Commit Graph

17428 Commits

Author SHA1 Message Date
Adolf Belka
66852447f1 shadow: Update to version 4.9
- Update from 4.2.1 (2015) to 4.9 (2021)
- Update rootfile
- Update patch for suppression of groups installation
- Changelog
    * Release 4.9
       2021-07-22  Serge Hallyn <serge@hallyn.com>
	* Updated translations (Björn Esser, Juergen Hoetzel)
	* Major salt updates (Björn Esser)
	* Various coverity and cleanup fixes (Iker Pedrosa)
	* Consistently use 0 to disable PASS_MIN_DAYS  in man (tzccinct)
	* Implement NSS support for subids and a libsubid (Serge Hallyn)
	* setfcap: retain setfcap when mapping uid 0 (Christian Brauner)
	* login.defs: include HMAC_CRYPTO_ALGO key (Iker Pedrosa)
	* selinux fixes (Christian Göttsche)
	* Fix path prefix path handling (Lucas Servén Marín)
	* Manpage updates (tzccinct, Sevan Janiyan, Iker Pedrosa, Geert Ijewski,
		谭九鼎, Jamin W. Collins, towerpark, andydna, Frans Spiesschaert)
	* Treat an empty passwd field as invalid (Haelwenn Monnier)
	* newxidmap: allow running under alternative gid (Martijn de Gouw)
	* usermod: check that  shell is executable (Geert Ijewski)
	* Add yescript support (Rodolphe Bréard)
	* useradd memleak fixes (whzhe)
	* useradd: use built-in settings by default (Ludwig Nussel)
	* getdefs: add foreign (non-shadow-utils) items (Karel Zak)
	* buffer overflow fixes (Tobias Stoeckmann)
	* Adding run-parts style for pre and post useradd/del (ed@s5h.net)
       2020-01-23  Serge Hallyn <serge@hallyn.com>
	* selinux: inclue stdio (Michael Vetter)
	* man: don't suggest making groupmems user-writeable (Michael Weiser)
	* Makefile: bail out on error in for loops (Wolfgang Bumiller)
	* Adding logging of SSH_ORIGINAL_COMMAND to nologin. (ed@s5h.net)
	* add new HOME_MODE login.defs option (Duncan Overbruck)
	* Add tty logging to useradd (ed@s5h.net)
	* Useradd: make non-executable shell check only a warning (Tomas Mraz)
	* Update Dutch translation (Frans-Spiesschaert)
	* user_busy: Do not mistake a regular user process for a namespaced one (Tomas Mraz)
	* Revert "Honor --sbindir and --bindir for binary installation" Patrick McLean)
       2019-12-20  Dave Reisner <dreisner@archlinux.org>
	* Do not auto-enable acct_tools_setuid just because
	  pam is enabled.  NOTE - any distros which are relying
	  on this behavior will need to switch to configure
	  --enable-account-tools-setuid
    * Release 4.8
       2019-12-01  Serge Hallyn <serge@hallyn.com>
	* Initial optional bcrypt support.
	* Make build/install of 'su' optional.
	* Fix for vipw not resuming correctly when suspended
	* Sync password field descriptions in manpages
	* Check for valid shell argument in useradd
	* Allow translation of new strings through POTFILES.in
	* Migrate to itstool for translations
	* Migrate to new SELinux api
	* Support --enable-vendordir
	* pwck: Only check homedir if set and not a system user
	* Support nonstandard usernames
	* sget{pw,gr}ent: check for data at EOL
	* Add YYY-MM-DD support in chage
	* Fix failing chmod calls for suidubins
	* Fix --sbindir and --bindir for binary installations
	* Fix LASTLOG_UID_MAX in login.defs
	* Fix configure error with dash
    * Release 4.7
       2019-06-13  Serge Hallyn <serge@hallyn.com>
	* Spawn: don't loop forever on ECHILD
	* Do not fail locking if there is a stale lockfile Tomas Mraz)
	* Use lckpwdf if prefix not set (Tomas Mraz)
	* Build: check correct DocBook version (Jan Tojnar)
	* Usermod: Print 'no changes' to stdout, not stderr (Serge Hallyn)
	* Add support for btrfs subvolumes for home (Adam Majer)
	* Fix chpasswd long line handling (Nathan Ruiz)
	* Use secure_getenv for gettime (Chris Lamb)
	* Make sp_lstchg reproducible (Chris Lamb)
	* Do not crash commonio_close if db file is not open (Tomas Mraz)
	* Don't flush nscd and sssd cache in read-only mode (Charlie Vuillemez)
	* French manpage update (Alban VIDAL)
	* Fix manpage defaults for SUB_UID/GID_COUNT (Tomas Mraz)
	* Sync po files from shadow.pot (Alban VIDAL)
	* Usermod: guard against unsafe chown of homedir contents (Tomas Mraz)
	* Add LASTLOG_UID_MAX to login.defs (Tomas Mraz)
	* new[ug]idmap file capabilities support (Giuseppe Scrivano and Christian Brauner)
	* Fix segfault in useradd (Tomas Mraz)
	* Coverity issues (Tomas Mraz)
	* Flush sssd caches (Jakub Hrozek)
	* Log UID in nologin (Vladimir Ivanov)
	* run pam_getenvlist after setup_env in su.c (Michael Vogt)
	* Support systems with only utmpx (A. Wilcox)
	* Fix unguarded ENABLE_SUBIDS code (Jan Chren (rindeal))
	* Update po/zh_CN translation (Lion Yang)
	* Create parent dirs for useradd -m (Michael Vetter)
	* Prevent usermod segv
	* Fix usermod crash (fariouche)
    * Release 4.6
       2018-04-29  Serge Hallyn <serge@hallyn.com>
	* Newgrp: avoid unnecessary lookups
	* Make language less binary
	* Add error when turning off man switch
	* Spelling fixes
	* Make userdel work with -R
	* newgidmap: enforce setgroups=deny if self-mapping a group
	* Norwegian bokmål translation
	* pwck: prevent crash by not passing O_CREAT
	* WITH_TCB fixes from Mandriva
	* Fix pwconv and grpconv entry skips
	* Fix -- slurping in su
	* add --prefix option
       2017-07-16  Serge Hallyn <serge@hallyn.com>
	* Import new Dutch translations.
       2017-07-10  Serge Hallyn <serge@hallyn.com>
	* Expand error codes for groupmod.
       2017-05-17  Serge Hallyn <serge@hallyn.com>
    * Release 4.5
       2017-05-17  Serge Hallyn <serge@hallyn.com>
	* Patch from Tobias Stoeckmann fixing regression in previous CVE fix
	  preventing SIGTERM to su from being propagated to the job.
	* Patch from Chris Lamb making sp_lstchg shadow field reproducible.
	* Merge Russian translation updates from Yuri Kozlov
	* Fix missing close of subuid file on error
       2017-02-23  Serge Hallyn <serge@hallyn.com>
	* Merge patch by Tobias Stoeckmann <tobias@stoeckmann.org> to fix
	  the equivalent of util-linux CVE-2017-2616.
       2017-02-08  Serge Hallyn <serge@hallyn.com>
	* Update Kazakh translations
	* Consult configuration before calculating subuids
	* Remove misplaced semicolon
       2017-01-29  Serge Hallyn <serge@hallyn.com>
	* Patch from Fedora to improve performance with SSSD, Winbind,
	  or nss_ldap. (Tomas Mraz)
	* Make sure knowndef_table is NULL-terminated.  (Bernhard Rosenkränzer)
       2016-12-21  Serge Hallyn <serge@hallyn.com>
	* Drop leading underscore from _COMMONIO_H and _SHADOWIO_H
	* Fix readability in usermod error messages.
	* Reset user in tallylog
	* Add audit support to su
    * Changes since 4.4
       2016-12-02  Serge Hallyn <serge@hallyn.com>
	  - Use sizeof rather than hardcoding snprintf args
	  - Fix useradd improper default loading
	  - Update Vietnamese translations
	  - Update Polish translations
	  - Remove non-POSIX chmod option in Makefile
	  - Fix suidubins assignments
	  - Fix --add-subuids etc spelling in manpages
	  - Audit homedir ownership change.
	  - Print error on selinux file context update failure
	  - Keep original file perms when creating a backup
    * Changes since 4.2.1:
       2016-12-02  Serge Hallyn <serge@hallyn.com>
	  - Documentation, error report and translations updates
	  - Replace path_max with 32
	  - User namespace support fixes/updates including:
	    - Correct sanity checks in newXidmap
	    - Fix building without subuid support
	    - Add /etc/subuid support for UID matching
	    - Support subuid for nonlocal users
	    - Default to 65536 subuid allocations
	    - Respect -r
	    - Check for range overflows
	  - Add tests from svn tree
	  - Use AC_CHECK_SIZEOF for uid_t size checks
	  - Accomodate missing /etc and login.defs
	  - Support FORCE_SHADOW
	  - Be more robust in hostile environment
	  - Allow removing a primary group
	  - Clear passwords on __pw_dup errors
	  - Memory leak fix in commonio_update and get_map_ranges
	  - Fix resource leak in syslog_sg
	  - Fix user busy error at userdel
	  - Support set/clear lastlog record via lastlog command
	  - Add --no-create-home as longopt for -M
	  - Fix signal races
	  - Reduce syslog priority of common usage events

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-12-03 18:24:27 +01:00
Peter Müller
51f097a25f Core Update 163: Ship curl
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:23:00 +01:00
Adolf Belka
e8e2841b1d curl: Update to version 7.80.0
- Update from 7.79.1 to 7.80.0
- Update of rootfile
- Changelog is too long to include here.
   This update fixes 172 bugs the details of which can be found in the CHANGES file in
   the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-12-03 18:22:28 +01:00
Adolf Belka
c8c179f413 elfutils: Update to version 0.186
- Update from 0.185 to 0.186
- Update of rootfile
- find-dependencies with old libs did not report any issues
- Changelog
    2021-11-10  Mark Wielaard  <mark@klomp.org>
	* configure.ac (AC_INIT): Set version to 0.186.
	* NEWS: Add translation item.
    2021-09-03  John Mellor-Crummey <johnmc@rice.edu>
	* NEWS: Read inlining info in NVIDIA extended line map
    2021-08-10  Adrian Ratiu  <adrian.ratiu@collabora.com>
	* configure.ac (AC_CACHE_CHECK): Rework std=gnu99 check to allow clang.
    2021-08-20  Saleem Abdulrasool  <abdulras@google.com>
	* Add AC_CHECK_HEADERS for error.h and err.h.
    2021-07-28  Mark Wielaard  <mark@klomp.org>
	* configure.ac (AC_CHECK_DECLS): Add reallocarray check.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-12-03 18:22:07 +01:00
Peter Müller
e1f9115d25 Core Update 163: Ship ethtool
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:21:29 +01:00
Adolf Belka
4a8c9aee7e ethtool: Update to version 5.15
- Update from 5.13 to 5.15
- Update of rootfile not required
- Changelog
   Release version 5.15	Michal Kubecek
    update UAPI header copies	Michal Kubecek
    netlink: settings: Correct duplicate condition	Bastian Germann
    Merge branch 'review/module-fixes-2-v2'	Michal Kubecek
    sff-8636: Remove extra blank lines	Ido Schimmel
    sff-8636: Convert if statement to switch-case	Ido Schimmel
    sff-8636: Fix incorrect function name	Ido Schimmel
    sff-8636: Remove incorrect comment	Ido Schimmel
    cmis: Correct comment	Ido Schimmel
    cmis: Fix wrong define name	Ido Schimmel
    cmis: Fix CLEI code parsing	Ido Schimmel
    Merge branch 'review/module-fixes' into master	Michal Kubecek
    netlink: eeprom: Fix compilation when pretty dump is disabled	Ido Schimmel
    ethtool: Fix compilation warning when pretty dump is disabled	Ido Schimmel
    netlink: eeprom: Fallback to IOCTL when a complete hex/raw dump is requested	Ido Schimmel
    cmis: Fix invalid memory access in IOCTL path	Ido Schimmel
    sff-8636: Fix parsing of Page 03h in IOCTL path	Ido Schimmel
    Merge branch 'next' into master	Michal Kubecek
   Release version 5.14	Michal Kubecek
    netlink: settings: add netlink support for coalesce cqe mode parameter	Yufeng Mo
    pretty: update message descriptions for coalescing	Michal Kubecek
    netlink: settings: add two link extended substates of bad signal integrity	Guangbin Huang
    update UAPI header copies	Michal Kubecek
    pretty: add message descriptions for PHC virtual clocks	Michal Kubecek
    pretty: add message descriptions for FEC stats	Michal Kubecek
    pretty: reorder to match enum values	Michal Kubecek
    update UAPI header copies	Michal Kubecek
    cmdline: skip dummy args entry in find_option()	Michal Kubecek
    Merge branch 'review/nojson-fail' into master	Michal Kubecek
    ethtool: return error if command does not support --json	Jakub Kicinski
    ethtool: use dummy args[] entry for no-args case	Jakub Kicinski
    ethtool: remove questionable goto   Jakub Kicinski
    Remove trailing newline in perror messages  Jules Maselbas

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-12-03 18:21:10 +01:00
Peter Müller
e83cfbdb53 Core Update 163: Ship libgpg-error
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:20:24 +01:00
Adolf Belka
3a74750fbf libgpg-error: Update to version 1.43
- Update from 1.42 to 1.43
- Update of rootfile
- Changelog - full details can be found in the ChangeLog file in the source tarball
   Noteworthy changes in version 1.43 (2021-11-03) [C32/A32/R1]
    * Fix for building against GNU libc 2.34.  [T5547]
    * Fix build problems on macOS.  [T5440,T5610]
    * Fix gpgrt-config problems.  [T5381,T5595]
    * Fix gpgrt_free for legacy platforms.  [448bf7b01cad]
    * Fix truncation of error message in the middle of a character.  [T5048]
    * Fix the --disable-threads configure options.  [T5495]
    * Improve lock-obj generation for cross-builds [99ae862a96a5]
    * Improve cross-builds. [T5365]
    * Improve gpgrt_wait_processes.  [T5381]
    * Allow config files to read values from the Windows Registry and
      from envvars.  [b1790f4cc71f]
    * Update the Russian and Czech translations.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-12-03 18:19:59 +01:00
Peter Müller
6eab809678 Core Update 163: Ship iproute2
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:18:30 +01:00
Adolf Belka
421466526d iproute2: Update to version 5.15.0
- Update from 5.14.0 to 5.15.0
- Update of rootfile
- Changelog
    v5.15.0	Stephen Hemminger
	rdma: Fix SRQ resource tracking information json	Neta Ostrovsky
	man: devlink-port: fix pfnum for devlink port add	Antoine Tenart
	Merge branch 'managed-neighbor' into next	David Ahern
	ip, neigh: Add NTF_EXT_MANAGED support	Daniel Borkmann
	ip, neigh: Add missing NTF_USE support	Daniel Borkmann
	ip, neigh: Fix up spacing in netlink dump	Daniel Borkmann
	xfrm: enable to manage default policies	Nicolas Dichtel
	Merge branch 'rdma-optional-stats' into next	David Ahern
	uapi: pickup fix for xfrm ABI breakage	Stephen Hemminger
	iplink: enable to specify index when changing netns	Nicolas Dichtel
	Merge branch 'config-libdir' into next	David Ahern
	configure: add the --libdir option	Andrea Claudi
	configure: add the --prefix option	Andrea Claudi
	configure: support --param=value style	Andrea Claudi
	configure: simplify options parsing	Andrea Claudi
	configure: fix parsing issue with more than one value per option	Andrea Claudi
	configure: fix parsing issue on libbpf_dir option	Andrea Claudi
	configure: fix parsing issue on include_dir option	Andrea Claudi
	rdma: Add optional-counters set/unset support	Neta Ostrovsky
	rdma: Add stat "mode" support	Neta Ostrovsky
	rdma: Update uapi headers	Neta Ostrovsky
	Update kernel headers	David Ahern
	mptcp: cleanup include section.	Stephen Hemminger
	lib/bpf: fix map-in-map creation without prepopulation	Paul Chaignon
	man: devlink-port: remove extra .br	Antoine Tenart
	man: devlink-port: fix style	Antoine Tenart
	man: devlink-port: fix the devlink port add synopsis	Antoine Tenart
	Merge branch 'main' into next	David Ahern
	Merge branch 'ioam-encap-modes' into next	David Ahern
	Update documentation	Justin Iurman
	Add support for IOAM encap modes	Justin Iurman
	cmd: use spaces instead of tabs for usage indentation	Frank Villaro-Dixon
	ip: nexthop: keep cache netlink socket open	Nikolay Aleksandrov
	devlink: print maximum number of snapshots if available	Jacob Keller
	Update kernel headers	David Ahern
	mptcp: unbreak JSON endpoint list	Davide Caratti
	Merge branch 'nexthop-cache' into next	David Ahern
	ip: nexthop: add print_cache_nexthop which prints and manages the nh cache	Nikolay Aleksandrov
	ip: route: print and cache detailed nexthop information when requested	Nikolay Aleksandrov
	ip: nexthop: add a helper which retrieves and prints cached nh entry	Nikolay Aleksandrov
	ip: nexthop: add cache helpers	Nikolay Aleksandrov
	ip: nexthop: factor out ipnh_get_id rtnl talk into a helper	Nikolay Aleksandrov
	ip: nexthop: factor out print_nexthop's nh entry printing	Nikolay Aleksandrov
	ip: nexthop: parse attributes into nh entry structure before printing	Nikolay Aleksandrov
	ip: nexthop: add nh entry structure	Nikolay Aleksandrov
	ip: nexthop: split print_nh_res_group into parse and print parts	Nikolay Aleksandrov
	ip: nexthop: add resilient group structure	Nikolay Aleksandrov
	ip: export print_rta_gateway version which outputs prepared gateway string	Nikolay Aleksandrov
	ip: print_rta_if takes ifindex as device argument instead of attribute	Nikolay Aleksandrov
	Merge branch 'ax.25-netrom-rose' into next	David Ahern
	ROSE: Print decoded addresses rather than hex numbers.	Ralf Baechle
	ROSE: Add rose_ntop implementation.	Ralf Baechle
	NETROM: Print decoded addresses rather than hex numbers.	Ralf Baechle
	NETROM: Add netrom_ntop implementation.	Ralf Baechle
	AX.25: Print decoded addresses rather than hex numbers.	Ralf Baechle
	AX.25: Add ax25_ntop implementation.	Ralf Baechle
	lib: bpf_legacy: fix bpffs mount when /sys/fs/bpf exists	Andrea Claudi
	tc/f_flower: fix port range parsing	Puneet Sharma
	lib: bpf_legacy: add prog name, load time, uid and btf id in prog info dump	Gokul Sivakumar
	Merge branch 'main' into next	David Ahern
	uapi: updates from 5.-rc1	Stephen Hemminger
	ip: Support filter links/neighs with no master	Lahav Schlesinger
	man: ip-macsec: fix gcm-aes-256 formatting issue	Lennert Buytenhek
	Merge branch 'main' into next	David Ahern
	Merge branch 'bridge-mcast_router' into next	David Ahern
	bridge: vlan: add support for mcast_router option	Nikolay Aleksandrov
	bridge: vlan: set vlan option attributes while parsing	Nikolay Aleksandrov
	Update kernel headers	David Ahern
	ip: rewrite routel in python	Stephen Hemminger
	ip: remove routef script	Stephen Hemminger
	ip: remove ifcfg script	Stephen Hemminger
	ip: remove old rtpr script	Stephen Hemminger
	iptuntap: fix multi-queue flag display	David Marchand
	man: ip-link: remove double of	Nikolay Aleksandrov
	configure: restore backward compatibility	Luca Boccassi
	tree-wide: fix some typos found by Lintian	Luca Boccassi
	ip: remove leftovers from IPX and DECnet	Stephen Hemminger
	uapi: update headers from 5. merge	Stephen Hemminger
	ip/bond: add lacp active support	Hangbin Liu
	Update kernel headers	David Ahern
	ip/tunnel: always print all known attributes	Ilya Dmitrichenko
	ipioam6: use print_nl instead of print_null	Justin Iurman
	tc/skbmod: Introduce SKBMOD_F_ECN option	Peilin Ye
	IOAM man8	Justin Iurman
	New IOAM6 encap type for routes	Justin Iurman
	Add, show, link, remove IOAM namespaces and schemas	Justin Iurman
	Import ioam6 uapi headers	David Ahern
	Update kernel headers	David Ahern
	ipneigh: add support to print brief output of neigh cache in tabular format	Gokul Sivakumar
	Merge branch 'bridge-vlan-global-mcast' into next	David Ahern
	bridge: vlan: add support for dumping router ports	Nikolay Aleksandrov
	bridge: vlan: add global mcast_querier option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_startup_query_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_query_response_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_query_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_querier_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_membership_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_last_member_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_startup_query_count option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_last_member_count option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_mld_version option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_igmp_version option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_snooping option	Nikolay Aleksandrov
	bridge: vlan: add support to set global vlan options	Nikolay Aleksandrov
	bridge: vlan: add support for vlan filtering when dumping options	Nikolay Aleksandrov
	bridge: vlan: add support to show global vlan options	Nikolay Aleksandrov
	bridge: vlan: skip unknown attributes when printing options	Nikolay Aleksandrov
	bridge: vlan: factor out vlan option printing	Nikolay Aleksandrov
	ip: bridge: add support for mcast_vlan_snooping	Nikolay Aleksandrov

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-12-03 18:17:52 +01:00
Peter Müller
8acbce68af Start Core Update 163
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:15:43 +01:00
Arne Fitzenreiter
5fc3f779a5 ./make.sh lang
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-12-02 13:04:03 +01:00
Arne Fitzenreiter
471e4846a3 index.cgi: set arch eol warning link color to white
The link was red on red backround which is unreadable.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-12-02 12:59:13 +01:00
Arne Fitzenreiter
65067248d1 kernel: update to 5.15.6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-12-02 11:34:38 +01:00
Arne Fitzenreiter
727c76f09a index.cgi: fix eol link
<li> not official has a href parameter.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-12-01 07:42:06 +01:00
Arne Fitzenreiter
d638cffb35 rtl8812au: update to git-307d694...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 14:12:08 +01:00
Arne Fitzenreiter
11a3bd4898 mountkernfs: fix typo (wrong space character)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 13:51:13 +01:00
Arne Fitzenreiter
b7cf050eeb core162: add systctl.conf to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 09:58:27 +01:00
Arne Fitzenreiter
ffd857d098 sysctl: kernel 5.13 has removed some scheduler variables.
sched_min_granularity_ns and sched_migration_cost_ns are not
available for sysctl anymore. They can only altered via debugfs
if scheduler debugging is enabled.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 09:50:38 +01:00
Arne Fitzenreiter
5a7f7dd587 issue/motd: add architecture warning also to console and ssh logins.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 09:35:19 +01:00
Arne Fitzenreiter
616de7524f core162: add index.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 09:34:20 +01:00
Jonatan Schlag
b55e2b8a35 Inform users about the eol of i?86
The warning point to a wiki page which is currently in construction.
This should give us the opportunity to add further information for
these users even if we do not provide updates anymore.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 07:54:46 +00:00
Arne Fitzenreiter
ef972dcf7a kernel: update arm config and rootfile (oldconfig)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-29 09:14:33 +00:00
Arne Fitzenreiter
6dd1860f0d rpi-firmware: ignore user from tarball
flashimage built will fail because it cannot untar the users
to a fat partition.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-28 08:28:48 +00:00
Arne Fitzenreiter
b6ddee66fc core162: add rpi-firmware
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-27 14:24:18 +00:00
Arne Fitzenreiter
ee3da7ef37 rpi-firmware: update to 20211127
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-27 14:21:31 +00:00
Arne Fitzenreiter
4f6ef73542 cfgroot: install manualpages file
this fix the 500 internal server error becuase this file
was not installed by the patch that add the wiki links.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-25 23:57:28 +01:00
Arne Fitzenreiter
6e739d1050 kernel: update to 5.15.5
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-25 11:26:12 +00:00
Arne Fitzenreiter
c6e9069099 suricata: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-24 19:09:01 +00:00
Peter Müller
063906ebc2 Tor: update to 0.4.6.8
Full changelog as per https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.6.8:

Changes in version 0.4.6.8 - 2021-10-26
  This version fixes several bugs from earlier versions of Tor. One
  highlight is a fix on how we track DNS timeouts to report general
  relay overload.

  o Major bugfixes (relay, overload state):
    - Relays report the general overload state for DNS timeout errors
      only if X% of all DNS queries over Y seconds are errors. Before
      that, it only took 1 timeout to report the overload state which
      was just too low of a threshold. The X and Y values are 1% and 10
      minutes respectively but they are also controlled by consensus
      parameters. Fixes bug 40491; bugfix on 0.4.6.1-alpha.

  o Minor features (fallbackdir):
    - Regenerate fallback directories for October 2021. Closes
      ticket 40493.

  o Minor features (testing):
    - On a testing network, relays can now use the
      TestingMinTimeToReportBandwidth option to change the smallest
      amount of time over which they're willing to report their observed
      maximum bandwidth. Previously, this was fixed at 1 day. For
      safety, values under 2 hours are only supported on testing
      networks. Part of a fix for ticket 40337.
    - Relays on testing networks no longer rate-limit how frequently
      they are willing to report new bandwidth measurements. Part of a
      fix for ticket 40337.
    - Relays on testing networks now report their observed bandwidths
      immediately from startup. Previously, they waited until they had
      been running for a full day. Closes ticket 40337.

  o Minor bugfix (onion service):
    - Do not flag an HSDir as non-running in case the descriptor upload
      or fetch fails. An onion service closes pending directory
      connections before uploading a new descriptor which can thus lead
      to wrongly flagging many relays and thus affecting circuit building
      path selection. Fixes bug 40434; bugfix on 0.2.0.13-alpha.
    - Improve logging when a bad HS version is given. Fixes bug 40476;
      bugfix on 0.4.6.1-alpha.

  o Minor bugfix (CI, onion service):
    - Exclude onion service version 2 Stem tests in our CI. Fixes bug 40500;
      bugfix on 0.3.2.1-alpha.

  o Minor bugfixes (compatibility):
    - Fix compatibility with the most recent Libevent versions, which no
      longer have an evdns_set_random_bytes() function. Because this
      function has been a no-op since Libevent 2.0.4-alpha, it is safe
      for us to just stop calling it. Fixes bug 40371; bugfix
      on 0.2.1.7-alpha.

  o Minor bugfixes (onion service, TROVE-2021-008):
    - Only log v2 access attempts once total, in order to not pollute
      the logs with warnings and to avoid recording the times on disk
      when v2 access was attempted. Note that the onion address was
      _never_ logged. This counts as a Low-severity security issue.
      Fixes bug 40474; bugfix on 0.4.5.8.

Since we configure Tor to use libseccomp, the latter has been updated
for kernel 5.15 as well, hence we need to ship Tor either way.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 14:06:17 +00:00
Peter Müller
53055098f2 libseccomp: Update to 2.5.3
Release annnouncement as per https://github.com/seccomp/libseccomp/releases/tag/v2.5.3:

    Version 2.5.3 - November 5, 2021
        Update the syscall table for Linux v5.15
        Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
        Document that seccomp_rule_add() may return -EACCES
        Fix issues with test 11-basic-basic_errors on old kernels (API level < 5)

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 14:05:55 +00:00
Peter Müller
9a3aca047b Postfix: update to 3.6.3
Please refer to http://www.postfix.org/announcements/postfix-3.6.3.html
for this versions' release announcement.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 14:05:28 +00:00
Peter Müller
a1484cc31a Core Update 162: Ship ddns
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 10:02:33 +00:00
Peter Müller
a2b127c3e1 Core Update 162: Ship and restart OpenVPN
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 10:01:21 +00:00
Peter Müller
20371c8294 Core Update 162: Remove jwhois, ship currently maintained whois client
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:58:23 +00:00
Adolf Belka
30edf752e2 jwhois: Remove jwhois and all associated patches
- jwhois being replaced with whois
- Removal of jwhois lfs, rootfile and assoicated patch files.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:51:17 +00:00
Adolf Belka
c56eb6cbef whois: Installation of aan actively maintained whois client
- This whois client is being actively maintained. This version 5.5.10 was released on
   June 6th 2021 and regular updates have been ocurring several times per year.
- This client has all of its default whois servers compiled into it. These can be seen
   by reading the source files in the tarball.
- Therefore the whois.conf file is available for any additional servers that are decided
   to be required but as provided is empty.
- Installed on a vm testbed and worked to identify the details of ip addresses. Selecting
   an IP in the WUI logs screen also gets the ip information provided so it is working
   well with the WUI.

Tested-by:Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:42:11 +00:00
Adolf Belka
ac36f9f2c1 make.sh: Remove jwhois and replace with whois
- jwhois is no longer being maintained. The last release was from 2005 and the last commit
   was in 2015. https://github.com/jonasob/jwhois
- Debian switched to another whois client which is being actively maintained.
   https://github.com/rfc1036/whois
- This patch series is the removal of jwhois and the installation of whois

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:41:46 +00:00
Peter Müller
82760a506b Core Update 162: Ship dhcpcd
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:41:22 +00:00
Matthias Fischer
f48544ef43 dhcpcd: Update to 9.4.1
For details see:
https://roy.marples.name/git/dhcpcd/shortlog/refs/heads/dhcpcd-9

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
2021-11-24 09:41:00 +00:00
Peter Müller
d07fb5668d Core Update 162: Ship slang
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:40:32 +00:00
Adolf Belka
0b95de5cbf slang: Update to version 2.3.2
- Update from 2.3.0 to 2.3.2
- Update rootfile
- Changelog is too large to include here. Details can be found in the changes.txt file in
   the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:37:51 +00:00
Peter Müller
8799c54e98 Core Update 162: Ship sshfs
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:33:25 +00:00
Adolf Belka
7b30673be3 sshfs: Update to version 3.7.2
- Update from 3.7.1 to 3.7.2
- Update of rootfile not required
- Changelog
   Release 3.7.2 (2021-06-08)
     * Added a secondary check so if a mkdir request fails with EPERM an access request
       will be tried - returning EEXIST if the access was successful.
       Fixes: https://github.com/libfuse/sshfs/issues/243

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:32:33 +00:00
Adolf Belka
549f5294c3 sslh: Update to version 1.22c
- Update from 1.7a (2013) to 1.22c (2021)
- Update rootfile
- Changelog is too large to include here. Full details can be read in the ChangeLog file
   in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:32:02 +00:00
Adolf Belka
c43d3a12ae strace: Update to version 5.14
- Update from 5.11 to 5.14
- Update of rootfile not required
- Changelog
   Noteworthy changes in release 5.14 (2021-09-02)
    * Improvements
      * Implemented decoding of memfd_secret and quotactl_fd syscalls,
        introduced in Linux 5.14.
      * Enhanced prctl syscall decoding.
      * Enhanced decoding of IFLA_* netlink attributes.
      * Enhanced decoding of MDBA_ROUTER_PATTR_* mdb router port netlink attributes.
      * Updated lists of BPF_*, IORING_*, MADV_*, MOUNT_ATTR_*, SCTP_*,
        and UFFD_* constants.
      * Updated lists of ioctl commands from Linux 5.14.
    * Bug fixes
      * Fixed build using bionic libc.
   Noteworthy changes in release 5.13 (2021-07-18)
    * Improvements
      * Print netlink data in a more structured way.
      * Implemented decoding of NT_PRSTATUS and NT_FPREGSET regsets
        of PTRACE_GETREGSET and PTRACE_SETREGSET requests.
      * Implemented decoding of regs argument of PTRACE_GETREGS, PTRACE_GETREGS64,
        PTRACE_SETREGS, PTRACE_SETREGS64, PTRACE_GETFPREGS, and PTRACE_SETFPREGS
        requests.
      * Implemented powerpc System Call Vectored ABI support.
      * Implemented decoding of landlock_add_rule, landlock_create_ruleset,
        and landlock_restrict_self syscalls introduced in Linux 5.13.
      * Enhanced decoding of perf_event_open syscall.
      * Updated lists of BPF_*, IORING_*, KEXEC_*, KEY_*, KVM_*, NT_*, PR_*,
        PTRACE_*, RTM_*, RTPROT_*, TRAP_*, UFFD_*, UFFDIO_*, and V4L2_* constants.
      * Updated lists of ioctl commands from Linux 5.13.
    * Portability
      * On powerpc and powerpc64, linux kernel >= 2.6.23 is required.
        Older versions without a decent PTRACE_GETREGS support will not work.
   Noteworthy changes in release 5.12 (2021-04-26)
    * Improvements
      * Implemented --secontext[=full] option to display SELinux contexts.
      * Implemented decoding of mount_setattr syscall introduced in Linux 5.12.
      * Updated decoding of IFLA_BRPORT_* netlink attributes to match Linux 5.12.
      * Updated lists of DEVCONF_*, IORING_*, KVM_*, MPOL_*, MTD_*, NFT_MSG_*,
        RESOLVE_*, RTM_*, ST_*, and V4L2_* constants.
      * Updated lists of ioctl commands from Linux 5.12.
    * Bug fixes
      * Fixed build using bionic libc.
    * Portability
      * Added binutils 2.36 support to --enable-mpers builds.
- More details of the above changes can be found in the ChangeLog file in the source
   tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:31:35 +00:00
Peter Müller
496dfedfa2 Core Update 162: Ship bind and libuv
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:30:56 +00:00
Adolf Belka
689246f594 libuv: Required for build and run of bind utilities
- Install libuv lfs and rootfile
- Add libuv to make.sh
- Tested by running bind utilities on a vm testbed

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:30:22 +00:00
Adolf Belka
405e359ee6 bind: Update to version 9.16.22
- Update from 9.11.32 to 9.16.22
- 9.11 is an ESV (Extended Support Version) that will go EOL in December 2021
  9.16 is the replacement ESV whose EOL is not yet defined but will be at least 4 years
   so should be supported until at least March 2024 as the 9.16 branch was started in 2020
- Update rootfile
- libuv is now required both to build the bind libraries and for the running of the
   utilities.
- Changelog is difficult to define here as this is a change of branch from 9.11 to 9.16
   both of which have been running in parallel. However all the changes from the start of
   9.16.0 can be found in the CHANGES file in the source tarball.
- nslookup, host and dig utilities tested out by installing this on a vm testbed. All
   these utilities worked as the previous version
   nsupdate was not able to be tested other than confirming that running nsupdate
   opened an interactive session. This utility would be good to be tested by someone
   familiar with how to run it.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:29:56 +00:00
Michael Tremer
1a654c6269 Run "./make.sh lang"
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:29:27 +00:00