Commit Graph

9475 Commits

Author SHA1 Message Date
Adolf Belka
30fbc67ea9 perl-Compress-Zlib: Renamed from Compress-Zlib
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
a47fc3aa12 perl-Canary-Stability: Renamed from Canary-Stability
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
14cf575741 perl-BerkeleyDB: Renamed from BerkeleyDB
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
8b08a90326 perl-Archive-Zip: Renamed from Archive-Zip
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
e1f8b41f00 perl-Archive-Tar: Renamed from Archive-Tar
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
smooky@v16.de
2f8ae1c282 New Addon: gptfdisk 1.0.8
>>> https://www.rodsbooks.com/gdisk/ <<<

source = https://sourceforge.net/projects/gptfdisk/files/gptfdisk/1.0.8/gptfdisk-1.0.8.tar.gz/download

Hi @ all

I have a new add-on here which I use e.g. to bring partitions from mbr to gpt without data loss.
It is also well suited for rescuing broken partitions.

GPT fdisk (consisting of the gdisk, cgdisk, sgdisk, and fixparts programs) is a set of text-mode partitioning tools for Linux,
FreeBSD, Mac OS X, and Windows.
The gdisk, cgdisk, and sgdisk programs work on Globally Unique Identifier (GUID) Partition Table (GPT) disks,
rather than on the older (and once more common) Master Boot Record (MBR) partition tables.
The fixparts program repairs certain types of damage to MBR disks and enables changing partition types from
primary to logical and vice-versa.

Signed-off-by: Marcel Follert (Smooky) <smooky@v16.de>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:11:25 +00:00
Peter Müller
d0353b73c7 perl-Net-HTTP: Fix rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-16 17:06:03 +00:00
Peter Müller
9dd886fa57 Core Update 165: Sort filelist of rm command for better readability
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:25:18 +00:00
Peter Müller
063ec85aed Core Update 165: Delete files from xtables-addons
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:24:08 +00:00
Stefan Schantl
97fe0c0823 xtables-addons: Drop package.
None of the provided modules are in use, so this package
safely can be dropped.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:20:07 +00:00
Peter Müller
3071989cfc Core Update 165: Ship changes related to P2P block removal
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:15:53 +00:00
Stefan Schantl
52c8eaac4b firewall.menu: Drop entry for P2P-Block.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:13:20 +00:00
Stefan Schantl
0b2d66c7a0 p2p-block.cgi: Drop CGI.
The support for creating P2P based rules has been removed from the
firewall. So this CGI file is not longer needed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:13:17 +00:00
Stefan Schantl
31c64b9d0d configroot: Drop config file for p2protocols.
The support for creating P2P based rules has been removed from the
firewall. So this file is not longer needed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:13:12 +00:00
Stefan Schantl
b6e4ebe86f firewall: Drop support for blocking P2P protocols.
The main P2P (peer-to-peer) aera has passed for several year now, so
this kind of feature is realy out-dated.

The feature only supports a handfull of P2P protocols (mostly unencrypted)
for applications, which have been superseeded by various other
applications and protocols.

So, this fairly is not longer required and safely can be dropped.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:12:59 +00:00
Peter Müller
f14000733b Core Update 165: Ship ipset-related changes and restart the firewall engine
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:11:28 +00:00
Stefan Schantl
5108775b59 libloc: Export DB in ipset compatible format.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:45 +00:00
Stefan Schantl
0564b0c7c9 rules.pl: Add workaround to hide a warning about an only once used variable.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:07:31 +00:00
Stefan Schantl
50e4305955 rules.pl: Check if an ipset db file exists before call to restore it.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:26 +00:00
Stefan Schantl
278289690d rules.pl: Do not try to restore the same ipset multiple times.
When an ipset list get restored, this now will be documented in a hash
and this hash also will be checked before restoring a list if this has
not be done previously.

This will prevent from restoring the same list multiple times.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:07:22 +00:00
Stefan Schantl
07106467b8 rules.pl: Move to ipset based data for location based firewall rules.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:13 +00:00
Stefan Schantl
0df1d268ed rules.pl: Move to ipset based data for LOCATIONBLOCK feature.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:07 +00:00
Stefan Schantl
6babb404cc rules.pl: Add tiny ipset_restore function.
This helper function is used to load a previously exported list of
networks for a given country code into the ipset module, so it can be
used for any kind of firewall rules.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:03 +00:00
Stefan Schantl
3d88688075 rules.pl: Destroy all ipset lists on rule reload.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:06:59 +00:00
Stefan Schantl
bbeb2a5067 rules.pl: Move flush of LOCATIONBLOCK into main flush() function.
It is required to get rid of all ipset based rules before all of
the loaded ipset lists can be destroyed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:06:54 +00:00
Stefan Schantl
19e5c03f15 location-functions.pl: Remove ending backslash from location_dir variable.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:05:36 +00:00
Stefan Schantl
a5f22bf03c location-functions.pl: Rename and set the location for exported databases to "/var/lib/location/ipset/".
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:05:22 +00:00
Peter Müller
28965d275b Core Update 165: Ship gdbm
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:04:48 +00:00
Peter Müller
5fd4dfe002 Core Update 165: Ship ovpnclients.dat
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:04:00 +00:00
Peter Müller
bccde9948b Core Update 165: Ship libarchive
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 16:57:00 +00:00
Adolf Belka
215a205a13 libarchive: Update to version 3.6.0
- Update from 3.5.2 to 3.6.0
- Update of rootfile
- Changelog
   Libarchive 3.6.0 is a feature and bugfix release.
     New features:
	    tar: new option "--no-read-sparse" (#1614)
	    tar: threads support for zstd (#1567)
	    RAR reader: filter support (#1503)
	    RAR5 reader: self-extracting archive support (#1585)
	    ZIP reader: zstd decompression support (#1518)
     Other notable bugfixes and improvements:
	    tar: respect "--ignore-zeros" in c, r and u modes (#1620)
	    reduced size of application binaries (#1625)
	    internal code optimizations
   Libarchive 3.5.3 is a security release
     Security Fixes:
	    extended fix for following symlinks when processing the fixup list
              (#1566, #1617, CVE-2021-31566)
	    fix invalid memory access and out of bounds read in RAR5 reader
              (#1491, #1492, #1493, CVE-2021-36976)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 16:56:51 +00:00
Adolf Belka
af20e3bbdc stunnel: Update to version 5.62
- Update from 5.58 to 5.62
- Update of rootfile
- Changelog
   ### Version 5.62, 2022.01.17, urgency: MEDIUM
	* New features
	  - Added a bash completion script.
	* Bugfixes
	  - Fixed a transfer() loop bug.
   ### Version 5.61, 2021.12.22, urgency: LOW
	* New features sponsored by the University of Maryland
	  - Added new "protocol = capwin" and "protocol = capwinctrl"
	    configuration file options.
	* New features for the Windows platform
	  - Added client mode allowing authenticated users to view
	    logs, reconfigure and terminate running stunnel services.
	  - Added support for multiple GUI and service instances
	    distinguised by the location of stunnel.conf.
	  - Improved log window scrolling.
	  - Added a new 'Pause auto-scroll' GUI checkbox.
	  - Double click on the icon tray replaced with single click.
	  - OpenSSL DLLs updated to version 3.0.1.
	* Other new features
	  - Rewritten the testing framework in python (thx to
	    Peter Pentchev for inspiration and initial framework).
	  - Added support for missing SSL_set_options() values.
	  - Updated stunnel.spec to support RHEL8.
	* Bugfixes
	  - Fixed OpenSSL 3.0 build.
	  - Fixed reloading configuration with
	    "systemctl reload stunnel.service".
	  - Fixed incorrect messages logged for OpenSSL errors.
	  - Fixed printing IPv6 socket option defaults on FreeBSD.
   ### Version 5.60, 2021.08.16, urgency: LOW
	* New features
	  - New 'sessionResume' service-level option to allow
	    or disallow session resumption
	  - Added support for the new SSL_set_options() values.
	  - Download fresh ca-certs.pem for each new release.
	* Bugfixes
	  - Fixed 'redirect' with 'protocol'.  This combination is
	    not supported by 'smtp', 'pop3' and 'imap' protocols.
	  - Enforced minimum WIN32 log window size.
	  - Fixed support for password-protected private keys with
	    OpenSSL 3.0 (thx to Dmitry Belyavskiy).
   ### Version 5.59, 2021.04.05, urgency: HIGH
	* Security bugfixes
	  - OpenSSL DLLs updated to version 1.1.1k.
	* New features
	  - Client-side "protocol = ldap" support (thx to Bart
	    Dopheide and Seth Grover).
	* Bugfixes
	  - The test suite fixed not to require external connectivity.
	  - Fixed paths in generated manuals (thx to Tatsuki Makino).
	  - Fixed configuration reload when compression is used.
	  - Fixed compilation with early releases of OpenSSL 1.1.1.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 16:56:31 +00:00
Peter Müller
64b72c4038 Core Update 165: Ship lcms2
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 16:44:56 +00:00
Adolf Belka
049b21c8e6 lcms2: Update to version 2.13.1
- Update from 2.12 to 2.13.1
- Update of rootfile
- Changelog
   2.13.1 Hot fix
     Fix for pure white going gray in grayscale transforms.
   2.13 Featured release
     Added support for premultiplied alpha
     tifficc can now handle alpha channels, both unassociated and premultiplied
     Better documentation
     CGATS parser can now deal with very long strings
     Added Projects for Visual Studio 2020
     Travis CI discontinued, GitHub actions used instead
     Added a very preliminar meson build script (thanks to xclaesse)
     Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
     Added thread safe code to get time
     Added automatic linear space detection
     Added cmsGetStageContextID function
     Added cmsDetectRGBProfileGamma function
     configure now accepts --without-fastfloat to turn plugin off
     autogen.sh has now a --distclean toggle to get rid of all autotools generated files
     Checked to work on STM32 Cortex-A, Cortex-M families
     Bug & typos fixing (thanks to many reporters and contributors)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 16:44:41 +00:00
Peter Müller
aed06a32c3 Core Update 165: Ship iana-etc
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 16:43:43 +00:00
Peter Müller
93f7f46bf6 Merge branch 'next' into temp-c165-development 2022-02-13 20:34:06 +00:00
Arne Fitzenreiter
419aaf916c libvirt: ship arm cpu configfiles
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-02-13 08:55:24 +00:00
Peter Müller
a20c9e44cc Merge branch 'next' into temp-c165-development 2022-02-12 13:41:37 +00:00
Arne Fitzenreiter
a17f1fbbe2 kernel: update to 5.15.23
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-02-12 07:03:49 +00:00
Arne Fitzenreiter
f978b433e6 kernel: aarch64: enable armv8 optimized crypto
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-02-11 17:36:01 +00:00
Peter Müller
10088f21d5 Core Update 165: Ship pakfire.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-11 15:22:17 +00:00
Peter Müller
6d2c63f0ac Core Update 165: Ship qos.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-11 15:17:21 +00:00
Peter Müller
fbc6b9e0c1 Core Update 165: Ship pango
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-11 15:08:05 +00:00
Adolf Belka
3bbe59b78a pango: Update to version 1.50.3
- Update from 1.50.0 to 1.50.3
- Update of rootfile
- Changelog
   Overview of changes in 1.50.3, 21-12-2021
     * pango-view: Add --serialize-to option for easy bug reporting
     * Revert a transformation change that broke metrics for vertical text
     * Handle fonts without space glyph (such as icon fonts) better
     * Fix some corner cases of line width accounting
     * Fix line height with emulated Small Caps
   Overview of changes in 1.50.2, 16-12-2021
     * Fix a problem with font fallback for Arabic
     * Fix handling of fonts without a space glyph
     * Various documentation improvements
     * Fix build issues
   Overview of changes in 1.50.1, 10-12-2021
     * Fix a crash in tab handling
     * Fix tab positioning without line wrapping
     * Fix an assertion failure found by fuzzing
     * Make underlines work again for broken fonts

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-11 15:07:51 +00:00
Peter Müller
40e2cfd3da Core Update 165: Ship harfbuzz
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-11 15:07:35 +00:00
Adolf Belka
d2eeab5189 harfbuzz: Update to version 3.3.2
- Update from 3.1.2 to 3.3.2
- Update of rootfile
- Changelog
	Overview of changes leading to 3.3.2
	  - Revert splitting of pair positioning values introduced in 3.3.0 as it proved
	    problematic. (Behdad Esfahbod)
	Overview of changes leading to 3.3.1
	  - Fix heap-use-after-free in harfbuzz-subset introduced in previous release.
	    (Garret Rieger)
	Overview of changes leading to 3.3.0
	  - Improved documentation. (Matthias Clasen)
	  - Internal code cleanup, using C++ standard library more. (Behdad Esfahbod)
	  - The low 16-bits of face index will be used by hb_face_create() to select a
	    face inside a font collection file format, while the high 16-bits will be
	    used by hb_font_create() to load the named instance. (Behdad Esfahbod)
	  - Glyph positions and other font metrics now apply synthetic slant set by
	    hb_font_set_synthetic_slant(), for improved positioning for synthetically
	    slanted fonts. (Behdad Esfahbod)
	  - Fixed unintentional locale dependency in hb_variation_to_string() for decimal
	    point representation. (Matthias Clasen)
	  - When applying pair positioning (kerning) the positioning value is split
	    between the two sides of the pair for improved cursor positioning between
	    such pairs. (Behdad Esfahbod)
	  - Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in conjunction
	    with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing re-shaping during line
	    breaking. Check the documentation for further details. (Behdad Esfahbod)
	  - Improved handling of macrolanguages when mapping BCP 47 codes to OpenType
	    tags. (David Corbett)
	  - New API:
	    +HB_GLYPH_FLAG_UNSAFE_TO_CONCAT
	    +hb_segment_properties_overlay()
	    +hb_buffer_create_similar()
	    +hb_font_set_synthetic_slant()
	    +hb_font_get_synthetic_slant()
	    +hb_font_get_var_coords_design()
	Overview of changes leading to 3.2.0
	  “harfbuzz” library improvements:
	   - Fixed shaping of Apple Color Emoji flags in right-to-left context. (Behdad Esfahbod)
	   - Fixed positioning of CFF fonts in HB_TINY profile. (Behdad Esfahbod)
	   - OpenType 1.9 language tags update. (David Corbett)
	   - Add HB_NO_VERTICAL config option.
	   - Add HB_CONFIG_OVERRIDE_H for easier configuration. (Behdad Esfahbod)
	  “harfbuzz-subset” library improvements:
	   - Improved packing of cmap, loca, and Ligature tables. (Garret Rieger)
	   - Significantly improved overflow-resolution strategy in the repacker. (Garret Rieger)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-11 15:07:19 +00:00
Peter Müller
080c9a6574 Core Update 165: Ship findutils
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-11 15:07:07 +00:00
Peter Müller
78366d9641 Samba: Fix rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-11 15:04:04 +00:00
Peter Müller
701780a3bc Python3: Fix rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-11 13:24:00 +00:00
Peter Müller
e4530e4a29 Core Update 165: Ship libusb
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-11 09:46:33 +00:00