Teensyduino 1.56 Beta #5

Status
Not open for further replies.
Paul

Paul

Administrator
Staff member
Here is a fifth beta test for Teensyduino 1.56.


Linux 32 bit:
https://www.pjrc.com/teensy/td_156-beta5/TeensyduinoInstall.linux32

Linux 64 bit:
https://www.pjrc.com/teensy/td_156-beta5/TeensyduinoInstall.linux64

Linux ARM:
https://www.pjrc.com/teensy/td_156-beta5/TeensyduinoInstall.linuxarm

Linux ARM64:
https://www.pjrc.com/teensy/td_156-beta5/TeensyduinoInstall.linuxaarch64

MacOS 10.10 to 12.x:
https://www.pjrc.com/teensy/td_156-beta5/Teensyduino_MacOS_Catalina.zip

MacOS 10.7 to 10.14:
https://www.pjrc.com/teensy/td_156-beta5/TeensyduinoInstall.dmg

Windows:
https://www.pjrc.com/teensy/td_156-beta5/TeensyduinoInstall.exe


Changes since Teensyduino 1.56-beta4:

Support for Arduino 1.8.19
Drop Arduino 1.8.18
SdFat use same SDIO signal strength on all Teensy 4 (mjs513)
More MicroMod & Teensy 4 pin 38 & 39 fixes
Fix AudioPlayQueue internal stall (h4yn0nnym0u5e)
Add AudioControlCS42448 functions (modularev)
AudioInputAnalog compile on Teensy LC
Update FlexCAN_T4
Fix ILI9488_t3 examples (KurtE)
Update IRremote
LittleFS add LittleFS_SPI & LittleFS_QSPI wrappers (KurtE)
Fix LittleFS examples (mjs513)
Remove unneed LittleFS RAM cache flush (Defragster)
Fix OctoWS2811 VideoDisplay_Teensy4 extra cases (timethy96)
RA8875 examples fixed (KurtE)
RadioHead examples fixed (mjs513)
RadioHead fixes for Teensy 2
Snooze examples fixed (KurtE)
ST7789_t3 examples fixed (KurtE)
TeensyThreads updated
TFT_ILI9163C examples fixed
XPT2046_Touchscreen threshold adjusted (Andrew Kroll)
 
As noted: Drop Arduino 1.8.18
As of now 1.8.18 still current link on Arduino.cc
But this is updated:
Arduino Software Release Notes
ARDUINO 1.8.19 2021.12.20 SECURITY HOTFIX RELEASE
[ide]
* Removed log4j from IDE. Fix CVE-2021-45105, CVE-2021-45046

ARDUINO 1.8.18 2021.12.14 SECURITY HOTFIX RELEASE
[ide]
* Upgrade log4j to 2.16.0 - Extra hardening for CVE-2021-44228
...
Click to expand...

Manual link to 1.8.19 hopefully actual release ...
Installed TD1.56.b5 on that and install worked and first build worked
 
I missed at first the dropped 18... Could install on 16, but may wait now a day or two and see if 19 comes out...
 
KurtE said:
I missed at first the dropped 18... Could install on 16, but may wait now a day or two and see if 19 comes out...
Click to expand...

I missed that too ... wondered why NEXT was grayed out ... the '?' button helped - but it is a bit obscure.

I manually got the link since Paul and the Release Notes had the update ... though it may get skipped if there is some issue.
 
defragster said:
I missed that too ... wondered why NEXT was grayed out ... the '?' button helped - but it is a bit obscure.

I manually got the link since Paul and the Release Notes had the update ... though it may get skipped if there is some issue.
Click to expand...

screenshot.jpg
I found it once I went back to the first screen, although my first glance I thought I saw 18, but it was 1.8.19... but my eyes missed the dot...

Edit I installed on 1.8.16 on both ubuntu and windows... will try them later...
 
Installed ok on Mac Catalina 10.15.7

Thanks for the zip, avoids a lot of hassle. Sorry, haven't tried any of the latest changes.

log4j no longer in Arduino, just my banking client software:mad:
 
Ok just playing catch up again. Glad I read all the posts. Will wait a couple of days to see if 1.8.19 comes out - but who knows may get impatient and just download 1.8.16 later. Would think it would come out soon if its to fix a security issue.
 
Arduino 1.8.16, 1.8.18, 1.8.19 are functionally identical.

My understanding of the log4j vulnerability exposure is that if you've installed a board package (like ESP32) where the Arduino IDE automatically checks for updates, the server hosting that board package could exploit log4j to run arbitrary code on your machine. But you're already trusting that server to provide the software you run every time you compile for whatever boards is provided. So perhaps the risk is if that server gets compromised, it could push malicious code to your machine when the Arduino IDE automatically checks for updates. The same could theoretically happen if Arduino's server were ever hacked.
 
Here are links to the files on Arduino's server

Code: 
wget https://downloads.arduino.cc/arduino-1.8.19-windows.exe
wget https://downloads.arduino.cc/arduino-1.8.19-windows.zip
wget https://downloads.arduino.cc/arduino-1.8.19-macosx.zip
wget https://downloads.arduino.cc/arduino-1.8.19-linux32.tar.xz
wget https://downloads.arduino.cc/arduino-1.8.19-linux64.tar.xz
wget https://downloads.arduino.cc/arduino-1.8.19-linuxaarch64.tar.xz
wget https://downloads.arduino.cc/arduino-1.8.19-linuxarm.tar.xz
 
My conclusion is that I'm never going to run arduino on my base machine - ie, I'm going to always run it in a VM.
 
jonr said:
My conclusion is that I'm never going to run arduino on my base machine - ie, I'm going to always run it in a VM.
Click to expand...

If just using Arduino with Teensy and TeensyDuino install, and manual library control: If Paul's p#8 is right then in Preferences perhaps leaving 'Check for updates on startup' unchecked - and don't use the Lib Mgr for updates. That should take out any Server Scan for Updates?

And p#2 showed:
Code: 
Arduino Software Release Notes
ARDUINO 1.8.19 2021.12.20 SECURITY HOTFIX RELEASE
[ide]
* [B]Removed log4j from IDE[/B]. Fix CVE-2021-45105, CVE-2021-45046

> so even that may have a new alternate way of doing updates.

<edit>
Reading this: zdnet.com/article/security-firm-blumira-discovers-major-new-log4j-attack-vector/

Recalled that each UnZip of new IDE asks for Firewall penetration for JAVA that had been allowed. Just went to "Control Panel\All Control Panel Items\Windows Defender Firewall\Allowed apps" and unchecked all those JAVA things. Always wondered what that might be for. As the IDE would be up and running before it was approved many times - not sure if it asked on first run of 1.8.19 when unzipped.

Opps - past time to update router firmware too ....
 
Last edited:
PaulStoffregen said:
Arduino's software download page has updated with links to 1.8.19.

That ZDNet article is about the 1st & 2nd log4j CVEs, which Arduino addressed with 1.8.18.
Click to expand...

Just downloaded 1.8.19 and installed beta5 without an issue. Did get a blue defender window on first run of Arduino 1.8.19 along with Nortons Ok what do you want me to do with this since you said run anyway but otherwise install went smoothly with no issue.

Did a compile of one of the MTP sketches for T4.1 and compiled without a issue. Of course I went ahead and installed 1.8.16 again last night anyway :)
 
I leaning towards wrapping up 1.56 tonight. Or maybe package up 1.56-beta6 and finalize 1.56 tomorrow or Thursday.

If anyone knows of any serious bug which ought to hold up 1.56, please remind me now?!

Normally I like to have about 2-3 weeks of betas after an Arduino release, to get everything to a stable point and just in case Arduino has a serious bug and releases another version within days. But with complete removal of log4j by 1.8.19, and no significant code changes since 1.8.16, now seems like a good time to wrap up 1.56 (and get back to dev stuff).
 
PaulStoffregen said:
I leaning towards wrapping up 1.56 tonight. Or maybe package up 1.56-beta6 and finalize 1.56 tomorrow or Thursday.

If anyone knows of any serious bug which ought to hold up 1.56, please remind me now?!

Normally I like to have about 2-3 weeks of betas after an Arduino release, to get everything to a stable point and just in case Arduino has a serious bug and releases another version within days. But with complete removal of log4j by 1.8.19, and no significant code changes since 1.8.16, now seems like a good time to wrap up 1.56 (and get back to dev stuff).
Click to expand...

So far so good... I can always think of things that might be fun to add ;) But sooner we can get back to DEV :D
 
Indeed, I have a very long list of stuff I wanted to merge into 1.56. But that would mean holding up a stable release for at least a few more weeks.
 
Sorry been pretty distracted with other things today but so far so good.

For now all I can do is say ditto to @KurtE comments :) and some optional PRs out there but nothing that can't wait until 1.57 :)
 
IDE 1.8.19 and TD 1.56b5 installed and working fine here. As Mike saw - didn't mention this time - but the (recent?) usual first run of the Arduino.exe from the ZIP is blocked by default and you have to power through to 'Run Anyway'. But losing the specter of log4j is a good thing.

As long as the FS edits are stable ( not the MTP ) - they are working here as used. Not seen any other issues in general use building and uploading.

Most recent changes were for stuff that was 'safe' or had lurking build issues.
 
Since quite a large number of small changes (mostly fixing library examples) have gone in over the last ~24 hours, I'm going to package up 1.56-beta6 now. Then I'm going to do a fresh round of testing tonight. Please jump in with 1.56-beta6 if you have any concerns or favorite features to check. If everything is looking good tomorrow evening, will release 1.56.
 
Status
Not open for further replies.
Back
Top