Commit Graph

19974 Commits

Author SHA1 Message Date
Adolf Belka
a3fc79f127 ipset: Update to version 7.17
- Update from version 7.15 to 7.17
- Update of rootfile
- Changelog
        7.17
              - Tests: When verifying comments/timeouts, make sure entries don't expire
              - Tests: Make sure the internal batches add the correct number of elements
              - Tests: Verify that hash:net,port,net type can handle 0/0 properly
              - Makefile: Create LZMA-compressed dist-files (Phil Sutter)
        7.16
              - Add new ipset_parse_bitmask() function to the library interface
              - test: Make sure no more than 64 clashing elements can be added
                to hash:net,iface sets
              - netfilter: ipset: add tests for the new bitmask feature (Vishwanath Pai)
              - netfilter: ipset: Update the man page to include netmask/bitmask options
                (Vishwanath Pai)
              - netfilter: ipset: Add bitmask support to hash:netnet (Vishwanath Pai)
              - netfilter: ipset: Add bitmask support to hash:ipport (Vishwanath Pai)
              - netfilter: ipset: Add bitmask support to hash:ip (Vishwanath Pai)
              - netfilter: ipset: Add support for new bitmask parameter (Vishwanath Pai)
              - ipset-translate: allow invoking with a path name (Quentin Armitage)
              - Fix IPv6 sets nftables translation (Pablo Neira Ayuso)
              - Fix typo in ipset-translate man page (Bernhard M. Wiedemann)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:47:40 +00:00
Peter Müller
f91f287ccd Core Update 173: Ship iputils
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:47:15 +00:00
Adolf Belka
42b0bb0d7a iputils: Update to version 20221126
- Update from version 20210202 to 20221126
- Update of rootfile - none of the removed tools were in the rootfile
- Changelog
    20221126
	* removed tools (issue: #363)
		- ninfod (commit: 8f0d897, reason: experimental unused protocol)
		- rarpd  (commit: fba7b62, reason: superseded by DHCP protocol)
		- rdisc  (commit: 7447806, reason: superseded by DHCP protocol)
	* license
		- use SPDX identifiers for license names
	* tree
		- make _GNU_SOURCE mandatory (commit: 2410ed1, PR: #402)
	* arping
		- fix: exit 0 if running in deadline mode and we see replies (commit: 854873b,
		  PR: #395)
		- fix: check correct variable (commit: 8a6a2ce, PR: #395)
		- man: Mention IPv4 only and ndisc6(8) (commit: 6becbb3)
	* clockdiff
		- setcap-setuid.sh: Add cap_sys_nice for clockdiff (commit: 9139397, issue:
		  #326, #422)
		- document CAP_SYS_NICE requirement (PR: #416)
	* ping
		- feature: add option -C to call connect() before sending/receiving - useful
		  when using Path MTU Discovery (commit: 07eca4a, PR: #391)
		- feature: add option -e to set Identifier field for ICMP ECHO_REQUEST (commit:
		  43e38f2, PR: #426)
		- feature: print various debug info on -v (issue: #411)
		- feature: print config options on -V (PR: #432)
		- fix: -m (SO_MARK) in 32-bit archs (commit: fecf335, PR: #394, more fixes will
		  come next release)
		- fix: potential memory leakage on -p option (commit: 626ea66, PR: #409)
		- fix: socket error reporting (commit: bbe451f, issue: #406)
		- fix: make ping_rts struct static - fix occasional segfault (commit: 7861af9,
		  issue: #423)
		- fix: add SA_RESTART to sa_flags - avoid missing output in write on aarch64
		  (commit: 09f1b37, issue: #424)
		- security: drop capabilities for IPv4 (commit: 5990843, PR: #400)
		- print warning on missing '%'-notation (commit: c4b8b44, issue: #398, PR: #405)
		- man: add "IPV6 LINK-LOCAL DESTINATIONS" section (PR: #405)
		- man: use "ICMP datagram socket" (PR: #405)
	* CI
		- Debian: unstable -> testing (stability)
		- Ubuntu: xenial -> bionic, groovy -> jammy (EOL)
		- remove CentOS 8 (EOL, commit: 931504a)
	* localization
		- new translations: Georgian (by Temuri Doghonadze)
		- many updates
		- 100% translated: Czech, Finnish, Georgian, Korean, Turkish, Ukrainian
	* tests
		- don't fail when ip binary missing (issue: #383, PR: #390)
    20211215
	* removed tools (issue: #363)
		- tftpd: removing commit: 341975a, PR: #369
		  replacement:
		  - tftp-hpa (https://git.kernel.org/pub/scm/network/tftp/tftp-hpa.git)
		  - dnsmasq (https://thekelleys.org.uk/dnsmasq/doc.html)
		- traceroute6: removing commit: a139421, PR: #362
		  replacement:
		  - mtr (https://www.bitwizard.nl/mtr/)
		  - traceroute (http://traceroute.sourceforge.net/)
		  - tracepath (https://github.com/iputils/iputils/blob/master/tracepath.c)
		  WARNING: More tools (ninfod, rarpd, rdisc) are going to be removed in next
		  release, see issue: #363
	* Meson build system
		- require version 0.40 (due multiple install_dir for custom_target; commit: 65941ab)
	* arping
		- fix: ARP protocol field for AX.25 and NETROM (PR: #360)
	* clockdiff
		- fix man: remove duplicated word (PR: #384)
	* ninfod
		- fix: build with -DNINFOD_MESSAGES=false (commit: a0b3917)
		- systemd unit: add ProtectHostname, ProtectKernelLogs (PR: #375)
	* ping
		- fix: remove 'unsupported IPv6' warning on disabled IPv6 (issue: #293, PR: #370)
		- fix: ping6 binding to VRF and address (PR: #344)
		- fix: print reply from Subnet-Router anycast address (issue: #371)
		- fix: print reply with wrong source with warning (issue: #371)
		- fix: set mark (SO_MARK) on probe socket (PR: #340)
		- fix: man: update lowered minimum ping interval (issue: #367)
		- fix: mark is unsigned int, not signed (PR: #345)
	* rarpd
		- systemd unit: add ProtectHostname, ProtectKernelLogs (PR: #375)
	* rdisc
		- systemd unit: add ProtectHostname, ProtectKernelLogs (PR: #375)
	* localization
		- fix: add missing cs, id, ko languages (commit: be8f704)
		- new translations: Finnish, Korean
		- updated translations: German, Japanese, Turkish, Ukrainian
	* CI
		- add build with some non-default options (commit: c4a5373)
		- remove Tumbleweed (not only ocassional bugs: 086de3c, b19df68, but the way
		  how repos are published often breaks using it)
		- add latest CentOS (currently CentOS 8, commit: 5f3711e)
	* tests
		- add -V test for all binaries (commit: 802fade)
		- make tests optional with -DSKIP_TESTS=true (PR: #359)
    20210722
	* Meson build system
		- enable NO_SETCAP_OR_SUID by default
	* clockdiff
		- fix missing new line
	* ping
		- lower minimal interval for flooding to 2 (issue: #317)
		- revert f7710a1 ("Add strict pattern matching on response when pattern was
		  provided") to fix broken report of truncated packets (issue: #320, PR: #331)
	* rdisc
		- systemd unit: remove PrivateUsers=yes from systemd service file (issue: #314)
		- systemd unit: support /etc/default/rdisc environment file (for Debian, PR: #356)
		- systemd unit: Add DynamicUser=yes (PR: #358)
		- systemd unit: add CAP_NET_ADMIN capability (PR: #351)
		- Add support for capability/setuid (PR: #347, #348) NOTE: This is strongly
		  discouraged as normal uses could possibly modify routing tables, recommended
		  way is to run it as systemd service which does not require it to be enabled.
		  It's added just for non-systemd users, which should run allow it to run just
		  for dedicated user.
		- set correct caps in setcap-setuid.sh
	* traceroute6
		- mention -V in usage() (PR: #323)
	* localization
		- new translations: Czech (100%), Indonesian (94%)
		- updated translations: Portuguese (Brazil, 95%), Indonesian (94%), French:
		  (58%), Chinese (Simplified, 53%)
		- fully translated languages in this release: Czech, Turkish, Ukrainian
	* CI
		- migrate from Travis CI to GitHub Actions (PR: #336)
		- add very basic ping testing (issue: #338, PR: #243)
		- skip tests on Ubuntu Xenial (commit: 9833cae)
		- various build.sh improvements
	* tests
		- skip tests on disabled IPv6 (commit: f10bfd8)
		- fix: flood ping test should pass on root (commit: 3dff080)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:47:09 +00:00
Peter Müller
e84dcf0603 Core Update 173: Ship iw
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:46:48 +00:00
Adolf Belka
4425ffbf92 iw: Update to version 5.19
- Update from version 5.9 to 5.19
- Update of rootfile not required
- Changelog is not avaqilable in the source tarball or on the iw website. Details of
   changes only available by reviewing all commits between the two versions in the git
   repository
   https://git.kernel.org/pub/scm/linux/kernel/git/jberg/iw.git/log/

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:46:36 +00:00
Peter Müller
00ab0f1cc7 Core Update 173: Ship json-c and things depending on it
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:41:34 +00:00
Adolf Belka
dceaa04f00 vdr_streamdev: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
bcea7b84fd vdr: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
f57daa573e tshark: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
f805230df6 samba: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
a1c0f7fa9c qemu: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
884e65b54e python3-urllib3: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
90a7005ead pmacct: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
100ba375ab oci-python-sdk: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
d3cd3427f4 oci-cli: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
afd1db6670 nmap: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
2c659b0580 nagios-plugins: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
3227129d7b libvirt: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
4b3d3c9fa4 libusbredir: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
eb0054fa5d keepalived: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
a743b8eccc icinga: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
b493875f9e hostapd: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:59 +00:00
Adolf Belka
3da462d2d3 gnump3d: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
c055f0cd91 ghostscript: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
d14dc41b70 frr: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
b760be6597 freeradius: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
261e3f9563 cups-filters: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
275f0fb7e5 cups: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
da3e277493 clamav: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
0c20062619 c-ares: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
d5ca9070f8 aws-cli: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
6ced2cc11d avahi: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
ebc1242f4b apcupsd: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
40d24dcd64 alsa: Ship due to sobump from json-c update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-05 10:40:58 +00:00
Adolf Belka
5a6795f155 json-c: Update to version 0.16
- Update from version 0.13.1 to 0.16
- Update of rootfile
- json-c moved from building with autotools to building with cmake
   This required cmake, curl and libarchive to be moved earlier in make.sh than json-c
- sobump occurs with this change. Identified 28 addons that are linked to json-c
   using find-dependencies and added them as additional patches to this patch as a series
   for shipping with the core update.
- Changelog
    0.16 (up to commit 66dcdf5, 2022-04-13)
	Deprecated and removed features:
		* JSON_C_OBJECT_KEY_IS_CONSTANT is deprecated in favor of
		  JSON_C_OBJECT_ADD_CONSTANT_KEY
		* Direct access to lh_table and lh_entry structure members is deprecated.
		  Use access functions instead, lh_table_head(), lh_entry_next(), etc...
		* Drop REFCOUNT_DEBUG code.
	New features
		* The 0.16 release introduces no new features
	Build changes
		* Add a DISABLE_EXTRA_LIBS option to skip using libbsd
		* Add a DISABLE_JSON_POINTER option to skip compiling in json_pointer support.
	Significant changes and bug fixes
		* Cap string length at INT_MAX to avoid various issues with very long strings.
		* json_object_deep_copy: fix deep copy of strings containing '\0'
		* Fix read past end of buffer in the "json_parse" command
		* Avoid out of memory accesses in the locally provided vasprintf() function
		  (for those platforms that use it)
		* Handle allocation failure in json_tokener_new_ex
		* Fix use-after-free in json_tokener_new_ex() in the event of printbuf_new() returning NULL
		* printbuf_memset(): set gaps to zero - areas within the print buffer which
		  have not been initialized by using printbuf_memset
		* printbuf: return -1 on invalid arguments (len < 0 or total buffer > INT_MAX)
		* sprintbuf(): propagate printbuf_memappend errors back to the caller
	Optimizations
		* Speed up parsing by replacing ctype functions with simplified, faster
		  non-locale-sensitive ones in json_tokener and json_object_to_json_string.
		* Neither vertical tab nor formfeed are considered whitespace per the JSON spec
		* json_object: speed up creation of objects, calloc() -> malloc() + set fields
		* Avoid needless extra strlen() call in json_c_shallow_copy_default() and
		  json_object_equal() when the object is known to be a json_type_string.
	Other changes
		* Validate size arguments in arraylist functions.
		* Use getrandom() if available; with GRND_NONBLOCK to allow use of json-c
		  very early during boot, such as part of cryptsetup.
		* Use arc4random() if it's available.
		* random_seed: on error, continue to next method instead of exiting the process
		* Close file when unable to read from /dev/urandom in get_dev_random_seed()
    0.15 (up to commit 870965e, 2020/07/26)
	Deprecated and removed features:
		* Deprecate `array_list_new()` in favor of `array_list_new2()`
		* Remove the THIS_FUNCTION_IS_DEPRECATED define.
		* Remove config.h.win32
	New features
		* Add a `JSON_TOKENER_ALLOW_TRAILING_CHARS` flag to allow multiple objects
		  to be parsed even when `JSON_TOKENER_STRICT` is set.
		* Add `json_object_new_array_ext(int)` and `array_list_new_2(int)` to allow
		   arrays to be allocated with the exact size needed, when known.
		* Add `json_object_array_shrink()` (and `array_list_shrink()`) and use it in
		   json_tokener to minimize the amount of memory used.
		* Add a json_parse binary, for use in testing changes (not installed, but
		   available in the apps directory).
	Build changes
		* #639/#621 - Add symbol versions to all exported symbols
		* #508/#634 - Always enable -fPIC to allow use of the json-c static library in
		   other libraries
		* Build both static and shared libraries at the same time.
		* #626 - Restore compatibility with cmake 2.8
		* #471 - Always create directories with mode 0755, regardless of umask.
		* #606/#604 - Improve support for OSes like AIX and IBM i, as well as for
		   MINGW32 and old versions of MSVC
		* #451/#617 - Add a DISABLE_THREAD_LOCAL_STORAGE cmake option to disable
		   the use of thread-local storage.
	Significant changes and bug fixes
		* Split the internal json_object structure into several sub-types, one for
		   each json_type (json_object_object, json_object_string, etc...).
		  This improves memory usage and speed, with the benchmark under
		   bench/ report 5.8% faster test time and 6%(max RSS)-12%(peak heap)
		   less memory usage.
		  Memory used just for json_object structures decreased 27%, so use cases
		   with fewer arrays and/or strings would benefit more.
		* Minimize memory usage in array handling in json_tokener by shrinking
		   arrays to the exact number of elements parsed.  On bench/ benchmark:
		   9% faster test time, 39%(max RSS)-50%(peak heap) less memory usage.
		   Add json_object_array_shrink() and array_list_shrink() functions.
		* #616 - Parsing of surrogate pairs in unicode escapes now properly handles
		   incremental parsing.
		* Fix incremental parsing of numbers, especially those with exponents, e.g.
		   so parsing "[0", "e+", "-]" now properly returns an error.
		  Strict mode now rejects missing exponents ("0e").
		* Successfully return number objects at the top level even when they are
		   followed by a "-", "." or "e".  This makes parsing things like "123-45"
		   behave consistently with things like "123xyz".
	Other changes
		* #589 - Detect broken RDRAND during initialization; also, fix segfault
		    in the CPUID check.
		* #592 - Fix integer overflows to prevert out of bounds write on large input.
		* Protect against division by zero in linkhash, when created with zero size.
		* #602 - Fix json_parse_uint64() internal error checking, leaving the retval
		    untouched in more failure cases.
		* #614 - Prevent truncation when custom double formatters insert extra \0's
    0.14 (up to commit 9ed00a6, 2020/04/14)
	Deprecated and removed features:
		* bits.h has been removed
		* lh_abort() has been removed
		* lh_table_lookup() has been removed, use lh_table_lookup_ex() instead.
		* Remove TRUE and FALSE defines, use 1 and 0 instead.
	Build changes:
	    Deprecated and removed features:
		* bits.h has been removed
		* lh_abort() has been removed
		* lh_table_lookup() has been removed, use lh_table_lookup_ex() instead.
		* Remove TRUE and FALSE defines, use 1 and 0 instead.
		* autoconf support, including autogen.sh, has been removed.  See details about cmake, below.
		* With the addition of json_tokener_get_parse_end(), access to internal fields of json_tokener, as well as use of many other symbols and types in json_tokener.h, is deprecated now.
		* The use of Android.configure.mk to build for Android no longer works, and it is unknown how (or if) the new cmake-based build machinery can be used.
		    * Reports of success, or pull requests to correct issues are welcome.
	Notable improvements and new features
	    Builds and documentation
		* Build machinery has been switched to CMake.  See README.md for details about how to build.
		    * TL;DR: `mkdir build ; cd build ; cmake -DCMAKE_INSTALL_PREFIX=/some/path ../json-c ; make all test install`
		    * To ease the transition, there is a `cmake-configure` wrapper that emulates the old autoconf-based configure script.
		    * This has enabled improvements to the build on Windows system; also all public functions have been fixed to be properly exported.  For best results, use Visual Studio 2015 or newer.
		* The json-c style guide has been updated to specify the use of clang-format, and all code has been reformatted.
		    * Since many lines of code have trivial changes now, when using git blame, be sure to specify -w
		* Numerous improvements have been made to the documentation including function effects on refcounts, when passing a NULL is safe, and so on.
	    json_tokener changes
		* Added a json_tokener_get_parse_end() function to replace direct access of tok->char_offset.
		    * The char_offset field, and the rest of the json_tokener structure remain exposed for now, but expect a future release to hide it like is done with json_object_private.h
		* json_tokener_parse_ex() now accepts a new JSON_TOKENER_VALIDATE_UTF8 flag to validate that input is UTF8.
		    * If validation fails, json_tokener_get_error(tok) will return json_tokener_error_parse_utf8_string (see enum json_tokener_error).
	    Other changes and additions
		* Add support for unsigned 64-bit integers, uint64_t, to gain one extra bit of magnitude for positive ints.
		    * json_tokener will now parse values up to UINT64_MAX (18446744073709551615)
		    * Existing methods returning int32_t or int64_t will cap out-of-range values at INT32_MAX or INT64_MAX, preserving existing behavior.
		    * The implementation includes the possibility of easily extending this to larger sizes in the future.
		* A total of 7 new functions were added:
		    * json_object_get_uint64 ( struct json_object const* jso )
		    * json_object_new_uint64 ( uint64_t i )
		    * json_object_set_uint64 ( struct json_object* jso, uint64_t new_value )
		    * json_parse_uint64 ( char const* buf, uint64_t* retval )
		        * See description of uint64 support, above.
		    * json_tokener_get_parse_end ( struct json_tokener* tok )
		        * See details under "json_tokener changes", above.
		    * json_object_from_fd_ex ( int fd, int in_depth )
		        * Allows the max nesting depth to be specified.
		    * json_object_new_null ( )
		        * Simply returns NULL.  Its use is not recommended.
		* The size of struct json_object has decreased from 96 bytes to 88 bytes.
	    Testing
		* Many updates were made to test cases, increasing code coverage.
		* There is now a quick way (JSONC_TEST_TRACE=1) to turn on shell tracing in tests.
		* To run tests, use `make test`; the old "check" target no longer exists.
	Significant bug fixes
		For the full list of issues and pull requests since the previous release, please see issues_closed_for_0.14.md
		* [Issue #389](https://github.com/json-c/json-c/issues/389): Add an assert to explicitly crash when _ref_count is corrupted, instead of a later "double free" error.
		* [Issue #407](https://github.com/json-c/json-c/issues/407): fix incorrect casts in calls to ctype functions (isdigit and isspace) so we don't crash when asserts are enabled on certain platforms and characters > 128 are parsed.
		* [Issue #418](https://github.com/json-c/json-c/issues/418): Fix docs for json_util_from_fd and json_util_from_file to say that they return NULL on failures.
		* [Issue #422](https://github.com/json-c/json-c/issues/422): json_object.c:set errno in json_object_get_double() when called on a json_type_string object with bad content.
		* [Issue #453](https://github.com/json-c/json-c/issues/453): Fixed misalignment in JSON serialization when JSON_C_TO_STRING_SPACED and JSON_C_TO_STRING_PRETTY are used together.
		* [Issue #463](https://github.com/json-c/json-c/issues/463): fix newlocale() call to use LC_NUMERIC_MASK instead of LC_NUMERIC, and remove incorrect comment.
		* [Issue #486](https://github.com/json-c/json-c/issues/486): append a missing ".0" to negative double values to ensure they are serialized as floating point numbers.
		* [Issue #488](https://github.com/json-c/json-c/issues/488): use JSON_EXPORT on functions so they are properly exported on Windows.
		* [Issue #539](https://github.com/json-c/json-c/issues/539): use an internal-only serializer function in json_object_new_double_s() to avoid potential conflicts with user code that uses the json_object_userdata_to_json_string serializer.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:40:58 +00:00
Peter Müller
efe0455614 samba: Update 32-bit ARM rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:22:32 +00:00
Peter Müller
5f2d660967 linux: Align ARM rootfiles and configurations
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:11:01 +00:00
Matthias Fischer
15dbf51b74 tcpdump: Update to 4.99.2
For details see:
https://git.tcpdump.org/tcpdump/blob/HEAD:/CHANGES#l56

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-04 21:37:27 +00:00
Peter Müller
ff67691882 Core Update 173: Ship libpcap
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-04 21:37:17 +00:00
Matthias Fischer
5e768852f3 libpcap: Update to 1.10.2
For details see:
https://git.tcpdump.org/libpcap/blob/HEAD:/CHANGES#l42

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-04 21:36:39 +00:00
Peter Müller
8aa8e6d4d2 Core Update 173: Ship ncurses
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-04 21:36:10 +00:00
Matthias Fischer
61a1248605 ncurses: Update to 6.4
For details see:
https://invisible-island.net/ncurses/announce.html#h2-release-notes

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-04 21:35:28 +00:00
Peter Müller
3a14441124 Core Update 173: Ship perl-HTML-Parser
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-04 21:30:13 +00:00
Adolf Belka
cada5b5387 perl-HTML-Parser: Update to version 3.78
- Update from 3.45 (2005) to 3.78 (2022)
- Update to rootfile
- Changelog
	3.78      2022-03-28
	  * Remove unused variable (GH#26) (Michal Josef Špaček)
	3.77      2022-03-14
	  * Update tests to remove HTML4 specific tags (GH#25) (Jess)
	3.76      2021-03-04
	  * Add a fix for a stack confusion error on `eof`. (GH#21) (Matthew Horsfall
	    and Chase Whitener)
	3.75      2020-08-30
	  * Clean up the prereqs a bit
	  * Mark HTML::Filter as deprecated as the docs point out
	  * Move Parser.pm into the lib directory with the others. This will help
	    with everything from auto version bumps after releases, to scanning for
	    prerequisites and spelling errors.
	  * Fix a few spelling errors in the POD for HTML::Parser
	  * Clean up the spacing on many examples in HTML::Parser
	3.74      2020-08-30
	  * Fix the order of date and version in this change log. (Thanks, haarg)
	  * Convert to Dist::Zilla
	  * Build all prereqs from our cpanfile
	  * Go through all test files and:
	    * perltidy
	    * Use strict/warnings
	    * Get rid of two-arg open
	    * Get rid of BAREWORD filehandles
	    * Fix the eval pattern used
	    * Only use -w where we catch $SIG{__WARN__}
	    * Fix encoding problems
	    * use utf8 where we have unicode in the source
	  * Fix a typo here and there
	  * perltidy all of the example apps in eg/
	  * Add comments explaining the apps in eg/ (GH#13 Thanks, Salvatore Bonaccorso)
	  * Print out UTF-8 encoded data where sensible in eg/
	3.73     2020-08-24
	  * Cleaned up this changes log.
	  * Added a .mailmap file to organize contributions accurately.
	  * Ensure all versions are equal and on the current version
	  * Add the .mailmap to the MANIFEST
	  * Change the META information to point to the new GH repository
	  * Add a .perltidyrc to use going forward
	  * Add hctype.h and pfunc.h to the dist as static files and stop asking
	    for them to be built on the user's end.
	  * Remove t/pod.t from userland testing
	  * Remove t/pod-coverage.t from userland testing
	  * Clean up the MANIFEST
	  * Start testing via GitHub Actions/Workflows
	  * Protect active parser from being freed (PR 13, RT #115034)
	3.72     2016-01-19
	  * Avoid more clang casting warnings
	  * Remove trailing whitespace
	  * Ensure entities expand to utf8 sequences under 'utf8_mode' [RT#99755]
	  * typo fixes (David Steinbrunner)
	  * Silence clang warning (Jacques Germishuys)
	  * const+static-ing (bulk88)
	3.71     2013-05-09
	  * Transform ':' in headers to '-' [RT#80524]
	3.70     2013-03-28
	  * Fix for cross-compiling with Buildroot (François Perrad)
	  * Comment typo fix
	  * Fix Issue #3 / RT #84144: HTML::Entities::decode_entities() needs
	    to call SV_CHECK_THINKFIRST() before checking READONLY flag (Yves Orton)
	3.69     2011-10-15
	  * Documentation fix; encode_utf8 mixup [RT#71151]
	  * Make it clearer that there are 2 (actually 3) options for handing "UTF-8 garbage"
	  * Github is the official repo
	  * Can't be bothered to try to fix the failures that occur on perl-5.6
	  * fix to TokeParser to correctly handle option configuration (Barbie)
	  * Aesthetic change: remove extra ; (Jon Jensen)
	  * Trim surrounding whitespace from extracted URLs. (Ville Skyttä)
	3.68     2010-09-01
	  * Declare the encoding of the POD to be utf8
	3.67     2010-08-17
	  * bleadperl 2154eca7 breaks HTML::Parser 3.66 [RT#60368] (Nicholas Clark)
	3.66     2010-07-09
	  * Fix entity decoding in utf8_mode for the title header
	3.65     2010-04-04
	  * Eliminate buggy entities_decode_old
	  * Fixed endianness typo [RT#50811] (Salvatore Bonaccorso)
	  * Documentation Fixes. (Ville Skyttä)
	3.64     2009-10-25
	  * Convert files to UTF-8
	  * Don't allow decode_entities() to generate illegal Unicode chars
	  * Copyright 2009
	  * Remove rendundant (repeated) test
	  * Make parse_file() method use 3-arg open [RT#49434]
	3.63     2009-10-22
	  * Take more care to prepare the char range for encode_entities [RT#50170]
	  * decode_entities confused by trailing incomplete entity
	3.62     2009-08-13
	  * Doc patch: Make it clearer what the return value from ->parse is
	  * HTTP::Header doc typo fix. (Ville Skyttä)
	  * Do not bother tracking style or script, they're ignored. (Ville Skyttä)
	  * Bring HTML 5 head elements up to date with WD-html5-20090423. (Ville Skyttä)
	  * Improve HeadParser performance. (Ville Skyttä)
	3.61     2009-06-20
	  * Test that triggers the crash that Chip fixed
	  * Complete documented list of literal tags
	  * Avoid crash (referenced pend_text instead of skipped_text) (Chip Salzenberg)
	  * Reference HTML::LinkExttor [RT#43164] (Antonio Radici)
	3.60     2009-02-09
	  * Spelling fixes. (Ville Skyttä)
	  * Test multi-value headers. (Ville Skyttä)
	  * Documentation improvements. (Ville Skyttä)
	  * Do not terminate head parsing on the <object> element (added in HTML 4.0). (Ville Skyttä)
	  * Add support for HTML 5 <meta charset> and new HEAD elements. (Ville Skyttä)
	  * Short description of the htextsub example (Damyan Ivanov)
	  * Suppress warning when encode_entities is called with undef [RT#27567] (Mike South)
	  * HTML::Parser doesn't compile with perl 5.8.0. (Zefram)
	3.59     2008-11-24
	  * Restore perl-5.6 compatibility for HTML::HeadParser.
	  * Improved META.yml
	3.58     2008-11-17
	  * Suppress "Parsing of undecoded UTF-8 will give garbage" warning
	     with attr_encoded [RT#29089]
	  * HTML::HeadParser:
	       - Recognize the Unicode BOM in utf8_mode as well [RT#27522]
	       - Avoid ending up with '/' keys attribute in Link headers.
	3.57     2008-11-16
	  * The <iframe> element content is now parsed in literal mode.
	  * Parsing of <script> and <style> content ends on the first end tag
	     even when that tag was in a quoted string.  That seems to be the
	     behaviour of all modern browsers.
	  * Implement backquote() attribute as requested by Alex Kapranoff.
	  * Test and documentation tweaks from Alex Kapranoff.
	3.56     2007-01-12
	  * Cloning of parser state for compatibility with threads.
	     Fixed by Bo Lindbergh <blgl@hagernas.com>.
	  * Don't require whitespace between declaration tokens.
	     <http://rt.cpan.org/Ticket/Display.html?id=20864>
	3.55     2006-07-10
	  * Treat <> at the end of document as text.  Used to be
	     reported as a comment.
	  * Improved Firefox compatibility for bad HTML:
	      - Unclosed <script>, <style> are now treated as empty tags.
	      - Unclosed <textarea>, <xmp> and <plaintext> treat rest as text.
	      - Unclosed <title> closes at next tag.
	  * Make <!a'b> a comment by itself.
	3.54     2006-04-28
	  * Yaakov Belch discovered yet another issue with <script> parsing.
	     Enabling of 'empty_element_tags' got the parser confused
	     if it found such a tag for elements that are normally parsed
	     in literal mode.  Of these <script src="..."/> is the only
	     one likely to be found in documents.
	     <http://rt.cpan.org//Ticket/Display.html?id=18965>
	3.53     2006-04-27
	  * When ignore_element was enabled it got confused if the
	     corresponding tags did not nest properly; the end tag
	     was treated it as if it was a start tag.
	     Found and fixed by Yaakov Belch <code@yaakovnet.net>.
	     <http://rt.cpan.org/Ticket/Display.html?id=18936>
	3.52     2006-04-26
	  * Make sure the 'start_document' fires exactly once for
	     each document parsed.  For earlier releases it did not
	     fire at all for empty documents and could fire multiple
	     times if parse was called with empty chunks.
	  * Documentation tweaks and typo fixes.
	3.51     2006-03-22
	  * Named entities outside the Latin-1 range are now only expanded
	     when properly terminated with ";".  This makes HTML::Parser
	     compatible with Firefox/Konqueror/MSIE when it comes to how these
	     entities are expanded in attribute values.  Firefox does expand
	     unterminated non-Latin-1 entities in plain text, so here
	     HTML::Parser only stays compatible with Konqueror/MSIE.
	     Fixes <http://rt.cpan.org/Ticket/Display.html?id=17962>.
	  * Fixed some documentation typos spotted by <william@knowmad.com>.
	     <http://rt.cpan.org/Ticket/Display.html?id=18062>
	3.50     2006-02-14
	  * The 3.49 release didn't compile with VC++ because it mixed code
	     and declarations.  Fixed by Steve Hay <steve.hay@uk.radan.com>.
	3.49     2006-02-08
	  * Events could sometimes still fire after a handler has signaled eof.
	  * Marked_sections with text ending in square bracket parsed wrong.
	     Fix provided by <paul.bijnens@xplanation.com>.
	     <http://rt.cpan.org/Ticket/Display.html?id=16749>
	3.48     2005-12-02
	  * Enabling empty_element_tags by default for HTML::TokeParser
	     was a mistake.  Reverted that change.
	     <http://rt.cpan.org/Ticket/Display.html?id=16164>
	  * When processing a document with "marked_sections => 1", the
	     skipped text missed the first 3 bytes "<![".
	     <http://rt.cpan.org/Ticket/Display.html?id=16207>
	3.47     2005-11-22
	  * Added empty_element_tags and xml_pic configuration
	     options.  These make it possible to enable these XML
	     features without enabling the full XML-mode.
	  * The empty_element_tags is enabled by default for
	     HTML::TokeParser.
	3.46     2005-10-24
	  * Don't try to treat an literal &nbsp; as space.
	     This breaks Unicode parsing.
	     <http://rt.cpan.org/Ticket/Display.html?id=15068>
	  * The unbroken_text option is now on by default
	     for HTML::TokeParser.
	  * HTML::Entities::encode will now encode "'" by default.
	  * Improved report/ignore_tags documentation by
	     Norbert Kiesel <nkiesel@tbdnetworks.com>.
	  * Test suite now use Test::More, by
	     Norbert Kiesel <nkiesel@tbdnetworks.com>.
	  * Fix HTML::Entities typo spotted by
	     Stefan Funke <bundy@adm.arcor.net>.
	  * Faster load time with XSLoader (perl-5.6 or better now required).
	  * Fixed POD markup errors in some of the modules.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-04 21:29:42 +00:00
Peter Müller
f46f939827 linux: Update configuration files and x86_64 rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-04 21:26:43 +00:00
Peter Müller
4130cf5a3d Core Update 173: Ship kernel and regenerate initial ramdisks locally
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-03 16:16:44 +00:00
Peter Müller
6647dd5c5c linux: Disable the latent entropy plugin
It does not generate cryptographically secure entropy.

Backported from IPFire 3.x as 6aea180b26906f001611dcc0c54f494818069d8c.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2023-01-03 16:11:56 +00:00
Peter Müller
00efe232b7 linux: Disable syscalls that allows processes to r/w other processes' memory
Backported from IPFire 3.x as 48931178ff83911c5bbc86194dea694845ae1608.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2023-01-03 16:11:20 +00:00
Peter Müller
a5fbbcf464 linux: Disable some character devices that do not make sense
Inspired by IPFire 3.x (commit 472fb5fa6b1f77a2166407a8936fda6c8cbdb80b).

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2023-01-03 16:10:53 +00:00
Peter Müller
440e2c2e68 linux: Disable all sorts of useless Device Mapper targets
This patch also compiles all sorts of device mapper stuff as modules.

Backported from IPFire 3.x as 6fe31a44d07d8705ca7713c449ccbb3dbb9684a0.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2023-01-03 16:10:28 +00:00