Adolf Belka
61d7aaa3ef
samba: Update to version 4.15.5
...
- Update from 4.14.6 to 4.15.5
- Update of rootfile
- Changelog is too long to include everything. Full details can be found in the
WHATSNEW.txt file in the source tarball. The following highlights those releases
that were security releases. The other releases had a range of bug fixes.
4.15.5 is a security release and includes the following CVE fixes
o CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target
of a symlink exists.
https://www.samba.org/samba/security/CVE-2021-44141.html
o CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module.
https://www.samba.org/samba/security/CVE-2021-44142.html
o CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks.
https://www.samba.org/samba/security/CVE-2022-0336.html
4.15.2 was a security release and included the following CVE fixes
o CVE-2016-2124: SMB1 client connections can be downgraded to plaintext
authentication.
https://www.samba.org/samba/security/CVE-2016-2124.html
o CVE-2020-25717: A user on the domain can become root on domain members.
https://www.samba.org/samba/security/CVE-2020-25717.html
(PLEASE READ! There are important behaviour changes described)
o CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued
by an RODC.
https://www.samba.org/samba/security/CVE-2020-25718.html
o CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos
tickets.
https://www.samba.org/samba/security/CVE-2020-25719.html
o CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers
(eg objectSid).
https://www.samba.org/samba/security/CVE-2020-25721.html
o CVE-2020-25722: Samba AD DC did not do suffienct access and conformance
checking of data stored.
https://www.samba.org/samba/security/CVE-2020-25722.html
o CVE-2021-3738: Use after free in Samba AD DC RPC server.
https://www.samba.org/samba/security/CVE-2021-3738.html
o CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability.
https://www.samba.org/samba/security/CVE-2021-23192.html
4.14.12 was a security release and included the following CVE fixes
o CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module.
https://www.samba.org/samba/security/CVE-2021-44142.html
o CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks.
https://www.samba.org/samba/security/CVE-2022-0336.html
4.14.10 was a security release and included the following CVE fixes
o CVE-2016-2124: SMB1 client connections can be downgraded to plaintext
authentication.
https://www.samba.org/samba/security/CVE-2016-2124.html
o CVE-2020-25717: A user on the domain can become root on domain members.
https://www.samba.org/samba/security/CVE-2020-25717.html
(PLEASE READ! There are important behaviour changes described)
o CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued
by an RODC.
https://www.samba.org/samba/security/CVE-2020-25718.html
o CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos
tickets.
https://www.samba.org/samba/security/CVE-2020-25719.html
o CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers
(eg objectSid).
https://www.samba.org/samba/security/CVE-2020-25721.html
o CVE-2020-25722: Samba AD DC did not do suffienct access and conformance
checking of data stored.
https://www.samba.org/samba/security/CVE-2020-25722.html
o CVE-2021-3738: Use after free in Samba AD DC RPC server.
https://www.samba.org/samba/security/CVE-2021-3738.html
o CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability.
https://www.samba.org/samba/security/CVE-2021-23192.html
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 12:02:36 +00:00
Adolf Belka
6ba00f50c4
sdl2: Update to version 2.0.20
...
- Update from 2.0.18 to 2.0.20
- Update of rootfile
- Changelog
2.0.20:
General:
* SDL_RenderGeometryRaw() takes a pointer to SDL_Color, not int. You can cast color
data in SDL_PIXELFORMAT_RGBA32 format (SDL_PIXELFORMAT_ABGR8888 on little endian
systems) for this parameter.
* Improved accuracy of horizontal and vertical line drawing when using OpenGL or
OpenGLES
* Added the hint SDL_HINT_RENDER_LINE_METHOD to control the method of line drawing
used, to select speed, correctness, and compatibility.
Windows:
* Fixed size of custom cursors
Linux:
* Fixed hotplug controller detection, broken in 2.0.18
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 12:02:21 +00:00
Peter Müller
909732dd80
Core Update 165: Ship zstd
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 12:01:57 +00:00
Adolf Belka
0c18a79b9a
zstd: Update to version 1.5.2
...
- Update from 1.5.1 to 1.5.2
- Update of rootfile
- Changelog
v1.5.2 (Jan, 2022)
perf: Regain Minimal memset()-ing During Reuse of Compression Contexts (@Cyan4973, #2969 )
build: Build Zstd with `noexecstack` on All Architectures (@felixhandte, #2964 )
doc: Clarify Licensing (@terrelln, #2981 )
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 12:01:49 +00:00
Peter Müller
87d4ed3ec6
Core Update 165: Ship manualpages
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 12:00:47 +00:00
Adolf Belka
2b3a9bed2d
manualpages: Update to include addon help links for addons with menu entries
...
- Some addons have menu entries and currentlky these do not have any links to their
help pages
- Ran check_manualpages and confirmed that all links to wiki pages are existing.
- Tested for guardian and wio
Tested-by: Adolf Belka <adolf.belka@ipfire.org >
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:59:59 +00:00
Peter Müller
59b79db94b
Core Update 165: Ship OpenSSL
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:59:32 +00:00
Peter Müller
cab3054288
OpenSSL: Update to 1.1.1m
...
Full changelog as per https://www.openssl.org/news/cl111.txt :
Changes between 1.1.1l and 1.1.1m [14 Dec 2021]
*) Avoid loading of a dynamic engine twice.
[Bernd Edlinger]
*) Fixed building on Debian with kfreebsd kernels
[Mattias Ellert]
*) Prioritise DANE TLSA issuer certs over peer certs
[Viktor Dukhovni]
*) Fixed random API for MacOS prior to 10.12
These MacOS versions don't support the CommonCrypto APIs
[Lenny Primak]
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-05 11:59:24 +00:00
Roberto Peña
b9e613e405
wio: Add Spanish language file
...
- Update of lfs
- Update of rootfile
- Addition of Spanish file provided by Roberto Peña (listed as author)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
2022-02-05 11:59:04 +00:00
Peter Müller
8ed905e612
Core Update 165: Ship p11-kit
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:58:28 +00:00
Adolf Belka
0778de9200
p11-kit: Update to version 0.24.1
...
- Update from 0.24.0 to 0.24.1
- Update of rootfile not required
- Changelog
0.24.1 (stable)
* rpc: Support protocol version negotiation [PR#371, PR#385]
* proxy: Support copying attribute array recursively [PR#368]
* Link libp11-kit so that it cannot unload [PR#383]
* Translation improvements [PR#381]
* Build fixes [PR#372, PR#373, PR#375, PR#377, PR#384, PR#407]
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:58:04 +00:00
Peter Müller
aee15210dd
Core Update 165: Ship mdadm
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:57:44 +00:00
Adolf Belka
1b9489b017
mdadm: Update to version 4.2
...
- Update from 4.1 to 4.2
- Update of rootfile not required
- Changelog is no longer updated. The package directs you to the git commits to find
the changes. https://git.kernel.org/pub/scm/utils/mdadm/mdadm.git/log/
- Announcement of update says-
The release includes more than two years of development and bugfixes,
so it is difficult to remember everything. Highlights include
enhancements and bug fixes including for IMSM RAID, Partial Parity
Log, clustered RAID support, improved testing, and gcc-9 support.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:57:27 +00:00
Peter Müller
7c06760810
Start Core Update 165
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
2022-02-05 11:56:12 +00:00
Arne Fitzenreiter
66ea201513
checkrootfiles: exclude some rust paks and fix armv6l
...
some new rust packages contain files with x86_64 or aarch64 on
all archictectures. They are now excluded from check.
also this fix the check for armv6l.
2022-02-05 08:59:08 +00:00
Michael Tremer
7bf1468417
core164: Ship diffutils
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-03 08:30:01 +00:00
Michael Tremer
04888872b7
diffutils: Update to 3.8
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-03 08:29:46 +00:00
Michael Tremer
03ba4b2df2
gdb: Update to 11.2
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-03 08:29:35 +00:00
Michael Tremer
c053efdcd1
Merge remote-tracking branch 'pmueller/temp-c164-development' into next
2022-02-02 19:46:13 +00:00
Michael Tremer
fb28b637ae
rust-pyo3: New package.
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
cd7cb2c36f
rust-indoc: Rootfile update.
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Michael Tremer
84fda83948
rust-paste: Update to 1.0.3
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Michael Tremer
79edfa4ba2
rust-indoc: Upgrade to version 1.0.3
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
ac7f39fcc6
rust-dirs: Commit accidenty forgotten patch.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
b870fa68b1
rust-pyo3-macros: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
d2bd411403
rust-pyo3-macros-backend: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
68051dc5ff
rust-pyo3-build-config: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
3f0d5d3612
rust-inventory: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
90490f8813
rust-inventory-impl: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
b6c8f86e43
rust-ghost: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
d6f294fb16
rust-ctor: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
f72d049dc3
rust-paste: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
92ef302000
rust-paste-impl: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
d9c87622a6
rust-parking_lot: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
eda914944f
rust-parking_lot_core: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
1bd5018994
rust-smallvec: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
202602e0ad
rust-lock_api: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
a75c2b24a6
rust-instant: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
474ee7402f
rust-indoc: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
4c313740a1
rust-indoc-impl: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
f03b79b17b
rust-proc-macro-hack: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
216ac33738
rust-unindent: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
1cdeadd59a
rust-trybuild: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
deb6672b54
rust-serde_derive: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:27 +00:00
Stefan Schantl
e837da22af
rust-toml: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
e831bad889
rust-termcolor: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
f51709b480
rust-once_cell: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
9fff2c63ec
rust-glob: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
3749286cce
rust-tempdir: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00
Stefan Schantl
d1abeb8e44
rust-remove_dir_all: New package.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2022-02-02 19:43:26 +00:00