Commit Graph

8973 Commits

Author SHA1 Message Date
Peter Müller
2d81a451e1 Core Update 163: Ship xfsprogs and liburcu
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:27:39 +01:00
Adolf Belka
14192b69d3 liburcu: New dependency for build of xfsprogs
- Created lfs file
- Created rootfile but all entries commented out. If the use of userspace rcu becomes
   something to be required as part of IPFire then the appropriate entries in the
   rootfile can be uncommented in a future commit.
- Added liburcu to the make.sh file just before xfsprogs

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-12-03 18:27:07 +01:00
Peter Müller
aacf021ef9 Core Update 163: Ship pam
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:25:56 +01:00
Adolf Belka
43a53bc13b pam: Update to version 1.5.2
- Update from 1.5.1 to 1.5.2
- Update rootfile
- Changelog
   Release 1.5.2
     * pam_exec: implemented quiet_log option.
     * pam_mkhomedir: added support of HOME_MODE and UMASK from /etc/login.defs.
     * pam_timestamp: changed hmac algorithm to call openssl instead of the bundled
                      sha1 implementation if selected, added option to select
                      the hash algorithm to use with HMAC.
     * Added pkgconfig files for provided libraries.
     * Added --with-systemdunitdir configure option to specify systemd unit
       directory.
     * Added --with-misc-conv-bufsize configure option to specify the buffer size
       in libpam_misc's misc_conv() function, raised the default value for this
       parameter from 512 to 4096.
     * Multiple minor bug fixes, portability fixes, documentation improvements,
       and translation updates.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-12-03 18:25:39 +01:00
Peter Müller
c7d455a0db Core Update 163: Ship shadow
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:24:48 +01:00
Adolf Belka
66852447f1 shadow: Update to version 4.9
- Update from 4.2.1 (2015) to 4.9 (2021)
- Update rootfile
- Update patch for suppression of groups installation
- Changelog
    * Release 4.9
       2021-07-22  Serge Hallyn <serge@hallyn.com>
	* Updated translations (Björn Esser, Juergen Hoetzel)
	* Major salt updates (Björn Esser)
	* Various coverity and cleanup fixes (Iker Pedrosa)
	* Consistently use 0 to disable PASS_MIN_DAYS  in man (tzccinct)
	* Implement NSS support for subids and a libsubid (Serge Hallyn)
	* setfcap: retain setfcap when mapping uid 0 (Christian Brauner)
	* login.defs: include HMAC_CRYPTO_ALGO key (Iker Pedrosa)
	* selinux fixes (Christian Göttsche)
	* Fix path prefix path handling (Lucas Servén Marín)
	* Manpage updates (tzccinct, Sevan Janiyan, Iker Pedrosa, Geert Ijewski,
		谭九鼎, Jamin W. Collins, towerpark, andydna, Frans Spiesschaert)
	* Treat an empty passwd field as invalid (Haelwenn Monnier)
	* newxidmap: allow running under alternative gid (Martijn de Gouw)
	* usermod: check that  shell is executable (Geert Ijewski)
	* Add yescript support (Rodolphe Bréard)
	* useradd memleak fixes (whzhe)
	* useradd: use built-in settings by default (Ludwig Nussel)
	* getdefs: add foreign (non-shadow-utils) items (Karel Zak)
	* buffer overflow fixes (Tobias Stoeckmann)
	* Adding run-parts style for pre and post useradd/del (ed@s5h.net)
       2020-01-23  Serge Hallyn <serge@hallyn.com>
	* selinux: inclue stdio (Michael Vetter)
	* man: don't suggest making groupmems user-writeable (Michael Weiser)
	* Makefile: bail out on error in for loops (Wolfgang Bumiller)
	* Adding logging of SSH_ORIGINAL_COMMAND to nologin. (ed@s5h.net)
	* add new HOME_MODE login.defs option (Duncan Overbruck)
	* Add tty logging to useradd (ed@s5h.net)
	* Useradd: make non-executable shell check only a warning (Tomas Mraz)
	* Update Dutch translation (Frans-Spiesschaert)
	* user_busy: Do not mistake a regular user process for a namespaced one (Tomas Mraz)
	* Revert "Honor --sbindir and --bindir for binary installation" Patrick McLean)
       2019-12-20  Dave Reisner <dreisner@archlinux.org>
	* Do not auto-enable acct_tools_setuid just because
	  pam is enabled.  NOTE - any distros which are relying
	  on this behavior will need to switch to configure
	  --enable-account-tools-setuid
    * Release 4.8
       2019-12-01  Serge Hallyn <serge@hallyn.com>
	* Initial optional bcrypt support.
	* Make build/install of 'su' optional.
	* Fix for vipw not resuming correctly when suspended
	* Sync password field descriptions in manpages
	* Check for valid shell argument in useradd
	* Allow translation of new strings through POTFILES.in
	* Migrate to itstool for translations
	* Migrate to new SELinux api
	* Support --enable-vendordir
	* pwck: Only check homedir if set and not a system user
	* Support nonstandard usernames
	* sget{pw,gr}ent: check for data at EOL
	* Add YYY-MM-DD support in chage
	* Fix failing chmod calls for suidubins
	* Fix --sbindir and --bindir for binary installations
	* Fix LASTLOG_UID_MAX in login.defs
	* Fix configure error with dash
    * Release 4.7
       2019-06-13  Serge Hallyn <serge@hallyn.com>
	* Spawn: don't loop forever on ECHILD
	* Do not fail locking if there is a stale lockfile Tomas Mraz)
	* Use lckpwdf if prefix not set (Tomas Mraz)
	* Build: check correct DocBook version (Jan Tojnar)
	* Usermod: Print 'no changes' to stdout, not stderr (Serge Hallyn)
	* Add support for btrfs subvolumes for home (Adam Majer)
	* Fix chpasswd long line handling (Nathan Ruiz)
	* Use secure_getenv for gettime (Chris Lamb)
	* Make sp_lstchg reproducible (Chris Lamb)
	* Do not crash commonio_close if db file is not open (Tomas Mraz)
	* Don't flush nscd and sssd cache in read-only mode (Charlie Vuillemez)
	* French manpage update (Alban VIDAL)
	* Fix manpage defaults for SUB_UID/GID_COUNT (Tomas Mraz)
	* Sync po files from shadow.pot (Alban VIDAL)
	* Usermod: guard against unsafe chown of homedir contents (Tomas Mraz)
	* Add LASTLOG_UID_MAX to login.defs (Tomas Mraz)
	* new[ug]idmap file capabilities support (Giuseppe Scrivano and Christian Brauner)
	* Fix segfault in useradd (Tomas Mraz)
	* Coverity issues (Tomas Mraz)
	* Flush sssd caches (Jakub Hrozek)
	* Log UID in nologin (Vladimir Ivanov)
	* run pam_getenvlist after setup_env in su.c (Michael Vogt)
	* Support systems with only utmpx (A. Wilcox)
	* Fix unguarded ENABLE_SUBIDS code (Jan Chren (rindeal))
	* Update po/zh_CN translation (Lion Yang)
	* Create parent dirs for useradd -m (Michael Vetter)
	* Prevent usermod segv
	* Fix usermod crash (fariouche)
    * Release 4.6
       2018-04-29  Serge Hallyn <serge@hallyn.com>
	* Newgrp: avoid unnecessary lookups
	* Make language less binary
	* Add error when turning off man switch
	* Spelling fixes
	* Make userdel work with -R
	* newgidmap: enforce setgroups=deny if self-mapping a group
	* Norwegian bokmål translation
	* pwck: prevent crash by not passing O_CREAT
	* WITH_TCB fixes from Mandriva
	* Fix pwconv and grpconv entry skips
	* Fix -- slurping in su
	* add --prefix option
       2017-07-16  Serge Hallyn <serge@hallyn.com>
	* Import new Dutch translations.
       2017-07-10  Serge Hallyn <serge@hallyn.com>
	* Expand error codes for groupmod.
       2017-05-17  Serge Hallyn <serge@hallyn.com>
    * Release 4.5
       2017-05-17  Serge Hallyn <serge@hallyn.com>
	* Patch from Tobias Stoeckmann fixing regression in previous CVE fix
	  preventing SIGTERM to su from being propagated to the job.
	* Patch from Chris Lamb making sp_lstchg shadow field reproducible.
	* Merge Russian translation updates from Yuri Kozlov
	* Fix missing close of subuid file on error
       2017-02-23  Serge Hallyn <serge@hallyn.com>
	* Merge patch by Tobias Stoeckmann <tobias@stoeckmann.org> to fix
	  the equivalent of util-linux CVE-2017-2616.
       2017-02-08  Serge Hallyn <serge@hallyn.com>
	* Update Kazakh translations
	* Consult configuration before calculating subuids
	* Remove misplaced semicolon
       2017-01-29  Serge Hallyn <serge@hallyn.com>
	* Patch from Fedora to improve performance with SSSD, Winbind,
	  or nss_ldap. (Tomas Mraz)
	* Make sure knowndef_table is NULL-terminated.  (Bernhard Rosenkränzer)
       2016-12-21  Serge Hallyn <serge@hallyn.com>
	* Drop leading underscore from _COMMONIO_H and _SHADOWIO_H
	* Fix readability in usermod error messages.
	* Reset user in tallylog
	* Add audit support to su
    * Changes since 4.4
       2016-12-02  Serge Hallyn <serge@hallyn.com>
	  - Use sizeof rather than hardcoding snprintf args
	  - Fix useradd improper default loading
	  - Update Vietnamese translations
	  - Update Polish translations
	  - Remove non-POSIX chmod option in Makefile
	  - Fix suidubins assignments
	  - Fix --add-subuids etc spelling in manpages
	  - Audit homedir ownership change.
	  - Print error on selinux file context update failure
	  - Keep original file perms when creating a backup
    * Changes since 4.2.1:
       2016-12-02  Serge Hallyn <serge@hallyn.com>
	  - Documentation, error report and translations updates
	  - Replace path_max with 32
	  - User namespace support fixes/updates including:
	    - Correct sanity checks in newXidmap
	    - Fix building without subuid support
	    - Add /etc/subuid support for UID matching
	    - Support subuid for nonlocal users
	    - Default to 65536 subuid allocations
	    - Respect -r
	    - Check for range overflows
	  - Add tests from svn tree
	  - Use AC_CHECK_SIZEOF for uid_t size checks
	  - Accomodate missing /etc and login.defs
	  - Support FORCE_SHADOW
	  - Be more robust in hostile environment
	  - Allow removing a primary group
	  - Clear passwords on __pw_dup errors
	  - Memory leak fix in commonio_update and get_map_ranges
	  - Fix resource leak in syslog_sg
	  - Fix user busy error at userdel
	  - Support set/clear lastlog record via lastlog command
	  - Add --no-create-home as longopt for -M
	  - Fix signal races
	  - Reduce syslog priority of common usage events

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-12-03 18:24:27 +01:00
Peter Müller
51f097a25f Core Update 163: Ship curl
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:23:00 +01:00
Adolf Belka
e8e2841b1d curl: Update to version 7.80.0
- Update from 7.79.1 to 7.80.0
- Update of rootfile
- Changelog is too long to include here.
   This update fixes 172 bugs the details of which can be found in the CHANGES file in
   the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-12-03 18:22:28 +01:00
Adolf Belka
c8c179f413 elfutils: Update to version 0.186
- Update from 0.185 to 0.186
- Update of rootfile
- find-dependencies with old libs did not report any issues
- Changelog
    2021-11-10  Mark Wielaard  <mark@klomp.org>
	* configure.ac (AC_INIT): Set version to 0.186.
	* NEWS: Add translation item.
    2021-09-03  John Mellor-Crummey <johnmc@rice.edu>
	* NEWS: Read inlining info in NVIDIA extended line map
    2021-08-10  Adrian Ratiu  <adrian.ratiu@collabora.com>
	* configure.ac (AC_CACHE_CHECK): Rework std=gnu99 check to allow clang.
    2021-08-20  Saleem Abdulrasool  <abdulras@google.com>
	* Add AC_CHECK_HEADERS for error.h and err.h.
    2021-07-28  Mark Wielaard  <mark@klomp.org>
	* configure.ac (AC_CHECK_DECLS): Add reallocarray check.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-12-03 18:22:07 +01:00
Peter Müller
e1f9115d25 Core Update 163: Ship ethtool
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:21:29 +01:00
Peter Müller
e83cfbdb53 Core Update 163: Ship libgpg-error
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:20:24 +01:00
Adolf Belka
3a74750fbf libgpg-error: Update to version 1.43
- Update from 1.42 to 1.43
- Update of rootfile
- Changelog - full details can be found in the ChangeLog file in the source tarball
   Noteworthy changes in version 1.43 (2021-11-03) [C32/A32/R1]
    * Fix for building against GNU libc 2.34.  [T5547]
    * Fix build problems on macOS.  [T5440,T5610]
    * Fix gpgrt-config problems.  [T5381,T5595]
    * Fix gpgrt_free for legacy platforms.  [448bf7b01cad]
    * Fix truncation of error message in the middle of a character.  [T5048]
    * Fix the --disable-threads configure options.  [T5495]
    * Improve lock-obj generation for cross-builds [99ae862a96a5]
    * Improve cross-builds. [T5365]
    * Improve gpgrt_wait_processes.  [T5381]
    * Allow config files to read values from the Windows Registry and
      from envvars.  [b1790f4cc71f]
    * Update the Russian and Czech translations.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-12-03 18:19:59 +01:00
Peter Müller
6eab809678 Core Update 163: Ship iproute2
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:18:30 +01:00
Adolf Belka
421466526d iproute2: Update to version 5.15.0
- Update from 5.14.0 to 5.15.0
- Update of rootfile
- Changelog
    v5.15.0	Stephen Hemminger
	rdma: Fix SRQ resource tracking information json	Neta Ostrovsky
	man: devlink-port: fix pfnum for devlink port add	Antoine Tenart
	Merge branch 'managed-neighbor' into next	David Ahern
	ip, neigh: Add NTF_EXT_MANAGED support	Daniel Borkmann
	ip, neigh: Add missing NTF_USE support	Daniel Borkmann
	ip, neigh: Fix up spacing in netlink dump	Daniel Borkmann
	xfrm: enable to manage default policies	Nicolas Dichtel
	Merge branch 'rdma-optional-stats' into next	David Ahern
	uapi: pickup fix for xfrm ABI breakage	Stephen Hemminger
	iplink: enable to specify index when changing netns	Nicolas Dichtel
	Merge branch 'config-libdir' into next	David Ahern
	configure: add the --libdir option	Andrea Claudi
	configure: add the --prefix option	Andrea Claudi
	configure: support --param=value style	Andrea Claudi
	configure: simplify options parsing	Andrea Claudi
	configure: fix parsing issue with more than one value per option	Andrea Claudi
	configure: fix parsing issue on libbpf_dir option	Andrea Claudi
	configure: fix parsing issue on include_dir option	Andrea Claudi
	rdma: Add optional-counters set/unset support	Neta Ostrovsky
	rdma: Add stat "mode" support	Neta Ostrovsky
	rdma: Update uapi headers	Neta Ostrovsky
	Update kernel headers	David Ahern
	mptcp: cleanup include section.	Stephen Hemminger
	lib/bpf: fix map-in-map creation without prepopulation	Paul Chaignon
	man: devlink-port: remove extra .br	Antoine Tenart
	man: devlink-port: fix style	Antoine Tenart
	man: devlink-port: fix the devlink port add synopsis	Antoine Tenart
	Merge branch 'main' into next	David Ahern
	Merge branch 'ioam-encap-modes' into next	David Ahern
	Update documentation	Justin Iurman
	Add support for IOAM encap modes	Justin Iurman
	cmd: use spaces instead of tabs for usage indentation	Frank Villaro-Dixon
	ip: nexthop: keep cache netlink socket open	Nikolay Aleksandrov
	devlink: print maximum number of snapshots if available	Jacob Keller
	Update kernel headers	David Ahern
	mptcp: unbreak JSON endpoint list	Davide Caratti
	Merge branch 'nexthop-cache' into next	David Ahern
	ip: nexthop: add print_cache_nexthop which prints and manages the nh cache	Nikolay Aleksandrov
	ip: route: print and cache detailed nexthop information when requested	Nikolay Aleksandrov
	ip: nexthop: add a helper which retrieves and prints cached nh entry	Nikolay Aleksandrov
	ip: nexthop: add cache helpers	Nikolay Aleksandrov
	ip: nexthop: factor out ipnh_get_id rtnl talk into a helper	Nikolay Aleksandrov
	ip: nexthop: factor out print_nexthop's nh entry printing	Nikolay Aleksandrov
	ip: nexthop: parse attributes into nh entry structure before printing	Nikolay Aleksandrov
	ip: nexthop: add nh entry structure	Nikolay Aleksandrov
	ip: nexthop: split print_nh_res_group into parse and print parts	Nikolay Aleksandrov
	ip: nexthop: add resilient group structure	Nikolay Aleksandrov
	ip: export print_rta_gateway version which outputs prepared gateway string	Nikolay Aleksandrov
	ip: print_rta_if takes ifindex as device argument instead of attribute	Nikolay Aleksandrov
	Merge branch 'ax.25-netrom-rose' into next	David Ahern
	ROSE: Print decoded addresses rather than hex numbers.	Ralf Baechle
	ROSE: Add rose_ntop implementation.	Ralf Baechle
	NETROM: Print decoded addresses rather than hex numbers.	Ralf Baechle
	NETROM: Add netrom_ntop implementation.	Ralf Baechle
	AX.25: Print decoded addresses rather than hex numbers.	Ralf Baechle
	AX.25: Add ax25_ntop implementation.	Ralf Baechle
	lib: bpf_legacy: fix bpffs mount when /sys/fs/bpf exists	Andrea Claudi
	tc/f_flower: fix port range parsing	Puneet Sharma
	lib: bpf_legacy: add prog name, load time, uid and btf id in prog info dump	Gokul Sivakumar
	Merge branch 'main' into next	David Ahern
	uapi: updates from 5.-rc1	Stephen Hemminger
	ip: Support filter links/neighs with no master	Lahav Schlesinger
	man: ip-macsec: fix gcm-aes-256 formatting issue	Lennert Buytenhek
	Merge branch 'main' into next	David Ahern
	Merge branch 'bridge-mcast_router' into next	David Ahern
	bridge: vlan: add support for mcast_router option	Nikolay Aleksandrov
	bridge: vlan: set vlan option attributes while parsing	Nikolay Aleksandrov
	Update kernel headers	David Ahern
	ip: rewrite routel in python	Stephen Hemminger
	ip: remove routef script	Stephen Hemminger
	ip: remove ifcfg script	Stephen Hemminger
	ip: remove old rtpr script	Stephen Hemminger
	iptuntap: fix multi-queue flag display	David Marchand
	man: ip-link: remove double of	Nikolay Aleksandrov
	configure: restore backward compatibility	Luca Boccassi
	tree-wide: fix some typos found by Lintian	Luca Boccassi
	ip: remove leftovers from IPX and DECnet	Stephen Hemminger
	uapi: update headers from 5. merge	Stephen Hemminger
	ip/bond: add lacp active support	Hangbin Liu
	Update kernel headers	David Ahern
	ip/tunnel: always print all known attributes	Ilya Dmitrichenko
	ipioam6: use print_nl instead of print_null	Justin Iurman
	tc/skbmod: Introduce SKBMOD_F_ECN option	Peilin Ye
	IOAM man8	Justin Iurman
	New IOAM6 encap type for routes	Justin Iurman
	Add, show, link, remove IOAM namespaces and schemas	Justin Iurman
	Import ioam6 uapi headers	David Ahern
	Update kernel headers	David Ahern
	ipneigh: add support to print brief output of neigh cache in tabular format	Gokul Sivakumar
	Merge branch 'bridge-vlan-global-mcast' into next	David Ahern
	bridge: vlan: add support for dumping router ports	Nikolay Aleksandrov
	bridge: vlan: add global mcast_querier option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_startup_query_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_query_response_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_query_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_querier_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_membership_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_last_member_interval option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_startup_query_count option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_last_member_count option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_mld_version option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_igmp_version option	Nikolay Aleksandrov
	bridge: vlan: add global mcast_snooping option	Nikolay Aleksandrov
	bridge: vlan: add support to set global vlan options	Nikolay Aleksandrov
	bridge: vlan: add support for vlan filtering when dumping options	Nikolay Aleksandrov
	bridge: vlan: add support to show global vlan options	Nikolay Aleksandrov
	bridge: vlan: skip unknown attributes when printing options	Nikolay Aleksandrov
	bridge: vlan: factor out vlan option printing	Nikolay Aleksandrov
	ip: bridge: add support for mcast_vlan_snooping	Nikolay Aleksandrov

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-12-03 18:17:52 +01:00
Peter Müller
8acbce68af Start Core Update 163
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-12-03 18:15:43 +01:00
Arne Fitzenreiter
65067248d1 kernel: update to 5.15.6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-12-02 11:34:38 +01:00
Arne Fitzenreiter
b7cf050eeb core162: add systctl.conf to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 09:58:27 +01:00
Arne Fitzenreiter
ffd857d098 sysctl: kernel 5.13 has removed some scheduler variables.
sched_min_granularity_ns and sched_migration_cost_ns are not
available for sysctl anymore. They can only altered via debugfs
if scheduler debugging is enabled.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 09:50:38 +01:00
Arne Fitzenreiter
5a7f7dd587 issue/motd: add architecture warning also to console and ssh logins.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 09:35:19 +01:00
Arne Fitzenreiter
616de7524f core162: add index.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-30 09:34:20 +01:00
Arne Fitzenreiter
ef972dcf7a kernel: update arm config and rootfile (oldconfig)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-29 09:14:33 +00:00
Arne Fitzenreiter
b6ddee66fc core162: add rpi-firmware
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-27 14:24:18 +00:00
Arne Fitzenreiter
ee3da7ef37 rpi-firmware: update to 20211127
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-27 14:21:31 +00:00
Arne Fitzenreiter
4f6ef73542 cfgroot: install manualpages file
this fix the 500 internal server error becuase this file
was not installed by the patch that add the wiki links.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-25 23:57:28 +01:00
Arne Fitzenreiter
c6e9069099 suricata: rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-24 19:09:01 +00:00
Peter Müller
53055098f2 libseccomp: Update to 2.5.3
Release annnouncement as per https://github.com/seccomp/libseccomp/releases/tag/v2.5.3:

    Version 2.5.3 - November 5, 2021
        Update the syscall table for Linux v5.15
        Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
        Document that seccomp_rule_add() may return -EACCES
        Fix issues with test 11-basic-basic_errors on old kernels (API level < 5)

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 14:05:55 +00:00
Peter Müller
a1484cc31a Core Update 162: Ship ddns
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 10:02:33 +00:00
Peter Müller
a2b127c3e1 Core Update 162: Ship and restart OpenVPN
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 10:01:21 +00:00
Peter Müller
20371c8294 Core Update 162: Remove jwhois, ship currently maintained whois client
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:58:23 +00:00
Adolf Belka
30edf752e2 jwhois: Remove jwhois and all associated patches
- jwhois being replaced with whois
- Removal of jwhois lfs, rootfile and assoicated patch files.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:51:17 +00:00
Adolf Belka
c56eb6cbef whois: Installation of aan actively maintained whois client
- This whois client is being actively maintained. This version 5.5.10 was released on
   June 6th 2021 and regular updates have been ocurring several times per year.
- This client has all of its default whois servers compiled into it. These can be seen
   by reading the source files in the tarball.
- Therefore the whois.conf file is available for any additional servers that are decided
   to be required but as provided is empty.
- Installed on a vm testbed and worked to identify the details of ip addresses. Selecting
   an IP in the WUI logs screen also gets the ip information provided so it is working
   well with the WUI.

Tested-by:Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:42:11 +00:00
Peter Müller
82760a506b Core Update 162: Ship dhcpcd
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:41:22 +00:00
Peter Müller
d07fb5668d Core Update 162: Ship slang
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:40:32 +00:00
Adolf Belka
0b95de5cbf slang: Update to version 2.3.2
- Update from 2.3.0 to 2.3.2
- Update rootfile
- Changelog is too large to include here. Details can be found in the changes.txt file in
   the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:37:51 +00:00
Peter Müller
8799c54e98 Core Update 162: Ship sshfs
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:33:25 +00:00
Adolf Belka
549f5294c3 sslh: Update to version 1.22c
- Update from 1.7a (2013) to 1.22c (2021)
- Update rootfile
- Changelog is too large to include here. Full details can be read in the ChangeLog file
   in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:32:02 +00:00
Peter Müller
496dfedfa2 Core Update 162: Ship bind and libuv
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:30:56 +00:00
Adolf Belka
689246f594 libuv: Required for build and run of bind utilities
- Install libuv lfs and rootfile
- Add libuv to make.sh
- Tested by running bind utilities on a vm testbed

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:30:22 +00:00
Adolf Belka
405e359ee6 bind: Update to version 9.16.22
- Update from 9.11.32 to 9.16.22
- 9.11 is an ESV (Extended Support Version) that will go EOL in December 2021
  9.16 is the replacement ESV whose EOL is not yet defined but will be at least 4 years
   so should be supported until at least March 2024 as the 9.16 branch was started in 2020
- Update rootfile
- libuv is now required both to build the bind libraries and for the running of the
   utilities.
- Changelog is difficult to define here as this is a change of branch from 9.11 to 9.16
   both of which have been running in parallel. However all the changes from the start of
   9.16.0 can be found in the CHANGES file in the source tarball.
- nslookup, host and dig utilities tested out by installing this on a vm testbed. All
   these utilities worked as the previous version
   nsupdate was not able to be tested other than confirming that running nsupdate
   opened an interactive session. This utility would be good to be tested by someone
   familiar with how to run it.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2021-11-24 09:29:56 +00:00
Peter Müller
0deb3dacda Core Update 162: Ship changed firewall initscript
Restarting the firewall is not necessary during the upgrade procedure,
and the user is asked to reboot the machine afterwards either way.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:27:17 +00:00
Peter Müller
fddcbfd4f5 Core Update 162: Ship vpnmain.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:15:17 +00:00
Peter Müller
45221cc614 Core Update 162: Ship proxy.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:14:12 +00:00
Adolf Belka
241d8a753a meson: Update to version 0.59.2
- Update from 0.58.0 to 0.59.2
- Update rootfile
- Changelog is too long to include here.
   Full details can be read at https://mesonbuild.com/Release-notes-for-0-59-0.html

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:10:16 +00:00
Adolf Belka
2ae78be081 bison: Update to version 3.8.2
- Update from 3.7.6 to 3.8.2
- Update rootfile
- Changelog
   Noteworthy changes in release 3.8.2 (2021-09-25) [stable]
     Fixed portability issues of bison on Cygwin.
     Improvements in glr2.cc: add support for custom error messages (`%define
      parse.error custom`), allow linking several parsers together.
   Noteworthy changes in release 3.8.1 (2021-09-11) [stable]
     The generation of prototypes for yylex and yyerror in Yacc mode is
      breaking existing grammar files.  To avoid breaking too many grammars, the
      prototypes are now generated when `-y/--yacc` is used *and* the
      `POSIXLY_CORRECT` environment variable is defined.
     Avoid using `-y`/`--yacc` simply to comply with Yacc's file name
      conventions, rather, use `-o y.tab.c`.  Autoconf's AC_PROG_YACC macro uses
      `-y`.  Avoid it if possible, for instance by using gnulib's gl_PROG_BISON.
   Noteworthy changes in release 3.8 (2021-09-07) [stable]
    ** Backward incompatible changes
     In conformance with the recommendations of the Graphviz team
      (https://marc.info/?l=graphviz-devel&m=129418103126092), `-g`/`--graph`
      now generates a *.gv file by default, instead of *.dot.  A transition
      started in Bison 3.4.
     To comply with the latest POSIX standard, in Yacc compatibility mode
      (options `-y`/`--yacc`) Bison now generates prototypes for yyerror and
      yylex.  In some situations, this is breaking compatibility: if the user
      has already declared these functions but with some differences (e.g., to
      declare them as static, or to use specific attributes), the generated
      parser will fail to compile.  To disable these prototypes, #define yyerror
      (to `yyerror`), and likewise for yylex.
    ** Deprecated features
     Support for the YYPRINT macro is removed. It worked only with yacc.c and
      only for tokens.  It was obsoleted by %printer, introduced in Bison 1.50
      (November 2002).
     It has always been recommended to prefer `%define api.value.type foo` to
      `#define YYSTYPE foo`.  The latter is supported in C for compatibility
      with Yacc, but not in C++.  Warnings are now issued if `#define YYSTYPE`
      is used in C++, and eventually support will be removed.
     In C++ code, prefer value_type to semantic_type to denote the semantic
      value type, which is specified by the `api.value.type` %define variable.
    ** New features
    *** A skeleton for the D programming language
     The "lalr1.d" skeleton is now officially part of Bison.
     It was originally contributed by Oliver Mangold, based on Paolo Bonzini's
      lalr1.java, and was improved by H. S. Teoh.  Adela Vais then took over
      maintenance and invested a lot of efforts to complete, test and document
      it.
     It now supports all the bells and whistles of the other deterministic
      parsers, which include: pull/push interfaces, verbose and custom error
      messages, lookahead correction, token constructors, internationalization,
      locations, printers, token and symbol prefixes, etc.
     Two examples demonstrate the D parsers: a basic one (examples/d/simple),
      and an advanced one (examples/d/calc).
    *** Option -H, --header and directive %header
     The option `-H`/`--header` supersedes the option `--defines`, and the
      directive %header supersedes %defines.  Both `--defines` and `%defines`
      are, of course, maintained for backward compatibility.
    *** Option --html
     Since version 2.4 Bison can be used to generate HTML reports.  However it
      was a two-step process: first bison must be invoked with option `--xml`,
      and then xsltproc must be run to the convert the XML reports into HTML.
     The new option `--html` combines these steps.  The xsltproc program must
      be available.
    *** A C++ native GLR parser
     A new version of the C++ GLR parser was added: "glr2.cc".  It generates
      "true C++11", instead of a C++ wrapper around a C parser as does the
      existing "glr.cc" parser.  As a first significant consequence, it supports
      `%define api.value.type variant`, contrary to glr.cc.
     It should be upward compatible in terms of interface, feature and
      performance to "glr.cc". To try it out, simply use
      %skeleton "glr2.cc"
     It will eventually replace "glr.cc".  However we need user feedback on
      this skeleton.  _Please_ report your results and comments about it.
    *** Counterexamples
     Counterexamples now show the rule numbers, and always show ε for rules
      with an empty right-hand side.  For instance
        exp
        ↳ 1: e1       e2     "a"
             ↳ 3: ε • ↳ 1: ε
      instead of
        exp
        ↳ e1  e2  "a"
          ↳ • ↳ ε
    *** Lookahead correction in Java
     The Java skeleton (lalr1.java) now supports LAC, via the `parse.lac`
      %define variable.
    *** Abort parsing for memory exhaustion (C)
     User actions may now use `YYNOMEM` (similar to `YYACCEPT` and `YYABORT`)
      to abort the current parse with memory exhaustion.
    *** Printing locations in debug traces (C)
     The `YYLOCATION_PRINT(File, Loc)` macro prints a location.  It is defined
      when (i) locations are enabled, (ii) the default type for locations is
      used, (iii) debug traces are enabled, and (iv) `YYLOCATION_PRINT` is not
      already defined.
     Users may define `YYLOCATION_PRINT` to cover other cases.
    *** GLR traces
     There were no debug traces for deferred calls to user actions.  They are
      logged now.
   Noteworthy changes in release 3.7.6 (2021-03-08) [stable]
    ** Bug fixes
    *** Reused Push Parsers
     When a push-parser state structure is used for multiple parses, it was
      possible for some state to leak from one run into the following one.
    *** Fix Table Generation
     In some very rare conditions, when there are many useless tokens, it was
      possible to generate incorrect parsers.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:09:47 +00:00
Michael Tremer
eab7754d1e suricata: Drop extra rootfiles
These are all the same and not different from what is in
config/rootfiles/common/suricata.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:07:29 +00:00
Michael Tremer
112441db22 rust: Drop Cargo home directory after build
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:06:55 +00:00
Michael Tremer
30f411694c suricata: Include all default rules
These rules do not drop anything, but only alert when internal parts of
the engine trigger an event. This will allow us more insight on what is
happening.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:06:14 +00:00
Peter Müller
f542b16328 Core Update 162: Ship jansson
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:05:34 +00:00
Adolf Belka
d3a4c2fc50 jansson: Update to version 2.14
- Update from 2.12 to 2.14
- Update rootfile
- Changelog
   Version 2.14 Released 2021-09-09
    * New Features:
      - Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
        corresponding `nocheck` functions. (#520, by Maxim Zhukov)
    * Fixes:
      - Handle `sprintf` corner cases (#537, by Tobias Stoeckmann)
    * Build:
      - Symbol versioning for all exported symbols (#540, by Simon McVittie)
      - Fix compiler warnings (#555, by Kelvin Lee)
    * Documentation:
      - Small fixes (#544, #546, by @i-ky)
      - Sphinx 3 compatibility (#543, by Pierce Lopez)
   Version 2.13.1 Released 2020-05-07
    * Build:
      - Include `jansson_version_str()` and `jansson_version_cmp()` in
        shared library. (#534)
      - Include ``scripts/`` in tarball. (#535)
   Version 2.13 Released 2020-05-05
    * New Features:
      - Add `jansson_version_str()` and `jansson_version_cmp()` for runtime
        version checking (#465).
      - Add `json_object_update_new()`, `json_object_update_existing_new()`
        and `json_object_update_missing_new()` functions (#499).
      - Add `json_object_update_recursive()` (#505).
    * Build:
      - Add ``-Wno-format-truncation`` to suppress format truncation warnings (#489).
    * Bug fixes:
      - Remove ``strtod`` macro definition for MinGW (#498).
      - Add infinite loop check in `json_deep_copy()` (#490).
      - Add ``pipe`` macro definition for MinGW (#500).
      - Enhance ``JANSSON_ATTRS`` macro to support earlier C standard(C89) (#501).
      - Update version detection for sphinx-build (#502).
    * Documentation:
      - Fix typos (#483, #494).
      - Document that call the custom free function to free the return value
        of `json_dumps()` if you have a custom malloc/free (#490).
      - Add vcpkg installation instructions (#496).
      - Document that non-blocking file descriptor is not supported on
        `json_loadfd()` (#503).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-24 09:05:10 +00:00
Peter Müller
5c581bbb87 Core Update 162: Ship libhtp and Suricata, restart the latter
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2021-11-24 09:04:09 +00:00