CU184-update.sh: Add drop hostile in & out logging entries - My drop hostile patch set updated the WUI entries to include in and out logging options but the values need to be added to the optionsfw entries for existing systems being upgraded. - After the existing CU184 update the LOGDROPHOSTILEIN and LOGDROPHO)STILEOUT entries are not in the settings file which trewats them as being set to off, even though they are enabled in the WUI update. - This patch adds the LOGDROPHOSTILEIN and LOGDROPHOSTILEOUT entries into the settings file and then runs the firewallctrl command to apply to the firewall. - Ran a CU184 update on a CU183 vm system and then ran the comands added into the update.sh script and then did a reboot. Entries include and DROP_HOSTILE entries start to be logged again. Tested-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
tools: Rewrite checkrootfiles This is a clean rewrite that makes the script a little bit more modular and easier to use. It should also show clearer error messages. Finally, it removes the exclusion of various files that are no longer a hit any more. The only legitimate exception is qemu. Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
time.cgi: Add German translation Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
time.cgi: add current date-time to this WebGUI page - added words and date-time format to english (en.pl) - other languages are needed - seconds included since time is accurate to < .1s https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=2234e8aacac2e0d0b06dac4513585c15c2b3b440 Code-by: Leo-Andres Hofmann <hofmann@leo-andres.de> Signed-off-by: Jon Murphy <jon.murphy@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
expat: Update to version 2.6.2 - Update from version 2.6.1 to 2.6.2 - Update of rootfile - Changelog 2.6.2 Security fixes: #839 #842 CVE-2024-28757 -- Prevent billion laughs attacks with isolated use of external parsers. Please see the commit message of commit 1d50b80cf31de87750103656f6eb693746854aa8 for details. Bug fixes: #839 #841 Reject direct parameter entity recursion and avoid the related undefined behavior Other changes: #847 Autotools: Fix build for DOCBOOK_TO_MAN containing spaces #837 Add missing #821 and #824 to 2.6.1 change log #838 #843 Version info bumped from 10:1:9 (libexpat*.so.1.9.1) to 10:2:9 (libexpat*.so.1.9.2); see https://verbump.de/ for what these numbers do Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
xz: Update to version 5.6.1 - Update from version 5.6.0 to 5.6.1 - Update of rootfile - Changelog 5.6.1 * liblzma: Fixed two bugs relating to GNU indirect function (IFUNC) with GCC. The more serious bug caused a program linked with liblzma to crash on start up if the flag -fprofile-generate was used to build liblzma. The second bug caused liblzma to falsely report an invalid write to Valgrind when loading liblzma. * xz: Changed the messages for thread reduction due to memory constraints to only appear under the highest verbosity level. * Build: - Fixed a build issue when the header file <linux/landlock.h> was present on the system but the Landlock system calls were not defined in <sys/syscall.h>. - The CMake build now warns and disables NLS if both gettext tools and pre-created .gmo files are missing. Previously, this caused the CMake build to fail. * Minor improvements to man pages. * Minor improvements to tests. Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
wget: Update to version 1.24.5 - Update from version 1.21.4 to 1.24.5 - Update of rootfile not required - Changelog 1.24.5 ** Fix how subdomain matches are checked for HSTS. Fixes a minor issue where cookies may be leaked to the wrong domain ** Wget will now also parse the srcset attribute in <source> HTML tags ** Support reading fetchmail style "user" and "passwd" fields from netrc ** In some cases, prevent the confusing "Cannot write to... (success)" error messages ** Support extremely fast download speeds (TB/s). Previously this would cause Wget to crash when printing the speed ** Improve portability on OpenBSD to run the test suite ** Ensure that CSS URLs are corectly quoted (Bug: 64082) Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
sqlite: Update to version 3450200 - Update from version 3450100 to 3450200 - Update of rootfile not required - Changelog 3450200 (3.45.2) Fix an error in UPSERT, introduced by enhancement 3a in version 3.35.0 (2021-03-12), that could cause an index to get out-of-sync with its table. Forum thread 919c6579c8. Reduce the scope of the NOT NULL strength reduction optimization that was added as item 8e in version 3.35.0 (2021-03-12). The optimization was being attempted in some contexts where it did not work, resulting in incorrect query results. Forum thread 440f2a2f17. Other trifling corrections and compiler warning fixes that have come up since the previous patch release. Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
tcl: Update to version 8.6.14 - Update from version 8.6.13 to 8.6.14 - Update of rootfile - Changelog 8.6.14 This is a patch release, so it primarily includes bug fixes and corrections to erratic behavior. Highlighted changes are noted below. The changes file at the root of the source tree contains a more complete list. The Timelines of all changes are online. http://core.tcl-lang.org/tcl/timeline http://core.tcl-lang.org/tk/timeline * [TIP 402] revise path normalization for x-platform UNC path support *** POTENTIAL INCOMPATIBILITY *** * Harmonize Tk's parse of numbers (screen distance, etc) with Tcl *** POTENTIAL INCOMPATIBILITY *** * Iconlist ignores options db for fg text color; affects dialogs *** POTENTIAL INCOMPATIBILITY *** * Aqua: XPutImage() swaps red and blue channels *** POTENTIAL INCOMPATIBILITY *** * [encoding convertfrom] handling of incomplete code sequences *** POTENTIAL INCOMPATIBILITY *** * Harmonize handling of ~ in paths across platforms. *** POTENTIAL INCOMPATIBILITY *** * Fix menu clone binding misbehavior, menu-20.1[2-6]. *** POTENTIAL INCOMPATIBILITY *** * Improved performance of [exec] and [open |$cmd] on unix-lke systems, especially with large memory footprints. * Improve performance of large treeview destruction. * Improve performance of large image insertions into text. * Improve widget creation performance due to poor font caching. * Fix notebook tab appearances when placed on edge other than top. * Enable treeview display of partial final line. * Win: restore [exec %var%] that was dropped in 8.6.13. * Allow [chan create {} $cmd]. Enables simulation of server channels. * Allow return from [tk scaling] in safe interps. * Prevent navigation by word exposing clues to masked entry contents. * Fix crashes or hangs in... - [chan pop] with pending input - thread finalization of reflected channels - [label .l -bitmap floppy] - [set tcl_precision 15; expr 6.4623485355705287e-27] - [tk busy forget] and [tk busy hold] - channel read into "string" Tcl_Obj can BO, and perform poorly - KVO crash after destroying Aqua's first root toplevel - Test treeview-6ee162c3f9 - Test tailcall-bug-784befb0ba - Tests menu-40.[12] * Repair memory leaks and errors - Eliminate undefined realloc() calls - Silence many warnings from -fsanitize=function - Flawed interfacing with XIM - Tcl_UtfToExternal writing to one-byte buffer - Tcl_UtfToUniChar() handling of 0xC1. - Tk_ConfigureValue could call wrong free() routine. - tests getuncichar-1.* in utf.test - ...and many more * No more support for 32-bit Cygwin * ::tcl_platform(osVersion) updated to report Windows 11 * Accommodate macOS deprecation of sprintf() * Silence macOS 14 warnings about secure restorable state. * Code changes to support ASan use-after-return detection * Revise Tcl_MakeFileChannel() to better partner with pledge() * Prevent false [clock format] error reports on FreeBSD * Region clip & copy make better use of OS facilities. * Update handling of Apple FourCC creator codes. * Text selection omits first character, text-38.1 * Windows: improved support of non-BMP pathnames * Fixed some Y2038 limitations * Fix photo color drawing on X11 32-bit visuals. * Fix <<MenuSelect>> regression on menus with -tearoff * Correct rounding of [nsFont pointSize]. * zlib comment/filename error handling (zlib-8.19, zlib-8.2[012]) * Prevent theme change attempts after Tk finalize. * Make dialogs robust against parent destruction. * Make [tk_chooseColor] robust against failed grab. * Fix menu parsing of @x,y indices. menu-22.[6-9] * Fix inconsistent results from [font measure]. * Fixed [clock scan|add] handling of abbreviated options * Avoid endless loops replacing [unknown] or [history]. * Fix polluted error messages from [send -option]. * PNG photo image decoder missed a 0xFF entry. * Fix failing winTime-2.1 on Windows * test string-2.20.1 failed on big endian platforms * Updated bundled packages, libraries, standards, data - Itcl 4.2.4 - sqlite3 3.44.2 - Thread 2.8.9 - TDBC* 1.1.7 - tcltest 2.5.7 - libtommath 1.2.1 - zlib 1.3.1 - Unicode 15.1 - tzdata 2024a Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
shadow: Update to version 4.15.0 - Update from 4.14.5 to 4.15.0 - Update of rootfile not required - Changelog 4.15.0 libshadow: Fix build error (parameter name omitted). Build system: Link correctly with libdl. Install pam configs for chpasswd(8) and newusers(8) when using ./configure --with-libpam --disable-account-tools-setuid. Merge libshadow and libmisc into a single libshadow. This fixes problems in the linker, which were reported at least in Gentoo. Fix build with musl libc. Support out of tree builds useradd(8): Set proper SELinux labels for def_usrtemplate 4.14.6 login(1): Fix off-by-one bugs. passwd(1): Don't silently truncate passwords of length >= 200 characters. Instead, accept a length of PASS_MAX, and reject longer ones. libshadow: Fix calculation in strtoday(), which caused a wrong half-day offset in some cases. Fix parsing of dates in get_date(). Use utmpx instead of utmp. This fixes a regression introduced in 4.14.0. Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
sdl2: Update to version 2.30.1 - Update from version 2.28.5 to 2.30.1 - Update of rootfile - Changelog 2.30.1 Fixed a regression causing SDL_WaitEvent() to return spurious failures Fixed X11 cursors on the latest release of GNOME Wayland windows automatically have OpenGL enabled again Fixed memory corruption when converting signed 16-bit audio to float Fixed audio artifacts when converting signed 8-bit audio to float Fixed the clip rectangle not being updated when the viewport changes in the SDL renderer Convert mouse wheel coordinates to the rendering view in the SDL renderer Fixed a crash handling controllers on macOS Fixed a crash setting a window fullscreen with Emscripten Fixed the keyboard automatically popping up when resuming an application on Android 2.30.0 In addition to lots of bug fixes, here are the major changes in this release: General: Added support for 2 bits-per-pixel indexed surface formats Added the function SDL_GameControllerGetSteamHandle() to get the Steam API handle for a controller, if available Added the event SDL_CONTROLLERSTEAMHANDLEUPDATED which is sent when the Steam API handle for a controller changes. This could also change the name, VID, and PID of the controller. Added the environment variable SDL_LOGGING to control default log output macOS: Added the hint SDL_HINT_JOYSTICK_IOKIT to control whether the IOKit controller driver should be used Added the hint SDL_HINT_JOYSTICK_MFI to control whether the GCController controller driver should be used Added the hint SDL_HINT_RENDER_METAL_PREFER_LOW_POWER_DEVICE to choose whether high or low power GPU should be used for rendering, in the case where there are multiple GPUs available Xbox: Added the function SDL_GDKGetDefaultUser() Signed-off-by: Adolf Belka <adolf.belka@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>