Commit Graph

19853 Commits

Author SHA1 Message Date
Adolf Belka
e0423d2bf8 python3-jmespath:Update to version 1.0.1 and to work with python-3.10.8
- Updated from version 1.0.0 to 1.0.1
- Update of rootfile
- No changelog found in source tarball or other location

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
3b2dec125e python3-idna:Update to version 3.4 and to work with python-3.10.8
- Updated from version 3.3 to 3.4
- Update of rootfile
- Changelog
    3.4 (2022-09-14)
	- Update to Unicode 15.0.0
	- Migrate to pyproject.toml for build information (PEP 621)
	- Correct another instance where generic exception was raised instead of
	  IDNAError for malformed input
	- Source distribution uses zeroized file ownership for improved
	  reproducibility

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
044c371cc2 python3-docutils:Update to version 0.19 and to work with python-3.10.8
- Updated from version 0.18.1 to 0.19
- Update of rootfile
- Changelog
    Release 0.19 (2022-07-05)
	* General
	  - Dropped support for Python 2.7, 3.5, and 3.6. and removed compatibility
	    hacks from code and tests.
	  - Code cleanup,
	    check PEP 8 conformity with `flake8` (exceptions in file tox.ini).
	* docutils/__main__.py
	  - New module. Support for ``python -m docutils``.
	    Also used for the ``docutils`` console script `entry point`.
	* docutils/core.py:
	  - Let `Publisher.publish()` print info and prompt when waiting for input
	    from a terminal (cf. https://clig.dev/#interactivity).
	  - Respect "input_encoding_error_handler" setting when opening a source.
	* docutils/io.py
	  - New function `error_string()`
	    obsoletes `utils.error_reporting.ErrorString`.
	  - Class `ErrorOutput` moved here from `utils/error_reporting`.
	  - Use "utf-8-sig" instead of Python's default encoding if the
	    "input_encoding" setting is None.
	  - Fix error when reading of UTF-16 encoded source without trailing newline.
	* docutils/parsers/__init__.py
	  - Aliases "markdown" and "commonmark" point to "commonmark_wrapper".
	  - Alias for the "myst" parser (https://pypi.org/project/myst-docutils).
	  - Use absolute module names in `_parser_aliases` instead of two
	    import attempts. (Keeps details if the `recommonmark_wrapper.py` module
	    raises an ImportError.)
	  - Prepend parser name to ImportError if importing a parser class fails.
	* docutils/parsers/commonmark_wrapper.py
	  - New module for parsing CommonMark input. Selects a locally installed
	    3rd-party parser (pycmark, myst, or recommonmark).
	* docutils/parsers/recommonmark_wrapper.py
	  - Raise ImportError, if import of the upstream parser module fails.
	    If called from an `"include" directive`_,
	    the system-message now has source/line info.
	  - Adapt to and test with "recommonmark" versions 0.6.0 and 0.7.1.
	  .. _"include" directive: docs/ref/rst/directives.html#include
	* docutils/parsers/rst/__init__.py
	  - Update PEP base URL (fixes bug #445),
	    use "https:" scheme in RFC base URL.
	  - Add `reporter` to `Directive` class attributes.
	* docutils/parsers/rst/directives/__init__.py
	  - `parser_name()` keeps details if converting ImportError to ValueError.
	* docutils/parsers/rst/roles.py
	  - Don't use mutable default values for function arguments. Fixes bug #430.
	* docutils/transforms/universal.py
	  - Fix bug #435: invalid references in `problematic` nodes
	    with report_level=4.
	* docutils/utils/__init__.py
	  - `decode_path()` returns `str` instance instead of `nodes.reprunicode`.
	* docutils/utils/error_reporting.py
	  - Add deprecation warning.
	* docutils/writers/_html_base.py
	  - Add "html writers" to `config_section_dependencies`. Fixes bug #443.
	  - Write table column widths with 3 digits precision. Fixes bug #444.
	* docutils/writers/html5_polyglot/__init__.py
	  - Add space before "charset" meta tag closing sequence.
	  - Remove class value "controls" from an `image` node with video content
	    after converting it to a "control" attribute of the <video> tag.
	  - Wrap groups of footnotes in an ``<aside>`` for easier styling.
	* docutils/writers/pep_html/
	  - Use "https:" scheme in "python_home" URL default.
	  - Fix links in template.txt.
	* setup.py:
	  - New "docutils" console script `entry point`__. Fixes bug #447.
	    __ https://packaging.python.org/en/latest/specifications/entry-points/
	* test/alltests.py
	  - Always encode the log file "alltests.out" using 'utf-8'.
	* test/DocutilsTestSupport.py
	  - `exception_data()` now returns None if no exception was raised.
	  - `recommonmark_wrapper` only imported if upstream parser is present.
	* test/test_parsers/test_rst/test_directives/test_tables.py
	  - Fix bug #436: Null char valid in CSV since Python 3.11.
	* tools/docutils-cli.py
	  - Allow 3rd-party drop-in components for reader and parser, too.
	  - Fix help output.
	  - Actual code moved to docutils.__main__.py.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
5de4197685 python3-colorama:Update to version 0.4.5 and to work with python-3.10.8
- Updated from version 0.4.4 to 0.4.5
- Update of rootfile
- Changelog
	0.4.5
	  * Catch a racy ValueError that could occur on exit.
	  * Create README-hacking.md, for Colorama contributors.
	  * Tweak some README unicode characters that don't render correctly on PyPI.
	  * Fix some tests that were failing on some operating systems.
	  * Add support for Python 3.9.
	  * Add support for PyPy3.
	  * Add support for pickling with the ``dill`` module.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
f42da6c8c1 python3-click:Update to version 8.1.3 and to work with python-3.10.8
- Updated from version 8.1.2 to 8.1.3
- Update of rootfile
- Changelog
    Version 8.1.3
	-   Use verbose form of ``typing.Callable`` for ``@command`` and
	    ``@group``. :issue:`2255`
	-   Show error when attempting to create an option with
	    ``multiple=True, is_flag=True``. Use ``count`` instead.
	    :issue:`2246`

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
8815cdbe5a python3-circuitbreaker:Update to version 1.4.0 and to work with python-3.10.8
- Updated from version 1.3.2 to 1.4.0
- Update of rootfile
- Changelog
    1.4.0 Latest
	The circuitbreaker project has been classified as "Critical Project" on PyPI, meaning it belongs to the top 1% of all projects on PyPI based on the downloads over the last 6 months. We're working an important peace here 🙂
	Fallback Function
		By default, the circuit breaker will raise a CircuitBreaker exception when the circuit is opened. You can instead specify a function to be called when the circuit is opened. This function can be specified with the fallback_function parameter and will be called with the same parameters as the decorated function would be.
		Custom callable for handling exceptions
		The logic for handling thrown exceptions as failures can now be customized by passing a callable. The callable will be passed the exception type and value, and should return True if the exception should be treated as a failure.
	Monotonic clock
		Using the wall clock to measure durations is vulnerable to changes in the system clock causing misbehavior - a clock accidentally set far in the future and later reset could result in the circuit breaker remaining open for a great deal longer than expected. To solve this, a monotonic clock is now used for timing open states.
	Circuitbreaker default name
		The circuitbreaker default names are now taken from __qualname__ if available for more precise default naming.
	Fixes and tooling
		the project is now built on Github Action instead of Travis CI
		building for python 3.10
		applied smaller flake8 fixes

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
cce71b141c python3-charset-normalizer:Update to version 2.1.1 and to work with python-3.10.8
- Updated from version 2.0.12 to 2.1.1
- Update of rootfile
- Changelog
	## [2.1.1](https://github.com/Ousret/charset_normalizer/compare/2.1.0...2.1.1) (2022-08-19)
		### Deprecated
			- Function `normalize` scheduled for removal in 3.0
		### Changed
			- Removed useless call to decode in fn is_unprintable (#206)
		### Fixed
			- Third-party library (i18n xgettext) crashing not recognizing utf_8 (PEP 263) with underscore from [@aleksandernovikov](https://github.com/aleksandernovikov) (#204)
	## [2.1.0](https://github.com/Ousret/charset_normalizer/compare/2.0.12...2.1.0) (2022-06-19)
		### Added
			- Output the Unicode table version when running the CLI with `--version` (PR #194)
		### Changed
			- Re-use decoded buffer for single byte character sets from [@nijel](https://github.com/nijel) (PR #175)
			- Fixing some performance bottlenecks from [@deedy5](https://github.com/deedy5) (PR #183)
		### Fixed
			- Workaround potential bug in cpython with Zero Width No-Break Space located in Arabic Presentation Forms-B, Unicode 1.1 not acknowledged as space (PR #175)
			- CLI default threshold aligned with the API threshold from [@oleksandr-kuzmenko](https://github.com/oleksandr-kuzmenko) (PR #181)
		### Removed
			- Support for Python 3.5 (PR #192)
		### Deprecated
			- Use of backport unicodedata from `unicodedata2` as Python is quickly catching up, scheduled for removal in 3.0 (PR #194)

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
c083a72afe python3-cffi:Update to version 1.15.1 and to work with python-3.10.8
- Updated from version 1.15.0 to 1.15.1
- Update of rootfile
- Changelog
    v1.15.1
	    If you call ffi.embedding_api() but don’t write any extern “Python” function there, then the resulting C code would fail an assert. Fixed.
	    Updated Windows/arm64 embedded libffi static lib to v3.4.2, and scripted to ease future updates (thanks Niyas Sait!)

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
f3a337ece1 python3-certifi:Update to version 2022.9.4 and to work with python-3.10.8
- Updated from version 2021.10.8 to 2022.9.4
- Update of rootfile
- No changelog found in source tarball or other location

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
c28c0d6f0d python3-botocore:Update to version 1.27.89 and to work with python-3.10.8
- Updated from version 1.25.12 to 1.27.89
- Update of rootfile
- No changelog found in source tarball or other location

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
c52ff00f09 python3-attrs:Update to version 22.1.0 and to work with python-3.10.8
- Updated from version 21.4.0 to 22.1.0
- Update of rootfile
- Changelog
   22.1.0 (2022-07-28)
	Backwards-incompatible Changes
		- Python 2.7 is not supported anymore.
		  Dealing with Python 2.7 tooling has become too difficult for a volunteer-run project.
		  We have supported Python 2 more than 2 years after it was officially discontinued and feel that we have paid our dues.
		  All version up to 21.4.0 from December 2021 remain fully functional, of course.
		  `#936 <https://github.com/python-attrs/attrs/issues/936>`_
		- The deprecated ``cmp`` attribute of ``attrs.Attribute`` has been removed.
		  This does not affect the *cmp* argument to ``attr.s`` that can be used as a shortcut to set *eq* and *order* at the same time.
		  `#939 <https://github.com/python-attrs/attrs/issues/939>`_
	Changes
		- Instantiation of frozen slotted classes is now faster.
		  `#898 <https://github.com/python-attrs/attrs/issues/898>`_
		- If an ``eq`` key is defined, it is also used before hashing the attribute.
		  `#909 <https://github.com/python-attrs/attrs/issues/909>`_
		- Added ``attrs.validators.min_len()``.
		  `#916 <https://github.com/python-attrs/attrs/issues/916>`_
		- ``attrs.validators.deep_iterable()``'s *member_validator* argument now also accepts a list of validators and wraps them in an ``attrs.validators.and_()``.
		  `#925 <https://github.com/python-attrs/attrs/issues/925>`_
		- Added missing type stub re-imports for ``attrs.converters`` and ``attrs.filters``.
		  `#931 <https://github.com/python-attrs/attrs/issues/931>`_
		- Added missing stub for ``attr(s).cmp_using()``.
		  `#949 <https://github.com/python-attrs/attrs/issues/949>`_
		- ``attrs.validators._in()``'s ``ValueError`` is not missing the attribute, expected options, and the value it got anymore.
		  `#951 <https://github.com/python-attrs/attrs/issues/951>`_
		- Python 3.11 is now officially supported.
		  `#969 <https://github.com/python-attrs/attrs/issues/969>`_

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
e18e8a7020 python3-arrow:Update to version 1.2.3 and to work with python-3.10.8
- Updated from version 1.2.2 to 1.2.3
- Update of rootfile
- Changelog
   1.2.3 (2022-06-25)
	- [NEW] Added Amharic, Armenian, Georgian, Laotian and Uzbek locales.
	- [FIX] Updated Danish locale and associated tests.
	- [INTERNAl] Small fixes to CI.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:53 +00:00
Adolf Belka
fa613d31c8 rust-pyo3-build-config:Update to version 0.15.2 - required by python3-cryptography
- Updated from version 0.15.1 to 0.15.2
- Update of rootfile
- No changelog found in source tarball or other location

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
c74a3eead3 rust-pyo3-macros-backend:Update to version 0.15.2 - required by python3-cryptography
- Updated from version 0.15.1 to 0.15.2
- Update of rootfile
- No changelog found in source tarball or other location

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
fd9d183c21 rust-pyo3-macros:Update to version 0.15.2 - required by python3-cryptography
- Updated from version 0.15.1 to 0.15.2
- Update of rootfile
- No changelog found in source tarball or other location

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
9ab0df2c67 rust-pyo3:Update to version 0.15.2 - required by python3-cryptography
- Updated from version 0.15.1 to 0.15.2
- Update of rootfile
- Changelog
   ## [0.15.2] - 2022-04-14
     ### Packaging
        - Backport of PyPy 3.9 support from PyO3 0.16. [#2262](https://github.com/PyO3/pyo3/pull/2262)

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
7b43fb6b7d rust-pem:Update to version 1.1.0 - required by python3-cryptography
- Updated from version 1.0.2 to 1.1.0
- Update of rootfile
- Changelog found in source tarball stops at version 1.0.1 No changelog found elsewhere

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
217e9db591 rust-ouroboros_macro:Update to version 0.15.5 - required by python3-cryptography
- Updated from version 0.13.0 to 0.15.5
- Update of rootfile
- No changelog found in source tarball or other location

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
c8e187ba8e rust-ouroboros:Update to version 0.15.5 - required by python3-cryptography
- Updated from version 0.13.0 to 0.15.5
- Update of rootfile
- No changelog found in source tarball or other location

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
f80eb8b8f6 rust-asn1_derive:Update to version 0.12.2 - required by python3-cryptography
- Updated from version 0.8.7 to 0.12.2
- Update of rootfile
- No changelog found in source tarball or other location

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
db101b368a rust-asn1: Update to version 0.12.2 - required by python3-cryptography
- Updated from version 0.8.7 to 0.12.2
- Update of rootfile
- No changelog found in source tarball or other location

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
d116f35a36 rust-iana-time-zone: Required by updated rust-chrono
- Install of version 0.1.51
- Definition of rootfile
- Creation of metadata patch to eliminate windows options

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
9745d784b9 rust-chrono:Update to version 0.4.22 required by python3-cryptography
- Updated from version 0.4.19 to 0.4.22
- Update of rootfile
- Update of metadata patch as more windows related entries in Cargo.toml to be excluded
- Changelog
	## 0.4.22
		* Allow wasmbindgen to be optional on `wasm32-unknown-unknown` target [(#771)](https://github.com/chronotope/chrono/pull/771)
		* Fix compile error for `x86_64-fortanix-unknown-sgx` [(#767)](https://github.com/chronotope/chrono/pull/767)
		* Update `iana-time-zone` version to 1.44 [(#773)](https://github.com/chronotope/chrono/pull/773)
	## 0.4.21
		* Fall back to UTC timezone in cases where no timezone is found [(#756)](https://github.com/chronotope/chrono/pull/756)
		* Correctly detect timezone on Android [(#756)](https://github.com/chronotope/chrono/pull/756)
		* Improve documentation for strftime `%Y` specifier [(#760)](https://github.com/chronotope/chrono/pull/760)
	## 0.4.20
		* Add more formatting documentation and examples.
		* Add support for microseconds timestamps serde serialization/deserialization (#304)
		* Fix `DurationRound` is not TZ aware (#495)
		* Implement `DurationRound` for `NaiveDateTime`
		* Implement `std::iter::Sum` for `Duration`
		* Add `DateTime::from_local()` to construct from given local date and time (#572)
		* Add a function that calculates the number of years elapsed between now and a given `Date` or `DateTime` (#557)
		* Correct build for wasm32-unknown-emscripten target (#568)
		* Change `Local::now()` and `Utc::now()` documentation from "current date" to "current date and time" (#647)
		* Fix `duration_round` panic on rounding by `Duration::zero()` (#658)
		* Add optional rkyv support.
		* Add support for microseconds timestamps serde serialization for `NaiveDateTime`.
		* Add support for optional timestamps serde serialization for `NaiveDateTime`.
		* Fix build for wasm32-unknown-emscripten (@yu-re-ka #593)
		* Make `ParseErrorKind` public and available through `ParseError::kind()` (#588)
		* Implement `DoubleEndedIterator` for `NaiveDateDaysIterator` and `NaiveDateWeeksIterator`
		* Fix panicking when parsing a `DateTime` (@botahamec)
		* Add support for getting week bounds based on a specific `NaiveDate` and a `Weekday` (#666)
		* Remove libc dependency from Cargo.toml.
		* Add the `and_local_timezone` method to `NaiveDateTime`
		* Fix the behavior of `Duration::abs()` for negative durations with non-zero nanos
		* Add compatibility with rfc2822 comments (#733)
		* Make `js-sys` and `wasm-bindgen` enabled by default when target is `wasm32-unknown-unknown` for ease of API discovery
		* Add the `Months` struct and associated `Add` and `Sub` impls

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
97119282dd python3-cryptography:Update to version 38.0.1 and to work with python-3.10.8
- Updated from version 36.0.2 to 38.0.1
- Update of rootfile
- Changelog
	38.0.1 - 2022-09-07
	    Fixed parsing TLVs in ASN.1 with length greater than 65535 bytes (typically seen in large CRLs).
	38.0.0 - 2022-09-06
	    Final deprecation of OpenSSL 1.1.0. The next release of cryptography will drop support.
	    We no longer ship many linux 2010 wheels. Users should upgrade to the latest pip to ensure this doesn’t cause issues downloading wheels on their platform. We now ship manylinux_2_28 wheels for users on new enough platforms.
	    Updated the minimum supported Rust version (MSRV) to 1.48.0, from 1.41.0. Users with the latest pip will typically get a wheel and not need Rust installed, but check Installation for documentation on installing a newer rustc if required.
	    decrypt() and related methods now accept both str and bytes tokens.
	    Parsing CertificateSigningRequest restores the behavior of enforcing that the Extension critical field must be correctly encoded DER. See the issue for complete details.
	    Added two new OpenSSL functions to the bindings to support an upcoming pyOpenSSL release.
	    When parsing CertificateRevocationList and CertificateSigningRequest values, it is now enforced that the version value in the input must be valid according to the rules of RFC 2986 and RFC 5280.
	    Using MD5 or SHA1 in CertificateBuilder and other X.509 builders is deprecated and support will be removed in the next version.
	    Added additional APIs to SignedCertificateTimestamp, including signature_hash_algorithm, signature_algorithm, signature, and extension_bytes.
	    Added tbs_precertificate_bytes, allowing users to access the to-be-signed pre-certificate data needed for signed certificate timestamp verification.
	    KBKDFHMAC and KBKDFCMAC now support MiddleFixed counter location.
	    Fixed RFC 4514 name parsing to reverse the order of the RDNs according to the section 2.1 of the RFC, affecting method from_rfc4514_string().
	    It is now possible to customize some aspects of encryption when serializing private keys, using encryption_builder().
	    Removed several legacy symbols from our OpenSSL bindings. Users of pyOpenSSL versions older than 22.0 will need to upgrade.
	    Added AES128 and AES256 classes. These classes do not replace AES (which allows all AES key lengths), but are intended for applications where developers want to be explicit about key length.
	37.0.4 - 2022-07-05
	    Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.5.
	37.0.3 - 2022-06-21 (YANKED)¶
	Attention
	This release was subsequently yanked from PyPI due to a regression in OpenSSL.
	    Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.4.
	37.0.2 - 2022-05-03
	    Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.3.
	    Added a constant needed for an upcoming pyOpenSSL release.
	37.0.1 - 2022-04-27
	    Fixed an issue where parsing an encrypted private key with the public loader functions would hang waiting for console input on OpenSSL 3.0.x rather than raising an error.
	    Restored some legacy symbols for older pyOpenSSL users. These will be removed again in the future, so pyOpenSSL users should still upgrade to the latest version of that package when they upgrade cryptography.
	37.0.0 - 2022-04-26
	    Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.0.2.
	    BACKWARDS INCOMPATIBLE: Dropped support for LibreSSL 2.9.x and 3.0.x. The new minimum LibreSSL version is 3.1+.
	    BACKWARDS INCOMPATIBLE: Removed signer and verifier methods from the public key and private key classes. These methods were originally deprecated in version 2.0, but had an extended deprecation timeline due to usage. Any remaining users should transition to sign and verify.
	    Deprecated OpenSSL 1.1.0 support. OpenSSL 1.1.0 is no longer supported by the OpenSSL project. The next release of cryptography will be the last to support compiling with OpenSSL 1.1.0.
	    Deprecated Python 3.6 support. Python 3.6 is no longer supported by the Python core team. Support for Python 3.6 will be removed in a future cryptography release.
	    Deprecated the current minimum supported Rust version (MSRV) of 1.41.0. In the next release we will raise MSRV to 1.48.0. Users with the latest pip will typically get a wheel and not need Rust installed, but check Installation for documentation on installing a newer rustc if required.
	    Deprecated CAST5, SEED, IDEA, and Blowfish because they are legacy algorithms with extremely low usage. These will be removed in a future version of cryptography.
	    Added limited support for distinguished names containing a bit string.
	    We now ship universal2 wheels on macOS, which contain both arm64 and x86_64 architectures. Users on macOS should upgrade to the latest pip to ensure they can use this wheel, although we will continue to ship x86_64 specific wheels for now to ease the transition.
	    This will be the final release for which we ship manylinux2010 wheels. Going forward the minimum supported manylinux ABI for our wheels will be manylinux2014. The vast majority of users will continue to receive manylinux wheels provided they have an up to date pip. For PyPy wheels this release already requires manylinux2014 for compatibility with binaries distributed by upstream.
	    Added support for multiple OCSPSingleResponse in a OCSPResponse.
	    Restored support for signing certificates and other structures in X.509 with SHA3 hash algorithms.
	    TripleDES is disabled in FIPS mode.
	    Added support for serialization of PKCS#12 CA friendly names/aliases in serialize_key_and_certificates()
	    Added support for 12-15 byte (96 to 120 bit) nonces to AESOCB3. This class previously supported only 12 byte (96 bit).
	    Added support for AESSIV when using OpenSSL 3.0.0+.
	    Added support for serializing PKCS7 structures from a list of certificates with serialize_certificates.
	    Added support for parsing RFC 4514 strings with from_rfc4514_string().
	    Added AUTO to PSS. This can be used to verify a signature where the salt length is not already known.
	    Added DIGEST_LENGTH to PSS. This constant will set the salt length to the same length as the PSS hash algorithm.
	    Added support for loading RSA-PSS key types with load_pem_private_key() and load_der_private_key(). This functionality is limited to OpenSSL 1.1.1e+ and loads the key as a normal RSA private key, discarding the PSS constraint information.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
7a251a1fa3 python3-setuptools-scm:Update to version 7.0.5 and to work with python-3.10.8
- Updated from version 6.4.2 to 7.0.5
- Update of rootfile
- Changelog
	v7.0.5
		Merge pull request #746 from RonnyPfannschmidt/release-prep
	v7.0.4
		Merge pull request #739 from RonnyPfannschmidt/fix-738-protect-relative-to
	v7.0.3
		What's Changed
		    Hg / pip compatibility by @paugier in #729
		    fix #728: remove git arguments that triggered wrong branch names by @RonnyPfannschmidt in #730
		    fix #691 - support root in pyproject.toml even for cli by @RonnyPfannschmidt in #731
		    fix #727: correctly handle incomplete archivals from setuptools_scm_g… by @RonnyPfannschmidt in #732
		    cleanup pyproject loading and allow cli relative roots to be specified by @RonnyPfannschmidt in #736
		    Update the README: document support for Git archives by @Changaco in #734
	v7.0.2
		Merge pull request #724 from RonnyPfannschmidt/fix-722-self-bootstrap
	v7.0.1
		Merge pull request #719 from kojiromike/missing-importlib
	v7.0.0
		pre-commit update

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
47cfdd293e python3-setuptools-rust:Update to version 1.5.2 and to work with python-3.10.8
- Updated from version 1.2.0 to 1.5.2
- Update of rootfile
- Changelog
	v1.5.2
		Fixed
		    Fix regression in dylib build artifacts not being found since 1.5.0. #290
		    Fix regression in sdist missing examples and other supplementary files since 1.5.0. #291
	v1.5.1
		Fixed
		    Fix regression in get_lib_name crashing since 1.5.0. #280
		    Fix regression in Binding.Exec builds with multiple executables not finding built executables since 1.5.0. #283
	v1.5.0
		Added
		    Add support for extension modules built for wasm32-unknown-emscripten with Pyodide. #244
		Changed
		    Locate cdylib artifacts by handling messages from cargo instead of searching target dir (fixes build on MSYS2). #267
		    No longer guess cross-compile environment using HOST_GNU_TYPE / BUILD_GNU_TYPE sysconfig variables. #269
		Fixed
		    Fix RustBin build without wheel. #273
		    Fix RustBin setuptools install. #275
	v1.4.1
		Fixed
		    Fix crash when checking Rust version. #263
	v1.4.0
		Packaging
		    Increase minimum setuptools version to 62.4. #222
		Added
		    Add cargo_manifest_args to support locked, frozen and offline builds. #234
		    Add RustBin for packaging binaries in scripts data directory. #248
		Changed
		    Exec binding RustExtension with script=True is deprecated in favor of RustBin. #248
		    Errors while calling cargo metadata are now reported back to the user #254
		    quiet option will now suppress output of cargo metadata. #256
		    setuptools-rust will now match cargo behavior of not setting --target when the selected target is the rust host. #258
		    Deprecate native option of RustExtension. #258
		Fixed
		    If the sysconfig for BLDSHARED has no flags, setuptools-rust won't crash anymore. #241
	v1.3.0
		Packaging
		    Increase minimum setuptools version to 58. #222
		Fixed
		    Fix crash when python-distutils-extra linux package is installed. #222
		    Fix sdist built with vendored dependencies on Windows having incorrect cargo config. #223

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
8d7395e666 python3-pep517:Update to version 0.13.0 and to work with python-3.10.8
- Updated from version 0.12.0 to 0.13.0
- Update of rootfile
- No Changelog available in the source tarball or pypi or the github repository

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:52 +00:00
Adolf Belka
d8c94dabb5 python3-daemon: Update to version 2.3.1 and to work with python-3.10.8
- Updated from version 2.3.0 to 2.3.1
- Update of rootfile
- Changelog
    Version 2.3.1
	Bugs Fixed:
		* Avoid operations on a closed stream file when detecting a socket.
		  Closes: Pagure #64. Thanks to Mark Richman for the report.
		* Correct use of names to allow `from daemon import *`.
		  Closes: Pagure #65. Thanks to July Tikhonov for the report.
	Changed:
		* Speed daemon start time by computing candidate file descriptors once.
		  Closes: Pagure #40. Thanks to Alex Pyrgiotis for the report.
		* Remove incorrect double-patch of objects in test cases.
		  Closes: Pagure #62. Thanks to Miro Hrončok for the report.
		* Deprecate helper function `is_socket`.
		  The function incorrectly causes `ValueError` when the file object is already
		  closed. Migrate to the new `is_socket_file` helper function instead.
	Removed:
		* Drop backward-compatible helpers that provided Python 2 support.
		  * declaration of source encoding ‘utf-8’
		  * absolute_import
		  * unicode_literals
		  * module-level metaclass `type`
		  * unification of str with unicode type
		  * renamed standard library exceptions and modules
		  * raise exception from context exception
		  All these are default behaviour in Python 3 and need no special
		  handling.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:51 +00:00
Adolf Belka
b7fbfaded5 python3-build: Update to version 0.8.0 and to work with python-3.10.8
- Updated from version 0.7.0 to 0.8.0
- Update of rootfile
- Changelog
    0.8.0 (2022-05-22)
	    Accept os.PathLike[str] in addition to str for paths in public API
             (PR #392, Fixes #372)
	    Add schema validation for build-system table to check conformity with PEP 517
             and PEP 518 (PR #365, Fixes #364)
	    Better support for Python 3.11 (sysconfig schemes PR #434, PR #463,
             tomllib PR #443, warnings PR #420)
	    Improved error printouts (PR #442)
	    Avoid importing packaging unless needed (PR #395, Fixes #393)
	Breaking Changes
	    Failure to create a virtual environment in the build.env module now raises
             build.FailedProcessError (PR #442)
- As far as I can tell IPFire does not use the build.env module and the built iso
   installed successfully

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:51 +00:00
Adolf Belka
9d8a588351 python3-Cython: Removal of this module from IPFire
- New version of python3-pyfuse3 has been cythonised so Cython no longer required

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:51 +00:00
Adolf Belka
50274d92e8 make.sh: Addition, deletion and re-orderiong of packages for Python-3.10.8
- Addition of rust-iana-time-zone and removal of python3-Cython as updated python3-pyfuse
   can be built now without Cython.
- python3-toml and python3-pyproject2setuppy moved earlier as updated python3-pyparsing
   no longer has setup.py file

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:51 +00:00
Adolf Belka
a3e169e897 python3: Update to version 3.10.8
- Update from version 3.10.1 to 3.10.8
- Update of rootfile
- Changelog is too large to include hear. More details can be found at
   https://docs.python.org/3.10/whatsnew/changelog.html#changelog
- Installed Iso, created from build of this python update series, into a vm testbed clone.
   All pages and contents worked. No issues found on any WUI page.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-11-10 15:13:51 +00:00
Peter Müller
dcecf6f8a9 Core Update 172: Ship vnstat
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-08 14:39:42 +00:00
Matthias Fischer
c7369b4bf1 vnstat: Update to 2.10
For details see:
https://humdi.net/vnstat/CHANGES

"2.10 / 22-Oct-2022

 - Fixed
   - BandwidthDetection in BSD wasn't correctly converting kernel reported
     bits per second values to Mbits per second resulting in a sanity check
     being triggered and detected values not being used expect for PPPoE
     interfaces which incorrectly were detected as 64000 Mbit
   - Image output of 5 minute graph wasn't possible if data retention of the
     5 minute time period was configured as unlimited
     (pull request by Sebastian Lechte)
   - Estimates and average rates weren't calculated correctly for daily,
     monthly and yearly time periods when monitoring of the interface had been
     started during the ongoing time period
   - Estimates weren't being shown in summary output when OutputStyle or
     --style was configured with a value less than 2 (vnstat)
   - Alignment of column header in short output wasn't correct when
     OutputStyle or --style was configured with the value 0 (vnstat)
 - New
   - Support input of more than 31 characters in interface name when using
     interface1+interface2 syntax data merge queries
   - Support passing --config option multiple times, later files override
     earlier files if settings overlap (vnstat and vnstati)
   - Add configuration option EstimateVisible for controlling the visibility
     of the estimate line
   - Add configuration option EstimateText for modifying the default
     "estimated" text string when the estimate line is visible
   - Add --style support to -tr / --traffic output
   - Add summary option to --json and --xml outputs
   - Add timestamps to --json and --xml outputs
   - Add Prometheus compatible metrics endpoint cgi to examples
     (examples/vnstat-metrics.cgi)"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-08 14:39:26 +00:00
Peter Müller
0600bf162d strongSwan: Commit forgotten LFS file changes
My fault, again.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-08 14:38:32 +00:00
Peter Müller
d3a4fcc709 Core Update 172: Remove powertop add-on, if installed
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-08 11:15:05 +00:00
Peter Müller
f7b0247e02 Drop powertop
This has been discussed briefly in the telephone conference of
September: powertop is considered to be unnecessary, as IPFire is
optimized for performance, thus interfering with possible power
consumption reducing switches. Also, the need for powertop has been
diminished, given that x86 platforms are highly likely not to run on
batteries, and we are phasing out 32-bit ARM, where this could have been
the case.

Therefore, this patch proposes to drop powertop.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-08 11:13:43 +00:00
Peter Müller
0675d2a449 Core Update 172: Ship libxml2
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-08 11:13:30 +00:00
Adolf Belka
639e23b847 libxml2: Update to version 2.10.3
- Update from version 2.9.14 to 2.10.3
- Update of rootfile
- Changelog
    v2.10.3: Oct 14 2022
	### Security
		- [CVE-2022-40304] Fix dict corruption caused by entity reference cycles
		- [CVE-2022-40303] Fix integer overflows with XML_PARSE_HUGE
		- Fix overflow check in SAX2.c
	### Portability
		- win32: Fix build with VS2013
	### Build system
		- cmake: Set SOVERSION
    v2.10.2: Aug 29 2022
	### Improvements
		- Remove set-but-unused variable in xmlXPathScanName
		- Silence -Warray-bounds warning
	### Build system
		- build: require automake-1.16.3 or later (Xi Ruoyao)
		- Remove generated files from distribution
	### Test suite
		- Don't create missing.xml when running testapi
    v2.10.1: Aug 25 2022
	### Regressions
		- Fix xmlCtxtReadDoc with encoding
	### Bug fixes
		- Fix HTML parser with threads and --without-legacy
	### Build system
		- Fix build with Python 3.10
		- cmake: Disable version script on macOS
		- Remove Makefile rule to build testapi.c
	### Documentation
		- Switch back to HTML output for API documentation
		- Port doc/examples/index.py to Python 3
		- Fix order of exports in libxml2-api.xml
		- Remove libxml2-refs.xml
    v2.10.0: Aug 17 2022
	### Security
		- [CVE-2022-2309] Reset nsNr in xmlCtxtReset
		- Reserve byte for NUL terminator and report errors consistently in xmlBuf and
		  xmlBuffer (David Kilzer)
		- Fix missing NUL terminators in xmlBuf and xmlBuffer functions (David Kilzer)
		- Fix integer overflow in xmlBufferDump() (David Kilzer)
		- xmlBufAvail() should return length without including a byte for NUL
		  terminator (David Kilzer)
		- Fix ownership of xmlNodePtr & xmlAttrPtr fields in xmlSetTreeDoc() (David
		  Kilzer)
		- Use xmlNewDocText in xmlXIncludeCopyRange
		- Fix use-after-free bugs when calling xmlTextReaderClose() before
		  xmlFreeTextReader() on post-validating parser (David Kilzer)
		- Use UPDATE_COMPAT() consistently in buf.c (David Kilzer)
		- fix: xmlXPathParserContext could be double-delete in  OOM case. (jinsub ahn)
	### Removals and deprecations
		- Disable XPointer location support by default
		- Remove outdated xml2Conf.sh
		- Deprecate module init and cleanup functions
		- Remove obsolete XML Software Autoupdate (XSA) file
		- Remove DOCBparser
		- Remove obsolete Python test framework
		- Remove broken VxWorks support
		- Remove broken Mac OS 9 support
		- Remove broken bakefile support
		- Remove broken Visual Studio 2010 support
		- Remove broken Windows CE support
		- Deprecate IDREF-related functions in valid.h
		- Deprecate legacy functions
		- Disable legacy support by default
		- Deprecate all functions in nanoftp.h
		- Disable FTP support by default
		- Add XML_DEPRECATED macro
		- Remove elfgcchack.h
	### Regressions
		- Skip incorrectly opened HTML comments
		- Restore behavior of htmlDocContentDumpFormatOutput() (David Kilzer)
	### Bug fixes
		- Fix memory leak with invalid XSD
		- Make XPath depth check work with recursive invocations
		- Fix memory leak in xmlLoadEntityContent error path
		- Avoid double-free if malloc fails in inputPush
		- Properly fold whitespace around the QName value when validating an XSD
		  schema. (Damjan Jovanovic)
		- Add whitespace folding for some atomic data types that it's missing on.
		  (Damjan Jovanovic)
		- Don't add IDs containing unexpanded entity references
	### Improvements
		- Avoid calling xmlSetTreeDoc
		- Simplify xmlFreeNode
		- Don't reset nsDef when changing node content
		- Fix unintended fall-through in xmlNodeAddContentLen
		- Remove unused xmlBuf functions (David Kilzer)
		- Implement xpath1() XPointer scheme
		- Add configuration flag for XPointer locations support
		- Fix compiler warnings in Python code
		- Mark more static data as `const` (David Kilzer)
		- Make xmlStaticCopyNode non-recursive
		- Clean up encoding switching code
		- Simplify recursive pthread mutex
		- Use non-recursive mutex in dict.c
		- Fix parser progress checks
		- Avoid arithmetic on freed pointers
		- Improve buffer allocation scheme
		- Remove unneeded #includes
		- Add support for some non-standard escapes in regular expressions. (Damjan
		  Jovanovic)
		- htmlParseComment: handle abruptly-closed comments (Mike Dalessio)
		- Add let variable tag support (Oliver Diehl)
		- Add value-of tag support (Oliver Diehl)
		- Remove useless call to xmlRelaxNGCleanupTypes
		- Don't include ICU headers in public headers
		- Update `xmlStrlen()` to use POSIX / ISO C `strlen()` (Mike Dalessio)
		- Fix unused variable warnings with disabled features
		- Only warn on invalid redeclarations of predefined entities
		- Remove unneeded code in xmlreader.c
		- Rework validation context flags
	### Portability
		- Use NAN/INFINITY if available to init XPath NaN/Inf (Sergey Kosukhin)
		- Fix Python tests on macOS
		- Fix xmlCleanupThreads on Windows
		- Fix reinitialization of library on Windows
		- Don't mix declarations and code in runtest.c
		- Use portable python shebangs (David Seifert)
		- Use critical sections as mutex on Windows
		- Don't set HAVE_WIN32_THREADS in win32config.h
		- Use stdint.h with newer MSVC
		- Remove cruft from win32config.h
		- Remove isinf/isnan emulation in win32config.h
		- Always fopen files with "rb"
		- Remove __DJGPP__ checks
		- Remove useless __CYGWIN__ checks
	### Build system
		- Don't autogenerate doc/examples/Makefile.am
		- cmake: Install libxml.m4 on UNIX-like platforms (Daniel E)
		- cmake: Use symbol versioning on UNIX-like platforms (Daniel E)
		- Port genUnicode.py to Python 3
		- Port gentest.py to Python 3
		- cmake: Fix build without thread support
		- cmake: Install documentation in CMAKE_INSTALL_DOCDIR
		- cmake: Remove non needed files in docs dir (Daniel E)
		- configure: move XML_PRIVATE_LIBS after WIN32_EXTRA_LIBADD is set
		  (Christopher Degawa)
		- Move local Autoconf macros into m4 directory
		- Use XML_PRIVATE_LIBS in libxml2_la_LIBADD
		- Update libxml-2.0-uninstalled.pc.in
		- Remove LIBS from XML_PRIVATE_LIBS
		- Add WIN32_EXTRA_LIBADD to XML_PRIVATE_LIBS
		- Don't overlink executables
		- cmake: Adjust paths for UNIX or UNIX-like target systems (Daniel Engberg)
		- build: Make use of variables in libxml's pkg-config file (Daniel Engberg)
		- Avoid obsolescent `test -a` constructs (David Seifert)
		- Move AM_MAINTAINER_MODE to AM section
		- configure.ac: make AM_SILENT_RULES([yes]) unconditional (David Seifert)
		- Streamline documentation installation
		- Don't try to recreate COPYING symlink
		- Detect libm using libtool's macros (David Seifert)
		- configure.ac: disable static libraries by default (David Seifert)
		- python/Makefile.am: nest python docs in $(docdir) (David Seifert)
		- python/Makefile.am: rely on global AM_INIT_AUTOMAKE (David Seifert)
		- Makefile.am: install examples more idiomatically (David Seifert)
		- configure.ac: remove useless AC_SUBST (David Seifert)
		- Respect `--sysconfdir` in source files (David Seifert)
		- Ignore configure backup file created by recent autoreconf too (Vadim Zeitlin)
		- Only install *.html and *.c example files
		- Remove --with-html-dir option
		- Rework documentation build system
		- Remove old website
		- Use AM_PATH_PYTHON/PKG_CHECK_MODULES for python bindings (David Seifert)
		- Update genChRanges.py
		- Update build_glob.py
		- Remove ICONV_CONST test
		- Remove obsolete AC_HEADER checks
		- Don't check for standard C89 library functions
		- Don't check for standard C89 headers
		- Remove special configuration for certain maintainers
	### Test suite, CI
		- Disable network in API tests
		- testapi: remove leading slash from "/missing.xml" (Mike Gilbert)
		- Build Autotools CI tests out of source tree (VPATH)
		- Add --with-minimum build to CI tests
		- Fix warnings when testing --with-minimum build
		- cmake: Run all tests when threads are disabled
		- Also build CI tests with -Werror
		- Move doc/examples tests to new test suite
		- Simplify 'make check' targets
		- Fix schemas and relaxng tests
		- Remove unused result files
		- Allow missing result files in runtest
		- Move regexp tests to runtest
		- Move SVG tests to runtest.c
		- Move testModule to new test suite
		- Move testThreads to new test suite
		- Remove major parts of old test suite
		- Make testchar return an error on failure (Tony Tascioglu)
		- Add CI job for static build
		- python/tests: open() relative to test scripts (David Seifert)
		- Port some test scripts to Python 3
	### Documentation
		- Improve documentation of tree manipulation API
		- Update xml2-config man page
		- Consolidate man pages
		- Rename xmlcatalog_man.xml
		- Make examples a standalone HTML page
		- Fix documentation in entities.c
		- Add note about optimization flags

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-08 11:12:38 +00:00
Peter Müller
4022e2f9c3 Core Update 172: Ship expat
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-08 11:12:28 +00:00
Adolf Belka
cf25086eea expat: Update to version 2.5.0
- Update from version 2.4.9 to 2.5.0
- Update of rootfile.
- Changelog
    Release 2.5.0 Tue October 25 2022
        Security fixes:
	  #616 #649 #650  CVE-2022-43680 -- Fix heap use-after-free after overeager
	                    destruction of a shared DTD in function
	                    XML_ExternalEntityParserCreate in out-of-memory situations.
	                    Expected impact is denial of service or potentially
	                    arbitrary code execution.
        Bug fixes:
	       #612 #645  Fix curruption from undefined entities
	       #613 #654  Fix case when parsing was suspended while processing nested
	                    entities
	  #616 #652 #653  Stop leaking opening tag bindings after a closing tag
	                    mismatch error where a parser is reset through
	                    XML_ParserReset and then reused to parse
	            #656  CMake: Fix generation of pkg-config file
	            #658  MinGW|CMake: Fix static library name
        Other changes:
	            #663  Protect header expat_config.h from multiple inclusion
	            #666  examples: Make use of XML_GetBuffer and be more
	                    consistent across examples
	            #648  Address compiler warnings
	       #667 #668  Version info bumped from 9:9:8 to 9:10:8;
	                    see https://verbump.de/ for what these numbers do

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-08 11:11:57 +00:00
Peter Müller
0a65d443ef Core Update 172: Ship zlib
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-08 11:11:40 +00:00
Adolf Belka
634f46dc34 zlib: Update to version 1.2.13
- Update from version 1.2.12 to 1.2.13
- Update of rootfile
- Patches for CVE-2022-37434 removed as they are now integarted in the source tarball
- Changelog
    Changes in 1.2.13 (13 Oct 2022)
	- Fix configure issue that discarded provided CC definition
	- Correct incorrect inputs provided to the CRC functions
	- Repair prototypes and exporting of new CRC functions
	- Fix inflateBack to detect invalid input with distances too far
	- Have infback() deliver all of the available output up to any error
	- Fix a bug when getting a gzip header extra field with inflate(CVE-2022-37434)
	- Fix bug in block type selection when Z_FIXED used
	- Tighten deflateBound bounds
	- Remove deleted assembler code references
	- Various portability and appearance improvements

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-08 11:10:59 +00:00
Peter Müller
a2a695be02 Core Update 172: Ship (o|)vpnmain.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-03 16:51:19 +00:00
Peter Müller
818dde8e8b IPsec/OpenVPN: Use 4,096-bit RSA for host certificates as well
We already moved away from 2048-MODP in Core Update 170. Similarly,
German Federal Office for Information Security (BSI) recommends shifting
away from RSA keys below 3,000 bits by the end of 2022 at the latest.

The only place left in IPFire 2.x where we generate such keys is for
IPsec and OpenVPN host certificates. This patch increases their key
sizes to 4,096 bits as well - CA certificates already have this length.

Existing VPN connections cannot be migrated automatically. However, only
the respective host certificate has to be regenerated - thanks to the CA
certificates' key length being sufficient, there is no need to replace
the entire VPN CA.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-03 16:49:51 +00:00
Peter Müller
6376c155b8 Core Update 172: Ship wirelessctrl
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-03 15:14:01 +00:00
Michael Tremer
77e1061bf9 misc-progs: wirelessctrl: Fix missing whitespace for log prefix
Fixes: #12978
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-11-03 15:13:10 +00:00
Peter Müller
44fc05f634 Core Update 172: Ship rules.pl
This file should have been shipped with Core Update 171, but that was
omitted by mistake. Core Update 172 therefore finally fixes #12934 on
existing installations.

Fixes: #12934
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-10-29 09:04:07 +00:00
Peter Müller
a6f89e38db Core Update 171: Ship changes related to services.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-10-29 08:58:00 +00:00
Robin Roevens
8ed997102e services.cgi: add link to addon config if ui exists for it
* If a cgi file exists with the same name as an addon, the
  displayed service will be a link to that cgi file.

Signed-off-by: Robin Roevens <robin.roevens@disroot.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-10-29 08:56:48 +00:00