Commit Graph

3946 Commits

Author SHA1 Message Date
Adolf Belka
9a652ff69b fetchmail: Update to 6.4.19 and using python3
- Update from 6.3.26 (2013-04-23) to 6.4.19 (2021-04-24)
- Update rootfile
- Delete fetchmail-6.3.26-permit-build-without-ssl3.patch as it is not
   needed with version 6.4.19
- Added command to use python3 to lfs
- Changelog is too large to include here
   Full details can be found in NEWS file in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-06 09:53:31 +00:00
Michael Tremer
86beff5f75 collectd: Use libstatgrab for reading disk stats
Fixes: #12576
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-04 15:48:08 +00:00
Robin Roevens
8b68ed1226 misc-progs: getipstat: Refactor + extend
* Return output of iptables directly instead of writing it to files.
 * Make iptables wait for 5s if xtables is locked by another iptables
 process. (--wait 5 argument)
 * Add optional parameter "-x" to have iptables report exact numbers.
 * Add optional parameter "-f" to display  the filter table  (default).
 * Add optional parameter "-n" to display the nat table.
 * Add optional parameter "-m" to display the mangle table.
  * Adapt iptables.cgi and guardian.cgi to catch getipstat output
  instead of reading temp-files.

Signed-off-by: Robin Roevens <robin.roevens@disroot.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-04 14:27:27 +00:00
Adolf Belka
8977cdc8ff lua: Update to 5.4.3
- v2 patch version has required libraries not commented
- v2 patch version has lua.pc file commented out in the rootfile
     pkgconfig file is only required for build or development and not
     for normal running of IPFire
- v2 patch version has make linux changed to make all
     INSTALL_TOP is required - default is /usr/local
     INSTALL_DATA is required - default results in an empty rootfile
     TO_LIB is required - default results in only lua.a in rootfile
- v2 patch version includes PAK_VER updates for dnsdist and haproxy due to
     sobump. These packages showed up as dependencies to the old lua library
     ncat was also linked but already had a PAK_VER change due to a package
     upgrade and so no longer showed up in the find-dependencies scan
- Update from 5.3.5 to 5.4.3
- Autotoolize patch not update since 5.3 series
   Based on input from Michael Tremer implemented build approach
   from BLFS. This approach also used by Arch Linux. Updated lfs in
   line with approach. Added pkgconfig file lua.pc as used in BLFS.
- Update of shared_library patch obtained from BLFS
- Update of rootfile
- Removal of old lua-5.3.5 patches
- Changelog
   Main changes
     new generational mode for garbage collection
     to-be-closed variables
     const variables
     userdata can have multiple user values
     new implementation for math.random
     warning system
     debug information about function arguments and returns
     new semantics for the integer 'for' loop
     optional 'init' argument to 'string.gmatch'
     new functions 'lua_resetthread' and 'coroutine.close'
     string-to-number coercions moved to the string library
     allocation function allowed to fail when shrinking a memory block
     new format '%p' in 'string.format'
     utf8 library accepts codepoints up to 2^31

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-26 10:23:55 +00:00
Michael Tremer
53d03ef352 hostapd: Find device by MAC address
With wireless device as members in bridges, we cannot predict the name
very well. So we will use the MAC address and find the correct device
name when we launch hostapd.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:58 +00:00
Adolf Belka
b1d7e005e8 glib: Update to 2.68.1
- Update from 2.54.3 to 2.68.1
- Update rootfile
- glib-2.54.3-compile-fixes-1.patch not required, all changes now
   incorporated in the source tarball
- meson/ninja have replaced autotools
- As so's updated ran find-dependencies
   No additional programs flagged up
- Changelog is too large to include here
   Full details can be viewed in the NEWS file in the source tarball
   Large number of bugs fixed

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:57 +00:00
Michael Tremer
1d681743eb hostapd: Drop custom configuration from initscript
The initscript it setting a lot of options which are set by hostapd
which will fail to start the AP instead of using fire-and-forget.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:57 +00:00
Adolf Belka
a50af14f38 collectd: patch for successful build with updated lm_sensors
- Patch to remove checks for SENSORS_API_VERSION upper limit
   Patch based on one by Pavel Rochnyack
   https://git.ipfire.org/?p=thirdparty/collectd.git;a=commitdiff;h=d5a3c020>
- Without this patch collectd fails to build with the updated lm_sensors
   version (3-6-0) due to a problem with the version of libsensors used by
   lm_sensors

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:28:12 +00:00
Peter Müller
0cd9215b56 ppp: update to 2.4.9
This is the first ppp release for years, and the project appears to have
a different maintainer (team?) by now. As a result, some of our patches
are no longer necessary as they made it into upstream, while others need
to be adjusted slightly.

In addition, their configure script does not handle commas in CFLAGS
properly, which is why the delimiter for the 'sed' call in it has to be
changed to something neither appearing in a path nor in our CLFAGS set.

The full changelog of this release can be retrieved from
https://ppp.samba.org/README.html and says:

* Support for new EAP (Extensible Authentication Protocol) methods:
  - Support for EAP-TLS, from Jan Just Keijser and others
  - Support for EAP-MSCHAPv2, from Eivind Næss, Thomas Omerzu, Tijs
    Van Buggenhout and others

* New pppd options:
  - chap-timeout
  - chapms-strip-domain
  - replacedefaultroute
  - noreplacedefaultroute
  - ipv6cp-accept-remote
  - lcp-echo-adaptive
  - ip-up-script
  - ip-down-script
  - ca
  - capath
  - cert
  - key
  - crl-dir
  - crl
  - max-tls-version
  - need-peer-eap

* Fixes for CVE-2020-8597 and CVE-2015-3310.

* libpcap is now required when compiling on Linux (previously, if
  libpcap was not present, pppd would be compiled without packet
  filtering support).

* The rp-pppoe plugin has been renamed to pppoe, to distinguish it
  from the upstream rp-pppoe code.  Its options have changed names,
  but the old names are kept as aliases.

* The configure script now supports cross-compilation.

* Many bug fixes and cleanups.

Thanks to Michael for his hint on the ./configure CFLAGS issue.

The second version of this patch correctly updates the
src/patches/ppp/0013-everywhere-O_CLOEXEC-harder.patch patch for the
second hunk in pppd/main.c, where socket permissions have been changed
meanwhile.

Further, it has been successfully tested against a VDSL 100 line in
Germany, using PAP to Easybell via 1&1 L2 BSA. No connectivity issues or
other anomalies have been observed so far.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-11 12:21:33 +00:00
Michael Tremer
af8964d236 rpcbind: Update initscript for moved binary
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:49:47 +00:00
Adolf Belka
f9f6cbd8c6 bash: Update to 5.1 with patch 4
- Update from 5.0 with patch 18 to 5.1 wih patch 4
- Remove old bash50 patches
- Update rootfiles
- Add new bash51 patches
- Installed updated version in a vm testbed system
   All bash commands that were run, executed correctly
   Script created to redirect output to a file and ran correctly
- Changelog
1. New Features in bash-5.1 since release of bash-5.0
a. `bind -x' now supports different bindings for different editing modes and
   keymaps.
b. Bash attempts to optimize the number of times it forks when executing
   commands in subshells and from `bash -c'.
c. Here documents and here strings now use pipes for the expanded document if
   it's smaller than the pipe buffer size, reverting to temporary files if it's
   larger.
d. There are new loadable builtins: mktemp, accept, mkfifo, csv, cut/lcut
e. In posix mode, `trap -p' now displays signals whose disposition is SIG_DFL
   and those that were SIG_IGN when the shell starts.
f. The shell now expands the history number (e.g., in PS1) even if it is not
   currently saving commands to the history list.
g. `read -e' may now be used with arbitrary file descriptors (`read -u N').
h. The `select' builtin now runs traps if its internal call to the read builtin
   is interrupted by a signal.
i. SRANDOM: a new variable that expands to a 32-bit random number that is not
   produced by an LCRNG, and uses getrandom/getentropy, falling back to
   /dev/urandom or arc4random if available. There is a fallback generator if
   none of these are available.
j. shell-transpose-words: a new bindable readline command that uses the same
   definition of word as shell-forward-word, etc.
k. The shell now adds default bindings for shell-forward-word,
   shell-backward-word, shell-transpose-words, and shell-kill-word.
l. Bash now allows ARGV0 appearing in the initial shell environment to set $0.
m. If `unset' is executed without option arguments, bash tries to unset a shell
   function if a name argument cannot be a shell variable name because it's not
   an identifier.
n. The `test -N' operator uses nanosecond timestamp granularity if it's
   available.
o. Bash posix mode now treats assignment statements preceding shell function
   definitions the same as in its default mode, since POSIX has changed and
   no longer requires those assignments to persist after the function returns
   (POSIX interp 654).
p. BASH_REMATCH is no longer readonly.
q. wait: has a new -p VARNAME option, which stores the PID returned by `wait -n'
   or `wait' without arguments.
r. Sorting the results of pathname expansion now uses byte-by-byte comparisons
   if two strings collate equally to impose a total order; the result of a
   POSIX interpretation.
s. Bash now allows SIGINT trap handlers to execute recursively.
t. Bash now saves and restores state around setting and unsetting posix mode,
   instead of having unsetting posix mode set a known state.
u. Process substitution is now available in posix mode.
v. READLINE_MARK: a new variable available while executing commands bound with
   `bind -x', contains the value of the mark.
w. Bash removes SIGCHLD from the set of blocked signals if it's blocked at shell
   startup.
x. `test -v N' can now test whether or not positional parameter N is set.
y. `local' now honors the `-p' option to display all local variables at the
    current context.
z. The `@a' variable transformation now prints attributes for unset array
   variables.
aa. The `@A' variable transformation now prints a declare command that sets a
    variable's attributes if the variable has attributes but is unset.
bb. `declare' and `local' now have a -I option that inherits attributes and
    value from a variable with the same name at a previous scope.
cc. When run from a -c command, `jobs' now reports the status of completed jobs.
dd. New `U', `u', and `L' parameter transformations to convert to uppercase,
    convert first character to uppercase, and convert to lowercase,
    respectively.
ee. PROMPT_COMMAND: can now be an  array variable, each element of which can
    contain a command to be executed like a string PROMPT_COMMAND variable.
ff. `ulimit' has a -R option to report and set the RLIMIT_RTTIME resource.
gg. Associative arrays may be assigned using a list of key-value pairs within
    a compound assignment. Compound assignments where the words are not of
    the form [key]=value are assumed to be key-value assignments. A missing or
    empty key is an error; a missing value is treated as NULL. Assignments may
    not mix the two forms.
hh. New `K' parameter transformation to display associative arrays as key-
    value pairs.
ii. Writing history to syslog now handles messages longer than the syslog max
    length by writing multiple messages with a sequence number.
jj. SECONDS and RANDOM may now be assigned using arithmetic expressions, since
    they are nominally integer variables. LINENO is not an integer variable.
kk. Bash temporarily suppresses the verbose option when running the DEBUG trap
    while running a command from the `fc' builtin.
ll. `wait -n' now accepts a list of job specifications as arguments and will
    wait for the first one in the list to change state.
mm. The associative array implementation can now dynamically increase the
    size of the hash table based on insertion patterns.
nn. HISTFILE is now readonly in a restricted shell.
oo. The bash malloc now returns memory that is 16-byte aligned on 64-bit
    systems.
pp. If the hash builtin is listing hashed filenames portably, don't print
   anything if the table is empty.
qq. GLOBIGNORE now ignores `.' and `..' as a terminal pathname component.
rr. Bash attempts to optimize away forks in the last command in a function body
    under appropriate circumstances.
ss. The globbing code now uses fnmatch(3) to check collation elements (if
    available) even in cases without multibyte characters.
tt. The `fg' and `bg' builtins now return an error in a command substitution
    when asked to restart a job inherited from the parent shell.
uu. The shell now attempts to unlink all FIFOs on exit, whether a consuming
    process has finished with them or not.
vv. There is a new contributed loadable builtin: asort.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:37:50 +00:00
Adolf Belka
38e1646bc1 readline: Updated to 8.1
- Updated from 8.0 with patch 1 to 8.1 with no patches
- Commented out the patch section in the lfs as no current patches
   When patches are issued then the patch section can be uncommented
- Update rootfiles
- Remove old readline patches
- Changelog
New Features in readline-8.1 since the release of readline-8.0
a. If a second consecutive completion attempt produces matches where the first
   did not, treat it as a new completion attempt and insert a match as
   appropriate.
b. Bracketed paste mode works in more places: incremental search strings, vi
   overstrike mode, character search, and reading numeric arguments.
c. Readline automatically switches to horizontal scrolling if the terminal has
   only one line.
d. Unbinding all key sequences bound to a particular readline function now
   descends into keymaps for multi-key sequences.
e. rl-clear-display: new bindable command that clears the screen and, if
   possible, the scrollback buffer (bound to emacs mode M-C-l by default).
f. New active mark and face feature: when enabled, it will highlight the text
   inserted by a bracketed paste (the `active region') and the text found by
   incremental and non-incremental history searches. This is tied to bracketed
   paste and can be disabled by turning off bracketed paste.
g. Readline sets the mark in several additional commands.
h. Bracketed paste mode is enabled by default. There is a configure-time
   option (--enable-bracketed-paste-default) to set the default to on or off.
i. Readline tries to take advantage of the more regular structure of UTF-8
   characters to identify the beginning and end of characters when moving
   through the line buffer.
j. The bindable operate-and-get-next command (and its default bindings) are
   now part of readline instead of a bash-specific addition.
k. The signal cleanup code now blocks SIGINT while processing after a SIGINT.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:37:23 +00:00
Michael Tremer
4330bf93be Drop backports
These are some old drivers that we used to pull in from more recent
kernels.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-08 10:23:56 +00:00
Jonatan Schlag
8186b37230 Hardcode theme to ipfire
This disables the theme support and makes it impossible to use any other
themes than the ipfire default theme.

The only intention of this patch is to hardcode the theme to ipfire.
To change any cgi we have is an ugly way, but the only way to do this
fast. The colour handling needs certainly to be improved as well, but
this will and should be done in other patches.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-08 10:11:34 +00:00
Michael Tremer
83d3e0798e Drop pycurl
This was used by urlgrabber

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-07 14:00:38 +00:00
Michael Tremer
5283b400ef Drop pakfire3
This version is outdated and not usable on IPFire 2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-07 13:53:36 +00:00
Adolf Belka
18d277d67f perl: Update to 5.32.1
- Update from 5.30.0 to 5.32.1
- Update of rootfile carried out
- Removal of perl-5.30.0.fix.build.failure-against-gcc-10.patch as no
   longer required
- Changelog is too large to fit here.
   Full details for release 5.33.1 from 5.32.0 are in the source tarball
    in pod/perldelta.pod
   For the details of changes in previous releases, see the individual
    perlNNNdelta.pod files. For example, pod/perl588delta.pod describes the
    changes between versions 5.8.7 and 5.8.8.
- Updated iso from build of perl and all other changes has been installed
   in a vm testbed. All pages and graphs that have been looked at worked
   without any hiccups.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-02 15:38:46 +00:00
Thomas Cekal
5b17fea8e7 BUG12445: Fix for Hyper-V stuck 8 minutes at boot
Fix for Bug 12445: There is no proper way to distinguish between MS Azure and a local
Hyper-V installation Procedure: try to get the metadata info from the
internal MS metadata service at IP 169.254.169.254 If this fails the system
is running on an local Hyper-V instance wget takes too long to exit if the IP
is not reachable Added --timeout and --tries param to wget to reduce the
duation from 8 minutes to 9 seconds 9 seconds at one try should be enough

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Thomas Cekal <admin@cekal.org>
2021-04-02 15:38:02 +00:00
Michael Tremer
f78eb45c09 suricata: Use iptables lock to ensure rules are being inserted
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-02 15:33:42 +00:00
Michael Tremer
ec77442f18 libloc: Update to 0.9.6
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-31 16:00:00 +00:00
Adolf Belka
ca81153591 rpcbind: Update to 1.2.5
- Update from 0.2.3 to 1.2.5
- rpcbind-0.2.3-tirpc_fix-1.patch no longer needed as changes are now
   included in the tarball
- Updated rootfile
- Dependency of nfs addon package
- Changelog
   Too many lines to put in here
   Full change logs for 0.2.4 and 1.2.5 can be found at
    https://sourceforge.net/projects/rpcbind/files/rpcbind/
   No bug fixes in 0.2.4
   One bug fix in 1.2.5
    Author: Steve Dickson <steved@redhat.com>
    Date:   Sat Dec 16 15:31:21 2017 -0500
      rpcbind.service: Not pulling the rpcbind.target
      According to systemd.special(7) manpage:
      rpcbind.target
        The portmapper/rpcbind pulls in this target and orders itself
        before it, to indicate its availability. systemd automatically
        adds dependencies of type After= for this target unit to
        all SysV init script service units with an LSB header
        referring to the "$portmap" facility.
      Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1431574

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-22 10:43:23 +00:00
Adolf Belka
da442f3c53 libtirpc: Update to 1.3.1
- Update from 1.0.2 to 1.3.1
- libtirpc-1.0.2-glibc-2.26.patch no longer needed as changes are now
   included in the tarball
- Updated rootfile
- Dependency of rpcbind addon which is a dependency for the nfs addon
- Changelog
   No changelog file provided anymore. Only git commits available
   See http://git.linux-nfs.org/?p=steved/libtirpc.git;a=log for details

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-22 10:42:41 +00:00
Adolf Belka
79ee597553 parted: Update to 3.4
- Update from 3.2 to 3.4
- Updated rootfile
- parted-3.2-device-mapper.patch and parted-3.2-sysmacros.patch are no
   longer needed as changes are now included in the tarball
- Changelog is too large to put in here.
   11 bug fixes included in logs
   Full changelog can be viewed in the tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-03-22 10:42:07 +00:00
Michael Tremer
3358a84fd5 filesystem-cleanup: Ignore boost
This package does not behave according to standard distribution rules
and our script deletes all libraries

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-27 15:27:42 +00:00
Stephan Feddersen
730e96c98b WIO - Patch PPPOE show right Icon
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-19 19:34:32 +00:00
Michael Tremer
6dc206ab69 Drop /usr/lib/sse2
This is now unused

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-16 18:00:16 +00:00
Michael Tremer
5459c8a4b7 Merge branch 'master' into next 2021-02-16 17:37:26 +00:00
Michael Tremer
55209df391 wlanclient: Do not force using legacy interface to talk to the kernel
"wireless extensions" is the old interface to speak to the kernel.

All newer drivers support nl80211 now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-16 17:44:45 +01:00
Michael Tremer
7c6a4babf8 Revert "dhcpcd: Update to 9.3.4"
This reverts commit d96d979e2a.

Arne requested to revert this commit as well since dhcpcd still does not
run without any problems on i586 systems.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-16 11:50:16 +00:00
Adolf Belka
59bbf418ca sysvinit: Update to 2.98
- Update sysvinit from 2.88dsf to 2.98
- From version 2.89 mounpoint build was not enabled as standard
- Patch created to modify Makefile to define mountpoint to be built
- Update of rootfiles
- Changelog is ~400 lines long from 2.88dsf to 2.98
- For details see the Changelog in the doc directory in the tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-15 13:12:47 +00:00
Adolf Belka
9e08985ed8 mpage: Update to 2.5.7
- Update mpage from 2.5.6 to 2.5.7
- No change to rootfile
- Slight tuning of patch needed due to changes in source file
- Changelog
June 2017
   - Released version 2.5.7
   - Relicensed code under GPLv2 or later

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-09 14:35:50 +00:00
Adolf Belka
1dbd47ee06 lz4: Update to 1.9.3
- Update lz4 from 1.9.2 to 1.9.3
- Updated rootfile
- Removed old patches and updated to new version name
- Changelog
v1.9.3
perf: highly improved speed in kernel space, by @terrelln
perf: faster speed with Visual Studio, thanks to @wolfpld and @remittor
perf: improved dictionary compression speed, by @felixhandte
perf: fixed LZ4_compress_HC_destSize() ratio, detected by @hsiangkao
perf: reduced stack usage in high compression mode, by @Yanpas
api : LZ4_decompress_safe_partial() supports unknown compressed size, requested by @jfkthame
api : improved LZ4F_compressBound() with automatic flushing, by Christopher Harvie
api : can (de)compress to/from NULL without UBs
api : fix alignment test on 32-bit systems (state initialization)
api : fix LZ4_saveDictHC() in corner case scenario, detected by @IgorKorkin
cli : `-l` legacy format is now compatible with `-m` multiple files, by Filipe Calasans
cli : benchmark mode supports dictionary, by @rkoradi
cli : fix --fast with large argument, detected by @picoHz
build: link to user-defined memory functions with LZ4_USER_MEMORY_FUNCTIONS, suggested by Yuriy Levchenko
build: contrib/cmake_unofficial/ moved to build/cmake/
build: visual/* moved to build/
build: updated meson script, by @neheb
build: tinycc support, by Anton Kochkov
install: Haiku support, by Jerome Duval
doc : updated LZ4 frame format, clarify EndMark

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-09 11:51:38 +00:00
Adolf Belka
b8cd517a8d net-tools: Update to 2.10
- Update net-tools from 1.60 to 2.10
- Based on guidance from Michael Tremer
	- new no-hostname patch created to remove all hostname references
		from makefile
	- all other patch files removed from lfs as no longer needed
- version 2.10 places ifconfig and route tools in bin instead of sbin
	those tools moved to sbin to keep in line with previous approach
- make update replaced by make install as there is no longer a make
	rule for make update
- Updated rootfiles

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-08 13:51:04 +00:00
Michael Tremer
0d58fcd2aa misc-progs: Call unpriv_system commands in a shell
Reported-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-07 16:47:47 +00:00
Michael Tremer
23f280b5e6 misc-progs: Call unpriv_system commands in a shell
Reported-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-07 16:46:55 +00:00
Michael Tremer
c1dd8d2511 Revert "dhcpcd: Update to 9.4.0"
This reverts commit 15194c7c52.

This version still fails to run on i586 without this patch.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 17:03:52 +00:00
Michael Tremer
c1b356d20d Revert "dhcpcd: Update to 9.4.0"
This reverts commit 15194c7c52.

This version still fails to run on i586 without this patch.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 17:01:29 +00:00
Adolf Belka
f70fa093ec ghostscript: Addition of patch to fix freetype problem
-Addition of patch to ghoscript as freetype version 2.10.3 and later
	have withdrawn a macro that ghostscript used. Confirmed that without
	the patch ghostscript failed to build due to the lack of the
	FT_CALLBACK_DEF() macro. The fix is to explicitly declare the
	callbacks file static.
- Update lfs to apply patch
- Add patch to src/patches

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 16:53:31 +00:00
Adolf Belka
74e28f29f8 pptp: Update to 1.10.0
- Update pptp from 1.7.2 (Jun 2008) to 1.10.0 (Jan 2018)
- No change to rootfile
- Removal of pptp-1.7.2-compat.patch as all changes to pptp_compat.c are
	now included in the file in the new tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 11:19:07 +00:00
Adolf Belka
5de33a38d8 findutils: Update to 4.8.0
- Update findutils from 4.6.0 to 4.8.0
- Remove findutils-4.6.0-glibc2.28.patch from lfs as all patch items are now
	in the new tarball files.
- Remove sed command on gl/lib/mountlist.c from lfs as all fixes are in the
	mountlist.c file in the new tarball.
- Update rootfiles
- Changelog
	Following are major changes. Further detailed info available in
	changelog file in tarball.
	* Noteworthy changes in release 4.8.0 (2021-01-09) [stable]
		** Changes in xargs
		'xargs -t' no longer outputs a trailing blank to stderr after the last argument
		of each constructed command line to be executed.  [#57291]
		xargs now warns when more than one of the conflicting options --max-lines (-L,
		-l), --replace (-i/-I) and --max-args (-n) are specified on the command line.
		[#52137]
		** Bug Fixes
		find no longer crashes when an XFS filesystem is heavily changed during the run.
		Discussed at: <https://lists.gnu.org/r/bug-gnulib/2020-04/msg00068.html>
		find -used works again.  This predicate was not working properly since adding
		the support for sub-second timestamp resolution for various predicates in
		FINDUTILS_4_3_3-1 back in 2007.
		Discussed at: <https://lists.gnu.org/r/bug-findutils/2019-11/msg00010.html>
		** Improvements
		'find -D exec' now diagnoses all -exec, -execdir, -ok and -okdir runs including
		the call arguments and the exit code of the launched process. [#59083]
		** Documentation Changes
		The documentation of 'find -printf %Ak' has been improved: it now refers to the
		strftime(3) documentation for a complete list of supported conversion
		specifiers, and documents the 'F' conversion specifier ('yyyy-mm-dd').
		The man pages (find.1, locate.1, locatedb.5, updatedb.1, and xargs.1) now
		consistently end with the sections "REPORTING BUGS", "COPYRIGHT" and "SEE ALSO",
		with the latter referring to the online page on the GNU web server.
		The "EXAMPLES" section in the find.1 man page now shows the examples in a better
		structure and uses consistent formatting.
		Various man page fixes - syntax issues and typos.
		[#59745, #59330, #59012, #58193, #57807, #57775]
		Other documentation changes:
		#58654: doc: clarify that 'find -perm +MODE' is unrelated to umask
		#58458: doc: improve section 'Hard links', especially fix the description
		        regarding 'find -L -samefile FILE'.
		#58205: find.1: clarify double dash '--' option
		#58149: 'xargs --help' now mentions that --replace (-I, -i) splits the input
		        at newline characters.
		#57025: doc: enhance description of tests accepting numeric arguments in find.1
		        [see also #49640].
		#54730: Add additional valuable example of find -quit
		#48135: Fix testsuite error on Hurd and BSD related to ln
		#35253: Clarify descriptions of -printf %f, %h.
		** Changes to the build process
		The configure option --without-fts has been removed.  The attempt to use
		it stopped configure with an error message since 4.5.18 (2015) anyway.
	* Major changes in release 4.7.0, 2019-08-29
		** Changes to locate / updatedb
		Support for generating old-format databases (with updatedb
		--old-format or updatedb --dbformat=old) has been removed.  The old
		database format was deprecated in 2007 (and updatedb has warned about
		this since that time).  The locate program will will read old-format
		databases, though this support also will be removed.
		The updatedb script now operates in the C locale only.  This means
		that character encoding issues are now not likely to cause sort to
		fail.  It also honours the TMPDIR environment variable if that was
		set, and no longer sorts file names case-insensitively.
		The (unspecified) order in which filenames are stored in the locate
		database is now different to previous versions.  However, you should
		not rely on locate's output appearing in any particular order in any
		case.
		** Improvements
		All utilities now only show the full usage text when requested via
		the --help option.  Previously, when the user passed invalid options
		or arguments, the user's attention to the corresponding error
		diagnostic was distracted by that lengthy text.
		find now accepts multiple file type arguments to the -type and -xtype
		options separated by comma ','.  For example, to search for symbolic
		links and directories simply provide the shorter '-type l,d' instead
		of the - yet more portable - '( -type l -o -type d )'.
		find now diagnoses failures returned by readdir().  This bug was inherent
		in the use of FTS.
		find now exits in more cases immediately after the error diagnostic, i.e.,
		without the following usage text, to make the former more eye-catching.
		find now outputs a better hint in case the user passed an unquoted shell-
		glob pattern to options like -name, i.e., when the offending argument is
		an existing file.
		find now supports the debug option '-D all' to include all of the other
		debug options at once.
		xargs now supports the -o, --open-tty option to reopen stdin as /dev/tty
		in the child process before executing the command; useful to run an
		interactive application.  Added for compatibility with BSD.
		xargs now supports the GNU_FINDUTILS_FD_LEAK_CHECK environment
		variable to enable/disable fd leak check.
		'xargs -t' (--verbose) now properly quotes each part of the command to the
		executed if needed when printing it to stderr; likewise -p (--interactive).
		** Documentation Changes
		Prefer https:// over http:// links where possible, e.g. for '*.gnu.org' servers.
		Both find.1 and the find texinfo manual now consistently document all of the
		'N', 'L' and '?' possibilities in '-printf %Y' output when the determination of
		the type of a symlink target fails.
		find.1 now correctly states the -prune has no effect when the -depth option is
		given.  Before, it wrongly stated that -prune would return false in that case.
		Some minor documentation improvements are listed in "Bug Fixes" below.
		** Bug Fixes
		#56820: find: improve diagnostic when a global option like -maxdepth is
		        specified after another argument like a test, thus hopefully avoiding
		        translation issues (at least French, German).
		#56142: doc: fix bug #56142 by specifying which actions inhibit the
		        default -print.
		#55272: find: improve diagnostic when -name or -iname is used with a pattern
		        containing a directory separator ('/'), suggesting to use -wholename
		        or -iwholename respectively.
		#54859: doc: fix typo in 'xargs -l' examples in texinfo manual.
		        Change from 'xargs -1' (minus one) to 'xargs -l' (minus El) in 3 places.
		#54838: doc: fix the examples of the -perm option in the texinfo documentation.
		        The example '-perm -g+w,o+w' was misplaced.
		        Bug present since FINDUTILS_4_2_27-1.
		#54262: 'find -printf "%Y"' now correctly outputs 'N' for broken symlinks
		        (ENOENT or ENOTDIR).  Previously, it output 'l' in such a case.
		        Bug introduced while attempting to fix #29460 in version v4.5.8.
		#54171: 'find -depth' now outputs the name of unreadable directories.
		        Previously, FTS-based find missed to output those entries.
		        Bug present since the FTS implementation in FINDUTILS_4_3_0-1.
		#52981: find: the '-delete' action no longer complains about disappeared files
		        when the '-ignore_readdir_race' option is given, too.  That action will
		        also returns true in such a case now.
		#52220: 'find -D' without any further argument no longer crashes.
		        Bug present since the implementation of -D in FINDUTILS_4_3_1-1.
		#51304: doc: use correct IEC unit prefixes in the documentation of 'find -size'.
		        find(1) uses binary-based units for the suffixes 'k', 'M', and 'G' of
		        the argument of the '-size' option: 1024, 1024*1024 and 1024^3.
		        Therefore, the documentation should use the correct IEC prefixes
		        kibibyte, mebibyte and gibibyte respectively (or their abbreviations
		        'KiB', 'MiB' and 'GiB').
		#50758: doc: fix the description of the -perm examples matching the permission
		        mode "022" in find's texinfo manual: the match is for the file's group
		        and 'other' mode bits instead of for user and group.
		        Bug introduced when adding the -perm examples in FINDUTILS-4.2.11.
		#50326: find no longer leaks memory for a recently added member in gnulib's
		        mount list structure.
		#50259: find -printf '%h' now outputs the correct path for arguments with one or
		        more trailing slashes.  Previously, it would e.g. output "foo" instead
		        of "." when "foo/" was passed; likewise, it would output "/user/xxx/"
		        instead of "/user" when "/user/xxx//" was passed.
		        Bug introduced in FINDUTILS-4.2.19.
		#48180: find -noop (an internal option not intended to be exposed to the user)
		        no longer crashes.  Bug introduced in FINDUTILS-4.3.1.
		#48030: find -exec + does not pass all arguments for certain specific filename
		        lengths.  After the internal (usually 128k) buffer is full and find(1)
		        executed the given command with these arguments, it would miss to run
		        the command yet another time if only one other file argument has to be
		        processed.  Bug introduced in FINDUTILS-4.2.12.
		#46784: frcode drops last char if no final newline
		** Changes to the build process
		The configure option --enable-id-cache has been removed.  It has been
		a no-op since findnutils-4.5.15.
		The configure option --enable-debug has been removed.  Debugging in
		find is now controlled by its -D option only.
		The configure option --enable-silent-rules is the default now.
		Use --disable-silent-rules or "make V=1" to get verbose build output.
		"make dist" no longer builds .tar.gz files.
		xz is portable enough and in wide-enough use that distributing
		only .tar.xz files is enough.
		Maintainer builds from the Git repository now derive the version string from
		the version control system instead of using a fixed string (changed after each
		release manually).  As a result, the inter-release builds can now be
		distinguished: e.g. "4.6.0.152-fe9c" is the 152th commit after the tag "v4.6.0"
		and has the Git short hash "fe9c".  Builds from an unclean tree are marked with
		the suffix "-dirty".
		The translation files in the PO directory are no longer version controlled;
		instead bootstrap auto-updates them from "translationproject.org" during a
		maintainer build.
		A shell-style test framework borrowed from GNU coreutils has been added.
		This allows better tests with more control over stdin, stdout, stderr,
		signals, preparatory steps, cleanup, return code verification, root-only
		tests, etc.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 11:16:27 +00:00
Adolf Belka
8ace58e8ac p7zip: Update to 17.03
- Update p7zip from 16.02 (Jul 2016) to 17.03 (Dec 2020)
- Version 16.02 was the last version by the previous dev team.
	A fork was created in May 2020 with version 17.01
- Rootfile updated
- Changelog
	Version 17.03
	=============
	  - add zstd to zip
	  - add hash algorithm
	    - XXHASH32
	    - XXHASH64
	    - MD2
	    - MD4
	    - MD5
	    - sha384
	    - sha512
	  - add Lzfse to dmg
	  - add lz5 to 7z
	  - add lizard to 7z
	  - update lz4 to v1.9.3
	  - add brotli to 7z
	  - update cmake build
	  - fix xz crc64 error
	  - use system local to select OEM code
	  - add rpm install
	  - fix lzma2 and flzma22 call the same algorithm
	  - add 7zr build
	  - fix tar format link file compress and decompress
	Version 17.02
	=============
	  - p7zip 17.02 is more like 7zip 17.01(only 7za and 7z),The difference from 7zip 17.01
	    and older version p7zip is the following description
	  - Supports Fast lzma2 1.0.1 compression method
	  - Update Zstd method to 1.4.5
	  - Add zstd method parameters in 7z format
	    ZSTD parameters NEW name:
	         strategy -> strat
	         fast -> fast
	         long -> long
	         WindowLog -> wlog
	         HashLog -> hlog
	         ChainLog -> clog
	         SearchLog -> slog
	         MinMatch -> slen
	         TargetLen -> tlen
	         OverlapLog -> ovlog
	         LdmHashLog -> ldmhlog
	         LdmSearchLength -> ldmslen
	         LdmBucketSizeLog -> ldmblog
	         LdmHashRateLog -> ldmhevery
	  - Fix symlink files contained inside tar and squashfs as regular file
	  - Add lz4 and Zstd decompress method to squashfs
	Version 17.01
	=============
	  - Fix BUG CVE-2018-10115
	  - Fix BUG CVE-2018-5996
	  - Fix BUG CVE-2017-17969
	  - Fix BUG CVE-2016-9296
- The bug fixes in version 17.01 address the same CVE bugs as the
	p7zip-16.02-consolidated_fixes-1.patch Therefore this patch is no longer needed
- The patches for CVE-2016-2334 & 2335 were for versions before 16.00 so are no longer needed

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:21:29 +00:00
Arne Fitzenreiter
2e2170bfb5 setup: fix field-order at addressconfig for red
i have added the gatewayfield at the line below the IP and Netmask
fields but prior this fields so the cursor jumps first the the gateway
and after this to the IP. This patch fix the activation order.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:17:37 +00:00
Adolf Belka
d06693b487 qemu: Update to 5.2.0
- Update qemu from 5.0.0 to 5.2.0
- Changelogs for 5.1.0 and 5.2.0 available at https://wiki.qemu.org/ChangeLog/
- rootfile updated
- patch no longer needed as fix built into source. patch was not utilised
	for 5.0.0 version. Patch line was commented out in previous lfs

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:29 +00:00
Matthias Fischer
ae94f85b02 logwatch 7.5.5: Deleted no longer needed patch for clamav 0.103.0
I've should have read the changelog from opensuse more thoroughly:

...
4a862fa [clamav] Ignore new "Activating the newly loaded database" message
...

Sorry for the noise.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:21 +00:00
Adolf Belka
9ab74511da screen: Update to 4.8.0
- Update screen from 4.2.1 to 4.8.0
- Changelog
	Version 4.8.0 (05/02/2020)
	  * Improve startup time by only polling for files to close
	  Fixes:
		- Fix for segfault if termcap doesn't have Km entry
		- Make screen exit code be 0 when checking --version
		- Fix potential memory corruption when using OSC 49
	Version 4.7.0 (02/10/2019)
	  * Add support for SGR (1006) mouse mode
	  * Add support for OSC 11
	  * Update Unicode ambiguous and wide tables to 12.1.0
	  * Fixes:
	  - cross-compilation support (bug #43223)
	  - a lot of manpage fixes and cleanups
	Version 4.6.2 (23/10/2017):
	  * Fixes:
		- revert changes to cursor position restore behavour (bug #51832)
		- set freed pointer to NULL (bug #52133)
		- documentation fixes
		- fix windowlist crashes (bug #43054 & #51500)
	Version 4.6.1 (10/07/2017):
	  * Fixes:
		- problems with starting session in some cases
		- parallel make install
		- segfault when querying info on nonUTF locale (bug #51402)
	Version 4.6.0 (28/06/2017):
	  * Update Unicode wide tables to 9.0 (bug #50044)
	  * Support more serial speeds
	  * Improved namespaces support
	  * Migrate from fifos to sockets
	  * Start viewing scrollback at first line of output (bug #49377)
	Version 4.5.1 (25/02/2017):
	  * Fixes:
		- logfile permissions problem (CVE-2017-5618)
		- SunOS build problem (bug #50089)
		- FreeBSD core dumps (bug #50143)
	Version 4.5.0 (10/12/2016):
	  * Allow specifying logfile's name via command line parameter '-L'
	  * Fixes:
		- broken handling of "bind u digraph U+" (bug #48691)
		- crash with long $TERM (bug #48983)
		- crash when bumping blank window
		- build for AIX (bug #49149)
		- %x improperly separating arguments
		- install with custom DESTDIR (bug #48370)
	Version 4.4.0 (19/06/2016):
	  * Support up to 24 function keys
	  * Fix runtime issues
	  * 'logfile' command, starts logging into new file upon changing
	Version 4.3.1 (28/06/2015):
	  * Fix resize bug
	Version 4.3.0 (13/06/2015):
	  * Introduce Xx string escape showing the executed command of a window
	  * Implement dead/zombie window polling, allowing for auto reconnecting
	  * Allow setting hardstatus on first line
	  New Commands:
	  * 'sort' command sorting windows by title
	  * 'bumpleft', 'bumpright' - manually move windows on window list
	  * 'collapse' removing numbering 'gaps' between windows, by renumbering
	  * 'windows' command now accepts arguments for use with querying
- Rootfile updated
- Two screen patchfiles deleted as the patch changes are now built into
	the source files

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:45:45 +00:00
Matthias Fischer
bf2ff65e6c logwatch: Update to 7.5.5
For details see:
https://build.opensuse.org/package/view_file/server:monitoring/logwatch/ChangeLog?expand=1

Plus: deleted no longer need dhcpd-patch.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:36:54 +00:00
Michael Tremer
157d64250a misc-progs: addonctrl: Replace all sprintf() with snprintf()
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 21:06:57 +00:00
Michael Tremer
37fe3658a0 samba: Add helper script to pipe password
It is complicated to set the password in the C helper binary.

Therefore it is being set by a helper script.

This is still not an optimal solution since the password might be
exposed to the shell environment, but has the advantage that shell
command injection is no longer possible.

Fixes: #12562
Reported-by: Albert Schwarzkopf <ipfire@quitesimple.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 21:06:57 +00:00
Michael Tremer
354c3e2b45 samba: Remove option to chose user group and shell
There is no need for this being implemented and it is dangerous to allow
the user to create any shell accounts or users that belong to groups
with higher privileges.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 21:06:57 +00:00
Michael Tremer
64883513d5 misc-progs: sambactrl: Sanitise username
Fixes: #12562
Reported-by: Albert Schwarzkopf <ipfire@quitesimple.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 21:06:57 +00:00