Commit Graph

4375 Commits

Author SHA1 Message Date
Adolf Belka
b8a598fc92 borgbackup: Update to version 1.2.3 and fix bug 13032
- Update from version 1.2.0 to 1.2.3
- Update of rootfile
- This update works with python3-msgpack-1.0.4 and fixes bug 13032
- To make it work then the borgbackup-1.2.3-py3.10.egg-info directory must be the only
   egg-info directory for borgbackup otherwise version 1.2.3 will end up with an error.
   Versions 1.2.2 and earlier workled without any problem if there was an earlier egg-info
   directory for a different version number. The borgbackup rootfile had the egg-info
   directory commented out so an uninstall cleared the directory but did not remove it.
   This patch has the egg-info directory in the rootfile uncommented and so an uninstall
   removes the directory.
- borgbackup paks files created so that the uninstall.sh file will remove any egg-info
   directory that starts with "borgbackup-1." as the first ever borgbackup was 1.0.12
   When the old 1.2.0 or earlier borgbackup is uninstalled it will use the old default
   paks uninstall.sh file and rootfile which will leave the old egg-info directory in
   place. When version 1.2.3 is installed it will use the new install.sh script which
   will remove any existing egg-info directories present still.
- Changelog
Version 1.2.3 (2022-12-24)
Upgrade notes:
Some things can be recommended for the upgrade process from borg 1.1.x (please also read the important compatibility notes below):
    do you already want to upgrade? 1.1.x also will get fixes for a while.
    be careful, first upgrade your less critical / smaller repos.
    first upgrade to a recent 1.1.x release - especially if you run some older 1.1.* or even 1.0.* borg release.
    using that, run at least one borg create (your normal backup), prune and especially a check to see everything is in a good state.
    check the output of borg check - if there is anything special, consider a borg check --repair followed by another borg check.
    if everything is fine so far (borg check reports no issues), you can consider upgrading to 1.2.x. if not, please first fix any already existing issue.
    if you want to play safer, first create a backup of your borg repository.
    upgrade to latest borg 1.2.x release (you could use the fat binary from github releases page)
    run borg compact --cleanup-commits to clean up a ton of 17 bytes long files in your repo caused by a borg 1.1 bug
    run borg check again (now with borg 1.2.x) and check if there is anything special.
    run borg info (with borg 1.2.x) to build the local pre12-meta cache (can take significant time, but after that it will be fast) - for more details see below.
    check the compatibility notes (see below) and adapt your scripts, if needed.
    if you run into any issues, please check the github issue tracker before posting new issues there or elsewhere.
If you follow this procedure, you can help avoiding that we get a lot of “borg 1.2” issue reports that are not really 1.2 issues, but existed before and maybe just were not noticed.
Compatibility notes:
    matching of path patterns has been aligned with borg storing relative paths. Borg archives file paths without leading slashes. Previously, include/exclude patterns could contain leading slashes. You should check your patterns and remove leading slashes.
    dropped support / testing for older Pythons, minimum requirement is 3.8. In case your OS does not provide Python >= 3.8, consider using our binary, which does not need an external Python interpreter. Or continue using borg 1.1.x, which is still supported.
    freeing repository space only happens when “borg compact” is invoked.
    mount: the default for --numeric-ids is False now (same as borg extract)
    borg create --noatime is deprecated. Not storing atime is the default behaviour now (use --atime if you want to store the atime).
    --prefix is deprecated, use -a / --glob-archives, see #6806
    list: corrected mix-up of “isomtime” and “mtime” formats. Previously, “isomtime” was the default but produced a verbose human format, while “mtime” produced a ISO-8601-like format. The behaviours have been swapped (so “mtime” is human, “isomtime” is ISO-like), and the default is now “mtime”. “isomtime” is now a real ISO-8601 format (“T” between date and time, not a space).
    create/recreate --list: file status for all files used to get announced AFTER the file (with borg < 1.2). Now, file status is announced BEFORE the file contents are processed. If the file status changes later (e.g. due to an error or a content change), the updated/final file status will be printed again.
    removed deprecated-since-long stuff (deprecated since):
        command “borg change-passphrase” (2017-02), use “borg key …”
        option “--keep-tag-files” (2017-01), use “--keep-exclude-tags”
        option “--list-format” (2017-10), use “--format”
        option “--ignore-inode” (2017-09), use “--files-cache” w/o “inode”
        option “--no-files-cache” (2017-09), use “--files-cache=disabled”
    removed BORG_HOSTNAME_IS_UNIQUE env var. to use borg you must implement one of these 2 scenarios:
            the combination of FQDN and result of uuid.getnode() must be unique and stable (this should be the case for almost everybody, except when having duplicate FQDN and MAC address or all-zero MAC address)
            if you are aware that 1) is not the case for you, you must set BORG_HOST_ID env var to something unique.
    exit with 128 + signal number, #5161. if you have scripts expecting rc == 2 for a signal exit, you need to update them to check for >= 128.
Fixes:
    create: fix --list --dry-run output for directories, #7209
    diff/recreate: normalize chunker params before comparing them, #7079
    check: fix uninitialised variable if repo is completely empty, #7034
    xattrs: improve error handling, #6988
    fix args.paths related argparsing, #6994
    archive.save(): always use metadata from stats (e.g. nfiles, size, …), #7072
    tar_filter: recognize .tar.zst as zstd, #7093
    get_chunker: fix missing sparse=False argument, #7056
    file_integrity.py: make sure file_fd is always closed on exit
    repository: cleanup(): close segment before unlinking
    repository: use os.replace instead of os.rename
Other changes:
    remove python < 3.7 compatibility code
    do not use version_tuple placeholder in setuptools_scm template
    CI: fix tox4 passenv issue, #7199
    vagrant: update to python 3.9.16, use the openbsd 7.1 box
    misc. test suite and docs fixes / improvements
    remove deprecated --prefix from docs, #7109
    Windows: use MSYS2 for Github CI, remove Appveyor CI
Version 1.2.2 (2022-08-20)
New features:
    prune/delete --checkpoint-interval=1800 and ctrl-c/SIGINT support, #6284
Fixes:
    SaveFile: use a custom mkstemp with mode support, #6933, #6400, #6786. This fixes umask/mode/ACL issues (and also “chmod not supported” exceptions seen in 1.2.1) of files updated using SaveFile, e.g. the repo config.
    hashindex_compact: fix eval order (check idx before use), #5899
    create --paths-from-(stdin|command): normalize paths, #6778
    secure_erase: avoid collateral damage, #6768. If a hardlink copy of a repo was made and a new repo config shall be saved, do NOT fill in random garbage before deleting the previous repo config, because that would damage the hardlink copy.
    list: fix {flags:<WIDTH>} formatting, #6081
    check: try harder to create the key, #5719
    misc commands: ctrl-c must not kill other subprocesses, #6912
        borg create with a remote repo via ssh
        borg create --content-from-command
        borg create --paths-from-command
        (de)compression filter process of import-tar / export-tar
Other changes:
    deprecate --prefix, use -a / --glob-archives, see #6806
    make setuptools happy (“package would be ignored”), #6874
    fix pyproject.toml to create a fixed _version.py file, compatible with both old and new setuptools_scm version, #6875
    automate asciinema screencasts
    CI: test on macOS 12 without fuse / fuse tests (too troublesome on github CI due to kernel extensions needed by macFUSE)
    tests: fix test_obfuscate byte accounting
    repository: add debug logging for issue #6687
    _chunker.c: fix warnings on macOS
    requirements.lock.txt: use the latest cython 0.29.32
    docs:
        add info on man page installation, #6894
        update archive_progress json description about “finished”, #6570
        json progress_percent: some values are optional, #4074
        FAQ: full quota / full disk, #5960
        correct shell syntax for installation using git
Version 1.2.1 (2022-06-06)
Fixes:
    create: skip with warning if opening the parent dir of recursion root fails, #6374
    create: fix crash. metadata stream can produce all-zero chunks, #6587
    fix crash when computing stats, escape % chars in archive name, #6500
    fix transaction rollback: use files cache filename as found in txn.active/, #6353
    import-tar: kill filter process in case of borg exceptions, #6401 #6681
    import-tar: fix mtime type bug
    ensure_dir: respect umask for created directory modes, #6400
    SaveFile: respect umask for final file mode, #6400
    check archive: improve error handling for corrupt archive metadata block, make robust_iterator more robust, #4777
    pre12-meta cache: do not use the cache if want_unique is True, #6612
    fix scp-style repo url parsing for ip v6 address, #6526
    mount -o versions: give clear error msg instead of crashing. it does not make sense to request versions view if you only look at 1 archive, but the code shall not crash in that case as it did, but give a clear error msg.
    show_progress: add finished=true/false to archive_progress json, #6570
    delete/prune: fix --iec mode output (decimal vs. binary units), #6606
    info: fix authenticated mode repo to show “Encrypted: No”, #6462
    diff: support presence change for blkdev, chrdev and fifo items, #6615
New features:
    delete: add repository id and location to prompt, #6453
    borg debug dump-repo-objs --ghost: new --segment=S --offset=O options
Other changes:
    support python 3.11
    allow msgpack 1.0.4, #6716
    load_key: no key is same as empty key, #6441
    give a more helpful error msg for unsupported key formats, #6561
    better error msg for defect or unsupported repo configs, #6566
    docs:
        document borg 1.2 pattern matching behavior change, #6407 Make clear that absolute paths always go into the matcher as if they are relative (without leading slash). Adapt all examples accordingly.
        authentication primitives: improved security and performance infos
        mention BORG_FILES_CACHE_SUFFIX as alternative to BORG_FILES_CACHE_TTL, #5602
        FAQ: add a hint about --debug-topic=files_cache
        improve borg check --max-duration description
        fix values of TAG bytes, #6515
        borg compact --cleanup-commits also runs a normal compaction, #6324
        virtualization speed tips
        recommend umask for passphrase file perms
        borg 1.2 is security supported
        update link to ubuntu packages, #6485
        use --numeric-ids in pull mode docs
        remove blake2 docs, blake2 code not bundled any more, #6371
        clarify on-disk order and size of segment file log entry fields, #6357
        docs building: do not transform --/--- to unicode dashes
    tests:
        check that borg does not require pytest for normal usage, fixes #6563
        fix OpenBSD symlink mode test failure, #2055
    vagrant:
        darwin64: remove fakeroot, #6314
        update development.lock.txt
        use pyinstaller 4.10 and python 3.9.13 for binary build
        upgrade VMCPUS and xdistn from 4 to 16, maybe this speeds up the tests
    crypto:
        use hmac.compare_digest instead of ==, #6470
        hmac_sha256: replace own cython wrapper code by hmac.digest python stdlib (since py38)
        hmac and blake2b minor optimizations and cleanups
        removed some unused crypto related code, #6472
        avoid losing the key (potential use-after-free). this never could happen in 1.2 due to the way we use the code. The issue was discovered in master after other changes, so we also “fixed” it here before it bites us.
    setup / build:
        add pyproject.toml, fix sys.path, #6466
        setuptools_scm: also require it via pyproject.toml
        allow extra compiler flags for every extension build
        fix misc. C / Cython compiler warnings, deprecation warnings
        fix zstd.h include for bundled zstd, #6369
    source using python 3.8 features: pyupgrade --py38-plus ./**/*.py

Fixes: Bug #13032
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-26 22:44:30 +00:00
Michael Tremer
758951bf25 nqptp: Update to latest version in main branch
This patch also creates symlinks that the daemon is automatically
started.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-23 15:23:19 +00:00
Adolf Belka
c12dab0ee8 hwdata: Update of pci and usb ids files
- Update pci.ids from version 2022.12.04 to 2023.01.18
- Update usb.ids from version 2022.12.09 to 2023.01.16
- Update of rootfile not required
- Update of LFS not required

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-19 21:35:24 +00:00
Adolf Belka
0d82593f67 hdparm: Update to version 9.65
- Update from version 9.64 to 9.65
- Update of rootfile not required
- fix glibc headers patch updated for hdparm-9.65
- Changelog
    hdparm-9.65:
	- Another --Istdin fix: cannot read log pages when no device specified

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-18 23:30:15 +00:00
Peter Müller
177db98c21 Merge remote-tracking branch 'arne_f/kernel-6.1' into next 2023-01-18 22:31:44 +00:00
Adolf Belka
3d0cdaea87 mpfr: Update to version 4.2.0
- Update from version 4.1.1 to 4.2.0
- Update of rootfile
- Changelog
    Changes from versions 4.1.1 to version 4.2.0
	    Binary compatible with MPFR 4.0.* and 4.1.*, though some minor changes in
             the behavior of the formatted output functions may be visible, regarded as
             underspecified behavior or bug fixes (see below).
	    New functions mpfr_cosu, mpfr_sinu, mpfr_tanu, mpfr_acosu, mpfr_asinu,
             mpfr_atanu and mpfr_atan2u.
	    New functions mpfr_cospi, mpfr_sinpi, mpfr_tanpi, mpfr_acospi, mpfr_asinpi,
             mpfr_atanpi and mpfr_atan2pi.
	    New functions mpfr_log2p1, mpfr_log10p1, mpfr_exp2m1, mpfr_exp10m1 and
             mpfr_compound_si.
	    New functions mpfr_fmod_ui, mpfr_powr, mpfr_pown, mpfr_pow_uj, mpfr_pow_sj
             and mpfr_rootn_si (mpfr_pown is actually a macro defined as an alias for
             mpfr_pow_sj).
	    Bug fixes.
	        In particular, for the formatted output functions (mpfr_printf, etc.),
                 the case where the precision consists only of a period has been fixed
                 to be like .0 as specified in the ISO C standard, and the manual has
                 been corrected and clarified.
	        The macros of the custom interface have also been fixed: they now behave
                 like functions (except a minor limitation for mpfr_custom_init_set).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-09 18:43:22 +00:00
Arne Fitzenreiter
6535255270 kernel: update to 6.1.3
the kernel-6.1.x series should be the next lts series...
2023-01-08 10:08:33 +00:00
Arne Fitzenreiter
be88f0696e rtl8822bu: update to 20210702-2590672d717e2516dd2e96ed66f1037a6815bced
this is needed for kernel-6.1.x
2023-01-08 10:08:32 +00:00
Arne Fitzenreiter
f5be1e572f rtl8189fs: update to 476020109b3841421af289a7b78c7a25b0c45fac
this is needed for kernel 6.1.x
2023-01-08 10:08:32 +00:00
Arne Fitzenreiter
5cf1e265a9 rtl8189es: update to e58bd86c9d9408c648b1246a0dd76b16856ec172
this is needed for kernel 6.1.x
2023-01-08 10:08:32 +00:00
Arne Fitzenreiter
0c3838cb40 postfix: patch for build with kernel 6.x 2023-01-08 10:08:32 +00:00
Adolf Belka
43692f1f2e iperf3: Update to version 3.12
- Update from version 3.10.1 to 3.12
- Update of rootfile not required
- patch to remove pg flag no longer needed. Source code no longer has pg flag set
   in CFLAGS
- Changelog
        iperf-3.12 2022-09-30
            * Notable user-visible changes
              * cJSON has been updated to version 1.7.15 (#1383).
              * The --bind <host>%<dev> option syntax now works properly (#1360 /
                #1371).
              * A server-side file descriptor leak with the --logfile option has
                been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
              * A bug that caused some large values from TCP_INFO to be misprinted
                as negative numbers has been fixed (#1372).
              * Using the -k or -n flags with --reverse no longer leak into future
                tests (#1363 / #1364).
              * There are now various debug level options available with the
                --debug option. These can be used to adjust the amount of
                debugging output (#1327).
              * A new --snd-timeout option has been added to set a termination
                timeout for idle TCP connections (#1215 / #1282).
              * iperf3 is slightly more robust to out-of-order packets during UDP
                connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
                #1260).
              * iperf3 will now use different ports for each direction when the
                --cport and --bdir options are set (#1249 / #1259).
              * The iperf3 server will now exit if it can't open its log file
                (#1225 / #1251).
              * Various help message and output fixes have been made (#1299 /
                #1330 / #1345 / #1350).
              * Various compiler warnings have been fixed (#1211 / #1316).
            * Developer-visible changes
              * Operation of bootstrap.sh has been fixed and simplified (#1335 /
                #1325).
              * Flow label support / compatibility under Linux has been improved
                (#1310).
              * Various minor memory leaks have been fixed (#1332 / #1333).
              * A getter/setter has been added for the bind_port parameter
                (--cport option). (#1303, #1305)
              * Various internal documentation improvements (#1265 / #1285 / #1304).
        iperf-3.11 2022-01-31
            * Notable user-visible changes
              * Update links to Discussions in documentation
              * Fix DSCP so that TOS = DSCP * 4 (#1162)
              * Fix --bind-dev for TCP streams (#1153)
              * Fix interface specification so doesn't overlap with IPv6 link-local
                addresses for -c and -B (#1157, #1180)
              * Add get/set test_unit_format function declaration to iperf_api.h
              * Auto adjustment of test-end condition for file transfers (-F), if no end
                condition is set, it will automatically adjust it to file size in bytes
              * Exit if idle time expires waiting for a connection in one-off mode (#1187,
                #1197)
              * Support zerocopy by reverse mode (#1204)
              * Update help and manpage text for #1157, support bind device
              * Consistently print target_bandwidth in JSON start section (#1177)
              * Test bitrate added to JSON output (#1168)
              * Remove fsync call after every write to receiving --file (#1176, #1159)
              * Update documentation for -w (#1175)
              * Fix for #952, different JSON object names for bidir reverse channel

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:48:10 +00:00
Peter Müller
63b3a6edb3 linux: Update to 5.15.85
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-03 16:07:48 +00:00
Adolf Belka
f5a57a8d6a curl: Update to version 7.87.0
- Update from version 7.86.0 to 7.87.0
- Update of rootfile
- version 7.87.0 changed hoiw it deals with deprecated typecheck expressions. This caused
   zabbix_agentd build to fail. Curl developers created a commit to fix this in next
   version release. Added as patch here. Should be able to be removed with next curl
   update.
- Changelog
    curl and libcurl 7.87.0
	This release includes the following changes:
		 o curl: add --url-query [52]
		 o CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit [75]
		 o lib: add CURL_WRITEFUNC_ERROR to signal write callback error [47]
		 o openssl: reduce CA certificate bundle reparsing by caching [11]
		 o version: add a feature names array to curl_version_info_data [67]
	This release includes the following bugfixes:
		 o altsvc: fix rejection of negative port numbers [144]
		 o aws_sigv4: consult x-%s-content-sha256 for payload hash [102]
		 o aws_sigv4: fix typos in aws_sigv4.c [101]
		 o base64: better alloc size [124]
		 o base64: encode without using snprintf [123]
		 o base64: faster base64 decoding [120]
		 o build: assume assert.h is always available [111]
		 o build: assume errno.h is always available [110]
		 o c-hyper: CONNECT respones are not server responses [137]
		 o c-hyper: fix multi-request mechanism [115]
		 o CI: Change FreeBSD image from 12.3 to 12.4 [108]
		 o CI: LGTM.com will be shut down in December 2022 [112]
		 o ci: Remove zuul fuzzing job as it's superseded by CIFuzz
		 o cmake: check for cross-compile, not for toolchain [54]
		 o CMake: fix build with `CURL_USE_GSSAPI` [78]
		 o cmake: really enable warnings with clang [25]
		 o cmake: set the soname on the shared library [140]
		 o cmdline-opts/gen.pl: fix the linkifier [64]
		 o cmdline-opts/page-footer: remove long option nroff formatting
		 o config-mac: define HAVE_SYS_IOCTL_H [107]
		 o config-mac: fix typo: size_T -> size_t [125]
		 o config-mac: remove HAVE_SYS_SELECT_H [116]
		 o config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW [41]
		 o configure: require fork for NTLM-WB [36]
		 o contributors.sh: actually use $CURLWWW instead of just setting it [129]
		 o cookie: compare cookie prefixes case insensitively [14]
		 o cookie: expire cookies at once when max-age is negative [45]
		 o cookie: open cookie jar as a binary file [89]
		 o curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS [90]
		 o curl-rustls.m4: on macOS, rustls also needs the Security framework [44]
		 o curl.h: include <sys/select.h> on SerenityOS [104]
		 o curl.h: name all public function parameters [118]
		 o curl.h: reword comment to not use deprecated option [132]
		 o curl: override the numeric locale and set "C" by force [60]
		 o curl: timeout in the read callback [15]
		 o curl_endian: remove Curl_write64_le from header [81]
		 o curl_get_line: allow last line without newline char [88]
		 o curl_path: do not add '/' if homedir ends with one [4]
		 o curl_url_get.3: remove spurious backtick [127]
		 o curl_url_set.3: document CURLU_DISALLOW_USER [139]
		 o curl_url_set.3: fix typo [148]
		 o CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE [1]
		 o CURLOPT_COOKIEFILE.3: advice => advise [131]
		 o CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example [31]
		 o CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw" [130]
		 o CURLOPT_POST.3: Explain setting to 0 changes request type [61]
		 o docs/curl_ws_send: Fixed typo in websocket docs [114]
		 o docs/EARLY-RELEASE.md: how to determine an early release [37]
		 o docs/examples: spell correction ('Retrieve') [119]
		 o docs/INSTALL.md: expand on static builds [62]
		 o docs/WEBSOCKET.md: explain the URL use [71]
		 o docs: add missing parameters for --retry flag [2]
		 o docs: add more "SEE ALSO" links to CA related pages [82]
		 o docs: explain the noproxy CIDR notation support [17]
		 o docs: extend the dump-header documentation [150]
		 o docs: remove performance note in CURLOPT_SSL_VERIFYPEER [13]
		 o examples/10-at-a-time: fix possible skipped final transfers [85]
		 o examples: update descriptions [83]
		 o ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH [96]
		 o gen.pl: do not generate CURLHELP bitmask lines > 79 characters [10]
		 o GHA: clarify workflows permissions, set least possible privilege [79]
		 o GHA: NSS use clang instead of clang-9 [103]
		 o gnutls: use common gnutls init and verify code for ngtcp2 [98]
		 o headers: add endif comments [51]
		 o HTTP-COOKIES.md: mention that http://localhost is a secure context [76]
		 o HTTP-COOKIES.md: update the 6265bis link to draft-11 [70]
		 o http: do not send PROXY more than once [46]
		 o http: fix the ::1 comparison for IPv6 localhost for cookies [155]
		 o http: set 'this_is_a_follow' in the Location: logic [40]
		 o http: use the IDN decoded name in HSTS checks [154]
		 o hyper: classify headers as CONNECT and 1XX [56]
		 o hyper: fix handling of hyper_task's when reusing the same address [33]
		 o idn: remove Curl_win32_ascii_to_idn [153]
		 o INSTALL: update operating systems and CPU archs [91]
		 o KNOWN_BUGS: remove eight entries [50]
		 o lib1560: add some basic IDN host name tests [151]
		 o lib: connection filters (cfilter) addition to curl: [43]
		 o lib: feature deprecation warnings in gcc >= 4.3 [58]
		 o lib: fix some type mismatches and remove unneeded typecasts [12]
		 o lib: parse numbers with fixed known base 10 [77]
		 o lib: remove bad set.opt_no_body assignments [42]
		 o lib: rewind BEFORE request instead of AFTER previous [65]
		 o lib: sync guard for Curl_getaddrinfo_ex() definition and use [6]
		 o lib: use size_t or int etc instead of longs [145]
		 o libcurl-errors.3: remove duplicate word [3]
		 o libssh2: return error when ssh_hostkeyfunc returns error [121]
		 o limit-rate.d: see also --rate
		 o log2changes.pl: wrap long lines at 80 columns [59]
		 o Makefile.mk: address minor issues [87]
		 o Makefile.mk: improve a GNU Make hack [122]
		 o Makefile.mk: portable Makefile.m32 [86]
		 o maketgz: set the right version in lib/libcurl.plist [53]
		 o mime: relax easy/mime structures binding [94]
		 o misc: Fix incorrect spelling [113]
		 o misc: remove duplicated include files [28]
		 o misc: typo and grammar fixes [23]
		 o negtelnetserver.py: have it call its close() method [68]
		 o netrc.d: provide mutext info [63]
		 o netware: remove leftover traces [80]
		 o noproxy: also match with adjacent comma [19]
		 o noproxy: guard against empty hostnames in noproxy check [136]
		 o noproxy: tailmatch like in 7.85.0 and earlier [35]
		 o nroff-scan.pl: detect double highlights
		 o ntlm: improve comment for encrypt_des [55]
		 o ntlm: silence ubsan warning about copying from null target_info pointer [69]
		 o openssl/mbedtls: use %d for outputing port with failf (int) [72]
		 o openssl: prefix errors with '[lib]/[version]: ' [105]
		 o os400: use platform socklen_t in Curl_getnameinfo_a [18]
		 o page-header: grammar improvement (display transfer rate) [126]
		 o proxy: refactor haproxy protocol handling as connection filter [57]
		 o README.md: remove badges and xmas-tree garnish [9]
		 o rtsp: fix RTSP auth [49]
		 o runtests: --no-debuginfod now disables DEBUGINFOD_URLS [100]
		 o runtests: do CRLF replacements per section only [97]
		 o scripts/checksrc.pl: detect duplicated include files [29]
		 o sendf: change Curl_read_plain to wrap Curl_recv_plain [48]
		 o sendf: remove unnecessary if condition [26]
		 o setup: do not require __MRC__ defined for Mac OS 9 builds [117]
		 o smb/telnet: do not free the protocol struct in *_done() [152]
		 o socks: fix username max size is 255 (0xFF) [146]
		 o spellcheck.words: remove 'github' as an accepted word [22]
		 o ssl-reqd.d: clarify that this is for upgrading connections only [138]
		 o strcase: use curl_str(n)equal for case insensitive matches [8]
		 o styled-output.d: this option does not work on Windows [93]
		 o system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS [133]
		 o system.h: support 64-bit curl_off_t for NonStop 32-bit [21]
		 o test1421: fix typo [109]
		 o test3026: reduce runtime in legacy mingw builds [73]
		 o tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
		 o tests: add authorityInfoAccess to generated certs [99]
		 o tests: add HTTP/3 test case, custom location for proper nghttpx [106]
		 o tls: backends use connection filters for IO, enabling HTTPS-proxy [92]
		 o tool: determine the correct fopen option for -D [95]
		 o tool_cfgable: free the ssl_ec_curves on exit [142]
		 o tool_cfgable: make socks5_gssapi_nec a boolean [128]
		 o tool_formparse: avoid clobbering on function params [135]
		 o tool_getparam: make --no-get work as the opposite of --get [39]
		 o tool_operate: provide better errmsg for -G with bad URL [16]
		 o tool_operate: when aborting, make sure there is a non-NULL error buffer [20]
		 o tool_paramhlp: free the proto strings on exit [141]
		 o url: move back the IDN conversion of proxy names [74]
		 o urlapi: reject more bad letters from the host name: &+() [143]
		 o urldata: change port num storage to int and unsigned short [66]
		 o vms: remove SIZEOF_SHORT [134]
		 o vtls: fix build without proxy support [38]
		 o vtls: localization of state data in filters [84]
		 o WEBSOCKET.md: fix broken link [30]
		 o Websocket: fixes for partial frames and buffer updates [7]
		 o websockets: fix handling of partial frames [32]
		 o windows: fail early with a missing windres in autotools [5]
		 o windows: fix linking .rc to shared curl with autotools [24]
		 o winidn: drop WANT_IDN_PROTOTYPES [27]
		 o ws: if no connection is around, return error [149]
		 o ws: return CURLE_NOT_BUILT_IN when websockets not built in [34]
		 o x509asn1: avoid freeing unallocated pointers [147]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-12-29 11:23:41 +00:00
Adolf Belka
2d8367ddb6 libcdada: Update to version 0.4.0
- Update from version 0.3.5 to 0.4.0
- Update of rootfile not required
- Update of patch in line with libcdada version
- Changelog
    v0.4.0 (12th March 2022)
	Add `cdada_map_insert_replace()`

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-12-29 11:22:22 +00:00
Adolf Belka
bdfe675987 libarchive: Update to version 3.6.2
- Update from version 3.6.1 to 3.6.2
- Update of rootfile
- patch to fix glibc 2.36 headers is now part of the source code
- Changelog
    Libarchive 3.6.2 is a bugfix and security release.
	Important bug fixes:
	    include ZSTD in Windows builds (#1688)
	    SSL fixes on Windows (#1714, #1723, #1724)
	    rar5 reader: fix possible garbled output with bsdtar -O (#1745)
	    mtree reader: support reading mtree files with tabs (#1783)
	    various small fixes for issues found by CodeQL

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-12-26 08:53:33 +00:00
Adolf Belka
0da1e37ada hwdata: Update of pci and usb ids files
- Update pci.ids from version 2022.03.22 to 2022.12.04
- Update usb.ids from version 2022.03.18 to 2022.12.09
- No update of rootfile
- No change to lfs

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-12-26 08:42:40 +00:00
Adolf Belka
15214970e6 avahi: Fix bug #13017 - - dbus[n]: Unknown group "netdev" in message bus configuration file
- add command into avahi install.sh paks file to add netdev group if it doesn't exist
- Update avahi PAK_VER to ensure that change is shipped

Tested-by: Jon Murphy <jon.murphy@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-12-26 08:41:51 +00:00
Adolf Belka
5e1db85c4f mpfr: Update to version 4.1.1 with patch 1
- Update from version 4.1.0 with patch set 1 to 13 to 4.1.1 with aptch set 1 to 1
- Update of rootfile
- Changelog
    Changes from version 4.1.0 to version 4.1.1:
	- Bug fixes (see <https://www.mpfr.org/mpfr-4.1.0/#fixed> and/or the
	  ChangeLog file), in particular for macros implementing functions.
	- Improved manual formatting.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-12-26 08:33:28 +00:00
Stefan Schantl
883ec31e3c QMI: Update red/iface file when using QMI.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-12-17 17:25:35 +00:00
Michael Tremer
b1ff8adbf0 network: Silence any output during the QMI setup
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
580c249a5b network: Assign "static" MAC addresses to QMI interfaces
This is really badly hacky, but I do not know a better way to solve this
with our existing "setup" program which would be a nightmare to extend.

So we are using the device number to generate a static MAC address which
can then be used as usual. I doubt many people will have more than one
device.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
8d09028b69 network: Force dhcpcd to ask for an IP address
So since all this static nonsense wasn't feeling right, I opened a
ticket upstream and got a lead how to actually get some proper DHCP
working.

  https://github.com/NetworkConfiguration/dhcpcd/issues/129

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
86ba5ce316 dhcpcd.exe: Add a safety net to make sure we always have a route
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
ece96c6f56 dhcpcd.exe: Ignore some events
We don't want any log messages printed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
e3da491238 dhcpcd.exe: Reformat the reason dispatcher
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
1f568cc0ed network: dhcpcd fails to check link state for QMI interfaces
When acquiring an IP address, dhcpcd seems to think that the interface
is down or does not work properly for some reason. It will
subsequentially decide to exit which is not what we want here.

Therefore this patch tells dhcpcd to ignore the link state and keep
happily running.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
cb4b6f433e dhcpcd.exe: Fix typo in configuring DNS server
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
c2e2c2824a dhcpcd.exe: Run everything no matter how RED is configured
This could potentially create problems when we abuse these functions to
launch the DHCP client on IPTV interfaces. This would have to be tested
and confirmed or potentially we would need some more changes to keep
supporting that use-case, too.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
7a67f77f10 dhcpcd.exe: Only touch /var/ipfire/red/active once
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
4ffd18a774 dhcpcd.exe: Do not overwrite the default gateway when empty
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
ccf36e9e8c dhcpcd.exe: Use DNS servers from QMI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
261727435d dhcpcd.exe: Store the default gateway when in QMI mode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
36914cce70 dhcpcd.exe: Only set gateway when we have received one
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
11f6226f65 dhcpcd.exe: Actually use the received MTU
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
a22e3c8ec7 dhcpcd.exe: Flush any configured IP addresses on shutdown
This allows us to start with a fresh interface every time dhcpcd is
being restarted.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
f28d5fa8cc network: Remove --debug switch for dhcpcd in QMI mode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
a0918657c9 network: Drop any traces of ISDN
This has been removed a long time ago and we should probably spend a
little bit more time on keeping the networking code tidy :)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
957863f754 network: Add support for QMI modems
QMI is a proprietary interface from Qualcomm which are absolute pioneers
when it comes to interfacing with modems. I don't think there would be
any way to make this any more complicated and bloated.

So, bascially we will put the modem into a raw IP mode which changes the
interface into Point-to-Point mode.

We then configure the provider settings using qmicli. After that, the
modem will try to connect to the provider and obtain an IP address.

We will then start a DHCP client which does not do any DHCP-ing because
implementing that would be too complicated. Instead we do something even
*more* complicated where we would launch a custom script which asks the
modem for the allocated IP address and will configure it into the
device. The DHCP client then reads that IP address from the device and
pretends it came up with it by itself. Such an easy way to do this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:45 +00:00
Michael Tremer
c6551e73c2 network: Allow passing custom options to dhcpcd
This is useful for debugging.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:45 +00:00
Michael Tremer
33d2aa6d02 dhcpcd.exe: Allow using the DHCP setup scripts when RED is not configured as DHCP
This is useful for dial-up methods that use DHCP, but when RED_TYPE is
configured as PPP.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:45 +00:00
Michael Tremer
177ec16705 dhcpcd: Log any unhandled client events
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:45 +00:00
Peter Müller
8d1f604b4a ca-certificates: Remove TrustCor Systems root CAs
On November 30, 2022, Mozilla decided to take the following
actions as a response to the concerns raised about the merits
of this root CA operator (excerpt taken from
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ):

> 1. Set "Distrust for TLS After Date" and "Distrust for S/MIME
>    After Date" to November 30, 2022, for the 3 TrustCor root
>    certificates (TrustCor RootCert CA-1, TrustCor ECA-1,
>    TrustCor RootCert CA-2) that are currently included in
>    Mozilla's root store.
>
> 2. Remove those root certificates from Mozilla's root store
>    after the existing end-entity TLS certificates have expired.

As far as the latter is concerned, the offending certificates
have these expiry dates set:
- TrustCor RootCert CA-1: Mon, 31 Dec 2029 17:23:16 GMT
- TrustCor RootCert CA-2: Sun, 31 Dec 2034 17:26:39 GMT
- TrustCor ECA-1:         Mon, 31 Dec 2029 17:28:07 GMT

The way IPFire 2 currently processes Mozilla's trust store
does not feature a way of incorporate a "Distrust for XYZ After
Date" attribute. This means that despite TrustCor Systems root
CAs are no longer trusted by browsers using Mozilla's trust
store, IPFire would still accept certificates directly or
indirectly issued by this CA until December 2029 or December 2034.

To protect IPFire users, this patch therefore suggests to
patch our copy of Mozilla's trust store in order to remove
TrustCor Systems' root CAs: The vast majority of HTTPS connections
established from an IPFire machine take place in a non-interactive
context, so there is no security benefit from a "Distrust After
Date" information. Instead, if we do not want IPFire installations
to trust this CA, we have no other option other than remove it
unilaterally from our copy of Mozilla's trust store.

See also: https://lists.ipfire.org/pipermail/development/2022-November/014681.html

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-01 18:01:08 +01:00
Adolf Belka
bcef2fe0f6 elinks: Update to version 0.15.1
- Update from version 0.12pre6 (2012) to 0.15.1 (July 2022)
- Update of rootfile
- Original elinks was last updated in 2012. In Jan 2020 a fork was made of the package
   and has been maintained since then on an ongoing basis. This new fork is used by Arch
   Linux
- elinks has not been an addon since CU141 but the lfs file was still in the addon format
   This has been adjusted to make it in line with a core program
- The previous patches related to ssl have been removed as the fixes are now part of the
   source tarball.
- Changelog
    ELinks 0.15.1 Released on 2022-07-31
	* about:config
	* option --always-load-config #137
	* compilation fixes on Windows #140
	* added ui.background_char #142
	* sample build scripts and docker files
	* experimental DGI support
	* DOS port based on links code
	* configurable Accept-Header #143
	* minor compilation fixes
    ELinks 0.15.0 Released on 2021-12-24
	* Serbian translation update
    ELinks 0.15.0rc2 Released on 2021-12-19
	* Serbian translation update
	* HOME_ETC
    ELinks 0.15.0rc1 Released on 2021-12-04
	* removed -Wno-pointer-sign from CFLAGS
	* close stdin before calling a background program (sgerwk)
	  and options related to it #108, #109, #110, #113
	* gemini protocol and text/gemini mime type
	* changed rendering of blockquote element
	* avoid tmpfile in lua (sgerwk) #115, #118
	* console.log in js (mtatton) #93
	* localstorage (mtatton) #98
	* options document.browse.search.beginning_only
	  document.browse.search.ignore_history
	  ui.double_esc
	* ui.temperature.* to show temperature of CPU
	* document.plain.fixup_tables
	* enhanced ecmascript code. Added QuickJS
	* Notes on ECMAScript:
	  requires C++ compiler, sqlite3, libxml++5 >= 5.0.1.GIT
	  and either mozjs78-dev or QuickJS-2021-03-27
	  Most sites don't work, some crash. Some workarounds were implemented:
	  a) ECMAScript is disabled by default
	  b) ~/.elinks/allow.txt and ~/.elinks/disallow.txt with url prefixes
	  c) Added toggle-ecmascript action. You can bind it to some key
	* other small fixes
    ELinks 0.14.3 Released on 2021-09-26
	* Fix issue with negative value of cells #126
    ELinks 0.14.2 Released on 2021-08-29
	* crash in nttp #114
	* XSS in gopher #125
    ELinks 0.14.1 Released on 2021-05-30
	* Disable spidermonkey by default #85
	* Show error message about libgcrypt-config. #86
	* off by two. #88
	* Check NULL. #99
	* fix error message when no previous search was performed #100
	* alert when moving to the next match of a failed search #101
	* include unistd.h and errno.h to define safe_read() #107
    ELinks 0.14.0 Released on 2020-12-27
	No changes since 0.14.0rc2.
    ELinks 0.14.0rc2 Released on 2020-12-13
	* ~/.elinks/allow.txt - list of allowed url prefixes for js
    ELinks 0.14.0rc1 Released on 2020-12-06
	* dblatex for pdf. PR #64
	* fixes CTRL-Z. #65
	* changes in mime handlers. PR #66
	* fixes in data protocol. #67, #68, #71, #72, #73
	* allow to wrap text in PRE. #69
	* pass #fragment to external command. #75
	* introduced "document.browse.search.reset". #76
	* added meson as alternative build system
	* in #77 I'm going to attach static binaries for released versions
	* mozjs dependency updated to 52.*
		Note that, to compile with javascript support you must compile by g++ with -fpermissive option.
		There is a lot of warnings. Unfortunately JS often crashes. Without help from someone familiar
		with SpiderMonkey, we won't go far.
		As you might notice, I renamed repo to elinks.
		Thanks to all involved in this release.
    ELinks 0.13.5 Released on 2020-08-30
	* added clipboard selection using keyboard. #59
	* fixed drawing menus over emoji characters. #60
	* encoding to utf-8 and decoding back in python's pre_format_html_hook
		This is likely the last release of 0.13.x series.
    ELinks 0.13.4: Released on 2020-07-31.
	* fixed segfault with gnutls. introduced in 0.13.3
	* updated smart and dumb prefixes to https. Thanks Guido Cella. PR #54
	* added the st terminal to config options. PR #55
	* doc updates PR #57
	* also pass the uri as %u to external handler. Thanks sgerwk. PR #58
	* added the ui.clipboard_file config option
    ELinks 0.13.3: Released on 2020-06-29.
	* configure option --with-luapkg=name
	  You can choose lua version at compilation time. For example: --with-luapkg=luajit
	* config option connection.ssl.https_by_default (Thanks Guido Cella)
	  not enabled by default
	* docs updates (Guido Cella)
	* fixes related to ui.mouse_disable and xterm-like terminals (Thanks sgerwk)
	* show an alert when the search string is not found (sgerwk)
    ELinks 0.13.2: Released on 2020-05-31.
	* command line option -remote search(...) (thanks sgerwk)
	* command line option -bind-address
	* config option ui.mouse_disable (sgerwk)
	* config option ui.tostop
	* config option ui.sessions.fork_on_start
	* compatibility (compilability) with lua-5.2 and 5.3
	* modified cookies code (not well tested)
    ELinks 0.13.1: Released on 2020-01-31.
	* Fixed issue with uploading files to local cgi.
	* Python scripts in contrib converted to python3.
    ELinks 0.13.0: Released on 2019-12-27.
	Incompatibilities:
		* The protocol.fsp.sort option has been removed.  ELinks always sorts.
		* bug 1024: Verify the host name or IP address in the server certificate
		  if connection.ssl.cert_verify is not 0.
	Miscellaneous:
		* The configure script is no longer part of tarball, you must generate it.
		  For example running ./autogen.sh
		* major bug 181: Slave ELinks processes can now run an external editor.
		  This used to work in the master process only.
		* major bug 722: Filter CSS according to media types.  New option
		  document.css.media.
		* bug 638: Propagate the existence of $DISPLAY from slave terminals to
		  mailcap test commands.
		* bugs 762, 1082: Small memory leak in goto_current_link/goto_imgmap
		* bug 963: New option document.css.ignore_display_none.
		* bug 977: Fixed crash when opening in new tab a non link with onclick
		  attribute.
		* bug 1008: File upload fields in HTML forms now stream the files to
		  the server, instead of reading them to memory in advance.  This lets
		  you upload larger files.  The downsides are that ELinks may use a
		  cached response even if you have modified a file between requests,
		  and that ELinks can send inconsistent data if you modify a file
		  while it is being uploaded.
		* bug 1054: Don't abort downloads when closing the terminal from which
		  they were started.  When such a download ends, display the message
		  in the most recently used terminal.  If the user chooses
		  ``Background and Notify'' via the download manager in some terminal,
		  reassociate the download with that terminal.  These changes do not
		  apply to downloads to external handlers.
		* Really retry forever when connection.retries = 0.
		* enhancement: Session-specific options.  Any options changed with
		  toggle-* actions no longer affect other tabs or other terminals.
		* Do not crash when document.browse.minimum_refresh_time = 0 and
		  a document has a meta refresh with a delay of 0.
		* Properly update link highlighting and status bar information when the
		  repeat prefix is changed.
		* Handle SSL rehandshakes
		* Fix compatibility with Ruby >= 1.9
		* enhancement 15: Domain-specific options.  Use set_domain in
		  elinks.conf to e.g. disable cookies for google.com.  The option
		  manager window does not yet support this.
		* enhancement 867: Use bracketed paste mode on xterm.  This requires
		  xterm patch #228 or later configured with --enable-readline-mouse.
		* enhancement 824: Experimental support for combining characters.
		  See features.conf for details.
		* enhancement: Add a new entry Link Info under Link main menu.
		* enhancement: Indicate backgrounded downloads using an unused led.
		* enhancement: Display the number of ECMAScript interpreters that have
		  been allocated for documents in the Resources dialog.
		* Fedora enhancement 346861: Add support for nss_compat_ossl library
		  (OpenSSL replacement).
		* enhancement: ``elinks --dump'' uses box-drawing characters if supported
		  by the charset.
		* enhancement 1070: Support 256 colors on fbterm-1.4.
		* enhancement 1075: Scrolling the entire contents of dialog boxes.
		  Especially useful for multi-file BitTorrent downloads.
		* Report if the Lua function edit_bookmark_dialog receives the wrong
		  number or types of arguments instead of silently failing.
		* enhancement: Add ``Invalidate'' button to the cache manager.
		* enhancement: Add ``Search contents'' button to the cache manager with
		  which one can search through the cache items' data rather than their
		  metadata.
		* enhancement: Add rudimentary support for the HTML5 media elements,
		  <video> and <audio>.
		* enhancement: Add move-half-page-up and move-half-page-down actions.
		* enhancement: Add option to change overlap for vertical scrolling.
		* enhancement: HTML meta refresh allows semicolons in URLs, and the
		  syntax is more like in Firefox.
		* link against lua51 not lua50
		* SpiderMonkey must be mozjs-17.0. This version is latest with C API.
		  Find it with pkg-config.
		* using iconv for some multibyte charsets. It works if the terminal codepage
		  is UTF-8. More charsets will be added on demand.
		* enhancement: support SSL client certificate
		* python scripting is Python3 only
		* brotli and zstd encodings
		* possibility to make use of libevent instead of select for event loop
		* terminfo queries for output (not input) as compilation option

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-28 13:05:19 +01:00
Adolf Belka
39ff37072e qemu: Update to version 7.1.0
- Update from 7.0.0 to 7.1.0
- Update of rootfile not required
- Removal of qemu-7.0.0-fix-glibc-headers.patch as an alternative patch approach has been
   implemeted into thye source tarball.
- Changelog is too large to include here. Details can be found at
   https://wiki.qemu.org/ChangeLog/7.1

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-25 11:58:58 +00:00
Adolf Belka
81c3f9e1b9 libvirt: Update to version 8.9.0
- Update from 7.10.0 to 8.9.0
- Update of rootfile
- Removal of sheepdog_storage option in ./configure as it has been removed from libvirt
- Removal of libvirt-7.10.0-fix-glibc-headers.patch as contents are now built in to source
   tarball.
- Changelog is too large to include here. Details can be found in the NEWS.rst file in
   the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-25 11:58:27 +00:00
Adolf Belka
8cb2214c3a curl: Update to version 7.86.0
- Update from version 7.84.0 to 7.86.0
- Update of rootfile
- curl-7.84.0-easy_lock_h_include_sched_h_if_available_to_fix_build.patch removed as this
   is now built into the source tarball version
- Changelog - is too large to inclkude here. The details can be found in the RELEASE_NOTES
   file in the source tarballs.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-25 11:55:48 +00:00
Adolf Belka
6ff6ba85ba xz: Update to version 5.2.8
- Update from version 5.2.5 to 5.2.8
- Update of rootfile
- Remove xzgrep-ZDI-CAN-16587 patch as the contents are now integrated into the source
   tarball and with an improved quicker method - see changelog below.
- Changelog
	5.2.8 (2022-11-13)
	    * xz:
	        - If xz cannot remove an input file when it should, this
	          is now treated as a warning (exit status 2) instead of
	          an error (exit status 1). This matches GNU gzip and it
	          is more logical as at that point the output file has
	          already been successfully closed.
	        - Fix handling of .xz files with an unsupported check type.
	          Previously such printed a warning message but then xz
	          behaved as if an error had occurred (didn't decompress,
	          exit status 1). Now a warning is printed, decompression
	          is done anyway, and exit status is 2. This used to work
	          slightly before 5.0.0. In practice this bug matters only
	          if xz has been built with some check types disabled. As
	          instructed in PACKAGERS, such builds should be done in
	          special situations only.
	        - Fix "xz -dc --single-stream tests/files/good-0-empty.xz"
	          which failed with "Internal error (bug)". That is,
	          --single-stream was broken if the first .xz stream in
	          the input file didn't contain any uncompressed data.
	        - Fix displaying file sizes in the progress indicator when
	          working in passthru mode and there are multiple input files.
	          Just like "gzip -cdf", "xz -cdf" works like "cat" when the
	          input file isn't a supported compressed file format. In
	          this case the file size counters weren't reset between
	          files so with multiple input files the progress indicator
	          displayed an incorrect (too large) value.
	    * liblzma:
	        - API docs in lzma/container.h:
	            * Update the list of decoder flags in the decoder
	              function docs.
	            * Explain LZMA_CONCATENATED behavior with .lzma files
	              in lzma_auto_decoder() docs.
	        - OpenBSD: Use HW_NCPUONLINE to detect the number of
	          available hardware threads in lzma_physmem().
	        - Fix use of wrong macro to detect x86 SSE2 support.
	          __SSE2_MATH__ was used with GCC/Clang but the correct
	          one is __SSE2__. The first one means that SSE2 is used
	          for floating point math which is irrelevant here.
	          The affected SSE2 code isn't used on x86-64 so this affects
	          only 32-bit x86 builds that use -msse2 without -mfpmath=sse
	          (there is no runtime detection for SSE2). It improves LZMA
	          compression speed (not decompression).
	        - Fix the build with Intel C compiler 2021 (ICC, not ICX)
	          on Linux. It defines __GNUC__ to 10 but doesn't support
	          the __symver__ attribute introduced in GCC 10.
	    * Scripts: Ignore warnings from xz by using --quiet --no-warn.
	      This is needed if the input .xz files use an unsupported
	      check type.
	    * Translations:
	        - Updated Croatian and Turkish translations.
	        - One new translations wasn't included because it needed
	          technical fixes. It will be in upcoming 5.4.0. No new
	          translations will be added to the 5.2.x branch anymore.
	        - Renamed the French man page translation file from
	          fr_FR.po to fr.po and thus also its install directory
	          (like /usr/share/man/fr_FR -> .../fr).
	        - Man page translations for upcoming 5.4.0 are now handled
	          in the Translation Project.
	    * Update doc/faq.txt a little so it's less out-of-date.
	5.2.7 (2022-09-30)
	    * liblzma:
	        - Made lzma_filters_copy() to never modify the destination
	          array if an error occurs. lzma_stream_encoder() and
	          lzma_stream_encoder_mt() already assumed this. Before this
	          change, if a tiny memory allocation in lzma_filters_copy()
	          failed it would lead to a crash (invalid free() or invalid
	          memory reads) in the cleanup paths of these two encoder
	          initialization functions.
	        - Added missing integer overflow check to lzma_index_append().
	          This affects xz --list and other applications that decode
	          the Index field from .xz files using lzma_index_decoder().
	          Normal decompression of .xz files doesn't call this code
	          and thus most applications using liblzma aren't affected
	          by this bug.
	        - Single-threaded .xz decoder (lzma_stream_decoder()): If
	          lzma_code() returns LZMA_MEMLIMIT_ERROR it is now possible
	          to use lzma_memlimit_set() to increase the limit and continue
	          decoding. This was supposed to work from the beginning
	          but there was a bug. With other decoders (.lzma or
	          threaded .xz decoder) this already worked correctly.
	        - Fixed accumulation of integrity check type statistics in
	          lzma_index_cat(). This bug made lzma_index_checks() return
	          only the type of the integrity check of the last Stream
	          when multiple lzma_indexes were concatenated. Most
	          applications don't use these APIs but in xz it made
	          xz --list not list all check types from concatenated .xz
	          files. In xz --list --verbose only the per-file "Check:"
	          lines were affected and in xz --robot --list only the "file"
	          line was affected.
	        - Added ABI compatibility with executables that were linked
	          against liblzma in RHEL/CentOS 7 or other liblzma builds
	          that had copied the problematic patch from RHEL/CentOS 7
	          (xz-5.2.2-compat-libs.patch). For the details, see the
	          comment at the top of src/liblzma/validate_map.sh.
	          WARNING: This uses __symver__ attribute with GCC >= 10.
	          In other cases the traditional __asm__(".symver ...")
	          is used. Using link-time optimization (LTO, -flto) with
	          GCC versions older than 10 can silently result in
	          broken liblzma.so.5 (incorrect symbol versions)! If you
	          want to use -flto with GCC, you must use GCC >= 10.
	          LTO with Clang seems to work even with the traditional
	          __asm__(".symver ...") method.
	    * xzgrep: Fixed compatibility with old shells that break if
	      comments inside command substitutions have apostrophes (').
	      This problem was introduced in 5.2.6.
	    * Build systems:
	        - New #define in config.h: HAVE_SYMBOL_VERSIONS_LINUX
	        - Windows: Fixed liblzma.dll build with Visual Studio project
	          files. It broke in 5.2.6 due to a change that was made to
	          improve CMake support.
	        - Windows: Building liblzma with UNICODE defined should now
	          work.
	        - CMake files are now actually included in the release tarball.
	          They should have been in 5.2.5 already.
	        - Minor CMake fixes and improvements.
	    * Added a new translation: Turkish
	5.2.6 (2022-08-12)
	    * xz:
	        - The --keep option now accepts symlinks, hardlinks, and
	          setuid, setgid, and sticky files. Previously this required
	          using --force.
	        - When copying metadata from the source file to the destination
	          file, don't try to set the group (GID) if it is already set
	          correctly. This avoids a failure on OpenBSD (and possibly on
	          a few other OSes) where files may get created so that their
	          group doesn't belong to the user, and fchown(2) can fail even
	          if it needs to do nothing.
	        - Cap --memlimit-compress to 2000 MiB instead of 4020 MiB on
	          MIPS32 because on MIPS32 userspace processes are limited
	          to 2 GiB of address space.
	    * liblzma:
	        - Fixed a missing error-check in the threaded encoder. If a
	          small memory allocation fails, a .xz file with an invalid
	          Index field would be created. Decompressing such a file would
	          produce the correct output but result in an error at the end.
	          Thus this is a "mild" data corruption bug. Note that while
	          a failed memory allocation can trigger the bug, it cannot
	          cause invalid memory access.
	        - The decoder for .lzma files now supports files that have
	          uncompressed size stored in the header and still use the
	          end of payload marker (end of stream marker) at the end
	          of the LZMA stream. Such files are rare but, according to
	          the documentation in LZMA SDK, they are valid.
	          doc/lzma-file-format.txt was updated too.
	        - Improved 32-bit x86 assembly files:
	            * Support Intel Control-flow Enforcement Technology (CET)
	            * Use non-executable stack on FreeBSD.
	        - Visual Studio: Use non-standard _MSVC_LANG to detect C++
	          standard version in the lzma.h API header. It's used to
	          detect when "noexcept" can be used.
	    * xzgrep:
	        - Fixed arbitrary command injection via a malicious filename
	          (CVE-2022-1271, ZDI-CAN-16587). A standalone patch for
	          this was released to the public on 2022-04-07. A slight
	          robustness improvement has been made since then and, if
	          using GNU or *BSD grep, a new faster method is now used
	          that doesn't use the old sed-based construct at all. This
	          also fixes bad output with GNU grep >= 3.5 (2020-09-27)
	          when xzgrepping binary files.
	          This vulnerability was discovered by:
	          cleemy desu wayo working with Trend Micro Zero Day Initiative
	        - Fixed detection of corrupt .bz2 files.
	        - Improved error handling to fix exit status in some situations
	          and to fix handling of signals: in some situations a signal
	          didn't make xzgrep exit when it clearly should have. It's
	          possible that the signal handling still isn't quite perfect
	          but hopefully it's good enough.
	        - Documented exit statuses on the man page.
	        - xzegrep and xzfgrep now use "grep -E" and "grep -F" instead
	          of the deprecated egrep and fgrep commands.
	        - Fixed parsing of the options -E, -F, -G, -P, and -X. The
	          problem occurred when multiple options were specied in
	          a single argument, for example,
	              echo foo | xzgrep -Fe foo
	          treated foo as a filename because -Fe wasn't correctly
	          split into -F -e.
	        - Added zstd support.
	    * xzdiff/xzcmp:
	        - Fixed wrong exit status. Exit status could be 2 when the
	          correct value is 1.
	        - Documented on the man page that exit status of 2 is used
	          for decompression errors.
	        - Added zstd support.
	    * xzless:
	        - Fix less(1) version detection. It failed if the version number
	          from "less -V" contained a dot.
	    * Translations:
	        - Added new translations: Catalan, Croatian, Esperanto,
	          Korean, Portuguese, Romanian, Serbian, Spanish, Swedish,
	          and Ukrainian
	        - Updated the Brazilian Portuguese translation.
	        - Added French man page translation. This and the existing
	          German translation aren't complete anymore because the
	          English man pages got a few updates and the translators
	          weren't reached so that they could update their work.
	    * Build systems:
	        - Windows: Fix building of resource files when config.h isn't
	          used. CMake + Visual Studio can now build liblzma.dll.
	        - Various fixes to the CMake support. Building static or shared
	          liblzma should work fine in most cases. In contrast, building
	          the command line tools with CMake is still clearly incomplete
	          and experimental and should be used for testing only.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-21 11:03:36 +00:00
Adolf Belka
f86ae7d1a6 gdb: Patch for building with readline-8.2
- Patch required for successful building with readline-8.2
   In readline 8.2 the type of rl_completer_word_break_characters changed to
   include const.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-21 10:58:32 +00:00
Adolf Belka
1ad5a01388 readline: Update to version 8.2 plus patch 1
- Update from version 8.1 to 8.2 plus patch 1
- Update of rootfile
- Changelog
    version 8.2
	There is a new framework for readline timeouts, including new public
	 functions to set timeouts and query how much time is remaining before a
	 timeout hits, and a hook function that can trigger when readline times out.
	 There is a new state value to indicate a timeout. There is a new option:
	 `enable-active-region'. This separates control of the active region and
	 bracketed-paste. It has the same default value as bracketed-paste, and
	 enabling bracketed paste enables the active region. Users can now turn off
	 the active region while leaving bracketed paste enabled. Two new bindable
	 string variables are available; their values are terminal escape sequences
	 that set the color used to display the active region and turn it off,
	 respectively. If set, these are used in place of terminal standout mode.
	 Finally, Readline now checks for changes to locale settings
	 (LC_ALL/LC_CTYPE/LANG) each time it is called, and modifies the appropriate
	 locale-specific display and key binding variables when the locale changes.
	There are a few bug fixes in the redisplay code when restoring the prompt
	 after a digit-argument prompt or incremental search back to a prompt that
	 contains invisible multibyte characters. There are more checks for read
	 errors, especially in the middle of readline commands; previous versions
	 could loop or return incorrect data. Full details are below.
	GNU Readline is a library which provides programs with an input
	 facility including command-line editing and history.  Editing
	 commands similar to both emacs and vi are included.  The GNU
	 History library, which provides facilities for managing a list of
	 previously-typed command lines and an interactive command line
	 recall facility similar to that provided by csh, is also present.
	 The history library is built as part of the readline as well as
	 separately.
	1. Changes to Readline
		a. Fixed a problem with cleaning up active marks when using callback mode.
		b. Fixed a problem with arithmetic comparison operators checking the version.
		c. Fixed a problem that could cause readline not to build on systems without
		   POSIX signal functions.
		d. Fixed a bug that could cause readline to crash if the application removed
		   the callback line handler before readline read all typeahead.
		e. Added additional checks for read errors in the middle of readline commands.
		f. Fixed a redisplay problem that occurred when switching from the digit-
		   argument prompt `(arg: N)' back to the regular prompt and the regular
		   prompt contained invisible characters.
		g. Fixed a problem with restoring the prompt when aborting an incremental
		   search.
		h. Fix a problem with characters > 128 not being displayed correctly in certain
		   single-byte encodings.
		i. Fixed a problem with unix-filename-rubout that caused it to delete too much
		   when applied to a pathname consisting only of one or more slashes.
		j. Fixed a display problem that caused the prompt to be wrapped incorrectly if
		   the screen changed dimensions during a call to readline() and the prompt
		   became longer than the screen width.
		k. Fixed a problem that caused the \r output by turning off bracketed paste
		   to overwrite the line if terminal echo was disabled.
		l. Fixed a bug that could cause colored-completion-prefix to not display if
		   completion-prefix-display-length was set.
		m. Fixed a problem with line wrapping prompts when a group of invisible
		   characters runs to the right edge of the screen and the prompt extends
		   longer then the screen width.
		n. Fixed a couple problems that could cause rl_end to be set incorrectly by
		   transpose-words.
		o. Prevent some display problems when running a command as the result of a
		   trap or one bound using `bind -x' and the command generates output.
		p. Fixed an issue with multi-line prompt strings that have one or more
		   invisible characters at the end of a physical line.
		q. Fixed an issue that caused a history line's undo list to be cleared when
		   it should not have been.
		r. When replacing a history entry, make sure the existing entry has a non-NULL
		   timestamp before copying it; it may have been added by the application, not
		   the history library.
	2. New Features in Readline
		a. There is now an HS_HISTORY_VERSION containing the version number of the
		   history library for applications to use.
		b. History expansion better understands multiple history expansions that may
		   contain strings that would ordinarily inhibit history expansion (e.g.,
		   `abc!$!$').
		c. There is a new framework for readline timeouts, including new public
		   functions to set timeouts and query how much time is remaining before a
		   timeout hits, and a hook function that can trigger when readline times
		   out. There is a new state value to indicate a timeout.
		d. Automatically bind termcap key sequences for page-up and page-down to
		   history-search-backward and history-search-forward, respectively.
		e. There is a new `fetch-history' bindable command that retrieves the history
		   entry corresponding to its numeric argument. Negative arguments count back
		   from the end of the history.
		f. `vi-undo' is now a bindable command.
		g. There is a new option: `enable-active-region'. This separates control of
		   the active region and bracketed-paste. It has the same default value as
		   bracketed-paste, and enabling bracketed paste enables the active region.
		   Users can now turn off the active region while leaving bracketed paste
		   enabled.
		h. rl_completer_word_break_characters is now `const char *' like
		   rl_basic_word_break_characters.
		i. Readline looks in $LS_COLORS for a custom filename extension
		   (*.readline-colored-completion-prefix) and uses that as the default color
		   for the common prefix displayed when `colored-completion-prefix' is set.
		j. Two new bindable string variables: active-region-start-color and
		   active-region-end-color. The first sets the color used to display the
		   active region; the second turns it off. If set, these are used in place
		   of terminal standout mode.
		k. New readline state (RL_STATE_EOF) and application-visible variable
		   (rl_eof_found) to allow applications to detect when readline reads EOF
		   before calling the deprep-terminal hook.
		l. There is a new configuration option: --with-shared-termcap-library, which
		   forces linking the shared readline library with the shared termcap (or
		   curses/ncurses/termlib) library so applications don't have to do it.
		m. Readline now checks for changes to locale settings (LC_ALL/LC_CTYPE/LANG)
		   each time it is called, and modifies the appropriate locale-specific display
		   and key binding variables when the locale changes.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-21 10:58:32 +00:00