Commit Graph

2671 Commits

Author SHA1 Message Date
Stefan Schantl
74070fe153 suricata: Move default loaded rulefiles to own included file.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-12-11 09:49:22 +00:00
Arne Fitzenreiter
5a7f7dd587 issue/motd: add architecture warning also to console and ssh logins.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 09:35:19 +01:00
Arne Fitzenreiter
ef972dcf7a kernel: update arm config and rootfile (oldconfig)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-29 09:14:33 +00:00
Arne Fitzenreiter
ee3da7ef37 rpi-firmware: update to 20211127
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-27 14:21:31 +00:00
Arne Fitzenreiter
4f6ef73542 cfgroot: install manualpages file
this fix the 500 internal server error becuase this file
was not installed by the patch that add the wiki links.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-25 23:57:28 +01:00
Arne Fitzenreiter
c6e9069099 suricata: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-24 19:09:01 +00:00
Adolf Belka
30edf752e2 jwhois: Remove jwhois and all associated patches
- jwhois being replaced with whois
- Removal of jwhois lfs, rootfile and assoicated patch files.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:51:17 +00:00
Adolf Belka
c56eb6cbef whois: Installation of aan actively maintained whois client
- This whois client is being actively maintained. This version 5.5.10 was released on
   June 6th 2021 and regular updates have been ocurring several times per year.
- This client has all of its default whois servers compiled into it. These can be seen
   by reading the source files in the tarball.
- Therefore the whois.conf file is available for any additional servers that are decided
   to be required but as provided is empty.
- Installed on a vm testbed and worked to identify the details of ip addresses. Selecting
   an IP in the WUI logs screen also gets the ip information provided so it is working
   well with the WUI.

Tested-by:Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:42:11 +00:00
Adolf Belka
0b95de5cbf slang: Update to version 2.3.2
- Update from 2.3.0 to 2.3.2
- Update rootfile
- Changelog is too large to include here. Details can be found in the changes.txt file in
   the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:37:51 +00:00
Adolf Belka
689246f594 libuv: Required for build and run of bind utilities
- Install libuv lfs and rootfile
- Add libuv to make.sh
- Tested by running bind utilities on a vm testbed

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:30:22 +00:00
Adolf Belka
405e359ee6 bind: Update to version 9.16.22
- Update from 9.11.32 to 9.16.22
- 9.11 is an ESV (Extended Support Version) that will go EOL in December 2021
  9.16 is the replacement ESV whose EOL is not yet defined but will be at least 4 years
   so should be supported until at least March 2024 as the 9.16 branch was started in 2020
- Update rootfile
- libuv is now required both to build the bind libraries and for the running of the
   utilities.
- Changelog is difficult to define here as this is a change of branch from 9.11 to 9.16
   both of which have been running in parallel. However all the changes from the start of
   9.16.0 can be found in the CHANGES file in the source tarball.
- nslookup, host and dig utilities tested out by installing this on a vm testbed. All
   these utilities worked as the previous version
   nsupdate was not able to be tested other than confirming that running nsupdate
   opened an interactive session. This utility would be good to be tested by someone
   familiar with how to run it.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:29:56 +00:00
Adolf Belka
241d8a753a meson: Update to version 0.59.2
- Update from 0.58.0 to 0.59.2
- Update rootfile
- Changelog is too long to include here.
   Full details can be read at https://mesonbuild.com/Release-notes-for-0-59-0.html

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:10:16 +00:00
Adolf Belka
2ae78be081 bison: Update to version 3.8.2
- Update from 3.7.6 to 3.8.2
- Update rootfile
- Changelog
   Noteworthy changes in release 3.8.2 (2021-09-25) [stable]
     Fixed portability issues of bison on Cygwin.
     Improvements in glr2.cc: add support for custom error messages (`%define
      parse.error custom`), allow linking several parsers together.
   Noteworthy changes in release 3.8.1 (2021-09-11) [stable]
     The generation of prototypes for yylex and yyerror in Yacc mode is
      breaking existing grammar files.  To avoid breaking too many grammars, the
      prototypes are now generated when `-y/--yacc` is used *and* the
      `POSIXLY_CORRECT` environment variable is defined.
     Avoid using `-y`/`--yacc` simply to comply with Yacc's file name
      conventions, rather, use `-o y.tab.c`.  Autoconf's AC_PROG_YACC macro uses
      `-y`.  Avoid it if possible, for instance by using gnulib's gl_PROG_BISON.
   Noteworthy changes in release 3.8 (2021-09-07) [stable]
    ** Backward incompatible changes
     In conformance with the recommendations of the Graphviz team
      (https://marc.info/?l=graphviz-devel&m=129418103126092), `-g`/`--graph`
      now generates a *.gv file by default, instead of *.dot.  A transition
      started in Bison 3.4.
     To comply with the latest POSIX standard, in Yacc compatibility mode
      (options `-y`/`--yacc`) Bison now generates prototypes for yyerror and
      yylex.  In some situations, this is breaking compatibility: if the user
      has already declared these functions but with some differences (e.g., to
      declare them as static, or to use specific attributes), the generated
      parser will fail to compile.  To disable these prototypes, #define yyerror
      (to `yyerror`), and likewise for yylex.
    ** Deprecated features
     Support for the YYPRINT macro is removed. It worked only with yacc.c and
      only for tokens.  It was obsoleted by %printer, introduced in Bison 1.50
      (November 2002).
     It has always been recommended to prefer `%define api.value.type foo` to
      `#define YYSTYPE foo`.  The latter is supported in C for compatibility
      with Yacc, but not in C++.  Warnings are now issued if `#define YYSTYPE`
      is used in C++, and eventually support will be removed.
     In C++ code, prefer value_type to semantic_type to denote the semantic
      value type, which is specified by the `api.value.type` %define variable.
    ** New features
    *** A skeleton for the D programming language
     The "lalr1.d" skeleton is now officially part of Bison.
     It was originally contributed by Oliver Mangold, based on Paolo Bonzini's
      lalr1.java, and was improved by H. S. Teoh.  Adela Vais then took over
      maintenance and invested a lot of efforts to complete, test and document
      it.
     It now supports all the bells and whistles of the other deterministic
      parsers, which include: pull/push interfaces, verbose and custom error
      messages, lookahead correction, token constructors, internationalization,
      locations, printers, token and symbol prefixes, etc.
     Two examples demonstrate the D parsers: a basic one (examples/d/simple),
      and an advanced one (examples/d/calc).
    *** Option -H, --header and directive %header
     The option `-H`/`--header` supersedes the option `--defines`, and the
      directive %header supersedes %defines.  Both `--defines` and `%defines`
      are, of course, maintained for backward compatibility.
    *** Option --html
     Since version 2.4 Bison can be used to generate HTML reports.  However it
      was a two-step process: first bison must be invoked with option `--xml`,
      and then xsltproc must be run to the convert the XML reports into HTML.
     The new option `--html` combines these steps.  The xsltproc program must
      be available.
    *** A C++ native GLR parser
     A new version of the C++ GLR parser was added: "glr2.cc".  It generates
      "true C++11", instead of a C++ wrapper around a C parser as does the
      existing "glr.cc" parser.  As a first significant consequence, it supports
      `%define api.value.type variant`, contrary to glr.cc.
     It should be upward compatible in terms of interface, feature and
      performance to "glr.cc". To try it out, simply use
      %skeleton "glr2.cc"
     It will eventually replace "glr.cc".  However we need user feedback on
      this skeleton.  _Please_ report your results and comments about it.
    *** Counterexamples
     Counterexamples now show the rule numbers, and always show ε for rules
      with an empty right-hand side.  For instance
        exp
        ↳ 1: e1       e2     "a"
             ↳ 3: ε • ↳ 1: ε
      instead of
        exp
        ↳ e1  e2  "a"
          ↳ • ↳ ε
    *** Lookahead correction in Java
     The Java skeleton (lalr1.java) now supports LAC, via the `parse.lac`
      %define variable.
    *** Abort parsing for memory exhaustion (C)
     User actions may now use `YYNOMEM` (similar to `YYACCEPT` and `YYABORT`)
      to abort the current parse with memory exhaustion.
    *** Printing locations in debug traces (C)
     The `YYLOCATION_PRINT(File, Loc)` macro prints a location.  It is defined
      when (i) locations are enabled, (ii) the default type for locations is
      used, (iii) debug traces are enabled, and (iv) `YYLOCATION_PRINT` is not
      already defined.
     Users may define `YYLOCATION_PRINT` to cover other cases.
    *** GLR traces
     There were no debug traces for deferred calls to user actions.  They are
      logged now.
   Noteworthy changes in release 3.7.6 (2021-03-08) [stable]
    ** Bug fixes
    *** Reused Push Parsers
     When a push-parser state structure is used for multiple parses, it was
      possible for some state to leak from one run into the following one.
    *** Fix Table Generation
     In some very rare conditions, when there are many useless tokens, it was
      possible to generate incorrect parsers.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:09:47 +00:00
Michael Tremer
eab7754d1e suricata: Drop extra rootfiles
These are all the same and not different from what is in
config/rootfiles/common/suricata.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:07:29 +00:00
Michael Tremer
112441db22 rust: Drop Cargo home directory after build
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:06:55 +00:00
Michael Tremer
30f411694c suricata: Include all default rules
These rules do not drop anything, but only alert when internal parts of
the engine trigger an event. This will allow us more insight on what is
happening.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:06:14 +00:00
Adolf Belka
d3a4c2fc50 jansson: Update to version 2.14
- Update from 2.12 to 2.14
- Update rootfile
- Changelog
   Version 2.14 Released 2021-09-09
    * New Features:
      - Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
        corresponding `nocheck` functions. (#520, by Maxim Zhukov)
    * Fixes:
      - Handle `sprintf` corner cases (#537, by Tobias Stoeckmann)
    * Build:
      - Symbol versioning for all exported symbols (#540, by Simon McVittie)
      - Fix compiler warnings (#555, by Kelvin Lee)
    * Documentation:
      - Small fixes (#544, #546, by @i-ky)
      - Sphinx 3 compatibility (#543, by Pierce Lopez)
   Version 2.13.1 Released 2020-05-07
    * Build:
      - Include `jansson_version_str()` and `jansson_version_cmp()` in
        shared library. (#534)
      - Include ``scripts/`` in tarball. (#535)
   Version 2.13 Released 2020-05-05
    * New Features:
      - Add `jansson_version_str()` and `jansson_version_cmp()` for runtime
        version checking (#465).
      - Add `json_object_update_new()`, `json_object_update_existing_new()`
        and `json_object_update_missing_new()` functions (#499).
      - Add `json_object_update_recursive()` (#505).
    * Build:
      - Add ``-Wno-format-truncation`` to suppress format truncation warnings (#489).
    * Bug fixes:
      - Remove ``strtod`` macro definition for MinGW (#498).
      - Add infinite loop check in `json_deep_copy()` (#490).
      - Add ``pipe`` macro definition for MinGW (#500).
      - Enhance ``JANSSON_ATTRS`` macro to support earlier C standard(C89) (#501).
      - Update version detection for sphinx-build (#502).
    * Documentation:
      - Fix typos (#483, #494).
      - Document that call the custom free function to free the return value
        of `json_dumps()` if you have a custom malloc/free (#490).
      - Add vcpkg installation instructions (#496).
      - Document that non-blocking file descriptor is not supported on
        `json_loadfd()` (#503).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:05:10 +00:00
Arne Fitzenreiter
171c860f0f Merge remote-tracking branch 'arne_f/kernel-5.15' into next 2021-11-23 18:05:41 +00:00
Arne Fitzenreiter
6f6d66105a kernel: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-21 19:31:49 +01:00
Arne Fitzenreiter
521e8aa99d kernel: aarch64 enable ath5k wlan driver
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-20 23:38:06 +00:00
Adolf Belka
0ad924b1c1 libffi: Update to version 3.4.2
- Update from 3.3 to 3.4.2
- Update rootfile - No dependency issues due to so bump
- Changelog
   3.4.2 Jun-28-21
     Add static trampoline support for Linux on x86_64 and ARM64.
     Add support for Alibaba's CSKY architecture.
     Add support for Kalray's KVX architecture.
     Add support for Intel Control-flow Enforcement Technology (CET).
     Add support for ARM Pointer Authentication (PA).
     Fix 32-bit PPC regression.
     Fix MIPS soft-float problem.
     Enable tmpdir override with the $LIBFFI_TMPDIR environment variable.
     Enable compatibility with MSVC runtime stack checking.
     Reject float and small integer argument in ffi_prep_cif_var().
       Callers must promote these types themselves.
   3.3 Nov-23-19
     Add RISC-V support.
     New API in support of GO closures.
     Add IEEE754 binary128 long double support for 64-bit Power
     Default to Microsoft's 64-bit long double ABI with Visual C++.
     GNU compiler uses 80 bits (128 in memory) FFI_GNUW64 ABI.
     Add Windows on ARM64 (WOA) support.
     Add Windows 32-bit ARM support.
     Raw java (gcj) API deprecated.
     Add pre-built PDF documentation to source distribution.
     Many new test cases and bug fixes.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-19 07:16:19 +01:00
Adolf Belka
cf910913ab gawk: Update to version 5.1.1
- Update from 5.1.0 to 5.1.1
- Update rootfile
- Changelog is quite long and detailed so the following are the high level descriptions
   of the changes from the NEWS file in the source tarball. More details can be found in
   the ChangeLog file in the source tarball.
    Changes from 5.1.0 to 5.1.1
     1. Infrastructure upgrades: Bison 3.8, Gettext 0.20.2, Automake 1.16.4,
        and (will wonders never cease) Autoconf 2.71.
     2. asort and asorti now allow FUNCTAB and SYMTAB as the first argument if a
        second destination array is supplied. Similarly, using either array as
        the second argument is now a fatal error. Additionally, using either
        array as the destination for split(), match(), etc. also causes a
        fatal error.
     3. The new -I/--trace option prints a trace of the byte codes as they
        are executed.
     4. A number of subtle bugs relating to MPFR mode that caused differences
        between regular operation and MPFR mode have been fixed.
     5. The API now handles MPFR/GMP values slightly differently, requiring
        different memory management for those values. See the manual for the
        details if you have an extension using those values.  As a result,
        the minor version was incremented.
     6. $0 and the fields are now cleared before starting a BEGINFILE rule.
     7. The duplication of m4 and build-aux directories between the main
        directory and the extension directory has been removed. This
        simplifies the distribution.
     8. The test suite has been improved, making it easier to run the entire
        suite with -M. Use `GAWK_TEST_ARGS=-M make check' to do so.
     9. Profiling and pretty-printing output has been modified slightly so
        that functions are presented in a reasonable order with respect
        to the namespaces that contain them.
     10. Several example programs in the manual have been updated to their
         modern POSIX equivalents.
     11. A number of examples in doc/gawkinet.texi have been updated for
         current times. Thanks to Juergen Kahrs for the work.
     12. Handling of Infinity and NaN values has been improved.
     13. There has been a general tightening up of the use of const and
         of types.
     14. The "no effect" lint warnings have been fixed up and now behave
         more sanely.
     15. The manual has been updated with much more information about what is
         and is not a bug, and the changes in the gawk mailing lists.
     16. The behavior of strongly-typed regexp constants when passed as the
         third argument to sub() or gsub() has been clarified in the code and
         in the manual.
     17. Similar to item #4 above, division by zero is now fatal in MPFR
         mode, as it is in regular mode.
     18. There have been numerous minor code cleanups and bug fixes. See the
         ChangeLog for details.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-19 07:16:02 +01:00
Adolf Belka
f97e922c51 openvpn: Update to version 2.5.4
- Update from 2.5.0 to 2.5.4
- Update rootfile
- Tested new version in vm testbed. Openvpn server successfully started.
   Client connections working with 2.5.0 also successfully worked with 2.5.4
- Changelog
   Overview of changes in 2.5.4
    Bugfixes
     - fix prompting for password on windows console if stderr redirection
       is in use - this breaks 2.5.x on Win11/ARM, and might also break
       on Win11/adm64 when released.
     - fix setting MAC address on TAP adapters (--lladdr) to use sitnl
       (was overlooked, and still used "ifconfig" calls)
     - various improvements for man page building (rst2man/rst2html etc)
     - minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
       at least one platform strictly checking this)
     - fix minor memory leak under certain conditions in add_route() and
       add_route_ipv6()
    User-visible Changes
     - documentation improvements
     - copyright updates where needed
     - better error reporting when win32 console access fails
    New features
     - also build man page on Windows builds
   Overview of changes in 2.5.3
    Bugfixes
     - CVE-2121-3606
       see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
       OpenVPN windows builds could possibly load OpenSSL Config files from
       world writeable locations, thus posing a security risk to OpenVPN.
       As a fix, disable OpenSSL config loading completely on Windows.
     - disable connect-retry backoff for p2p (--secret) instances
       (Trac #1010, #1384)
     - fix build with mbedtls w/o SSL renegotiation support
     - Fix SIGSEGV (NULL deref) receiving push "echo" (Trac #1409)
     - MSI installers: properly schedule reboot in the end of installation
     - fix small memory leak in free_key_ctx for auth_token
    User-visible Changes
     - update copyright messages in files and --version output
    New features
     - add --auth-token-user option (for --auth-token deployments without
       --auth-user-pass in client config)
     - improve MSVC building for Windows
     - official MSI installers will now contain arm64 drivers and binaries
       (x86, amd64, arm64)
   Overview of changes in 2.5.2
    Bugfixes
     - CVE-2020-15078
       see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
       This bug allows - under very specific circumstances - to trick a
       server using delayed authentication (plugin or management) into
       returning a PUSH_REPLY before the AUTH_FAILED message, which can
       possibly be used to gather information about a VPN setup.
       In combination with "--auth-gen-token" or an user-specific token auth
       solution it can be possible to get access to a VPN with an
       otherwise-invalid account.
     - restore pushed "ping" settings correctly on a SIGUSR1 restart
     - avoid generating unecessary mbed debug messages - this is actually
       a workaround for an mbedTLS 2.25 bug when using Curve25519 and Curve448
       ED curves - mbedTLS crashes on preparing debug infos that we do not
       actually need unless running with "--verb 8"
     - do not print inlined (<dh>...</dh>) Diffie Hellman parameters to log file
     - fix Linux/SITNL default route lookup in case of multiple routing tables
       with more than one default route present (always use "main table" for now)
     - Fix CRL file handling in combination with chroot
    User-visible Changes
     - OpenVPN will now refuse to start if CRL file is not present at startup
       time.  At "reload time" absense of the CRL file is still OK (and the
       in memory copy is used) but at startup it is now considered an error.
    New features
     - printing of the TLS ciphers negotiated has been extended, especially
       displaying TLS 1.3 and EC certificates more correctly.
   Overview of changes in 2.5.1
    New features
     - "echo msg" support, to enable the server to pushed messages that are
       then displayed by the client-side GUI.  See doc/gui-notes.txt and
       doc/management-notes.txt.
       Supported by the Windows GUI shipped in 2.5.1, not yet supported by
       Tunnelblick and the Android GUI.
    User-visible Changes
     - make OPENVPN_PLUGIN_ENABLE_PF plugin failures FATAL - if a plugin offers
       to set the "openvpn packet filter", and returns a failure when requested
       to, OpenVPN 2.5.0 would crash trying to clean up not-yet-initialized
       structure members.  Since PF is going away in 2.6.0, this is just turning
       the crash into a well-defined program abort, and no further effort has
       been spent in rewriting the PF plugin error handling (see trac #1377).
    Documentation
     - rework sample-plugins/defer/simple.c - this is an extensive rewrite
       of the plugin to bring code quality to acceptable standards and add
       documentation on the various plugin API aspects.  Since it's just
       example code, filed under "Documentation", not under "Bugfix".
     - various man page improvements.
     - clarify ``--block-ipv6`` intent and direction
    Bugfixes
     - fix installation of openvpn.8 manpage on systems without docutils.
     - Windows: fix DNS search list setup for domains with "-" chars.
     - Fix tls-auth mismatch OCC message when tls-cryptv2 is used.
     - Windows: Skip DHCP renew with Wintun adapter (Wintun does not support
       DHCP, so this was just causing an - harmless - error and needless delay).
     - Windows: Remove 1 second delay before running netsh - speeds up
       interface init for wintun setups not using the interactive service.
     - Windows: Fix too early argv freeing when registering DNS - this would
       cause a client side crash on Windows if ``register-dns`` is used,
       and the interactive service is not used.
     - Android: Zero initialise msghdr prior to calling sendmesg.
     - Fix line number reporting on config file errors after <inline> segments
       (see Trac #1325).
     - Fix port-share option with TLS-Crypt v2.
     - tls-crypt-v2: also preload tls-crypt-v2 keys (if --persist-key), otherwise
       dropping privs on the server would fail.
     - tls-crypt-v2: fix server memory leak (about 600 bytes per connecting
       client with tls-crypt-v2)
     - rework handling of server-pushed ``--auth-token`` in combination with
       ``--auth-nocache`` on reconnection / TLS renegotiation events.  This
       used to "forget" to update new incoming token after a reconnection event
       (leading to failure to reauth some time later) and now works in all
       tested cases.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-19 07:11:50 +01:00
Matthias Fischer
e8c75ca765 knot: Update to 3.1.1
For changes since 3.0.7, see:
https://gitlab.nic.cz/knot/knot-dns/raw/v3.1.1/NEWS

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-19 07:07:18 +01:00
Matthias Fischer
59bf369edc unbound: Update to 1.13.2
For details see:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-13-2

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-19 07:06:43 +01:00
Peter Müller
06fe9baec7 Coreutils: update to 9.0
Please refer to https://lists.gnu.org/archive/html/coreutils/2021-09/msg00113.html
for this version's release announcement.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-19 07:03:31 +01:00
Arne Fitzenreiter
67ad8f7ed0 util-linux: aarch64 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-12 06:03:41 +00:00
Arne Fitzenreiter
c460b2652d kernel: aarch64 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-11 18:18:49 +00:00
Arne Fitzenreiter
4290323c4d util-linux: armv6 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-10 07:04:23 +00:00
Arne Fitzenreiter
dc48869767 kernel: armv6 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-10 07:03:38 +00:00
Arne Fitzenreiter
24ff52a2e4 kernel: i586 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-06 10:01:32 +01:00
Arne Fitzenreiter
d6f982720f util-linux: rootfile update i586
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-06 08:00:58 +01:00
Arne Fitzenreiter
c0cb2605d7 kernel: x86_64 rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-05 18:03:02 +01:00
Arne Fitzenreiter
21d858c2bf xtables-addons: fix rootfile 2021-11-05 17:18:10 +01:00
Arne Fitzenreiter
eab6edf094 util-linux: rootfile update
with kernel headers 5.15 sbin/raw will not built.

todo check if we need this...

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-04 21:51:03 +01:00
Arne Fitzenreiter
d17ae41d7e xtables-addons: update to 3.18
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-04 21:44:23 +01:00
Arne Fitzenreiter
967e2973b4 kernel: armv6l rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-29 10:03:40 +02:00
Arne Fitzenreiter
66bc17dcc1 iproute2: build after iptables to get ipt filters for tc
to proper filter IPSec im QoS without using mark or connmark i need ipt filters
for tc which are only build if iptables are build prior iproute2.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-24 17:06:34 +02:00
Adolf Belka
05b6dd44be iproute2: Update version to 5.14.0
- Update from 5.13.0 to 5.14.0
- Update rootfile
- Changelog
   Alexander Mikhalitsyn (2):
      ip route: ignore ENOENT during save if RT_TABLE_MAIN is being dumped
      libnetlink: check error handler is present before a call
   Andrea Claudi (9):
      tc: q_ets: drop dead code from argument parsing
      lib: bpf_legacy: avoid to pass invalid argument to close()
      dcb: fix return value on dcb_cmd_app_show
      dcb: fix memory leak
      tipc: bail out if algname is abnormally long
      tipc: bail out if key is abnormally long
      tc: htb: improve burst error messages
      lib: bpf_legacy: fix potential NULL-pointer dereference
      lib: bpf_glue: remove useless assignment
   Ariel Levkovich (2):
      tc: f_flower: Add option to match on related ct state
      tc: f_flower: Add missing ct_state flags to usage description
   Asbjørn Sloth Tønnesen (2):
      tc: pedit: parse_cmd: add flags argument
      tc: pedit: add decrement operation
   Christian Schürmann (1):
      man8/ip-tunnel.8: fix typo, 'encaplim' is not a valid option
   David Ahern (6):
      Update kernel headers
      Update kernel headers
      config.mk: Rerun configure when it is newer than config.mk
      Update kernel headers
      Update kernel headers
      Import wwan.h uapi file
   Dmytro Linkin (3):
      devlink: Add helper function to validate object handler
      devlink: Add port func rate support
      devlink: Add ISO/IEC switch
   Eric Dumazet (1):
      tc: fq: add horizon attributes
   Feng Zhou (1):
      lib/bpf: Fix btf_load error lead to enable debug log
   Gal Pressman (2):
      rdma: update uapi headers
      rdma: Add copy-on-fork to get sys command
   Gokul Sivakumar (3):
      bridge: reorder cmd line arg parsing to let "-c" detected as "color" option
      bridge: fdb: don't colorize the "dev" & "dst" keywords in "bridge -c fdb"
      man: bridge: fix the typo to change "-c[lor]" into "-c[olor]" in man page
   Guillaume Nault (1):
      utils: bump max args number to 512 for batch files
   Hangbin Liu (3):
      configure: add options ability
      configure: convert LIBBPF environment variables to command-line options
      ip/bond: add arp_validate filter support
   Heiko Thiery (1):
      lib/fs: fix issue when {name,open}_to_handle_at() is not implemented
   Hoang Le (1):
      tipc: call a sub-routine in separate socket
   Jacob Keller (1):
      devlink: fix infinite loop on flash update for drivers without status
   Jakub Kicinski (3):
      ip: align the name of the 'nohandler' stat
      ip: dynamically size columns when printing stats
      ss: fix fallback to procfs for raw sockets
   Jethro Beekman (1):
      ip: Add nodst option to macvlan type source
   Jianguo Wu (1):
      mptcp: make sure flag signal is set when add addr with port
   Lahav Schlesinger (1):
      ipmonitor: Fix recvmsg with ancillary data
   Martynas Pumputis (1):
      libbpf: fix attach of prog with multiple sections
   Neta Ostrovsky (3):
      rdma: Update uapi headers
      rdma: Add context resource tracking information
      rdma: Add SRQ resource tracking information
   Paolo Lungaroni (2):
      seg6: add counters support for SRv6 Behaviors
      seg6: add support for SRv6 End.DT46 Behavior
   Parav Pandit (2):
      devlink: Add optional controller user input
      devlink: Show port state values in man page and in the help command
   Peilin Ye (1):
      tc/skbmod: Remove misinformation about the swap action
   Phil Sutter (1):
      tc: u32: Fix key folding in sample option
   Roi Dayan (2):
      police: Add support for json output
      police: Fix normal output back to what it was
   Sergey Ryazanov (2):
      iplink: add support for parent device
      iplink: support for WWAN devices
   Stephen Hemminger (6):
      lib: remove blank line at eof
      uapi: update kernel headers from 5.14-rc1
      libnetlink: cosmetic changes
      uapi: headers update
      uapi: update neighbour.h
      v5.14.0
   Tyson Moore (1):
      tc-cake: update docs to include LE diffserv

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-24 12:11:08 +00:00
Adolf Belka
6cdc5164ff ExtUtils-PkgConfig: Build of this required for latest version of perl-GD
- ExtUtils-PkgConfig is required when building perl-GD
- lfs and rootfile created
- All rootfile entries commented out as only required for building of perl-GD
- added to make.sh file just before perl-GD

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:04:09 +00:00
Adolf Belka
0aca0b419f perl-GD: Update to version 2.73
- Update from 2.35 (2006) to 2.73 (2020)
- Update of rootfile
- Updated version of perl-GD required ExtUtils-PkgConfig for build. Seperate patch
   to build that is part of this series
- Changelog
   2.73    * allow --options override the libgd options. Not recommended.
             See GH #33 and RT #130045
   2.72    * fix CVE 2019-6977 colorMatch for older unpatched libgd versions.
             This is a severe security problem, an exploitable heap-overflow.
             See https://nvd.nist.gov/vuln/detail/CVE-2019-6977
   2.71    * skip Test::Fork on freebsd (GH #25)
   2.70    * fixes for hardened CCFLAGS with -Werror (RT #128167)
   2.69    * little spelling error, GH #29 Xavier Guimard
   2.68    * fix GD::Polygon->clear, RT #124463 Michael Cain
   2.67    * fix thread-safety for GD::Simple %COLORS (#26 melak)
           * fix arc start-angle docs, RT #123277 Andrew G Gray
           * improve setBrush docs, RT #123194 Andrew G Gray
           * improve StringFT docs, RT #123193
           * replace MacOSX by darwin, and not by Mac OS X/macOS as suggested
             in PR #24
           * add GD::Image->_file method as suggested in RT #60488 by Kevin Ryde,
             also the helper GD::supportsFileType
   2.66    * throw proper error on newFrom* with not-existing file
           * add t/transp.t from RT #40525
           * Improve RT #54366 multiple gd.h warning
           * better doc for GD::Simple->arc
           * fix ANIMGIF with libgd 2.3.0-dev
   2.65    * fix --gdlib_config_path to accept an argument (fperrad)
   2.64    * Update doc for LIBGD_VERSION()
           * Fix 5.6.2, which does not have float in its typemap
   2.63    * renamed VERSION() to LIBGD_VERSION(), RT #121307.
             It was treated magically by "use GD 2.18"
   2.62    * fixed wrong <5.14 code generated with ExtUtils::Constants
             RT #121297. Don't generate const-xs.inc, only when missing.
           * add -liconv on hpux also (our pkgconfig parser cannot handle it)
   2.61    * add CONFIGURE_REQUIRES META
           * add --gdlib_config_path
           * add Image Filters: scatter, pixelate, negate, grayscale, brightness,
             contrast, color, selectiveBlur, edgeDetectQuick, gaussianBlur, emboss,
             meanRemoval, smooth, copyGaussianBlurred
           * add palette methods: createPaletteFromTrueColor,
             neuQuant (but discouraged), colorMatch.
           * add interpolation methods: copyScale, copyRotateInterpolated,
             interpolationMethod.
           * add double GD::VERSION
           * add all gd.h constants
   2.60    * add missing methods newFromWBMP, newFromXbm,
             (RT #68784) and some missing docs
           * Add --lib_fontconfig_path, --fcgi options
           * rewrote most of the XS code
           * cleanup Makefile.PL #20
   2.59    * error on failing libgd calls
           * fix colorClosestAlpha, colorAllocateAlpha
           * add missing documentation
   2.58    * fix VERSION_STRING for 2.0.x
           * honor --lib_gd_path specific gdlib-config
           * Loosen the comparison tests with GDIMAGETYPE ne gd2
           * Improve gdlib-config parsing (PR #17), esp. with 2.0.34
   2.57    * fix Jpeg magic number detection RT #26146
           * fix RGB - HSV roundtrips: RT #120572 by J2N-FORGET
           * fix -print-search-dirs errors RT #106265
           * co-maint to rurban
           * add hv_fetchs, CI smokers
           * add GD::VERSION_STRING api
   2.56_03 * add alpha method
           * improve option handling
           * fix meta data
   2.56_02 * fix feature extraction >= 2.2 [RT #119459]
   2.56_01 * rm Build.PL, fix permissions, fix for missing gdlib-config
   2.56    * Fix Makefile.PL so that it works again.
   2.55    * Great simplification of regression framework ought to fix make test problems.
           * Replace ExtUtils::MakeMaker script with Module::Build system
	     (just in time for Module::Build to be deprecated).
	   * Remove archaic qd.pl (for creating QuickDraw picts) from distribution.
   2.54	   Patch from yurly@unet.net to fix image corruption in rotate180 when image height is odd.
   2.53	   Points to Gabor Szabo's GD::Simple tutorial, and fix link to repository.
   2.52    Fix regression tests to run on Ubuntu 12.04 64bit.
   2.51	   Fix misleading warning message about location of gd.h file.
   2.50	   Fix gdUseFontConfig so that it can be called as a class method.
   2.49    Add GitHub information to README.
   2.48    Fix compile crash on windows and strawberry (https://rt.cpan.org/Public/Bug/Display.html?id=67990).
   2.47	   Fix compilation on older perl's without the Newxz macros.
   2.46    Added a basic "use" test for GD::Simple
   2.45	   Clarified the GD license. There is now a formal LICENSE file in the package.
   2.44    GD::Group now installed properly.
	   Quenched compiler warning caused by Newxs() calls.
   2.43    Added "transparent" color to GD::Simple.
	   Fixed Makefile so that GD/Image.pm depends both on GD/Image.pm.PLS and .config.cache
   2.42	   Fixed magic number detection to autodetect certain missed jpeg files (thanks to Mike Walker)
   2.41    Added backend support for grouping features in GD::SVG module.
   2.40    ** Do not use - contains a bug **
   2.39	   Makefile.PL will refuse to run if the proper version of libgd is unavailable.
   2.38	   Fixed bizarre warning about /usr/include/gd.h != /usr/include/gd.h.
   2.37	   GD/Image.pm did not bring in croak() properly, meaning that incorrect error messages are printed out when any of the newFromXXX() calls are made.
   2.36	   Instructions on using gdAntiAliased with palette images.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:02:56 +00:00
Adolf Belka
5f71d0a6bf gd: Update to version 2.3.3
- Update from 2.0.33 (2006) to 2.3.3 (Sep 2021)
- Updating gd requires GD-Graph and perl-GD to be updated otherwise the png graphs
   didn't work so all required changes are part of this patch series
- Update rootfile
- Dependencies checked from library so bump. Nothing found.
- Changelog is too large to include here.
   For full details see https://github.com/libgd/libgd/releases

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:02:22 +00:00
Peter Müller
aa45d923eb Revert "Revert "ppp: update to 2.4.9""
This reverts commit 2d6e633d7f.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 10:54:07 +00:00
Adolf Belka
1c71ff6b2c logwatch: mdadm status missing - Fix for Bug 12080
- Addition of mdadm module to logwatch
- Addition of logwatch to sudoers list to run mdadm commands
- patch to change logwatch mdadm.conf to allow scan for raid drives, change mdadm script
   to run mdadm scan commands with sudo, allow clean but degraded drives to be listed
   in the output.

Fixes: 12080
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 10:43:11 +00:00
Adolf Belka
574690dc00 exfatprogs: Provide package to work with exfat formats
- Create lfs and rootfile
- Add exfatprogs to make.sh
- exfat is supported as a native kernel module since kernel 5.7
- This package requires CONFIG_EXFAT_FS=m to be set for the kernel module for each
   architecture that will be supported. Currently that is only i586

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 10:14:51 +00:00
Adolf Belka
923cf5358c dosfstools: Update to version 4.2
- Update from 3.0.9 (2013) to 4.2 (2021)
- Update rootfile
- Program names changed in version 2.0.18
    dosfslabel became fatlabel
    dosfsck became fsck.fat
    and mkdosfs became mkfs.fat
- Added --enable-compat-symlinks to ./configure command to maintain original names as
   symlinks

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 09:59:20 +00:00
Arne Fitzenreiter
c8bb619a71 core161: remove python2 module from collectd
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-13 16:36:59 +00:00
Arne Fitzenreiter
97ac4778bb core161: now use 2to3 of python3
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-13 16:33:43 +00:00
Adolf Belka
d5bb33744a python: removal of python2 from IPFire
- Final patch for removal of python2 from IPFire. This can be implemented in an
   appropriate Core Update after all other python2 related patches have been implemented
   and confirmed working.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-13 12:28:12 +00:00
Peter Müller
2b59141553 squid-asnbl: New package
This package adds an ASNBL helper for detecting Fast Flux setups and
selectively announced networks (i. e. FQDNs resolving to IP addresses
not being announced by an Autonomous System) to the distribution.
Afterwards, the helper script is located at /usr/bin/asnbl-helper.py .

The second version of this patch updates squid-asnbl to upstream version
0.2.2, improving logging in case of detected Fast Flux setups.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-13 12:13:04 +00:00