Stephen Cuka [Fri, 18 Apr 2025 21:28:33 +0000 (15:28 -0600)]
pakfire.cgi: Change titles on confirmation pages.
- Change confirmation page titles from 'Request' to 'Install' and 'Remove'.
Signed-off-by: Stephen Cuka <stephen@firemypi.org> Reviewed-by: Michael Tremer <michael.tremer@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This functions uses the newly introduced downloader to fetch
the pulic IPv4 address on red and will replace the current used one
from the general-functions.pl library.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
For details see:
https://github.com/htop-dev/htop/blob/main/ChangeLog
"What's new in version 3.4.1
* Support for PMAPI v3 for PCP
* PCP code cleanups
* Proper checks for strchrnul
* Code cleanup in the NetworkIOMeter
* Improved documentation for the --user option
* Display stuck processes on Darwin
* Handle issues when the monotonic clock runs backwards
* Fix builds using native curses on NetBSD"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Adolf Belka [Mon, 7 Apr 2025 12:53:40 +0000 (14:53 +0200)]
smartmontools: Add update of drive database
- Existing install uses database provide with source tarball. The database is also
updated on a periodic basis which can vary between a few weeks up to 6 months or so.
- The last release was back in Aug 2023 so the database all users will have is quite old.
- This patch adds a script into the monthly fcron directory that will run the
update-smart-drivedb script from the smartmontools installation. This script downloads
the database file via https and also checks the signature of the file to ensure that
it has not been changed in any way. The script is run with the -q (quiet) option.
The script checks if the downloaded database is corrupted ands will not install it if
it is corrupted. It checks if the database has changed since the last version
installed on the system. If not changed it does not replace the file.
- Tested this out with my production IPFire system and I ended up with the latest
database from 3 weeks ago.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Adolf Belka [Mon, 7 Apr 2025 18:43:44 +0000 (20:43 +0200)]
netovpnrw.cgi: Fixes bug13838 - additional file name correction for collectd-5.x
- One location in netovpnrw.cgi was missed with a filename change coming from the collectd
update.
- This resulted in missing graph content for the openvpn road warrior graphs.
- Tested out on my production IPFire system. Making the change resulted in the grahs
being visible again.
Fixes: Bug13838 Tested-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Adolf Belka [Mon, 7 Apr 2025 18:43:43 +0000 (20:43 +0200)]
graphs.pl: Fixes bug13838 - additional file name corrections for collectd-5.x
- Two locations in graphs.pl were missed with filename changes coming from the collectd
update.
- These result in missing graph content for the openvpn road warrior graphs.
- Tested out on my production IPFire system. Making the changes resulted in the grahs
being visible again.
Fixes: bug13838 Tested-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Adolf Belka [Wed, 2 Apr 2025 20:25:40 +0000 (22:25 +0200)]
libarchive: Update to version 3.7.9
- Update from version 3.7.7 to 3.7.9
- Update of rootfile
- 3 CVE fixes in 3.7.8
- Changelog
3.7.9
Important bugfixes:
a regression in libarchive 3.7.8 regarding GNU sparse entries was fixed
(#2558)
3.7.8
Security fixes:
tar reader: Handle truncation in the middle of a GNU long linkname (#2422,
CVE-2024-57970)
unzip: fix null pointer dereference (#2532, CVE-2025-1632)
tar reader: fix unchecked return value in list_item_verbose() (#2532,
CVE-2025-25724)
Important bugfixes:
7zip reader: add SPARC (#2399) and POWERPC (#2459) filter support for
non-LZMA compressors
tar reader: Ignore ustar size when pax size is present (#2405)
tar writer: Fix bug when -s/a/b/ used more than once with b flag (#2435)
cpio: Fix a Y2038 bug on Windows (#2471)
libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter (#2519)
libarchive: Adding missing seeker function to archive_read_open_FILE() (#2539)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Adolf Belka [Tue, 8 Apr 2025 21:37:27 +0000 (23:37 +0200)]
xz: Update to version 5.8.1
- Update from version 5.8.0 to 5.8.1
- Update of rootfile
- Changelog
5.8.1
IMPORTANT: This includes a security fix for CVE-2025-31115 which
affects XZ Utils from 5.3.3alpha to 5.8.0. No new 5.4.x or 5.6.x
releases will be made, but the fix is in the v5.4 and v5.6 branches
in the xz Git repository. A standalone patch for all affected
versions is available as well.
* Multithreaded .xz decoder (lzma_stream_decoder_mt()):
- Fix a bug that could at least result in a crash with
invalid input. (CVE-2025-31115)
- Fix a performance bug: Only one thread was used if the whole
input file was provided at once to lzma_code(), the output
buffer was big enough, timeout was disabled, and LZMA_FINISH
was used. There are no bug reports about this, thus it's
possible that no real-world application was affected.
* Avoid <stdalign.h> even with C11/C17 compilers. This fixes the
build with Oracle Developer Studio 12.6 on Solaris 10 when the
compiler is in C11 mode (the header doesn't exist).
* Autotools: Restore compatibility with GNU make versions older
than 4.0 by creating the package using GNU gettext 0.23.1
infrastructure instead of 0.24.
* Update Croatian translation.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Reviewed-by: Michael Tremer <michael.tremer@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Adolf Belka [Wed, 2 Apr 2025 20:25:39 +0000 (22:25 +0200)]
kmod: Update to version 34.2
- Update from version 34.1 to 34.2
- Update of rootfile not required
- Changelog
34.2
NEWS: squash a couple of typos
libkmod: fix buffer-overflow in weakdep_to_char
testsuite: Add modprobe -c test for weakdep
autotools: Fix generated files in tarball
kmod 34.2
libkmod: release memory on builtin error path
libkmod: fix buffer-overflow in weakdep_to_char
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Adolf Belka [Wed, 2 Apr 2025 20:25:38 +0000 (22:25 +0200)]
jansson: Update to version 2.14.1
- Update from version 2.14 to 2.14.1
- Update of rootfile
- Changelog
2.14.1
Fixes:
- Fix thread safety of encoding and decoding when `uselocale` or `newlocale`
is used to switch locales inside the threads (#674, #675, #677. Thanks to
Bruno Haible for the report and help with fixing.)
- Use David M. Gay's `dtoa()` algorithm to avoid misprinting issues of real
numbers that are not exactly representable as a `double` (#680).
If this is not desirable, use `./configure --disable-dtoa` or `cmake
-DUSE_DTOA=OFF .`
Build:
- Make test output nicer in CMake based builds (#683)
- Simplify tests (#685)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>