Commit Graph

11251 Commits

Author SHA1 Message Date
Adolf Belka
2bda77fdc2 harfbuzz: Update to version 8.1.1
- Update from version 8.0.1 to 8.1.1
- Update of rootfile
- Changelog
    8.1.1
	- Fix shaping of contextual rules at the end of string, introduced in 8.1.0
	- Fix stack-overflow in repacker with malicious fonts.
	- 30% speed up loading Noto Duployan font.
    8.1.0
	- Fix long-standing build issue with the AIX compiler and older Apple clang.
	- Revert optimization that could cause timeout during subsetting with malicious fonts.
	- More optimization work:
	  - 45% speed up in shaping Noto Duployan font.
	  - 10% speed up in subsetting Noto Duployan font.
	  - Another 8% speed up in shaping Gulzar.
	  - 5% speed up in loading Roboto.
	- New API:
	  +hb_ot_layout_collect_features_map()

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:03:37 +00:00
Michael Tremer
ecb02cac7c core178: Ship gmp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:03:06 +00:00
Adolf Belka
c527a36833 gmp: Update to version 6.3.0
- Update fromn version 6.2.1 to 6.3.0
- Update of rootfile
- Changelog
    Changes between GMP version 6.2.* and 6.3.*.
       BUGS FIXED
	  * A possible overflow of type int is avoided for mpz_cmp on huge operands.
	  * A possible error condition when a malformed file is read with
	    mpz_inp_raw is now correctly handled.
       FEATURES
	  * New public function mpz_prevprime, companion of the existing
	    mpz_nextprime.
	  * New documented pointer types mpz_ptr, mpz_srcptr, and similar for
	    other GMP types. Refer to the manual for full list and suggested
	    usage. These types have been present in gmp.h at least since
	    GMP-4.0, but previously not advertised to users.
	  * Support for 64-bit Arm under Macos.
	  * Support for the loongarch64 CPU family.
	  * Support for building with LTO, link-time optimisations.
       SPEEDUPS
	  * New special code for base = 2 in mpz_powm reduces the average time
	    for the functions that test primality.
	  * Speedup for the function mpz_nextprime on large operands.
	  * Speedup for multiplications (some sizes only) thanks to new
	    internal functions to compute small negacyclic products.
	  * Special assembly code for IBM z13 and later "mainframe" CPUs, resulting in
	    a huge speedup.
	  * Improved assembly for several 64-bit x86 CPUs, Risc-V, 64-bit Arm.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:02:35 +00:00
Michael Tremer
2f847b3213 core178: Ship updated RED network init script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-07 14:13:30 +00:00
Michael Tremer
1eac1190d8 core178: Ship ppp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-07 14:12:31 +00:00
Adolf Belka
27a3ef9834 ppp: Fixes bug#13164 - Update to version 2.5.0
- Update from version 2.4.9 to 2.5.0
   This includes breaking changes for third-party plugins but as far as I can see IPFire
    is not using any third party plugins
- Update of rootfile
- Update of patches and sed commands
   - pcap-int.h and if_pppol2tp.h files have not been in source file since at least 2014
   - Some of the patches required updates as additional lines needing to be patched are
      now present. nThis was related to the O_CLOEXEC & SOCK_CLOEXEC related patches
   - connect-errors file location is now defined by a configure command --with-logfile-dir
- install-etcppp is no longer provided. However the install command in this version still
   has the same files available in /etc/ppp as previously. There is a new file,
   openssl.cnf, which I have commented out. If it is required in future it can always be
   uncommented in future releases.
- Build went without any problems with the updated patches.
- I cannot test this as I don't use ppp, however the original bug reporter has agreed to
   test this out when it is released into Testing unless anyone else is capable of testing
   it.
- Changelog
    What's new in ppp-2.5.0.
	The 2.5.0 release is a major release of pppd which contains breaking
	 changes for third-party plugins, a complete revamp of the build-system
	 and that allows for flexibility of configuring features as needed.
	In Summary:
		* Support for PEAP authentication by Eivind Næss and Rustam Kovhaev
		* Support for loading PKCS12 certificate envelopes
		* Adoption of GNU Autoconf / Automake build environment, by Eivind Næss
		  and others.
		* Support for pkgconfig tool has been added by Eivind Næss.
		* Bunch of fixes and cleanup to PPPoE and IPv6 support by Pali Rohár.
		* Major revision to PPPD's Plugin API by Eivind Næss.
		  - Defines in which describes what features was included in pppd
		  - Functions now prefixed with explicit ppp_* to indicate that
		    pppd functions being called.
		  - Header files were renamed to better align with their features,
		    and now use proper include guards
		  - A pppdconf.h file is supplied to allow third-party modules to use
		    the same feature defines pppd was compiled with.
		  - No extern declarations of internal variable names of pppd,
		    continued use of these extern variables are considered
		    unstable.
		* Lots of internal fixes and cleanups for Radius and PPPoE by Jaco Kroon
		* Dropped IPX support, as Linux has dropped support in version 5.15
		  for this protocol.
		* Many more fixes and cleanups.
		* Pppd is no longer installed setuid-root.
		* New pppd options:
		  - ipv6cp-noremote, ipv6cp-nosend, ipv6cp-use-remotenumber,
		    ipv6-up-script, ipv6-down-script
		  - -v, show-options
		  - usepeerwins, ipcp-no-address, ipcp-no-addresses, nosendip
		* On Linux, any baud rate can be set on a serial port provided the
		  kernel serial driver supports that.
	Note that if you have built and installed previous versions of this
	 package and you want to continue having configuration and TDB files in
	 /etc/ppp, you will need to use the --sysconfdir option to ./configure.
	For a list of the changes made during the 2.4 series releases of this
	 package, see the Changes-2.4 file.
	Compression methods.
		This package supports two packet compression methods: Deflate and
		 BSD-Compress.  Other compression methods which are in common use
		 include Predictor, LZS, and MPPC.  These methods are not supported for
		 two reasons - they are patent-encumbered, and they cause some packets
		 to expand slightly, which pppd doesn't currently allow for.
		 BSD-Compress and Deflate (which uses the same algorithm as gzip) don't
		 ever expand packets.

Fixes: bug#13164
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-07 14:10:42 +00:00
Matthias Fischer
ff8ce0d762 Added '/var/lib/monit/id' to '/config/backup/includes/monit' to fix Bug #13089
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-07 09:25:45 +00:00
Michael Tremer
532797ed27 core178: Ship fwhosts.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-07 09:25:02 +00:00
Michael Tremer
17ee2c11f2 core178: Ship tar
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-07 09:18:00 +00:00
Adolf Belka
4ba14aa2ba fmt: Update to version 10.0.0
- Update from version 9.1.0 to 10.0.0
- Update of rootfile
- sobump so ran ./make find dependencies. This highlighted mpd but that needs to be
   updated anyway as the existing version does not build with fmt-10.0.0
- Changelog is too large to include here. See the file ChangeLog.rst in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:18:34 +00:00
Michael Tremer
db9cecd8db core178: Ship gettext
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:18:16 +00:00
Adolf Belka
fa7641cd88 gettext: Update to version 0.22
- Update from version 0.21 to 0.22
- Update of rootfile
- Changelog
    0.22 - June 2023
	* PO file format:
	  - When a #: line contains references to file names that contain spaces,
	    these file names are surrounded by Unicode characters U+2068 and U+2069.
	    This makes it possible to parse such references correctly.
	* Improvements for maintainers:
	  - The AM_GNU_GETTEXT macro now defines two variables localedir_c and
	    localedir_c_make, that can be used in C code or in Makefiles,
	    respectively, for representing the value of the --localedir configure
	    option.
	* Programming languages support:
	  - C, C++:
	    o xgettext now supports gettext-like functions that take wide strings
	      (of type 'const wchar_t *', 'const char16_t *', or 'const char32_t *')
	      as arguments.
	    o xgettext now recognizes numbers with digit separators, as defined by
	      ISO C 23, as tokens.
	    o xgettext and msgfmt now recognize the format string directive %b
	      (for binary integer output, as defined by ISO C 23) in format strings.
	    o xgettext and msgfmt now recognize the argument size specifiers
	      w8, w16, w32, w64, wf8, wf16, wf32, wf64 (as defined by ISO C 23)
	      in format strings.
	    o xgettext and msgfmt now recognize C++ format strings, as defined by
	      ISO C++ 20.  They are marked as 'c++-format' in POT and PO files.
	      A new example has been added, 'hello-c++20', that illustrates how
	      to use these format strings with gettext.
	  - Java:
	    o The build system and tools now also support Java versions newer than
	      Java 11. This is known to work up to Java 20, at least. On the other
	      hand, support for old versions of Java (Java 1.5 and GCJ) has been
	      dropped.
	  - Tcl: xgettext now supports the \x, \u, and \U escapes as defined in
	    Tcl 8.6.
	* Portability:
	  - On systems with musl libc, the *gettext() functions in libc now work
	    with MO files generated from PO files with an encoding other than UTF-8.
	    To this effect, the msgfmt program now converts the messages to UTF-8
	    encoding before storing them in a MO file.  You can prevent this by
	    using the msgfmt --no-convert option.
	  - On systems with musl libc, the *gettext() functions in libc now work
	    with MO files generated from PO files with ISO C 99 <inttypes.h> format
	    string directive macros.  To this effect, the msgfmt program pre-expands
	    strings with such macros.  You can prevent this by using the msgfmt
	    --no-redundancy option.
	* xgettext:
	  - The xgettext option '--sorted-output' is now deprecated.
	  - xgettext input files of type PO that are not all ASCII and not UTF-8
	    encoded are now handled correctly.
	* The base Unicode standard is now updated to 15.0.0.
	* Emacs PO mode:
	  Fix an incompatibility with Emacs version 29 or newer.
    0.21.1 - October 2022
	* Runtime behaviour:
	  - On AIX, locale names with a script or with an uppercase language are now
	    supported.
	    For example, sr_Cyrl_RS.UTF-8 is treated like sr_RS.UTF-8@cyrillic, and
	    EN_US.UTF-8 is treated like en_US.UTF-8.
	* The base Unicode standard is now updated to 14.0.0.
	* Portability:
	  - Building on macOS 11/arm64 is now supported.
	  - Building on Linux/powerpc64le with glibc ≥ 2.35 is now supported.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:17:48 +00:00
Michael Tremer
efb6130fd0 core178: Ship extrahd.pl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:15:31 +00:00
Michael Tremer
88513c0ef5 extrahd: Do not try to umount if nothing is mounted
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:14:46 +00:00
Michael Tremer
80eac2b523 extrahd: Skip relative mountpoints
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:14:46 +00:00
Michael Tremer
b49e4eec45 extrahd: Rewrite the mount script in shell
This is probably a lot easier than calling all sorts of shell commands
from Perl.

The script has also changed that it will try to mount/umount all
configured mountpoints unless a specific mountpoint is being given.

An initscript will be needed to mount everything when the system is
booting up and umount everything on shutdown.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:14:46 +00:00
Michael Tremer
bd4fd21fd2 core178: Ship extrahd.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:12:48 +00:00
Michael Tremer
6ed00db36f Merge branch 'master' into next 2023-08-02 09:11:40 +00:00
Michael Tremer
c649a19441 core177: Ship suricata rulesets
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:10:22 +00:00
Stefan Schantl
422fce9cb0 ruleset-sources: Adjust download URL for snort community ruleset
Fixes: #13203

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:10:00 +00:00
Michael Tremer
91443f9234 udev: Drop hwrng rules
This is another fragment of rngd - the gift that keeps giving.

The udev rules file contains a lot of stuff for a prototype which never
went into production. So, that can be dropped.

It would have been left with one rule that starts rngd whenever a HWRNG
is being found. That is however no longer needed as rngd is being
started in the init process. We no longer need to initialize it as early
as possible to seed the kernel's PRNG.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 13:47:31 +00:00
Michael Tremer
b2cbdb1e3f core178: Ship glib
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:23:41 +00:00
Adolf Belka
5acaaf3b4c glib: Update to version 2.77.0
- Update from 2.71.1 to 2.77.0
- Update of rootfile
- Changelog is too large to include here. Details can be found in the NEWS file in the
   source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:23:21 +00:00
Adolf Belka
ec4b0a2938 groff: Update to version 1.23.0
- Update from version 1.22.4 to 1.23.0
- Update of rootfile
- Changelog is too large to show here.
   See the NEWS file in the source tarball for user visible changes. This does not
    include any bug fixes.
   For bug fixes and all commits see the ChangeLog file in the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:23:03 +00:00
Michael Tremer
1f0c7a63d3 core178: Ship ovpnmain.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:22:21 +00:00
Adolf Belka
cb8168553b gnump3d: Update perl directory in gnump3d.conf to current version
- Update perl dircetory for plugin from 5.32.1 to 5.36.0
- Perl was updated in August 2022 but this directory was missed when that update was done.
   A forum member has tried to use gnump3d and had problems because it was trying to use
   the perl 5.32.1 directory for a plugin in the gnump3d.conf file
- Bumped the PAK_VER to ensure that gniump3d is shipped.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:21:37 +00:00
Michael Tremer
3acd120b01 core178: Ship xfsprogs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:21:01 +00:00
Michael Tremer
4b80d5e6c3 core178: Ship mpfr
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:20:33 +00:00
Adolf Belka
41f497df2d libarchive: Update to version 3.7.0
- Update from version 3.6.2 to 3.7.0
- Update of rootfile
- Changelog
    3.7.0 is a feature and bugfix release.
	New features:
	    bsdunzip: new tool ported from FreeBSD (#1873)
	    drop-in replacement for Info-ZIP unzip, not yet ported for Windows
	    7zip reader: support for Zstandard compression (#1894)
	    7zip reader: support for ARM64 filter (#1918)
	    zstd filter: support for multi-frame zstd archives (#1818)
	Other notable bugfixes and improvements:
	    pax: fix year 2038 problem on platforms with 64-bit time_t (#1840)
	    Windows: Universal Windows Platform (UWP) fixes and improvements (#1879, #1883, #1885, #1840)
	    Windows: bcrypt usage fixes and improvements (#1881, #1887)
	    Windows: time function usage fixes and improvements (#1820, #1824, #1830)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:19:33 +00:00
Michael Tremer
bde5bcaf39 core178: Drop sox package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:18:55 +00:00
Adolf Belka
1fa4116cf8 sox: Remove from IPFire as no longer needed for asterix
- sox was used for asterix but that addon was removed in Core Update 158 so sox is no
   longer needed.
- remove the lfs and rootfile files and remove sox from the make.sh script

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:15:45 +00:00
Michael Tremer
37a1a3fcec Merge remote-tracking branch 'origin/master' into next 2023-07-31 09:15:31 +00:00
Arne Fitzenreiter
d95a414ce1 core177: remove rngd link also from rcsysinit.d
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-07-29 09:48:29 +02:00
Arne Fitzenreiter
e0767e7dc4 core177: apply local ssh config after update sshd
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-07-29 09:26:56 +02:00
Michael Tremer
ef7ae3fd1d Merge branch 'master' into next 2023-07-28 16:57:15 +00:00
Arne Fitzenreiter
6084fa89bf kernel: update to 6.1.42
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:34:59 +00:00
Michael Tremer
d4781c29ae core177: Fix typo in removing rngd init links
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:21:12 +00:00
Arne Fitzenreiter
8ffe9b67de core177: remove rngd if the addon was not installed via pakfire
the old version is linked against the old openssl and will fail.

fixes: #13197

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:19:56 +00:00
Arne Fitzenreiter
0bb82a95dd initskripts: remove buggy remount at halt and reboot
mount -f does nothing and also the sync calls should do nothing
on a already ro mounted filesystem.

fixes: #13195

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:06:54 +00:00
Adolf Belka
d622d1c62e openjpeg: Update to version 2.5.0
- Update from version 2.4.0 to 2.5.0
- Update of rootfile
- Changelog
    2.5.0 (May 2022)
	No API/ABI break compared to v2.4.0, but additional symbols for subset of
         components decoding (hence the MINOR version bump).
	* Encoder: add support for generation of TLM markers [\#1359]
          (https://github.com/uclouvain/openjpeg/pull/1359)
	* Decoder: add support for high throughput \(HTJ2K\) decoding. [\#1381]
          (https://github.com/uclouvain/openjpeg/pull/1381)
	* Decoder: add support for partial bitstream decoding [\#1407]
          (https://github.com/uclouvain/openjpeg/pull/1407)
	* Bug fixes (including security fixes)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
9a7a910c61 oci-python-sdk: Update to version 2.107.0
- Update from version 2.64.0 to 2.107.0
- Update of rootfile
- Changelog is too large to include here. For details look at the CHANGELOG.rst file in
   the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
148dca15f0 oci-cli: Update to version 3.29.4
- Update from version 3.7.3 to 3.29.4
- Update of rootfile
- Changelog is too large to include here. For details of the changes see the CHANGELOG.rst
   file in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Michael Tremer
cf1dd0d4c8 core178: Ship oath-toolkit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Michael Tremer
3c6ceb551a core178: Ship ntfs-3g
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
a6b7832024 nmap: Update to version 7.94
- Update from version 7.92 to 7.94
- Update of rootfile
- Changelog
    7.94 [2023-05-19]
	o Zenmap and Ndiff now use Python 3! Thanks to the many contributors who made
	  this effort possible:
	  + [GH#2088][GH#1176][Zenmap] Updated Zenmap to Python 3 and PyGObject. [Jakub Kulík]
	  + [GH#1807][GH#1176][Ndiff] Updated Ndiff to Python 3. [Brian Quigley]
	  + Additional Python 3 update fixes by Sam James, Daniel Miller. Special thanks
	    to those who opened Python 3-related issues and pull requests: Eli
	    Schwartz, Romain Leonard, Varunram Ganesh, Pavel Zhukov, Carey Balboa,
	    Hasan Aliyev, and others.
	o [Windows] Upgraded Npcap (our Windows raw packet capturing and
	  transmission driver) from version 1.71 to the latest version 1.75. It
	  includes dozens of performance improvements, bug fixes and feature
	  enhancements described at https://npcap.com/changelog.
	o Nmap now prints vendor names based on MAC address for MA-S (24-bit), MA-M
	  (28-bit), and MA-L (36-bit) registrations instead of the fixed 3-byte MAC
	  prefix used previously for lookups.
	o Added partial silent-install support to the Nmap Windows
	  installer. It previously didn't offer silent mode (/S) because the
	  free/demo version of Npcap Windoes packet capturing driver that it
	  needs and ships with doesn't include a silent installer. Now with
	  the /S option, Nmap checks whether Npcap is already installed
	  (either the free version or OEM) and will silently install itself if
	  so. This is similar to how the Wireshark installer works and is
	  particularly helpful for organizations that want to fully automate
	  their Nmap (and Npcap) deployments. See
	  https://nmap.org/nmap-silent-install for more details.
	o Lots of profile-guided memory and processing improvements for Nmap, including
	  OS fingerprint matching, probe matching and retransmission lookups for large
	  hostgroups, and service name lookups. Overhauled Nmap's string interning and
	  several other startup-related procedures to speed up start times, especially
	  for scans using OS detection. [Daniel Miller]
	o Integrated many of the most-submitted IPv4 OS fingerprints for recent
	  versions of Windows, iOS, macOS, Linux, and BSD. Added 22 fingerprints,
	  bringing the new total to 5700!
	o [NSE][GH#548] Added the tftp-version script which requests a
	  nonexistent file from a TFTP server and matches the error message
	  to a database of known software. [Mak Kolybabi]
	o [Ncat][GH#1223] Ncat can now accept "connections" from multiple UDP hosts in
	  listen mode with the --keep-open option. This also enables --broker and
	  --chat via UDP. [Daniel Miller]
	o [GH#2575] Upgraded OpenSSL binaries (for the Windows builds and for
	  RPM's) to version 3.0.8. This resolves some CVE's (CVE-2022-3602;
	  CVE-2022-3786) which don't impact Nmap proper since it doesn't do
	  certificate validation, but could possibly impact Ncat when the
	  --ssl-verify option is used.
	o Upgrade included libraries: zlib 1.2.13, Lua 5.4.4, libpcap 1.10.4
	o [GH#2532] Removed the bogus OpenSSL message from the Windows Nmap
	  executable which looked like "NSOCK ERROR ssl_init_helper(): OpenSSL
	  legacy provider failed to load." We actually already have the legacy
	  provider built-in to our OpenSSL builds, and that's why loading the
	  external one fails.
	o [GH#2541] UDP port scan (-sU) and version scan (-sV) now both use the same
	  data source, nmap-service-probes, for data payloads. Previously, the
	  nmap-payloads file was used for port scan. Port scan responses will be used
	  to kick-start the version matching process. [Daniel Miller]
	o Nmap's service scan (-sV) can now probe the UDP service behind a DTLS tunnel,
	  the same as it already does for TCP services with SSL/TLS encryption. The
	  DTLSSessionReq probe has had its rarity lowered to 2 to allow it to be sent
	  sooner in the scan. [Daniel Miller]
	o [Ncat] Ncat in listen mode with --udp --ssl will use DTLS to secure incoming
	  connections. [Daniel Miller]
	o [GH#1023] Handle Internationalized Domain Names (IDN) like Яндекс.рф on
	  platforms where getaddrinfo supports the AI_IDN flag. [Daniel Miller]
	o [Ncat] Addressed an issue from the Debian bug tracker
	  (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969314) regarding data
	  received immediately after a SOCKS CONNECT response. Ncat can now be
	  correctly used in the ProxyCommand option of OpenSSH.
	o Improved DNS domain name parsing to avoid recursion and enforce name length
	  limits, avoiding a theoretical stack overflow issue with certain crafted DNS
	  server responses, reported by Philippe Antoine.
	o [GH#2338][NSE] Fix mpint packing in ssh2 library, which was causing OpenSSH
	  errors like "ssh_dispatch_run_fatal: bignum is negative" [Sami Loone]
	o [GH#2507] Updates to the Japanese manpage translation by Taichi Kotake.
	o [Ncat][GH#1026][GH#2426] Dramatically speed up Ncat transfers on
	  Windows by avoiding a 125ms wait for every read from
	  STDIN. [scriptjunkie]
	o [GH#1192][Windows] Periodically reset the system idle timer to keep the
	  system from going to sleep while scans are in process. This only affects port
	  scans and OS detection scans, since NSE and version scan do not rely on
	  timing data to adjust speed.
	o Updated the Nmap Public Source License (NPSL) to Version 0.95. This
	  just clarifies that the derivative works definition and all other
	  license clauses only apply to parties who choose to accept the
	  license in return for the special rights granted (such as Nmap
	  redistribution rights). If a party can do everything they need to
	  using copyright provisions outside of this license such as fair use,
	  we support that and aren't trying to claim any control over their
	  work. Versions of Nmap released under previous versions of the NPSL
	  may also be used under the NPSL 0.95 terms.
	o Avoid storing many small strings from IPv4 OS detection results in the global
	  string_pool. These were effectively leaked after a host is done being
	  scanned, since string_pool allocations are not freed until Nmap quits.
    7.93 [2022-09-01]
	o This release commemorates Nmap's 25th anniversary! It all started with this
	  September 1, 1997 Phrack article by Fyodor: https://nmap.org/p51-11.html.
	o [Windows] Upgraded Npcap (our Windows raw packet capturing and
	  transmission driver) from version 1.50 to the latest version 1.71. It
	  includes dozens of performance improvements, bug fixes and feature
	  enhancements described at https://npcap.com/changelog.
	o Ensure Nmap builds with OpenSSL 3.0 using no deprecated API functions.
	  Binaries for this release include OpenSSL 3.0.5.
	o Upgrade included libraries: libssh2 1.10.0, zlib 1.2.12, Lua 5.3.6, libpcap 1.10.1
	o [GH#2416] Fix a bug that prevented Nmap from discovering interfaces on Linux
	  when no IPv4 addresses were configured. [Daniel Miller, nnposter]
	o [NSE][GH#2463] NSE "exception handling" with nmap.new_try() will no longer
	  result in a stack traceback in debug output nor a "ERROR: script execution
	  failed" message in script output, since the intended behavior has always been
	  to end the script immediately without output. [Daniel Miller]
	o [GH#2494] Update the Nmap output DTD to match actual output since the
	  `<hosthint>` element was added in Nmap 7.90.
	o [NSE][GH#2496] Fix newtargets support: since Nmap 7.92, scripts could not add
	  targets in script pre-scanning phase. [Daniel Miller]
	o [GH#2468] Scripts dhcp-discover and broadcast-dhcp-discover now support
	  setting a client identifier. [nnposter]
	o [GH#2331][GH#2471] Script oracle-tns-version was not reporting the version
	  correctly for Oracle 19c or newer [linholmes]
	o [GH#2296][GH#2342] Script redis-info was crashing or producing inaccurate
	  information about client connections and/or cluster nodes. [nnposter]
	o [GH#2379] Nmap and Nping were unable to obtain system routes on FreeBSD
	  [benpratt, nnposter]
	o [GH#2464] Script ipidseq was broken due to calling an unreachable library
	  function. [nnposter]
	o [GH#2420][GH#2436] Support for EC crypto was not properly enabled if Nmap
	  was compiled with OpenSSL in a custom location. [nnposter]
	o [NSE] Improvements to event handling and pcap socket garbage collection,
	  fixing potential hangs and crashes. [Daniel Miller]
	o We ceased creating the Nmap win32 binary zipfile. It was useful back when
	  you could just unzip it and run Nmap from there, but that hasn't worked well
	  for many years. The win32 self-installer handles Npcap installation and many
	  other dependencies and complexities. Anyone who needs the binaries for some
	  reason can still install Nmap on any system and retrieve them from there.
	  For now we're keeping the Win32 zipfile in the Nmap OEM Edition
	  (https://nmap.org/oem) for companies building Nmap into their own
	  products. But even in that case we believe that running the Nmap OEM
	  self-installer in silent mode is a better approach.
	o [GH#2388] Fix TDS7 password encoding for mssql.lua, which had been assuming
	  ASCII input even though other parts of the library had been passing it Unicode.
	o [GH#2402] Replace deprecated CPEs for IIS with their updated identifier,
	  cpe:/a:microsoft:internet_information_services [Esa Jokinen]
	o [NSE][GH#2393] Fix script-terminating error when unknown BSON data types are
	  encountered. Added parsers for most standard data types. [Daniel Miller]
	o [Ncat] Fix hostname/certificate comparison and matching to handle ASN.1
	  strings without null terminators, a similar bug to OpenSSL's CVE-2021-3712.
	o [Ncat][GH#2365] Added support for SOCKS5 proxies that return bind addresses
	  as hostnames, instead of IPv4/IPv6 addresses. [pomu0325]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
0d2b7aadda hplip: Update to version 3.23.5
- Update from version 3.22.6 to 3.23.5
- Update of rootfile
- Changelog
    3.23.5 - This release has the following changes:
	Added support for the following new Printers:
		HP Color LaserJet Enterprise 6700dn
		HP Color LaserJet Enterprise 6700
		HP Color LaserJet Enterprise 6701dn
		HP Color LaserJet Enterprise 6701
		HP Color LaserJet Enterprise X654dn
		HP Color LaserJet Enterprise X65455dn
		HP Color LaserJet Enterprise X654
		HP Color LaserJet Enterprise X65465dn
		HP Color LaserJet Enterprise X654 65 PPM
		HP Color LaserJet Enterprise X654 55 to 65ppm License
		HP Color LaserJet Enterprise X654 Down License
		HP Color LaserJet Enterprise MFP 6800dn
		HP Color LaserJet Enterprise Flow MFP 6800zf
		HP Color LaserJet Enterprise Flow MFP 6800zfsw
		HP Color LaserJet Enterprise Flow MFP 6800zfw+
		HP Color LaserJet Enterprise MFP 6800
		HP Color LaserJet Enterprise MFP 6801
		HP Color LaserJet Enterprise MFP 6801 zfsw
		HP Color LaserJet Enterprise Flow MFP 6801zfw+
		HP Color LaserJet Enterprise MFP X677 55 to 65ppm License
		HP Color LaserJet Enterprise MFP X677 65ppm
		HP Color LaserJet Enterprise MFP X677s
		HP Color LaserJet Enterprise Flow MFP X677z
		HP Color LaserJet Enterprise MFP X67765dn
		HP Color LaserJet Enterprise Flow MFP X67765zs
		HP Color LaserJet Enterprise Flow MFP X67765z+
		HP Color LaserJet Enterprise MFP X677
		HP Color LaserJet Enterprise MFP X67755dn
		HP Color LaserJet Enterprise Flow MFP X67755zs
		HP Color LaserJet Enterprise Flow MFP X67755z+
		HP Color LaserJet Enterprise MFP X677dn
		HP Color LaserJet Enterprise Flow MFP X677zs
		HP Color LaserJet Enterprise Flow MFP X677z+
		HP Color LaserJet Enterprise 5700dn
		HP Color LaserJet Enterprise 5700
		HP Color LaserJet Enterprise X55745dn
		HP Color LaserJet Enterprise X55745
		HP Color LaserJet Enterprise MFP 5800dn
		HP Color LaserJet Enterprise MFP 5800f
		HP Color LaserJet Enterprise Flow MFP 5800zf
		HP Color LaserJet Enterprise MFP 5800
		HP Color LaserJet Enterprise MFP X57945
		HP Color LaserJet Enterprise Flow MFP X57945zs
		HP Color LaserJet Enterprise MFP X57945dn
		HP Color LaserJet Enterprise Flow MFP X57945z
    3.23.3 - This release has the following changes:
	Added support for following new Distro's:
		LinuxMint 21.1
		MxLinux 21.3
		Elementary OS 7
		Ubuntu 22.10
		RHEL 8.6
		RHEL 8.7
		RHEL 9.1
		Fedora 37
	Added support for the following new Printers:
		HP Smart Tank 520_540 series
		HP Smart Tank 580-590 series
		HP Smart Tank 5100 series
		HP Smart Tank 210-220 series
    3.22.10 - This release has the following changes:
	Added support for following new Distro's:
		Manjaro 21.3
		Suse 15.4
		RHEL 9
		Linux Mint 21.0
		Mx Linux 21.2

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
00574af28d git: Update to version 2.41.0
- Update from version 2.38.1 to 2.41.0
- Update of rootfile
- Changelog is too large to show here. Look in the Source tarball in Documentation
   RelNotes and each of the version numbers released - 2.38.2, 2.38.3, 2.38.4, 2.38.5,
   2.39.0, 2.39.1, 2.39.2, 2.39.3, 2.40.0, 2.40.1, 2.41.0

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Michael Tremer
4abceaf253 core178: Ship fuse
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
adb57f7a2e fuse: Update to version 3.15.0
- Update from version 3.13.0 to 3.15.0
- Update of rootfile
- Changelog
    3.15.0 (2023-06-09)
	* Improved support for some less common systems (32 bit, alternative libcs)
	* Unsupported mount options are no longer silently accepted.
	* auto_unmount is now compatible with allow_other.
    3.14.1 (2023-03-26)
	* The extended attribute name passed to the setxattr() handler is no longer
	  truncated at the beginning (bug introduced in 3.13.0).
	* As a result of the above, the additional setattr() flags introduced in 3.14 are no
	  longer available for now. They will hopefully be reintroduced in the next release.
	* Further improvements of configuration header handling.
    3.14.0 (2023-02-17)
	* Properly fix the header installation issue. The fix in 3.13.1 resulted
	  in conflicts with other packages.
	* Introduce additional setattr() flags (FORCE, KILL_SUID, KILL_SGID, FILE,
          KILL_PRIV, OPEN, TIMES_SET)
    3.13.1 (2023-02-03)
	* Fixed an issue that resulted in errors when attempting to compile against
	  installed libfuse headers (because libc symbol versioning support was not
	  detected correctly in this case).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
4aa189ddee frr: Update to version 8.5.2
- Update from version 8.0.1 to 8.5.2
- Update of rootfile
- tar.xz versions are no longer provided by the developers. They onl provide the tar.gz
   that is automatically created by github. This started shortly after 8.0.1 was released
- Changelog is too large to include here. For full details see the changelog details at
   https://github.com/FRRouting/frr/releases

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00