Commit Graph

1410 Commits

Author SHA1 Message Date
Michael Tremer
1f9adf14a7 dnsdist: Update to 1.6.1
This patch makes this package available for aarch64. There are no
reasons why it shouldn't be.

Compiling has become more resource-hungry which is why the memory
consumption per process has been upped to 3GiB.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-19 07:20:07 +01:00
Stefan Schantl
fe6b3e502b ddns: Add upstream patch to fix a typo for FreeDNSAfraid.org provider
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reported-by: Bernhard Bitsch <bbitsch@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Tested-by: Bernhard Bitsch <bbitsch@ipfire.org>
2021-11-19 07:13:13 +01:00
Peter Müller
06fe9baec7 Coreutils: update to 9.0
Please refer to https://lists.gnu.org/archive/html/coreutils/2021-09/msg00113.html
for this version's release announcement.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-19 07:03:31 +01:00
Arne Fitzenreiter
50fe4e50f3 xradio: update get mac address from dts function
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-10 07:04:58 +00:00
Arne Fitzenreiter
1296f1b081 kernel: update to 5.15.0
todo add arm patches, configs and rootfiles

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-04 21:49:44 +01:00
Arne Fitzenreiter
c6e9c3d48f rtl8xxx: remove ipx from realtek wlan modules
kernel 5.15 remove the ipx headers. ipx itself was removed many years ago.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-04 21:45:58 +01:00
Arne Fitzenreiter
a7bb8b98a3 gcc: fix build with kernel 5.15 headers
kernel 5.15 remove cyclades interface.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-04 19:19:04 +01:00
Peter Müller
95539a589e Remove orphaned ddns patches
These are no longer necessary, since ddns 0.14 comes with both of them
applied.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 16:58:11 +00:00
Arne Fitzenreiter
aa60fd7b3e strongswan: remove unneded -j RETURN rules
after removimg the mark rules this rules are useless because they should skip expensive policy matches
that now are removed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 18:43:45 +02:00
Arne Fitzenreiter
a38c882bfb strongswan: remove CONNMARK rules.
the marks are not used by firewall and QoS anymore.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 13:45:39 +02:00
Peter Müller
aa45d923eb Revert "Revert "ppp: update to 2.4.9""
This reverts commit 2d6e633d7f.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 10:54:07 +00:00
Adolf Belka
1c71ff6b2c logwatch: mdadm status missing - Fix for Bug 12080
- Addition of mdadm module to logwatch
- Addition of logwatch to sudoers list to run mdadm commands
- patch to change logwatch mdadm.conf to allow scan for raid drives, change mdadm script
   to run mdadm scan commands with sudo, allow clean but degraded drives to be listed
   in the output.

Fixes: 12080
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 10:43:11 +00:00
Arne Fitzenreiter
80909fb6da strongswan: update _updown to use conmark for QoS
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-18 18:57:18 +02:00
Michael Tremer
51c4b73f7a IPsec: Replace MARK 50 by 0x00800000
This change is necessary because we are using the right-hand two bytes
for storing the QoS classes.

All IPsec traffic will now be skipped and never classified by the QoS.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-13 11:47:27 +00:00
Arne Fitzenreiter
fe582c9d7c u-boot: nanopi r2s: add bootcmd and 2nd mac address
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-08 12:05:36 +00:00
Arne Fitzenreiter
4c59cad1c0 dtc: add device tree compiler on aarch64
u-boot for nanopi r2s (rockchip rk3328) need dtc to build the image
so this adds dtc as build dependency for u-boot

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-03 07:30:57 +00:00
Adolf Belka
875f43830e freeradius: Update to 3.0.23 and disable python to allow running without python2
- Added --without-rlm_python to ./configure to allow running without python2
- Updated rootfile
- Updated patch for preventing cert generation during buildtime to work with new
   version of source code
- Update from 3.0.21 to 3.0.23

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-12 17:59:00 +00:00
Arne Fitzenreiter
3c691bcc7c Revert "client175: Convert python2 modules in source tarball to python3"
This reverts commit 6d11cd4375.

At my tests the server will not start because missing deps of cherrypy and not all files are properly converted yet.
2021-09-12 14:51:10 +00:00
Michael Tremer
b9a4368adb glibc: Fix CVE-2021-33574 and follow-up issue
The mq_notify function has a potential use-after-free issue when using a
notification type of SIGEV_THREAD and a thread attribute with a non-default
affinity mask.

The fix for this introduced a NULL pointer dereference.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:36:49 +00:00
Adolf Belka
6d11cd4375 client175: Convert python2 modules in source tarball to python3
- Patch created to convert all python modules to python3 compatibility that need it.
   2to3 converter used for this.
- Start initscript changed to use python3
- No change required in rootfile
- Execution of patch added to lfs file
- Tested in vm machine. WUI page showed the same as with the python version.
   scan of directory for mp3 (.flac) files was successful. Could not test actual audio
   playing capability as my vm testbed does not have any audio setup at this time.
  I believe that the purpose of client175 is to provide the WUI page and for that my
   testing seemed to show everything working as expected.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 18:00:25 +00:00
Adolf Belka
999b71cf47 ncat: Update to 7.91 and fix #12647 ncat segfault if virtmanager try to connect libvirt
- Update from 7.80 to 7.91
- Update of rootfile
- Changelog is too long to include here
   Full details can be found in the CHANGELOG file in the source tarball
- Added patch to fix segfault - https://github.com/nmap/nmap/issues/2154
- Ran with unpatched 7.91 version
   $ touch /tmp/foo
   $ nc -U /tmp/foo
   Segmentation fault - flagged problem in #12647
- Ran with patched 7.91 version
   $ touch /tmp/foo
   $ nc -U /tmp/foo
   Ncat: Connection refused. - Expected behaviour

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 17:50:40 +00:00
Adolf Belka
1f60759eab sysstat: Update to version 12.5.4
- Update from 6.0.2 (2005) to 12.5.4 (2021)
- sysstat-6.0.2-sysconf.patch no longer required. Built into source as standard now.
- Update rootfile
   rootfile made the same as previous version. New options are available, such as
   pidstat and tapestat but they have been commented out in the rootfile. If required
   in the future they can be uncommented.
- iso that was built with this sysstat was installed into vm testbed and confirmed
   that all graphs working, especially those related to disk stats.
- Changelog is too large to show here. Full details for all previous versions can be
   found in the CHANGES file in the source tarball.
- At least 25 bugs fixed between the two versions.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:28:30 +00:00
Stefan Schantl
785903dbee ddns: Update to 014.
This is a major update to the latest available version of ddns.

Remove patches which are part of the upstream release.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:04:53 +00:00
Adolf Belka
4a53126945 traceroute: Update to version 2.1.0
- Update from 2.0.18 (2011) to 2.1.0 (2016 - latest version)
- Update of rootfile not required
- Changelog
    2016-03-08  Dmitry Butskoy  <Dmitry@Butskoy.name> - 2.1.0
	*  Improve the main loop for better interactivity.
	   Instead of waiting silently for maximum expiration time of probes
	    in progress, use timeout of the first probe (which will be printed
	    first from now) only.
	*  Speedup wait mechanism.
	   Traditional traceroute implementation always waited the whole timeout
	    for any probe. But if we already have some replies from the same hop,
	    or even from some next hop, we can use the round trip time
	    of such a reply as a hint to determine the actual reasonable
	    amount of time to wait.
	   Now the `-w' option has a form of three (in general) float values
	    separated by a comma (or a slash): `-w MAX_SECS,HERE,NEAR' .
	    (last two are optional). MAX_SECS specifies the maximum time
	    (in seconds) to wait, in any case.
	   The optional HERE specifies a factor to multiply the round trip time
	    of an already received response from the same hop.
	   The resulting value is used as a timeout for the probe, instead of
	    (but no more than) MAX_SECS. The optional NEAR specifies a similar
	    factor for a response from some next hop.
	   The time of the first found result is used in both cases.
	   First, we look for the same hop (of the probe which will be printed
	    first from now). If nothing found, then look for some next hop.
	   If nothing found, use MAX_SECS. If HERE and/or NEAR have zero values,
	    the corresponding computation is skipped.
	   HERE and NEAR are always set to zero if only MAX_SECS is specified
	    (which provides compatibility with previous versions). Thus, if your
	    scripts use `-w SECS', then nothing changed for you, since
	    the lonely SECS implies `-w SECS,0,0' .
	   Defaults are 5.0 seconds for MAX_SECS, 3.0 times for HERE and
	    10.0 times for NEAR.
	   Certainly, the new algorithm can lead to premature expiry
	    (especially when response times differ at times) and printing "*"
	    instead of a time. Anyway, you can always switch this algorithm off,
	    just by specifying `-w' with the desired timeout only (fe. `-w 5').
	   We continue to wait whole MAX_SECS when one probe per time
	    must be sent (`--sport', `-P proto'), because it seems more harmful
	    rather than helpful to try to wait less in such cases.
	   To provide compatibility with 2.0.x versions, use:
		traceroute -w 5
	    (or any other desired `-w' value).
	*  Hint people to use the system traceroute(8) instead of
	    tcptraceroute wrapper (by providing a stderr header).
	   The using of this wrapper is a little bit harmful, since it has
	    less possibilities and a little different set of options.
	   For those who are used to use tcptraceroute in cmdline,
	    just create a link with that name to the system traceroute.
	   When invoked as "tcp*", it then behaves as `traceroute -T'.
	   (The simple manual page added for this case in the wrapper subdir).
	   The original tcptraceroute had some options differ ("lpNSAE"),
	    but they was rare used. Most common "dnFifmqwst" was just the same.
	   Therefore it should be painless to use the system binary directly,
	    instead of the limited wrapper (which is still provided indeed).
    2016-02-15  Dmitry Butskoy  <Dmitry@Butskoy.name> - 2.0.22
	*  Some portability fixing and improvements (Felix Janda)
	*  Require clear numbers for options and arguments (Sergey Salnikov)
	*  Drop compilation date from the version string (Debian #774365)
	*  New tcp module option `reuse', which utilize SO_REUSEADDR
	    to reuse local port numbers for the huge workloads (Richard Sheehan)
	*  Avoid poll(2) call with spurious zero timeout in some rare cases
	    by rounding the value properly using ceil(3)
    2014-11-12  Dmitry Butskoy  <Dmitry@Butskoy.name> - 2.0.21
	*  Fix `--mtu' and `-F' working on kernels >= 3.13
	*  Some manual page improving (Christopher Mann)
    2014-06-14  Dmitry Butskoy  <Dmitry@Butskoy.name> - 2.0.20
	*  Describe all complementary long options in the man page (Jan Synacek)
	*  Use correct service name for AS lookups (Frederic Mangano)
	*  Avoid some rare case null dereference (geogriffin@jsgriff.com)
	*  Improve expiration check for simultaneous probes
    2012-11-19  Dmitry Butskoy  <Dmitry@Butskoy.name> - 2.0.19
	*  DCCP protocol support (rfc4340), by Samuel Jero
	    Use "-D" option for it (the protocol-specific options
	    are available too).
	*  Update COPYING and COPYING.LIB license files to the latest
	    published ones (due to FSF address changes etc.) (Jan Synacek)
	*  Add mention of "-l" option to manual (Filip Holec)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:31:04 +00:00
Adolf Belka
07335498ff ghostscript: Update version to 9.54.0
- Update from 9.53.3 to 9.54.0
- Update rootfile
- delete patch related to FT_CALLBACK_DEF as fix has been implemented in the source
   tarball
- Changelog highlights
   Version 9.54.0 (2021-03-30)
     The 9.54.0 release is a maintenance release, and also adds new functionality.
     Highlights in this release include:
       Overprint simulation is now available to all output devices, allowing quality previewing/proofing of PostScript and PDF jobs that rely on overprint. See the -dOverprint option documentation in: Overprint
       The "docxwrite" device adds the ability to output to Microsoft Word "docx" format. See: docxwrite
       The pdfwrite device is now capable of using the Tesseract OCR engine when it is built into Ghostscript to improve searchability and copy and paste functionality when the input lacks the metadata for that purpose. See: UseOCR
       Ghostscript/GhostPDL now includes a "map text to black" function, where text drawn by an input job (except when drawn using a Type 3 font) can be forced to draw in solid black. See: BlackText
       Ghostscript/GhostPDL now supports simple N-up imposition "internally". See: NupControl
       Our efforts in code hygiene and maintainability continue.
       The usual round of bug fixes, compatibility changes, and incremental improvements.
   Full details of above highlights can be found at https://www.ghostscript.com/doc/9.54.0/History9.htm

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 08:03:49 +00:00
Arne Fitzenreiter
18eb75aac9 u-boot: remove uneeded cflags and a unused rpi patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-30 11:29:18 +00:00
Arne Fitzenreiter
e3eb960c9a vdr: cleanup unused patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-23 06:11:48 +00:00
Adolf Belka
113b93fde6 libcdada: Patch file to allow build to work with GCC 11 and update version to 0.3.5
- Update from 0.3.4 to 0.3.5
- Created libcdada-0.3.5-Werror.patch based on the gentoo 0.3.5 patch to remove -Werror
   flags from the configure. This was flagging up warnings as errors and stopping
   the build
- Removed the SUP_ARCH line to allow it to build again
- Added --without-tests and --without-checks to the ./configure statement. This prevents
   the test and checks being built
- Removed libcdada-0.3.4-use-shared-library-for-tests-and-examples-build.patch as no
   longer needed with the tests and checks no longer being built
- No update required for rootfile
- Changelog
   v0.3.5 (20th April 2021)
    New
     - Improved public API documentation
     - build: add --without-tests --without-examples build options
    Bug fix
     - Fix `E_EMPTY` return codes set/map/list/stack/queue
     - Fix `make check` when valgrind is not installed

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:12:58 +00:00
Adolf Belka
21e59055e9 pmacct: Patch file to allow build to work with GCC 11
- Created pmacct-1.7.6-Werror.patch to remove -Werror flags from the configure
   This was flagging up warnings as errors and stopping the build
- Removed the SUP_ARCH line to allow it to build again
- No update required to the rootfile

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:12:51 +00:00
Arne Fitzenreiter
f50b0cbf98 cpufrequtils: add some patches from the debian patchset
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-14 19:57:58 +02:00
Michael Tremer
da1ebf7552 dnsdist: Fix FTBFS with GCC 11
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-09 06:14:19 +00:00
Michael Tremer
a652d4187c collectd: Use libstatgrab to read disk stats
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-09 06:01:37 +00:00
Arne Fitzenreiter
97e10fa539 ccache: update to 4.3 and patch armv6 bus errors
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:39 +02:00
Arne Fitzenreiter
4ff8a22566 kernel: fix gcc plugin build with gcc-11
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:39 +02:00
Michael Tremer
db029f1f5e vdr-epgsearch: Fix FTBFS with GCC 11
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-05 07:42:39 +02:00
Michael Tremer
40e9fa276e vdr: Fix build with GCC 11
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-05 07:42:39 +02:00
Michael Tremer
ab3358655c squid: Fix build with GCC 11
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-05 07:42:39 +02:00
Michael Tremer
0e11a7c077 qemu: Remove -no-pie
There is a bug in binutils 2.36 which makes the linker not recognize
-no-pie.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-05 07:42:39 +02:00
Michael Tremer
a0195fb630 hyperscan: Fix FTBFS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-05 07:42:39 +02:00
Arne Fitzenreiter
d91fde78dd grub: remove unused boothole patchset
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:39 +02:00
Arne Fitzenreiter
bbe7cb5529 grub: remove os_probes_disabled warning
the os_prober is disabled by default because it opens an attack vector.
u

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:39 +02:00
Arne Fitzenreiter
0ab0165878 rtl88au: add Realtek 88x2AU external driver module
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:38 +02:00
Arne Fitzenreiter
d4955d4fb6 xradio: add external driver module for xradio sdio wlan
this module is used on OrangePi Zero and NanoPi Duo

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:38 +02:00
Arne Fitzenreiter
8d54184970 Revert "Revert "dhcpcd: Update to 9.4.0""
This reverts commit c1b356d20d.
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
63e0d451db Revert "Revert "dhcpcd: Update to 9.3.4""
This reverts commit 7c6a4babf8.
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
fead781062 kernel: add pc engines apu1 led detection with new bios.
bios 4.x change the dmi device name from APU to apu1

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
7f8beebd75 Revert "Revert "make: update to 4.3""
This reverts commit 85f5656aca.
2021-07-05 07:42:37 +02:00
Arne Fitzenreiter
c062c7700f kernel: update to 5.10.5
todo: add armv5tel and aarch64 config and rootfiles.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:36 +02:00
Arne Fitzenreiter
def22086ac linux-atm: fix build with kernel >= 5.2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:36 +02:00
Michael Tremer
2d6e633d7f Revert "ppp: update to 2.4.9"
This reverts commit 0cd9215b56.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-02 14:38:28 +00:00