicode again,
	  without breaking [\d] as 3.10 did.
	  [bug introduced in grep 3.10]

	  grep no longer fails on files dated after the year 2038,
	  when running on 32-bit x86 and ARM hosts using glibc 2.34+.
	  [bug introduced in grep 3.9]

	  grep -P no longer fails to match patterns using negated classes
	  like \D or \W when linked with PCRE2 10.34 or newer.
	  [bug introduced in grep 3.8]
	** Changes in behavior
	  grep --version now prints a line describing the version of PCRE2 it uses.
	  For example, it prints this when built with the very latest from git:
	    grep -P uses PCRE2 10.43-DEV 2023-04-14
	  or this with what's currently available in Fedora 37:
	    grep -P uses PCRE2 10.40 2022-04-14

	  previous versions of grep wouldn't respect the user provided settings for
	  PCRE_CFLAGS and PCRE_LIBS when building if a libpcre2-8 pkg-config module
	  was found.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-06-15 09:30:34 +00:00
Adolf Belka
c06f8d94a4 gawk: Update to vesrion 5.2.2 
- Update from version 5.1.1 to 5.2.2
- Update of rootfile
- Changelog
Changes from 5.2.1 to 5.2.2
	1. Infrastructure upgrades: makeinfo 7.0.1 must be used to format
	   the manual.  As a result, the manual can also now be formatted
	   with LaTeX by running it through `makeinfo --latex'.
	2. Gawk no longer builds an x86_64 executable on M1 macOS systems.
	   This means that PMA is unavailable on those systems.
	3. Gawk will now diagnose if a heap file was created with a different
	   setting of -M/--bignum than in the current invocation and exit with
	   a fatal message if so.
	4. Gawk no longer "leaks" its free list of NODEs in the heap file, resulting
	   in much more efficient usage of persistent storage.
	5. PROCINFO["pma"] exists if the PMA allocator is compiled into gawk.
	   Its value is the PMA version.
	6. The time extension is no longer deprecated. The strptime() function
	   from gawkextlib's timex extension has been added to it.
	7. Better information is passed to input parsers for when they want to
	   decide whether or not to take control of a file. In particular, the
	   readdir extension is simplified for Windows because of this.
	8. The various PNG files are now installed for Info and HTML. The
	   images files now have gawk_ prefixed names to avoid any conflicts
	   with other installed PNG file names.
	9. As usual, there have been several minor code cleanups and bug fixes.
	   See the ChangeLog for details.
Changes from 5.2.0 to 5.2.1
	1. Infrastructure upgrades: PMA version Avon 8.
	2. Issues related to the sign of NaN and Inf values on RiscV have
	   been fixed; gawk now gives identical results on that platform as
	   it does on others.
	3. A few issues with the debugger have been fixed.
	4. More subtle issues with untyped array elements being passed to
	   functions have been fixed.
	5. The rwarray extension's readall() function has had some bugs fixed.
	6. The PMA allocator is now supported on FreeBSD, OpenBSD and Linux on S/390x.
	   It is now supported also on both Intel and M1 macOS systems.
	7. There have been several minor code cleanups and bug fixes. See the
	   ChangeLog for details.
Changes from 5.1.x to 5.2.0
	*****************************************************************************
	* MPFR mode (the -M option) is now ON PAROLE.  This feature is now being    *
	* supported by a volunteer in the development team and not by the primary   *
	* maintainer.  If this situation changes, then the feature will be removed. *
	* For more information see this section in the manual:                      *
	* https://www.gnu.org/software/gawk/manual/html_node/MPFR-On-Parole.html    *
	*****************************************************************************
	1. Infrastructure upgrades: Libtool 2.4.7, Bison 3.8.2.
	2. Numeric scalars now compare in the same way as C for the relational
	   operators. Comparison order for sorting has not changed.  This only
	   makes a difference when comparing Infinity and NaN values with
	   regular numbers; it should not be noticeable most of the time.
	3. If the AWK_HASH environment variable is set to "fnv1a" gawk will
	   use the FNV1-A hash function for associative arrays.
	4. The CMake infrastructure has been removed. In the five years it was in
	   the tree, nobody used it, and it was not updated.
	5. There is now a new function, mkbool(), that creates Boolean-typed
	   values.  These values *are* numbers, but they are also tagged as
	   Boolean. This is mainly for use with data exchange to/from languages
	   or environments that support real Boolean values. See the manual
	   for details.
	6. As BWK awk has supported interval expressions since 2019, they are
	   now enabled even if --traditional is supplied. The -r/--re-interval option
	   remains, but it does nothing.
	7. The rwarray extension has two new functions, writeall() and readall(),
	   for saving / restoring all of gawk's variables and arrays.
	8. The new `gawkbug' script should be used for reporting bugs.
	9. The manual page (doc/gawk.1) has been considerably reduced in size.
	   Wherever possible, details were replaced with references to the online
	   copy of the manual.
	10. Gawk now supports Terence Kelly's "persistent malloc" (pma),
	    allowing gawk to preserve its variables, arrays and user-defined
	    functions between runs. THIS IS AN EXPERIMENTAL FEATURE!
	    For more information, see the manual. A new pm-gawk.1 man page
	    is included, as is a separate user manual that focuses on the feature.
	11. Support for OS/2 has been removed. It was not being actively
	    maintained.
	12. Similarly, support for DJGPP has been removed. It also was not
	    being actively maintained.
	13. VAX/VMS is no longer supported, as it can no longer be tested.
	    The files for it remain in the distribution but will be removed
	    eventually.
	14. Some subtle issues with untyped array elements being passed to
	    functions have been fixed.
	15. Syntax errors are now immediately fatal. This prevents problems
	    with errors from fuzzers and other such things.
	16. There have been numerous minor code cleanups and bug fixes. See the
	    ChangeLog for details.
Changes from 5.1.1 to 5.1.x
	1. Infrastructure upgrades: Automake 1.16.5, Texinfo 6.8.
	2. The rwarray extension now supports writing and reading GMP and
	   MPFR values. As a result, a bug in the API code was fixed.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-06-15 09:28:59 +00:00
Adolf Belka
9a7aea8b32 ed: Update to version 1.19 
- Update from version 1.17 to 1.19
- Update of rootfile not required
- Changelog
2023-01-11  Antonio Diaz Diaz  <antonio@gnu.org>
* Version 1.19 released.
	* main_loop.c (exec_command): Fix commands 'e', 'E'; they did set
	  the 'modified' flag if file not found. (Reported by Harry Graf).
	  (main_loop): Print script error line to stdout instead of stderr.
	* Change long name of option '-s' to '--script'.
	  (Suggested by Andrew L. Moore).
	* Assign short name '-q' to options '--quiet' and '--silent'.
	* main.c (show_strerror) Use '!quiet' to enable diagnostics.
	* Do not process file names for backslash escapes.
	  (Suggested by Andrew L. Moore).
	* ed.texi: Document 0 as starting point for searches '0;/RE/'.
	  Document how to achieve the effect of ex style '!' filtering.
2022-02-04  Antonio Diaz Diaz  <antonio@gnu.org>
* Version 1.18 released.
	* main_loop.c (get_shell_command): Flush stdout after printing cmd.
	  (Reported by Sören Tempel).
	* signal.c (sighup_handler): Fix a memory leak just before exiting.
	* carg_parser.c (ap_init): Likewise.
	  (Both reported by Xosé Vázquez Pérez).
	* io.c (read_file, write_file): Check ptr returned by strip_escapes.
	* main_loop.c (get_shell_command, exec_command): Likewise.
	* main_loop.c (get_shell_command): Remove backslash from escaped '%'.
	  (Reported by Martin Thomsen).
	* main_loop.c, regex.c: Implement case-insensitive REs.
	* regex.c (compile_regex): Don't overwrite previous regex if error.
	* main.c: New option '--strip-trailing-cr'.
	* buffer.c (push_undo_atom): Fail if stack grows larger than INT_MAX.
	  (too_many_lines): Fail if buffer grows larger than INT_MAX lines.
	* global.c (set_active_node): Fail if list grows larger than INT_MAX.
	* signal.c (resize_buffer): Fail if a line grows longer than INT_MAX.
	* io.c (read_file): Return -2 for fatal errors.
	* main_loop.c (main_loop): Set error status if fatal error from main.
	* main.c [restricted_]: New message "Directory access restricted".
	* ed.texi: New chapter "The 's' Command".
	* COPYING: Restored. (I forgot to do it in 1.11).
	* TODO: Removed.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-06-15 09:28:42 +00:00
Adolf Belka
a75ec91d07 diffutils: Update to version 3.9 
- Update from version 3.8 to 3.9
- Update of rootfile not required
- Changelog
version 3.9
	* NEWS: Record release date.

	build: update gnulib to latest

2023-01-05  Jim Meyering  <meyering@fb.com>
	tests: avoid large-subopt XPASS on systems without perl
	* tests/large-subopt: Use $PERL, rather than hard-coding "perl".
	* bootstrap.conf (gnulib_modules): Add "perl" to the list.
	Reported by Bruno Haible in
	https://lists.gnu.org/r/diffutils-devel/2023-01/msg00000.html

2023-01-05  Bruno Haible  <bruno@clisp.org>
	tests: avoid a test failure when using Solaris 11.4's old grep
	* tests/colors (nanosecond_zeros): Use a dumbed-down grep '\.'
	in place of "grep -F ." to accommodate Solaris 11.4's old versions
	of grep in the default PATH. Reported here:
	https://lists.gnu.org/r/diffutils-devel/2023-01/msg00001.html

2023-01-01  Jim Meyering  <meyering@fb.com>
	build: update gnulib to latest

	maint: update copyright dates

2022-12-31  Paul Eggert  <eggert@cs.ucla.edu>
	build: simplify GCC 12 false alarm workaround
	* src/util.c (print_message_queue): Pacify GCC in a
	more-straightforward way.

	maint: fix assumption typo
	Fix a typo I introduced in my August 2021 signal handling fixes.
	Problem reported by Sam James (Bug#60457).
	* src/util.c (xsigismember): Don’t assume sigismember cannot return 0.

2022-12-30  Jim Meyering  <meyering@fb.com>
	build: update gnulib to latest

	build: temp?-disable -Wanalyzer-use-of-uninitialized-value
	* src/util.c (print_message_queue): This function triggers false
	positive warnings from GCC12, so add pragmas to ignore that new warning
	in this one function. Required when using either of these:
	- gcc version 12.2.1 20221121
	- gcc version 13.0.0 20221229 (experimental)

2022-12-11  Jim Meyering  <meyering@fb.com>
	build: update gnulib to latest

2022-11-12  Jim Meyering  <meyering@fb.com>
	build: update gnulib to latest

2022-02-14  Paul Eggert  <eggert@cs.ucla.edu>
	doc: mark up SEE ALSO (Bug#53976)

2022-01-24  Jim Meyering  <meyering@fb.com>
	tests: fix false-failure on systems without valgrind
	* tests/init.cfg (require_valgrind_): Use exit status of subshell,
	not that of the "local" declaration.

2022-01-14  Paul Eggert  <eggert@cs.ucla.edu>
	build: update gnulib submodule to latest

2022-01-03  Jim Meyering  <meyering@fb.com>
	maint: avoid new syntax-check failure
	* cfg.mk (local-checks-to-skip): Add sc_indent, to skip it.
	Otherwise, "make syntax-check" would fail.

	maint: make update-copyright

	build: update gnulib to latest; also bootstrap and init.sh

2021-10-30  Paul Eggert  <eggert@cs.ucla.edu>
	maint: modernize README-{hacking,prereq}

2021-10-16  Paul Eggert  <eggert@cs.ucla.edu>
	doc: copy fdl.texi into git
	This pacifies this notice from ./bootstrap: “Notice from module
	fdl: Don't use this module! Instead, copy the referenced license
	file into your version control repository.”
	* bootstrap.conf (gnulib_modules): Remove fdl.
	* doc/fdl.texi: New file, taken from Gnulib.

	maint: direct dependency on time_rz now
	Now that diff calls tzalloc, it depends directly on time_rz.
	* bootstrap.conf (gnulib_modules): Add time_rz.

	build: update gnulib submodule to latest

2021-10-15  Paul Eggert  <eggert@cs.ucla.edu>
	diff: fix timezone bug on Solaris
	Problem reported by Vladimir Marek (bug#51228).
	* NEWS: Mention this.
	* src/context.c (print_context_label): Pass localtz to nstrftime,
	instead of always passing 0.
	* src/diff.c (main) [!HAVE_TM_GMTOFF]:
	Initialize localtz if time_format uses %z.
	* src/diff.h (localtz): New decl.
	* tests/Makefile.am (TESTS): Add timezone.
	* tests/timezone: New test.

2021-08-31  Paul Eggert  <eggert@cs.ucla.edu>
	diff3: port better to MS-Windows
	* src/diff3.c (enum diff_type): Prefix constants like ADD with
	"DIFF_" to avoid collisions with unwise system headers.

2021-08-30  Paul Eggert  <eggert@cs.ucla.edu>
	maint: port better to non-POSIX
	Problem privately reported by Gisle Vanem for MS-Windows.
	* src/util.c (sig, install_signal_handlers):
	Don’t assume SIGTSTP, SIGALRM, SIGQUIT.
	(is_tstp_index): New function, for use in SIGTSTP avoidance.

	maint: prefer attribute.h attributes
	Prefer the macros used in attribute.h, and _Noreturn,
	to the by-hand use of __attribute__, as this is more portable.
	* bootstrap.conf (gnulib_modules): Add attribute.
	* src/system.h: Include attribute.h.  All uses of
	attributes changed to use the attribute.h macros.
	Plus, use _Noreturn.
	(FALLTHROUGH): Remove; attribute.h now defines this.

	build: update gnulib submodule to latest

	diff: avoid double translation
	* src/analyze.c (briefly_report): Do not translate here,
	as ‘message’ translates its format.

	diff: use variable arg list for messages
	This simplifies the code by using varargs.
	* bootstrap.conf (gnulib_modules): Add flexmember.
	(XGETTEXT_OPTIONS): Do not flag message5.
	* src/util.c: Include flexmember.h, stdarg.h.
	(struct msg): New members msgid, argbytes.  args is now
	FLEXIBLE_ARRAY_MEMBER, and does not contain msgid.
	All uses changed.
	(message): Now varargs.  Detect number of args by counting '%'s.
	Use FLEXSIZEOF, to avoid problems on systems with buggy
	allocators.  Avoid redundant ‘*p = 0’ when *p is already zero
	after stpcpy.
	(message5): Remove; all callers changed to use ‘message’.
	(print_message_queue): Abort if too many args were passed;
	this cannot happen with current diffutils.

2021-08-29  Paul Eggert  <eggert@cs.ucla.edu>
	diff: port better to MS-Windows
	Problem reported by Gisle Vanem (Bug#36488#30).
	* src/util.c (xsigaction) [SA_NOCLDSTOP]: Remove; no longer needed.
	(install_signal_handlers): If the first call to sigaction or
	signal fails, do not exit; just skip the signal and continue,
	in case the runtime does not support the signal even though the
	corresponding SIG* macro is defined.

2021-08-28  Paul Eggert  <eggert@cs.ucla.edu>
	diff: cleanup signal handling just before exit
	This should fix an unlikely signal handling bug with colored
	output, and should also fix a Debian FTBFS (Fails To Build From
	Source) on powerpc64le-linux.  See Bug#34519 and Frédéric
	Bonnard’s report in:
	https://bugs.debian.org/922552#19
	* bootstrap.conf (gnulib_modules): Add raise, sigprocmask.
	* src/diff.c (main): Call cleanup_signal_handlers before exiting.
	Don’t bother calling ‘exit’; no longer needed nowadays.
	* src/util.c (sigprocmask, siginterrupt) [!SA_NOCLDSTOP]:
	Define to 0 instead of empty, since the results are now used.
	(sigset_t) [!SA_NOCLDSTOP]: Remove; we now rely on Gnulib.
	(xsigaction) [SA_NOCLDSTOP]: New function.
	(xsigaddset, xsigismember, xsignal, xsigprocmask): New functions.
	(some_signals_caught): New static var.
	(process_signals): Omit a conditional branch.
	Don’t bother loading interrupt_signal if stop_signal_count is nonzero.
	(process_signals, install_signal_handlers):
	Check for failures from sigprocmask etc.
	(sig, nsig): Now at top level, since multiple functions need them.
	(install_signal_handlers): No need for caught_sig array;
	just use caught_signals.  However, set some_signals_caught.
	(cleanup_signal_handlers): New function.

2021-08-22  Paul Eggert  <eggert@cs.ucla.edu>
	diff: add integer overflow checking
	* src/diff.c (option_list, main): Check for integer overflow
	in some unlikely and hard-to-test cases.

	maint: refactor integer overflow checking
	Rely on more-modern Gnulib capabilities instead of doing
	integer overflow checking by hand, in some cases.
	* lib/cmpbuf.c (buffer_lcm):
	* src/io.c (slurp, find_identical_ends):
	Use INT_ADD_WRAPV and INT_MULTIPLY_WRAPV rather than checking
	overflow by hand.
	* src/diff3.c (process_diff):
	* src/dir.c (dir_read):
	* src/io.c (find_identical_ends, read_files):
	Use xnmalloc rather than checking overflow by hand.
	(read_files): Rely on xcalloc to do overflow checking.

	diff: avoid sprintf %s
	sprintf fails if the result contains more than INT_MAX bytes,
	so rework the code to avoid usage of sprintf %s where the
	string might be longer than that.
	* bootstrap.conf (gnulib_modules): Remove xvasprintf.
	* src/diff.c (specify_style):
	* src/util.c (begin_output):
	Rewrite to avoid sprintf %s.
	* src/util.c: Do not include xvasprintf.h.
	(concat): Remove, as it uses sprintf %s.  All uses rewritten.

	diff: use mempcpy
	* bootstrap.conf (gnulib_modules): Add mempcpy, stpcpy.
	* src/ifdef.c (do_printf_spec):
	* src/sdiff.c (expand_name, lf_snarf, temporary_file):
	* src/util.c (message5):
	Prefer mempcpy to memcpy plus manual size-updating.
	Prefer stpcpy to mempcpy plus manual size-spec.

	sdiff: fix unlikely memory leak
	* src/sdiff.c (temporary_file): Fix memory leak when mkstemp fails.
	Don’t assume temporary file name length fits in ‘int’.

	diff3: simplify process_diff
	* src/diff3.c (process_diff): Remove LAST_BLOCK arg, since callers
	no longer needed it.  All callers changed.  This removes an
	unnecessary initialization of bptr to NULL.

	maint: modernize IF_LINT for GCC 11.2.1
	* src/cmp.c (cmp):
	* src/dir.c (find_dir_file_pathname):
	* src/sdiff.c (edit):
	Mention which GCC bug this IF_LINT works around.
	* src/diff3.c (process_diff):
	Always initialize to NULL, to avoid problems on mostly-theoretical
	hosts where accessing uninitialized variables traps.  The next
	patch will have a better fix for this.
	* src/ifdef.c (do_printf_spec):
	No need for IF_LINT in GCC 11.2.1.

	maint: lint → GCC_LINT
	‘lint’ is for traditional lint and perhaps some other tools;
	‘GCC_LINT’ is targeted more for what we do.
	Gnulib accepts either, but we might as well be more accurate.
	* configure.ac (GCC_LINT): Define this instead of ‘lint’.
	All uses changed.

	diff: remove printint
	* src/system.h (printint): Remove.  All uses removed.  This type
	was only for porting to pre-C89 hosts, and is no longer needed.

	diff: remove INT_MAX limit on -F/-p searches
	* src/context.c (find_function): Don’t limit function-line
	searches to INT_MAX bytes, removing a FIXME.

	maint: .gitignore updates
	* .gitignore: Remove lib/unused-parameter.h.  Add all of m4, since
	no files there need to be committed; this lets us remove
	m4/.gitignore and m4/gnulib-cache.m4.  Add *.orig, *.patch, .Tpo,
	/*.diff, lib/*/ (which lets us remove /lib/sys/), lib/ctype.h,
	lib/errno.h, lib/float.h, lib/fnmatch.h, lib/getopt-cdefs.h,
	lib/getopt.h, lib/limits.h, lib/sigsegv.h, lib/stdalign.h,
	lib/stdarg.h, lib/stdbool.h, lib/stddef.h, lib/stdint.h,
	lib/stdopen.[ch], vc-dwim-log-*.  Add slashes to autom4te.cache,
	build-aux.  Remove redundant initial slashes from patterns that
	also have internal slashes.  Remove plain ABOUT-NLS, since
	/ABOUT-NLS suffices.  Sort using LC_ALL=C.

	maint: omit unused function if not debugging
	* src/util.c (debug_script): Compile only if DEBUG.

	maint: remove prepargs
	* lib/Makefile.am (noinst_HEADERS): Remove prepargs.h.
	(libdiffutils_a_SOURCES): Remove prepargs.c.
	* lib/prepargs.c, lib/prepargs.h: Remove.  Hasn’t been
	needed for many years.
	* src/diff.c: Do not include prepargs.h.

	maint: zalloc → xzalloc
	* src/util.c (zalloc): Remove.  All uses replaced
	by xzalloc, which means the same thing.

2021-08-22  Paul Eggert  <eggert@cs.ucla.edu>
	diff3: suppress -fanalyzer alarms
	* src/diff3.c: Add pragma to suppress -Wanalyzer-null-dereference
	alarms.

	* src/diff.h (find_dir_file_pathname): Add malloc-related
	attributes, to pacify gcc -Wsuggest-attribute=malloc.

2021-08-22  Paul Eggert  <eggert@cs.ucla.edu>
	maint: remove January workaround for Gnulib issue
	* configure.ac: Don’t add -Wno-analyzer-null-argument, since
	the issue is now fixed in Gnulib.

	build: update gnulib submodule to latest

2021-08-01  Paul Eggert  <eggert@cs.ucla.edu>
	maint: remove stray init.cfg
	* init.cfg: Remove.  I guess this file was a stray, since it was a
	copy of tests/init.cfg when it was checked in, and it hasn’t been
	maintained since.

	tests: port to valgrind 3.16.0 + GCC 11.2
	* tests/init.cfg (stderr_fileno_): Reject valgrind if it reports a
	"Serious error" on a trival use of ‘diff’.  Without this patch, on
	RHEL 8.4 when I compile diffutils with a GCC 11.2.0 that I built
	myself, ‘valgrind diff’ spits out messages like WARNING: Serious
	error when reading debug info / When reading debug info from diff:
	Ignoring non-Dwarf2/3/4 block in .debug_info’ and this causes the
	strip-trailing-cr test to fail.  I guess valgrind complains
	because the valgrind version 3.16.0 that came with RHEL 8.4 cannot
	grok the debug entries generated by GCC 11.2.0.

2021-08-01  Jim Meyering  <meyering@fb.com>
	maint: post-release administrivia
	* NEWS: Add header line for next release.
	* .prev-version: Record previous version.
	* cfg.mk (old_NEWS_hash): Auto-update.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-06-15 09:28:05 +00:00
Adolf Belka
e031838684 dhcpcd: Update to version 10.0.1 
- Update from version 9.4.1 to 10.0.1
- Update of rootfile not required
- Changelog is no longer provided. For details of changes you have to look at the commits
   log - https://github.com/NetworkConfiguration/dhcpcd/commits

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-06-15 09:26:56 +00:00
Peter Müller
9797af3006 OpenSSL: Update to 3.1.1 
Changelog concerning this version: https://www.openssl.org/news/cl31.txt
Accompanying security advisory: https://www.openssl.org/news/secadv/20230530.txt

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2023-05-30 23:06:53 +00:00
Arne Fitzenreiter
cfd5dbf1bb alsa: update to 1.2.9 and add ucm configfiles 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-30 09:21:54 +00:00
Arne Fitzenreiter
25aa552258 kernel: update to 6.1.30 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-30 09:21:34 +00:00
Matthias Fischer
bf0aa7f25b suricata: Update to 6.0.12 
"6.0.12 -- 2023-05-08

Bug #6040: tcp: failed assertion ASSERT: !(ssn->state != TCP_SYN_SENT) (6.0.x backport)
Bug #6039: TCP resets have incorrect len, nh in IPv6 (6.0.x backport)
Bug #6034: time: integer comparison with different signs (6.0.x backport)
Bug #6031: af-packet: reload not occurring until packets are seen (6.0.x backport)
Bug #6020: smtp: fuzz debug assertion trigger (6.0.x backport)
Bug #6018: scan-build warning for mime decoder (6.0.x backport)
Bug #6017: scan-build warnings for ac implementations (6.0.x backport)
Bug #6016: scan-build warnings in radix implementation (6.0.x backport)
Bug #6015: scan-build warning for detect sigordering (6.0.x backport)
Bug #6014: scan-build warnings for detect address handling (6.0.x backport)
Bug #6013: scan-build warning for detect port handling (6.0.x backport)
Bug #6007: Unexpected behavior of `endswith` in combination with negated content matches (6.0.x backport)
Bug #5999: exception/policy: make work with simulated flow memcap (6.0.x backport)
Bug #5997: perf shows excessive time in IPOnlyMatchPacket (6.0.x backport)
Bug #5980: rust: warning for future compile errors
Bug #5961: smb: wrong endian conversion when parse NTLM Negotiate Flags (6.0.x backport)
Bug #5958: bpf: postpone IPS check after IPS runmode is determined from the configuration file (6.0.x backport)
Bug #5934: app-layer-htp: Condition depending on enabled IPS mode never true (6.0.x backport)
Optimization #6033: detect using uninitialized engine mode (6.0.x backport)
Feature #5996: Add support for 'inner' PF_RING clustering modes (6.0.x backport)
Task #6052: github-ci: add windows + windivert build (6.0.x backport)"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
 2023-05-29 06:47:09 +00:00
Michael Tremer
bd313e31b8 Revert "core175: Ship updated clwarn.cgi" 
This reverts commit 9fae7ab32b.

This file is not part of the core distribution, but part of the
squidclamav package.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-05-24 10:00:49 +00:00
Arne Fitzenreiter
c6c78f8e11 kernel: update to 6.1.29 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-19 12:05:52 +00:00
Jon Murphy
f23508b724 rsnapshot: New addon 
- What is it?
	rsnapshot is a filesystem snapshot utility based on
	rsync. rsnapshot makes it easy to make periodic snapshots of the
	ipfire device. The code makes extensive use of hard links whenever
	possible, to greatly reduce the disk space required.  See:
	https://rsnapshot.org

- Why is it needed?
	Rsnapshot backups run multiple times per day
	(e.g., once per day up to 24 times per day). Rsnapshot is much easier
	to configure, setup and use than the borg backup add-on.  (I found
	borg somewhat confusing). Rsnapshot completes each backup very fast.
	Unlike borg, rsnapshot does not compress each backup before storage.
	During a complete rebuild, borg backup need installation of the borg
	add-on to recover archived files.  Rsnapshot backups can be copied
	directly from the backup drive. Current backups (backup.pl or borg)
	could corrupt sqlite3 databases by running a backup during a database
	write.  This add-on includes a script specifically for sqlite backups.

- IPFire Wiki
	In process at: https://wiki.ipfire.org/addons/rsnapshot

Thanks to Gerd for creating a first build and a nice template for me!

Signed-off-by: Jon Murphy <jon.murphy@ipfire.org>
 2023-05-18 11:24:29 +00:00
Adolf Belka
21d0be64d9 wio: This is a patch series relocating wio into the standard ipfire directories 
- This patch is the changes to the wio lfs file related to the relocations
- The modified patch series was built and the generated wio-1.3.2-17.ipfire file was
   used to install wio on a testbed vm system. Everything worked. Tested out with various
   hosts on the system, tested the graphs, tested adding hosts from a network scan and
   from the arp table and everything worked fine. So all the relocations look to have
   worked.
- Files were only relocated, the wio code was not modified in any way.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-18 09:47:46 +00:00
Jonatan Schlag
95dc3f86d8 initscript: sort by startup 
As the list of symbolic links was not sorted at all I sorted it now by
the order of start or stop.
This seems to be the most useful way as you can now understand the
startup sequence from this file and add/remove scripts at a useful
place.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-05-18 09:43:22 +00:00
Jonatan Schlag
3c90d6432f lfs/initscripts: improve indention 
As some lines are already now to long, this increase the indention to
improve readablitity.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-05-18 09:43:22 +00:00
Adolf Belka
b84d82176b borgbackup: Removed python3-pkgconfig as run time dependency 
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-18 09:31:12 +00:00
Adolf Belka
0a54896b20 python3-pkgconfig: Identified that this module is only required as a build time dependency 
- Moved rootfile from common to packages and commented out all entries.
- Updated lfs file from addon to core package that is only used for build

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-18 09:31:12 +00:00
Adolf Belka
e6cfa25714 python3-flit_scm: Fixes Bug#13076 - Build time dependency for python3-exceptiongroup 
Fixes: Bug#13076
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-18 09:31:12 +00:00
Adolf Belka
1da6cbf79f python3-exceptiongroup: Fixes Bug#13076 - New run time dependency for borgbackup fuse mount 
Fixes: Bug#13076
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-18 09:31:12 +00:00
Adolf Belka
ad4df98d7f python3-attr: Module no longer needed in the borgbackup dependency chain 
- Previous update of python3-trio to 0.22.0 removed this dependency.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-18 09:31:12 +00:00
Adolf Belka
eaa557233e python3-trio: Fixes Bug#13076 - allows fuse mount to work again 
- In Core 173 python3-trio was updated to version 0.22.0 when python was upgraded to 3.10.8
   Although the build of python3-trio was successful it was missed that there was a new
   run-time dependency of python3-exceptiongroup for python3-pyfuse3 to work.
   python2-flit_scm is required as a build dependency for python3-exceptiongroup.
- The modified packages were installed in my vm testbed and confirmed that borg mount then
   worked again.
- It was also noted that python3-attr was no longer needed neither as a runtime
   dependency nor as a build time dependency.
- Dependencies line of python3-trio updated for these two changes.

Fixes: Bug#13076
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-18 09:31:12 +00:00
Peter Müller
d69370d304 Revert "Revert "zabbix_agentd: Update to 6.0.16 (LTS)"" 
This reverts commit 3737b8e98e.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2023-05-18 09:23:25 +00:00
Arne Fitzenreiter
6a005bd9aa kernel: update to 6.1.28 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-16 18:53:01 +00:00
Peter Müller
3737b8e98e Revert "zabbix_agentd: Update to 6.0.16 (LTS)" 
This reverts commit 2c21437bef.

https://lists.ipfire.org/pipermail/development/2023-May/015885.html -
reverting this temporarily to ensure the nightly builds will run
through.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2023-05-12 08:47:59 +00:00
Adolf Belka
b2e7b0a28b mpfr: Update to include the latest four bug patches 
- The base version has not changed but patches to fix 4 bugs have been released.
- Update to rootfile not required.
- Bug fix changelog
	1    A test of the thousands separator in tsprintf.c is based on the output from
              the GNU C Library up to 2.36, which is incorrect. The output has changed in
              2.37 (partly fixed), so that tsprintf fails with glibc 2.37. The
              tsprintf-thousands patch modifies the test to conform to POSIX and also
              avoid the buggy case in 2.36 and below. However, this new test, which was
              expected to succeed, triggers a serious bug in 2.37
              (bug 30068 / CVE-2023-25139). We did not modify the test again since this
              bug affects MPFR's mpfr_sprintf function, with a possible buffer overflow
              in particular cases. This bug has been fixed in the 2.37 branch. In short,
              this patch is useful (and needed) for a fixed glibc 2.37 and some other
              libraries, depending on the current locales.
	     Corresponding changesets in the 4.2 branch: 4f03d40b5, 78ff7526d, e66bb7121.
	2    The mpfr_ui_pow_ui function has infinite loop in case of overflow. This can
              affect mpfr_log10, which uses this function (this is how this bug was
              found). This bug is fixed by the ui_pow_ui-overflow patch (with testcases).
	     Corresponding changeset in the 4.2 branch: 0216f40ed.
	3    The tfprintf and tprintf tests may fail in locales where decimal_point has
              several bytes, such as ps_AF. This is fixed by the multibyte-decimal_point
              patch, which makes the tests aware of the length of decimal_point.
	     Corresponding changeset in the 4.2 branch: 0383bea85.
	4    In particular cases that are very hard to round, mpfr_rec_sqrt may yield a
              stack overflow due to many small allocations in the stack, based on alloca().
              This is due to the fact that the working precision is increased each step
              (Ziv loop) by 32 or 64 bits only, until the approximate result can be
              rounded (thus we have an arithmetic progression here, while a geometric
              progression is used for the other functions), and that at each iteration,
              the previous allocations in the stack cannot be freed. Individual
              allocations in the stack are limited to 16384 bytes, so that the issue can
              occur only when there are many iterations in working precisions that are
              not too large, which is possible with an arithmetic progression. This bug
              is fixed by the rec_sqrt-zivloop patch, which changes the Ziv loop to use
              the standard MPFR_ZIV_* macros; the patch also provides a testcase obtained
              by a function that constructs a hard-to-round case involving large enough
              precisions (this function is commonly used in the MPFR testsuite, but not
              with so large precisions). This bug was originally reported by Fredrik
              Johansson.
	     Corresponding changeset in the 4.2 branch: 934dd8842.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-11 20:10:38 +00:00
Adolf Belka
3e501253bd lvm2: housekeeping - remove invalid configure option 
- Since lvmetad was removed then the configure option --enable-lvmetad is no longer valid.
   A warning is now shown - configure: WARNING: unrecognized options: --enable-lvmetad

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-11 20:10:25 +00:00
Adolf Belka
133b2ae6bb libcap: Adjust the lfs file to place pkg-config files in the correct place 
- libcap places the files by default in /lib and not /usr/lib etc. To fix this libcap made
   a symlink for the library file from /lib to /usr/lib. However the .pc files were left
   in /lib/pkgconfig and not /usr/lib/pkgconfig and were therefore not found by the update
   of rng-tools which now required libcap to be found.
- Changed the prefix settings for libcap which placed the libraries and .pc files in the
   correct locations while keeping the executables in their existing location.
- This removed the need for symlinking /usr/lib/libcap.so to /lib/libcap.so.2.67 as the
   libraries are now placed in /usr/lib
- Installed the ipfire build with these changes into a vm system and confirmed that
   everything worked. Input from Michael Tremer that if ping worked then libcap was
   functioning correctly.
- The prefixes have to be applied to both make and make install to end up with the files
   in the correct places.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-11 20:10:00 +00:00
Adolf Belka
173f1ffca3 rng-tools: Update to version 2.16 
- This v2 version corrects an error where a debug echo statement was left in the lfs file
- Update from version 2.14 to 2.16
- Update of rootfile not required
- Version 2.16 required libcap to be available, which it is, but it could not be found by
   rng-tools. This is because rng-tools is using pkg-config and the required libcap.pc file
   was not stored in the standard directory location for .pc files. Therefore a patch for
   libcap is bundled together with this update to fix this.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-11 20:10:00 +00:00
Adolf Belka
0921556c85 initscripts: removal of lvmetad initscript 
- With the last update of lvm2 lvmetad was removed from lvm2. I did not recognise that
   lvmetad had been setup as an automatic initscript, so it no longer works as the
   binary is no longer provided.
- This patch removes the lvmetad initscript, the reference to lvmetad in the initscript
   lfs file and the lvmetad initscript entries in the rootfile for each architecture.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-05-11 20:08:07 +00:00
Adolf Belka
d83b6fc6df alsa: Fix bug#13087 remove services entry 
- alsa has an initscript but it is not starting and stopping a traditional daemon service.
   The initscript loads some alsa modules and then restores the asound.state file
- This patch updates the PAK_VER number and removes the services entry and explicitly
   adds alsa in for the initscript installation.
- Additionally this patch also adds the installation of a backup include file for alsa
   which savces the soundcards status file asound.state

Fixes: Bug#13087
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
 2023-05-11 20:06:39 +00:00
Matthias Fischer
34a9705d95 squid: Update to 5.9 
For details see:
https://github.com/squid-cache/squid/commits/v5

The translation files are back in the source code... ;-)

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
 2023-05-11 20:05:18 +00:00
Robin Roevens
957b6f92b9 Add Zabbix Agent to logviewer 
- Configure Zabbix Agent to log to syslog instead of its own logs.
- Remove old zabbix log-dir and logrotate settings from rootfile, lfs
  and install-script.
- Update log.dat to view Zabbix Agent logging from syslog.

Signed-off-by: Robin Roevens <robin.roevens@disroot.org>
 2023-05-11 20:03:27 +00:00
Robin Roevens
2c21437bef zabbix_agentd: Update to 6.0.16 (LTS) 
- Update from version 6.0.6 to 6.0.16
- Update of rootfile not required
- Changelog
 No substantial changes for Agent Linux version
 Changelogs since 6.0.6:
 - https://www.zabbix.com/rn/rn6.0.7
 - https://www.zabbix.com/rn/rn6.0.8
 - https://www.zabbix.com/rn/rn6.0.9
 - https://www.zabbix.com/rn/rn6.0.10
 - https://www.zabbix.com/rn/rn6.0.11
 - https://www.zabbix.com/rn/rn6.0.12
 - https://www.zabbix.com/rn/rn6.0.13
 - https://www.zabbix.com/rn/rn6.0.14
 - https://www.zabbix.com/rn/rn6.0.15
 - https://www.zabbix.com/rn/rn6.0.16

Signed-off-by: Robin Roevens <robin.roevens@disroot.org>
 2023-05-11 20:03:27 +00:00
Matthias Fischer
4cc36e3861 libhtp: Update to 0.5.43 
For details see:
https://github.com/OISF/libhtp/releases/tag/0.5.43

"htp: do not log content-encoding: none
 htp: do not error on multiple 100 Continue
 readme: remove note on libhtp not being stable
 uri: fix compile warning strict-prototypes
 bstr: fix compile warning strict-prototypes
 fuzz_diff: Free the rust test object.
 github: add CIFuzz workflow"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
 2023-05-11 20:00:37 +00:00
Matthias Fischer
c1ef4566cf suricata: Update to 6.0.11 
Excerpt from changelog:

"6.0.11 -- 2023-04-13

Security #5947: byte_math: Division by zero possible. (6.0.x backport)
Bug #5970: detect: reload can stall if flow housekeeping takes too long (6.0.x backport)
Bug #5967: flowworker: Assertion in CheckWorkQueue (6.0.x backport)
Bug #5953: http: multipart data is not filled up to request.body-limit (6.0.x backport)
Bug #5951: detect: multi-tenancy crash (6.0.x backport)
Bug #5950: http2: quadratic complexity when reducing dynamic headers table size (6.0.x backport)
Bug #5949: smtp: quadratic complexity for tx iterator with linked list (6.0.x backport)
Bug #5948: fast_pattern assignment of specific content in combination with urilen results in FN (6.0.x backport)
Bug #5946: flow/manager: fix unhandled division by 0 (prealloc: 0) (6.0.x backport)
Bug #5942: exception/policy: flow action doesn't fall back to packet action when there's no flow (6.0.x backports)
Bug #5933: smb: tx logs sometimes have duplicate `tree_id` output (6.0.x backport)
Bug #5932: rfb/eve: depth in pixel format logged twice (6.0.x backport)
Bug #5906: dns: unused events field can overflow as an integer
Bug #5903: UBSAN: undefined shift in DetectByteMathDoMatch (6.0.x backport)
Bug #5899: smb: no consistency check between NBSS length and length field for some SMB operations (6.0.x backport)
Bug #5898: smb: possible evasion with trailing nbss data (6.0.x backport)
Bug #5896: base64_decode not populating up to an invalid character (6.0.x backport)
Bug #5895: stream: connections time out too early (6.0.x backport)
Bug #5889: stream: SYN/ACK timestamp checking blocks valid traffic (6.0.x backport)
Bug #5888: false-positive drop event_types possible on passed packets (6.0.x backport)
Bug #5887: stream: overlap with different data false positive (6.0.x backport)
Bug #5886: mime: debug assertion on fuzz input (6.0.x backport)
Bug #5879: netmap: Module registration displays whether info about new API usage
Bug #5863: netmap: packet stalls (6.0.x backport)
Bug #5854: SMTP does not handle LF post line limit properly (6.0.x backport)
Bug #5852: tcp/stream: session reuse on tcp flows w/o sessions (6.0.x backport)
Feature #5853: yaml: set suricata version in generated config (6.0.x backport)
Task #5985: libhtp 0.5.43 (6.0.x backport)"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
 2023-05-11 20:00:37 +00:00
Arne Fitzenreiter
cb73ca19a6 kernel: patch CVE-2023-32233 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
 2023-05-11 19:48:40 +00:00
Matthias Fischer
cb251d2fbb bind: Update to 9.16.40 
For details  see:
https://downloads.isc.org/isc/bind9/9.16.40/doc/arm/html/notes.html#notes-for-bind-9-16-40

"Notes for BIND 9.16.40
Bug Fixes

    Logfiles using timestamp-style suffixes were not always correctly
    removed when the number of files exceeded the limit set by versions.
    This has been fixed for configurations which do not explicitly specify
    a directory path as part of the file argument in the channel
    specification. [GL #3959] [GL #3991]

    Performance of DNSSEC validation in zones with many DNSKEY records has
    been improved. [GL #3981]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-08 06:55:58 +00:00
Arne Fitzenreiter
fae6e41cd1 memtest: update to memtest86+ 6.10 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-05 05:25:51 +00:00
Matthias Fischer
6cd5e3ffef clamav: Update to 1.1.0 
For details see:
https://blog.clamav.net/2023/05/clamav-110-released.html

"Major changes

    Added the ability to extract images embedded in HTML CSS <style> blocks.

    Updated to Sigtool so that the --vba option will extract VBA code from
    Microsoft Office documents the same way that libclamav extracts VBA.
    This resolves several issues where Sigtool could not extract VBA.
    Sigtool will also now display the normalized VBA code instead of the
    pre-normalized VBA code.

    Added a new ClamScan and ClamD option: --fail-if-cvd-older-than=days.
    Additionally, we introduce FailIfCvdOlderThan as a clamd.conf synonym
    for --fail-if-cvd-older-than. When passed, it causes ClamD to exit on
    startup with a non-zero return code if the virus database is older than
    the specified number of days.

    Added a new function cl_cvdgetage() to the libclamav API. This function
    will retrieve the age in seconds of the youngest file in a database
    directory, or the age of a single CVD (or CLD) file.

    Added a new function cl_engine_set_clcb_vba() to the libclamav API. Use
    this function to set a cb_vba callback function. The cb_vba callback
    function will be run whenever VBA is extracted from office documents.
    The provided data will be a normalized copy of the extracted VBA. This
    callback was added to support Sigtool so that it can use the same VBA
    extraction logic that ClamAV uses to scan documents.

Other improvements

    Removed the vendored TomsFastMath library in favor of using OpenSSL to
    perform "big number"/multiprecision math operations. Work courtesy of
    Sebastian Andrzej Siewior.

    Build system: Added CMake option DO_NOT_SET_RPATH to avoid setting
    RPATH on Unix systems. Feature courtesy of Sebastian Andrzej Siewior.

    Build system: Enabled version-scripts with CMake to limit symbol
    exports for libclamav, libfreshclam, libclamunrar_iface, and
    libclamunrar shared libraries on Unix systems, excluding macOS.
    Improvement courtesy of Orion Poplawski and Sebastian Andrzej Siewior.

    Build system: Enabled users to pass in custom Rust compiler flags using
    the RUSTFLAGS CMake variable. Feature courtesy of Orion Poplawski.

    Removed a hard-coded alert for CVE-2004-0597. The CVE is old enough
    that it is no longer a threat and the detection had occasional
    false-positives.

    Set Git attributes to prevent Git from altering line endings for Rust
    vendored libraries. Third-party Rust libraries are bundled in the
    ClamAV release tarball. We do not commit them to our own Git
    repository, but community package maintainers may now store the tarball
    contents in Git. The Rust build system verifies the library manifest,
    and this change ensures that the hashes are correct. Improvement
    courtesy of Nicolas R.

    Fixed compile time warnings. Improvement courtesy of Razvan Cojocaru.

    Added a minor optimization when matching domain name regex signatures
    for PDB, WDB and CDB type signatures.

    Build system: Enabled the ability to select a specific Python version.
    When building, you may use the CMake option -D
    PYTHON_FIND_VER=<version> to choose a specific Python version. Feature
    courtesy of Matt Jolly.

    Added improvements to the ClamOnAcc process log output so that it is
    easier to diagnose bugs.

    Windows: Enabled the MSI installer to upgrade between feature versions
    more easily when ClamAV is installed to a location different from the
    default (i.e., not C:\Program Files\ClamAV). This means that the MSI
    installer can find a previous ClamAV 1.0.x installation to upgrade to
    ClamAV 1.1.0.

    Sigtool: Added the ability to change the location of the temp directory
    using the --tempdir option and added the ability to retain the temp
    files created by Sigtool using the --leave-temps option.

    Other minor improvements.

Bug fixes

    Fixed the broken ExcludePUA / --exclude-pua feature. Fix courtesy of
    Ged Haywood and Shawn Iverson.

    Fixed an issue with integer endianness when parsing Windows executables
    on big-endian systems. Fix courtesy of Sebastian Andrzej Siewior.

    Fixed a possible stack overflow read when parsing WDB signatures. This
    issue is not a vulnerability.

    Fixed a possible index out of bounds when loading CRB signatures. This
    issue is not a vulnerability.

    Fixed a possible use after free when reading logical signatures. This
    issue is not a vulnerability.

    Fixed a possible heap overflow read when reading PDB signatures. This
    issue is not a vulnerability.

    Fixed a possible heap overflow read in javascript normalizer module.
    This issue is not a vulnerability.

    Fixed two bugs that would cause Freshclam to fail update when applying
    a CDIFF database patch if that patch adds a file to the database
    archive or removes a file from the database archive. This bug also
    caused Sigtool to fail to create such a patch.

    Fixed an assortment of complaints identified by Coverity static analysis.

    Fixed one of the Freshclam tests that was failing on some Fedora
    systems due to a bug printing debug-level log messages to stdout. Fix
    courtesy of Arjen de Korte.

    Correctly remove temporary files generated by the VBA and XLM
    extraction modules so that the files are not leaked in patched versions
    of ClamAV where temporary files are written directly to the
    temp-directory instead of writing to a unique subdirectory."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-04 06:07:15 +00:00
Adolf Belka
e023c2a414 minidlna: bump PAK_VER due to ffmpeg library sobump 
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-03 07:54:40 +00:00
Adolf Belka
9eb18b34c6 shairport-sync: bump PAK_VER due to ffmpeg library sobump 
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-03 07:54:31 +00:00
Adolf Belka
e42ea50d7a mpd: bump PAK_VER due to ffmpeg library sobump 
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-03 07:54:21 +00:00
Adolf Belka
0a554a474e ffmpeg: Update to version 6.0 
- Update from version 5.1.2 to 6.0
- Update of rootfile
- sobump occurs so find-dependencies checked and the addons mpd, shairport-sync &
   minidlna will be bumped to the next PAK_VER as a patch set with this change.
- Changelog
    version 6.0:
	- Radiance HDR image support
	- ddagrab (Desktop Duplication) video capture filter
	- ffmpeg -shortest_buf_duration option
	- ffmpeg now requires threading to be built
	- ffmpeg now runs every muxer in a separate thread
	- Add new mode to cropdetect filter to detect crop-area based on motion vectors and edges
	- VAAPI decoding and encoding for 10/12bit 422, 10/12bit 444 HEVC and VP9
	- WBMP (Wireless Application Protocol Bitmap) image format
	- a3dscope filter
	- bonk decoder and demuxer
	- Micronas SC-4 audio decoder
	- LAF demuxer
	- APAC decoder and demuxer
	- Media 100i decoders
	- DTS to PTS reorder bsf
	- ViewQuest VQC decoder
	- backgroundkey filter
	- nvenc AV1 encoding support
	- MediaCodec decoder via NDKMediaCodec
	- MediaCodec encoder
	- oneVPL support for QSV
	- QSV AV1 encoder
	- QSV decoding and encoding for 10/12bit 422, 10/12bit 444 HEVC and VP9
	- showcwt multimedia filter
	- corr video filter
	- adrc audio filter
	- afdelaysrc audio filter
	- WADY DPCM decoder and demuxer
	- CBD2 DPCM decoder
	- ssim360 video filter
	- ffmpeg CLI new options: -stats_enc_pre[_fmt], -stats_enc_post[_fmt],
	  -stats_mux_pre[_fmt]
	- hstack_vaapi, vstack_vaapi and xstack_vaapi filters
	- XMD ADPCM decoder and demuxer
	- media100 to mjpegb bsf
	- ffmpeg CLI new option: -fix_sub_duration_heartbeat
	- WavArc decoder and demuxer
	- CrystalHD decoders deprecated
	- SDNS demuxer
	- RKA decoder and demuxer
	- filtergraph syntax in ffmpeg CLI now supports passing file contents
	  as option values, by prefixing option name with '/'
	- hstack_qsv, vstack_qsv and xstack_qsv filters
    For more details about the changes you have to review the commits in the git repo
     https://git.ffmpeg.org/gitweb/ffmpeg.git/shortlog/n6.0

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-03 07:54:11 +00:00
Adolf Belka
51c7cfed81 zstd: Update to version 1.5.5 
- Update from version 1.5.4 to 1.5.5
- Update of rootfile
- Changelog
    v1.5.5 (Apr 2023)
	fix: fix rare corruption bug affecting the high compression mode, reported by @danlark1 (#3517, @terrelln)
	perf: improve mid-level compression speed (#3529, #3533, #3543, @yoniko and #3552, @terrelln)
	lib: deprecated bufferless block-level API (#3534) by @terrelln
	cli: mmap large dictionaries to save memory, by @daniellerozenblit
	cli: improve speed of --patch-from mode (~+50%) (#3545) by @daniellerozenblit
	cli: improve i/o speed (~+10%) when processing lots of small files (#3479) by @felixhandte
	cli: zstd no longer crashes when requested to write into write-protected directory (#3541) by @felixhandte
	cli: fix decompression into block device using -o, reported by @georgmu (#3583)
	build: fix zstd CLI compiled with lzma support but not zlib support (#3494) by @Hello71
	build: fix cmake does no longer require 3.18 as minimum version (#3510) by @kou
	build: fix MSVC+ClangCL linking issue (#3569) by @tru
	build: fix zstd-dll, version of zstd CLI that links to the dynamic library (#3496) by @yoniko
	build: fix MSVC warnings (#3495) by @embg
	doc: updated zstd specification to clarify corner cases, by @Cyan4973
	doc: document how to create fat binaries for macos (#3568) by @rickmark
	misc: improve seekable format ingestion speed (~+100%) for very small chunk sizes (#3544) by @Cyan4973
	misc: tests/fullbench can benchmark multiple files (#3516) by @dloidolt

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-03 07:52:26 +00:00
Adolf Belka
1653034fae opus: Update to version 1.4 
- Updsate from version 1.3.1 to 1.4
- Update of rootfile
- Changelog
    opus 1.4 major release brings the following improvements and fixes:
	    Improved tuning of the Opus in-band FEC (LBRR).
             See https://gitlab.xiph.org/xiph/opus/-/issues/2360 for details
	    Added a OPUS_SET_INBAND_FEC(2) option that turns on FEC, but does not force
             SILK mode (FEC will be disabled in CELT mode)
	    Improved tuning and various fixes to DTX
	    Added Meson support, improved CMake support In addition to the improvements
             above, this release includes many minor bug fixes.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-03 07:52:11 +00:00
Adolf Belka
24c8b9e0e6 nfs: Update to version 2.6.3 
- Update from version 2.6.2 to 2.6.3
- Update of rootfile
- Changelog is available in sourceforge at the following url
   https://sourceforge.net/projects/nfs/files/nfs-utils/2.6.3/

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-03 07:50:09 +00:00
Adolf Belka
84c21e12ec lvm2: Update to version 2.03.21 
- Update from version 2.02.188 to 2.03.21
- Update of rootfile
- Changelog
    version 2.03.21 - 21st April 2023
	  Fix activation of vdo-pool for with 0 length headers (converted pools).
	  Avoid printing internal init messages when creation integration devices.
	  Allow (write)cache over raid+integrity LV.
    version 2.03.20 - 21st March 2023
	  Fix segfault if using -S|--select with log/report_command_log=1 setting.
	  Configure now fails when requested lvmlockd dependencies are missing.
	  Add some configure Gentoo enhancements for static builds.
    version 2.03.19 - 21st February 2023
	  Configure supports --with-systemd-run executed from udev rules.
	  Enhancement for build with MuslC systemd and non-bash system shells (dash).
	  Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
	  Ensure udev is processing origin LV before its thick snapshots LVs.
	  Fix and improve runtime memory size detection for VDO volumes.
    version 2.03.18 - 22nd December 2022
	  Fix issues reported by coverity scan.
	  Fix warning for thin pool overprovisioning on lvextend (2.03.17).
	  Add support for writecache metadata_only and pause_writeback settings.
	  Fix missing error messages in lvmdbusd.
    Version 2.03.17 - 10th November 2022
	  Add new options (--fs, --fsmode) for FS handling when resizing LVs.
	  Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
	  Fix lv_active field type to binary so --select and --binary applies properly.
	  Switch to use mallinfo2 and use it only with glibc.
	  Error out in lvm shell if using a cmd argument not supported in the shell.
	  Fix lvm shell's lastlog command to report previous pre-command failures.
	  Extend VDO and VDOPOOL without flushing and locking fs.
	  Add --valuesonly option to lvmconfig to print only values without keys.
	  Updates configure with recent autoconf tooling.
	  Fix lvconvert --test --type vdo-pool execution.
	  Add json_std output format for more JSON standard compliant version of output.
	  Fix vdo_slab_size_mb value for converted VDO volume.
	  Fix many corner cases in device_id, including handling of S/N duplicates.
	  Fix various issues in lvmdbusd.
    Version 2.03.16 - 18th May 2022
	  Fix segfault when handling selection with historical LVs.
	  Add support --vdosettings with lvcreate, lvconvert, lvchange.
	  Filtering multipath devices respects blacklist setting from multipath
	  configuration.
	  lvmdevices support for removing by device id using --deviceidtype and
	  --deldev.
	  Display writecache block size with lvs -o writecache_block_size.
	  Improve cachesettings description in man lvmcache.
	  Fix lossing of delete message on thin-pool extension.
    Version 2.03.15 - 07th February 2022
	  Remove service based autoactivation. global/event_activation = 0 is NOOP.
	  Improve support for metadata profiles for --type writecache.
	  Use cache or active DM device when available with new kernels.
	  Introduce function to utilize UUIDs from DM_DEVICE_LIST.
	  Increase some hash table size to better support large device sets.
    Version 2.03.14 - 20th October 2021
	  Device scanning is skipping directories on different filesystems.
	  Print info message with too many or too large archived files.
	  Reduce metadata readings during scanning phase.
	  Optimize computation of crc32 check sum with multiple PVs.
	  Enhance recover path on cache creation failure.
	  Filter out unsupported MQ/SMQ cache policy setting.
	  Fix memleak in mpath filter.
	  Support newer location for VDO statistics.
	  Add support for VDO async-unsafe write policy.
	  Improve lvm_import_vdo script.
	  Support VDO LV with lvcreate -ky.
	  Fix lvconvert for VDO LV bigger then 2T.
	  Create VDO LVs automatically without zeroing.
	  Rename vdoimport to lvm_import_vdo.
    Version 2.03.13 - 11th August 2021
	  Changes in udev support:
	  - obtain_device_list_from_udev defaults to 0.
	  - see devices/external_device_info_source,
	    devices/obtain_device_list_from_udev, and devices/multipath_wwids_file help
	    in lvm.conf
	  Fix devices file handling of loop with deleted backing file.
	  Fix devices file handling of scsi_debug WWIDs.
	  Fix many static analysis issues.
	  Support --poolmetadataspare with vgsplit and vgmerge.
	  Fix detection of active components of external origin volume.
	  Add vdoimport tool to support conversion of VDO volumes.
	  Support configurable allocation/vdo_pool_header_size.
	  Fix handling of lvconvert --type vdo-pool --virtualsize.
	  Simplified handling of archive() and backup() internal calls.
	  Add 'idm' locking type for IDM lock manager.
	  Fix load of kvdo target when it is not present in memory (2.03.12).
    Version 2.03.12 - 07th May 2021
	  Allow attaching cache to thin data volume.
	  Fix memleak when generating list of outdated pvs.
	  Better hyphenation usage in man pages.
	  Replace use of deprecated security_context_t with char*.
	  Configure supports AIO_LIBS and AIO_CFLAGS.
	  Improve build process for static builds.
	  New --setautoactivation option to modify LV or VG auto activation.
	  New metadata based autoactivation property for LVs and VGs.
	  Improve signal handling with lvmpolld.
	  Signal handler can interrupt command also for SIGTERM.
	  Lvreduce --yes support.
	  Add configure option --with/out-symvers for non-glibc builds.
	  Report error when the filesystem is missing on fsadm resized volume.
	  Handle better blockdev with --getsize64 support for fsadm.
	  Do not include editline/history.h when using editline library.
	  Support error and zero segtype for thin-pool data for testing.
	  Support mixed extension for striped, error and zero segtypes.
	  Support resize also for stacked virtual volumes.
	  Skip dm-zero devices just like with dm-error target.
	  Reduce ioctl() calls when checking target status.
	  Merge polling does not fail, when LV is found to be already merged.
	  Poll volumes with at least 100ms delays.
	  Do not flush dm cache when cached LV is going to be removed.
	  New lvmlockctl_kill_command configuration option.
	  Support interruption while waiting on device close before deactivation.
	  Flush thin-pool messages before removing more thin volumes.
	  Improve hash function with less collisions and make it faster.
	  Reduce ioctl count when deactivating volumes.
	  Reduce number of metadata parsing.
	  Enhance performance of lvremove and vgremove commands.
	  Support interruption when taking archive and backup.
	  Accelerate large lvremoves.
	  Speedup search for cached device nodes.
	  Speedup command initialization.
	  Add devices file feature, off by default for now.
	  Support extension of writecached volumes.
	  Fix problem with unbound variable usage within fsadm.
	  Fix IMSM MD RAID detection on 4k devices.
	  Check for presence of VDO target before starting any conversion.
	  Support metatadata profiles with volume VDO pool conversions.
	  Support -Zn for conversion of already formated VDO pools.
	  Avoid removing LVs on error path of lvconvert during creation volumes.
	  Fix crashing lvdisplay when thin volume was waiting for merge.
	  Support option --errorwhenfull when converting volume to thin-pool.
	  Improve thin-performance profile support conversion to thin-pool.
	  Add workaround to avoid read of internal 'converted' devices.
	  Prohibit merging snapshot into the read-only thick snapshot origin.
	  Restore support for flipping rw/r permissions for thin snapshot origin.
	  Support resize of cached volumes.
	  Disable autoactivation with global/event_activation=0.
	  Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
	  Allocation prints better error when metadata cannot fit on a single PV.
	  Pvmove can better resolve full thin-pool tree move.
	  Limit pool metadata spare to 16GiB.
	  Improves conversion and allocation of pool metadata.
	  Support thin pool metadata 15.88GiB, adds 64MiB, thin_pool_crop_metadata=0.
	  Enhance lvdisplay to report raid available/partial.
	  Support online rename of VDO pools.
	  Improve removal of pmspare when last pool is removed.
	  Fix problem with wiping of converted LVs.
	  Fix memleak in scanning  (2.03.11).
	  Fix corner case allocation for thin-pools.
    Version 2.03.11 - 08th January 2021
	  Fix pvck handling MDA at offset different from 4096.
	  Partial or degraded activation of writecache is not allowed.
	  Enhance error handling for fsadm and handle correct fsck result.
	  Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
	  Support using BLKZEROOUT for clearing devices.
	  Support interruption when wipping LVs.
	  Support interruption for bcache waiting.
	  Fix bcache when device has too many failing writes.
	  Fix bcache waiting for IO completion with failing disks.
	  Configure use own python path name order to prefer using python3.
	  Add configure --enable-editline support as an alternative to readline.
	  Enhance reporting and error handling when creating thin volumes.
	  Enable vgsplit for VDO volumes.
	  Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
	  Use revert_lv() on reload error path after vg_revert().
	  Configure --with-integrity enabled.
	  Restore lost signal blocking while VG lock is held.
	  Improve estimation of needed extents when creating thin-pool.
	  Use extra 1% when resizing thin-pool metadata LV with --use-policy.
	  Enhance --use-policy percentage rounding.
	  Configure --with-vdo and --with-writecache as internal segments.
	  Improving VDO man page examples.
	  Allow pvmove of writecache origin.
	  Report integrity fields.
	  Integrity volumes defaults to journal mode.
	  Switch code base to use flexible array syntax.
	  Fix 64bit math when calculation cachevol size.
	  Preserve uint32_t for seqno handling.
	  Switch from mmap to plain read when loading regular files.
	  Update lvmvdo man page and better explain DISCARD usage.
    Version 2.03.10 - 09th August 2020
	  Add writecache and integrity support to lvmdbusd.
	  Generate unique cachevol name when default required from lvcreate.
	  Converting RAID1 volume to one with same number of legs now succeeds with a
	  warning.
	  Fix conversion to raid from striped lagging type.
	  Fix conversion to 'mirrored' mirror log with larger regionsize.
	  Zero pool metadata on allocation (disable with allocation/zero_metadata=0).
	  Failure in zeroing or wiping will fail command (bypass with -Zn, -Wn).
	  Add lvcreate of new cache or writecache lv with single command.
	  Fix running out of free buffers for async writing for larger writes.
	  Add integrity with raid capability.
	  Fix support for lvconvert --repair used by foreign apps (i.e. Docker).
    Version 2.03.09 - 26th March 2020
	  Fix formatting of vdopool (vdo_slab_size_mb was smaller by 2 bits).
	  Fix showing of a dm kernel error when uncaching a volume with cachevol.
    Version 2.03.08 - 11th February 2020
	  Prevent problematic snapshots of writecache volumes.
	  Add error handling for failing allocation in _reserve_area().
	  Fix memleak in syncing of internal cache.
	  Fix pvck dump_current_text memleak.
	  Fix lvmlockd result code on error path for _query_lock_lv().
	  Update pvck man page and help output.
	  Reject invalid writecache high/low_watermark setting.
	  Report writecache status.
	  Accept more output lines from vdo_format.
	  Prohibit reshaping of stacked raid LVs.
	  Avoid running cache input arg validation when creating vdo pool.
	  Prevent raid reshaping of stacked volumes.
	  Added VDO lvmdbusd methods for enable/disable compression & dedupe.
	  Added VDO lvmdbusd method for converting LV to VDO pool.
    Version 2.03.07 - 30th November 2019
	  Subcommand in vgck for repairing headers and metadata.
	  Ensure minimum required region size on striped RaidLV creation.
	  Fix resize of thin-pool with data and metadata of different segtype.
	  Improve mirror type leg splitting.
	  Improve error path handling in daemons on shutdown.
	  Fix activation order when removing merged snapshot.
	  Experimental VDO support for lvmdbusd.
   Version 2.03.06 - 23rd October 2019
	  Add _cpool suffix to cache-pool LV name when used by caching LV.
	  No longer store extra UUID for cmeta and cdata cachevol layer.
	  Enhance activation of cache devices with cachevols.
	  Add _cvol in list of protected suffixes and start use it with DM UUID.
	  Rename LV converted to cachevol to use _cvol suffix.
	  Use normal LVs for wiping of cachevols.
	  Reload cleanered cache DM only with cleaner policy.
	  Fix cmd return when zeroing of cachevol fails.
	  Extend lvs to show all VDO properties.
	  Preserve VDO write policy with vdopool.
	  Increase default vdo bio threads to 4.
	  Continue report when cache_status fails.
	  Add support for DM_DEVICE_GET_TARGET_VERSION into device_mapper.
	  Fix cmirrord usage of header files from device_mapper subdir.
	  Allow standalone activation of VDO pool just like for thin-pools.
	  Activate thin-pool layered volume as 'read-only' device.
	  Ignore crypto devices with UUID signature CRYPT-SUBDEV.
	  Enhance validation for thin and cache pool conversion and swapping.
	  Improve internal removal of cached devices.
	  Synchronize with udev when dropping snapshot.
	  Add missing device synchronization point before removing pvmove node.
	  Correctly set read_ahead for LVs when pvmove is finished.
	  Remove unsupported OPTIONS+="event_timeout" udev rule from 11-dm-lvm.rules.
	  Prevent creating VGs with PVs with different logical block sizes.
	  Fix metadata writes from corrupting with large physical block size.
    Version 2.03.05 - 15th June 2019
	  Fix command definition for pvchange -a.
	  Add vgck --updatemetadata command that will repair metadata problems.
	  Improve VG reading to work if one good copy of metadata is found.
	  Report/display/scan commands that read VGs will no longer write/repair.
	  Move metadata repairs from VG reading to VG writing.
	  Add config setting md_component_checks to control MD component checks.
	  Add end of device MD component checks when dev has no udev info.
    Version 2.03.04 - 10th June 2019
	  Remove unused_duplicate_devs from cmd causing segfault in dmeventd.
    Version 2.03.03 - 07th June 2019
	  Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
	  Add pvck --dump option to extract metadata.
	  Fix signal delivery checking race in libdaemon (lvmetad).
	  Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.
	  Skip autoactivation for a PV when PV size does not match device size.
	  Remove first-pvscan-initialization which should no longer be needed.
	  Add remote refresh through lvmlockd/dlm for shared LVs after lvextend.
	  Ignore foreign and shared PVs for pvscan online files.
	  Add config setting to control fields in debug file and verbose output.
	  Add command[pid] and timestamp to debug file and verbose output.
	  Fix missing growth of _pmsmare volume when extending _tmeta volume.
	  Automatically grow thin metadata, when thin data gets too big.
	  Add synchronization with udev before removing cached devices.
	  Add support for caching VDO LVs and VDOPOOL LVs.
	  Add support for vgsplit with cached devices.
	  Query mpath device only once per command for its state.
	  Use device INFO instead of STATUS when checking for mpath device uuid.
	  Change default io_memory_size from 4 to 8 MiB.
	  Add config setting io_memory_size to set bcache size.
	  Fix pvscan autoactivation for concurrent pvscans.
	  Change scan_lvs default to 0 so LVs are not scanned for PVs.
	  Thin-pool selects power-of-2 chunk size by default.
	  Cache selects power-of-2 chunk size by default.
	  Support reszing for VDOPoolLV and VDOLV.
	  Improve -lXXX%VG modifier which improves cache segment estimation.
	  Ensure migration_threshold for cache is at least 8 chunks.
	  Restore missing man info lvcreate --zero for thin-pools.
	  Drop misleadning comment for metadata minimum_io_size for VDO segment.
	  Add device hints to reduce scanning.
	  Introduce LVM_SUPPRESS_SYSLOG to suppress syslog usage by generator.
	  Fix generator quering lvmconfig unpresent config option.
	  Fix memleak on bcache error path code.
	  Fix missing unlock on lvm2 dmeventd plugin error path initialization.
	  Improve Makefile dependency tracking.
	  Move VDO support towards V2 target (6.2) support.
    Version 2.03.02 - 18th December 2018
	  Fix missing proper initialization of pv_list struct when adding pv.
	  Fix (de)activation of RaidLVs with visible SubLVs.
	  Prohibit mirrored 'mirror' log via lvcreate and lvconvert.
	  Use sync io if async io_setup fails, or use_aio=0 is set in config.
	  Fix more issues reported by coverity scan.
    Version 2.03.01 - 31st October 2018
    Version 2.03.00 - 10th October 2018
	  Add hot fix to avoiding locking collision when monitoring thin-pools.
	  Allow raid4 -> linear conversion request.
	  Fix lvconvert striped/raid0/raid0_meta -> raid6 regression.
	  Add 'lvm2-activation-generator:' prefix for kmsg messages logged by generator.
	  Add After=rbdmap.service to {lvm2-activation-net,blk-availability}.service.
	  Reduce max concurrent aios to avoid EMFILE with many devices.
	  Fix lvconvert conversion attempts to linear.
	  Fix lvconvert raid0/raid0_meta -> striped regression.
	  Fix lvconvert --splitmirror for mirror type (2.02.178).
	  Do not pair cache policy and cache metadata format.
	  lvconvert: reject conversions on raid1 LVs with split tracked SubLVs
	  lvconvert: reject conversions on raid1 split tracked SubLVs
	  Add basic creation support for VDO target.
	  Never send any discard ioctl with test mode.
	  Fix thin-pool alloc which needs same PV for data and metadata.
	  Extend list of non-memlocked areas with newly linked libs.
	  Enhance vgcfgrestore to check for active LVs in restored VG.
	  Configure supports --disable-silent-rules for verbose builds.
	  Fix unmonitoring of merging snapshots.
	  Cache can uses metadata format 2 with cleaner policy.
	  Fix check if resized PV can also fit metadata area.
	  Avoid showing internal error in lvs output or pvmoved LVs.
	  Remove clvmd
	  Remove lvmlib (api)
	  Remove lvmetad
	  Use versionsort to fix archive file expiry beyond 100000 files.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-03 07:48:03 +00:00
Adolf Belka
d2130887f7 libxml2: Update to version 2.11.1 
- Update from version 2.10.3 to 2.11.1
- Update of rootfile
- Changelog
   There were two CVE's in version 2.10.4
    v2.11.1: Apr 30 2023
	Fixes build and ABI issues.
		- cmake: Fix va_copy detection (Luca Niccoli)
		- libxml.m4: Fix quoting
		- Link with --undefined-version
		- libxml2.syms: Revert removal of version information
    v2.11.0: Apr 28 2023
	### Major changes
		Protection against entity expansion attacks, also known as "billion laughs"
		has been greatly improved. Malicious files should be detected reliably now
		and false positives should be reduced. It is possible though that large
		documents which make heavy use of entities are rejected now.
		This release finally fixes symbol visibility on UNIX systems. Internal
		symbols will now be hidden. While these symbols were never declared in public
		headers, it was still possible to declare them manually. Now this won't work.
		All symbol information has been removed from the ELF version script to fix
		link errors with --no-undefined-version. The version nodes are kept so it
		should still be possible to run binaries linked against older versions.
		About 90 memory errors in code paths handling malloc failures have been fixed.
		While these issues shouldn't impact security, this improves robustness under
		memory pressure.
		The XInclude engine has been reworked to properly support nested includes.
		Several cases of quadratic behavior in the XML push parser have been fixed.
		Refactoring has begun on some buffering and encoding code with the goal of
		simplifying this part of the code base and improving error reporting.
		Other highlights:
		- Consolidated private header files.
		- Major rework of the autoconf build.
		- Deprecated several outdated and internal functions.
		Special thanks to Google's Open Source Security Subsidies program for
		sponsoring much of the work on this release!
		Ongoing work on libxml2 relies on funding. For a list of important open
		issues see <https://gitlab.gnome.org/GNOME/libxml2/-/issues/507>
	### Security
		- Fix use-after-free in xmlParseContentInternal() (David Kilzer)
		- xmllint: Fix use-after-free with --maxmem
		- parser: Fix OOB read when formatting error message
		- entities: Rework entity amplification checks
	### Regressions
		- parser: Fix regression in xmlParserNodeInfo accounting
	### Bug fixes
		- Fix memory errors in code handling malloc failures
		- encoding: Fix error code in asciiToUTF8
		- xpath: number('-') should return NaN
		- xmlParseStartTag2() contains typo when checking for default definitions for
		  an attribute in a namespace (David Kilzer)
		- uri: Fix handling of port numbers
		- error: Make sure that error messages are valid UTF-8
		- xinclude: Fix nested includes
	### Improvements
		- xmllint: Validate --maxmem integer option
		- xmlValidatePopElement() can return invalid value (-1) (David Kilzer)
		- parser: Rework EBCDIC code page detection
		- parser: Limit name length in xmlParseEncName
		- parser: Rework shrinking of input buffers
		- html: Rely on CUR_CHAR to grow the input buffer
		- parser: Rely on CUR_CHAR/NEXT to grow the input buffer
		- valid: Make xmlValidateElement non-recursive
		- html: Fix quadratic behavior in htmlParseTryOrFinish
		- xmllint: Fix memory leak with --pattern --stream
		- parser: Stop calling xmlParserInputShrink
		- html: Impose some length limits
		- valid: Allow xmlFreeValidCtxt(NULL)
		- parser: Stop calling xmlParserInputGrow
		- xinclude: Fix quadratic behavior in xmlXIncludeLoadTxt
		- xinclude: Abort immediately if max depth was exceeded
		- xpath: Only report the first error
		- error: Don't move past current position
		- error: Limit number of parser errors
		- parser: Lower entity nesting limit with XML_PARSE_HUGE
		- parser: Don't increase depth twice when parsing internal entities
		- parser: Improve detection of entity loops
		- parser: Only report a single entity error
		- libxml.h: Remove dubious definition of LIBXML_STATIC
		- html: Improve parsing of nested lists
		- memory: Don't use locks in xmlMemUsed
		- encoding: Remove unused variable xmlDefaultCharEncodingHandler
		- Rework initialization code
		- Add .editorconfig
		- parser: Merge misc, prolog and epilog cases in push parser
		- parser: Fix 'consumed' accounting when switching encodings
		- html: Fix check for end of comment in push parser
		- parser: Fix push parser with 1-3 byte initial chunk
		- parser: Rewrite push parser boundary checks
		- reader: Switch to xmlParserInputBufferCreateMem
		- html: Don't escape ASCII chars in href attributes
		- io: Don't shrink memory input buffers
		- parser: Don't call xmlSHRINK from push parser
		- parser: Ignore cdata argument in xmlParseCharData
		- parser: Rework push parser parser progress checks
		- io: Fix a few integer overflows in I/O statistics
		- io: Rework xmlParserInputBufferGrow with encodings
		- io: Remove xmlInputReadCallbackNop
		- io: Check for memory buffer early in xmlParserInputGrow
		- parser: Fix error message in xmlParseCommentComplex
		- Bypass proxy in nanoHTTP for hosts in "no_proxy" (Markus Jörg)
		- schemas: Fix infinite loop in xmlSchemaCheckElemSubstGroup
		- threads: Remove check for pthread_equal
		- xinclude: Rework XInclude cache
		- xinclude: Remove inefficient refcounting scheme
		- xmllint: Improve handling of empty XPath node sets
		- parser: Fix potential memory leak in xmlParseAttValueInternal
		- error: Don't use initGenericErrorDefaultFunc
		- xpath: Lower XPath recursion limit on Windows
		- Stop including sys/types.h
		- Don't define WIN32 macro
		- Make xmlNewSAXParserCtx take a const sax handler
		- Consolidate private header files
		- Remove internal macros from parserInternals.h
		- Move some HTML functions to correct header file
		- xmllint: Stop calling xmlSAXDefaultVersion
		- Introduce xmlNewSAXParserCtxt and htmlNewSAXParserCtxt
		- Don't mess with parser options in htmlParseDocument
		- Remove useless call to htmlDefaultSAXHandlerInit
		- Remove htmlDefaultSAXHandler from non-SAX1 build
		- Don't initialize SAX handler in htmlReadMemory
		- Fix htmlReadMemory mixing up XML and HTML functions
		- Don't use default SAX handler to report unrelated errors
		- Create stream with buffer in xmlNewStringInputStream
		- xmlcatalog: Fix memory leaks
	### Code quality
		- xzlib: Fix implicit sign change in xz_open
		- parser: Simplify calculation of available buffer space
		- parser: Use size_t when subtracting input buffer pointers
		- parser: Check for integer overflow when updating checkIndex
		- xpath: Fix harmless integer overflow in xmlXPathTranslateFunction
		- schematron: Use logical and
		- relaxng: Remove useless if statement
		- schemas: Remove useless if statement
		- pattern: Merge identical branches
		- regexp: Add sanity check in xmlRegCalloc2
		- regexp: Simplify xmlRegAtomPush
		- encoding: Cast toupper argument to unsigned char
		- uri: Add explicit cast in xmlSaveUri
		- buf: Fix return value of xmlBufGetInputBase
		- parser: Fix integer overflow of input ID
		- parser: Remove useless ent->etype test in xmlParseReference
		- parser: Remove useless ent->children tests in xmlParseReference
		- xmlmemory.c: Remove xmlMemContentShow
		- libxml.h: Add comments and indentation
		- libxml.h: Don't include stdio.h
		- xmlexports.h: Disable docs for internal macro XMLPUBLIC
		- parser: Simplify xmlParseConditionalSections
		- io: Rearrange code in xmlSwitchInputEncodingInt
		- warnings: Fix -Wstrict-prototypes warning
		- warnings: Remove set-but-unused variables
		- Fix compiler warnings in SAX2.c
		- Fix unused variable warning in python/types.c
		- Fix compiler warning in examples
		- Fix compiler warnings in fuzzing code
		- Remove unused code in nanohttp.c
		- Remove or annotate char casts
		- Don't use sizeof(xmlChar) or sizeof(char)
		- Remove explicit integer casts
	### Deprecations
		- parser: Deprecate more internal functions
		- parser: Deprecate some parser input functions
		- parser: Deprecate xmlString*DecodeEntities
		- threads: Deprecate some internal functions
		- buf: Deprecate static/immutable buffers
		- Deprecate internal parser functions
		- Deprecate old HTML SAX API
		- Generate deprecation warnings for old SAX API
		- Mark more functions setting globals as deprecated
		- Mark more parser functions as deprecated
		- Mark most SAX1 functions as deprecated
		- Deprecate some global variables
	### Portability
		- autoconf: Warn about outdated C compilers
		- win32: Remove broken libxml2.def.src
		- Remove symbols from version script
		- catalog.c: Silence a cast warning on VS 2022 (Lukáš Tyrychtr)
		- libxml.h: Remove ancient LynxOS setup
		- Use python3 not python (Ross Burton)
		- xstc/fixup-tests.py: port to Python 3 (Ross Burton)
		- xstc/fixup-tests.py: unify whitespace (Ross Burton)
		- Remove hacky heuristic from b2dc5675 (Alex Richardson)
		- Avoid creating an out-of-bounds pointer by rewriting a check
		  (Alex Richardson)
		- Hide internal functions
		- Correctly relocate internal pointers after realloc() (Alex Richardson)
		- Visual Studio builds: Allow silencing deprecation warnings (Chun-wei Fan)
		- Visual Studio: Define XML_DEPRECATED (Chun-wei Fan)
		- xmllint: Include <io.h> on Windows
		- warnings: Work around MSVC bug
		- sources: Silence C4013 warnings on Visual Studio (Chun-wei Fan)
		- python/setup.py.in: Improve Windows import patching (Chun-wei Fan)
		- python: Create .pyd on Windows
		- Fix Python build on Windows
		- Fix Windows compiler warnings in python/types.c
		- Fix libxml_PyFileGet
		- Remove BeOS support
		- Fix libxml_PyFileGet with stdout on macOS
		- Migrate from PyEval_ to PyObject_
		- Port build_glob.py to Python 3
		- Port genChRanges.py to Python 3
		- xmlexports.h: Remove LIBXML_FASTCALL optimization
		- Remove XMLCALL and XMLCDECL macros from public headers
		- Remove XMLDECL macro from .c files
	### Build systems
		- cmake: Link against `dl` and `dld` only when `LIBXML2_WITH_MODULES` is
		  enabled (Alexander Kutelev)
		- autotools: Fix make distcheck
		- Remove RPM build, Makefile.tests, README.tests
		- libxml.m4: deprecate AM_PATH_XML2, wrap PKG_CHECK_MODULES instead
		  (Ross Burton)
		- libxml.m4: fix -Wstrict-prototypes (Sam James)
		- cmake: Build static library with -DLIBXML_STATIC
		- autotools: Don't use version script on Windows
		- autotools: Fix winsock detection
		- autotools: Only add network libraries if HTTP/FTP enabled
		- autotools: Disable parallel Python build
		- python: Don't output missing generators during build
		- build: Remove check for broken ss_family
		- http: Simplify IPv6 checks
		- autotools: Fix network checks on Windows
		- Fix detection of GNU libiconv
		- cmake: Fix Python installation
		- cmake: Don't check for Python 2
		- configure.ac: Also check for MSYS host
		- Improve network library detection
		- Detect ws2_32 with AC_SEARCH_LIBS
		- Rework network configure checks
		- Remove arg cast configure checks
		- Fix dlopen check
		- Remove HAVE_WIN32_THREADS configuration flag
		- Rework dlopen and pthread detection
		- Fix test in configure.ac
		- cmake: Enable GCC compiler warnings
		- Always link with -no-undefined
		- Use AM_CFLAGS and AM_LDFLAGS consistently
		- Remove -Wredundant-decls
		- Call AC_CHECK_* with multiple arguments
		- configure.ac: Remove checks for unused programs
		- Rework library detection in configure.ac
		- Rearrange configure.ac
		- Consolidate zlib and lzma detection
		- Remove "runtime debugging"
		- Consolidate simple API modules in configure.ac
		- Fix dependency resolution in configure.ac
		- Fix --with-valid --without-regexps build
		- Fix --with-schemas --without-xpath build
		- Don't build unneeded .c source files
		- Move xmlIsXHTML to tree.c
		- Cleanup distribution settings in Makefile.am
		- Also clean *.pyc files for Python 2
		- Don't distribute libxml2.spec
	### Tests
		- testchar: Add test for memory pull parser with encoding
		- fuzz: Also test init function of URI fuzzer
		- fuzz: Separate fuzzer for DTD validation
		- gitlab-ci: Enable all "integer" sanitizers
		- fuzz: Inject random malloc failures
		- fuzz: Support variable integer sizes in fuzz data
		- fuzz: Fix duplicate detection in fuzzEntityRecorder
		- fuzz: Set filename in xmlFuzzEntityLoader
		- fuzz: Allow xmlFuzzReadString(NULL)
		- fuzz: Fix Makefile dependencies
		- fuzz: Add test/recurse to seed corpus
		- fuzz: Add separate XInclude fuzzer
		- runsuite: Some errors are expected
		- testrecurse: Test entity expansion stats
		- testapi.c: Initialize catalog early
		- gentest.py: Fix memory leak in API tests
		- tests: Enable "runsuite" test
		- python/tests/reader2: use absolute paths everywhere (Ross Burton)
		- python/tests/reader2: always exit(1) if a test fails (Ross Burton)
		- testModule: exit if the module can't be opened (Ross Burton)
		- CI: disable modules in gcc:static build (Ross Burton)
		- CI: fix CI on MinGW builds (Ross Burton)
		- python: Fix memory leak checks
		- tests: Check that xmlInitParser doesn't allocate memory
		- tests: Fix use-after-free in Python tests
		- tests: Remove unneeded #includes
		- gitlab-ci: Make Test-Msvc exit if ctest fails
		- gitlab-ci: Treat compiler warnings as errors on MSVC
		- test: Add test for push parser boundaries
		- gitlab-ci: Upgrade image to Ubuntu 22.10, reenable MSan
		- gitlab-ci: Reenable LeakSanitizer
		- gitlab-ci: Fix llvm-symbolizer
		- xinclude: Don't create result doc for test with errors
		- xinclude: Also test error messages
		- gitlab-ci: Allow cast-align warnings from clang
		- gitlab-ci: Fix tar invocation
		- gitlab-ci: Move MSVC test to separate script
		- gitlab-ci: Fix SUFFIX, remove MINGW_PATH
		- gitlab-ci: Consolidate CMake test scripts
		- gitlab-ci: Only install MinGW autotools if needed
		- gitlab-ci: Only install cmake MinGW package if needed
		- gitlab-ci: Install 7-Zip using the .msi
		- Use $MSYSTEM and 'bash -lc' in MinGW CI
		- Add CI job for MinGW/Autotools
		- Consolidate CI scripts
		- Allow empty MINGW_PACKAGE_PREFIX
		- Move Dockerfile to .gitlab-ci directory
		- testapi: Disable on Windows for now
		- Disable fuzzer tests if glob.h wasn't found
		- Move automata test to runtest.c
		- Fix testapi when building --without-sax1
	# Documentation
		- doc: Remove ancient files
		- Remove ancient TODOs
		- html: Fix htmlInitAutoClose documentation
		- doc: Mention new location of XML catalog as breaking change
		- doc: Mention potentially breaking changes in NEWS
		- doc: Remove xmlDllMain from documentation and version script
		- doc: Mention ${sysconfdir} in man pages
		- doc: Document xmlcatalog --convert
		- doc: Document xmllint --nodict and --pedantic
		- doc: Fix indentation in source XML files
		- xmllint: Document --quiet option
		- Improve cross-references in API docs
		- Improve documentation of globals
		- Fix documentation parser
		- Support comments for global variables in documentation
		- Fix update call in apibuild.py
		- Don't index anything in DOC_DISABLE sections
		- Fix warnings from apibuild.py
		- Start with documentation for maintainers
    v2.10.4: Apr 11 2023
	### Security
		- [CVE-2023-29469] Hashing of empty dict strings isn't deterministic
		- [CVE-2023-28484] Fix null deref in xmlSchemaFixupComplexType
		- schemas: Fix null-pointer-deref in xmlSchemaCheckCOSSTDerivedOK
	### Regressions
		- SAX2: Ignore namespaces in HTML documents
		- io: Fix "buffer full" error with certain buffer sizes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-03 07:46:02 +00:00
Adolf Belka
5d4a957339 iproute2: Update to version 6.3.0 
- Update from version 6.2.0 to 6.3.0
- Update of rootfile not required
- Changelog can only be reviewed by looking at the commits in the git repo
   https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2023-05-03 07:43:15 +00:00