The Captive Portal should not be framed or leak sensitive detail via
Referrers either.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
These cause caching trouble and pose a potential security risk due to
exposing inode numbers of files within the Apache site directories on an
IPFire machine.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- id3tag.pc pkgconfig file required for mpd-0.22.6 to find libid3tag
library files
- Update of rootfile
- update lfs to install id3tag.pc file to /usr/lib/pkgconfig directory
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 1.6.18 to 1.14.5
- Update required for successfgul build of mpd-0.22.6
- Update of rootfile
- Changelog is too large to include here
Full details can be found in the ChangeLog file in the source tarball
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 0.19.19 to 0.22.6
- Update rootfile
- Required update of libupnp
- Autotools no longer available
Build changed to meson
Meson build required addition of pkgconfig file for libid3tag
- Changelog is too large to include here.
Full details can be found in the NEWS file in the source tarball
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This is the first ppp release for years, and the project appears to have
a different maintainer (team?) by now. As a result, some of our patches
are no longer necessary as they made it into upstream, while others need
to be adjusted slightly.
In addition, their configure script does not handle commas in CFLAGS
properly, which is why the delimiter for the 'sed' call in it has to be
changed to something neither appearing in a path nor in our CLFAGS set.
The full changelog of this release can be retrieved from
https://ppp.samba.org/README.html and says:
* Support for new EAP (Extensible Authentication Protocol) methods:
- Support for EAP-TLS, from Jan Just Keijser and others
- Support for EAP-MSCHAPv2, from Eivind Næss, Thomas Omerzu, Tijs
Van Buggenhout and others
* New pppd options:
- chap-timeout
- chapms-strip-domain
- replacedefaultroute
- noreplacedefaultroute
- ipv6cp-accept-remote
- lcp-echo-adaptive
- ip-up-script
- ip-down-script
- ca
- capath
- cert
- key
- crl-dir
- crl
- max-tls-version
- need-peer-eap
* Fixes for CVE-2020-8597 and CVE-2015-3310.
* libpcap is now required when compiling on Linux (previously, if
libpcap was not present, pppd would be compiled without packet
filtering support).
* The rp-pppoe plugin has been renamed to pppoe, to distinguish it
from the upstream rp-pppoe code. Its options have changed names,
but the old names are kept as aliases.
* The configure script now supports cross-compilation.
* Many bug fixes and cleanups.
Thanks to Michael for his hint on the ./configure CFLAGS issue.
The second version of this patch correctly updates the
src/patches/ppp/0013-everywhere-O_CLOEXEC-harder.patch patch for the
second hunk in pppd/main.c, where socket permissions have been changed
meanwhile.
Further, it has been successfully tested against a VDSL 100 line in
Germany, using PAP to Easybell via 1&1 L2 BSA. No connectivity issues or
other anomalies have been observed so far.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 0.4.9 to 0.4.10
- Update rootfile
- There is no Changelog file in the source tarball
The poppler website has no release info on poppler-data only poppler
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 0.89.0 to 21.04.0
From Aug 2020 file version naming changed to YY.MM.x
Update issued every month since then
- Update rootfile
- Changelog is too large to include here
Full content can be reviewed in ChangeLog file in source tarball
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 5.0 with patch 18 to 5.1 wih patch 4
- Remove old bash50 patches
- Update rootfiles
- Add new bash51 patches
- Installed updated version in a vm testbed system
All bash commands that were run, executed correctly
Script created to redirect output to a file and ran correctly
- Changelog
1. New Features in bash-5.1 since release of bash-5.0
a. `bind -x' now supports different bindings for different editing modes and
keymaps.
b. Bash attempts to optimize the number of times it forks when executing
commands in subshells and from `bash -c'.
c. Here documents and here strings now use pipes for the expanded document if
it's smaller than the pipe buffer size, reverting to temporary files if it's
larger.
d. There are new loadable builtins: mktemp, accept, mkfifo, csv, cut/lcut
e. In posix mode, `trap -p' now displays signals whose disposition is SIG_DFL
and those that were SIG_IGN when the shell starts.
f. The shell now expands the history number (e.g., in PS1) even if it is not
currently saving commands to the history list.
g. `read -e' may now be used with arbitrary file descriptors (`read -u N').
h. The `select' builtin now runs traps if its internal call to the read builtin
is interrupted by a signal.
i. SRANDOM: a new variable that expands to a 32-bit random number that is not
produced by an LCRNG, and uses getrandom/getentropy, falling back to
/dev/urandom or arc4random if available. There is a fallback generator if
none of these are available.
j. shell-transpose-words: a new bindable readline command that uses the same
definition of word as shell-forward-word, etc.
k. The shell now adds default bindings for shell-forward-word,
shell-backward-word, shell-transpose-words, and shell-kill-word.
l. Bash now allows ARGV0 appearing in the initial shell environment to set $0.
m. If `unset' is executed without option arguments, bash tries to unset a shell
function if a name argument cannot be a shell variable name because it's not
an identifier.
n. The `test -N' operator uses nanosecond timestamp granularity if it's
available.
o. Bash posix mode now treats assignment statements preceding shell function
definitions the same as in its default mode, since POSIX has changed and
no longer requires those assignments to persist after the function returns
(POSIX interp 654).
p. BASH_REMATCH is no longer readonly.
q. wait: has a new -p VARNAME option, which stores the PID returned by `wait -n'
or `wait' without arguments.
r. Sorting the results of pathname expansion now uses byte-by-byte comparisons
if two strings collate equally to impose a total order; the result of a
POSIX interpretation.
s. Bash now allows SIGINT trap handlers to execute recursively.
t. Bash now saves and restores state around setting and unsetting posix mode,
instead of having unsetting posix mode set a known state.
u. Process substitution is now available in posix mode.
v. READLINE_MARK: a new variable available while executing commands bound with
`bind -x', contains the value of the mark.
w. Bash removes SIGCHLD from the set of blocked signals if it's blocked at shell
startup.
x. `test -v N' can now test whether or not positional parameter N is set.
y. `local' now honors the `-p' option to display all local variables at the
current context.
z. The `@a' variable transformation now prints attributes for unset array
variables.
aa. The `@A' variable transformation now prints a declare command that sets a
variable's attributes if the variable has attributes but is unset.
bb. `declare' and `local' now have a -I option that inherits attributes and
value from a variable with the same name at a previous scope.
cc. When run from a -c command, `jobs' now reports the status of completed jobs.
dd. New `U', `u', and `L' parameter transformations to convert to uppercase,
convert first character to uppercase, and convert to lowercase,
respectively.
ee. PROMPT_COMMAND: can now be an array variable, each element of which can
contain a command to be executed like a string PROMPT_COMMAND variable.
ff. `ulimit' has a -R option to report and set the RLIMIT_RTTIME resource.
gg. Associative arrays may be assigned using a list of key-value pairs within
a compound assignment. Compound assignments where the words are not of
the form [key]=value are assumed to be key-value assignments. A missing or
empty key is an error; a missing value is treated as NULL. Assignments may
not mix the two forms.
hh. New `K' parameter transformation to display associative arrays as key-
value pairs.
ii. Writing history to syslog now handles messages longer than the syslog max
length by writing multiple messages with a sequence number.
jj. SECONDS and RANDOM may now be assigned using arithmetic expressions, since
they are nominally integer variables. LINENO is not an integer variable.
kk. Bash temporarily suppresses the verbose option when running the DEBUG trap
while running a command from the `fc' builtin.
ll. `wait -n' now accepts a list of job specifications as arguments and will
wait for the first one in the list to change state.
mm. The associative array implementation can now dynamically increase the
size of the hash table based on insertion patterns.
nn. HISTFILE is now readonly in a restricted shell.
oo. The bash malloc now returns memory that is 16-byte aligned on 64-bit
systems.
pp. If the hash builtin is listing hashed filenames portably, don't print
anything if the table is empty.
qq. GLOBIGNORE now ignores `.' and `..' as a terminal pathname component.
rr. Bash attempts to optimize away forks in the last command in a function body
under appropriate circumstances.
ss. The globbing code now uses fnmatch(3) to check collation elements (if
available) even in cases without multibyte characters.
tt. The `fg' and `bg' builtins now return an error in a command substitution
when asked to restart a job inherited from the parent shell.
uu. The shell now attempts to unlink all FIFOs on exit, whether a consuming
process has finished with them or not.
vv. There is a new contributed loadable builtin: asort.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- Updated from 8.0 with patch 1 to 8.1 with no patches
- Commented out the patch section in the lfs as no current patches
When patches are issued then the patch section can be uncommented
- Update rootfiles
- Remove old readline patches
- Changelog
New Features in readline-8.1 since the release of readline-8.0
a. If a second consecutive completion attempt produces matches where the first
did not, treat it as a new completion attempt and insert a match as
appropriate.
b. Bracketed paste mode works in more places: incremental search strings, vi
overstrike mode, character search, and reading numeric arguments.
c. Readline automatically switches to horizontal scrolling if the terminal has
only one line.
d. Unbinding all key sequences bound to a particular readline function now
descends into keymaps for multi-key sequences.
e. rl-clear-display: new bindable command that clears the screen and, if
possible, the scrollback buffer (bound to emacs mode M-C-l by default).
f. New active mark and face feature: when enabled, it will highlight the text
inserted by a bracketed paste (the `active region') and the text found by
incremental and non-incremental history searches. This is tied to bracketed
paste and can be disabled by turning off bracketed paste.
g. Readline sets the mark in several additional commands.
h. Bracketed paste mode is enabled by default. There is a configure-time
option (--enable-bracketed-paste-default) to set the default to on or off.
i. Readline tries to take advantage of the more regular structure of UTF-8
characters to identify the beginning and end of characters when moving
through the line buffer.
j. The bindable operate-and-get-next command (and its default bindings) are
now part of readline instead of a bash-specific addition.
k. The signal cleanup code now blocks SIGINT while processing after a SIGINT.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 2.1.2 to 2.1.3 - fix for bug #12602
Updated addon installed and fix confirmed
- Update rootfile
- Changelog
Address issue where a test server may return an HTTP error during upload or download
Address issue where ignore_ids may be empty or have empty values
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
The second version of this patch splits this up into different
architecture-specific sysctl config files, as i586 does not support BPF
JIT, hence the net.core.bpf_jit_harden does not exist on that
architecture.
Fixes: #12384
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This has been broken because of other changes on the network scripts and
since we now have support for bridges there is no point in supporting
something else that has the same functionality.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This patch changes that instead of only the wireless interface that is
used to run a wireless access point, all wireless interfaces will be set
to master mode.
This allows that attaching the interface won't fail if hostapd isn't
started, yet.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Since using random interface names is always trouble, we will order all
slave interfaces and number them in order as they appear in the SLAVES
variable.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This disables the theme support and makes it impossible to use any other
themes than the ipfire default theme.
The only intention of this patch is to hardcode the theme to ipfire.
To change any cgi we have is an ugly way, but the only way to do this
fast. The colour handling needs certainly to be improved as well, but
this will and should be done in other patches.
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 2.5 to 2.19
- Update rootfiles
- Autotools no longer available for build
Change from autools to meson/ninja
- Changelog
libmpdclient 2.19 (2020/07/03)
* fix off-by-one bug in MPD_HOST parser
* add function mpd_lookup_replay_gain_mode()
* identify messages with length over the buffer limit
* support MPD protocol 0.16
- replay gain
* support MPD protocol 0.19
- idle events "neighbor" and "mount"
* support MPD protocol 0.20
- rangeid
* support MPD protocol 0.21
- command "tagtypes all"
libmpdclient 2.18 (2020/01/20)
* more out-of-memory checks
* partition: add mpd_recv_partition()
* support MPD protocol 0.21
- "oneshot" single state
* support MPD protocol 0.22
- status: add mpd_status_get_partition()
- commands "delpartition", "moveoutput"
libmpdclient 2.17 (2019/12/04)
* search: add mpd_search_add_db_songs_to_playlist()
* idle: support event "partition"
* support MPD protocol 0.19
- "listneighbors"
* support MPD protocol 0.22
- "getfingerprint"
* support tags "MPD_TAG_LABEL", "MPD_TAG_MUSICBRAINZ_WORKID", "Grouping",
"Work", "Conductor"
* support MPD partitions
* mpd_async_set_keepalive() returns bool
* mpd_connection_set_keepalive() returns bool
* fix build failure on Haiku
libmpdclient 2.16 (2018/10/09)
* support MPD protocol 0.19
- "mount", "unmount", "listmounts"
* support MPD protocol 0.17
- "load" with range
* add mpd_output_get_attribute()
* use UINX_MAX instead of `(unsigned)-1` to avoid undefined behavior
libmpdclient 2.15 (2018/09/02)
* support MPD protocol 0.21
- search: support search expressions
- search: descending sort
- search: support sorting by "Last-Modified"
- song: audio format
* support MPD protocol 0.17
- player: command "seekcur"
* fix `-Wrestrict` compiler warning
libmpdclient 2.14 (2018/02/11)
* support MPD protocol 0.21
- command "outputset"
- mpd_output_get_plugin()
- receive output attributes
* MSVC compatibility
* improved local and abstract socket support
libmpdclient 2.13 (2017/07/25)
* fix build with meson > 0.38.1
* fix connect error "Operation now in progress"
libmpdclient 2.12 (2017/07/21)
* support MPD protocol 0.21
- support tag "OriginalDate"
- command "tagtypes" plus "disable", "enable", "clear"
* support MPD protocol 0.20
- support "plchanges" and "plchangesposid" with range
* support MPD protocol 0.19
- commands "addtagid", "cleartagid"
- command "listfiles"
- grouping for "list" and "count"
- tag "AlbumSort"
- "seekid" with float time
* use relative #include paths to avoid clashes with other libmpdclient copies
* build with Meson instead of autotools
libmpdclient 2.11 (2017/03/20)
* fix heap corruption with mpd_connection_new_async()
* add space before "window" search argument
* detect getaddrinfo() at configure time
* add support for ArtistSort and AlbumArtistSort tags
* support MPD protocol 0.21
- audio format specifications "dsd64" etc.
- the "sort" parameter for commands "find"/"search"
libmpdclient 2.10 (2015/02/23)
* support abstract sockets with "@" prefix
* support tag "MUSICBRAINZ_RELEASETRACKID"
* add TCP keepalive internal and external APIs
* support MPD protocol 0.19
- status: support sample formats "float" and "dsd"
- song: report duration with milliseconds precision
- search: support constraint "modified-since"
* support MPD protocol 0.20
- the "window" parameter for commands "find"/"search"
libmpdclient 2.9 (2013/10/29)
* directory: support attribute "Last-Modified"
* support MPD protocol 0.18
- command "readcomments"
- command "toggleoutput"
- command "volume"
- the "base" constraint for commands "find"/"search"
libmpdclient 2.8 (2013/04/09)
* song: support attribute "Prio"
* queue: fix the ranged "prio" command
* queue: support open ranges
libmpdclient 2.7 (2012/02/04)
* status: add nextsong/nextsongid support
libmpdclient 2.6 (2011/10/23)
* mpd/client.h: include message.h
* queue: support song priorities
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
- Update from 0.21 to 0.33
- Update rootfiles
- Required update in libmpdclient to 2.19
- Autotools build no longer available
Change build to meson and ninja
- Changelog
0.33 (2019/10/31)
* fix off-by-one bug in "prio" command
* reduce network transfer for "playlist", "ls", "listall"
0.32 (2019/06/11)
* add command "listneighbors"
* reduce network transfer for "search"
* fall back to "Composer" or "AlbumArtist" tag in the default format
* support abstract socket in --host option
0.31 (2018/10/24)
* add commands "queued", "seekthrough", "mount", "unmount"
* support "search" with filter expression (MPD 0.21)
* support "load" with range
* allow only tag names after "list"
* fix the Windows build (no strndup())
* make documentation build optional with -Ddocumentation={true|false|auto}
* build: require Meson 0.47
0.30 (2018/05/03)
* add command "rescan"
* seek: use the "seekcur" command instead of "seekid"
* require MPD 0.19
0.29 (2018/02/11)
* implement %prio% for --format
* the default --format falls back to "performer" if there is no "artist"
* add command "prio"
* command "outputs" prints attributes
* fix build failure with gcc 7.0 and clang 4.0
* build with Meson instead of autotools
0.28 (2016/08/18)
* let "listall" print songs only
* "searchplay" supports tags
* add command "pause-if-playing"
* format: add escape character to escape sequences
* use environment variable "MPC_FORMAT"
* require libmpdclient 2.9 or newer
0.27 (2015/05/30)
* fix --enable-debug and --enable-werror
* add unit tests
* new command: "searchplay" searches and plays songs from the current playlist
* fix use-after-free bug
* new command: "searchadd" works like findadd with non-exact matching
* improved error handling
* show directories in command "tab"
* bash completion: escape '&'
* add %mtime% and %mdate% to --format
* recognize command by unambiguous prefix
* "insert" queues new songs when "random" mode is enabled
0.26 (2014/06/03)
* fix segfault when adding absolute paths
* "playlist" can show stored playlist
* "search" supports --format
0.25 (2013/11/09)
* fix "insert" with directory argument
* optimize tab completion commands
* do character set conversion for tab completion commands
* require libmpdclient 2.3, MPD 0.16
0.24 (2013/10/29)
* configure.ac: fix syntax error
* new command "toggleoutput"
* use the "volume" command on MPD 0.18
* fix search/find with "filename" constraint
* add search/find with "base" constraint
* don't strip trailing slashes from absolute URLs
0.23 (2013/04/09)
* do character set conversions on client-to-client messages
* allow trailing slashes in paths that can be directories
* make "mv" a shortcut for "move"
* new command "cdprev"
* support absolute paths in "add" and "update"
* enable/disable: support output names, multiple arguments, and "only" mode
* doc: document missing format keywords
0.22 (2012/02/04)
* implement the client-to-client protocol (MPD 0.17)
* sticker: fix crash bug
* print newline after volume level
* print status after no-op relative volume change
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
