Commit Graph

9684 Commits

Author SHA1 Message Date
Adolf Belka
5bf383da9e automake: Update to version 1.17
- Update from version 1.16.5 to 1.17
- Update of rootfile
- Changelog
    1.17
	* New features added
	  - AM_PATH_PYTHON will, after checking "python", prefer any Python 3
	    version (latest versions checked first) over any Python 2
	    version. If a specific version of Python 2 is still needed, the
	    $PYTHON variable should be set beforehand.
	  - AM_PATH_PYTHON will also search for Python versions 3.20 through 3.10.
	    It previously searched for 3.9 through 3.0. (bug#53530)
	  - RANLIB may be overridden on a per-target basis.
	  - AM_TEXI2FLAGS may be defined to pass extra flags to TEXI2DVI & TEXI2PDF.
	  - New option "posix" to emit the special target .POSIX for make.
	    (bug#55025, bug#67891)
	  - Systems with non-POSIX "rm -f" behavior are now supported, and the
	    prior intent to drop support for them has been reversed.
	    The ACCEPT_INFERIOR_RM_PROGRAM setting no longer exists.
	    (bug#10828)
	  - Variables using escaped \# will trigger portability warnings, but be
	    retained when appended.  GNU Make & BSD Makes are known to support it.
	    (bug#7610)
	  - GNU Make's default pattern rules are disabled, for speed and debugging.
	    (.SUFFIXES was already cleared.) (bug#64743)
	  - For Texinfo documents, if a .texi.in file exists, but no .texi, the
	    .texi.in will be read. Texinfo source files need not be present at
	    all, and if present, need not contain @setfilename. Then the file name
	    as given in the Makefile.am will be used.  If @setfilename is present,
	    it should be the basename of the Texinfo file, extended with .info.
	    (bug#54063)
	  - aclocal has a new option --aclocal-path to override $ACLOCAL_PATH.
	    (https://lists.gnu.org/archive/html/automake-patches/2022-01/msg00029.html)
	  - The missing script also supports autoreconf, autogen, and perl.
	    (https://lists.gnu.org/archive/html/automake-patches/2015-08/msg00000.html)
	  - test-suite.log now contains basic system information, and the
	    console message about bug reporting on failure has a bit more detail.
	    (bug#68746, bug#71421)
	  - When using the (default) "parallel" test driver, you can now omit the
	    output of skipped tests from test-suite.log by defining the
	    variable IGNORE_SKIPPED_LOGS to a non-empty value. (bug#71422)
	* Bugs fixed
	  - Generated file timestamp checks handle filesystems with subsecond
	    timestamp granularity dynamically, greatly speeding up the sleep
	    done by AC_OUTPUT when generating config.status (all packages) and
	    Automake's make check.
	    However, this subsecond-mtime support requires an autom4te from
	    Autoconf 2.72 or later (or random test failures and other timing
	    problems may ensue), as well as a Perl, sleep program, make program,
	    and filesystem that all support subsecond resolution; otherwise, we
	    fall back to a two-second granularity, not even testing the (common)
	    1s case since that would induce a 2s delay for all configure scripts
	    in all packages on all systems that don't support subsecond mtimes.
	    When everything is supported, a line "Features: subsecond-mtime" is
	    now printed by automake --version and autom4te --version.
	    To override this check and delay, e.g. to use 1 second:
	      am_cv_filesystem_timestamp_resolution=1
	      export am_cv_filesystem_timestamp_resolution
	    (commit 720a11531,
	      https://lists.gnu.org/archive/html/automake-commit/2022-02/msg00009.html
	    then bug#60808, bug#64756, bug#67670, bug#68808, bug#71652,
	    history reviewed in
	      https://lists.gnu.org/archive/html/automake/2024-06/msg00054.html
	    and more info in surrounding threads.)
	  - The default value of $ARFLAGS is now "cr" instead of "cru", to better
	    support deterministic builds. (bug#20082)
	  - Automake's make dist now uses -9 instead of --best with gzip,
	    because Alpine gzip does not support --best. Also, GZIP_ENV is used
	    only for compression, not decompression, because of the same system.
	    (bug#68151)
	  - Dependency files are now empty, instead of "# dummy", for speed.
	    (https://lists.gnu.org/archive/html/automake/2022-05/msg00006.html)
	  - Compiling Python modules with Python 3.5+ uses multiple optimization
	    levels. (bug#38043)
	  - If the Python installation "scheme" is set to posix_local (Debian),
	    it is reset to either deb_system (if the prefix = /usr), or
	    posix_prefix (otherwise). (bug#54412, bug#64837)
	  - As a result of the Python scheme change, the installation directory
	    for Python files again defaults to "site-packages" under the usual
	    installation prefix, even on systems (generally Debian-based) that
	    would normally use the "dist-packages" subdirectory under
	    /usr/local.
	  - When compiling Emacs Lisp files, emacs is run with --no-site-file to
	    disable user config files that might hang or access the terminal;
	    and -Q is not used, since its support and behavior varies. (bug#58102)
	  - Emacs Lisp compilations respect silent make output.
	  - Automake no longer incorrectly warns that the POSIX make variables
	    $(*D) and the like are non-POSIX. Unfortunately, the make
	    implementations which do not correctly implement all the POSIX
	    variables are not detected, but this seems to have little impact
	    in practice. (bug#9587)
	  - Pass libtool tags OBJC and OBJCXX for the respective languages.
	    (bug#67539)
	  - distcleancheck ignores "silly rename" files (.nfs* .smb* .__afs*)
	    that can show up on network file systems.
	    (https://lists.gnu.org/archive/html/automake/2022-09/msg00002.html)
	  - Pass any options given to AM_PROG_LEX on to AC_PROG_LEX.
	    (bug#65600, bug#65730)
	  - aclocal: recognize ; as path separator on OS/2 and Windows. (bug#71534)
	  - Hash iterations with external effects now consistently sort keys.
	    (bug#25629, bug#46744)
	  - tests: avoid some declaration conflicts for lex et al. on SunOS.
	    (bug#34151 and others)
	  - tests: declare yyparse before use and use (void) parameter lists
	    instead of (), to placate C23. (bug#71425)
	  - Typos in code and other doc fixes. (bug#68003, bug#68004, et al.)
	* Obsolescence:
	  - py-compile no longer supports Python 0.x or 1.x versions.  Python 2.0,
	    released in 2000, is currently the minimum required version.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-26 08:12:40 +00:00
Matthias Fischer
7ffcccb509 mc: Update to 4.8.32
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-26 08:12:30 +00:00
Adolf Belka
b7f2cb0a44 shairport-sync: Ship due to sobump from ffmpeg update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-23 10:01:06 +00:00
Adolf Belka
a885661eb3 mpd: Ship due to sobump from ffmpeg update
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-23 10:01:06 +00:00
Adolf Belka
c48dfb2d8f minidlna: Add patch to add compatibility with ffmpeg-7.0
- From ffmpeg-7.0 the channel_layout variable has been changed to ch_layout. A minidlna
   user has submitted a patch to minidlna in May 2024 to fix this. Without this patch
   minidlna fails to build with ffmpeg-7.0 onwards.
- The patch has not yet been merged with minidlna (last commit was in May 2023) so I have
   taken the patch and applied it to the minidlna source tarball.
- Update of rootfile not required

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-23 10:01:06 +00:00
Adolf Belka
ba6d6014ff ffmpeg: Update to version 7.0.2
- Update from version 6.0 to 7.0.2
- Removal of mathpops patch as content now included in source tarball.
- Update of rootfile
- sobump means that mpd, shairport-sync and minidlna need to be shipped
- minidlna also requires an update due to a variable name change from ffmpeg-7.0 onwards
- Changelog
    7.0.2
	 avcodec/snow: Fix off by 1 error in run_buffer
	 avcodec/utils: apply the same alignment to YUV410 as we do to YUV420 for snow
	 avformat/iamf_parse: Check for 0 samples
	 swscale: [loongarch] Fix checkasm-sw_yuv2rgb failure.
	 avcodec/aacps_tablegen_template: don't redefine CONFIG_HARDCODED_TABLES
	 avutil/hwcontext_vaapi: use the correct type for VASurfaceAttribExternalBuffers.buffers
	 avcodec/pcm-bluray/dvd: Use correct pointer types on BE
	 avcodec/pngenc: fix sBIT writing for indexed-color PNGs
	 avcodec/pngdec: use 8-bit sBIT cap for indexed PNGs per spec
	 avformat/mov: check that child boxes of trak are only present inside it
	 avformat/mov: check that sample and chunk count is 1 for HEIF
	 avcodec/videotoolboxenc: Fix bitrate doesn't work as expected
	 avdevice/dshow: Don't skip audio devices if no video device is present
	 avcodec/hdrenc: Allocate more space
	 avcodec/cfhdenc: Height of 16 is not supported
	 avcodec/cfhdenc: Allocate more space
	 avcodec/osq: fix integer overflow when applying factor
	 avcodec/osq: avoid using too large numbers for shifts and integers in update_residue_parameter()
	 avcodec/vaapi_encode: Check hwctx
	 avcodec/proresdec: Consider negative bits left
	 avcodec/alsdec: Clear shift_value
	 avcodec/hevc/hevcdec: Do not allow slices to depend on failed slices
	 avformat/mov: add an EOF check in IPRP
	 avfilter/vf_xfade: Check ff_inlink_consume_frame() for failure
	 avutil/slicethread: Check pthread_*_init() for failure
	 avutil/frame: Check log2_crop_align
	 avutil/buffer: Check ff_mutex_init() for failure
	 avformat/xmv: Check this_packet_size
	 avformat/webpenc: Check filesize in trailer
	 avformat/ty: rec_size seems to only need 32bit
	 avformat/tty: Check avio_size()
	 avformat/siff: Basic pkt_size check
	 avformat/sauce: Check avio_size() for failure
	 avformat/sapdec: Check ffurl_get_file_handle() for error
	 avformat/nsvdec: Check asize for PCM
	 avformat/mp3dec: Check header_filesize
	 avformat/mp3dec; Check for avio_size() failure
	 avformat/mov: Use 64bit for str_size
	 avformat/mm: Check length
	 avformat/hnm: Check *chunk_size
	 avformat/hlsenc: Check ret
	 avformat/bintext: Check avio_size() return
	 avformat/asfdec_o: Check size of index object
	 avfilter/vf_scale: Check ff_scale_adjust_dimensions() for failure
	 avfilter/scale_eval: Use 64bit, check values in ff_scale_adjust_dimensions()
	 avfilter/vf_lut3d: Check av_scanf()
	 avfilter/vf_elbg: Use unsigned for shifting into the top bit
	 avfilter/vf_premultiply: Use AV_PIX_MAX_PLANES
	 avfilter/vf_deshake_opencl: Ensure that the first iteration initializes the best variables
	 avformat/iamf_parse: Check for negative sample sizes
	 swscale/output: Fix integer overflows in yuv2rgba64_X_c_template
	 avformat/mxfdec: Reorder elements of expression in bisect loop
	 avutil/timecode: Use a 64bit framenum internally
	 avcodec/pnmdec: Use 64bit for input size check
	 avformat/mov: Check extradata in mov_read_iacb()
	 avcodec/mpeg12enc: Use av_rescale() in vbv_buffer_size computation
	 avcodec/utvideoenc: Use unsigned shift to build flags
	 avcodec/j2kenc: Merge dwt_norm into lambda
	 avcodec/vc2enc: Fix overflows with storing large values
	 avcodec/mpegvideo_enc: Do not duplicate pictures on shifting
	 avdevice/dshow_capture: Fix error handling in ff_dshow_##prefix##_Create()
	 avcodec/tiff: Check value on positive signed targets
	 avfilter/vf_convolution_opencl: Assert that the filter name is one of the filters
	 avfilter/vf_bm3d: Dont round MSE2SSE to an integer
	 avdevice/dshow: Remove NULL check on pin
	 avdevice/dshow: check ff_dshow_pin_ConnectionMediaType() for failure
	 avdevice/dshow: Check device_filter_unique_name before use
	 avdevice/dshow: Cleanup also on av_log case
	 avdevice/dshow_filter: Use wcscpy_s()
	 avcodec/flac_parser: Assert that we do not overrun the link_penalty array
	 avcodec/osq: avoid signed overflow in downsample path
	 avcodec/pixlet: Simplify pfx computation
	 avcodec/motion_est: Fix score squaring overflow
	 avcodec/mlpenc: Use 64 for ml, mr
	 avcodec/loco: Check loco_get_rice() for failure
	 avcodec/loco: check get_ur_golomb_jpegls() for failure
	 avcodec/leaddec: Check init_get_bits8() for failure
	 avcodec/imm4: check cbphi for error
	 avcodec/iff: Use signed count
	 avcodec/golomb: Assert that k is in the supported range for get_ur/sr_golomb()
	 avcodec/golomb: Document return for get_ur_golomb_jpegls() and get_sr_golomb_flac()
	 avcodec/dxv: Fix type in get_opcodes()
	 avcodec/cri: Check length
	 avcodec/xsubdec: Check parse_timecode()
	 avutil/imgutils: av_image_check_size2() ensure width and height fit in 32bit
	 avfilter/vf_tiltandshift: Free dst on error
	 doc/examples/mux: remove nop
	 avcodec/proresenc_kostya: use unsigned alpha for rotation
	 avformat/rtpenc_rfc4175: Use 64bit in computation if copy_offset
	 avformat/rtmpproto: Use AV_DICT_MATCH_CASE instead of litteral number
	 avformat/rtmppkt: Simplify and deobfuscate amf_tag_skip() slightly
	 avformat/rmdec: use 64bit for audio_framesize checks
	 avutil/wchar_filename: Correct sizeof
	 avutil/hwcontext_d3d11va: correct sizeof IDirect3DSurface9
	 avutil/hwcontext_d3d11va: Free AVD3D11FrameDescriptor on error
	 avutil/hwcontext_d3d11va: correct sizeof AVD3D11FrameDescriptor
	 avcodec/vvc/refs: Use unsigned mask
	 doc/examples/vaapi_encode: Try to check fwrite() for failure
	 avformat/usmdec: Initialize value
	 avformat/tls_schannel: Initialize ret
	 avformat/subfile: Assert that whence is a known case
	 avformat/subfile: Merge if into switch()
	 avformat/rtsp: Check that lower transport is handled in one of the if()
	 avformat/rtsp: initialize reply1
	 avformat/rtsp: use < 0 for error check
	 avformat/rtpenc_vc2hq: Check sizes
	 avfilter/af_aderivative: Free out on error
	 swscale/swscale: Use ptrdiff_t for linesize computations
	 avfilter/af_amerge: Cleanup on av_channel_layout_copy() failure
	 avfilter/af_afir: Assert format
	 avfilter/af_afftdn: Assert format
	 avfilter/af_pan: check nb_output_channels before use
	 cbs_av1: Reject thirty-two zero bits in uvlc code
	 avfilter/af_mcompand: compute half frequency in double
	 avfilter/af_channelsplit: Assert that av_channel_layout_channel_from_index() succeeds
	 avfilter/af_aresample: Cleanup on av_channel_layout_copy() failure
	 tools/coverity: Phase 1 study of anti-halicogenic for coverity av_rescale()
	 avfilter/vf_avgblur: Check plane instead of AVFrame
	 avfilter/drawutils: Fix depthb computation
	 avfilter/avf_showcwt: Check av_parse_video_rate() for failure
	 avformat/rdt: Check pkt_len
	 avformat/mpeg: Check len in mpegps_probe()
	 avformat/mxfenc: resurrects the error print
	 avdevice/dshow: Check ICaptureGraphBuilder2_SetFiltergraph() for failure
	 avcodec/mfenc: check IMFSample_ConvertToContiguousBuffer() for failure
	 avcodec/vc1_loopfilter: Factor duplicate code in vc1_b_h_intfi_loop_filter()
	 avcodec/vvc/ctu: Remove dead ret check
	 avcodec/vvc/dec: Remove constant eos_at_start
	 avformat/img2dec: assert no pipe on ts_from_file
	 avcodec/cbs_jpeg: Try to move the read entity to one side in a test
	 fftools/ffplay: Check vulkan_params
	 fftools/ffmpeg_enc: Initialize Decoder
	 fftools/ffmpeg_enc: Initialize fd
	 fftools/ffmpeg_enc: simplify opaque_ref check
	 avformat/mov: Check edit list for overflow
	 fftools/ffmpeg: Check read() for failure
	 avcodec/vvc/dec: Check ff_init_cabac_decoder() for failure
	 swscale/output: Avoid undefined overflow in yuv2rgb_write_full()
	 swscale/output: alpha can become negative after scaling, use multiply
	 avcodec/targaenc: Allocate space for the palette
	 avcodec/r210enc: Use av_rescale for bitrate
	 avcodec/jfdctint_template: Fewer integer anomalies
	 avcodec/snowenc: MV limits due to mv_penalty table size
	 tools/target_dec_fuzzer: Adjust threshold for MV30
	 tools/target_dec_fuzzer: Adjust threshold for jpeg2000
	 avformat/mxfdec: Check container_ul->desc before use
	 avcodec/libvpxenc: Cleanup on error
	 doc/developer: Provide information about git send-email and gmail
	 avfilter/vf_rotate: Check ff_draw_init2() return value
	 avformat/mov: Use int64_t in intermediate for corrected_dts
	 avformat/mov: Use 64bit in intermediate for current_dts
	 avformat/matroskadec: Assert that num_levels is non negative
	 avformat/libzmq: Check av_strstart()
	 avformat/img2dec: Little JFIF / Exif cleanup
	 avformat/img2dec: Move DQT after unrelated if()
	 avformat/imfdec: Simplify get_next_track_with_minimum_timestamp()
	 avdevice/xcbgrab: Check sscanf() return
	 fftools/cmdutils: Add protective () to FLAGS
	 avformat/sdp: Check before appending ","
	 avcodec/libx264: Check init_get_bits8() return code
	 avcodec/ilbcdec: Remove dead code
	 avcodec/vp8: Check cond init
	 avcodec/vp8: Check mutex init
	 avcodec/proresenc_anatoliy: Assert that AV_PROFILE_UNKNOWN is replaced
	 avcodec/pcm-dvdenc: 64bit pkt-size
	 avcodec/notchlc: Check init_get_bits8() for failure
	 avcodec/tests/dct: Use 64bit in intermediate for error computation
	 avcodec/scpr3: Check add_dec() for failure
	 avcodec/rv34: assert that size is not 0 in rv34_gen_vlc_ext()
	 avcodec/wavpackenc: Use unsigned for potential 31bit shift
	 avcodec/vvc/mvs: Initialize mvf
	 avcodec/tests/jpeg2000dwt: Use 64bit in comparission
	 avcodec/tests/jpeg2000dwt: Use 64bit in err2 computation
	 avformat/fwse: Remove always false expression
	 avcodec/sga: Make it clear that the return is intentionally not checked
	 avformat/asfdec_f: Use 64bit for preroll computation
	 avformat/argo_asf: Use 64bit in offset intermediate
	 avformat/ape: Use 64bit for final frame size
	 avformat/ac4dec: Check remaining space in ac4_probe()
	 avdevice/pulse_audio_enc: Use av_rescale() to avoid integer overflow
	 avcodec/vlc: Cleanup on multi table alloc failure in ff_vlc_init_multi_from_lengths()
	 avcodec/tiff: Assert init_get_bits8() success in unpack_gray()
	 avcodec/tiff: Assert init_get_bits8() success in horizontal_fill()
	 tools/decode_simple: Check avcodec_send_packet() for errors on flushing
	 swscale/yuv2rgb: Use 64bit for brightness computation
	 swscale/x86/swscale: use a clearer name for INPUT_PLANER_RGB_A_FUNC_CASE
	 avutil/tests/opt: Check av_set_options_string() for failure
	 avutil/tests/dict: Check av_dict_set() before get for failure
	 avdevice/dshow: fix badly indented line
	 avformat/demux: resurrect dead stores
	 avcodec/tests/bitstream_template: Assert bits_init8() return
	 tools/enc_recon_frame_test: Assert that av_image_get_linesize() succeeds
	 avformat/iamf_writer: disallow Opus extradata with mapping family other than 0
	 avformat/iamf_parse: sanitize audio_roll_distance values
	 avformat/iamf: byteswap values in OpusHeader
	 avformat/iamf: rename Codec Config seek_preroll to audio_roll_distance
	 avformat/iamf_writer: fix coded audio_roll_distance values
	 avformat/iamf_writer: fix PCM endian-ness flag
	 avformat/movenc: fix channel count and samplerate fields for IAMF tracks
	 avformat/iamf_parse: keep substream count consistent
	 avformat/iamf_parse: add missing padding to AAC extradata
	 avformat/iamf_parse: 0 layers are not allowed
	 avformat/iamf_parse: consider nb_substreams when accessing substreams array
	 avformat/iamf_parse: Remove dead case
	 avcodec/png: more informative error message for invalid sBIT size
	 avcodec/pngdec: avoid erroring with sBIT on indexed-color images
	 avfilter/vf_tiltandshift: fix buffer offset for yuv422p input
	 avutil/timestamp: avoid possible FPE when 0 is passed to av_ts_make_time_string2()
	 avformat/mov: add more checks for infe atom size
	 avformat/mov: check for EOF inside the infe list parsing loop
	 avformat/mov: check extent_offset calculation for overflow
	 avformat/mov: check that iloc offset values fit on an int64_t
	 avcodec/pngenc: fix mDCv typo
	 avcodec/pngdec: fix mDCv typo
	 avcodec/nvenc: fix segfault in intra-only mode
	 avdevice/avfoundation: add external video devices
	 aarch64: Add OpenBSD runtime detection of dotprod and i8mm using sysctl
	 fftools/ffplay_renderer: use correct NULL value for Vulkan type
	 qsv: Initialize impl_value
	 avutil/hwcontext_qsv: fix GCC 14.1 warnings
	 avcodec/mediacodecenc: workaround the alignment requirement for H.265
	 avcodec/mediacodecenc: workaround the alignment requirement only for H.264
	 lavc/lpc: fix off-by-one in R-V V compute_autocorr
	 lavc/vp9: reset segmentation fields when segmentation isn't enabled
	 configure: enable ffnvcodec, nvenc, nvdec for FreeBSD
	 lavc/sbrdsp: fix potential overflow in noise table
    7.0.1
	 lavc/flacdsp: do not assume maximum R-V VL
	 avformat/flacdec: Reorder allocations to avoid leak on error
	 avcodec/adts_parser: Don't presume buffer to be padded
	 avformat/movenc: Check av_malloc()
	 avcodec/vp8: Return error on error
	 avformat/mov: store sample_sizes as unsigned ints
	 avformat/vvc: fix parsing sps_subpic_id
	 avformat/vvc: initialize some ptl flags
	 avcodec/mscc & mwsc: Check loop counts before use
	 avcodec/mpegvideo_enc: Fix potential overflow in RD
	 avcodec/mpeg4videodec: assert impossible wrap points
	 avcodec/mpeg12dec: Use 64bit in bit computation
	 avcodec/vqcdec: Check init_get_bits8() for failure
	 avcodec/vvc/dec: Check init_get_bits8() for failure
	 avcodec/vble: Check av_image_get_buffer_size() for failure
	 avcodec/vp3: Replace check by assert
	 avcodec/vp8: Forward return of ff_vpx_init_range_decoder()
	 avcodec/jpeg2000dec: remove ST=3 case
	 avcodec/qsvdec: Check av_image_get_buffer_size() for failure
	 avcodec/exr: Fix preview overflow
	 avcodec/decode: decode_simple_internal() only implements audio and video
	 avcodec/fmvc: remove dead assignment
	 avcodec/h2645_sei: Remove dead checks
	 avcodec/h264_slice: Remove dead sps check
	 avcodec/lpc: copy levenson coeffs only when they have been computed
	 avutil/tests/base64: Check with too short output array
	 libavutil/base64: Try not to write over the array end
	 avcodec/cbs_av1: Avoid shift overflow
	 fftools/ffplay: Check return of swr_alloc_set_opts2()
	 tools/opt_common: Check for malloc failure
	 doc/examples/demux_decode: Simplify loop
	 avformat/concatdec: Check file
	 avcodec/mpegvideo_enc: Fix 1 line and one column images
	 avcodec/amrwbdec: assert mode to be valid in decode_fixed_vector()
	 avcodec/wavarc: fix integer overflow in decode_5elp() block type 2
	 swscale/output: Fix integer overflow in yuv2rgba64_full_1_c_template()
	 swscale/output: Fix integer overflow in yuv2rgba64_1_c_template
	 avcodec/av1dec: Change bit_depth to int
	 avcodec/av1dec: bit_depth cannot be another values than 8,10,12
	 avcodec/avs3_parser: assert the return value of init_get_bits()
	 avcodec/avs2_parser: Assert init_get_bits8() success with const size 15
	 avfilter/avfiltergraph: return value of ff_request_frame() is unused
	 avformat/mxfdec: Check body_offset
	 avformat/kvag: Check sample_rate
	 avcodec/atrac9dec: Check init_get_bits8() for failure
	 avcodec/ac3_parser: Check init_get_bits8() for failure
	 avcodec/pngdec: Check last AVFrame before deref
	 avcodec/hevcdec: Check ref frame
	 doc/examples/qsv_transcode: Initialize pointer before free
	 doc/examples/qsv_transcode: Simplify str_to_dict() loop
	 doc/examples/vaapi_transcode: Simplify loop
	 doc/examples/qsv_transcode: Simplify loop
	 avcodec/cbs_h2645: Check NAL space
	 avfilter/vf_thumbnail_cuda: Set ret before checking it
	 avfilter/signature_lookup: Dont copy uninitialized stuff around
	 avfilter/signature_lookup: Fix 2 differences to the refernce SW
	 avcodec/x86/vp3dsp_init: Set correct function pointer, fix crash
	 avformat/mp3dec: change bogus error message if read_header encounters EOF
	 avformat/mp3dec: simplify inner frame size check in mp3_read_header
	 avformat/mp3dec: only call ffio_ensure_seekback once
	 avcodec/cbs_h266: read vps_ptl_max_tid before using it
	 avcodec/cbs_h266: fix sh_collocated_from_l0_flag and sh_collocated_ref_idx infer
	 avformat/vvc: fix parsing some early VPS bitstream values
	 avformat/vvc: fix writing general_constraint_info bytes
	 avutil/ppc/cpu: Also use the machdep.altivec sysctl on NetBSD
	 lavd/v4l2: Use proper field type for second parameter of ioctl() with BSD's
	 vulkan_av1: Fix force_integer_mv value
	 vaapi_av1: Fix force_integer_mv value
	 av1dec: Add force_integer_mv derived field for decoder use
	 avutil/iamf: fix offsets for mix_gain options
	 avformat/iamfdec: check nb_streams in header read
	 avformat/mov: free the infe allocated item data on failure
	 avformat/iamf_writer: reject duplicated stream ids in a stream group
	 avformat/mov: don't read key_size bytes twice in the keys atom
	 avformat/mov: take into account the first eight bytes in the keys atom
	 avformat/mov: fix the check for the heif item parsing loop
	 avutil/iamf: fix mix_gain_class name
	 av1dec: Fix RefFrameSignBias calculation
	 avcodec/codec_par: always clear extradata_size in avcodec_parameters_to_context()
	 avcodec/mediacodecenc: Fix return empty packet when bsf is used
	 avcodec/hevcdec: Fix precedence, bogus film grain warning
	 avcodec/hevcdec: fix segfault on invalid film grain metadata
	 lavc/vvc: Skip enhancement layer NAL units
	 avformat/mov: ignore old infe box versions
	 vulkan_av1: add workaround for NVIDIA drivers tested on broken CTS
	 lavc/vulkan_av1: Use av1dec reference order hint information
	 lavc/av1: Record reference ordering information for each frame
	 doc/encoders: add missing libxvid option
	 doc/encoders: remove non-existent flag
	 fate/ffmpeg: Avoid dependency on samples
	 avcodec/wavpack: Remove always-false check
	 avcodec/wavpack: Fix leak and segfault on reallocation error
	 avcodec/lossless_videoencdsp: Don't presume alignment in diff_bytes
	 avcodec/ppc/h264dsp: Fix left shifts of negative numbers
    7.0
	- DXV DXT1 encoder
	- LEAD MCMP decoder
	- EVC decoding using external library libxevd
	- EVC encoding using external library libxeve
	- QOA decoder and demuxer
	- aap filter
	- demuxing, decoding, filtering, encoding, and muxing in the
	  ffmpeg CLI now all run in parallel
	- enable gdigrab device to grab a window using the hwnd=HANDLER syntax
	- IAMF raw demuxer and muxer
	- D3D12VA hardware accelerated H264, HEVC, VP9, AV1, MPEG-2 and VC1 decoding
	- tiltandshift filter
	- qrencode filter and qrencodesrc source
	- quirc filter
	- lavu/eval: introduce randomi() function in expressions
	- VVC decoder (experimental)
	- fsync filter
	- Raw Captions with Time (RCWT) closed caption muxer
	- ffmpeg CLI -bsf option may now be used for input as well as output
	- ffmpeg CLI options may now be used as -/opt <path>, which is equivalent
	  to -opt <contents of file <path>>
	- showinfo bitstream filter
	- a C11-compliant compiler is now required; note that this requirement
	  will be bumped to C17 in the near future, so consider updating your
	  build environment if it lacks C17 support
	- Change the default bitrate control method from VBR to CQP for QSV encoders.
	- removed deprecated ffmpeg CLI options -psnr and -map_channel
	- DVD-Video demuxer, powered by libdvdnav and libdvdread
	- ffprobe -show_stream_groups option
	- ffprobe (with -export_side_data film_grain) now prints film grain metadata
	- AEA muxer
	- ffmpeg CLI loopback decoders
	- Support PacketTypeMetadata of PacketType in enhanced flv format
	- ffplay with hwaccel decoding support (depends on vulkan renderer via libplacebo)
	- dnn filter libtorch backend
	- Android content URIs protocol
	- AOMedia Film Grain Synthesis 1 (AFGS1)
	- RISC-V optimizations for AAC, FLAC, JPEG-2000, LPC, RV4.0, SVQ, VC1, VP8, and more
	- Loongarch optimizations for HEVC decoding
	- Important AArch64 optimizations for HEVC
	- IAMF support inside MP4/ISOBMFF
	- Support for HEIF/AVIF still images and tiled still images
	- Dolby Vision profile 10 support in AV1
	- Support for Ambient Viewing Environment metadata in MP4/ISOBMFF
	- HDR10 metadata passthrough when encoding with libx264, libx265, and libsvtav1
    6.1
	- libaribcaption decoder
	- Playdate video decoder and demuxer
	- Extend VAAPI support for libva-win32 on Windows
	- afireqsrc audio source filter
	- arls filter
	- ffmpeg CLI new option: -readrate_initial_burst
	- zoneplate video source filter
	- command support in the setpts and asetpts filters
	- Vulkan decode hwaccel, supporting H264, HEVC and AV1
	- color_vulkan filter
	- bwdif_vulkan filter
	- nlmeans_vulkan filter
	- RivaTuner video decoder
	- xfade_vulkan filter
	- vMix video decoder
	- Essential Video Coding parser, muxer and demuxer
	- Essential Video Coding frame merge bsf
	- bwdif_cuda filter
	- Microsoft RLE video encoder
	- Raw AC-4 muxer and demuxer
	- Raw VVC bitstream parser, muxer and demuxer
	- Bitstream filter for editing metadata in VVC streams
	- Bitstream filter for converting VVC from MP4 to Annex B
	- scale_vt filter for videotoolbox
	- transpose_vt filter for videotoolbox
	- support for the P_SKIP hinting to speed up libx264 encoding
	- Support HEVC,VP9,AV1 codec in enhanced flv format
	- apsnr and asisdr audio filters
	- OSQ demuxer and decoder
	- Support HEVC,VP9,AV1 codec fourcclist in enhanced rtmp protocol
	- CRI USM demuxer
	- ffmpeg CLI '-top' option deprecated in favor of the setfield filter
	- VAAPI AV1 encoder
	- ffprobe XML output schema changed to account for multiple
	  variable-fields elements within the same parent element
	- ffprobe -output_format option added as an alias of -of

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-23 10:01:06 +00:00
Adolf Belka
b673eaeba7 sysvinit: Update to version 3.10
- Update from version 3.08 to 3.10
- Update of rootfile not required
- Renamed build_mountpoint patch
- Changelog
    3.10
	When the user executes "machinectl stop", systemd sends SIGRTMIN+4 to PID 1
	 in the container, and expects that to initiate a graceful shutdown
	 (power-off). SysV init now catches this signal and initiates a shutdown
	 (shutdown -hP now).
	Fix issue in bootlogd which could cause the service to enter an endless loop
	 (and use too much CPU) when it is able to open a device for writing, but not
	 actually able to write to it. This resulted in bootlogd closing and
	 re-opening the device over and over. Now bootlogd should simply fail
	 gracefully when it cannot write to an open file/device.
	Fix formatting in shutdown.8 manual page. Cleaned up whitespace and special
	 characters.
    3.09
	On Linux distributions which use the musl C library (instead of glibc) we can now
	 build properly. Specifically, the hddown helper program now builds on musl C
	 systems.
	The reboot command is now able to pass messages to the underlying firmware on
	 Linux systems during a reboot. This allows the admin to pass information to the
	 underlying firmware to, for example, ask the system to boot from another
	 partition. Should be helpful on Raspberry Pi systems.
	 The reboot command can pass a message to the firmware when using the "-m"
	 command line flag.
	This release also improves the Makefile's clean directive.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-23 09:59:24 +00:00
Adolf Belka
34b3e9a0a2 rust: Update to version 1.80.1
- Update from version 1.67.0 to 1.80.1
- Update of rootfile (x86_64 & aarch64)
- Changelog is too large to include here. There are more than 1000 lines from 1.67.0 to
   1.80.1
   Details can be found at https://doc.rust-lang.org/stable/releases.html

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-23 09:58:25 +00:00
Adolf Belka
c26ea9ee01 p11-kit: Update to version 0.25.5
- Update from version 0.25.3 to 0.25.5
- Update of rootfile
- Changelog
    0.25.5
	* iter: fix recursive attribute loading [PR#642]
	* fix building on FreeBSD 14.0 (amd64) [PR#644]
	* test fix [PR#645]
    0.25.4
	* rpc: add support for recursive attributes [PR#624, PR#629, PR#631, PR#633]
	* p11-kit: add function to check run-time version of the library [PR#637]
	* p11-kit: expose version information through macros [PR#635]
	* p11-kit: add option to specify CKA_ID in generate-keypair and import-object
	  commands [PR#615]
	* p11-kit: add --provider option to specify PKCS#11 module when using p11-kit
	  commands [PR#611]
	* p11-kit: fix a bug where eddsa mechanism isn't recognized in generate-keypair
	  [PR#617]
	* p11-kit: fallback to C_GetFunctionList when C_GetInterface returns
	  CKR_FUNCTION_NOT_SUPPORTED [PR#622]
	* bug and build fixes [PR#603, PR#604, PR#605, PR#606, PR#609, PR#614, PR#616,
	  PR#619, PR#627, PR#628, PR#632, PR#636, PR#639]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-23 09:58:07 +00:00
Adolf Belka
c5fe41d3f9 gnutls: Update to version 3.8.7
- Update from version 3.8.5 to 3.8.7
- Update of rootfile
- Changelog
    3.8.7
	** libgnutls: New configure option to compile out DSA support
	   The --disable-dsa configure option has been added to completely disable DSA
	   algorithm support.
	** libgnutls: Experimental support for X25519Kyber768Draft00 key exchange in TLS
	   For testing purposes, the hybrid post-quantum key exchange defined
	   in draft-tls-westerbaan-xyber768d00 has been implemented using
	   liboqs. Since the algorithm is still not finalized, the support of
	   this key exchange is disabled by default and can be enabled with
	   the --with-liboqs configure option.
    3.8.6
	** libgnutls: PBMAC1 is now supported as a MAC mechanism for PKCS#12
	   To be compliant with FIPS 140-3, PKCS#12 files with MAC based on
	   PBKDF2 (PBMAC1) is now supported, according to the specification
	   proposed in draft-ietf-lamps-pkcs12-pbmac1.
	** libgnutls: SHA3 extendable output functions (XOF) are now supported
	   SHA3 XOF, SHAKE128 and SHAKE256, are now usable through a new
	   public API gnutls_hash_squeeze.
	** API and ABI modifications:
		gnutls_pkcs12_generate_mac3: New function
		gnutls_pkcs12_flags_t: New enum
		gnutls_hash_squeeze: New function

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-23 09:57:36 +00:00
Adolf Belka
f093cb3fbe binutils: Update to version 2.43
- Update from version 2.42 to 2.43
- Update of rootfile (x86_64 & aarch64)
- Changelog
    2.43
	* Update copyright years
	* config.sub: recognize nanoMIPS CPUs
	* config.guess: recognize ironclad OS
	* config.sub: recognize ironclad OS
	* config.sub: recognize *-*-uefi
	* Recognize the VideoCore 4 processor
	* config.guess: detect LLVM-libc via features.h
	* config.sub: add LLVM-libc support
	* .pre-commit-config.yaml: Bump black hook to 24.3.0
	* .pre-commit-config.yaml: New.
	* Makefile.def: Add configure-gdbserver and all-gdbserver
	  dependencies on all-libiconv.
	* Makefile.in: Re-generate.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-23 09:57:09 +00:00
Michael Tremer
d1f7d501c1 Merge remote-tracking branch 'ms/toolchain-2024-08-02' into next 2024-08-23 09:51:19 +00:00
Michael Tremer
048d2be91a make.sh: Remove all traces of KCFG
This variable is no longer been used and has been abused way too much in
the past. May it rest in pieces.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-20 16:08:32 +00:00
Michael Tremer
f9864480df rtl8812au: Fix build with updated KVER
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-20 16:08:16 +00:00
Michael Tremer
691d149aa1 linux: Don't reset CFLAGS/CXXFLAGS
The kernel's build system uses its own CFLAGS for building the kernel
but for the tooling we want to use our own CFLAGS.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 18:09:17 +00:00
Michael Tremer
9db251ee0b linux: Tidy up the messy KVER variable
This variable never actually held the kernel version. There were always
suffixes appended and other things changed about it. This makes it a lot
simpler as this variable now holds the actual kernel version.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 18:09:17 +00:00
Arne Fitzenreiter
d1f10f3b15 kernel: update to 6.6.47
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-08-19 17:24:09 +02:00
Michael Tremer
d2df099be3 flash-images: Increase the size of the root partition
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 13:02:38 +00:00
Michael Tremer
b373901fad lcdproc: Fix build with GCC 14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
d26c687fbd telnet: Fix build with GCC 14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
cef89b9436 tftpd: Fix build with GCC 14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
ec054262e9 syslinux: Fix build with GCC 14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
ab1b09f61f collectd: Ignore compiler errors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
7c41a2e4a1 ghostscript: Fix compilation with GCC 14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
859a8aadaa squidguard: Fix compliation with GCC 14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
8972cf22a0 berkeley: Fix build with GCC 14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
79ed909531 autoconf-archive: New package
These macros are needed to run autoreconf for db-5.3.28.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
9ab0b2fbd2 ntp: Fix build with GCC 14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
58cfcaf305 whatmask: Fix build with GCC 14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
1a28d6ef4b GCC: Update to 14.2.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
dec1a72c6c glibc: Update to 2.40
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 10:01:01 +00:00
Michael Tremer
7efa490668 coreutils: Drop uname patch
This is a patch that has been backported from Gentoo for quite a while
now. However, I did not forget why. And now it won't build with GCC 14,
and since I don't remember why we needed this, I would rather drop it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 09:55:29 +00:00
Michael Tremer
0bef4d65f7 expect: Fix build with GCC 14.2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-19 09:55:29 +00:00
Arne Fitzenreiter
7e70a93aaa kernel: update to 6.6.46
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-08-18 15:40:33 +02:00
Michael Tremer
321745c059 netatalk: Build without embedded SSL
This package seemed to have bunlded WolfSSL which we don't want to use.
Instead we want to use OpenSSL.

The bundled version of WolfSSL did not want to compile with GCC 14.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-16 16:53:48 +00:00
Michael Tremer
b33dcb2c3f epson-inkjet-orinter-escpr: Update to 1.8.5
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-16 16:53:38 +00:00
Michael Tremer
0411733669 nagios-plugins: Update to 2.4.11
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-16 16:53:33 +00:00
Michael Tremer
b1a5511098 rng-tools: Update to 6.17
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-16 16:53:29 +00:00
Matthias Fischer
d388d0c103 unbound: Update to 1.21.0
For details see:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-21-0

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-16 09:58:42 +00:00
Adolf Belka
0915078267 netsnmpd: Update to version 5.9.3
- Update from version 5.9.1 to 5.9.3
- Version 5.9.4 exists but it is indicated that SNMP over TLS and/or DTLS is not
   functioning properly with various versions of OpenSSL. However I could not find which
   versions mentioned in the News or Changelog. The problem will be fixed in a future
   version. There are no CVE fixes in 5.9.4, only a relatively few bug fixes so I
   decided to wait for the fixed version in case there are users using TLS with SNMP.
- Update of rootfile
- 6 CVE fixes in 5.9.3
- Changelog
    5.9.3
	    security:
	      - These two CVEs can be exploited by a user with read-only credentials:
	          - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
	            NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
	          - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
	            can cause a NULL pointer dereference.
	      - These CVEs can be exploited by a user with read-write credentials:
	          - CVE-2022-24806 Improper Input Validation when SETing malformed
	            OIDs in master agent and subagent simultaneously
	          - CVE-2022-24807 A malformed OID in a SET request to
	            SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
	            out-of-bounds memory access.
	          - CVE-2022-24808 A malformed OID in a SET request to
	            NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
	          - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
	            can cause a NULL pointer dereference.
	      - To avoid these flaws, use strong SNMPv3 credentials and do not share them.
	        If you must use SNMPv1 or SNMPv2c, use a complex community string
	        and enhance the protection by restricting access to a given IP address
		range.
	      - Thanks are due to Yu Zhang of VARAS@IIE and Nanyu Zhong of VARAS@IIE for
	        reporting the following CVEs that have been fixed in this release, and
	        to Arista Networks for providing fixes.
	    misc:
	      - Snmp-create-v3-user: Fix the snmpd.conf path   @datadir@ is
		expanded in ${datarootdir} so datarootdir must be set before
		@datadir@ is used.
	    general: Many bug fixes
    5.9.2
	    skipped due to a last minute library versioning found bug -- use 5.9.3 instead

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-15 10:45:48 +00:00
Adolf Belka
05f7f6d76d samba: Update to version 4.20.4
- Update from version 4.20.2 to 4.20.4
- Successfully built samba on arm builder
- Update of rootfile for x86_64 & aarch64 not required.
- Changelog
    4.20.4
	   * BUG 15673: --version-* options are still not ergonomic, and they reject
	     tilde characters.
	   * BUG 15673: --version-* options are still not ergonomic, and they reject
	     tilde characters.
    4.20.3
	   * BUG 15683: Running samba-bgqd a a standalone systemd service does not work.
	   * BUG 15655: When claims enabled with heimdal kerberos, unable to log on to a
	     Windows computer when user account need to change their own password.
	   * BUG 15671: Invalid client warning about command line passwords.
	   * BUG 15672: Version string is truncated in manpages.
	   * BUG 15673: --version-* options are still not ergonomic, and they reject
	     tilde characters.
	   * BUG 15674: cmdline_burn does not always burn secrets.
	   * BUG 15685: Samba does not parse SDDL found in defaultSecurityDescriptor in
	     AD_DS_Classes_Windows_Server_v1903.ldf.
	   * BUG 15655: When claims enabled with heimdal kerberos, unable to log on to a
	     Windows computer when user account need to change their own password.
	   * BUG 15660: The images don\'t build after the git security release and
	     CentOS 8 Stream is EOL.
	   * BUG 15676: Fix clock skew error message and memory cache clock skew
	     recovery.
	   * BUG 15603: Heimdal ignores _gsskrb5_decapsulate errors in
	     init_sec_context/repl_mutual.
	   * BUG 15621: s4:ldap_server: does not support tls channel bindings
	     for sasl binds.
	   * BUG 15678: CTDB socket output queues may suffer unbounded delays under some
	     special conditions.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-15 10:45:37 +00:00
Adolf Belka
8cdc44bc70 oci-cli: Update to version 3.45.2
- Update from version 3.29.4 to 3.45.2
- Update of rootfile
- Changelog is too large to include here. Details can be found at
   https://github.com/oracle/oci-cli/releases

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-15 10:45:29 +00:00
Adolf Belka
849bcfd188 ghostscript: Update to version 10.03.1
- Update from version 10.03.0 to 10.03.1
- Update of rootfile
- Several CVE fixes in this release
- Changelog
    10.03.1
	    Fixes for CVE-2024-33869, CVE-2023-52722, CVE-2024-33870, CVE-2024-33871 and
	     CVE-2024-29510
	    IMPORTANT: For the 10.04.0 release (fall/autumn 2024) we will be adding
	     protection for device selection from PostScript input. This will mean that,
	     by default, only the device specified on the command line will be permitted.
	     Similar to the file permissions, there will be a "--permit-devices="
	     allowing a comma separation list of allowed devices. This will also take a
	     single wildcard "*" allowing any device.
	    Any application which relies on allowing PostScript to change devices during
	     a job will have to be aware, and take action to deal with this change.
	    The exception is "nulldevice", switching to that requires no special action.
	    A vulnerability was identified in the way Ghostscript/GhostPDL called
	     tesseract for the OCR devices, which could allow arbitrary code execution.
	     As as result, we strongly urge anyone including the OCR devices in their
	     build to update as soon as possible.
	    As of this release (10.03.1) pdfwrite creates PDF files with XRef streams
	     and ObjStm streams. This can result in considerably smaller PDF output
	     files. See Vector Devices for more details.
	    Ghostscript/pdfwrite now supports passing through PDF "Optional Content".
	    Our efforts in code hygiene and maintainability continue.
	    The usual round of bug fixes, compatibility changes, and incremental
	     improvements.
	    (9.53.0) We have added the capability to build with the Tesseract OCR
	     engine. In such a build, new devices are available
	     (pdfocr8/pdfocr24/pdfocr32) which render the output file to an image, OCR
	     that image, and output the image "wrapped" up as a PDF file, with the OCR
	     generated text information included as "invisible" text (in PDF terms, text
	     rendering mode 3).
	    Mainly due to time constraints, we only support including Tesseract from
	     source included in our release packages, and not linking to
	     Tesseract/Leptonica shared libraries. Whether we add this capability will
	     be largely dependent on community demand for the feature.
	    See Enabling OCR for more details.
	Incompatible changes
	    (10.03.1) Almost all the "internal" PostScript procedures defined during the
	     interpreter startup are now "executeonly", further reducing the attack
	     surface of the interpreter.
	     The nature of these procedures means there should be no impact for
	     legitimate usage, but it is possible it will impact uses which abuse the
	     previous accessibility (even for legitimate reasons). Such cases may now
	     require "DELAYBIND", See DELAYBIND
	    (10.03.1) The "makeimagedevice" non-standard operator has been removed. It
	     allowed low level access to the graphics library in a way that was,
	     essentially impossible to secure.
	    (10.03.1) The "putdeviceprops", "getdeviceprops", "finddevice",
	     "copydevice", "findprotodevice" non-standard operators have all been
	     removed. They provided functionality that is either accessible through
	     standard operators, or should not be used by user PostScript.
	    (10.03.1) The process of "tidying" the PostScript namespace should have
	     removed only non-standard and undocumented operators. Nevertheless, it is
	     possible that any integrations or utilities that rely on those non-standard
	     and undocumented operators may stop working or may change behaviour.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-15 10:45:20 +00:00
Adolf Belka
ee4c4c787e fmt: Update to version 11.0.2
- Update from version 11.0.1 to 11.0.2
- Update of rootfile
- Changelog
    11.0.2
	- Fixed compatibility with non-POSIX systems
	  (https://github.com/fmtlib/fmt/issues/4054,
	  https://github.com/fmtlib/fmt/issues/4060).
	- Fixed performance regressions when using `std::back_insert_iterator` with
	  `fmt::format_to` (https://github.com/fmtlib/fmt/issues/4070).
	- Fixed handling of `std::generator` and move-only iterators
	  (https://github.com/fmtlib/fmt/issues/4053,
	  https://github.com/fmtlib/fmt/pull/4057). Thanks @Arghnews.
	- Made `formatter<std::string_view>::parse` work with types convertible to
	  `std::string_view` (https://github.com/fmtlib/fmt/issues/4036,
	  https://github.com/fmtlib/fmt/pull/4055). Thanks @Arghnews.
	- Made `volatile void*` formattable
	  (https://github.com/fmtlib/fmt/issues/4049,
	  https://github.com/fmtlib/fmt/pull/4056). Thanks @Arghnews.
	- Made `Glib::ustring` not be confused with `std::string`
	  (https://github.com/fmtlib/fmt/issues/4052).
	- Made `fmt::context` iterator compatible with STL algorithms that rely on
	  iterator category (https://github.com/fmtlib/fmt/issues/4079).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-15 10:45:13 +00:00
Adolf Belka
075aa6f354 ddrescue: Update to version 1.28
- Update from version 1.26 to 1.28
- Update of rootfile not required
- Changelog
    1.28
	The option '--verify-on-error' has been renamed to '--check-on-error'.
	The option '--verify-input-size' has been renamed to '--check-input-size'.
	The option synonym '--exit-on-error' has been removed and is no longer
	 recognized.
	In fill and rescue modes, ddrescue now makes a final fsync call on outfile
	 to prevent an early exit if the kernel caches all the writes.
	Option '-t, --show-status' of ddrescuelog now shows the mapfile names at
	 verbosity level 0 if more than one mapfile is specified.
	The variable MAKEINFO has been added to configure and Makefile.in.
    1.27
	A deadlock in command mode when stdout is fully buffered has been fixed by
	 flushing stdout after executing each command. (Reported by Jeffrey Bosboom).
	The new option '-W, --compare-before-write' has been added. It omits
	 superfluous writes in rescue mode.
	 (Suggested by Kajetan Harald Hinner and Petr Slansky).
	Diagnostics caused by invalid arguments to command line options now show the
	 argument and the name of the option.
	The option synonym '--direct' has been removed and is no longer recognized.
	'long long' is now used instead of 'long' for time variables.
	A missing '#include <cstdlib>' has been added.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-15 10:45:04 +00:00
Adolf Belka
5972f8bcb3 sqlite: Update to version 3460100
- Update from version 3460000 to 3460100
- Update of rootfile not required
- Changelog
    3460100
	Improved robustness while parsing the tokenize= arguments in FTS5. Forum post
	 171bcc2bcd.
	Enhancements to covering index prediction in the query planner. Add early
	 detection of over-prediction of covering indexes so that sqlite3_prepare() will
	 return an error rather than just generate bad bytecode. Forum post
	 e60e4c295d22f8ce.
	Do not let the number of terms on a VALUES clause be limited by
	 SQLITE_LIMIT_COMPOUND_SELECT, even if the VALUES clause contains elements that
	 appear to be variables due to double-quoted string literals.
	Fix the window function version of group_concat() so that it returns an empty
	 string if it has one or more empty string inputs.
	In FTS5 secure-delete mode, fix false-positive integrity-check reports about
	 corrupt indexes.
	Syntax errors in ALTER TABLE should always return SQLITE_ERROR. In some cases,
	 they were formerly returning SQLITE_INTERNAL.
	JavaScript/WASM:
	    Fix a corruption-causing bug in the JavaScript "opfs" VFS.
	    Work around a couple of browser-specific OPFS quirks.
	Other minor fixes.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-14 16:57:25 +00:00
Adolf Belka
9bd18e8a02 intel-microcode: Update to version 20240813
- Update from version 20240531 to 20240813
- Update of rootfile not required
- Changelog
    20240813
	    Security updates for INTEL-SA-01083
	    Security updates for INTEL-SA-01118
	    Security updates for INTEL-SA-01100
	    Security updates for INTEL-SA-01038
	    Security updates for INTEL-SA-01046
	    Update for functional issues. Refer to Intel® Core™ Ultra Processor for details.
	    Update for functional issues. Refer to 3rd Generation Intel® Xeon® Processor Scalable Family Specification Update for details.
	    Update for functional issues. Refer to 3rd Generation Intel® Xeon® Scalable Processors Specification Update for details.
	    Update for functional issues. Refer to 2nd Generation Intel® Xeon® Processor Scalable Family Specification Update for details
	    Update for functional issues. Refer to Intel® Xeon® D-2700 Processor Specification Update for details.
	    Update for functional issues. Refer to Intel® Xeon® E-2300 Processor Specification Update for details.
	    Update for functional issues. Refer to 13th Generation Intel® Core™ Processor Specification Update for details.
	    Update for functional issues. Refer to 12th Generation Intel® Core™ Processor Family for details.
	    Update for functional issues. Refer to 11th Gen Intel® Core™ Processor Specification Update for details.
	    Update for functional issues. Refer to 10th Gen Intel® Core™ Processor Families Specification Update for details.
	    Update for functional issues. Refer to 10th Generation Intel® Core™ Processor Specification Update for details.
	    Update for functional issues. Refer to 8th and 9th Generation Intel® Core™ Processor Family Spec Update for details.
	    Update for functional issues. Refer to 8th Generation Intel® Core™ Processor Families Specification Update for details.
	    Update for functional issues. Refer to 7th and 8th Generation Intel® Core™ Processor Specification Update for details.
	    Update for functional issues. Refer to Intel® Processors and Intel® Core™ i3 N-Series for details.
	    Update for functional issues. Refer to Intel® Atom® x6000E Series, and Intel® Pentium® and Celeron® N and J Series Processors for Internet of Things (IoT) Applications for details.
	    For Updated Platforms see the changelog
	     https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20240813

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-14 16:55:47 +00:00
Adolf Belka
1ab0b00940 ncdu: Update to version 1.20
- Update from version 1.18.1 to 1.20
- Update of rootfile not required
- Changelog
    1.20
	- Revert default color scheme back to 'off'
	- Rewrite man page in mdoc, drop pod2man dependency
    1.19
	- Fix typo in --exclude-from argument
	- Add --(enable|disable)-natsort options
	- Add indicator to apparent size/disk usage selection in the footer

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-14 09:11:36 +00:00
Adolf Belka
534fc35011 strace: Update to version 6.10
- Update from version 6.6 to 6.10
- Update of rootfile not required
- Changelog
    6.10
	* Improvements
	  * Implemented --decode-fds=eventfd option to retrieve eventfd object details
	    associated with eventfd file descriptors.
	  * Implemented decoding of NETLINK_GENERIC nlctrl protocol.
	  * Implemented decoding of F_DUPFD_QUERY fcntl.
	  * Implemented decoding of mseal syscall.
	  * Updated decoding of statx and prctl syscalls.
	  * Updated decoding of BPF_RAW_TRACEPOINT_OPEN bpf command.
	  * Updated lists of BPF_*, IORING_*, KEXEC_*, KEY_*, LANDLOCK_*, PR_*, STATX_*,
	    TCP_*, TEE_*, V4L2_*, and *_MAGIC constants.
	  * Updated lists of ioctl commands from Linux 6.10.
	* Bug fixes
	  * Worked around a bug introduced in Linux 6.5 that affected system call
	    tampering on riscv64.
    6.9
	* Improvements
	  * Implemented --always-show-pid option.
	  * The --user|-u option has learned to recognize numeric UID:GID pair, allowing
	    e.g. statically-built strace to be used without invoking nss plugins.
	  * Implemented decoding of IORING_REGISTER_SYNC_CANCEL,
	    IORING_REGISTER_FILE_ALLOC_RANGE, IORING_REGISTER_PBUF_STATUS,
	    IORING_REGISTER_NAPI, and IORING_UNREGISTER_NAPI opcodes of
	    io_uring_register syscall.
	  * Implemented decoding of BPF_TOKEN_CREATE bpf syscall command.
	  * Updated decoding of io_uring_register and pidfd_send_signal syscalls.
	  * Updated lists of BPF_*, CAN_*, IORING_*, KEY_*, LSM_*, MPOL_*, NT_*, RWF_*,
	    PIDFD_*, PTP_*, TCP_*, and *_MAGIC constants.
	  * Updated lists of ioctl commands from Linux 6.9.
    6.8
	* Improvements
	  * Renamed --stack-traces to --stack-trace for consistency.
	    Old option is retained for backwards compatibility.
	  * Implemented --stack-trace-frame-limit=N option for configuring the limit
	    of the number of printed backtrace frames.
	  * Implemented decoding of statmount, listmount, lsm_get_self_attr,
	    lsm_set_self_attr, and lsm_list_modules syscalls.
	  * Implemented decoding of setsockopt(TCP_AO_ADD_KEY).
	  * Updated decoding of landlock_create_ruleset and landlock_add_rule syscalls.
	  * Updated decoding of SMC_DIAG_DMBINFO netlink attribute.
	  * Updated decoding of UBI_IOCATT ioctl command.
	  * Enhanced decoding of mount attributes of fsmount and mount_setattr syscalls.
	  * Updated lists of BPF_*, KEXEC_*, KVM_*, PERF_*, SOL_*, STATX_*, UFFD_*,
	    and V4L2_* constants.
	  * Updated lists of ioctl commands from Linux 6.8.
    6.7
	* Improvements
	  * Implemented -kk/--stack-traces=source option for libdw-based stack tracing.
	  * Implemented decoding of futex_wake, futex_wait, and sys_futex_requeue
	    syscalls.
	  * Updated lists of BPF_*, BTRFS_*, IORING_*, KVM_*, LANDLOCK_*, PR_*,
	    and TCP_* constants.
	  * Updated lists of ioctl commands from Linux 6.7.
	* Bug fixes
	  * Fix strace -r during the first second after booting to show correct relative
	    timestamps.
	  * Fix strace -f entering deadlock on exit if there are tracee processes
	    spawned using vfork semantics.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-14 09:11:28 +00:00
Adolf Belka
61e6011d4e sdl2: Update to version 2.30.6
- Update from version 2.30.1 to 2.30.6
- Update of rootfile
- Changelog
    2.30.6
	    Improved detection of Nintendo Switch Pro controller report mode
	    Fixed a rare crash when a controller is disconnected
	    Fixed creating a framebuffer with KMSDRM on some systems
    2.30.5
	    Respect SDL_HINT_RENDER_DRIVER when creating an accelerated window surface
	    Clean up any accelerated renderer in SDL_DestroyWindowSurface()
	    Disable low level USB controller support on Android by default (can be
	     enabled by setting "SDL_ENV.SDL_JOYSTICK_HIDAPI" metadata to "1" in
	     AndroidManifest.xml)
	    Fixed USB permissions dialog on Android 14
	    Fixed controller mapping matching when one entry has a CRC specified and
	     another doesn't
	    Enable joystick support on FreeBSD when building using CMake
	    Reduced input latency when using an fcitx IME on Linux
	    Fixed graphical corruption on Raspberry Pi
	    Fixed crash when using an unstable sort function in SDL_qsort (you shouldn't
	     do this, but at least it won't crash)
    2.30.4
	    Android rotation will respect user rotation lock preferences
	    Fixed spurious Left-Ctrl key input when the Right Alt key (AltGr) is pressed
	     on Windows
	    Added support for the Saitek Cyborg V.3 Rumble Pad in PS3 mode
	    Added support for the Razer Kitsune in PS5 mode
	    Added Linux bindings for the Qanba Drone 2 Arcade Joystick
	    Leave Nintendo Online controllers in simple report mode so they work with
	     DirectInput games
	    Enable using libusb for GameCube controllers when available
    2.30.3
	    Fixed Win+V handling (pasting from clipboard history) on Windows
	    Fixed Caps Lock and Backspace key mapping for the Colemak keyboard layout on
	     Windows
	    Fixed mouse warp on XWayland
	    Reduced startup time when scanning for game controllers on Linux
	    Fixed building with C89 compilers
	    Fixed building with the GDK SDK on Windows
    2.30.2
	    Fixed performance regression initializing controllers on Linux
	    Added support for the 6-button SEGA Mega Drive Control Pad for Nintendo Online
	    Added support for the MadCatz Saitek Side Panel Control Deck
	    Added support for the Hori Fighting Stick EX2
	    Added support for the Yawman Arrow flightstick
	    Added a gamepad mapping for the Defender Joystick Cobra R4
	    Fixed the gamepad mapping for the Sanwa Supply JY-P76USV controller
	    Poll for the initial controller state when using DirectInput
	    Allow using SDL_RWFromFile() with named pipes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-14 09:11:15 +00:00