- Update from 7.79.1 to 7.80.0
- Update of rootfile
- Changelog is too long to include here.
This update fixes 172 bugs the details of which can be found in the CHANGES file in
the source tarball.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 0.185 to 0.186
- Update of rootfile
- find-dependencies with old libs did not report any issues
- Changelog
2021-11-10 Mark Wielaard <mark@klomp.org>
* configure.ac (AC_INIT): Set version to 0.186.
* NEWS: Add translation item.
2021-09-03 John Mellor-Crummey <johnmc@rice.edu>
* NEWS: Read inlining info in NVIDIA extended line map
2021-08-10 Adrian Ratiu <adrian.ratiu@collabora.com>
* configure.ac (AC_CACHE_CHECK): Rework std=gnu99 check to allow clang.
2021-08-20 Saleem Abdulrasool <abdulras@google.com>
* Add AC_CHECK_HEADERS for error.h and err.h.
2021-07-28 Mark Wielaard <mark@klomp.org>
* configure.ac (AC_CHECK_DECLS): Add reallocarray check.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 5.13 to 5.15
- Update of rootfile not required
- Changelog
Release version 5.15 Michal Kubecek
update UAPI header copies Michal Kubecek
netlink: settings: Correct duplicate condition Bastian Germann
Merge branch 'review/module-fixes-2-v2' Michal Kubecek
sff-8636: Remove extra blank lines Ido Schimmel
sff-8636: Convert if statement to switch-case Ido Schimmel
sff-8636: Fix incorrect function name Ido Schimmel
sff-8636: Remove incorrect comment Ido Schimmel
cmis: Correct comment Ido Schimmel
cmis: Fix wrong define name Ido Schimmel
cmis: Fix CLEI code parsing Ido Schimmel
Merge branch 'review/module-fixes' into master Michal Kubecek
netlink: eeprom: Fix compilation when pretty dump is disabled Ido Schimmel
ethtool: Fix compilation warning when pretty dump is disabled Ido Schimmel
netlink: eeprom: Fallback to IOCTL when a complete hex/raw dump is requested Ido Schimmel
cmis: Fix invalid memory access in IOCTL path Ido Schimmel
sff-8636: Fix parsing of Page 03h in IOCTL path Ido Schimmel
Merge branch 'next' into master Michal Kubecek
Release version 5.14 Michal Kubecek
netlink: settings: add netlink support for coalesce cqe mode parameter Yufeng Mo
pretty: update message descriptions for coalescing Michal Kubecek
netlink: settings: add two link extended substates of bad signal integrity Guangbin Huang
update UAPI header copies Michal Kubecek
pretty: add message descriptions for PHC virtual clocks Michal Kubecek
pretty: add message descriptions for FEC stats Michal Kubecek
pretty: reorder to match enum values Michal Kubecek
update UAPI header copies Michal Kubecek
cmdline: skip dummy args entry in find_option() Michal Kubecek
Merge branch 'review/nojson-fail' into master Michal Kubecek
ethtool: return error if command does not support --json Jakub Kicinski
ethtool: use dummy args[] entry for no-args case Jakub Kicinski
ethtool: remove questionable goto Jakub Kicinski
Remove trailing newline in perror messages Jules Maselbas
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 1.42 to 1.43
- Update of rootfile
- Changelog - full details can be found in the ChangeLog file in the source tarball
Noteworthy changes in version 1.43 (2021-11-03) [C32/A32/R1]
* Fix for building against GNU libc 2.34. [T5547]
* Fix build problems on macOS. [T5440,T5610]
* Fix gpgrt-config problems. [T5381,T5595]
* Fix gpgrt_free for legacy platforms. [448bf7b01cad]
* Fix truncation of error message in the middle of a character. [T5048]
* Fix the --disable-threads configure options. [T5495]
* Improve lock-obj generation for cross-builds [99ae862a96a5]
* Improve cross-builds. [T5365]
* Improve gpgrt_wait_processes. [T5381]
* Allow config files to read values from the Windows Registry and
from envvars. [b1790f4cc71f]
* Update the Russian and Czech translations.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 5.14.0 to 5.15.0
- Update of rootfile
- Changelog
v5.15.0 Stephen Hemminger
rdma: Fix SRQ resource tracking information json Neta Ostrovsky
man: devlink-port: fix pfnum for devlink port add Antoine Tenart
Merge branch 'managed-neighbor' into next David Ahern
ip, neigh: Add NTF_EXT_MANAGED support Daniel Borkmann
ip, neigh: Add missing NTF_USE support Daniel Borkmann
ip, neigh: Fix up spacing in netlink dump Daniel Borkmann
xfrm: enable to manage default policies Nicolas Dichtel
Merge branch 'rdma-optional-stats' into next David Ahern
uapi: pickup fix for xfrm ABI breakage Stephen Hemminger
iplink: enable to specify index when changing netns Nicolas Dichtel
Merge branch 'config-libdir' into next David Ahern
configure: add the --libdir option Andrea Claudi
configure: add the --prefix option Andrea Claudi
configure: support --param=value style Andrea Claudi
configure: simplify options parsing Andrea Claudi
configure: fix parsing issue with more than one value per option Andrea Claudi
configure: fix parsing issue on libbpf_dir option Andrea Claudi
configure: fix parsing issue on include_dir option Andrea Claudi
rdma: Add optional-counters set/unset support Neta Ostrovsky
rdma: Add stat "mode" support Neta Ostrovsky
rdma: Update uapi headers Neta Ostrovsky
Update kernel headers David Ahern
mptcp: cleanup include section. Stephen Hemminger
lib/bpf: fix map-in-map creation without prepopulation Paul Chaignon
man: devlink-port: remove extra .br Antoine Tenart
man: devlink-port: fix style Antoine Tenart
man: devlink-port: fix the devlink port add synopsis Antoine Tenart
Merge branch 'main' into next David Ahern
Merge branch 'ioam-encap-modes' into next David Ahern
Update documentation Justin Iurman
Add support for IOAM encap modes Justin Iurman
cmd: use spaces instead of tabs for usage indentation Frank Villaro-Dixon
ip: nexthop: keep cache netlink socket open Nikolay Aleksandrov
devlink: print maximum number of snapshots if available Jacob Keller
Update kernel headers David Ahern
mptcp: unbreak JSON endpoint list Davide Caratti
Merge branch 'nexthop-cache' into next David Ahern
ip: nexthop: add print_cache_nexthop which prints and manages the nh cache Nikolay Aleksandrov
ip: route: print and cache detailed nexthop information when requested Nikolay Aleksandrov
ip: nexthop: add a helper which retrieves and prints cached nh entry Nikolay Aleksandrov
ip: nexthop: add cache helpers Nikolay Aleksandrov
ip: nexthop: factor out ipnh_get_id rtnl talk into a helper Nikolay Aleksandrov
ip: nexthop: factor out print_nexthop's nh entry printing Nikolay Aleksandrov
ip: nexthop: parse attributes into nh entry structure before printing Nikolay Aleksandrov
ip: nexthop: add nh entry structure Nikolay Aleksandrov
ip: nexthop: split print_nh_res_group into parse and print parts Nikolay Aleksandrov
ip: nexthop: add resilient group structure Nikolay Aleksandrov
ip: export print_rta_gateway version which outputs prepared gateway string Nikolay Aleksandrov
ip: print_rta_if takes ifindex as device argument instead of attribute Nikolay Aleksandrov
Merge branch 'ax.25-netrom-rose' into next David Ahern
ROSE: Print decoded addresses rather than hex numbers. Ralf Baechle
ROSE: Add rose_ntop implementation. Ralf Baechle
NETROM: Print decoded addresses rather than hex numbers. Ralf Baechle
NETROM: Add netrom_ntop implementation. Ralf Baechle
AX.25: Print decoded addresses rather than hex numbers. Ralf Baechle
AX.25: Add ax25_ntop implementation. Ralf Baechle
lib: bpf_legacy: fix bpffs mount when /sys/fs/bpf exists Andrea Claudi
tc/f_flower: fix port range parsing Puneet Sharma
lib: bpf_legacy: add prog name, load time, uid and btf id in prog info dump Gokul Sivakumar
Merge branch 'main' into next David Ahern
uapi: updates from 5.-rc1 Stephen Hemminger
ip: Support filter links/neighs with no master Lahav Schlesinger
man: ip-macsec: fix gcm-aes-256 formatting issue Lennert Buytenhek
Merge branch 'main' into next David Ahern
Merge branch 'bridge-mcast_router' into next David Ahern
bridge: vlan: add support for mcast_router option Nikolay Aleksandrov
bridge: vlan: set vlan option attributes while parsing Nikolay Aleksandrov
Update kernel headers David Ahern
ip: rewrite routel in python Stephen Hemminger
ip: remove routef script Stephen Hemminger
ip: remove ifcfg script Stephen Hemminger
ip: remove old rtpr script Stephen Hemminger
iptuntap: fix multi-queue flag display David Marchand
man: ip-link: remove double of Nikolay Aleksandrov
configure: restore backward compatibility Luca Boccassi
tree-wide: fix some typos found by Lintian Luca Boccassi
ip: remove leftovers from IPX and DECnet Stephen Hemminger
uapi: update headers from 5. merge Stephen Hemminger
ip/bond: add lacp active support Hangbin Liu
Update kernel headers David Ahern
ip/tunnel: always print all known attributes Ilya Dmitrichenko
ipioam6: use print_nl instead of print_null Justin Iurman
tc/skbmod: Introduce SKBMOD_F_ECN option Peilin Ye
IOAM man8 Justin Iurman
New IOAM6 encap type for routes Justin Iurman
Add, show, link, remove IOAM namespaces and schemas Justin Iurman
Import ioam6 uapi headers David Ahern
Update kernel headers David Ahern
ipneigh: add support to print brief output of neigh cache in tabular format Gokul Sivakumar
Merge branch 'bridge-vlan-global-mcast' into next David Ahern
bridge: vlan: add support for dumping router ports Nikolay Aleksandrov
bridge: vlan: add global mcast_querier option Nikolay Aleksandrov
bridge: vlan: add global mcast_startup_query_interval option Nikolay Aleksandrov
bridge: vlan: add global mcast_query_response_interval option Nikolay Aleksandrov
bridge: vlan: add global mcast_query_interval option Nikolay Aleksandrov
bridge: vlan: add global mcast_querier_interval option Nikolay Aleksandrov
bridge: vlan: add global mcast_membership_interval option Nikolay Aleksandrov
bridge: vlan: add global mcast_last_member_interval option Nikolay Aleksandrov
bridge: vlan: add global mcast_startup_query_count option Nikolay Aleksandrov
bridge: vlan: add global mcast_last_member_count option Nikolay Aleksandrov
bridge: vlan: add global mcast_mld_version option Nikolay Aleksandrov
bridge: vlan: add global mcast_igmp_version option Nikolay Aleksandrov
bridge: vlan: add global mcast_snooping option Nikolay Aleksandrov
bridge: vlan: add support to set global vlan options Nikolay Aleksandrov
bridge: vlan: add support for vlan filtering when dumping options Nikolay Aleksandrov
bridge: vlan: add support to show global vlan options Nikolay Aleksandrov
bridge: vlan: skip unknown attributes when printing options Nikolay Aleksandrov
bridge: vlan: factor out vlan option printing Nikolay Aleksandrov
ip: bridge: add support for mcast_vlan_snooping Nikolay Aleksandrov
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
sched_min_granularity_ns and sched_migration_cost_ns are not
available for sysctl anymore. They can only altered via debugfs
if scheduler debugging is enabled.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
The warning point to a wiki page which is currently in construction.
This should give us the opportunity to add further information for
these users even if we do not provide updates anymore.
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
this fix the 500 internal server error becuase this file
was not installed by the patch that add the wiki links.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Full changelog as per https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.6.8:
Changes in version 0.4.6.8 - 2021-10-26
This version fixes several bugs from earlier versions of Tor. One
highlight is a fix on how we track DNS timeouts to report general
relay overload.
o Major bugfixes (relay, overload state):
- Relays report the general overload state for DNS timeout errors
only if X% of all DNS queries over Y seconds are errors. Before
that, it only took 1 timeout to report the overload state which
was just too low of a threshold. The X and Y values are 1% and 10
minutes respectively but they are also controlled by consensus
parameters. Fixes bug 40491; bugfix on 0.4.6.1-alpha.
o Minor features (fallbackdir):
- Regenerate fallback directories for October 2021. Closes
ticket 40493.
o Minor features (testing):
- On a testing network, relays can now use the
TestingMinTimeToReportBandwidth option to change the smallest
amount of time over which they're willing to report their observed
maximum bandwidth. Previously, this was fixed at 1 day. For
safety, values under 2 hours are only supported on testing
networks. Part of a fix for ticket 40337.
- Relays on testing networks no longer rate-limit how frequently
they are willing to report new bandwidth measurements. Part of a
fix for ticket 40337.
- Relays on testing networks now report their observed bandwidths
immediately from startup. Previously, they waited until they had
been running for a full day. Closes ticket 40337.
o Minor bugfix (onion service):
- Do not flag an HSDir as non-running in case the descriptor upload
or fetch fails. An onion service closes pending directory
connections before uploading a new descriptor which can thus lead
to wrongly flagging many relays and thus affecting circuit building
path selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha.
- Improve logging when a bad HS version is given. Fixes bug 40476;
bugfix on 0.4.6.1-alpha.
o Minor bugfix (CI, onion service):
- Exclude onion service version 2 Stem tests in our CI. Fixes bug 40500;
bugfix on 0.3.2.1-alpha.
o Minor bugfixes (compatibility):
- Fix compatibility with the most recent Libevent versions, which no
longer have an evdns_set_random_bytes() function. Because this
function has been a no-op since Libevent 2.0.4-alpha, it is safe
for us to just stop calling it. Fixes bug 40371; bugfix
on 0.2.1.7-alpha.
o Minor bugfixes (onion service, TROVE-2021-008):
- Only log v2 access attempts once total, in order to not pollute
the logs with warnings and to avoid recording the times on disk
when v2 access was attempted. Note that the onion address was
_never_ logged. This counts as a Low-severity security issue.
Fixes bug 40474; bugfix on 0.4.5.8.
Since we configure Tor to use libseccomp, the latter has been updated
for kernel 5.15 as well, hence we need to ship Tor either way.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Release annnouncement as per https://github.com/seccomp/libseccomp/releases/tag/v2.5.3:
Version 2.5.3 - November 5, 2021
Update the syscall table for Linux v5.15
Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
Document that seccomp_rule_add() may return -EACCES
Fix issues with test 11-basic-basic_errors on old kernels (API level < 5)
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
- jwhois being replaced with whois
- Removal of jwhois lfs, rootfile and assoicated patch files.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
- This whois client is being actively maintained. This version 5.5.10 was released on
June 6th 2021 and regular updates have been ocurring several times per year.
- This client has all of its default whois servers compiled into it. These can be seen
by reading the source files in the tarball.
- Therefore the whois.conf file is available for any additional servers that are decided
to be required but as provided is empty.
- Installed on a vm testbed and worked to identify the details of ip addresses. Selecting
an IP in the WUI logs screen also gets the ip information provided so it is working
well with the WUI.
Tested-by:Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
- Update from 2.3.0 to 2.3.2
- Update rootfile
- Changelog is too large to include here. Details can be found in the changes.txt file in
the source tarball.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
- Update from 3.7.1 to 3.7.2
- Update of rootfile not required
- Changelog
Release 3.7.2 (2021-06-08)
* Added a secondary check so if a mkdir request fails with EPERM an access request
will be tried - returning EEXIST if the access was successful.
Fixes: https://github.com/libfuse/sshfs/issues/243
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
- Update from 1.7a (2013) to 1.22c (2021)
- Update rootfile
- Changelog is too large to include here. Full details can be read in the ChangeLog file
in the source tarball
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
- Update from 5.11 to 5.14
- Update of rootfile not required
- Changelog
Noteworthy changes in release 5.14 (2021-09-02)
* Improvements
* Implemented decoding of memfd_secret and quotactl_fd syscalls,
introduced in Linux 5.14.
* Enhanced prctl syscall decoding.
* Enhanced decoding of IFLA_* netlink attributes.
* Enhanced decoding of MDBA_ROUTER_PATTR_* mdb router port netlink attributes.
* Updated lists of BPF_*, IORING_*, MADV_*, MOUNT_ATTR_*, SCTP_*,
and UFFD_* constants.
* Updated lists of ioctl commands from Linux 5.14.
* Bug fixes
* Fixed build using bionic libc.
Noteworthy changes in release 5.13 (2021-07-18)
* Improvements
* Print netlink data in a more structured way.
* Implemented decoding of NT_PRSTATUS and NT_FPREGSET regsets
of PTRACE_GETREGSET and PTRACE_SETREGSET requests.
* Implemented decoding of regs argument of PTRACE_GETREGS, PTRACE_GETREGS64,
PTRACE_SETREGS, PTRACE_SETREGS64, PTRACE_GETFPREGS, and PTRACE_SETFPREGS
requests.
* Implemented powerpc System Call Vectored ABI support.
* Implemented decoding of landlock_add_rule, landlock_create_ruleset,
and landlock_restrict_self syscalls introduced in Linux 5.13.
* Enhanced decoding of perf_event_open syscall.
* Updated lists of BPF_*, IORING_*, KEXEC_*, KEY_*, KVM_*, NT_*, PR_*,
PTRACE_*, RTM_*, RTPROT_*, TRAP_*, UFFD_*, UFFDIO_*, and V4L2_* constants.
* Updated lists of ioctl commands from Linux 5.13.
* Portability
* On powerpc and powerpc64, linux kernel >= 2.6.23 is required.
Older versions without a decent PTRACE_GETREGS support will not work.
Noteworthy changes in release 5.12 (2021-04-26)
* Improvements
* Implemented --secontext[=full] option to display SELinux contexts.
* Implemented decoding of mount_setattr syscall introduced in Linux 5.12.
* Updated decoding of IFLA_BRPORT_* netlink attributes to match Linux 5.12.
* Updated lists of DEVCONF_*, IORING_*, KVM_*, MPOL_*, MTD_*, NFT_MSG_*,
RESOLVE_*, RTM_*, ST_*, and V4L2_* constants.
* Updated lists of ioctl commands from Linux 5.12.
* Bug fixes
* Fixed build using bionic libc.
* Portability
* Added binutils 2.36 support to --enable-mpers builds.
- More details of the above changes can be found in the ChangeLog file in the source
tarball
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
- Install libuv lfs and rootfile
- Add libuv to make.sh
- Tested by running bind utilities on a vm testbed
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
- Update from 9.11.32 to 9.16.22
- 9.11 is an ESV (Extended Support Version) that will go EOL in December 2021
9.16 is the replacement ESV whose EOL is not yet defined but will be at least 4 years
so should be supported until at least March 2024 as the 9.16 branch was started in 2020
- Update rootfile
- libuv is now required both to build the bind libraries and for the running of the
utilities.
- Changelog is difficult to define here as this is a change of branch from 9.11 to 9.16
both of which have been running in parallel. However all the changes from the start of
9.16.0 can be found in the CHANGES file in the source tarball.
- nslookup, host and dig utilities tested out by installing this on a vm testbed. All
these utilities worked as the previous version
nsupdate was not able to be tested other than confirming that running nsupdate
opened an interactive session. This utility would be good to be tested by someone
familiar with how to run it.
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Restarting the firewall is not necessary during the upgrade procedure,
and the user is asked to reboot the machine afterwards either way.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
