Commit Graph

20323 Commits

Author SHA1 Message Date
Adolf Belka
90a3a2b88f slang: Update to version 2.3.3
- Update from version 2.3.2 to 2.3.3
- Update of rootfile
- Changelog
2.3.3
	1. src/slposdir.c: stat_file now support open file descriptors, in
	   addition to filenames.
	2. src/sltoken.c: Ignore the \r character in multiline strings that
	   appear to have CRLF line terminators.  (Manfred Hanke)
	3. *.tm: minor documentation updates
	4. src/slang.h: SLANG_VERSION_STRING was missing the "pre" prefix.
	5. src/sltermin.c: Added support for TERMINFO_DIRS (based upon a patch
	   forwarded by Jörg Thalheim)
	6. src/slarray.c: src/slarray.c: some integer overflow checks were
	   resulting undefined behavior (reported by Sergey)
	7. modules/csv.sl: Strip leading/trailing whitespace from column names
	8. src/slsmg.c,sldisply.c: Removed static buffers with sizes dependent
	   upon SLTT_MAX_SCREEN_ROWS/COLS in favor of dynamically allocated
	   ones.
	9. modules/chksum-module: added CRC-8,16,32 checksums to the chksum module
	10. modules/csv.sl: An error message in the form of a dollar-string
	    was not marked as such.
	11. modules/csv.sl: Added support for empty CSV files
	12. src/sltime.c: The timegm function will ignore the tm_wday and
	    tm_yday fields, and instead use the tm_mon and tm_mday fields.
	13. modules/mkfiles/makefile.all:  Added a target for chksum_crc.o for
	    win32/64 platforms (see change #9)
	14. modules/chksum-module.c: The memset function was used with the
	    wrong structure size causing a buffer overflow on 32 bit systems.
	15. src/terminfo/parsecaps.sl: Tweaked an auto-generated comment
	    produced by parsecaps.sl to produce a more deterministic build
	    (Ian Rogers).
	16. src/slarray.c: Changed two instances of index errors to throw an
	    IndexError exception instead of InvalidParmError exception.
	17. src/slposdir.c; The statvfs function was returning a struct with
	    duplicated f_bsize fields.
	18. *.c: In switch statements, changed the /* drop */ comment to /*
	    fall through */ to avoid gcc-8 warnings.
	19. modules/csv.sl: If a comment string appears at the start of a line
	    forming a multiline string, then treat it as part of the string.
	20. slsh/lib/timestamp.sl:  Added a function timestamp_parse that parses
	    strings such as `Thu May 14 18:05:05 2020` and returns the number
	    of seconds since the Unix epoch.
	21. src/slregexp.c: Added \D (non-digit), \s (whitespace), and \S
	    (non-whitespace).
	22. src/slstrops.c: Added a compiled regexp cache
	23. src/slstdio.c: Added trim qualifier to the fgetlines intrinsic:
	      ;trim=1 ==> trim trailing whitespace
	      ;trim=2 ==> trim leading whitespace
	      ;trim=3 ==> trim leading and trailing whitespace
	24. slsh/lib/timestamp.sl: When matching a regexp to a timestamp,
	    start with the RE that was used in the previous match.
	25. Another timestamp RE tweak to pickup additional irregular forms
	26. modules/csv.sl: If a CSV file has a byte-order mark (BOM), ignore it.
	27. src/sldisply.c: Increased the buffer size for the SLtt_tgoto
	    function to allow for larger terminfo strings
	28. modules/Makefile.in: Added STATS_OBJS to the clean target
	29. src/slstrops.c: The is_substr function was not handling a NULL
	    argument
	30. slsh/lib/timestamp.sl: Corrected a regular expression for a
	    timestamp with "Z" as the timezone.
	31. modules/csv-module.c: Fields with an embedded \r were not being
	    properly handled.
	32. src/slarray.c: Improved the speed of multi-dimensional array
	    indexing by about a factor of 2
	33. slsh/lib/timestamp.sl: The computation of leap days was incorrect
	    for some years
	34. src/slang.h:  Added `typedef void (*SLFVOID_STAR)(void)', which
	    will replace FVOID_STAR in version 3.  The library code was
	    updated to use this.
	35. slsh/lib/fswalk.sl: Added an optional callback argument to the
	    fswalk that is called when leaving a directory.
	36. modules/termios-module.c: Avoid a potential problem with the
	    tcgetpgrp intrinsic in the unlikely case that sizeof(pid_t) is
	    larger than sizeof(int).
	37. src/slarray.c: Simplified the range checking in the
	    linear_get_data_addr function and removed unused code.
	38. Updated the copyright year
	39. slsh/lib/fswalk.sl: Change #35 regression: The get_stat function
	    was being called with the wrong number of arguments.
	40. src/slarith.c: Additional binary arithmetic optimizations involving
	    arrays of char and short.
	41. src/slang.c,slarray.c: Added qualifier support to the array_map
	    function.
	42. src/slang.c: Flagged the use of an uninitialized variable as soon
	    as it is accessed ("pushed") rather than waiting until it is used
	    ("popped").  Fixed a bug in slsh/lib/setfuns.sl:union that was
	    detected by this change.
	43. src/sl-feat.h: Floating point support by the interpreter is now
	    required.  The library has not compiled without it for a long
	    time.  As such, this option is no longer available.
	44. */test/*.sl: Surrounded regression test code that makes use of
	    complex numbers with `#ifexists Complex_Type' so that they run
	    when the interpreter is compiled without complex variable support.
	45. src/slarray.c: The _pSLarray1d_push_elem needed to be exposed when
	    compiling the interpreter without optimization.
	46. src/slarith.c,...: Rewrote the various macros used by this file to
	    simplify the code, permit better optimization, and easier
	    maintenance.  Some of the loops were also unrolled.
	47. src/slarray.c: Made the array bounds index checking code more
	    uniform for better readability.
	48. src/slarray.c: The previous change introduced a bug that caused
	    array indexing with no (empty) indices to fail.
	49. modules/chksum-module.c: When a CRC object went out of scope
	    without being closed, it would leave its value on the stack.
	50. slsh/lib/process.sl: If the file descriptor that is used to
	    communicate messages from the child process back to the parent is
	    requested by the caller, then dup an unused one.  To facilitate
	    testing, two additional hooks were added: exit_hook and exec_hook.
	51. slsh/lib/cmdopt.sl: If a command line option is associated with a
	    callback function, and the value of the command line argument is
	    optional, pass the default value to the callback if not given on
	    the command line.
	52. modules: Added cumulant function to the stats module; updated
	    regression scripts/unit tests for better code coverage; fixed a
	    bug in the _zlib_inflate_reset function where deflateReset was
	    being called instead of inflateReset.
	53. slsh/lib: Updated unit/regression tests for better coverage
	54. slsh/lib/print.sl: Use >= instead of > when comparing the number
	    of screen rows to determine if the pager should be used.
	55. modules/chksum-module: Added sha224, sha256, sha384, and sha512
	    algorithms kindly provided by Jakob Stierhof
	56. modules/chksum-module: Added HMAC message authentication code
	    algorithm (Jakob Stierhof)
	57. modules/mkfiles/makefile.all: Added chksum_sha2 to the non-Unix
	    makefile.
	58. src/slgetkey.c: Use memmove instead of SLMEMCPY to avoid issues
	    with coping to an overlapping buffer. (William Ahern)
	59. modules/pcre.sl: The options qualifier was not being properly
	    handled by the pcre_matches function.
	60. src/_slang.h,etc: replaced the dependence of the internal
	    _pSLang_get_run_stack* functions, which return absolute pointers,
	    in favor of relative offsets.
	61. src/slang.c: Made the run-time stack dynamically growable up to a
	    maximum configured size.
	62. modules/: Documentation updates
	63. src/: Added _set_bos/f_compile_hook functions to specify a
	    function to get called when a statement or function gets compiled.
	64. src/sllimits.h: Reduced the initial stack size to a value similar
	    to what it was before change #61.
	65. src/slarrfun.c: array_swap was returning a copy of the input array
	    when when swapping an array element with itself (bug reported by
	    Jakob Stierhof)
	66. modules/csv.sl: If _csv_decode_row fails, include in the error
	    message the line number of the file where the error was detected
	67. modules/socket-module.c: Corrected an error message for the bind
	    function
	68. Updated the copyright year
	69. Added slcov script which generates lcov-compatible code coverage
	    data
	70. autoconf/aclocal.m4: Updated to v0.3.4.1
	71. slsh/Makefile.in: Changed the order of the linker flags to avoid a
	    linking problem on MacPorts (Ryan Schmidt)
	72. slsh/lib/cmdopt.sl: Corrected a usage message
	73. src/slposio.c: Added the flock function for the creation of
	    advisory locks
	74. src/slcurses.h: Added 'extern "C"' to enable the file to be used
	    in C++ programs; also marked some variables as dynamically
	    exportable by using SL_EXTERN (Gisle Vanem)
	75. src/slstrops.c: "%0*" was being flagged as invalid by the sprintf
	    function (Jakob Stierhof)
	76. modules/csv.sl: When writing a CSV file with a single row, convert
	    any scalar data values to single element arrays.
	77. src/Makefile.in, slsh/Makefile.in: Addressed some dependency
	    problems found by `make --shuffle` that were causing parallel
	    builds to fail (Sergei Trofimovich)
	78. src/slarray.c: Flag out-of-range indexing of indefinite ranges
	    involving negative indexes,  e.g., x = [1];  y = x[[-2:]];
	    Previousely this resulted in y = [1,1] instead of an error.
	79. modules/csv.sl: Avoid indexing an empty array with a negative
	    index (detected by change #78)
	80. src/slarray:c: #78 was flagging x[[:-2]] as invalid instead of
	    producing an empty array for x=[1]
	81. src/slarray.c: Tweaked the handling of negative indices in
	    indefinite ranges such that x[[:-i]] will produce an empty array
	    wheneve i > length(x)
	82. src/sltermin.c: Added support for so-called user-defined terminfo
	    extensions.  In particular, if the terminfo file defines RGB=true,
	    then truecolor support will be enabled.
	83. src/sldisply.c: The Has_True_Color variable was not defined for 32
	    bit systems
	84. modules/csv.sl: Improved read speed for large CSV files
	85. src/test/posixio.sl: Do not test the flock function using an NFS
	    mounted direcory, which requires lockd to be running on the server

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-04-18 21:15:28 +00:00
Peter Müller
0461a7f579 Core Update 175: Ship pciutils
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-18 21:15:10 +00:00
Adolf Belka
3856fa45c9 pciutils: Update to version 3.9.0
- Update from version 3.8.0 to 3.9.0
- Update of rootfile
- Changelog
    3.9.0.
	* We decode Compute Express Link (CXL) capabilities.
	* The tree mode of lspci is now compatible with filtering options.
	* When setpci is used with a named register, it checks whether
	  the register is present in the particular header type.
	* Linux: The intel-conf[12] back-ends prefer to use ioperm() instead
	  of iopl() to gain access to I/O ports.
	* Windows: We have two new back-ends thanks to Pali Rohár.
	  One uses the NT SysDbg interface, the other uses kldbgdrv.sys
	  (which is a part of the Microsoft WinDbg tool).
	* Windows: We support building libpci as a DLL. Also, Windows
	  binaries now include meta-data with version.
	* Hurd: The Hurd back-end works again.
	* mmio-conf1(-ext): Added a new back-end implementing the intel-conf1
	  interface over MMIO. This is useful on some ARM machines, but it
	  requires manual configuration of the MMIO addresses.
	* As usually, updated pci.ids to the current snapshot of the database.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-04-18 21:14:57 +00:00
Peter Müller
dc93dd9d19 Core Update 175: Ship and restart OpenSSH
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-18 21:14:06 +00:00
Adolf Belka
48af3df725 openssh: Update to version 9.3p1
- Update from version 9.2p1 to 9.3p1
- Update of rootfile not required
- Removal of patch as this was only required for i586 builds which are no longer done in
   IPFire
- Changelog
9.3p1 (2023-03-15)
  This release fixes a number of security bugs.
    Security
	This release contains fixes for a security problem and a memory
	safety problem. The memory safety problem is not believed to be
	exploitable, but we report most network-reachable memory faults as
	security bugs.
	 * ssh-add(1): when adding smartcard keys to ssh-agent(1) with the
	   per-hop destination constraints (ssh-add -h ...) added in OpenSSH
	   8.9, a logic error prevented the constraints from being
	   communicated to the agent. This resulted in the keys being added
	   without constraints. The common cases of non-smartcard keys and
	   keys without destination constraints are unaffected. This problem
	   was reported by Luci Stanescu.
	 * ssh(1): Portable OpenSSH provides an implementation of the
	   getrrsetbyname(3) function if the standard library does not
	   provide it, for use by the VerifyHostKeyDNS feature. A
	   specifically crafted DNS response could cause this function to
	   perform an out-of-bounds read of adjacent stack data, but this
	   condition does not appear to be exploitable beyond denial-of-
	   service to the ssh(1) client.
	   The getrrsetbyname(3) replacement is only included if the system's
	   standard library lacks this function and portable OpenSSH was not
	   compiled with the ldns library (--with-ldns). getrrsetbyname(3) is
	   only invoked if using VerifyHostKeyDNS to fetch SSHFP records. This
	   problem was found by the Coverity static analyzer.
    New features
	 * ssh-keygen(1), ssh-keyscan(1): accept -Ohashalg=sha1|sha256 when
	   outputting SSHFP fingerprints to allow algorithm selection. bz3493
	 * sshd(8): add a `sshd -G` option that parses and prints the
	   effective configuration without attempting to load private keys
	   and perform other checks. This allows usage of the option before
	   keys have been generated and for configuration evaluation and
	   verification by unprivileged users.
    Bugfixes
	 * scp(1), sftp(1): fix progressmeter corruption on wide displays;
	   bz3534
	 * ssh-add(1), ssh-keygen(1): use RSA/SHA256 when testing usability
	   of private keys as some systems are starting to disable RSA/SHA1
	   in libcrypto.
	 * sftp-server(8): fix a memory leak. GHPR363
	 * ssh(1), sshd(8), ssh-keyscan(1): remove vestigal protocol
	   compatibility code and simplify what's left.
	 * Fix a number of low-impact Coverity static analysis findings.
	   These include several reported via bz2687
	 * ssh_config(5), sshd_config(5): mention that some options are not
	   first-match-wins.
	 * Rework logging for the regression tests. Regression tests will now
	   capture separate logs for each ssh and sshd invocation in a test.
	 * ssh(1): make `ssh -Q CASignatureAlgorithms` work as the manpage
	   says it should; bz3532.
	 * ssh(1): ensure that there is a terminating newline when adding a
	   new entry to known_hosts; bz3529
    Portability
	 * sshd(8): harden Linux seccomp sandbox. Move to an allowlist of
	   mmap(2), madvise(2) and futex(2) flags, removing some concerning
	   kernel attack surface.
	 * sshd(8): improve Linux seccomp-bpf sandbox for older systems;
	   bz3537

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-18 21:12:55 +00:00
Peter Müller
cd3b3c74f5 Core Update 175: Ship newt
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-18 21:10:10 +00:00
Adolf Belka
7ace13e5c1 newt: Update to version 0.52.23
- Update from version 0.52.21 to 0.52.23
- Update of rootfile
- Changelog
0.52.23
	- fix automatic height of menu/list in whiptail (broken in 0.52.22)
	- fix automatic width of whiptail --yesno box
	- fix automatic width in whiptail with unicode characters
	- fix automatic width with whiptail --noitem and --notags options
	- fix spacing with longer tags in whiptail
	- avoid overlapping backtitle in whiptail with automatic height
0.52.22
	- fix crash in whiptail with new libpopt
	- switch from usleep to nanosleep (Rosen Penev)
	- fix libnewt.pc to enable static linking (Alexey Sheplyakov)
	- fix LDFLAGS order in snack linking (Sam James)
	- use CFLAGS when compiling snack
	- improve configure.ac (Thomas Kuehne)
	- install header and libnewt.pc with shared library (Michael Olbrich)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-04-18 21:09:58 +00:00
Peter Müller
4c3c2f48a4 Core Update 175: Ship libcap
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-18 21:09:33 +00:00
Adolf Belka
00bf577610 libcap: Update to version 2.67
- Update from version 2.66 to 2.67
- Update of rootfile
- Changelog
Release notes for 2.67
    Replace use of fgrep with grep -F (POSIX grep flags preferred by GNU grep) - patch
     from David Seifert.
    Added SPDX identifiers to License file(s). Hopefully this will help the various
     robots out there correctly identify the longstanding licenses for libcap and friends.
      (Bug: 216609 reported by Günther Noack)
    Started down the rabbit hole of trying to address (Bug: 216610 reported by Günther
     Noack on behalf of Michael Stapelberg)
        The basic issue is how to link C code with Go psx without using CGo. This is all
         a low level hackery. If you are interested, browse the source.
    Correct for bad whatis entries in man pages (this was throwing a Debian build test,
     detail)
        Also reviewed man pages and addressed cross linkage issues (Bug: 216585)
        Cleaned up some README.md files (made a github mirror now just so I can
         automatically render them).
    Changed meaning of DYNAMIC=no builds.
        This now builds everything with static linking except for libc. The reason for
         this exception is explained in the commit message.
    Inserted demonstration exploit code in capso.so to support article.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-04-18 21:08:50 +00:00
Peter Müller
00b379bb4d Core Update 175: Ship tzdata
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-18 21:08:19 +00:00
Adolf Belka
127e0b465b tzdata: Update to version 2023b
- Update from version 2022g to 2023b
- Update of rootfile not required
- Changelog
Release 2023b - 2023-03-23 19:50:38 -0700
  Briefly:
    Lebanon delays the start of DST this year.
  Changes to future timestamps
    This year Lebanon springs forward April 20/21 not March 25/26.
    (Thanks to Saadallah Itani.)
Release 2023a - 2023-03-22 12:39:33 -0700
  Briefly:
    Egypt now uses DST again, from April through October.
    This year Morocco springs forward April 23, not April 30.
    Palestine delays the start of DST this year.
    Much of Greenland still uses DST from 2024 on.
    America/Yellowknife now links to America/Edmonton.
    tzselect can now use current time to help infer timezone.
    The code now defaults to C99 or later.
    Fix use of C23 attributes.
  Changes to future timestamps
    Starting in 2023, Egypt will observe DST from April's last Friday
    through October's last Thursday.  (Thanks to Ahmad ElDardiry.)
    Assume the transition times are 00:00 and 24:00, respectively.
    In 2023 Morocco's spring-forward transition after Ramadan
    will occur April 23, not April 30.  (Thanks to Milamber.)
    Adjust predictions for future years accordingly.  This affects
    predictions for 2023, 2031, 2038, and later years.
    This year Palestine will delay its spring forward from
    March 25 to April 29 due to Ramadan.  (Thanks to Heba Hamad.)
    Make guesses for future Ramadans too.
    Much of Greenland, represented by America/Nuuk, will continue to
    observe DST using European Union rules.  When combined with
    Greenland's decision not to change the clocks in fall 2023,
    America/Nuuk therefore changes from -03/-02 to -02/-01 effective
    2023-10-29 at 01:00 UTC.  (Thanks to Thomas M. Steenholdt.)
    This change from 2022g doesn't affect timestamps until 2024-03-30,
    and doesn't affect tm_isdst until 2023-03-25.
  Changes to past timestamps
    America/Yellowknife has changed from a Zone to a backward
    compatibility Link, as it no longer differs from America/Edmonton
    since 1970.  (Thanks to Almaz Mingaleev.)  This affects some
    pre-1948 timestamps.  The old data are now in 'backzone'.
  Changes to past time zone abbreviations
    When observing Moscow time, Europe/Kirov and Europe/Volgograd now
    use the abbreviations MSK/MSD instead of numeric abbreviations,
    for consistency with other timezones observing Moscow time.
  Changes to code
    You can now tell tzselect local time, to simplify later choices.
    Select the 'time' option in its first prompt.
    You can now compile with -DTZNAME_MAXIMUM=N to limit time zone
    abbreviations to N bytes (default 255).  The reference runtime
    library now rejects POSIX-style TZ strings that contain longer
    abbreviations, treating them as UTC.  Previously the limit was
    platform dependent and abbreviations were silently truncated to
    16 bytes even when the limit was greater than 16.
    The code by default is now designed for C99 or later.  To build in
    a C89 environment, compile with -DPORT_TO_C89.  To support C89
    callers of the tzcode library, compile with -DSUPPORT_C89.  The
    two new macros are transitional aids planned to be removed in a
    future version, when C99 or later will be required.
    The code now builds again on pre-C99 platforms, if you compile
    with -DPORT_TO_C89.  This fixes a bug introduced in 2022f.
    On C23-compatible platforms tzcode no longer uses syntax like
    'static [[noreturn]] void usage(void);'.  Instead, it uses
    '[[noreturn]] static void usage(void);' as strict C23 requires.
    (Problem reported by Houge Langley.)
    The code's functions now constrain their arguments with the C
    'restrict' keyword consistently with their documentation.
    This may allow future optimizations.
    zdump again builds standalone with ckdadd and without setenv,
    fixing a bug introduced in 2022g.  (Problem reported by panic.)
    leapseconds.awk can now process a leap seconds file that never
    expires; this might be useful if leap seconds are discontinued.
  Changes to commentary
    tz-link.html has a new section "Coordinating with governments and
    distributors".  (Thanks to Neil Fuller for some of the text.)
    To improve tzselect diagnostics, zone1970.tab's comments column is
    now limited to countries that have multiple timezones.
    Note that leap seconds are planned to be discontinued by 2035.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-04-18 21:08:07 +00:00
Peter Müller
e1363f62fd Core Update 175: Ship grep
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-18 21:07:50 +00:00
Adolf Belka
0f450c32f1 grep: Update to version 3.10
- Update from version 3.9 to 3.10
- Update of rootfile not required
- Changelog
* Noteworthy changes in release 3.10 (2023-03-22) [stable]
	** Bug fixes
	  With -P, \d now matches only ASCII digits, regardless of PCRE
	  options/modes. The changes in grep-3.9 to make \b and \w work
	  properly had the undesirable side effect of making \d also match
	  e.g., the Arabic digits: ٠١٢٣٤٥٦٧٨٩.  With grep-3.9, -P '\d+'
	  would match that ten-digit (20-byte) string. Now, to match such
	  a digit, you would use \p{Nd}. Similarly, \D is now mapped to [^0-9].
	  [bug introduced in grep 3.9]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-04-18 21:07:42 +00:00
Adolf Belka
385f7bd8ac elfutiles: Update to version 0.189
- Update from version 0.187 to 0.189
- Update of rootfile
- Changelog
Version 0.189 "Don't deflate!"
	configure: eu-nm, eu-addr2line and eu-stack can provide demangled symbols
	           when linked with libstdc++. Use --disable-demangler to disable.
	           A new option --enable-sanitize-memory has been added for msan
	           sanitizer support.
	libelf: elf_compress now supports ELFCOMPRESS_ZSTD when build against
	        libzstd
	libdwfl: dwfl_module_return_value_location now returns 0 (no return type)
	         for DIEs that point to a DW_TAG_unspecified_type.
	elfcompress: -t, --type= now support zstd if libelf has been build with
	             ELFCOMPRESS_ZSTD support.
	backends: Add support for LoongArch and Synopsys ARCv2 processors.
Version 0.188 "no section left behind"
	readelf: Add -D, --use-dynamic option.
	debuginfod-client: Add $DEBUGINFOD_HEADERS_FILE setting to supply outgoing
	                   HTTP headers. Add new function debuginfod_find_section.
	debuginfod: Add --disable-source-scan option.
	libdwfl: Add new function dwfl_get_debuginfod_client.
	         Add new function dwfl_frame_reg.
	         Add new function dwfl_report_offline_memory.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-04-18 21:06:57 +00:00
Peter Müller
e31074948b Core Update 175: Ship sqlite
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-18 20:59:49 +00:00
Adolf Belka
c453b48e9d sqlite: Update to version 3410200
- Update from version 3400100 to 3410200
- Update of rootfile not required
- Changelog
3.41.2 (2023-03-22):
    Multiple fixes for reads past the end of memory buffers (NB: reads not writes) in the
     following circumstances:
        When processing a corrupt database file using the non-standard SQLITE_ENABLE_STAT4
         compile-time option.
        In the CLI when the sqlite3_error_offset() routine returns an out-of-range value
         (see also the fix to sqlite3_error_offset() below).
        In the recovery extension.
        In FTS3 when processing a corrupt database file.
    Fix the sqlite3_error_offset() so that it does not return out-of-range values when
     reporting errors associated with generated columns.
    Multiple fixes in the query optimizer for problems that cause incorrect results for
     bizarre, fuzzer-generated queries.
    Increase the size of the reference counter in the page cache object to 64 bits to
     ensure that the counter never overflows.
    Fix a performance regression caused by a bug fix in patch release 3.41.1.
    Fix a few incorrect assert() statements.
3.41.1 (2023-03-10):
    Provide compile-time options -DHAVE_LOG2=0 and -DHAVE_LOG10=0 to enable SQLite to be
     compiled on systems that omit the standard library functions log2() and log10(),
     repectively.
    Ensure that the datatype for column t1.x in
     "CREATE TABLE t1 AS SELECT CAST(7 AS INT) AS x;" continues to be INT and is not
     NUM, for historical compatibility.
    Enhance PRAGMA integrity_check to detect when extra bytes appear at the end of an
     index record.
    Fix various obscure bugs reported by the user community. See the timeline of changes
     for details.
3.41.0 On 2023-02-21
    Query planner improvements:
        Make use of indexed expressions within an aggregate query that includes a
         GROUP BY clause.
        The query planner has improved awareness of when an index is a covering index
         and adjusts predicted runtimes accordingly.
        The query planner is more aggressive about using co-routines rather than
         materializing subqueries and views.
        Queries against the built-in table-valued functions json_tree() and json_each()
         will now usually treat "ORDER BY rowid" as a no-op.
        Enhance the ability of the query planner to use indexed expressions even if the
         expression has been modified by the constant-propagation optimization. (See
         forum thread 0a539c7.)
    Add the built-in unhex() SQL function.
    Add the base64 and base85 application-defined functions as an extension and include
     that extension in the CLI.
    Add the sqlite3_stmt_scanstatus_v2() interface. (This interface is only available if
     SQLite is compiled using SQLITE_ENABLE_STMT_SCANSTATUS.)
    In-memory databases created using sqlite3_deserialize() now report their filename as
     an empty string, not as 'x'.
    Changes to the CLI:
        Add the new base64() and base85() SQL functions
        Enhanced EXPLAIN QUERY PLAN output using the new sqlite3_stmt_scanstatus_v2()
         interface when compiled using SQLITE_ENABLE_STMT_SCANSTATUS.
        The ".scanstats est" command provides query planner estimates in profiles.
        The continuation prompt indicates if the input is currently inside of a string
         literal, identifier literal, comment, trigger definition, etc.
        Enhance the --safe command-line option to disallow dangerous SQL functions.
        The double-quoted string misfeature is now disabled by default for CLI builds.
         Legacy use cases can reenable the misfeature at run-time using the
         ".dbconfig dqs_dml on" and ".dbconfig dqs_ddl on" commands.
    Enhance the PRAGMA integrity_check command so that it detects when text strings in a
     table are equivalent to but not byte-for-byte identical to the same strings in the
     index.
    Enhance the carray table-valued function so that it is able to bind an array of BLOB
     objects.
    Added the sqlite3_is_interrupted() interface.
    Long-running calls to sqlite3_prepare() and similar now invoke the progress handler
     callback and react to sqlite3_interrupt().
    The sqlite3_vtab_in_first() and sqlite3_vtab_in_next() functions are enhanced so
     that they reliably detect if they are invoked on a parameter that was not selected
     for multi-value IN processing using sqlite3_vtab_in(). They return SQLITE_ERROR
     instead of SQLITE_MISUSE in this case.
    The parser now ignores excess parentheses around a subquery on the right-hand side
     of an IN operator, so that SQLite now works the same as PostgreSQL in this regard.
     Formerly, SQLite treated the subquery as an expression with an implied "LIMIT 1".
    Added the SQLITE_FCNTL_RESET_CACHE option to the sqlite3_file_control() API.
    Makefile improvements:
        The new makefile target "sqlite3r.c" builds an amalgamation that includes the
         recovery extension.
        New makefile targets "devtest" and "releasetest" for running a quick
         developmental test prior to doing a check-in and for doing a full release test,
         respectively.
    Miscellaneous performance enhancements.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Stefan Schantl <stefan.schantl@ipfire.org>
2023-04-18 20:59:34 +00:00
Adolf Belka
d8a10d15fd sdl2: Update to version 2.26.4
- Update from version 2.26.2 to 2.26.4
- Update of rootfile
- Changelog
2.26.4 Latest
    Fixed relative mouse motion over remote desktop on Windows
    Fixed using older game controller mappings on Linux
2.26.3
    Fixed infinite loop shutting down WGI controllers
    Fixed centering the D-pad on some Xbox controllers

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Stefan Schantl <stefan.schantl@ipfire.org>
2023-04-18 20:59:22 +00:00
Peter Müller
ab63449460 Core Update 175: Ship bind
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-18 20:58:36 +00:00
Matthias Fischer
0ddd17b790 bind: Update to 9.16.39
For details  see:
https://downloads.isc.org/isc/bind9/9.16.39/doc/arm/html/notes.html#notes-for-bind-9-16-39

"Notes for BIND 9.16.39
Feature Changes

    libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between libuv
    versions 1.35.0 and 1.40.0; the current recommended libuv version is
    1.40.0 or higher. New rules are now in effect for running with a
    different version of libuv than the one used at compilation time. These
    rules may trigger a fatal error at startup:

        Building against or running with libuv versions 1.35.0 and 1.36.0
        is now a fatal error.

        Running with libuv version higher than 1.34.2 is now a fatal error
        when named is built against libuv version 1.34.2 or lower.

        Running with libuv version higher than 1.39.0 is now a fatal error
        when named is built against libuv version 1.37.0, 1.38.0, 1.38.1,
        or 1.39.0.

    This prevents the use of libuv versions that may trigger an assertion
    failure when receiving multiple UDP messages in a single system call.
    [GL #3840]

Bug Fixes

    named could crash with an assertion failure when adding a new zone into
    the configuration file for a name which was already configured as a
    member zone for a catalog zone. This has been fixed. [GL #3911]"

    When named starts up, it sends a query for the DNSSEC key for each
    configured trust anchor to determine whether the key has changed. In
    some unusual cases, the query might depend on a zone for which the
    server is itself authoritative, and would have failed if it were sent
    before the zone was fully loaded. This has now been fixed by delaying
    the key queries until all zones have finished loading. [GL #3673]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
2023-04-18 20:57:06 +00:00
Peter Müller
89e25656af Start Core Update 175
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-17 08:48:39 +00:00
Arne Fitzenreiter
78218433ad core174: fix build of the u-boot initrd on aarch64
KVER was not defined so it has not build the initrd for u-boot.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-04-16 07:40:09 +00:00
Peter Müller
b7c958992d Core Update 174: Ship parse-func.pl
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-07 14:37:05 +00:00
Peter Müller
ca06e817b8 parse-func.pl: Adjust regular expression to changed 'tc' output
It is not clear at all why they choose to change the tool's output this
way in upstream commit 010a8388aea11e767ba3a2506728b9ad9760df0e, but
we'll have to make do with this.

Fixes: #13075
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-07 14:35:11 +00:00
Peter Müller
65df34a6f6 Do not mark migrate.pl as executable in Git
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-04 21:12:39 +00:00
Peter Müller
a201764e75 ovpnmain.cgi: Do not determine certificate expiry status for N2N connections
https://wiki.ipfire.org/devel/telco/2023-04-03

Fixes: #13066
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-04 20:25:55 +00:00
Peter Müller
d3a520fa68 Revert "e2fsprogs: Update to version 1.47.0"
This reverts commit 1f3f267021.

Symlink will remain in place to ensure the reverted version is always
shipped to our users, including those that have installed Core Update
174 (testing).

Fixes: #13073
Reported-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-04 20:04:11 +00:00
Peter Müller
7970d39372 Core Update 174: Ship ipblocklist-related changes
https://wiki.ipfire.org/devel/telco/2023-04-03

Cc: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-04-04 20:02:58 +00:00
Stefan Schantl
41d3d33dde update-ipblocklists: Fix loading new blocklists after update
* The script needs to run with root permissions in order to
  do the ipset operations. So remove code to drop the permissions
  on startup.

* Adjust execute calls to use the proper functions from
  general functions.

* Add some code to set the correct ownership (nobody:nobody) for
  changed files during script runtime.

Fixes #13072.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2023-04-04 19:59:23 +00:00
Adolf Belka
a84b9ed2fe header.pl: Add reference to colors.txt into header.pl
- With change of common css entries into header.pl with commit
   https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=b52a84ddc77f9db7e4ad7b129f21fbf528c6f990
   I had missed that color20 and color22 etc, that come from colors.txt, are not known in
   header.pl so that the alternate colours in tables were missing. Even though I tested the
   previous commit I obviously did not look well enough because I missed that the tables
   had no alternate colours. I just found it now when looking at Core Update 174 Testing.
- Confirmed by copying this version of header.pl into my CU174 Testing system and the
   alternate colour rows came back again as they should be. I am sure now that they are
   correct.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Tested-by: Bernhard Bitsch <bbitsch@ipfire.org>
2023-04-02 17:10:04 +00:00
Leo-Andres Hofmann
11f4726b0d graphs.pl: Make canvas fixed size and limit cpufreq color index
This fixes an issue where systems with many CPU cores
run out of usable graph colors and canvas area.
It also unifies the canvas size for all graphs.

Discussion: https://community.ipfire.org/t/cpu-freq-graph-not-working-with-i5-1235u/9396

Fixes: #12890

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2023-03-13 21:39:20 +00:00
Peter Müller
4ecaedf980 Core Update 174: Ship graphs.pl and getrrdimage.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-13 21:38:50 +00:00
Leo-Andres Hofmann
138b26e014 Drop support for entropy graph
Entropy data isn't collected anymore. See 8000bc0 for reference.

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2023-03-13 21:37:39 +00:00
Peter Müller
8370c82a58 haproxy: Update to 2.7.4
https://www.mail-archive.com/haproxy@formilux.org/msg43229.html

Reported-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-13 21:36:01 +00:00
Peter Müller
36aac41d61 Core Update 174: Ship wireless-regdb
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-12 20:46:51 +00:00
Peter Müller
a127e615ac wireless-regdb: Update to 2023-02-13
Please refer to
https://git.kernel.org/pub/scm/linux/kernel/git/sforshee/wireless-regdb.git/log/
for the list of commits since August 2022.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-12 20:46:03 +00:00
Adolf Belka
d8574ce738 Language files: Fixes bug#12701 - Line removed from proxy.cgi no longer needed in lang files
- v2 version that has only the removed line in the language files diffs
- Line removed from de, en, es & fr
- No translations had been done for the other languages for that line.

Fixes: Bug#12701
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-12 20:41:51 +00:00
Matthias Fischer
ab5b17a98e rules.pl: Proposed patch - Fix for missing bracket
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
2023-03-12 20:38:37 +00:00
Peter Müller
cb51fdda19 Run ./make.sh lang
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-11 17:06:41 +00:00
Peter Müller
8014198eb6 Run ./make.sh update-contributors
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-11 17:06:16 +00:00
Peter Müller
35abb51eb7 linux-firmware: Do not ship the qca/ directory
It only contains firmware files for some Qualcomm Bluetooth devices, for
which there is no use on IPFire, since we disabled Bluetooth support in
the kernel a long time ago due to security reasons.

To save some space (~ 1.9 MByte), do not ship these files, and delete
them on existing IPFire installations as well.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-11 17:04:18 +00:00
Peter Müller
c590c915a4 Core Update 174: Ship relevant changes of linux-firmware
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-11 17:01:14 +00:00
Adolf Belka
3562922c43 linux-firmware: Update to version 20230210
- Update from version 20221214 to 20230210
- Update of rootfile
- Changelog
   For changes see the commits in the git repo
   https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/log/

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-03-11 16:40:08 +00:00
Peter Müller
f0d693186f Core Update 174: Ship proxy.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-11 16:36:08 +00:00
Adolf Belka
71604352ca procy.cgi: Fix bug#12701 - remove advproxy wpad notice line
- This line is no longer needed with the help button at the top of each WUI page that was
   implemented by @Leo
- Sorry for long time for me to get around to finalising this patch but it is done now.

Fixes: bug#12701
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-03-11 16:31:57 +00:00
Adolf Belka
14051bfeb5 updatexlrator.cgi: Update to naming of variables in css section
- This updates the updatexlrator.cgi page to the same central use of extraHead from
   header.pl and simplifying of css variables where appropriate.
- The variables for the percentage bar will also be able to be used in other cgi pages
   with a percent bar.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-03-11 16:30:39 +00:00
Adolf Belka
d3aec71828 dhcp.cgi: Update to naming of variables in css section
- After looking at other .cgi files I realised that I had named the variables based on
   their dhcp usage only. However colouryellow or color20 etc can be used not only in a
   row but also in a cell or a column. Rather than ending up with multiple copies of the
   same colour for rows, cells, columns etc I have simplified the variable names to just
   the colour. They can then be used in whatever situation is wanted. The rest of the cgi
   code will give the view of what structure the colour is being applied to.
- This will limit the number of different css variables defined in the header.pl file

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-03-11 16:30:39 +00:00
Peter Müller
83f31dcef2 Core Update 174: Ship traffic.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-11 16:30:05 +00:00
Stefan Schantl
44ea49fa75 traffic.cgi: Do not use hard-coded red interface name
If QMI is used the dial in mode has to be set as ppp dialin but the
interface name is red. In such a case the old code tried to display
the stats for the ppp0 interface which is wrong.

This patch fixes this issue by calling the handy function to get
the correct interface name for red.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2023-03-11 16:29:43 +00:00
Peter Müller
9eef0e16c1 Core Update 174: Ship rules.pl and ipblocklist.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-03-11 16:28:20 +00:00
Stefan Schantl
0450dce6f6 ipblocklist.cgi: Fix settings checkbox handling
Checkboxes does not submit any values if they are not checked.
Default them to "off" in such a case.

This fixes the issue not beeing able to disable the logging.

Fixes #12979.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2023-03-11 16:27:32 +00:00