Commit Graph

7636 Commits

Author SHA1 Message Date
Stefan Schantl
02c1439612 rust-home: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:25 +00:00
Stefan Schantl
edf4c9817e rust-syn: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:25 +00:00
Stefan Schantl
87eab5be34 rust-quote: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:25 +00:00
Stefan Schantl
96f567c253 rust-proc-macro2: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:25 +00:00
Stefan Schantl
a24ff88bd0 rust-unicode-xid: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:25 +00:00
Stefan Schantl
1485f8d0a1 rust-hex: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:25 +00:00
Stefan Schantl
338cde5553 rust-cipher: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:24 +00:00
Stefan Schantl
25a0339838 rust-generic-array: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:24 +00:00
Stefan Schantl
b324df6b4b rust-version-check: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:24 +00:00
Stefan Schantl
3062c37a29 rust-typenum: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:24 +00:00
Stefan Schantl
6528a858c8 rust-getrandom: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:24 +00:00
Stefan Schantl
4307805fd3 rust-libc: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:24 +00:00
Stefan Schantl
df47bf8b0d rust-cfg-if: New package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:24 +00:00
Michael Tremer
321e91cd23 rust-dissimilar: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-02 19:43:24 +00:00
Michael Tremer
06fd5cdd8c Config: Remove /root/.cargo
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-01 13:50:44 +00:00
Michael Tremer
f50da967e8 rust: Upgrade to nightly build from today
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-01 13:50:32 +00:00
Michael Tremer
4f6d6c4123 rust: Enable more checks for when to install package files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-01 13:50:32 +00:00
Michael Tremer
c16dd3aa0c rust: Add switch to skip bin check
This does not seem to work very reliable, so we need manually disable
this for some packages.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-01 13:50:32 +00:00
Michael Tremer
1aab9dfb5d rust: Avoid requiring development dependencies
Cargo will always require all depenendencies, even if the package is not
being built against them. In order to avoid that, we will need the
nightly build of the Rust compiler which supports skipping those
dependencies.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-01 13:50:32 +00:00
Michael Tremer
942b7d0d41 rust: List all files copied
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-01 13:50:32 +00:00
Michael Tremer
4f2a9813c0 make.sh: Add some commands to build Rust packages
This is a small set of commands that will be needed to build Rust
packages.

The idea is to have a couple of macros which do not have to rewritten,
but can be customised across the lfs files.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-01 13:50:32 +00:00
Michael Tremer
c9fb880835 jq: New package
This allows parsing JSON strings on the console

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-01 13:50:32 +00:00
Arne Fitzenreiter
75c9d8c20c u-boot: add/fix NanoPi R2S and R4S
-update arm-trusted firmware to 2.6
-fix mac address generation on R2S because the CPUID fuses are not uniqe
-add support for NanoPi R4S

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-01-29 20:32:02 +00:00
Arne Fitzenreiter
b2b4417857 kernel: update to 5.15.17
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-01-29 20:30:21 +00:00
Peter Müller
15de7a78fe Revert "perl-libwww: Update to version 6.60 and rename from libwww-perl to perl-libwww"
This reverts commit 976b84ccb6.

See: https://bugzilla.ipfire.org/show_bug.cgi?id=12769#c4

Reported-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Cc: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-01-29 09:40:36 +00:00
Matthias Fischer
ebbe05695d bind: Update to 9.11.25
For details (v9.16.22-v9.16.25) see:
https://downloads.isc.org/isc/bind9/9.16.25/doc/arm/html/notes.html#notes-for-bind-9-16-25

"Notes for BIND 9.16.25
Feature Changes

    Overall memory use by named has been optimized and reduced,
    especially on systems with many CPU cores. The default memory
    allocator has been switched from internal to external. A new
    command-line option -M internal allows named to be started with the
    old internal memory allocator. [GL #2398]

Bug Fixes

    On FreeBSD, TCP connections leaked a small amount of heap memory,
    leading to an eventual out-of-memory problem. This has been fixed.
    [GL #3051]

    If signatures created by the ZSK were expired and the ZSK private
    key was offline, the signatures were not replaced. This behavior has
    been amended to replace the expired signatures with new signatures
    created using the KSK. [GL #3049]

    Under certain circumstances, the signed version of an inline-signed
    zone could be dumped to disk without the serial number of the
    unsigned version of the zone. This prevented resynchronization
    of the zone contents after named restarted, if the unsigned zone
    file was modified while named was not running. This has been fixed.
    [GL #3071]
...
"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-01-25 16:39:02 +00:00
Peter Müller
34a98832ee pciutils: Update to 3.7.0
Please refer to https://git.kernel.org/pub/scm/utils/pciutils/pciutils.git/log/
for a history of this release. Sourcecode retrieved from https://mj.ucw.cz/download/linux/pci/ .

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-01-25 16:38:09 +00:00
Michael Tremer
b0fbd41651 frr: Depend on elfutils
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-01-25 16:35:12 +00:00
Arne Fitzenreiter
e22b42571a libvirt: enabled on aarch64
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-01-23 08:03:06 +00:00
Arne Fitzenreiter
8d01ff736d qemu: enable on and for all supported architectures
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-01-22 09:51:03 +00:00
Arne Fitzenreiter
48ec07649f qemu-ga: resolve conflict by using binary from qemu built
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-01-21 16:23:00 +00:00
Arne Fitzenreiter
c18dda556b kernel: update to 5.15.16
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-01-21 10:06:22 +00:00
smooky@v16.de
df0635abb5 New Addons: qemu-ga 6.0.1 second try
>>> https://www.qemu.org/ <<<

source = https://download.qemu.org/qemu-6.0.1.tar.xz

Hi @ all

I have the addon qemu-ga for people who virtualize IPFire and to read the status
without having to install the whole qemu package.
Modified following Michael's suggestions.

Signed-off-by: Marcel Follert (Smooky) <smooky@v16.de>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-01-18 21:26:56 +00:00
Adolf Belka
5b28df47a5 shadow: Update to version 4.11.1 and fix bug 12762
- Update from 4.2.1 (2015) to 4.11.1 (2021)
- Update rootfile
- Update patch for suppression of groups installation
- Change default hash from sha512 to yescrypt in lfs and logins.def
- Changelog
   * Release 4.11.1
     * build: include lib/shadowlog_internal.h in dist tarballs (Sam James)
   * Release 4.11
     * Handle possible TOCTTOU issues in usermod/userdel (edneville)
       * (CVE-2013-4235)
       * Use O_NOFOLLOW when copying file
       * Kill all user tasks in userdel
     * Fix useradd -D segfault (Xi Ruoyao)
     * Clean up obsolete libc feature-check ifdefs (Alejandro Colomar)
     * Fix -fno-common build breaks due to duplicate Prog declarations
       (Adam Sampson)
     * Have single date_to_str definition (Alejandro Colomar)
     * Fix libsubid SONAME version (Sam James)
     * Clarify licensing info, use SPDX.
   * Release 4.10
      Note: From this release forward, su from this package should be
             considered deprecated. Please replace any users of it with su from
             util-linux. Please open an issue if there is a problem with that.
            We intend to remove it in an upcoming release.
            This release features many fixes expecially to the building of
             libsubid, some SELinux labeling issues, and a few signaling
             issues.
     * libsubid fixes (Xi Ruoyao, Serge Hallyn, Iker Pedrosa, Mike Gilbert,
       GalaxyMaster, and Luís Ferreira)
     * Rename the test program list_subid_ranges to getsubids, write
       a manpage, so distros can ship it. (Iker Pedrosa)
     * Add libeconf dep for new*idmap (Iker Pedrosa)
     * Allow all group types with usermod -G (Iker Pedrosa)
     * Avoid useradd generating empty subid range (Iker Pedrosa)
     * Handle NULL pw_passwd (Jaroslav Jindrak)
     * Fix default value SHA_get_salt_rounds (Mike Gilbert)
     * Use https where possible in README (Paul Menzel)
     * Update content and format of README (Iker Pedrosa)
     * Translation updates (Balint Reczey, Frans Spiesschaert)
     * Switch from xml2po to itstool in 'make dist' (Serge Hallyn)
     * Fix double frees (Michael Vetter)
     * Add LOG_INIT configurable to useradd (Andy Zaugg)
     * Add CREATE_MAIL_SPOOL documentation (Andy Zaugg)
     * Create a security.md
     * Fix su never being SIGKILLd when trapping TERM (Ruihan li)
     * Fix wrong SELinux labels in several possible cases (Iker Pedrosa)
     * Fix missing chmod in chadowtb_move (GalaxyMaster)
     * Handle malformed hushlogins entries (Tobias Stoeckmann)
     * Fix groupdel segv when passwd does not exist (François Rigault)
     * Fix covscan-found newgrp segfault (Iker Pedrosa)
     * Remove trailing slash on hoedir (Ed Neville)
     * Fix passwd -l message - it does not change expirey (Ed Neville)
     * Fix SIGCHLD handling bugs in su and vipw (Tobias Stoeckmann)
     * Remove special case for "" in usermod (Alejandro Colomar)
     * Implement usermod -rG to remove a specific group
       (Andy Zaugg)
     * call pam_end() after fork in child path for su and login
       (Björn Fischer)
     * useradd: In absence of /etc/passwd, assume 0 == root
       (Ludwig Nussel)
     * lib: check NULL before freeing data (Iker Pedrosa)
     * Fix pwck segfault (Iker Pedrosa)
     * Release 4.9
        2021-07-22  Serge Hallyn <serge@hallyn.com>
	 * Updated translations (Björn Esser, Juergen Hoetzel)
     * Major salt updates (Björn Esser)
     * Various coverity and cleanup fixes (Iker Pedrosa)
     * Consistently use 0 to disable PASS_MIN_DAYS  in man (tzccinct)
     * Implement NSS support for subids and a libsubid (Serge Hallyn)
     * setfcap: retain setfcap when mapping uid 0 (Christian Brauner)
     * login.defs: include HMAC_CRYPTO_ALGO key (Iker Pedrosa)
     * selinux fixes (Christian Göttsche)
     * Fix path prefix path handling (Lucas Servén Marín)
     * Manpage updates (tzccinct, Sevan Janiyan, Iker Pedrosa, Geert Ijewski,
		谭九鼎, Jamin W. Collins, towerpark, andydna, Frans Spiesschaert)
     * Treat an empty passwd field as invalid (Haelwenn Monnier)
     * newxidmap: allow running under alternative gid (Martijn de Gouw)
     * usermod: check that  shell is executable (Geert Ijewski)
     * Add yescript support (Rodolphe Bréard)
     * useradd memleak fixes (whzhe)
     * useradd: use built-in settings by default (Ludwig Nussel)
     * getdefs: add foreign (non-shadow-utils) items (Karel Zak)
     * buffer overflow fixes (Tobias Stoeckmann)
     * Adding run-parts style for pre and post useradd/del (ed@s5h.net)
       2020-01-23  Serge Hallyn <serge@hallyn.com>
	* selinux: inclue stdio (Michael Vetter)
	* man: don't suggest making groupmems user-writeable (Michael Weiser)
	* Makefile: bail out on error in for loops (Wolfgang Bumiller)
	* Adding logging of SSH_ORIGINAL_COMMAND to nologin. (ed@s5h.net)
	* add new HOME_MODE login.defs option (Duncan Overbruck)
	* Add tty logging to useradd (ed@s5h.net)
	* Useradd: make non-executable shell check only a warning (Tomas Mraz)
	* Update Dutch translation (Frans-Spiesschaert)
	* user_busy: Do not mistake a regular user process for a namespaced one (Tomas Mraz)
	* Revert "Honor --sbindir and --bindir for binary installation" Patrick McLean)
       2019-12-20  Dave Reisner <dreisner@archlinux.org>
	* Do not auto-enable acct_tools_setuid just because
	  pam is enabled.  NOTE - any distros which are relying
	  on this behavior will need to switch to configure
	  --enable-account-tools-setuid
   * Release 4.8
       2019-12-01  Serge Hallyn <serge@hallyn.com>
	* Initial optional bcrypt support.
	* Make build/install of 'su' optional.
	* Fix for vipw not resuming correctly when suspended
	* Sync password field descriptions in manpages
	* Check for valid shell argument in useradd
	* Allow translation of new strings through POTFILES.in
	* Migrate to itstool for translations
	* Migrate to new SELinux api
	* Support --enable-vendordir
	* pwck: Only check homedir if set and not a system user
	* Support nonstandard usernames
	* sget{pw,gr}ent: check for data at EOL
	* Add YYY-MM-DD support in chage
	* Fix failing chmod calls for suidubins
	* Fix --sbindir and --bindir for binary installations
	* Fix LASTLOG_UID_MAX in login.defs
	* Fix configure error with dash
    * Release 4.7
       2019-06-13  Serge Hallyn <serge@hallyn.com>
	* Spawn: don't loop forever on ECHILD
	* Do not fail locking if there is a stale lockfile Tomas Mraz)
	* Use lckpwdf if prefix not set (Tomas Mraz)
	* Build: check correct DocBook version (Jan Tojnar)
	* Usermod: Print 'no changes' to stdout, not stderr (Serge Hallyn)
	* Add support for btrfs subvolumes for home (Adam Majer)
	* Fix chpasswd long line handling (Nathan Ruiz)
	* Use secure_getenv for gettime (Chris Lamb)
	* Make sp_lstchg reproducible (Chris Lamb)
	* Do not crash commonio_close if db file is not open (Tomas Mraz)
	* Don't flush nscd and sssd cache in read-only mode (Charlie Vuillemez)
	* French manpage update (Alban VIDAL)
	* Fix manpage defaults for SUB_UID/GID_COUNT (Tomas Mraz)
	* Sync po files from shadow.pot (Alban VIDAL)
	* Usermod: guard against unsafe chown of homedir contents (Tomas Mraz)
	* Add LASTLOG_UID_MAX to login.defs (Tomas Mraz)
	* new[ug]idmap file capabilities support (Giuseppe Scrivano and Christian Brauner)
	* Fix segfault in useradd (Tomas Mraz)
	* Coverity issues (Tomas Mraz)
	* Flush sssd caches (Jakub Hrozek)
	* Log UID in nologin (Vladimir Ivanov)
	* run pam_getenvlist after setup_env in su.c (Michael Vogt)
	* Support systems with only utmpx (A. Wilcox)
	* Fix unguarded ENABLE_SUBIDS code (Jan Chren (rindeal))
	* Update po/zh_CN translation (Lion Yang)
	* Create parent dirs for useradd -m (Michael Vetter)
	* Prevent usermod segv
	* Fix usermod crash (fariouche)
    * Release 4.6
       2018-04-29  Serge Hallyn <serge@hallyn.com>
	* Newgrp: avoid unnecessary lookups
	* Make language less binary
	* Add error when turning off man switch
	* Spelling fixes
	* Make userdel work with -R
	* newgidmap: enforce setgroups=deny if self-mapping a group
	* Norwegian bokmål translation
	* pwck: prevent crash by not passing O_CREAT
	* WITH_TCB fixes from Mandriva
	* Fix pwconv and grpconv entry skips
	* Fix -- slurping in su
	* add --prefix option
       2017-07-16  Serge Hallyn <serge@hallyn.com>
	* Import new Dutch translations.
       2017-07-10  Serge Hallyn <serge@hallyn.com>
	* Expand error codes for groupmod.
       2017-05-17  Serge Hallyn <serge@hallyn.com>
    * Release 4.5
       2017-05-17  Serge Hallyn <serge@hallyn.com>
	* Patch from Tobias Stoeckmann fixing regression in previous CVE fix
	  preventing SIGTERM to su from being propagated to the job.
	* Patch from Chris Lamb making sp_lstchg shadow field reproducible.
	* Merge Russian translation updates from Yuri Kozlov
	* Fix missing close of subuid file on error
       2017-02-23  Serge Hallyn <serge@hallyn.com>
	* Merge patch by Tobias Stoeckmann <tobias@stoeckmann.org> to fix
	  the equivalent of util-linux CVE-2017-2616.
       2017-02-08  Serge Hallyn <serge@hallyn.com>
	* Update Kazakh translations
	* Consult configuration before calculating subuids
	* Remove misplaced semicolon
       2017-01-29  Serge Hallyn <serge@hallyn.com>
	* Patch from Fedora to improve performance with SSSD, Winbind,
	  or nss_ldap. (Tomas Mraz)
	* Make sure knowndef_table is NULL-terminated.  (Bernhard Rosenkränzer)
       2016-12-21  Serge Hallyn <serge@hallyn.com>
	* Drop leading underscore from _COMMONIO_H and _SHADOWIO_H
	* Fix readability in usermod error messages.
	* Reset user in tallylog
	* Add audit support to su
    * Changes since 4.4
       2016-12-02  Serge Hallyn <serge@hallyn.com>
	  - Use sizeof rather than hardcoding snprintf args
	  - Fix useradd improper default loading
	  - Update Vietnamese translations
	  - Update Polish translations
	  - Remove non-POSIX chmod option in Makefile
	  - Fix suidubins assignments
	  - Fix --add-subuids etc spelling in manpages
	  - Audit homedir ownership change.
	  - Print error on selinux file context update failure
	  - Keep original file perms when creating a backup
    * Changes since 4.2.1:
       2016-12-02  Serge Hallyn <serge@hallyn.com>
	  - Documentation, error report and translations updates
	  - Replace path_max with 32
	  - User namespace support fixes/updates including:
	    - Correct sanity checks in newXidmap
	    - Fix building without subuid support
	    - Add /etc/subuid support for UID matching
	    - Support subuid for nonlocal users
	    - Default to 65536 subuid allocations
	    - Respect -r
	    - Check for range overflows
	  - Add tests from svn tree
	  - Use AC_CHECK_SIZEOF for uid_t size checks
	  - Accomodate missing /etc and login.defs
	  - Support FORCE_SHADOW
	  - Be more robust in hostile environment
	  - Allow removing a primary group
	  - Clear passwords on __pw_dup errors
	  - Memory leak fix in commonio_update and get_map_ranges
	  - Fix resource leak in syslog_sg
	  - Fix user busy error at userdel
	  - Support set/clear lastlog record via lastlog command
	  - Add --no-create-home as longopt for -M
	  - Fix signal races
	  - Reduce syslog priority of common usage events

Fixes: Bug 12762
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-01-18 21:23:42 +00:00
Michael Tremer
53e52b86df dnsdist: Upgrade to 1.7.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-01-18 21:13:51 +00:00
Peter Müller
04581dfb77 Merge branch 'next' into temp-c164-development 2022-01-18 21:12:56 +00:00
Michael Tremer
ec0ba68a15 udev: Rename enable_codel to network-aqm
This is a more generic term since CoDel is no longer being used

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-01-16 15:17:50 +00:00
Peter Müller
cbc279b070 Merge branch 'next' into temp-c164-development 2022-01-15 08:31:48 +00:00
Arne Fitzenreiter
14aa983025 Revert "shadow: Update to version 4.9"
This reverts commit 66852447f1.

with this version of shadow passwd need more than 10min on all my systems
even if they had rdrand.
2022-01-15 07:24:24 +00:00
Peter Müller
64ecba3f57 libusb: Update to 1.0.24
Fixes: #12667

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-01-14 20:45:24 +00:00
Matthias Fischer
7eabdbfc47 hdparm: Update to 9.63
For details since v9.55, see:
https://sourceforge.net/p/hdparm/news/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-01-14 19:16:03 +00:00
Matthias Fischer
ac809b02f5 clamav: Update to 0.104.2
For details see:
https://blog.clamav.net/2022/01/clamav-01035-and-01042-security-patch.html

"ClamAV 0.104.2 is a critical patch release with the following fixes:

CVE-2022-20698: Fix for invalid pointer read that may cause a crash.
Affects 0.104.1, 0.103.4 and prior when ClamAV is compiled with libjson-c
and the CL_SCAN_GENERAL_COLLECT_METADATA scan option (the clamscan
--gen-json option) is enabled.
..."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-01-14 16:18:40 +00:00
Matthias Fischer
cf73af23a7 monit: Update to 5.30.0
For details see:
https://mmonit.com/monit/changes/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-01-14 16:18:37 +00:00
Adolf Belka
59282c857b usbutils: Update to version 013
- Update from 007 (2013) to 013 (2020)
- Update rootfile
- Changelog
    usbutils 013
    Aurelien Jarno (1):
          lsusb.8.in: do not mention usb.ids
    Baruch Siach (1):
          usb-devices.1: don't mention bash
    Greg Kroah-Hartman (15):
          usbhid-dump: move manpage to main directory out of subdir
          usbhid-dump.8: add SPDX header
          usbhid-dump.8: autogenerate it with the usbutils version number
          .gitignore: add usbhid-dump.8
          usbhid-dump: add SPDX identifiers to all files.
          usbhid-dump: remove libusb.h libusb_strerror() implementation
          usbhid-dump: remove lib directory
          usbhid-dump: move .h files into src/ directory
          Makefile.am: add usbhid-dump.8 to distclean list
          usbhid-dump: some autoconf cleanup
          usbhid-dump: remove some dev_list functions that were never used
          dump_audiostreaming_interface(): remove unused variable
          usbmisc: initialize string buffer before reading from device.
          lsusb.py: drop trailing space on non-hub devices
          lsusb.py: strip whitespace from device strings
    Jakub Wilk (2):
          lsusb(8): fix formatting
          lsusb(8): document --tree
    Pino Toscano (1):
          lsusb.py: remove private paths for usb.ids
    Rob Gill (1):
          Additional device classes for usb-devices script
    Rosen Penev (1):
          usbhid-dump: Do not use rindex
    Thomas Hebb (4):
          Move read_sysfs_prop() from names.c to its own file
          sysfs: Don't return bogus data for devices under a hub
          lsusb: Use vendor and product name fallback logic in -D mode too
          lsusb: Get manufacturer, product, and serial from sysfs
    Timothy Robert Bednarzyk (1):
          bootstrap: change /bin/bash to /bin/sh
    Torleiv Sundre (1):
          lsusb: fix two typos in UVC Extension Unit descriptor
    Tormod Volden (1):
          usbhid-dump: Put back autoconf check for libusb_set_option()
    usbutils 012
    Greg Kroah-Hartman:
          Merge usbhid-dump into main usbutils repository
    usbutils 011
    Clemens Fruhwirth (1):
          Add usbreset.c as noinst_PROGRAMS target.
    Daniel Schaefer (1):
          lsusb: Read unkown names from sysfs device desc.
    Darsey Litzenberger (3):
          Remove a small hack that no longer has any effect.
          Cleanup grammar
          lsusb-t: Emit USB IDs and other handy info when verbosity is increased
    Emmanuele Bassi (1):
          Require newer version of libusb
    Georg Brandl (1):
          lsusb.py: fix up Python 3 conversion
    Greg Kroah-Hartman (10):
          SPDX bill-of-material is supposed to be project_name.spdx
          usbutils.spdx: rerun report, it is properly sorted.
          desc-dump.c: fix compiler warning about unused variable
          add usbreset to .gitignore
          usbreset: fix some build warnings
          usbhid-dump: update to latest version
          fix up standard int types
          update usbhid-dump git id
          usbhid-dump: update to a newer version of usbhid-dump again.
          usbutils.spdx: update with latest information
    Kurt Garloff (4):
          lsusb.py: Search multiple paths for usb.ids.
          lsusb.py: Usb enum for parser state machine.
          lsusb.py: Add driver names for usbhid.
          lsusb.py: python2 compatibility
    Lukas Nykryn (1):
          Makefile.am: add files with licenses to archive
    Mantas Mikulėnas (33):
          lsusb.py: sort devices and interfaces numerically
          lsusb.py: sort toplevel entries
          lsusb.py: improve usage text
          lsusb.py: replace fake deepcopy()
          lsusb.py: remove -w (warn if usb.ids not sorted) option
          lsusb.py: ensure all error messages are written to stderr
          lsusb.py: support long options
          lsusb.py: use regular print() instead of hand-rolling the same thing
          lsusb.py: avoid shadowing Python's built-in 'str'
          lsusb.py: replace usb.ids binary search with dict lookup
          lsusb.py: remove now-unused bin_search()
          lsusb.py: avoid manual calls to __foo__()
          lsusb.py: replace __repr__() for USB IDs with __str__()
          lsusb.py: insert class FF:FF:FF into usbclasses to avoid special casing
          lsusb.py: entirely remove Usb* classes
          lsusb.py: cosmetic - replace tuples-as-"immutable lists" with regular lists
          lsusb.py: use 'elif' where suitable
          lsusb.py: remove dead code
          lsusb.py: move unrelated code out of try..except
          lsusb.py: allow - as well as _ when matching hci module names
          lsusb.py: use a constant for the magic class number 9
          lsusb.py: Usb* classes: call read() automatically from constructor
          lsusb.py: UsbEndpoint: indent is a class implementation detail
          lsusb.py: a few cosmetic changes
          lsusb.py: shorten find_usb_class()
          lsusb.py: give all Usb* objects a .path attribute
          lsusb.py: add an actual __repr__() to classes
          lsusb.py: give all Usb* classes a superclass
          lsusb.py: convert readattr() and readlink() to methods of the container
          lsusb.py: use color by default
          lsusb.py: rework output for more consistent indent of both columns
          lsusb.py: fix endpoint interval spacing
          lsusb.py: visually group USB-version-related fields
    Michael Drake (4):
          lsusb: Split out routine that fetches value for given field.
          lsusb: Split out field name rendering.
          lsusb: Add support for descriptor extensions.
          lsusb: Add support for audio processing unit type-specific fields.
    Philip Langdale (2):
          lsusb: Added support for Billboard Alternate Mode Capability descriptor
          lsusb.py: Fix formatting of 10Gbps speeds
    Ross Burton (1):
          usb-devices: use /bin/sh hashbang
    Solomon Peachy (1):
          lsusb:  Add support for decoding IPP printer descriptors
    Stefan Tauner (1):
          Depend on libusb 1.0.14
    Valerii Zapodovnikov (1):
          man pages: add information on verbosity levels of -t option
    junjie (1):
          fix typo
    usbutils 010
    Aurelien Jarno (2):
          usbreset.c: add missing <stdlib.h> include
          Do not create and install usbutils.pc
    Greg Kroah-Hartman (32):
          fix dump_videocontrol_interface for unitialized variable usage
          Add correct SPDX license identifiers to all files
          Add SPDX identifiers on files that did not have a specific license.
          wTotalLength should be printed as a hex number
          usbmisc: fix up some strncpy() issues
          lsusb-t: fix up error with readlink()
          lsusb.py.in: add proper SPDX license identifier
          usb-devices: reword the copyright identifier
          LICENSES: move the GPL 2 license to the LICENSES directory
          LICENSES/GPL-3.0.txt: add the file
          lsusb.h: add copyright notice
          lsusb-t: add copyright info
          bom.spdx: Add bill of materials file in SPDX format.
          ChangeLog: remove it.
          AUTHORS: remove file
          do_release: drop file
          NEWS: add SPDX header and comment
          autogen.sh: add SPDX and copyright header
          list.h: add copyright information
          travis-autogen.sh: add SPDX and copyright information.
          INSTALL: remove the file, it's boiler-plate
          configure.ac: add SPDX and copyright
          man pages: add SPDX and copyright information
          Makefile.am: add SPDX and copyright information
          .gitmodules: add SPDX and copyright lines
          lsusb.py.in: fix up Copyright strings
          usbreset.c: add Alan's copyright
          .travis.yml: add correct SPDX and copyright notices
          bom.spdx: update with latest copyright and SPDX identifier additions
          README.md: move the README file to markdown
          README.md: fix fomatting
          bom.spdx: upate with README -> README.md change
    Lukas Nykryn (1):
          lsusb.py: convert to python3
    Michael Drake (11):
          lsusb: Split subtype mapping out of AudioControl interface handling.
          lsusb: Add declarative definitions for UAC1 and UAC2 descriptors.
          lsusb: Add code to dump descriptor data using descriptor definition.
          lsusb: Switch to descriptor-definition based dump for UAC1 and UAC2.
          lsusb: Add descriptor definitions for UAC3.
          lsusb: Add initial support for USB Audio Device Class 3.
          lsusb: Add descriptor definition for USB3 BOS Configuration Summary.
          lsusb: Dump USB3 BOS Configuration Summary Descriptor.
          lsusb: Squash Wpointer-compare warning.
          lsusb: Remove unused function.
          lsusb: Fix array entry count for variable sized entries.
    Robby Workman (1):
          Makefile.am: Include usbreset.c in the release tarball
    Torleiv Sundre (1):
          lsusb: Dump UVC Stream based payload descriptor.
    usbutils 009
    Bjørn Mork (1):
          usbreset: coding style
    Emmanuele Bassi (1):
          Don't use C99-ism
    Greg Kroah-Hartman (22):
          usbhid-dump: update submodule to latest version
          add usbreset.c example program
          update usbhid-dump to latest
          lsusb.py: Don't dump a trace dump if usb.ids is not present
    Grueninger, Tobias (1):
          USB: usb-devices: Interface number can be a string
    Heinrich Schuchardt (1):
          autogen.sh: checkout usbhid-dump
    Jaejoong Kim (4):
          lsusb : add support for the Encoding Unit Desc for uvc 1.5 device
          lsusb: fix alignment for Video Streaming interface desc
          lsusb: parse additional control fileds in USB video control interfaces for UVC1.5
          lsusb: proper display hexadecimal value for UVC control interface
    Jakub Wilk (1):
          Fix typos
    Jo-Philipp Wich (1):
          usbreset.c: import usability improvements from OpenWrt
    Justin McBride (2):
          Update lsusb.c
          Un-indent bVariableSize for Frame-Based Format descriptors
    Kylie McClain (1):
          Makefile: install pkgconfig file to arch-dependent location
    Mathias Nyman (2):
          lsusb: Allocate the BOS descriptor buffer dynamically
          lsusb: Add support for the USB 3.1 SuperSpeedPlus device capability desc
    Muthu M (2):
          lsusb: Fix issue with lengthy string descriptors
          lsusb: Added support for Billboard Capability descriptor
    Nikolai Kondrashov (2):
          Update usbhid-dump repo URL
          Update usbhid-dump to v1.4
    Stephan Linz (7):
          travis-ci: add control files borrowed from libusb
          configure: remove summary about unused USE_ZLIB
          drop unused input file for usb.ids update script
          substitute usb.id location in lsusb Python script
          travis-ci: cleanup before second run
          travis-ci: rework travis-autogen.sh
          lsusb: remove unused variable procbususb
    Tobias Klauser (4):
          lsusb: Report correct MaxPower for USB 3.0 devices
          lsusb: Request proper descriptor type for USB 3.1
          lsusb: Store link state descriptions without preceding space
          build: Request at least libusb 1.0.9
    Torleiv Sundre (2):
          Added support for Platform Device Capability descriptor
          lsusb: change endianness of first three fields when printing UUID/GUIDs.
    Vianney le Clément de Saint-Marcq (3):
          lsusb: Fix UVC STILL_IMAGE_FRAME descriptor
          lsusb: Fix UVC VideoStreaming interface header descriptor
          lsusb: Fix UVC OUTPUT_TERMINAL descriptor
    Vincent Palatin (1):
          lsusb: print WebUSB platform descriptor
    usbutils 008
    Alexandra Yates (2):
          lsusb: Reports if USB2.0 port is on L1 state
          lsusb: Reports devices that support BESL on USB2.0
    Aurelien Jarno (1):
          dump_ccid_device: fix a typo
    Ben Chan (1):
          lsusb: decode CDC MBIM extended functional descriptor
    Greg Kroah-Hartman (8):
          lsusb: fix incorrect printf() for CAPS
          lsusb-t: handle problem if there is no usb bus list
          .gitignore: add compile to the list of things we need to ignore
    John Freed (1):
          Fix logic error
    Kurt Garloff (1):
          Update lsusb.py in usbutils
    Lukas Nykryn (2):
          update COPYING file
          lsusb-t: don't segfault when usbbuslist is empty
    Peter Wu (1):
          Ignore invalid string descriptors
    Raphaël Droz (1):
          usb-devices: hexadecimal bInterfaceNumber handling
    Tom Gundersen (2):
          lsusb: port to hwdb
          drop dependency on usb.ids
    Vadim Rutkovsky (1):
          New path for usbhid-dump submodule

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-01-14 14:41:58 +00:00
Peter Müller
55f6e62cf7 configroot: Drop traffic from and to hostile networks by default
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-01-14 14:17:14 +00:00
Peter Müller
02001624d2 configroot: Enable logging of spoofed packets/martians by default
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-01-14 14:17:08 +00:00
Peter Müller
86cf6898aa Merge branch 'master-IDSv3' into temp-c164-development 2022-01-14 14:05:10 +00:00
Matthias Fischer
4d8c7f3b12 squid: Update to 5.1
For details see:
http://www.squid-cache.org/Versions/v5/changesets/

There is still no official announcement.

Nevertheless, since 31 Jul 2021, 'squid 5.1' has become "stable"
and is listed under "Current versions suitable for production use".

The only problem I found during testing deals with 'privoxy'.

Since 'privoxy' - as parent cache_peer - sometimes replies with a '403',
'squid 5.1' handles this cache_peer connection as 'dead' which is then
logged in 'cache_log'. See discussion on list.

Actually this is something that got fixed from 'squid 4.16' to '5.1' - its
no bug - its a feature. Everything else works as expected,'squid' and
'privoxy' developers were informed.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-01-14 13:58:20 +00:00
Matthias Fischer
8989211723 squid: Update to 5.2
For details see:
http://www.squid-cache.org/Versions/v5/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-01-14 13:53:45 +00:00
Adolf Belka
976b84ccb6 perl-libwww: Update to version 6.60 and rename from libwww-perl to perl-libwww
- Update from 5.803 (2004) to 6.60 (2021)
- Rename lfs and rootfile from libwww-perl to perl-libwww making it consistent  with other
   perl programs that start with perl rather than end with it in the name
- Update of rootfile
- Changelog is too long to include here (~900 lines long)
   The details can be found in the Changes file in the source tarball. Looks like more
   than 200 bugs fixed between the existing and new versions.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-01-14 13:47:33 +00:00