Commit Graph

6979 Commits

Author SHA1 Message Date
Arne Fitzenreiter
f06578af15 core161: start updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-20 13:57:26 +00:00
Adolf Belka
8c855a5892 libyang: New dependency for frr build
- Impementation of libyang-2.0.7 as a dependency for the build of frr
- Creation of rootfile with all entries commented out so that it is only used for the build
   libyang is a YANG data modelling language parser and toolkit written (and providing API)
   in C.In the future if there is demand to use these functions in frr then this package
   may need to be moved from a build only option to a dependency for frr providing the
   yang libraries.
- Added into make.sh just before frr

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-17 09:01:16 +00:00
Adolf Belka
6594738bb6 frr: Update to version 8.0.1
- This v2 version used the frr-8.0.1 source instead of the frr-frr-8.0 source
- Update from 6.0 to 8.0.1
- 8.0.1 requires libyang for the build. Introduced with separate patch in this series.
- 6.0 is only compilable with python2.
  python3 compatability was introduced in version 7.4
- Previously confirmed that building frr-8.0 was successful with only python3 available
- Added --disable-static to the ./configure options.
- Rootfile updated
- Changelog from 6.0 to 8.0.1 is too large to include here. It can be viewed to obtain
   more details at https://github.com/FRRouting/frr/releases

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-17 09:01:12 +00:00
Adolf Belka
875f43830e freeradius: Update to 3.0.23 and disable python to allow running without python2
- Added --without-rlm_python to ./configure to allow running without python2
- Updated rootfile
- Updated patch for preventing cert generation during buildtime to work with new
   version of source code
- Update from 3.0.21 to 3.0.23

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-12 17:59:00 +00:00
Arne Fitzenreiter
cc84ba62f2 core160: apply ssh config, start/stop IPSec and set need_reboot flag
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-12 14:11:12 +00:00
Arne Fitzenreiter
fbd9b7e15e core160: add updatexlerator.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-12 09:39:20 +00:00
Arne Fitzenreiter
f6e9b2a4b1 core160: add ovpnmain.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-12 09:31:19 +00:00
Arne Fitzenreiter
812faee44d samba: update rootfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-11 08:46:48 +00:00
Adolf Belka
305e6ea60b spice-protocol: Update to 0.14.3 and enable build without python2
- v2 version adds $(MAKETUNING) variable to ninja build command
- Update from 0.12.13 to 0.14.3
- Update rootfile
- Remove automake py-compile line from lfs. This only works with python2
   Not clear why this line was put into the lfs. Searched the documentation of spice
   and qemu and could not find any reference to needing any of the python modules in spice
   to be installed either as modules or compiled in. The only references found in general
   searches were to modules such as python-virtinst, python-spice-client-gtk or
   python-websockify, none of which are in the python modules in spice.
- Removing the automake py-compile line from the lfs enables spice-protocol, spice and
   qemu to build without python2 being present.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Adolf Belka
919a0943ff spice: Update version to 0.15.0
- v2 version of series to add $(MAKETUNING) variable to ninja in spice-protocol
- Update from 0.14.0 to 0.15.0
- Update rootfile
- Version 0.15.0 of spice requires version 0.14.3 or higher of spice-protocol
- Changelog
   Major Changes in 0.15:
    This is the first release in the new 0.15.x stable series. This release should
    be ready for production use.
     * Minor updates to CI
     * Some compatibility with OpenSSL
     * Change the behavior of handle_dev_start ignoring multiple start requests
     * Ignore multiple calls to handle_dev_stop
     * Pick up newer spice-common to fix a buffer overflow issue
   Major Changes in 0.14.91:
    **IMPORTANT**
    0.14.91 is the first release candidate for the stable 0.15.x series. While some
    bugs might still be present, it should be reasonably stable. If you are looking
    for stability for daily use, please keep using the latest 0.14.x release.
     * Support UNIX abstract sockets
     * Fix some potential thread race condition in RedClient
     * Many cleanups in the code
     * Improve migration test script
     * Update in protocol documentation
     * Improve Meson build
     * Removed CELT support
     * Update CI
     * Removed QXLWorker definition, it was deprecated 6 years ago
     * Fix some compatibility with MacOS
     * Fix some compatibility with Windows
     * Move the project to C++
     * Some fixes for SASL dealing with WebDAV
     * Fix minor Coverity reports
     * Add Doxygen support, manually built with "make doxy"
     * Support more mouse buttons (up to 16 buttons)
     * CVE-2020-14355 multiple buffer overflow vulnerabilities in QUIC decoding
       code
   Major Changes in 0.14.3:
    Main changes are WebSocket and support for Windows.
     * Add support for WebSocket, this will allow to use spice-html5 without proxy
     * Support Windows, now Qemu Windows can be build enabling Spice
     * Fix some alignment problem
     * Converted some documentation to Asciidoc format to make easier to update,
       updated some
     * Minor compatibility fix for PPC64EL and ARMHF
     * Minor fixes for big endian machines like MIPS
     * Avoid some crashes with some buggy guest drivers, simply ignore the invalid
       request
     * Fix for old OpenSSL versions
     * Minor fix for Windows clients and brushes, fixed an issue with Photoshop
       under Windows 7
     * Add ability to query video-codecs
     * Small use-after-free fix
     * Fix for debugging recording/replaying using QUIC images
     * Fix a regression where spice reported no monitors to the client
     * Fix DoS in spicevmc if WebDAV used
     * Updated and improved test migration script
     * Some minor fixes to smartcard support
     * Avoid possible disconnection using proxies using a in-flow keepalive
       mechanism
   Major Changes in 0.14.2:
    Main changes are support for Meson build and graphic device info
    messages allowing to better support multi-monitor configurations.
     * CVE-2019-3813: fix off-by-one error in group/slot boundary check
     * support H265 in stream-channel
     * add support for building with meson/ninja
     * minor tests fixes improving CI
     * set char device state for smartcard, allowing Qemu optimization
     * improve red-parse-qxl.c interface making it more consistent
     * add some instrumentation for streaming device
     * QXL interface: add a function to identify monitors in the guest
       (spice_qxl_set_device_info)
     * add support for GraphicsDeviceInfo messages
     * video-stream: prevent crash on stream reattach
     * make channel client callbacks virtual functions
     * bumped minimum required glib version to 2.38
     * attempt to have a reliable led state for keyboard modifiers
   Major Changes in 0.14.1:
    The main change in this release is the addition of a new protocol extension
    in order to support streaming the remote display as a video stream rather than
    going through the QXL protocol. Together with spice-streaming-agent, and/or with
    more work on the qemu/spice-server side, this should allow streaming of 3D
    accelerated VMs in the future. At this point, this part of spice-server is
    still a work in progress (multi-monitor support and various features are
    missing).
     * add new org.spice-space.stream.0 channel used for passing an encoded video
       stream from the guest to the client
     * add support for TCP_CORK to reduce the amount of packets that we send
     * fix CVE-2018-10873
     * fix cursor related migration crash
     * fix regression causing sound recording to be muted after
       client disconnection/reconnection (introduced in 0.13.90)
     * fix regression in corner cases where images could be sent uncompressed
       when they used to be compressed with QUIC
     * disable TLS 1.0 support
     * CELT 0.5.1 support is now disabled by default. If celt051-devel is installed
       at build-time, --enable-celt051/--disable-celt051 must be explicitly specified
     * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or newer is now
       required
     * bumped minimum required glib version to 2.32
     * endianness fixes
     * (small) leak fixes
     * usual round of code cleanups
     * not directly related to this release, but the upstream git repository is now
       hosted on gitlab.freedesktop.org

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Arne Fitzenreiter
710838b045 core160: add libtasn1 and p11-kit
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Adolf Belka
7c5041698c libtasn1: New program required as build dependency for p11-kit
- creation of lfs and rootfile for libtasn1

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Adolf Belka
fbd7a03e78 p11-kit: New program required for python3 compatibility of ca-certificates
- creation of lfs and rootfile for implementation of p11-kit

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Adolf Belka
043abb984b ca-certificates: Update to work with python3 version of certdata2pem.py
- Implement python3 version of certdata2pem.py script from fedora
- Modify build.sh to work with python3 script that uses p11-kit based on fedora
   approach - https://src.fedoraproject.org/rpms/ca-certificates/tree/rawhide
- Extraction of cert files now uses p11-kit which requires libtasn1 as a build
   dependency
- Updated rootfile
- Updated ca-certificates installed into a vm and confirmed to download a file from an
   https site with the same results as with existing ca-certfictaes system

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Arne Fitzenreiter
5b4fc4c849 core160: add ssh changes and stop/start ipsec at update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Adolf Belka
6cc834c987 libssh: Update to version 0.9.6
- Update from 0.9.3 to 0.9.6
   0.9.4 and 0.9.6 are security releases
- Update rootfile
- Changelog
   libssh 0.9.6 security release
    This is a security release of libssh to address CVE-2021-3634 (moderate impact), a
    possible heap-buffer overflow when rekeying. A workaround exists. More details can be
    found in the advisory.
    In addition the 0.9.6 version addresses some memory leaks in error path, an AEAD
    handshake and some more.
      CVE-2021-3634: Fix possible heap-buffer overflow when rekeying with different key exchange mechanism
      Fix several memory leaks on error paths
      Reset pending_call_state on disconnect
      Fix handshake bug with AEAD ciphers and no HMAC overlap
      Use OPENSSL_CRYPTO_LIBRARIES in CMake
      Ignore request success and failure message if they are not expected
      Support more identity files in configuration
      Avoid setting compiler flags directly in CMake
      Support build directories with special characters
      Include stdlib.h to avoid crash in Windows
      Fix sftp_new_channel constructs an invalid object
      Fix Ninja multiple rules error
      Several tests fixes
   libssh 0.9.5
    The libssh team is happy to announce another bugfix release of libssh as version
    0.9.5. It offers bug fixes for several issues found by our users.
    This includes a fix for CVE-2020-16135, however we do not see how this would be
    exploitable at all. If you find a security bug in libssh please don’t just assign a
    CVE, talk to us first.
      CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
      Improve handling of library initialization (T222)
      Fix parsing of subsecond times in SFTP (T219)
      Make the documentation reproducible
      Remove deprecated API usage in OpenSSL
      Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
      Define version in one place (T226)
      Prevent invalid free when using different C runtimes than OpenSSL (T229)
      Compatibility improvements to testsuite
   libssh 0.9.4 security release
    This is a security release of libssh to address CVE-2020-1730 (moderate impact), a
    possible Denial of Service (DoS) in client and server when handling AES-CTR keys with
    OpenSSL. A workaround exists. More details can be found in the advisory.
    In addition the this version addresses several memory leaks and adds support for
    diffie-hellman-group14-sha256 key exchange.
      Fixed CVE-2020-1730 (Possible DoS in client and server when handling AES-CTR keys with OpenSSL)
      Added diffie-hellman-group14-sha256
      Fixed several possible memory leaks

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Arne Fitzenreiter
e9af24f34c core160: add IPSec changes (stongswan, vpnmain.cgi)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Adolf Belka
fd0e08feb9 ffmpeg: Update deps to use sdl2 in place of sdl
- This patch needs to go together with the patch updating sdl to sdl2
   https://patchwork.ipfire.org/project/ipfire/patch/20210824212848.1311257-1-adolf.belka@ipfire.org/
- Update deps line in lfs to use sdl2 in place of sdl
- Update rootfile

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Adolf Belka
15c01e309d sdl2: Replace sdl with sdl2. Update to version 2.0.16
- Update from 1.2.15 (2013) to 2.0.16 (2021)
- Source file name changed from SDL to SDL2 so also deleted old sdl and created sdl2
   files for rootfile and lfs
- Changelog is too large to include here. Details can be found in the WhatsNew.txt file
   in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Arne Fitzenreiter
b2ea81c323 core160: add udev
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Michael Tremer
8be8ac63ca udev: Enable ntuple offloading feature in supported NICs
We are using CPU-affinity and packet steering functions in various
places in IPFire, but packets might still be received on a random CPU
core.

This feature enables that packets that belong to the same connection
(i.e. have the save tuple) will be steered to the same queue. This will
increase cache locality and decrease locking which results in higher
throughput.

https://www.kernel.org/doc/Documentation/networking/scaling.txt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Matthias Fischer
f7627d8687 clamav: Update to 0.104.0
For details see:
https://blog.clamav.net/2021/09/clamav-01040-released.html

New requirements and major changes:
"As of ClamAV 0.104, CMake is required to build ClamAV
...
The built-in LLVM for the bytecode runtime has been removed."

But since the current 'llvm 12.0.1' version refused to be build
"...you will need to supply the development libraries for LLVM
version 3.6.2" - which is ~6 years old - I gave up with 'llvm'
and stayed with the bytecode "interpreter".

Cited:
"The bytecode interpreter is the default runtime for bytecode
signatures just as it was in ClamAV 0.103.

@ALL:
In 'clamav 0.104.0' there is no appropriate cmake option for
"CONFIGURE_FLAGS = --disable-fanotify" for ARM buildings anymore.
Perhaps there is a kernel option for this?
=> https://docs.clamav.net/manual/OnAccess.html#requirements

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Arne Fitzenreiter
0783042c7f core160: add glibc
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:41:42 +00:00
Matthias Fischer
2664c94463 mc: Update to 7.8.27
For details see:
http://midnight-commander.org/wiki/NEWS-4.8.27

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:36:29 +00:00
Arne Fitzenreiter
5a69d44423 core160: add wireless-regdb and remove crda
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:34:35 +00:00
Adolf Belka
424464c2ad wireless-regdb: Use db.txt file for wlanap.cgi
- db.txt is the text file version of the wireless settings by country database
- Using db.txt means that regdbdump from crda is not required by wlanap.cgi
- This patch copies the db.txt file from the source tarball to /lib/firmware/ where
   it can be read by wlanap.cgi
- This version of the patch renames the db.txt file to regulatorydb.txt
- Updated rootfile to include regulatorydb.txt

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:27:23 +00:00
Adolf Belka
07e45272a0 ipaddr: Removal of this python2 module.
- python3 has this functionality built in with ipaddress.py

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:27:00 +00:00
Adolf Belka
b0e28c2db7 python-setuptools: Removal of this python2 module.
- With the removal of python-m2crypto then this module is not longer required as a
   dependency.
- python3-setuptools was already released into Core Update 157

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:26:37 +00:00
Adolf Belka
233c8b28f5 python-typing: Removal of this python2 module.
- With the removal of python-m2crypto then python-typing is no longer rerquired as a
   dependency.
- The functionality of the python2 typing module is built in to python3.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:26:26 +00:00
Adolf Belka
b439abec1c python-m2crypto: removal of python2 module
- A python3 version of this module is not required as python-m2crypto is only used for
   the build of crda.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:26:11 +00:00
Adolf Belka
1212763b87 crda: removal from kernel 4.15 and onwards.
- From kernel 4.15 and onwards the function of what crda does is built into the kernel.
- Tested the removal of crda with kernel 4.14.232 and kernel 5.10.45
   Country code set by "iw reg set NL" was recognised with kernel 5.10.45 and set at
   the global value of 00 with kernel 4.14.232 confirming the kernel built in option is
   working without the prescence of crda

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:25:53 +00:00
Arne Fitzenreiter
55cb5e9324 Revert "lynis: Update to version 3.0.6"
This reverts commit d78fd31bb3.
downloads gives every time a different checksum
lookls like packetstorm never send the same file.

[root@helena cache]# wget https://packetstormsecurity.com/files/download/163629/lynis-3.0.6.tar.gz
--2021-09-05 18:29:39--  https://packetstormsecurity.com/files/download/163629/lynis-3.0.6.tar.gz
Resolving packetstormsecurity.com... 198.84.60.198
Connecting to packetstormsecurity.com|198.84.60.198|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: 'lynis-3.0.6.tar.gz.1'

lynis-3.0.6.tar.gz.     [ <=>                ]  20.27K  --.-KB/s    in 0s

2021-09-05 18:29:40 (164 MB/s) - 'lynis-3.0.6.tar.gz.1' saved [20753]

[root@helena cache]# wget https://packetstormsecurity.com/files/download/163629/lynis-3.0.6.tar.gz
--2021-09-05 18:29:43--  https://packetstormsecurity.com/files/download/163629/lynis-3.0.6.tar.gz
Resolving packetstormsecurity.com... 198.84.60.198
Connecting to packetstormsecurity.com|198.84.60.198|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: 'lynis-3.0.6.tar.gz.2'

lynis-3.0.6.tar.gz.     [ <=>                ]  20.27K  --.-KB/s    in 0s

2021-09-05 18:29:44 (177 MB/s) - 'lynis-3.0.6.tar.gz.2' saved [20753]

[root@helena cache]# md5sum lynis-3.0.6.tar.gz*
a13bad1e6ef81708a86f65d0f317eef6  lynis-3.0.6.tar.gz
841d1f2004220f78a13a702835c906fc  lynis-3.0.6.tar.gz.1
3d6435e94955da9f14d824a1618038c1  lynis-3.0.6.tar.gz.2
[root@helena cache]#
2021-09-05 18:32:50 +00:00
Arne Fitzenreiter
675ca14c50 core160: add header.pl and proxy.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 18:03:37 +00:00
Arne Fitzenreiter
92c3ba8c9d core160: add graphs.pl and getrrdimage.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 17:55:00 +00:00
Arne Fitzenreiter
a21e5bbca3 core160: add e2fsprogs
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 17:49:28 +00:00
Adolf Belka
9566f57327 e2fsprogs: Update to version 1.46.3
- Update from 1.44.4 to 1.46.3
- Update of rootfile
- Changelog from 1.44.4 to 1.46.3 is too long to display.
   Full details can be found at http://e2fsprogs.sourceforge.net/e2fsprogs-release.html
   Most of the 14 version updates have bug fixes in them.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 17:48:28 +00:00
Adolf Belka
e170aabc85 faad2: Update to version 2.10.0
- Update from 2.8.8 to 2.10.0
- Update of rootfile carried out
- Changelog
   2.10.0:
     [ tatsuz ]
	* updated Visual Studio projects to VS 2019 (#54)
     [ Fabian Greffrath ]
	* mp4read.c: fix stack-buffer-overflow in stringin()/ftypin()
	* fix heap-buffer-overflow in mp4read.c
     [ Clayton Smith ]
	* Remove non-ASCII characters
	* Remove trailing whitespace
     [ Andrew Wesie ]
	* Check return value of ltp_data.
	* Restrict SBR frame length to 960 and 1024 samples.
	* Support object type 29.
	* Support implicit SBR signaling in frontend.
	* Fix PNS decoding when only right channel is noise.
	* Initialize element_id array with an invalid id.
	* Fix NULL pointer dereferences.
	* Fix infinite loop in adts_parse.
	* Fix infinite loop in huffman_getescape.
	* Check for error after each channel decode.
	* Check for inconsistent number of channels.
   2.9.2:
     [ Michał Janiszewski ]
	* Only use x86-assembly when explicitly on x86
	* Use unsigned integers correctly
	* Initialize pointers that might otherwise not be
     [ Fabian Greffrath ]
	* update README esp. WRT directory structure
     [ Rosen Penev ]
	* fix compilation without SBR/PS_DEC (#48)
	* fix compilation with LC_ONLY_DECODER (#47)
     [ Fabian Greffrath ]
	* fix "inline function 'cfftf1' declared but never defined" compiler warning
	* fix some inconsistencies in the frontend output
	* mp4read_open: add check for failed frame buffer allocation
	* stszin: add check for allocation error and integer overflow
	* add a pkg-config file
     [ Stefan Pöschel ]
	* frontend: address compile warning + add missing LF (#50)
     [ François Cartegnie ]
	* library name is faad (#52)
	* Unbreak PS audio (#51)
   2.9.1:
     [ Fabian Greffrath ]
	* Include stdio.h in libfaad/ps_dec.c for stderr (Michael Fink)
	* Fix Tille -> Title typo in frontend/mp4read.c (Alexander Thomas)
   2.9.0:
     [ Krzysztof Nikiel ]
	* Build system fixes and code clean-up
     [ LoRd_MuldeR ]
	* Fix compiler warnings and code indentation
	* Fix compilation with GCC <= 4.7.3
	* MSVC solution file clean-up
     [ Cameron Cawley ]
	* Fix compilation with GCC 4.7.4
	* Fix compilation with MinGW
     [ Michael Fink ]
	* MSVC 2017 project file update
     [ Hugo Lefeuvre ]
	* Fix crash with unsupported MP4 files (NULL pointer dereference,
	  division by zero)
	* CVE-2019-6956: ps_dec: sanitize iid_index before mixing
	* CVE-2018-20196: sbr_fbt: sanitize sbr->M (should not exceed MAX_M)
	* CVE-2018-20199, CVE-2018-20360: specrec: better handle unexpected
	  parametric stereo (PS)
	* CVE-2018-20362, CVE-2018-19504, CVE-2018-20195, CVE-2018-20198,
	  CVE-2018-20358: syntax.c: check for syntax element inconsistencies
	* CVE-2018-20194, CVE-2018-19503, CVE-2018-20197, CVE-2018-20357,
	  CVE-2018-20359, CVE-2018-20361: sbr_hfadj: sanitize frequency band
	  borders
     [ Hugo Beauzée-Luyssen ]
	* CVE-2019-15296, CVE-2018-19502: Fix a couple buffer overflows
     [ Filip Roséen ]
	* Prevent crash on SCE followed by CPE
     [ Gianfranco Costamagna ]
	* Fix linking with GCC 9 and "-Wl,--as-needed"
     [ Fabian Greffrath ]
	* Enable the frontend to be built reproducibly

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 17:46:41 +00:00
Adolf Belka
d78fd31bb3 lynis: Update to version 3.0.6
- Update from 3.0.3 to 3.0.6
- Update of rootfile carried out
- Changelog
   ## Lynis 3.0.6 (2021-07-22)
     ### Added
       - OS detection: Artix Linux, macOS Monterey, NethServer, openSUSE MicroOS
       - Check for outdated translation files
     ### Changed
       - DBS-1826 - Check if PostgreSQL is being used
       - DBS-1828 - Test multiple PostgreSQL configuration file(s)
       - KRNL-5830 - Sort kernels by version instead of modification date
       - PKGS-7410 - Don't show exception for systems using LXC
       - GetHostID function: fallback options added for Linux systems
       - Fix: macOS Big Sur detection
       - Fix: show correct text when egrep is missing
       - Fix: variable name for PostgreSQL
       - German and Spanish translations extended
   ## Lynis 3.0.5 (2021-07-02)
     ### Added
       - OS detection of Arch Linux 32, BunsenLabs Linux, and Rocky Linux
       - CRYP-8006 - Check MemoryOverwriteRequest bit to protect against cold-boot attacks (Linux)
     ### Changed
       - ACCT-9622 - Corrected typo
       - HRDN-7231 - When calling wc, use the short -l flag instead of --lines (Busybox compatibility)
       - PKGS-7320 - extended to Arch Linux 32
       - Generation of host identifiers (hostid/hostid2) extended
       - Linux host identifiers are now using ip as preferred input source
       - Improved logging in several areas
   ## Lynis 3.0.4 (2021-05-11)
     ### Added
       - ACCT-9670 - Detection of cmd tooling
       - ACCT-9672 - Test cmd configuration file
       - BOOT-5140 - Check for ELILO boot loader presence
       - OS detection of AlmaLinux, Garuda Linux, Manjaro (ARM), and others
     ### Changed
       - BOOT-5104 - Add service manager detection support for runit
       - FILE-6430 - Report suggestion only when at least one kernel module is not in the blacklist
       - FIRE-4540 - Corrected nftables empy ruleset test
       - LOGG-2138 - Do not check for klogd when metalog is being used
       - TIME-3185 - Improved support for Debian stretch
       - Corrected issue when Lynis is not executed directly from lynis directory

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 17:45:47 +00:00
Arne Fitzenreiter
e254168907 core160: add sudo
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 17:40:59 +00:00
Arne Fitzenreiter
07300f6a14 core160: add libidn
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 08:56:31 +00:00
Adolf Belka
880ebbe8c6 libidn: Update to version 1.38
- Update from 1.36 to 1.38
- Update of rootfile
- Changelog
    version 1.38
	build: Fix --disable-tld builds.
        Simplify building of gdoc-generated man/texi outputs.
        Rebuild GTK-DOC HTML/PDF outputs on version number changes.
        doc: Rebuild idn.1 when version number changes.
        build: Fix --disable-tld builds.
        cicd: Add pages.
        doc: Improve GTK-DOC manual.
        cicd: Fix Ubuntu 12.04 builds.
        Improve GTK-DOC manual.
        Fix build errors related to doc/idn--help.texi.
        doc: Fix release process.
        doc: Improve HACKING instructions.
        Bootstrap cache.
    version 1.37
        Use gnulib's bootstrap.
        Drop old unused WERROR_CFLAGS usage.
        Improve URLs.
        Fix links for git and valgrind.
        Fix self check for --disable-tld.
        Sync with TP.
        Doc fixes.
        Don't dist ps/html/pdf.  Drop custom css.
        Improve ./configure summary output.
        Use gnulib langinfo module.
        More ./configure summary output.
        Use AM_GNU_GETTEXT_VERSION to get intl.m4 too.
        Disable some complex gnulib self-tests that add lots of dependencies and fail on mingw.
        Drop second gnulib tests directory since only one is supported.
        Require more recent automake and gtk-doc.
	Fix .gitignore.
        doc: Fix JDK dependency for Fedora.
        Drop warning stuff covered by manywarnings.m4 now.
        Disable VLA from gettext.
        Remove autopoint-generated files that are in gnulib too.
        Update autoconf archive macros.
        Prefer gnulib's M4 files over autopoint.
	Modernize autoconf usage.
        Use AM_GNU_GETTEXT_REQUIRE_VERSION.
	Update gnulib files.
        Modernize configure.ac.
	Require autoconf 2.64 for newer gnulib.
        Avoid including copyright info in idn example.
        Fix manual copyright years.
        Fix syntax-check.
        Update copyright years.
        Improve HACKING.
        Drop obsolete PGP key from AUTHORS.
        Revert last patch, clearly src/ was being built before doc/.
        Build doc/ after src/ so that src/idn exists for help2man of doc/idn.1.
        Fix recommended package installs.
        Drop .gitlab-ci.yml.
        Doc fix.
        Sync with TP.
        Fix typos, inspired by codespell.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 08:55:40 +00:00
Arne Fitzenreiter
e055a1a97a core160: add curl
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 08:54:40 +00:00
Arne Fitzenreiter
178586e15b core160: add network-functions.pl
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 08:51:24 +00:00
Arne Fitzenreiter
f4858c925c core160: add ethtool, sysfsutls and sysstat
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 08:49:07 +00:00
Adolf Belka
79516fed9a sysfsutils: Update to 2.1.1
- Update from 1.3.0 (2005) to 2.1.1 (2021)
- Update rootfile
- version 1.3.0 was from 2005. Version 2.1.0 was from 2006. No other updates have been
   carried out since 2006 until Feb 2021 when the repository was migrated from CVS
   to git. https://github.com/linux-ras/sysfsutils/releases
- Installed iso, that was created from build, into testbed vm system. All menu's opened
   and no issues found. Not 100% sure what to look for as I am not totally clear what
   the library would be used for or by which programs. Probably needs testing by someone
   who lnows what the sysfsutils library is used for.
- Ran find-dependencies on the original library system before build and then on the new
   library system after building and in both cases nothing was flagged up. So it looks
   like no other programs are linked to the library.
- pcmciautils required one of the sysfsutils include files to be available during the
   build. ./configure was modified to allow pcmciautils to find the include file
- Changelog for changes from 2.1.0 to 2.1.1
    Moved to git from CVS repository
    Modernized build system
    Source compiles on latest compilers
    Various bug fixes
    Removed Changelog and NEWS files
    Adjusted COPYING file to reflect set of directories covered under GPLv2
    Added SUSE-specific libsysfs.conf
    Improvements to adopt git workflow
    Integration with Travis-CI
    Updated the documentation
  Special thanks to all the sysfsutils package maintainers.
    Thanks to: Aurelien Jarno, Christopher Engelhard, Guillem Jover,
               Kamalesh Babulal, Lee Duncan, Martin Pitt, Timm Bäder

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 08:42:10 +00:00
Arne Fitzenreiter
09c3db1cff core160: add updated cgi files
html/cgi-bin/entropy.cgi        | 11 -----------
 html/cgi-bin/hardwaregraphs.cgi | 32 --------------------------------
 html/cgi-bin/media.cgi          | 11 -----------
 html/cgi-bin/memory.cgi         | 14 --------------
 html/cgi-bin/netexternal.cgi    | 11 -----------
 html/cgi-bin/netinternal.cgi    | 17 -----------------
 html/cgi-bin/netother.cgi       | 19 -------------------
 html/cgi-bin/netovpnrw.cgi      | 10 ----------
 html/cgi-bin/netovpnsrv.cgi     | 14 --------------
 html/cgi-bin/qos.cgi            | 11 -----------
 html/cgi-bin/system.cgi         | 18 ------------------

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 08:37:51 +00:00
Adolf Belka
1f60759eab sysstat: Update to version 12.5.4
- Update from 6.0.2 (2005) to 12.5.4 (2021)
- sysstat-6.0.2-sysconf.patch no longer required. Built into source as standard now.
- Update rootfile
   rootfile made the same as previous version. New options are available, such as
   pidstat and tapestat but they have been commented out in the rootfile. If required
   in the future they can be uncommented.
- iso that was built with this sysstat was installed into vm testbed and confirmed
   that all graphs working, especially those related to disk stats.
- Changelog is too large to show here. Full details for all previous versions can be
   found in the CHANGES file in the source tarball.
- At least 25 bugs fixed between the two versions.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:28:30 +00:00
Arne Fitzenreiter
89f7a4a096 core160: add logs.cgi/firewalllog.dat
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:23:07 +00:00
Adolf Belka
5c9faddc97 texinfo: Update to version 6.8
- Update from 6.7 to 6.8
- Update rootfile
- Changelog is too large to include here. Full details can be found in the
   ChangeLog file in the source tarball
   Following is the content of the NEWS file from the source tarball which highlights
    noteworthy changes, very tersely.
   6.8 (3 July 2021)
    * Language
      . new command @displaymath for formatting of mathematical notation
      . @example takes an argument to specify the language
      . mark these commands as deprecated, not to be used:
        @centerchap, @definfoenclose, @refill, @inforef.
      . new paper size @bsixpaper
    * texi2any
      . should be faster as Perl XS parser is enabled by default
      . SHOW_MENU customization variable replaced by FORMAT_MENU.
        FORMAT_MENU set to 'menu' is the same as SHOW_MENU set to 1, and
        FORMAT_MENU set to 'nomenu' is the same as SHOW_MENU set to 0.
      . only check menu structure if CHECK_NORMAL_MENU_STRUCTURE variable is set
      . changes to HTML output:
          . MathJax support for display of math.  new variables HTML_MATH,
            MATHJAX_SCRIPT and MATHJAX_SOURCE.
          . new variables JS_WEBLABELS and JS_WEBLABELS_FILE to support
            JavaScript License Web Labels
          . by default, use sectional tables of contents instead of menus
          . use section names in links by default (configure with
            xrefautomaticsectiontitle customization variable)
          . CONTENTS_OUTPUT_LOCATION sets location of table of contents
          . document sections wrapped in <div> elements
          . new variable USE_NODE_DIRECTIONS to use node or section structure
            for node directions
          . copiable anchor links for definitions with COPIABLE_ANCHORS variable
          . experimental JavaScript browsing interface enabled with INFO_JS_DIR
          . don't add an extra period before file extension given as an argument
            to @image if image file is not found
    * info
      . support compressed dir files
    * texi2dvi
      . stop on first error in input file
    * texinfo.tex
      . put logical page numbers into PDF's ('page labels')
      . put chapter numbers in the PDF outline
      . new Finnish translation
    * Distribution
      . autoconf 2.71, automake 1.16.3, gettext 0.21

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:18:54 +00:00
Adolf Belka
7249b3446b taglib: Update to version 1.12
- Update from 1.11.1 to 1.12
- Update rootfile
- Changelog
   TagLib 1.12 (Feb 16, 2021)
    * Added support for WinRT.
    * Added support for Linux on POWER.
    * Added support for classical music tags of iTunes 12.5.
    * Added support for file descriptor to FileStream.
    * Added support for 'cmID', 'purl', 'egid' MP4 atoms.
    * Added support for 'GRP1' ID3v2 frame.
    * Added support for extensible WAV subformat.
    * Enabled FileRef to detect file types based on the stream content.
    * Dropped support for Windows 9x and NT 4.0 or older.
    * Check for mandatory header objects in ASF files.
    * More tolerant handling of RIFF padding, WAV files, broken MPEG streams.
    * Improved calculation of Ogg, Opus, Speex, WAV, MP4 bitrates.
    * Improved Windows compatibility by storing FLAC picture after comments.
    * Fixed numerical genres in ID3v2.3.0 'TCON' frames.
    * Fixed consistency of API removing MP4 items when empty values are set.
    * Fixed consistency of API preferring COMM frames with no description.
    * Fixed OOB read on invalid Ogg FLAC files (CVE-2018-11439).
    * Fixed handling of empty MPEG files.
    * Fixed parsing MP4 mdhd timescale.
    * Fixed reading MP4 atoms with zero length.
    * Fixed reading FLAC files with zero-sized seektables.
    * Fixed handling of lowercase field names in Vorbis Comments.
    * Fixed handling of 'rate' atoms in MP4 files.
    * Fixed handling of invalid UTF-8 sequences.
    * Fixed possible file corruptions when saving Ogg files.
    * Fixed handling of non-audio blocks, sampling rates, DSD audio in WavPack files.
    * TableOfContentsFrame::toString() improved.
    * UserTextIdentificationFrame::toString() improved.
    * Marked FileRef::create() deprecated.
    * Marked MPEG::File::save() with boolean parameters deprecated,
      provide overloads with enum parameters.
    * Several smaller bug fixes and performance improvements.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:18:29 +00:00