Update 04.05.10-FW27

.gitattributes

@@ -1,4 +1,4 @@
 ptxproj/src/linux-*.tgz filter=lfs diff=lfs merge=lfs -text
-ptxproj/src/linux-5.15.107-rt62-w04.02.02.tgz filter=lfs diff=lfs merge=lfs -text
 ptxproj/src/boost_1_68_0.tar.bz2 filter=lfs diff=lfs merge=lfs -text
-ptxproj/src/go1.18.7.linux-amd64.tar.gz filter=lfs diff=lfs merge=lfs -text
+ptxproj/src/rootlesskit-dep-2.0.2.tar.gz filter=lfs diff=lfs merge=lfs -text
+ptxproj/src/go1.21.8.linux-amd64.tar.gz filter=lfs diff=lfs merge=lfs -text

Changelog

@@ -1,3 +1,89 @@
+Firmware Release 04.05.10 (27) – CODESYS 3
+
+Engineering by CODESYS IDE V. 3.5 is supported
+Engineering by e!COCKPIT IDE is not supported
+CODESYS 2.3 is not supported
+
+Migration Guide – from e!COCKPIT to CODEYS V3.5:
+• https://techdocs.wago.com/Software/eCOCKPIT_Migration/en-US/index.html#index_content
+
+System:
+[NEW] Support for Spanning Tree Protocols STP/RSTP
+[NEW] WAT-35711 Support for VS code
+[NEW] Support for DHCP/DNS. Controller can act as DHCP/DNS server
+[NEW] Support for WAGO Device Sphere
+[FIXED] WAT-21892 Didn’t show all NTP Servers assigned via DHCP in WBM including
+                  statically configured NTP servers.
+[FIXED] WAT-36597 Placeholder in WDX response for IO LED diagnostic request
+[FIXED] WAT-36420 Pre-mature end of blink sequence during firmware update via SD card
+[FIXED] WAT-36635 Updated TZ-String for China to CST-9 and for Japan to JST-9
+[FIXED] WAT-35113 Error using Docker Swarm
+[FIXED] WAT-36431 Devices with two Ethernet interfaces: Loss of Ethernet connection on one
+                  Ethernet interface leads to communication interruption on the other Ethernet interface
+[FIXED] WAT-36006 IP address of the Docker Bridge0 in connection with temporary IP addresses
+[CHANGED] WAT-36240 Backup created with WAGO Upload does not contain docker related files
+[CHANGED] WAT-35865 Auto-Update via sd card: update of CODDESYS application will clear retain data by default.
+[REMOVED] Cloud Connectivity: IBM cloud specific functionality is removed
+[DEPRECATED] The network feature rate limiting is deprecated and will be removed in future versions
+[Note] ADVICE Code generation from WDA OpenAPI is possible via Postman
+
+Operating System:
+[FIXED] SECURITY CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, CVE-2024-21626, CVE-2022-48624, CVE-2023-42465, 
+                 CVE-2023-48795, CVE-2023-29491, CVE-2023-45853, CVE-2023-28321, CVE-2023-28322, CVE-2023-28320, 
+                 CVE-2023-28319, CVE-2023-4527, CVE-2023-5156, CVE-2023-4911, CVE-2023-28320, CVE-2023-28319, 
+                 CVE-2023-37464, CVE-2023-28484, CVE-2023-29469, CVE-2022-23471, CVE-2022-48303, CVE-2024-25062, 
+                 CVE-2023-48795, CVE-2023-2603, CVE-2023-38545, CVE-2023-41913, CVE-2023-38545, CVE-2023-38546, 
+                 CVE-2019-11358, CVE 2020-11022, CVE-2020-11023, CVE-2020-23064
+[FIXED] WAT-36233 Update jQuery to 3.7.1
+[CHANGED] Update OpenSSL to v3.13
+[NEW] WAT-35711 Add libatomic
+[CHANGED] Updated ncurses to version 6.4
+[CHANGED] PFC300: Kernel update 6.6.15 rt22
+
+Runtime System:
+[NEW] CODESYS3 Runtime-System 3.5.19.50
+[NOTE] ADVICE PFC300: The behavior of the DAL watchdog may change on multicore systems.
+              If a high-priority IEC task on a core displaces all other IEC tasks on this core, 
+              the BUS is no longer driven into a defined state via the watchdog, as the system and 
+              therefore other IEC tasks on other cores can still be executed.
+              For controlled behavior, it is recommended to use the CODESYS internal task watchdog.
+[FIXED] WAT-36527 Flickering of LEDs when plugging Ethernet cables.
+[CHANGED] Fix scheduling policy for all background tasks of CODESYS runtime system (e.g. Webserver, OPCUA-Server) 
+          and customer application that was accidentally changed in FW26.
+[FIXED] WAT-36306 Creation of directory /media/sd directory even without sd card mounted.
+[FIXED] SECURITY CVE-2024-5000, CVE-2023-6357
+
+Fieldbus Interface & Protocols:
+[NEW] BACnet: Support of BACnet/SC
+              DRM License BACnet/SC Hub:
+                2759-2223_0211-1000 Runtime BACnet 300 Single License Plus
+                2759-2226_0211-1000 Runtime BACnet 600 Single License Plus
+              DRM License BACnet/SC Node:
+                2759-2273_0211-1000 Runtime BACnet 300 Single License
+                2759-2276_0211-1000 Runtime BACnet 600 Single License
+[NEW] BACnet: Support for PFC100 G2 devices. (750-8110, -8111, -8112)
+[FIXED] WAT-36652 CAN: Improve CAN Layer2 bus fault recovery to solve possible restart problem after partial disruption
+[FIXED] WAT-36604 CAN: Fix high task cycle time when using CAN layer2 frame transmission methods in Bus Off state.
+[KNOWN] WAT-36466 OPC UA Server: Denial of service after several link down for a specific time
+[KNOWN] WAT-36203 OPC UA Server: Stop publishing if the system time is set backward
+
+Libraries:
+[NEW] WagoAppSparkplug: NBIRTH message without alias for Node Control/Rebirth
+[FIXED] WAT-36493 CAA File: DirOpen leads to error message “Wrong Parameter”
+[FIXED] WAT-36624 WagoSysCom_Internal_PFC: Incompatibility with WagoSysPlainMem v.1.5.3.0.
+[NOTE] WAT-36624 When porting existing projects it is necessary to update the device or 
+                 set placeholder manually to WagoSysCom_Internal_PFC v1.0.2.7.
+[FIXED] WAT-36190 WagoAppFielDir: Access failure for creation of directories on SD card from CODESYS application.
+
+Web Based Management:
+[NEW] SECURITY Changeover to the central authentication service with new login form
+[FIXED] SECURITY CVE-2023-4089
+[KNOWN] WAT-36520 Mass Storage - Format memory card: If one or more USB sticks are connected to the device, 
+                  the memory card is not always formatted, but the last connected medium.
+                  Workaround: Remove USB stick(s).
+
+########################################################################################################################
+
 Firmware Release 04.04.03 (26) – CODESYS 3
 
 Engineering by CODESYS IDE V. 3.5 is supported

Dockerfile

@@ -1,7 +1,7 @@
 ARG REGISTRY_PREFIX='wagoautomation/'
-ARG SDK_BUILDER_VERSION='2.0.0'
+ARG SDK_BUILDER_VERSION='3.0.0'
 
-FROM ${REGISTRY_PREFIX}sdk-builder:${SDK_BUILDER_VERSION} as pfc-firmware-sdk-G2
+FROM ${REGISTRY_PREFIX}sdk-builder:${SDK_BUILDER_VERSION} AS pfc-firmware-sdk-G2
 
 
 ARG USERID

README.md

@@ -82,7 +82,7 @@ Alternatively you can also run pfc-builder in bash mode (```make bash```) and en
 
     ptxdist select configs/wago-pfcXXX/ptxconfig_pfc_g2 && \ 
     ptxdist platform configs/wago-pfcXXX/platformconfig && \      
-    ptxdist toolchain /opt/gcc-Toolchain-2022.08/LINARO.Toolchain-2022.08/arm-linux-gnueabihf/bin/ && \
+    ptxdist toolchain /opt/gcc-Toolchain-2022.08-wago.1/LINARO.Toolchain-2022.08-wago.1/arm-linux-gnueabihf/bin/ && \
     ptxdist clean -q
 
 #### 3.1) Get and download all packages

docker/build.sh

@@ -2,7 +2,7 @@
 
 set -e
 
-TOOLCHAIN_PATH="/opt/gcc-Toolchain-2022.08/LINARO.Toolchain-2022.08/arm-linux-gnueabihf/bin/"
+TOOLCHAIN_PATH="/opt/gcc-Toolchain-2022.08-wago.1/LINARO.Toolchain-2022.08-wago.1/arm-linux-gnueabihf/bin/"
 
 print_usage() {
     cat << EOF

ptxproj/Makefile

@@ -118,6 +118,8 @@ PRODUCTION_IMAGES += $(OUT_DIR)/emmc-commission-pfc200v3_$(IMAGE_ID).img
 
 PRODUCTION_IMAGES += $(OUT_DIR)/emmc-wago-production-pfc100g2_$(IMAGE_ID).img
 PRODUCTION_IMAGES += $(OUT_DIR)/emmc-commission-pfc100g2_$(IMAGE_ID).img
+else ifeq ($(PLATFORM),wago-pfc300)
+PRODUCTION_IMAGES += $(OUT_DIR)/linuximage-production_$(IMAGE_ID).fit
 endif
 
 PRODUCTION_IMAGES += $(OUT_DIR)/firmware_$(IMAGE_ID).hex
@@ -134,6 +136,8 @@ ROOT_DEBUG_ARCHIVE += $(OUT_DIR)/root-debug_$(IMAGE_ID).tar.gz
 INDEX ?= $(OUT_DIR)/index.json
 INDEX_GENERATOR ?= $(BUILDSUPPORTDIR)/create_index.sh
 
+SBOM = $(OUT_DIR)/sbom.txt
+
 # Select default dist targets
 DIST_TARGETS += $(OUT_DIR)/root.tgz
 DIST_TARGETS += $(GENIMAGE_CONFIGS)
@@ -156,6 +160,7 @@ ifneq ($(IMAGE_DIR),$(OUT_DIR))
 DIST_TARGETS += $(ROOT_DEBUG_ARCHIVE)
 endif
 #DIST_TARGETS += $(INDEX)
+DIST_TARGETS += $(SBOM)
 
 .PHONY: default
 default: dist
@@ -168,7 +173,7 @@ default: dist
 
 # Main targets
 #######################################################################################################################
-.PHONY: dist distclean sdcard wup updatefile updatepack production_images additional_packages fw_desc_files index
+.PHONY: dist distclean sdcard wup updatefile updatepack production_images additional_packages fw_desc_files index sbom
 
 
 dist: $(DIST_TARGETS) additional_packages
@@ -188,6 +193,8 @@ additional_packages:
 
 index: $(INDEX)
 
+sbom: $(SBOM)
+
 distclean:
 	   rm -f $(DIST_TARGETS) \
 	&& rm -f $(OUT_DIR)/ptxdist.images.stage
@@ -211,6 +218,10 @@ $(OUT_DIR)/%: $(TARGETROOT)/etc/% | $(OUT_DIR)
 	@echo "Extract from target root directory: $<"
 	cp $< $@
 
+$(OUT_DIR)/%_$(IMAGE_ID).fit: $(IMAGE_DIR)/%.fit | $(OUT_DIR)
+	@echo "Create versioned image by copy: $<"
+	cp $< $@
+
 $(OUT_DIR)/%_$(IMAGE_ID).img: $(IMAGE_DIR)/%.img | $(OUT_DIR)
 	@echo "Create versioned image by copy: $<"
 	cp $< $@
@@ -292,6 +303,12 @@ $(INDEX): $(INDEX_GENERATOR) Makefile | $(OUT_DIR)
 	                                $(RAUC_UPDATEFILE)\
 	                                $(WUP)\
 
+.PHONY: $(SBOM)
+$(SBOM): | $(OUT_DIR)
+	@echo "Create SBOM"
+	# Note: base and platform-opengl are meta packages without further information
+	ptxdist package-info `ptxdist print PACKAGES-y | sed -e 's/ base / /g' -e 's/ platform-opengl / /g'` > $(SBOM)
+
 $(OUT_DIR):
 	mkdir -p $@
 

ptxproj/config/wpasupplicant/defconfig

@@ -488,7 +488,7 @@ CONFIG_INTERWORKING=y
 CONFIG_HS20=y
 
 # Enable interface matching in wpa_supplicant
-CONFIG_MATCH_IFACE=y
+#CONFIG_MATCH_IFACE=y
 
 # Disable roaming in wpa_supplicant
 #CONFIG_NO_ROAMING=y

ptxproj/configs/wago-pfcXXX/directory-services-addon-collection

@@ -9,13 +9,13 @@ PTXCONF_COLLECTION_MANUAL=y
 PTXCONF_ACL=y
 PTXCONF_ATTR=y
 PTXCONF_CYRUS_SASL=y
+PTXCONF_C_ARES=y
 PTXCONF_DING_LIBS=y
 PTXCONF_KEYUTILS=y
 PTXCONF_KRB5=y
 PTXCONF_LDB=y
 PTXCONF_LIBPCRE2=y
 PTXCONF_LIBUNISTRING=y
-PTXCONF_OPENLDAP=y
 PTXCONF_P11_KIT=y
 PTXCONF_SAMBA=y
 PTXCONF_SSSD=y

ptxproj/configs/wago-pfcXXX/packages/diagnostic.xml

@@ -3072,7 +3072,7 @@
       </rststr>
   </event>
 </eventclass>
-<eventclass class_range="x0014" name="BACNET_IP">
+<eventclass class_range="x0014" name="BACNET">
   <event id="x0001" name="_BT_OFF">
     <led name="BT" default="yes" state="STATIC_OFF">
     </led>
@@ -3710,6 +3710,44 @@
 
   </event>
 </eventclass>
+<eventclass class_range="x0017" name="SERIAL">
+  <event id="x0001" name="TRM_OFF">
+    <led name="TRM" state="STATIC_OFF">
+    </led>
+    <string>
+      	<en>Termination Resistor and Bias Network disabled</en>
+      	<de>Abschlusswiderstand und Bias Netzwerk deaktiviert</de>
+      </string>
+
+  </event>
+  <event id="x0002" name="TERMINATION_RESISTOR_ON">
+    <led name="TRM" state="STATIC_GRN">
+    </led>
+    <string>
+      	<en>Termination Resistor enabled</en>
+      	<de>Abschlusswiderstand aktiviert</de>
+      </string>
+
+  </event>
+  <event id="x0003" name="BIAS_NETWORK_ON">
+    <led name="TRM" state="STATIC_GRN">
+    </led>
+    <string>
+        <en>Bias Network enabled</en>
+        <de>Bias Netzwerk aktiviert</de>
+      </string>
+
+  </event>
+  <event id="x0004" name="TERMINATION_RESISTOR_BIAS_NETWORK_ON">
+    <led name="TRM" state="STATIC_GRN">
+    </led>
+    <string>
+        <en>Termination Resistor and Bias Network enabled</en>
+        <de>Ablusswiderstand und Bias Netzwerk aktiviert</de>
+      </string>
+
+  </event>
+</eventclass>
 <eventclass class_range="x2FFF" name="KBUS">
   <event id="x0000" name="OPERATIONAL">
     <led name="IO" state="STATIC_GRN">

ptxproj/configs/wago-pfcXXX/platformconfig

@@ -68,7 +68,7 @@ PTXCONF_CROSSCHAIN_VENDOR=""
 PTXCONF_CROSSCHAIN_CHECK="11.3.1"
 PTXCONF_LIBC_GLIBC=y
 # PTXCONF_LIBC_UCLIBC is not set
-PTXCONF_GLIBC_VERSION="2.34"
+PTXCONF_GLIBC_VERSION="2.35"
 PTXCONF_GNU_TARGET="arm-linux-gnueabihf"
 PTXCONF_COMPILER_PREFIX="arm-linux-gnueabihf-"
 PTXCONF_COMPILER_PREFIX_KERNEL="${PTXCONF_COMPILER_PREFIX}"
@@ -110,13 +110,13 @@ PTXCONF_KERNEL=y
 PTXCONF_KERNEL_ARTIFACTORY=y
 PTXCONF_KERNEL_URL_TEMPLATE="%ARTIFACTORY_BASE_URL%/kernel-generic-prod/wago/linux/release/am3xxx_pfc_generic/am3xxx_pfc_generic-%VERSION%/.build/deploy/linux-%VERSION%.tgz"
 PTXCONF_KERNEL_RT_PATCH="rt62"
-PTXCONF_KERNEL_LOCALVERSION="w04.02.02"
+PTXCONF_KERNEL_LOCALVERSION="w04.03.05"
 PTXCONF_KERNEL_XPKG=y
 PTXCONF_KERNEL_INSTALL=y
 PTXCONF_KERNEL_MODULES=y
 PTXCONF_KERNEL_MODULES_INSTALL=y
 PTXCONF_KERNEL_VERSION="5.15.107"
-PTXCONF_KERNEL_MD5="a587c9b8edabf1b249fc5cb18813e9b8"
+PTXCONF_KERNEL_MD5="d76fec8e06d56f3edbd9fed5531b6226"
 # PTXCONF_KERNEL_IMAGE_BZ is not set
 # PTXCONF_KERNEL_IMAGE_Z is not set
 # PTXCONF_KERNEL_IMAGE_XIP is not set
@@ -154,7 +154,7 @@ PTXCONF_DTC_OFTREE_DTS="am335x-pfc-750_8210.dts am335x-pfc-750_8211.dts am335x-p
 PTXCONF_DTC_EXTRA_ARGS=""
 PTXCONF_HOST_DTC=y
 PTXCONF_HOST_DTC_VERSION="1.4.0"
-PTXCONF_HOST_DTC_MD5="a68528a7d5c626c3fb8ee87b09568539"
+PTXCONF_HOST_DTC_MD5="993e14242818bcfd801edd4f27ddd5a3"
 
 #
 # console options               
@@ -175,8 +175,8 @@ PTXCONF_BAREBOX_ARCH_STRING="arm"
 PTXCONF_BAREBOX=y
 PTXCONF_BAREBOX_URL_TEMPLATE="%ARTIFACTORY_BASE_URL%/kernel-generic-prod/wago/barebox/release/am335x_pfc/am335x_pfc-%VERSION%/.build/deploy/barebox-%VERSION%.tgz"
 PTXCONF_BAREBOX_VERSION="2021.10.0"
-PTXCONF_BAREBOX_LOCALVERSION="w04.02.00_15"
-PTXCONF_BAREBOX_MD5="a4d67b43a8b8928b1d0d6d12df5753b0"
+PTXCONF_BAREBOX_LOCALVERSION="w04.03.02_15"
+PTXCONF_BAREBOX_MD5="02b5b7b7814b6384be08ba6a565a3753"
 PTXCONF_BAREBOX_CONFIG="am335x_pfc_defconfig am35xx_pfc_defconfig"
 # PTXCONF_BAREBOX_EXTRA_ENV is not set
 # PTXCONF_BAREBOX_BAREBOXENV is not set