Commit Graph

7740 Commits

Author SHA1 Message Date
Adolf Belka
d04fa4b484 git: Update to version 2.35.1
- Update from 2.34.1 to 2.35.1
- Update of rootfile not required
- Changelog
Git 2.35.1 Release Notes
 * Git 2.35 shipped with a regression that broke use of "rebase" and
   "stash" in a secondary worktree.  This maintenance release ought to
   fix it.
Git 2.35 Release Notes
Updates since Git 2.34
Backward compatibility warts
 * "_" is now treated as any other URL-valid characters in an URL when
   matching the per-URL configuration variable names.
 * The color palette used by "git grep" has been updated to match that
   of GNU grep.
Note to those who build from the source
 * You may need to define NO_UNCOMPRESS2 Makefile macro if you build
   with zlib older than 1.2.9.
 * If your compiler cannot grok C99, the build will fail.  See the
   instruction at the beginning of git-compat-util.h if this happens
   to you.
UI, Workflows & Features
 * "git status --porcelain=v2" now show the number of stash entries
   with --show-stash like the normal output does.
 * "git stash" learned the "--staged" option to stash away what has
   been added to the index (and nothing else).
 * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
   the newly created branch if "git init" is run.
 * Various operating modes of "git reset" have been made to work
   better with the sparse index.
 * "git submodule deinit" for a submodule whose .git metadata
   directory is embedded in its working tree refused to work, until
   the submodule gets converted to use the "absorbed" form where the
   metadata directory is stored in superproject, and a gitfile at the
   top-level of the working tree of the submodule points at it.  The
   command is taught to convert such submodules to the absorbed form
   as needed.
 * The completion script (in contrib/) learns that the "--date"
   option of commands from the "git log" family takes "human" and
   "auto" as valid values.
 * "Zealous diff3" style of merge conflict presentation has been added.
 * The "git log --format=%(describe)" placeholder has been extended to
   allow passing selected command-line options to the underlying "git
   describe" command.
 * "default" and "reset" have been added to our color palette.
 * The cryptographic signing using ssh keys can specify literal keys
   for keytypes whose name do not begin with the "ssh-" prefix by
   using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
 * "git fetch" without the "--update-head-ok" option ought to protect
   a checked out branch from getting updated, to prevent the working
   tree that checks it out to go out of sync.  The code was written
   before the use of "git worktree" got widespread, and only checked
   the branch that was checked out in the current worktree, which has
   been updated.
 * "git name-rev" has been tweaked to give output that is shorter and
   easier to understand.
 * "git apply" has been taught to ignore a message without a patch
   with the "--allow-empty" option.  It also learned to honor the
   "--quiet" option given from the command line.
 * The "init" and "set" subcommands in "git sparse-checkout" have been
   unified for a better user experience and performance.
 * Many git commands that deal with working tree files try to remove a
   directory that becomes empty (i.e. "git switch" from a branch that
   has the directory to another branch that does not would attempt
   remove all files in the directory and the directory itself).  This
   drops users into an unfamiliar situation if the command was run in
   a subdirectory that becomes subject to removal due to the command.
   The commands have been taught to keep an empty directory if it is
   the directory they were started in to avoid surprising users.
 * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
   done to a piece of e-mail without a patch in it.
 * The default merge message prepared by "git merge" records the name
   of the current branch; the name can be overridden with a new option
   to allow users to pretend a merge is made on a different branch.
 * The way "git p4" shows file sizes in its output has been updated to
   use human-readable units.
 * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
   to have the same upstream as the "old" branch, instead of marking
   "old" itself as its upstream.
Performance, Internal Implementation, Development Support etc.
 * The use of errno as a means to carry the nature of error in the ref
   API implementation has been reworked and reduced.
 * Teach and encourage first-time contributors to this project to
   state the base commit when they submit their topic.
 * The command line completion for "git send-email" options have been
   tweaked to make it easier to keep it in sync with the command itself.
 * Ensure that the sparseness of the in-core index matches the
   index.sparse configuration specified by the repository immediately
   after the on-disk index file is read.
 * Code clean-up to eventually allow information on remotes defined
   for an arbitrary repository to be read.
 * Build optimization.
 * Tighten code for testing pack-bitmap.
 * Weather balloon to break people with compilers that do not support
   C99.
 * The "reftable" backend for the refs API, without integrating into
   the refs subsystem, has been added.
 * More tests are marked as leak-free.
 * The test framework learns to list unsatisfied test prerequisites,
   and optionally error out when prerequisites that are expected to be
   satisfied are not.
 * The default setting for trace2 event nesting was too low to cause
   test failures, which is worked around by bumping it up in the test
   framework.
 * Drop support for TravisCI and update test workflows at GitHub.
 * Many tests that used to need GIT_TEST_DEFAULT_INITIAL_BRANCH_NAME
   mechanism to force "git" to use 'master' as the default name for
   the initial branch no longer need it; the use of the mechanism from
   them have been removed.
 * Allow running our tests while disabling fsync.
 * Document the parameters given to the reflog entry iterator callback
   functions.
   (merge e6e94f34b2 jc/reflog-iterator-callback-doc later to maint).
 * The test helper for refs subsystem learned to write bogus and/or
   nonexistent object name to refs to simulate error situations we
   want to test Git in.
 * "diff --histogram" optimization.
 * Weather balloon to find compilers that do not grok variable
   declaration in the for() loop.
 * diff and blame commands have been taught to work better with sparse
   index.
 * The chainlint test script linter in the test suite has been updated.
 * The DEVELOPER=yes build uses -std=gnu99 now.
 * "git format-patch" uses a single rev_info instance and then exits.
   Mark the structure with UNLEAK() macro to squelch leak sanitizer.
 * New interface into the tmp-objdir API to help in-core use of the
   quarantine feature.
 * Broken &&-chains in the test scripts have been corrected.
 * The RCS keyword substitution in "git p4" used to be done assuming
   that the contents are UTF-8 text, which can trigger decoding
   errors.  We now treat the contents as a bytestring for robustness
   and correctness.
 * The conditions to choose different definitions of the FLEX_ARRAY
   macro for vendor compilers has been simplified to make it easier to
   maintain.
 * Correctness and performance update to "diff --color-moved" feature.
 * "git upload-pack" (the other side of "git fetch") used a 8kB buffer
   but most of its payload came on 64kB "packets".  The buffer size
   has been enlarged so that such a packet fits.
 * "git fetch" and "git pull" are now declared sparse-index clean.
   Also "git ls-files" learns the "--sparse" option to help debugging.
 * Similar message templates have been consolidated so that
   translators need to work on fewer number of messages.
Fixes since v2.34
 * "git grep" looking in a blob that has non-UTF8 payload was
   completely broken when linked with certain versions of PCREv2
   library in the latest release.
 * Other code cleanup, docfix, build fix, etc.
 * "git pull" with any strategy when the other side is behind us
   should succeed as it is a no-op, but doesn't.
 * An earlier change in 2.34.0 caused JGit application (that abused
   GIT_EDITOR mechanism when invoking "git config") to get stuck with
   a SIGTTOU signal; it has been reverted.
 * An earlier change that broke .gitignore matching has been reverted.
 * Things like "git -c branch.sort=bogus branch new HEAD", i.e. the
   operation modes of the "git branch" command that do not need the
   sort key information, no longer errors out by seeing a bogus sort
   key.
   (merge 98e7ab6d42 jc/fix-ref-sorting-parse later to maint).
 * The compatibility implementation for unsetenv(3) were written to
   mimic ancient, non-POSIX, variant seen in an old glibc; it has been
   changed to return an integer to match the more modern era.
   (merge a38989bd5b jc/unsetenv-returns-an-int later to maint).
 * The clean/smudge conversion code path has been prepared to better
   work on platforms where ulong is narrower than size_t.
   (merge 596b5e77c9 mc/clean-smudge-with-llp64 later to maint).
 * Redact the path part of packfile URI that appears in the trace output.
   (merge 0ba558ffb1 if/redact-packfile-uri later to maint).
 * CI has been taught to catch some Unicode directional formatting
   sequence that can be used in certain mischief.
   (merge 0e7696c64d js/ci-no-directional-formatting later to maint).
 * The "--date=format:<strftime>" gained a workaround for the lack of
   system support for a non-local timezone to handle "%s" placeholder.
   (merge 9b591b9403 jk/strbuf-addftime-seconds-since-epoch later to maint).
 * The "merge" subcommand of "git jump" (in contrib/) silently ignored
   pathspec and other parameters.
   (merge 67ba13e5a4 jk/jump-merge-with-pathspec later to maint).
 * The code to decode the length of packed object size has been
   corrected.
   (merge 34de5b8eac jt/pack-header-lshift-overflow later to maint).
 * The advice message given by "git pull" when the user hasn't made a
   choice between merge and rebase still said that the merge is the
   default, which no longer is the case.  This has been corrected.
   (merge 71076d0edd ah/advice-pull-has-no-preference-between-rebase-and-merge later to maint).
 * "git fetch", when received a bad packfile, can fail with SIGPIPE.
   This wasn't wrong per-se, but we now detect the situation and fail
   in a more predictable way.
   (merge 2a4aed42ec jk/fetch-pack-avoid-sigpipe-to-index-pack later to maint).
 * The function to cull a child process and determine the exit status
   had two separate code paths for normal callers and callers in a
   signal handler, and the latter did not yield correct value when the
   child has caught a signal.  The handling of the exit status has
   been unified for these two code paths.  An existing test with
   flakiness has also been corrected.
   (merge 5263e22cba jk/t7006-sigpipe-tests-fix later to maint).
 * When a non-existent program is given as the pager, we tried to
   reuse an uninitialized child_process structure and crashed, which
   has been fixed.
   (merge f917f57f40 em/missing-pager later to maint).
 * The single-key-input mode in "git add -p" had some code to handle
   keys that generate a sequence of input via ReadKey(), which did not
   handle end-of-file correctly, which has been fixed.
   (merge fc8a8126df cb/add-p-single-key-fix later to maint).
 * "git rebase -x" added an unnecessary 'exec' instructions before
   'noop', which has been corrected.
   (merge cc9dcdee61 en/rebase-x-fix later to maint).
 * When the "git push" command is killed while the receiving end is
   trying to report what happened to the ref update proposals, the
   latter used to die, due to SIGPIPE.  The code now ignores SIGPIPE
   to increase our chances to run the post-receive hook after it
   happens.
   (merge d34182b9e3 rj/receive-pack-avoid-sigpipe-during-status-reporting later to maint).
 * "git worktree add" showed "Preparing worktree" message to the
   standard output stream, but when it failed, the message from die()
   went to the standard error stream.  Depending on the order the
   stdio streams are flushed at the program end, this resulted in
   confusing output.  It has been corrected by sending all the chatty
   messages to the standard error stream.
   (merge b50252484f es/worktree-chatty-to-stderr later to maint).
 * Coding guideline document has been updated to clarify what goes to
   standard error in our system.
   (merge e258eb4800 es/doc-stdout-vs-stderr later to maint).
 * The sparse-index/sparse-checkout feature had a bug in its use of
   the matching code to determine which path is in or outside the
   sparse checkout patterns.
   (merge 8c5de0d265 ds/sparse-deep-pattern-checkout-fix later to maint).
 * "git rebase -x" by mistake started exporting the GIT_DIR and
   GIT_WORK_TREE environment variables when the command was rewritten
   in C, which has been corrected.
   (merge 434e0636db en/rebase-x-wo-git-dir-env later to maint).
 * When "git log" implicitly enabled the "decoration" processing
   without being explicitly asked with "--decorate" option, it failed
   to read and honor the settings given by the "--decorate-refs"
   option.
 * "git fetch --set-upstream" did not check if there is a current
   branch, leading to a segfault when it is run on a detached HEAD,
   which has been corrected.
   (merge 17baeaf82d ab/fetch-set-upstream-while-detached later to maint).
 * Among some code paths that ask an yes/no question, only one place
   gave a prompt that looked different from the others, which has been
   updated to match what the others create.
   (merge 0fc8ed154c km/help-prompt-fix later to maint).
 * "git log --invert-grep --author=<name>" used to exclude commits
   written by the given author, but now "--invert-grep" only affects
   the matches made by the "--grep=<pattern>" option.
   (merge 794c000267 rs/log-invert-grep-with-headers later to maint).
 * "git grep --perl-regexp" failed to match UTF-8 characters with
   wildcard when the pattern consists only of ASCII letters, which has
   been corrected.
   (merge 32e3e8bc55 rs/pcre2-utf later to maint).
 * Certain sparse-checkout patterns that are valid in non-cone mode
   led to segfault in cone mode, which has been corrected.
 * Use of certain "git rev-list" options with "git fast-export"
   created nonsense results (the worst two of which being "--reverse"
   and "--invert-grep --grep=<foo>").  The use of "--first-parent" is
   made to behave a bit more sensible than before.
   (merge 726a228dfb ws/fast-export-with-revision-options later to maint).
 * Perf tests were run with end-user's shell, but it has been
   corrected to use the shell specified by $TEST_SHELL_PATH.
   (merge 9ccab75608 ja/perf-use-specified-shell later to maint).
 * Fix dependency rules to generate hook-list.h header file.
   (merge d3fd1a6667 ab/makefile-hook-list-dependency-fix later to maint).
 * "git stash" by default triggers its "push" action, but its
   implementation also made "git stash -h" to show short help only for
   "git stash push", which has been corrected.
   (merge ca7990cea5 ab/do-not-limit-stash-help-to-push later to maint).
 * "git apply --3way" bypasses the attempt to do a three-way
   application in more cases to address the regression caused by the
   recent change to use direct application as a fallback.
   (merge 34d607032c jz/apply-3-corner-cases later to maint).
 * Fix performance-releated bug in "git subtree" (in contrib/).
   (merge 3ce8888fb4 jl/subtree-check-parents-argument-passing-fix later to maint).
 * Extend the guidance to choose the base commit to build your work
   on, and hint/nudge contributors to read others' changes.
   (merge fdfae830f8 jc/doc-submitting-patches-choice-of-base later to maint).
 * A corner case bug in the ort merge strategy has been corrected.
   (merge d30126c20d en/merge-ort-renorm-with-rename-delete-conflict-fix later to maint).
 * "git stash apply" forgot to attempt restoring untracked files when
   it failed to restore changes to tracked ones.
   (merge 71cade5a0b en/stash-df-fix later to maint).
 * Calling dynamically loaded functions on Windows has been corrected.
   (merge 4a9b204920 ma/windows-dynload-fix later to maint).
 * Some lockfile code called free() in signal-death code path, which
   has been corrected.
   (merge 58d4d7f1c5 ps/lockfile-cleanup-fix later to maint).
 * Other code cleanup, docfix, build fix, etc.
   (merge 74db416c9c cw/protocol-v2-doc-fix later to maint).
   (merge f9b2b6684d ja/doc-cleanup later to maint).
   (merge 7d1b866778 jc/fix-first-object-walk later to maint).
   (merge 538ac74604 js/trace2-avoid-recursive-errors later to maint).
   (merge 152923b132 jk/t5319-midx-corruption-test-deflake later to maint).
   (merge 9081a421a6 ab/checkout-branch-info-leakfix later to maint).
   (merge 42c456ff81 rs/mergesort later to maint).
   (merge ad506e6780 tl/midx-docfix later to maint).
   (merge bf5b83fd8a hk/ci-checkwhitespace-commentfix later to maint).
   (merge 49f1eb3b34 jk/refs-g11-workaround later to maint).
   (merge 7d3fc7df70 jt/midx-doc-fix later to maint).
   (merge 7b089120d9 hn/create-reflog-simplify later to maint).
   (merge 9e12400da8 cb/mingw-gmtime-r later to maint).
   (merge 0bf0de6cc7 tb/pack-revindex-on-disk-cleanup later to maint).
   (merge 2c68f577fc ew/cbtree-remove-unused-and-broken-cb-unlink later to maint).
   (merge eafd6e7e55 ab/die-with-bug later to maint).
   (merge 91028f7659 jc/grep-patterntype-default-doc later to maint).
   (merge 47ca93d071 ds/repack-fixlets later to maint).
   (merge e6a9bc0c60 rs/t4202-invert-grep-test-fix later to maint).
   (merge deb5407a42 gh/gpg-doc-markup-fix later to maint).
   (merge 999bba3e0b rs/daemon-plug-leak later to maint).
   (merge 786eb1ba39 js/l10n-mention-ngettext-early-in-readme later to maint).
   (merge 2f12b31b74 ab/makefile-msgfmt-wo-stats later to maint).
   (merge 0517f591ca fs/gpg-unknown-key-test-fix later to maint).
   (merge 97d6fb5a1f ma/header-dup-cleanup later to maint).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-06 10:51:56 +00:00
Adolf Belka
bf3df2b025 sqlite: Update to version 3370200
- Update from 3370000 to 3370200
- Update of rootfile not required
- Changelog
   Fix a bug introduced in version 3.35.0 (2021-03-12) that can cause database corruption
    if a SAVEPOINT is rolled back while in PRAGMA temp_store=MEMORY mode, and other
    changes are made, and then the outer transaction commits. Check-in 73c2b50211d3ae26
   Fix a long-standing problem with ON DELETE CASCADE and ON UPDATE CASCADE in which a
    cache of the bytecode used to implement the cascading change was not being reset
    following a local DDL change. Check-in 5232c9777fe4fb13.
   Other minor fixes that should not impact production builds.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-06 10:51:23 +00:00
Adolf Belka
3bdedafd20 lua: Update to version 5.4.4
- Update from 5.4.3 to 5.4.4
- Update of rootfile
- Update of pkgconfig file
- Changelog
   11 bugs from version 5.4.3 or earlier fixed
   See https://www.lua.org/bugs.html#5.4.3 for details

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-06 10:50:43 +00:00
Adolf Belka
d699173d0b libgpg-error: Update to version 1.44
- Update from 1.43 to 1.44
- Update of rootfile
- Changelog
   Noteworthy changes in version 1.44 (More details can be found in the ChangeLog file in
    the source tarball which lists each commit)
      * Fix dependency to gpg-error-config-test.sh.  [T5696]
      * Run the posix locking test only on supported platforms.  [T5699]
      * Detect Linux systems using musl.  [T5762]
      * Fix gpg-error-config-test for PKG_CONFIG_LIBDIR.  [T5740]
      * Fix returning of option attributes for options with args.  [T5799]
      * Add Turkish translations.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-06 10:49:58 +00:00
Adolf Belka
949efe91ae libcap: Update to version 2.63
- Update from 2.61 to 2.63
- Update of rootfile
- Changelog
   Release notes for 2.63
    Restore errno to zero by the time main() is executed
        Bug reported by Yang Xu
    Consistent psx handling (a panic) for syscalls that return thread dependent status
        Inconsistend behavior noticed by Lorenz Bauer (Bug: 215283)
    Add a test case for a deadlock under investigation in golang #50113
        Bug reported by Weixiao Huang
    Trim some of the #include file use to make the tree compile more efficiently
   Release notes for 2.62
    Bug fix for Go package "cap" and launching:
        There was a race condition, reported by Lorenz Bauer (Bug: 215283)
    Build cleanups:
        David Seifert cleaned up warnings for 32-bit builds
        No longer use Perl in the libcap build process (Gentoo had a compelling reason to
         avoid this dependency)
    Documentation updates: cap_max_bits has a man page entry; Go module cap updates for
     Launch detail.
    Recognize default securebits as a libcap mode: HYBRID.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-06 10:49:07 +00:00
Michael Tremer
fd34a1c888 glibc: Update to 2.35
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:14:11 +00:00
Michael Tremer
bbedf54c52 Config: Globally permit using 32 bit time_t
This is required because some packages do not recommend building with
time_t when it is 32 bit (Y2038 problem).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:13:43 +00:00
Michael Tremer
a63f91a65a expect: Update automake to fix build on aarch64
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:12:45 +00:00
Michael Tremer
19054331c5 make.sh: Refactor stripper
This should *actually* exclude everything we want to exclude and
*actually* strip everything to the maximum.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:12:22 +00:00
Michael Tremer
f35f213850 pciutils: Do not make headers executable
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:12:11 +00:00
Michael Tremer
c0c6e19f6f hyperscan: Enable release build and disable examples
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:11:59 +00:00
Michael Tremer
c16a83df5a binutils/gcc: Explicitely declare host and build architecture tuple
This will fix cross-compiling the toolchain which I broke before.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:11:46 +00:00
Michael Tremer
fdb587deca flash-images: Increase size of root partition to 1800 MB
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:11:35 +00:00
Michael Tremer
be975dab58 binutils: Update to 2.37
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:11:00 +00:00
Michael Tremer
92cff3948f libnfsidmap: Drop package
This is now bundled in nfs-utils.

This patch needs a rootfile update for nfs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:10:48 +00:00
Michael Tremer
8d02d167a6 postfix: Fix FTBFS with glibc 2.34
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:10:37 +00:00
Michael Tremer
9c7de6603f ntp: Fix FTBFS with glibc 2.34
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:10:27 +00:00
Michael Tremer
b7fca3c49b texinfo: Fix FTBFS with glibc-2.34
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:10:09 +00:00
Michael Tremer
e111b836b3 binutils+gcc: Fix that the toolchain compiler is trying to link against host libraries
Binutils and GCC were misconfigured and used host libraries to build
toolchain programs. That resulted in that those programs were correctly
linked, but could not be executed, because the runtime linker did not
search in the host system.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:09:40 +00:00
Michael Tremer
173a4d546d glibc: Enable memory tagging on aarch64
https://lwn.net/Articles/834289/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:09:29 +00:00
Michael Tremer
cf557eca9c glibc: Enable CET
Enable Intel Control-flow Enforcement Technology (CET) support
to protect the library with indirect branch tracking (IBT) and
shadow stack (SHSTK).

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:09:18 +00:00
Michael Tremer
1c3905afa6 glibc: Update to version 2.34
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:08:58 +00:00
Michael Tremer
7c6bf38c05 gcc: toolchain stage 2: Set sysroot to /tools_${arch}
The stage 2 compiler was looking for libraries outside the bootstrapped
toolchain environment which causes that linked programs cannot be
executied because the runtime linker only looks for libraries inside the
toolchain environment.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 12:08:42 +00:00
Adolf Belka
55d52244b4 poppler: Update to version 22.02.0
- Update from 21.11.0 to 22.02.0
- Update of rootfile
- Changelog
    Release 22.02.0:
        core:
         * Signature: Add a way to detect unsigned FormFieldSignature
         * Signature: Suport background image when using left and right text
         * Signature: Fix path where to search for Firefox NSS in Windows
         * Signature: Fix NSS code to work correctly in Windows/Android
         * Count only signature fields in PDFDoc::getNumSignatureFields
         * Minor code improvements
        qt:
         * Allow signing unsigned signature fields
         * Allow passing a background image for the signature when signing
         * Allow passing the document password when signing
         * Fix leftFontSize being ignored when signing
        glib:
         * try with utf8 password if latin1 fails
         * New method for getting all signature fields of a document
         * Fix compile with MSVC
        utils:
         * pdfsig: Fix compile with MSVC
        build system:
         * Fix NSS cmake check for MSVC
    Release 22.01.0:
        core:
         * Allow local (relative to dll) fonts dir on Windows
         * TextOutputDev: require more spacing between columns. Issue #1093
         * Fix crash in Splash::gouraudTriangleShadedFill. Issue #1183
         * Fix crash when calling Form::reset()
         * GfxSeparationColorSpace: Check validity of colorspace and function. Issue #1184
         * Minor code improvements
        glib:
         * Include glib.h before using defines from it
         * Close file descriptors on error
         * Plug some memory leaks
         * Replace use of deprecated g_memdup/g_time_zone_new
         * Remove FD-taking functions on windows
        utils:
         * pdfsig: Add support for documents with passwords
         * pdfsig: Fix signing with -sign if nss password is needed
    Release 21.12.0:
        core:
         * Add API to add images
         * CairoOutputDev: Fix de-duping of Flate images
         * Fix crash on broken files when using non-default ENABLE_ZLIB_UNCOMPRESS. Issue #393
         * Minor code improvements
        glib:
         * Add API for validation of signatures
         * Add API to read/save to file descriptor
        utils:
         * pdftohtml: Reduce sensitivity of duplicate detection. Issue #1117
        build system:
         * Increase C++ standard to 17

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-05 12:02:53 +00:00
Adolf Belka
61d7aaa3ef samba: Update to version 4.15.5
- Update from 4.14.6 to 4.15.5
- Update of rootfile
- Changelog is too long to include everything. Full details can be found in the
   WHATSNEW.txt file in the source tarball. The following highlights those releases
    that were security releases. The other releases had a range of bug fixes.
    4.15.5 is a security release and includes the following CVE fixes
      o CVE-2021-44141: UNIX extensions in SMB1 disclose whether the outside target
                  of a symlink exists.
                  https://www.samba.org/samba/security/CVE-2021-44141.html
      o CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module.
                  https://www.samba.org/samba/security/CVE-2021-44142.html
      o CVE-2022-0336:  Re-adding an SPN skips subsequent SPN conflict checks.
                  https://www.samba.org/samba/security/CVE-2022-0336.html
    4.15.2 was a security release and included the following CVE fixes
      o CVE-2016-2124:  SMB1 client connections can be downgraded to plaintext
                  authentication.
                  https://www.samba.org/samba/security/CVE-2016-2124.html
      o CVE-2020-25717: A user on the domain can become root on domain members.
                  https://www.samba.org/samba/security/CVE-2020-25717.html
                  (PLEASE READ! There are important behaviour changes described)
      o CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued
                  by an RODC.
                  https://www.samba.org/samba/security/CVE-2020-25718.html
      o CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos
                  tickets.
                  https://www.samba.org/samba/security/CVE-2020-25719.html
      o CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers
                  (eg objectSid).
                  https://www.samba.org/samba/security/CVE-2020-25721.html
      o CVE-2020-25722: Samba AD DC did not do suffienct access and conformance
                  checking of data stored.
                  https://www.samba.org/samba/security/CVE-2020-25722.html
      o CVE-2021-3738:  Use after free in Samba AD DC RPC server.
                  https://www.samba.org/samba/security/CVE-2021-3738.html
      o CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability.
                  https://www.samba.org/samba/security/CVE-2021-23192.html
    4.14.12 was a security release and included the following CVE fixes
      o CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module.
                  https://www.samba.org/samba/security/CVE-2021-44142.html
      o CVE-2022-0336:  Re-adding an SPN skips subsequent SPN conflict checks.
                  https://www.samba.org/samba/security/CVE-2022-0336.html
    4.14.10 was a security release and included the following CVE fixes
      o CVE-2016-2124:  SMB1 client connections can be downgraded to plaintext
                  authentication.
                  https://www.samba.org/samba/security/CVE-2016-2124.html
      o CVE-2020-25717: A user on the domain can become root on domain members.
                  https://www.samba.org/samba/security/CVE-2020-25717.html
                  (PLEASE READ! There are important behaviour changes described)
      o CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued
                  by an RODC.
                  https://www.samba.org/samba/security/CVE-2020-25718.html
      o CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos
                  tickets.
                  https://www.samba.org/samba/security/CVE-2020-25719.html
      o CVE-2020-25721: Kerberos acceptors need easy access to stable AD identifiers
                  (eg objectSid).
                  https://www.samba.org/samba/security/CVE-2020-25721.html
      o CVE-2020-25722: Samba AD DC did not do suffienct access and conformance
                  checking of data stored.
                  https://www.samba.org/samba/security/CVE-2020-25722.html
      o CVE-2021-3738:  Use after free in Samba AD DC RPC server.
                  https://www.samba.org/samba/security/CVE-2021-3738.html
      o CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability.
                  https://www.samba.org/samba/security/CVE-2021-23192.html

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-05 12:02:36 +00:00
Adolf Belka
6ba00f50c4 sdl2: Update to version 2.0.20
- Update from 2.0.18 to 2.0.20
- Update of rootfile
- Changelog
   2.0.20:
    General:
     * SDL_RenderGeometryRaw() takes a pointer to SDL_Color, not int. You can cast color
       data in SDL_PIXELFORMAT_RGBA32 format (SDL_PIXELFORMAT_ABGR8888 on little endian
       systems) for this parameter.
     * Improved accuracy of horizontal and vertical line drawing when using OpenGL or
       OpenGLES
     * Added the hint SDL_HINT_RENDER_LINE_METHOD to control the method of line drawing
       used, to select speed, correctness, and compatibility.
    Windows:
     * Fixed size of custom cursors
    Linux:
     * Fixed hotplug controller detection, broken in 2.0.18

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-05 12:02:21 +00:00
Adolf Belka
0c18a79b9a zstd: Update to version 1.5.2
- Update from 1.5.1 to 1.5.2
- Update of rootfile
- Changelog
   v1.5.2 (Jan, 2022)
     perf: Regain Minimal memset()-ing During Reuse of Compression Contexts (@Cyan4973, #2969)
     build: Build Zstd with `noexecstack` on All Architectures (@felixhandte, #2964)
     doc: Clarify Licensing (@terrelln, #2981)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-05 12:01:49 +00:00
Peter Müller
cab3054288 OpenSSL: Update to 1.1.1m
Full changelog as per https://www.openssl.org/news/cl111.txt :

 Changes between 1.1.1l and 1.1.1m [14 Dec 2021]

  *) Avoid loading of a dynamic engine twice.

     [Bernd Edlinger]

  *) Fixed building on Debian with kfreebsd kernels

     [Mattias Ellert]

  *) Prioritise DANE TLSA issuer certs over peer certs

     [Viktor Dukhovni]

  *) Fixed random API for MacOS prior to 10.12

     These MacOS versions don't support the CommonCrypto APIs

     [Lenny Primak]

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-05 11:59:24 +00:00
Roberto Peña
b9e613e405 wio: Add Spanish language file
- Update of lfs
- Update of rootfile
- Addition of Spanish file provided by Roberto Peña (listed as author)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-05 11:59:04 +00:00
Adolf Belka
0778de9200 p11-kit: Update to version 0.24.1
- Update from 0.24.0 to 0.24.1
- Update of rootfile not required
- Changelog
   0.24.1 (stable)
    * rpc: Support protocol version negotiation [PR#371, PR#385]
    * proxy: Support copying attribute array recursively [PR#368]
    * Link libp11-kit so that it cannot unload [PR#383]
    * Translation improvements [PR#381]
    * Build fixes [PR#372, PR#373, PR#375, PR#377, PR#384, PR#407]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-05 11:58:04 +00:00
Adolf Belka
1b9489b017 mdadm: Update to version 4.2
- Update from 4.1 to 4.2
- Update of rootfile not required
- Changelog is no longer updated. The package directs you to the git commits to find
   the changes. https://git.kernel.org/pub/scm/utils/mdadm/mdadm.git/log/
- Announcement of update says-
   The release includes more than two years of development and bugfixes,
    so it is difficult to remember everything. Highlights include
    enhancements and bug fixes including for IMSM RAID, Partial Parity
    Log, clustered RAID support, improved testing, and gcc-9 support.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-05 11:57:27 +00:00
Michael Tremer
04888872b7 diffutils: Update to 3.8
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-03 08:29:46 +00:00
Michael Tremer
03ba4b2df2 gdb: Update to 11.2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-03 08:29:35 +00:00
Michael Tremer
fb28b637ae rust-pyo3: New package.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Michael Tremer
84fda83948 rust-paste: Update to 1.0.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Michael Tremer
79edfa4ba2 rust-indoc: Upgrade to version 1.0.3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
b870fa68b1 rust-pyo3-macros: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
d2bd411403 rust-pyo3-macros-backend: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
68051dc5ff rust-pyo3-build-config: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
3f0d5d3612 rust-inventory: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
90490f8813 rust-inventory-impl: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
b6c8f86e43 rust-ghost: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
d6f294fb16 rust-ctor: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
f72d049dc3 rust-paste: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
92ef302000 rust-paste-impl: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
d9c87622a6 rust-parking_lot: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
eda914944f rust-parking_lot_core: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
1bd5018994 rust-smallvec: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
202602e0ad rust-lock_api: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00
Stefan Schantl
a75c2b24a6 rust-instant: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:27 +00:00