Commit Graph

16947 Commits

Author SHA1 Message Date
Adolf Belka
07335498ff ghostscript: Update version to 9.54.0
- Update from 9.53.3 to 9.54.0
- Update rootfile
- delete patch related to FT_CALLBACK_DEF as fix has been implemented in the source
   tarball
- Changelog highlights
   Version 9.54.0 (2021-03-30)
     The 9.54.0 release is a maintenance release, and also adds new functionality.
     Highlights in this release include:
       Overprint simulation is now available to all output devices, allowing quality previewing/proofing of PostScript and PDF jobs that rely on overprint. See the -dOverprint option documentation in: Overprint
       The "docxwrite" device adds the ability to output to Microsoft Word "docx" format. See: docxwrite
       The pdfwrite device is now capable of using the Tesseract OCR engine when it is built into Ghostscript to improve searchability and copy and paste functionality when the input lacks the metadata for that purpose. See: UseOCR
       Ghostscript/GhostPDL now includes a "map text to black" function, where text drawn by an input job (except when drawn using a Type 3 font) can be forced to draw in solid black. See: BlackText
       Ghostscript/GhostPDL now supports simple N-up imposition "internally". See: NupControl
       Our efforts in code hygiene and maintainability continue.
       The usual round of bug fixes, compatibility changes, and incremental improvements.
   Full details of above highlights can be found at https://www.ghostscript.com/doc/9.54.0/History9.htm

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 08:03:49 +00:00
Adolf Belka
ae367b9c8f alsa: Update to version 1.2.5.1
- Not really sure if a sound support capability is really appropriate for a firewall. I
   wouldn't have it. However if it stays as an add-on then it should be up to date.
- Update alsa-lib from 1.0.27.1 (2013) to 1.2.5.1 (2021)
- Update alsa-utils from 1.0.27.1 (2013) to 1.2.5.1 (2021)
- Update alsa-firmware from 1.0.27 (2013) to 1.2.4 (2020)
- Update rootfile
- Changelog is too large to include here. Changes back to 2019-11-20 can be found at
   https://www.alsa-project.org/wiki/Main_Page
   Earlier changes have to be found from the git commits at
   https://github.com/alsa-project/alsa-lib and
   https://github.com/alsa-project/alsa-utils
   There is no changelog or git commits that I have been able to find for alsa-firmware

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 08:03:28 +00:00
Arne Fitzenreiter
6bebdc5c56 core160: add fwhost.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 07:52:24 +00:00
Peter Müller
6f36132e68 fwhosts.cgi: properly fetch configured IPsec N2N subnets
Previously, the getcolor() function did not correctly process IPsec
N2N connections with more than one remote network configured, resulting
in networks mistakenly marked as being part of a VPN connection, or vice
versa.

Fixes: #11235

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 07:50:57 +00:00
Arne Fitzenreiter
9e47307d1b core160: add general-functions.pl
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 07:47:45 +00:00
Peter Müller
db4e10a6ec general-functions.pl: do not miscalculate when enumerating IPsec N2N subnet membership
Fixes: #11235

Cc: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 07:25:59 +00:00
Arne Fitzenreiter
4bf13a6a47 core160: begin updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 07:05:56 +00:00
Arne Fitzenreiter
ff54a798a5 grub: fix cloudhelper permissions
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-02 07:38:43 +02:00
Arne Fitzenreiter
21e0da660d grub: fix cloud helper installation
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-01 17:08:46 +02:00
Michael Tremer
e950f7c7a3 cups: Bump package version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-01 13:25:24 +00:00
Michael Tremer
b8b36e969c grub cloud: Add kernel release to boot ID
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-01 13:25:03 +00:00
Michael Tremer
dd730a395b flash-image: Enable GRUB_FIRST_BOOT setting
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-01 13:24:46 +00:00
Michael Tremer
1e848ad3d4 grub: Add file with cloud helping stuff
This file will detect whether to do certain actions depending on the
environment it is running on.

Currently this detects whether IPFire is booting up on AWS EC2 and
selects the serial console boot entry.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-01 13:24:22 +00:00
Michael Tremer
ff1953f7ad flash-images: Label serial console option as "serial"
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-01 13:24:01 +00:00
Arne Fitzenreiter
255273a36b set version to 2.27
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-01 11:51:14 +02:00
Arne Fitzenreiter
52758d52c3 kernel: update to 5.10.55
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-01 11:50:25 +02:00
Arne Fitzenreiter
06c3030bc6 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-3.x into next 2021-07-31 18:52:02 +02:00
Arne Fitzenreiter
c9517c7bbb core159: add libusb
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-31 18:51:22 +02:00
Arne Fitzenreiter
8c5865abc4 Revert "libusb: update to 0.0.24"
This reverts commit 937d8dbcb1.
2021-07-31 13:27:54 +02:00
Arne Fitzenreiter
06104d4e6f u-boot-friendlyarm: add armv6l rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-30 20:01:36 +00:00
Arne Fitzenreiter
18eb75aac9 u-boot: remove uneeded cflags and a unused rpi patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-30 11:29:18 +00:00
Arne Fitzenreiter
853d70e971 u-boot-friendlyarm: update to 5e8607b
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-30 11:28:03 +00:00
Arne Fitzenreiter
4e6052e937 kernel: update to 5.10.54
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-28 22:42:51 +02:00
Arne Fitzenreiter
bcea571211 kernel: update to 5.10.53
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-25 23:48:58 +02:00
Arne Fitzenreiter
672783030e glib: update to 2.69.0
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-23 13:47:07 +02:00
Michael Tremer
4cdd12789f cups: Reload dbus to load/unload policy
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-23 06:15:28 +00:00
Michael Tremer
eaad1d562c avahi: Reload dbus to load/unload policy
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-23 06:15:27 +00:00
Michael Tremer
f8447c9d23 dbus: Add reload to initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-23 06:15:23 +00:00
Michael Tremer
d0a93015a9 core159: Fix permissions after extraction
There seems to be a bug in tar (which should be gone by now), but on
affected systems, we might need to reset directory permissions just in
case.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-23 06:12:43 +00:00
Arne Fitzenreiter
e3eb960c9a vdr: cleanup unused patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-23 06:11:48 +00:00
Arne Fitzenreiter
cf66ba1bbf vdr: bump package version
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-22 18:22:14 +00:00
Arne Fitzenreiter
19473c97dd pcengines-apu-firmware: update to 4.14.0.2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-22 10:48:47 +02:00
Arne Fitzenreiter
f56e93b9b4 vdr: update to 2.4.7
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-21 21:49:19 +02:00
Arne Fitzenreiter
ec13fae9d4 kernel: update to 5.10.52
Signen-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-21 18:09:59 +02:00
Arne Fitzenreiter
5138aaeb9b tshark: update to 3.4.7
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 22:46:54 +00:00
Michael Tremer
11a2fce5d1 README: Update installation URL
Reported-by: Konrad Panzlaff <konrad.panzlaff@pa-bu.de>
Fixes: #12661
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:27:26 +00:00
Adolf Belka
c3e53a041d tshark: Update to version 3.4.6
- Update from 3.4.3 to 3.4.6
- Update rootfile
- Changelog
   Wireshark 3.4.6 Release Notes
    What’s New
     The Windows installers now ship with Npcap 1.31. They previously
      shipped with Npcap 1.10.
     The Windows installers now ship with Qt 5.15.2. They previously
      shipped with Qt 5.12.1.
     Bug Fixes
        • wnpa-sec-2021-04[1] DVB-S2-BB dissector infinite loop
     The following bugs have been fixed:
        • Macro filters can’t handle escaped characters Issue 17160[2].
        • Display filter crashes Wireshark Issue 17316[3].
        • IEEE-1588 Signalling Unicast TLV incorrectly reported as being
          malformed Issue 17355[4].
        • IETF QUIC TLS decryption error with extraneous packets during the
          handshake Issue 17383[5].
        • Statistics → Resolved Addresses: multi-protocol (TCP/UDP/…​)
          ports not displayed Issue 17395[6].
     New and Updated Features
      New Protocol Support
       There are no new protocols in this release.
      Updated Protocol Support
       DNP, DVB-S2-BB, ProtoBuf, PTP, QUIC, RANAP, and TACACS
      New and Updated Capture File Support
       Ascend, ERF, K12, NetScaler, and pcapng
   Wireshark 3.4.5 Release Notes
    What’s New
     Bug Fixes
      The following vulnerabilities have been fixed:
        • wnpa-sec-2021-04[1] MS-WSP dissector excessive memory
          consumption. Issue 17331[2].
      The following bugs have been fixed:
        • TShark does not print GeoIP information Issue 14691[3].
        • TShark error when piping to "head" Issue 16192[4].
        • Parts of ASCII representation in Packet Bytes pane are missing
          Issue 17087[5].
        • Buildbot crash output: fuzz-2021-02-22-1012761.pcap Issue
          17254[6].
        • NDPE attribute of NAN packet is not dissected Issue 17278[7].
        • TECMP: reserved flag interpreted as part of timestamp Issue
          17279[8].
        • Master branch does not compile at least with gcc-11 Issue
          17281[9].
        • DNS IXFR/AXFR multiple response Issue 17293[10].
        • File too large Issue 17301[11].
        • Build fails with CMake 3.20 Issue 17314[12].
     New and Updated Features
      New Protocol Support
       There are no new protocols in this release.
      Updated Protocol Support
       DECT, DNS, EAP, Kerberos, LDAP, MS-WSP, SMB2, Sysdig, TECMP, and WiFi
        NAN
      New and Updated Capture File Support
       pcapng
   Wireshark 3.4.4 Release Notes
    What’s New
     Bug Fixes
      The following vulnerabilities have been fixed:
        • wnpa-sec-2021-03[1] Wireshark could open unsafe URLs. Issue
          17232[2]. CVE-2021-22191[3].
      The following bugs have been fixed:
        • NTP Version 3 Client Decode PDML output issue (Reference ID
          Issue) Issue 17112[4].
        • 3.4.2: public wireshark include files are including build time
          "config.h" Issue 17190[5].
        • wireshark-3.4.3/epan/dissectors/packet-s7comm.c:3521: bad array
          index ? Issue 17198[6].
        • SIP protocol: P-Called-Party-ID header mixed up with
          P-Charge-Info header Issue 17215[7].
        • Asterix CAT010 Decode Error Issue 17226[8].
        • _ws.expert columns not populated for IPv4 Issue 17228[9].
        • Buildbot crash output: fuzz-2021-02-12-1651908.pcap Issue
          17233[10].
        • gQUIC: Wireshark 3.4.3 fails to dissect a packet (gQUIC q024)
          that v3.2.6 succeeds. Issue 17250[11].
     New and Updated Features
      New Protocol Support
       There are no new protocols in this release.
      Updated Protocol Support
       ASTERIX, Frame Relay, GQUIC, NTP, NVMe Fabrics RDMA, S7COMM, and SIP
      New and Updated Capture File Support
       iSeries

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:27:00 +00:00
Adolf Belka
7d5b68a92c tftpd: Update to version 5.2
- Update from 0.48 (2007) to 5.2 (2011)
   Version 5.2 is the last update made to this program
- Update to rootfile
- Changelog
   Changes in 5.2:
	Fix breakage on newer Linux when a single interface has
         multiple IP addresses.
   Changes in 5.1:
	Add -P option to write a PID file.  Patch by Ferenc Wagner.
	Bounce the syslog socket in standalone mode, in case the
         syslog daemon has been restarted.  Patch by Ferenc Wagner.
	Build fixes.
	Fix handling of block number wraparound after a successful
         options negotiation.
	Fix a buffer overflow in option parsing.
   Changes in 5.0:
	Try to on platforms with getaddrinfo() without AI_ADDRCONFIG or
         AI_CANONNAME.
	Implement the "rollover" option, for clients which want block
         number to rollover to anything other than zero.
	Correctly disable PMTU in standalone mode.  Patch by Florian
         Lohoff.
   Changes in 0.49:
	Add IPv6 support.  Patch by Karsten Keil.
	Support systems with editline instead of readline.
	Support long options in the server.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:23:14 +00:00
Adolf Belka
c4df0637a4 samba: Update version to 4.14.6
- Update from 4.14.4 to 4.14.6
- Update of rootfile not required
- Changelog
   Release Notes for Samba 4.14.6
        * BUG 14722: s3: lib: Fix talloc heirarcy error in parent_smb_fname().
        * BUG 14732: smbd: Fix pathref unlinking in create_file_unixpath().
        * BUG 14734: s3: VFS: default: Add proc_fd's fallback for vfswrap_fchown().
        * BUG 14736: s3: smbd: Remove erroneous TALLOC_FREE(smb_fname_parent) in
          change_file_owner_to_parent() error path.
        * BUG 14730: NT_STATUS_FILE_IS_A_DIRECTORY error messages when using
          glusterfs VFS module.
        * BUG 14734: s3/modules: fchmod: Fallback to path based chmod if pathref.
        * BUG 14740: Spotlight RPC service doesn't work with vfs_glusterfs.
        * BUG 14750: gensec_krb5: Restore ipv6 support for kpasswd.
        * BUG 14752: smbXsrv_{open,session,tcon}: protect
          smbXsrv_{open,session,tcon}_global_traverse_fn against invalid records.
        * BUG 14027: samba-tool domain backup offline doesn't work against bind DLZ
          backend.
        * BUG 14669: netcmd: Use next_free_rid() function to calculate a SID for
          restoring a backup.
   Release Notes for Samba 4.14.5
        * BUG 14696: s3: smbd: SMB1 SMBsplwr doesn't send a reply packet on success.
        * BUG 14708: s3: smbd: Ensure POSIX default ACL is mapped into returned
          Windows ACL for directory handles.
        * BUG 14721: s3: smbd: Fix uninitialized memory read in
          process_symlink_open() when used with vfs_shadow_copy2().
        * BUG 14689: docs: Expand the "log level" docs on audit logging.
        * BUG 14714: smbd: Correctly initialize close timestamp fields.
        * BUG 14699: Fix gcc11 compiler issues.
        * BUG 14718: docs-xml: Update smbcacls manpage.
        * BUG 14719: docs: Update list of available commands in rpcclient.
        * BUG 14475: ctdb: Fix a crash in run_proc_signal_handler().
        * BUG 14695: s3:winbind: For 'security = ADS' require realm/workgroup to be
          set.
        * BUG 14699: lib:replace: Do not build strndup test with gcc 11 or newer.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:22:35 +00:00
Arne Fitzenreiter
83681f4f2e core159: add mountkernfs script to update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:21:49 +00:00
Michael Tremer
40a3053a67 libvirtd: Enable required cgroups
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:13:55 +00:00
Michael Tremer
10a2b80cce mountkernfs: Mount cgroup2 hierarchy
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:13:46 +00:00
Adolf Belka
113b93fde6 libcdada: Patch file to allow build to work with GCC 11 and update version to 0.3.5
- Update from 0.3.4 to 0.3.5
- Created libcdada-0.3.5-Werror.patch based on the gentoo 0.3.5 patch to remove -Werror
   flags from the configure. This was flagging up warnings as errors and stopping
   the build
- Removed the SUP_ARCH line to allow it to build again
- Added --without-tests and --without-checks to the ./configure statement. This prevents
   the test and checks being built
- Removed libcdada-0.3.4-use-shared-library-for-tests-and-examples-build.patch as no
   longer needed with the tests and checks no longer being built
- No update required for rootfile
- Changelog
   v0.3.5 (20th April 2021)
    New
     - Improved public API documentation
     - build: add --without-tests --without-examples build options
    Bug fix
     - Fix `E_EMPTY` return codes set/map/list/stack/queue
     - Fix `make check` when valgrind is not installed

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:12:58 +00:00
Adolf Belka
21e59055e9 pmacct: Patch file to allow build to work with GCC 11
- Created pmacct-1.7.6-Werror.patch to remove -Werror flags from the configure
   This was flagging up warnings as errors and stopping the build
- Removed the SUP_ARCH line to allow it to build again
- No update required to the rootfile

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:12:51 +00:00
Arne Fitzenreiter
542edad66e kernel: update to 5.10.51
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 14:08:08 +02:00
Arne Fitzenreiter
93f83a3f0d kernel: update to 5.10.50
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-15 22:41:51 +02:00
Arne Fitzenreiter
ab9e4795f1 cpufrequtils: enable build on all arches
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-14 20:04:02 +02:00
Arne Fitzenreiter
f50b0cbf98 cpufrequtils: add some patches from the debian patchset
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-14 19:57:58 +02:00
Arne Fitzenreiter
49f1465438 Merge remote-tracking branch 'origin/master' into next 2021-07-14 13:16:04 +02:00
Michael Tremer
cec532b4cc make.sh: Explicitely call zstd to extract toolchain
Some older versions of tar do not recognise Zstandard, yet.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tested-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-14 08:30:31 +00:00