Adolf Belka
7b877b140e
iputils: Update to version 20231222
...
- Update from version 20221126 to 20231222
- Update of rootfile not required
- Changelog
20231222
* arping
- fix: Properly fix -Wpedantic warnings (commit: 80a580a, PR: #505 )
* clockdiff
- fix: Set ppoll timeout minimum to 1ms (commit: 471942d, issue: #326 , PR:
#459 )
* ping
- feature: Add option -H to force reverse DNS resolution (commit: dd5a81a,
issue: #421 , https://bugs.debian.org/650479 , PR: #494 )
- feature: Decode unreachable codes added in RFC 4443 (commit: c4c7d52, PR:
#447 )
- feature: Allow over-PMTU-sized packets with DF set using PMTUDISC_PROBE
(commit: e123cab, PR: #448 )
- fix: Revert "ping: use random value for the identifier field" to use PID
again (commit: d466aab, issue: #489 , PR: #503 , regression from s20200821)
- fix: Fix support for DSCP (Traffic Class, option -Q) (commit: 425f711,
PR: #468 , broken since s20060425)
- fix: Fix the errno handling for strtod (commit: 33e78be, PR: #450 ,
regression from s20190324)
- fix: Drop redundant setsockopt(IPV6_TCLASS) call (commit: d38519a, PR:
#468 , regression from s20150815)
- fix: Fix overflow on negative -i (commit: 2a63b94, issue: #465 )
- fix: Fix sporadically missing DNS record on targets with multiple IP
addresses (commit: 80a580a, PR: #505 , regression from s20200821)
- fix: Handle interval correctly in the first second after booting (commit:
7448c33, PR: #499 )
- fix: Fix presentation of IPv6 addresses with no reverse DNS (commit:
bc3f2e3, issue: #455 , PR: #478 )
- fix: Add missing whitespace in IPv6 output (commit: 14472fc, PR: #455 )
- fix: Allow to localize help (commit: e13508a)
- fix: Use print target when empty ai_canonname (commit: c68afd5, issue:
#421 )
- Improve interval error message (commit: fb75557, PR: #487 )
- man: Mention broadcast and multicast limit for non-root (commit: e7aafa7,
PR: #486 )
- man: Document collisions and pid_max (commit: c515a0d, PR: #507 )
- man: Add missing parameter for -e (commit: 2400215)
- man: Update TTL details (commit: 2beff77, issue: #488 , PR: #497 )
- man: Describe the defaults for -n option, reword (commit: a6e6d24)
* tracepath
- fix: Restore the MTU probing behavior") (commit: a75feb0, PR: #448 ,
regression from s20190709)
- fix: Fix behavior during the first second after booting (commit:
c64bcd8, PR: #499 )
- Add NULL pointer assert() check (commit: 065daad, PR: #498 )
- man: Fix output related docs (commit: 40c7bc3, issue: #469 , PR: #470 )
- man: Document error messages (commit: 90371d2, issue: #463 , PR: #495 )
* CI
- Add Add CentOS Stream 9 and Rocky Linux 8 and 9 (commit: 26edb41,
0ce30ae, PR: #457 , #476 )
* localization
- 100% translated: Chinese (Simplified), Czech, English, French, Georgian,
German, Korean, Portuguese (Brazil), Ukrainian
- > 90% Finnish, Turkish, Japanese, Indonesian
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2024-01-03 21:17:04 +00:00
Adolf Belka
42b0bb0d7a
iputils: Update to version 20221126
...
- Update from version 20210202 to 20221126
- Update of rootfile - none of the removed tools were in the rootfile
- Changelog
20221126
* removed tools (issue: #363 )
- ninfod (commit: 8f0d897, reason: experimental unused protocol)
- rarpd (commit: fba7b62, reason: superseded by DHCP protocol)
- rdisc (commit: 7447806, reason: superseded by DHCP protocol)
* license
- use SPDX identifiers for license names
* tree
- make _GNU_SOURCE mandatory (commit: 2410ed1, PR: #402 )
* arping
- fix: exit 0 if running in deadline mode and we see replies (commit: 854873b,
PR: #395 )
- fix: check correct variable (commit: 8a6a2ce, PR: #395 )
- man: Mention IPv4 only and ndisc6(8) (commit: 6becbb3)
* clockdiff
- setcap-setuid.sh: Add cap_sys_nice for clockdiff (commit: 9139397, issue:
#326 , #422 )
- document CAP_SYS_NICE requirement (PR: #416 )
* ping
- feature: add option -C to call connect() before sending/receiving - useful
when using Path MTU Discovery (commit: 07eca4a, PR: #391 )
- feature: add option -e to set Identifier field for ICMP ECHO_REQUEST (commit:
43e38f2, PR: #426 )
- feature: print various debug info on -v (issue: #411 )
- feature: print config options on -V (PR: #432 )
- fix: -m (SO_MARK) in 32-bit archs (commit: fecf335, PR: #394 , more fixes will
come next release)
- fix: potential memory leakage on -p option (commit: 626ea66, PR: #409 )
- fix: socket error reporting (commit: bbe451f, issue: #406 )
- fix: make ping_rts struct static - fix occasional segfault (commit: 7861af9,
issue: #423 )
- fix: add SA_RESTART to sa_flags - avoid missing output in write on aarch64
(commit: 09f1b37, issue: #424 )
- security: drop capabilities for IPv4 (commit: 5990843, PR: #400 )
- print warning on missing '%'-notation (commit: c4b8b44, issue: #398 , PR: #405 )
- man: add "IPV6 LINK-LOCAL DESTINATIONS" section (PR: #405 )
- man: use "ICMP datagram socket" (PR: #405 )
* CI
- Debian: unstable -> testing (stability)
- Ubuntu: xenial -> bionic, groovy -> jammy (EOL)
- remove CentOS 8 (EOL, commit: 931504a)
* localization
- new translations: Georgian (by Temuri Doghonadze)
- many updates
- 100% translated: Czech, Finnish, Georgian, Korean, Turkish, Ukrainian
* tests
- don't fail when ip binary missing (issue: #383 , PR: #390 )
20211215
* removed tools (issue: #363 )
- tftpd: removing commit: 341975a, PR: #369
replacement:
- tftp-hpa (https://git.kernel.org/pub/scm/network/tftp/tftp-hpa.git )
- dnsmasq (https://thekelleys.org.uk/dnsmasq/doc.html )
- traceroute6: removing commit: a139421, PR: #362
replacement:
- mtr (https://www.bitwizard.nl/mtr/ )
- traceroute (http://traceroute.sourceforge.net/ )
- tracepath (https://github.com/iputils/iputils/blob/master/tracepath.c )
WARNING: More tools (ninfod, rarpd, rdisc) are going to be removed in next
release, see issue: #363
* Meson build system
- require version 0.40 (due multiple install_dir for custom_target; commit: 65941ab)
* arping
- fix: ARP protocol field for AX.25 and NETROM (PR: #360 )
* clockdiff
- fix man: remove duplicated word (PR: #384 )
* ninfod
- fix: build with -DNINFOD_MESSAGES=false (commit: a0b3917)
- systemd unit: add ProtectHostname, ProtectKernelLogs (PR: #375 )
* ping
- fix: remove 'unsupported IPv6' warning on disabled IPv6 (issue: #293 , PR: #370 )
- fix: ping6 binding to VRF and address (PR: #344 )
- fix: print reply from Subnet-Router anycast address (issue: #371 )
- fix: print reply with wrong source with warning (issue: #371 )
- fix: set mark (SO_MARK) on probe socket (PR: #340 )
- fix: man: update lowered minimum ping interval (issue: #367 )
- fix: mark is unsigned int, not signed (PR: #345 )
* rarpd
- systemd unit: add ProtectHostname, ProtectKernelLogs (PR: #375 )
* rdisc
- systemd unit: add ProtectHostname, ProtectKernelLogs (PR: #375 )
* localization
- fix: add missing cs, id, ko languages (commit: be8f704)
- new translations: Finnish, Korean
- updated translations: German, Japanese, Turkish, Ukrainian
* CI
- add build with some non-default options (commit: c4a5373)
- remove Tumbleweed (not only ocassional bugs: 086de3c, b19df68, but the way
how repos are published often breaks using it)
- add latest CentOS (currently CentOS 8, commit: 5f3711e)
* tests
- add -V test for all binaries (commit: 802fade)
- make tests optional with -DSKIP_TESTS=true (PR: #359 )
20210722
* Meson build system
- enable NO_SETCAP_OR_SUID by default
* clockdiff
- fix missing new line
* ping
- lower minimal interval for flooding to 2 (issue: #317 )
- revert f7710a1 ("Add strict pattern matching on response when pattern was
provided") to fix broken report of truncated packets (issue: #320 , PR: #331 )
* rdisc
- systemd unit: remove PrivateUsers=yes from systemd service file (issue: #314 )
- systemd unit: support /etc/default/rdisc environment file (for Debian, PR: #356 )
- systemd unit: Add DynamicUser=yes (PR: #358 )
- systemd unit: add CAP_NET_ADMIN capability (PR: #351 )
- Add support for capability/setuid (PR: #347 , #348 ) NOTE: This is strongly
discouraged as normal uses could possibly modify routing tables, recommended
way is to run it as systemd service which does not require it to be enabled.
It's added just for non-systemd users, which should run allow it to run just
for dedicated user.
- set correct caps in setcap-setuid.sh
* traceroute6
- mention -V in usage() (PR: #323 )
* localization
- new translations: Czech (100%), Indonesian (94%)
- updated translations: Portuguese (Brazil, 95%), Indonesian (94%), French:
(58%), Chinese (Simplified, 53%)
- fully translated languages in this release: Czech, Turkish, Ukrainian
* CI
- migrate from Travis CI to GitHub Actions (PR: #336 )
- add very basic ping testing (issue: #338 , PR: #243 )
- skip tests on Ubuntu Xenial (commit: 9833cae)
- various build.sh improvements
* tests
- skip tests on disabled IPv6 (commit: f10bfd8)
- fix: flood ping test should pass on root (commit: 3dff080)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org >
Reviewed-by: Peter Müller <peter.mueller@ipfire.org >
2023-01-05 10:47:09 +00:00
Peter Müller
9a7e4d8506
Switch checksums from MD5 to BLAKE2
...
Historically, the MD5 checksums in our LFS files serve as a protection
against broken downloads, or accidentally corrupted source files.
While the sources are nowadays downloaded via HTTPS, it make sense to
beef up integrity protection for them, since transparently intercepting
TLS is believed to be feasible for more powerful actors, and the state
of the public PKI ecosystem is clearly not helping.
Therefore, this patch switches from MD5 to BLAKE2, updating all LFS
files as well as make.sh to deal with this checksum algorithm. BLAKE2 is
notably faster (and more secure) than SHA2, so the performance penalty
introduced by this patch is negligible, if noticeable at all.
In preparation of this patch, the toolchain files currently used have
been supplied with BLAKE2 checksums as well on
https://source.ipfire.org/ .
Cc: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Acked-by: Michael Tremer <michael.tremeripfire.org>
2022-04-02 14:19:25 +00:00
