Commit Graph

22237 Commits

Author SHA1 Message Date
Arne Fitzenreiter
e94f3294c3 core186: ship tzdata
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Adolf Belka
020ef02a55 tzdata: Update to version 2024a
- Update from version 2023d to 2024a
- Update of rootfile not required
- Changelog
    2024a
	  Briefly:
	    Kazakhstan unifies on UTC+5 beginning 2024-03-01.
	    Palestine springs forward a week later after Ramadan.
	    zic no longer pretends to support indefinite-past DST.
	    localtime no longer mishandles Ciudad Juárez in 2422.
	  Changes to future timestamps
	    Kazakhstan unifies on UTC+5.  This affects Asia/Almaty and
	     Asia/Qostanay which together represent the eastern portion of the
	     country that will transition from UTC+6 on 2024-03-01 at 00:00 to
	     join the western portion.  (Thanks to Zhanbolat Raimbekov.)
	    Palestine springs forward a week later than previously predicted
	     in 2024 and 2025.  (Thanks to Heba Hamad.)  Change spring-forward
	     predictions to the second Saturday after Ramadan, not the first;
	     this also affects other predictions starting in 2039.
	  Changes to past timestamps
	    Asia/Ho_Chi_Minh's 1955-07-01 transition occurred at 01:00
	     not 00:00.  (Thanks to Đoàn Trần Công Danh.)
	    From 1947 through 1949, Toronto's transitions occurred at 02:00
	     not 00:00.  (Thanks to Chris Walton.)
	    In 1911 Miquelon adopted standard time on June 15, not May 15.
	  Changes to code
	    The FROM and TO columns of Rule lines can no longer be "minimum"
	     or an abbreviation of "minimum", because TZif files do not support
	     DST rules that extend into the indefinite past - although these
	     rules were supported when TZif files had only 32-bit data, this
	     stopped working when 64-bit TZif files were introduced in 1995.
	     This should not be a problem for realistic data, since DST was
	     first used in the 20th century.  As a transition aid, FROM columns
	     like "minimum" are now diagnosed and then treated as if they were
	     the year 1900; this should suffice for TZif files on old systems
	     with only 32-bit time_t, and it is more compatible with bugs in
	     2023c-and-earlier localtime.c.  (Problem reported by Yoshito
	     Umaoka.)
	    localtime and related functions no longer mishandle some
	     timestamps that occur about 400 years after a switch to a time
	     zone with a DST schedule.  In 2023d data this problem was visible
	     for some timestamps in November 2422, November 2822, etc. in
	     America/Ciudad_Juarez.  (Problem reported by Gilmore Davidson.)
	    strftime %s now uses tm_gmtoff if available.  (Problem and draft
	     patch reported by Dag-Erling Smørgrav.)
	  Changes to build procedure
	    The leap-seconds.list file is now copied from the IERS instead of
	     from its downstream counterpart at NIST, as the IERS version is
	     now in the public domain too and tends to be more up-to-date.
	     (Thanks to Martin Burnicki for liaisoning with the IERS.)
	  Changes to documentation
	    The strftime man page documents which struct tm members affect
	     which conversion specs, and that tzset is called.  (Problems
	     reported by Robert Elz and Steve Summit.)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Arne Fitzenreiter
e1ea58c928 core186: ship sqlite
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Adolf Belka
0914995edc sqlite: Update to version 3450300
- Update from version 3450200 to 3450300
- Update of rootfile not required
- Changelog
    3450300
	Fix a long-standing bug (going back to version 3.24.0) that might (rarely) cause
	 the "old.*" values of an UPDATE trigger to be incorrect if that trigger fires in
	 response to an UPSERT. Forum post 284955a3cd454a15.
	Fix a bug in sum() that could cause it to return NULL when it should return
	 Infinity. Forum post 23b8688ef4.
	Other trifling corrections and compiler warning fixes that have come up since the
	 previous patch release. See the timeline for details.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Arne Fitzenreiter
101b977d84 core186: ship suricata and libhtp
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Michael Tremer
2d088b20c2 suricata: Update to 7.0.5
This update contains fixes for the following issues:

* CVE-2024-32664 CRITICAL
* CVE-2024-32867 MODERATE

  https://forum.suricata.io/t/suricata-7-0-5-and-6-0-19-released/4617

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Michael Tremer
d1731f4f69 libhtp: Update to 0.5.48
https://github.com/OISF/libhtp/releases/tag/0.5.48

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Arne Fitzenreiter
b4a822d9b4 core186: ship kmod
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Peter Müller
581e1c7a67 kmod: Update to 32
Changelog according to the tarball's NEWS file:

- Improvements

        - Use any hash algo known by kernel/openssl instead of keep needing
          to update the mapping

        - Teach kmod to load modprobe.d/depmod.d configuration from ${prefix}/lib
          and allow it to be overriden during build with --with-distconfdir=DIR

        - Make kernel modules directory configurable. This allows distro to
          make kmod use only files from /usr regardless of having a compat
          symlink in place.

        - Install kmod.pc containing the features selected at build time.

        - Install all tools and symlinks by default. Previously kmod relied on
          distro packaging to set up the symlinks in place like modprobe,
          depmod, lsmod, etc. Now those symlinks are created by kmod itself
          and they are always placed in $bindir.

- Bug Fixes

        - Fix warnings due to -Walloc-size

- Others

        - Drop python bindings. Those were not update in ages and not compatible
          with latest python releases.

        - Cleanup test infra, dropping what was not used anymore

        - Drop experimental tools `kmod insert` / `kmod remove`. Building those
          was protected by a configure option never set by distros. They also
          didn't gain enough traction to replace the older interfaces via
          modprobe/insmod/rmmod.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Arne Fitzenreiter
7152f170a2 core186: ship strongswan
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Peter Müller
692589d73a strongSwan: Update to 5.9.14
Please see https://github.com/strongswan/strongswan/releases/tag/5.9.14
for the changelog of this version.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Peter Müller
6bd19004ee Lynis: Update to 3.1.1
Please see https://cisofy.com/changelog/lynis/#311 for the changelogs
since version 3.0.9.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Peter Müller
f51e75beb6 Tor: Update to 0.4.8.11
Full changelog according to https://gitlab.torproject.org/tpo/core/tor/-/raw/tor-0.4.8.11/ChangeLog:

Changes in version 0.4.8.11 - 2024-04-10
  This is a minor release mostly to upgrade the fallbackdir list. Worth noting
  also that directory authority running this version will now automatically
  reject relays running the end of life 0.4.7.x version.

  o Minor feature (authority):
    - Reject 0.4.7.x series at the authority level. Closes ticket 40896.

  o Minor feature (dirauth, tor26):
    - New IP address and keys.

  o Minor feature (directory authority):
    - Allow BandwidthFiles "node_id" KeyValue without the dollar sign at
      the start of the hexdigit, in order to easier database queries
      combining Tor documents in which the relays fingerprint does not
      include it. Fixes bug 40891; bugfix on 0.4.7 (all supported
      versions of Tor).

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on April 10, 2024.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2024/04/10.

  o Minor bugfixes (directory authorities):
    - Add a warning when publishing a vote or signatures to another
      directory authority fails. Fixes bug 40910; bugfix
      on 0.2.0.3-alpha.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:41 +00:00
Arne Fitzenreiter
3705171543 core186: ship squid
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:40 +00:00
Matthias Fischer
62f1e54adc squid: Update to 6.9
For details see:
https://github.com/squid-cache/squid/commits/v6

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-04-28 17:23:40 +00:00
Michael Tremer
98b755225e general-function.pl: Add a function to easily set defaults
This function can be used to set values in a hash if they have not been
set, yet.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:44:29 +02:00
Michael Tremer
3cd821c122 web: Refactor graphs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:43:33 +02:00
Michael Tremer
2dd6bc7225 web: Introduce sections
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:43:07 +02:00
Michael Tremer
fbfde0088c vulnerabilities.cgi: Use CSS to colour the table
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:42:48 +02:00
Michael Tremer
a9279a413f vulnerabilities.cgi: Remove manual alternation of colours
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:41:45 +02:00
Michael Tremer
f5bddd4fe7 header.pl: Simplify boxes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:41:33 +02:00
Michael Tremer
d716ad52a7 header.pl: Remove unused openpagewithoutmenu function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:41:16 +02:00
Michael Tremer
72e6d61719 CSS: Automatically stripe all tables
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:38:33 +02:00
Michael Tremer
66db90757a Remove RECONNECTION=dialondemand
We don't support this at all and so we don't need to check any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:35:47 +02:00
Michael Tremer
cc5613b3b5 network-functions.pl: Read PPP settings globally
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:35:36 +02:00
Michael Tremer
789251ae65 web: Read ethernet settings file only once in headers
The web UI is rather slow and one of the reasons for that is that we are
reading the same files over and over again...

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:35:24 +02:00
Michael Tremer
07257e1f83 general-functions.pl: Don't use line buffering
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:35:08 +02:00
Michael Tremer
0e750575a9 web-user-interface: Move theme functions back into header.pl
Since we no longer support other themes, the web UI should load quicker
if not importing too many other files.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:59 +02:00
Michael Tremer
9b044bc8eb header.pl: Remove unused function "is_modem"
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:36 +02:00
Michael Tremer
0e93c1eaf3 header.pl: Fix whitespace errors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:27 +02:00
Michael Tremer
62a84fdb4a general-functions.pl: Remove unused NextIP* functions
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:14 +02:00
Michael Tremer
9c9f637e16 general-functions.pl: Remove unused srtarray function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:34:04 +02:00
Michael Tremer
11e75894ce general-functions.pl: Remove getlastip/getnextip
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:55 +02:00
Michael Tremer
498feaa550 general-functions.pl: Drop unused getccdbc function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:40 +02:00
Michael Tremer
b8d1ae216f general-functions.pl: Drop unused "writehashpart" function
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:31 +02:00
Michael Tremer
d110e751f3 general-functions.pl: Fix various whitespace issues
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:33:21 +02:00
Michael Tremer
db09ea9e5c initscripts: Don't overwrite the PID file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:32:54 +02:00
Michael Tremer
3f863ee70d initscripts: Add some basic functions for IP address maths
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:32:40 +02:00
Michael Tremer
5900a95059 initscripts: Fix reading PIDs
An incorrect variable has been used.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:31:36 +02:00
Michael Tremer
6e47a143c9 initscripts: Handle command arguments as array
For some reason, the function is refusing to launch a command that has
extra arguments.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:31:24 +02:00
Michael Tremer
e340d393d3 network: Don't include initscript headers twice
Everywhere we import the functions, we have already imported the
standard includes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:31:08 +02:00
Michael Tremer
737e9e1037 network-functions.pl: Add function to get netmask in dotted format
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:44 +02:00
Michael Tremer
85e004c2da network-functions.pl: Fix return code check
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:32 +02:00
Michael Tremer
65fff7fc34 network-functions.pl: Fix whitespace issues
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:21 +02:00
Michael Tremer
0e55d27737 network-functions.pl: Add function to extract prefix
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:30:09 +02:00
Michael Tremer
8eb016da79 CSS: Make text/number inputs 100% wide, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:29:48 +02:00
Michael Tremer
17c29ce7fe CSS: Make all <select> and <textarea> use all available space
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:29:40 +02:00
Michael Tremer
d9de11aff8 CSS: Don't make headings so skinny
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:28:50 +02:00
Michael Tremer
82fec28abe header.pl: Allow passing more HTTP headers to showhttpheaders()
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-04-27 19:28:25 +02:00
Peter Müller
28e8d436fc Remove orphaned Apache patch
See: https://lists.ipfire.org/hyperkitty/list/development@lists.ipfire.org/message/BENPLQ43YKYOWIKIEXHDVEQWNE3SBKEH/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 21:10:52 +00:00