Forum Rule: Always post complete source code & details to reproduce any issue!
Results 1 to 19 of 19

Thread: Teensyduino 1.56 Beta #5

  1. #1
    Administrator Paul's Avatar
    Join Date
    Oct 2012
    Posts
    428

    Teensyduino 1.56 Beta #5

    Here is a fifth beta test for Teensyduino 1.56.


    Linux 32 bit:
    https://www.pjrc.com/teensy/td_156-b...nstall.linux32

    Linux 64 bit:
    https://www.pjrc.com/teensy/td_156-b...nstall.linux64

    Linux ARM:
    https://www.pjrc.com/teensy/td_156-b...stall.linuxarm

    Linux ARM64:
    https://www.pjrc.com/teensy/td_156-b...l.linuxaarch64

    MacOS 10.10 to 12.x:
    https://www.pjrc.com/teensy/td_156-b...S_Catalina.zip

    MacOS 10.7 to 10.14:
    https://www.pjrc.com/teensy/td_156-b...inoInstall.dmg

    Windows:
    https://www.pjrc.com/teensy/td_156-b...inoInstall.exe


    Changes since Teensyduino 1.56-beta4:

    Support for Arduino 1.8.19
    Drop Arduino 1.8.18
    SdFat use same SDIO signal strength on all Teensy 4 (mjs513)
    More MicroMod & Teensy 4 pin 38 & 39 fixes
    Fix AudioPlayQueue internal stall (h4yn0nnym0u5e)
    Add AudioControlCS42448 functions (modularev)
    AudioInputAnalog compile on Teensy LC
    Update FlexCAN_T4
    Fix ILI9488_t3 examples (KurtE)
    Update IRremote
    LittleFS add LittleFS_SPI & LittleFS_QSPI wrappers (KurtE)
    Fix LittleFS examples (mjs513)
    Remove unneed LittleFS RAM cache flush (Defragster)
    Fix OctoWS2811 VideoDisplay_Teensy4 extra cases (timethy96)
    RA8875 examples fixed (KurtE)
    RadioHead examples fixed (mjs513)
    RadioHead fixes for Teensy 2
    Snooze examples fixed (KurtE)
    ST7789_t3 examples fixed (KurtE)
    TeensyThreads updated
    TFT_ILI9163C examples fixed
    XPT2046_Touchscreen threshold adjusted (Andrew Kroll)

  2. #2
    Senior Member+ defragster's Avatar
    Join Date
    Feb 2015
    Posts
    15,890
    As noted: Drop Arduino 1.8.18
    As of now 1.8.18 still current link on Arduino.cc
    But this is updated:
    Arduino Software Release Notes
    ARDUINO 1.8.19 2021.12.20 SECURITY HOTFIX RELEASE
    [ide]
    * Removed log4j from IDE. Fix CVE-2021-45105, CVE-2021-45046

    ARDUINO 1.8.18 2021.12.14 SECURITY HOTFIX RELEASE
    [ide]
    * Upgrade log4j to 2.16.0 - Extra hardening for CVE-2021-44228
    ...
    Manual link to 1.8.19 hopefully actual release ...
    Installed TD1.56.b5 on that and install worked and first build worked

  3. #3
    Senior Member+ KurtE's Avatar
    Join Date
    Jan 2014
    Posts
    10,352
    I missed at first the dropped 18... Could install on 16, but may wait now a day or two and see if 19 comes out...

  4. #4
    Senior Member+ defragster's Avatar
    Join Date
    Feb 2015
    Posts
    15,890
    Quote Originally Posted by KurtE View Post
    I missed at first the dropped 18... Could install on 16, but may wait now a day or two and see if 19 comes out...
    I missed that too ... wondered why NEXT was grayed out ... the '?' button helped - but it is a bit obscure.

    I manually got the link since Paul and the Release Notes had the update ... though it may get skipped if there is some issue.

  5. #5
    Senior Member+ KurtE's Avatar
    Join Date
    Jan 2014
    Posts
    10,352
    Quote Originally Posted by defragster View Post
    I missed that too ... wondered why NEXT was grayed out ... the '?' button helped - but it is a bit obscure.

    I manually got the link since Paul and the Release Notes had the update ... though it may get skipped if there is some issue.
    Click image for larger version. 

Name:	screenshot.jpg 
Views:	23 
Size:	39.7 KB 
ID:	26960
    I found it once I went back to the first screen, although my first glance I thought I saw 18, but it was 1.8.19... but my eyes missed the dot...

    Edit I installed on 1.8.16 on both ubuntu and windows... will try them later...

  6. #6
    Senior Member
    Join Date
    Dec 2015
    Location
    LA
    Posts
    242
    Installed ok on Mac Catalina 10.15.7

    Thanks for the zip, avoids a lot of hassle. Sorry, haven't tried any of the latest changes.

    log4j no longer in Arduino, just my banking client software

  7. #7
    Senior Member+ mjs513's Avatar
    Join Date
    Jul 2014
    Location
    New York
    Posts
    8,147
    Ok just playing catch up again. Glad I read all the posts. Will wait a couple of days to see if 1.8.19 comes out - but who knows may get impatient and just download 1.8.16 later. Would think it would come out soon if its to fix a security issue.

  8. #8
    Senior Member PaulStoffregen's Avatar
    Join Date
    Nov 2012
    Posts
    26,240
    Arduino 1.8.16, 1.8.18, 1.8.19 are functionally identical.

    My understanding of the log4j vulnerability exposure is that if you've installed a board package (like ESP32) where the Arduino IDE automatically checks for updates, the server hosting that board package could exploit log4j to run arbitrary code on your machine. But you're already trusting that server to provide the software you run every time you compile for whatever boards is provided. So perhaps the risk is if that server gets compromised, it could push malicious code to your machine when the Arduino IDE automatically checks for updates. The same could theoretically happen if Arduino's server were ever hacked.

  9. #9
    Senior Member PaulStoffregen's Avatar
    Join Date
    Nov 2012
    Posts
    26,240
    Here are links to the files on Arduino's server

    Code:
    wget https://downloads.arduino.cc/arduino-1.8.19-windows.exe
    wget https://downloads.arduino.cc/arduino-1.8.19-windows.zip
    wget https://downloads.arduino.cc/arduino-1.8.19-macosx.zip
    wget https://downloads.arduino.cc/arduino-1.8.19-linux32.tar.xz
    wget https://downloads.arduino.cc/arduino-1.8.19-linux64.tar.xz
    wget https://downloads.arduino.cc/arduino-1.8.19-linuxaarch64.tar.xz
    wget https://downloads.arduino.cc/arduino-1.8.19-linuxarm.tar.xz

  10. #10
    Senior Member
    Join Date
    May 2015
    Location
    USA
    Posts
    1,094
    My conclusion is that I'm never going to run arduino on my base machine - ie, I'm going to always run it in a VM.

  11. #11
    Senior Member+ defragster's Avatar
    Join Date
    Feb 2015
    Posts
    15,890
    Quote Originally Posted by jonr View Post
    My conclusion is that I'm never going to run arduino on my base machine - ie, I'm going to always run it in a VM.
    If just using Arduino with Teensy and TeensyDuino install, and manual library control: If Paul's p#8 is right then in Preferences perhaps leaving 'Check for updates on startup' unchecked - and don't use the Lib Mgr for updates. That should take out any Server Scan for Updates?

    And p#2 showed:
    Code:
    Arduino Software Release Notes
    ARDUINO 1.8.19 2021.12.20 SECURITY HOTFIX RELEASE
    [ide]
    * Removed log4j from IDE. Fix CVE-2021-45105, CVE-2021-45046
    > so even that may have a new alternate way of doing updates.

    <edit>
    Reading this: zdnet.com/article/security-firm-blumira-discovers-major-new-log4j-attack-vector/

    Recalled that each UnZip of new IDE asks for Firewall penetration for JAVA that had been allowed. Just went to "Control Panel\All Control Panel Items\Windows Defender Firewall\Allowed apps" and unchecked all those JAVA things. Always wondered what that might be for. As the IDE would be up and running before it was approved many times - not sure if it asked on first run of 1.8.19 when unzipped.

    Opps - past time to update router firmware too ....
    Last edited by defragster; 12-21-2021 at 06:36 AM.

  12. #12
    Senior Member PaulStoffregen's Avatar
    Join Date
    Nov 2012
    Posts
    26,240
    Arduino's software download page has updated with links to 1.8.19.

    That ZDNet article is about the 1st & 2nd log4j CVEs, which Arduino addressed with 1.8.18.

  13. #13
    Senior Member+ mjs513's Avatar
    Join Date
    Jul 2014
    Location
    New York
    Posts
    8,147
    Quote Originally Posted by PaulStoffregen View Post
    Arduino's software download page has updated with links to 1.8.19.

    That ZDNet article is about the 1st & 2nd log4j CVEs, which Arduino addressed with 1.8.18.
    Just downloaded 1.8.19 and installed beta5 without an issue. Did get a blue defender window on first run of Arduino 1.8.19 along with Nortons Ok what do you want me to do with this since you said run anyway but otherwise install went smoothly with no issue.

    Did a compile of one of the MTP sketches for T4.1 and compiled without a issue. Of course I went ahead and installed 1.8.16 again last night anyway

  14. #14
    Senior Member PaulStoffregen's Avatar
    Join Date
    Nov 2012
    Posts
    26,240
    I leaning towards wrapping up 1.56 tonight. Or maybe package up 1.56-beta6 and finalize 1.56 tomorrow or Thursday.

    If anyone knows of any serious bug which ought to hold up 1.56, please remind me now?!

    Normally I like to have about 2-3 weeks of betas after an Arduino release, to get everything to a stable point and just in case Arduino has a serious bug and releases another version within days. But with complete removal of log4j by 1.8.19, and no significant code changes since 1.8.16, now seems like a good time to wrap up 1.56 (and get back to dev stuff).

  15. #15
    Senior Member+ KurtE's Avatar
    Join Date
    Jan 2014
    Posts
    10,352
    Quote Originally Posted by PaulStoffregen View Post
    I leaning towards wrapping up 1.56 tonight. Or maybe package up 1.56-beta6 and finalize 1.56 tomorrow or Thursday.

    If anyone knows of any serious bug which ought to hold up 1.56, please remind me now?!

    Normally I like to have about 2-3 weeks of betas after an Arduino release, to get everything to a stable point and just in case Arduino has a serious bug and releases another version within days. But with complete removal of log4j by 1.8.19, and no significant code changes since 1.8.16, now seems like a good time to wrap up 1.56 (and get back to dev stuff).
    So far so good... I can always think of things that might be fun to add But sooner we can get back to DEV

  16. #16
    Senior Member PaulStoffregen's Avatar
    Join Date
    Nov 2012
    Posts
    26,240
    Indeed, I have a very long list of stuff I wanted to merge into 1.56. But that would mean holding up a stable release for at least a few more weeks.

  17. #17
    Senior Member+ mjs513's Avatar
    Join Date
    Jul 2014
    Location
    New York
    Posts
    8,147
    Sorry been pretty distracted with other things today but so far so good.

    For now all I can do is say ditto to @KurtE comments and some optional PRs out there but nothing that can't wait until 1.57

  18. #18
    Senior Member+ defragster's Avatar
    Join Date
    Feb 2015
    Posts
    15,890
    IDE 1.8.19 and TD 1.56b5 installed and working fine here. As Mike saw - didn't mention this time - but the (recent?) usual first run of the Arduino.exe from the ZIP is blocked by default and you have to power through to 'Run Anyway'. But losing the specter of log4j is a good thing.

    As long as the FS edits are stable ( not the MTP ) - they are working here as used. Not seen any other issues in general use building and uploading.

    Most recent changes were for stuff that was 'safe' or had lurking build issues.

  19. #19
    Senior Member PaulStoffregen's Avatar
    Join Date
    Nov 2012
    Posts
    26,240
    Since quite a large number of small changes (mostly fixing library examples) have gone in over the last ~24 hours, I'm going to package up 1.56-beta6 now. Then I'm going to do a fresh round of testing tonight. Please jump in with 1.56-beta6 if you have any concerns or favorite features to check. If everything is looking good tomorrow evening, will release 1.56.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •