Commit Graph

20806 Commits

Author SHA1 Message Date
Matthias Fischer
3e4e65dd28 monit: Fix for Bug #13246 - No such file or directory '/etc/monit.d'
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 16:46:49 +00:00
Michael Tremer
9f1636bf11 core179: Migrate old ExtraHD entries in /etc/fstab
The rewritten version of ExtraHD no longer stores entries in /etc/fstab
which is why they have to be removed during the update.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 10:18:38 +00:00
Michael Tremer
d4a8484eb1 mountfs: Remove excessive sync-ing before umount
The system should perform all write operations when sync is called and
only return when the write queues are empty.

There is no additional benefit for calling sync again as the buffers
should be empty. If data is still being lost, then that is a bug in
either the storage device or driver.

As the (re-)boot process is already so slow, I would like to get rid of
any unnecessary delays.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 09:48:35 +00:00
Michael Tremer
21d8c56c8a mountfs: Mount ExtraHD filesystems
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 09:47:25 +00:00
Michael Tremer
9bfe4848bc core179: Ship ca-certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 09:28:25 +00:00
Peter Müller
991ea18ebb ca-certificates: Update to 20230814
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 09:28:09 +00:00
Michael Tremer
02ecc13baa core179: Ship squid-asnbl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 09:27:39 +00:00
Peter Müller
311f04e46e squid-asnbl: Update to 0.2.5
This upstream release incorporates the patch added for resolving #13023.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 09:27:19 +00:00
Peter Müller
33d4586cb8 Tor: Update to 0.4.7.14
Full changelog:

Changes in version 0.4.7.14 - 2023-07-26
  This version contains several minor fixes and one major bugfix affecting
  vanguards (onion service). As usual, we recommend upgrading to this version
  as soon as possible.

  o Major bugfixes (vanguards):
    - Rotate to a new L2 vanguard whenever an existing one loses the
      Stable or Fast flag. Previously, we would leave these relays in
      the L2 vanguard list but never use them, and if all of our
      vanguards end up like this we wouldn't have any middle nodes left
      to choose from so we would fail to make onion-related circuits.
      Fixes bug 40805; bugfix on 0.4.7.1-alpha.

  o Minor feature (CI):
    - Update CI to use Debian Bullseye for runners.

  o Minor feature (lzma):
    - Fix compiler warnings for liblzma >= 5.3.1. Closes ticket 40741.

  o Minor features (directory authorities):
    - Directory authorities now include their AuthDirMaxServersPerAddr
      config option in the consensus parameter section of their vote.
      Now external tools can better predict how they will behave.
      Implements ticket 40753.

  o Minor features (fallbackdir):
    - Regenerate fallback directories generated on July 26, 2023.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2023/07/26.

  o Minor bugfix (relay, logging):
    - The wrong max queue cell size was used in a protocol warning
      logging statement. Fixes bug 40745; bugfix on 0.4.7.1-alpha.

  o Minor bugfixes (compilation):
    - Fix all -Werror=enum-int-mismatch warnings. No behavior change.
      Fixes bug 40824; bugfix on 0.3.5.1-alpha.

  o Minor bugfixes (metrics):
    - Decrement hs_intro_established_count on introduction circuit
      close. Fixes bug 40751; bugfix on 0.4.7.12.

  o Minor bugfixes (sandbox):
    - Allow membarrier for the sandbox. And allow rt_sigprocmask when
      compiled with LTTng. Fixes bug 40799; bugfix on 0.3.5.1-alpha.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 09:27:09 +00:00
Michael Tremer
8406848030 Merge branch 'master' into next 2023-08-14 16:02:12 +00:00
Michael Tremer
5ca80b3b8f Bump PAK_VER for haproxy/keepalived/monit/nmap
This is required as older versions might be linked against older
versions of OpenSSL.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-14 15:54:35 +00:00
Arne Fitzenreiter
cd78363404 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-12 16:48:54 +02:00
Arne Fitzenreiter
41e3393152 initskript: smt: restore IPFire banner
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-12 09:58:56 +02:00
Arne Fitzenreiter
f41a54a2ea initskript: smt: disable smt on vulnerable cpu
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-12 09:11:52 +02:00
Arne Fitzenreiter
ee0ee29843 core178: insert urgent core update for new cpu vulnerability mitigations
this contain kernel-6.1.45, intel-microcode-20230808, linux-firmware-20230804 + fam19h patches and a fix
for early microcode load from initramdisk.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 23:32:01 +02:00
Arne Fitzenreiter
6e16017fc0 vulnerabilities.cgi: add new gather_data_sampling and spec_rstack_overfow
this not add details and translation strings yet.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 23:29:26 +02:00
Arne Fitzenreiter
162a068448 kernel: update to 6.1.45
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 23:25:37 +02:00
Arne Fitzenreiter
285740b926 linux-firmware: update to 20230804
also updated amd_familiy_19h patch which was not in 20230804 yet.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 21:12:45 +02:00
Arne Fitzenreiter
20ad6285d6 intel-microcode: update to 20230808
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 16:51:42 +02:00
Arne Fitzenreiter
45c75a55a9 kernel: build it after all other programs
this fix missing firmwares and early microcode load.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 16:48:49 +02:00
Michael Tremer
806cc1ffd1 core179: Move Core Update 178 over to 179
https://lists.ipfire.org/pipermail/development/2023-August/016295.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-11 12:24:38 +00:00
Arne Fitzenreiter
babb30f6ab core177: ship u-boot-mkimage
this is linked against openssl-1.1 on older installations and was not shipped with core175

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 13:30:18 +02:00
Michael Tremer
853c9538e4 nmap: Bump release once again
https://lists.ipfire.org/pipermail/development/2023-August/016285.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-11 10:59:49 +00:00
Arne Fitzenreiter
58cd7839b5 riscv64: rootfile updates for gcc, util-linux and rust
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:35:11 +00:00
Arne Fitzenreiter
57ae9ba587 kernel: update config for riscv64
i had disabled CONFIG_GCC_PLUGIN_LATENT_ENTROPY because this
fails to compile on riscv64.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:35:11 +00:00
Arne Fitzenreiter
a04ae8c43b gcc: fix build on riscv64
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:35:11 +00:00
Arne Fitzenreiter
763301c000 qemu_environ: set G_SLICE="always_malloc" for riscv64
this is a work around for often hanging processes eg. at
rust builds.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:35:11 +00:00
Michael Tremer
47b248f292 core178: Ship libloc
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:34:38 +00:00
Adolf Belka
0d46ef0ce7 libloc: Update to version 0.9.17
- Update from version 0.9.16 to 0.9.17
- Update of rootfile
- Changelog
    0.9.17
	* The importer is now parsing Geofeeds where available. This helps us to create a
          database with better accuracy for large ISPs or cloud providers.
	* The database writer is trying to compress the database harder: It will now look
          for any duplicate networks and merge neighbouring networks which will reduce the
          size of the database by about half.
	* The importer has been improved so that it runs more efficient SQL queries to
          create the database faster.
	* Temuri Doghonadze contributed a Georgian translation.
	* Hans-Christoph Steiner contributed bash-completion for the location(8) command.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:34:27 +00:00
Michael Tremer
7302806652 core178: Ship squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:34:05 +00:00
Matthias Fischer
692ad21dd0 squid: Update to 6.2
For details see:
https://github.com/squid-cache/squid/commits/v6

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:33:17 +00:00
Adolf Belka
ebf98cabe2 qemu-ga: Update to version 8.0.3
- Update from version 7.1.0 to 8.0.3
- Update of rootfile not required
- Update qemu-ga in lockstep with qemu

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:22:17 +00:00
Michael Tremer
647469bdeb core178: Ship rpcsvc-proto
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:20:53 +00:00
Adolf Belka
d09a5fcd52 rpcsvc-proto: Update to version 1.4.4
- Update from version 1.4.3 to 1.4.4
- Update of rootfile not required
- Changelog
    1.4.4
	* Use AC_SYS_LARGEFILE macro to control largefile support

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:10:14 +00:00
Michael Tremer
a93bb5d8f1 core178: Ship qpdf
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:09:33 +00:00
Adolf Belka
0436f28b42 qpdf: Update to version 11.5.0
- Update from version 11.3.0 to 11.5.0
- Update of rootfile
- Changelog
    11.5.0: release
        * This release consists entirely of changes made by M. Holger.
          Mostly this is changes to the private API, performance
          enhancements, code cleanup, and reformatting to 100 columns
          instead of 80. For qpdf development, we are starting to use
          JetBrains CLion, so a lot of the changes are moving us toward a
          cleaner development experience in that environment.
        * Bug fix: when a the same page is copied multiple times, copy
          the annotations rather than having multiple pages share an
          annotation object. Thanks to M. Holger for the fix. Fixes #600.
        * Add "FUTURE" build option for enabling experimental APIs. Do not
          package qpdf built with the FUTURE option as there are no binary
          compatibility or even source compatibility guarantees. The option
          is intended for developers who want to ensure that future
          potentially breaking changes are compatible with their code or
          provide feedback on upcoming changes. At present, the only feature
          enabled by FUTURE is a move constructor for QPDFObjectHandle.
          While this shouldn't break any code, it would change details about
          how many copies of a specific QPDFObjectHandle were in existence,
          so it could potentially break code that was relying on internal
          shared pointer reference counts. Thanks to M. Holger for the idea
          and contribution.
        * Add new method Buffer::copy and deprecate Buffer copy
          constructor and assignment operator. Buffer copy operations are
          expensive as they always involve copying the buffer content. Use
          "buffer2 = buffer1.copy();" or "Buffer buffer2{buffer1.copy()};"
          to make it explicit that copying is intended. This change was
          contributed by M. Holger.
    11.4.0: release
        * From M. Holger: add QPDF::newReserved as a better alternative to
          QPDFObjectHandle::newReserved. The operation of creating a new
          reserved object fits better in the QPDF API. The old call just
          delegates to the new one.
        * When an annotation dictionary's appearance dictionary (`/AP`)
          has a key that is a stream, disregard `/AS` (which is supposed to
          point to a subkey). This enables qpdf to not ignore annotations
          that have incorrect values for `/AS` when the appearance stream is
          directly in the `/AP` dictionary instead of in a subkey.
          Fixes #949.
        * Allow QPDFJob's workflow to be split into a reading phase and a
          writing phase to allow the caller to operate on the QPDF object
          before it is written. This adds methods QPDFJob::createQPDF and
          QPDFJob::writeQPDF and corresponding C API functions
          qpdfjob_create_qpdf and qpdfjob_write_qpdf. Thanks to M. Holger
          for the contribution.
        * From M. Holger: throw a logic error if an uninitialized or
          foreign QPDFObjectHandle is added to an array.
        * Enhance --optimize-images to support images nested inside of
          form XObjects. Thanks to Connor Osborne (github user cdosborn) for
          the contribution. Fixes #923.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:09:11 +00:00
Adolf Belka
640f08ea66 qemu: Update to version 8.0.3
- Update from version 7.1.0 to 8.0.3
- Update of rootfile
- Changelog is too large to include here. See the following links for more details
    8.0
	https://wiki.qemu.org/ChangeLog/8.0
    7.2
	https://wiki.qemu.org/ChangeLog/7.2

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:08:57 +00:00
Adolf Belka
8c8594c5f4 popt: Update to version 1.19
- Update from version 1.18 to 1.19
- Update of rootfile
- Changelog
    1.19
	    Clarify license: we are not the X Consortium, use straight MIT license text
	    Fix build without glob_pattern_p()
	    Fix missing libiconv dependency for static linkage in popt.pc
	    Fix segfault regression when NLS is enabled but libintl.h cannot be found (#32)
	    Fix the handling of superfluous args passed with =
	    Fix iconv resource leak on errors
	    Fix POPT_CONTEXT_KEEP_FIRST handling in poptResetContext()
	    Fix '=' getting shown for short options
	    Fix memory corruption issues with poptStuffArgs()
	    Fix handling of large files in poptReadFile() on 32bit systems
	    Fix build without wchar / mbstate_t
	    Fix potential memory leak in poptReadConfigFile()
	    Fix "Usage" string calculated length
	    Fix memory leak regressions in popt 1.18
	    Add --enable-werror configure option
	    Add CREDITS file
	    Improve random number handling
	    Various code cleanups, const and type hygiene improvements
	    Adjust test-suite expectations for libtool changes
	    Various translation updates
	    Various documentation improvements
	    Various test-suite improvements
	    Appease autoconf 2.70
	    Update gettext to 1.98.8
	    Run CI on fixed Fedora version (36 for now), use stricter compiler settings
	    Drop unmaintained CHANGES file from tarballs

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:07:28 +00:00
Michael Tremer
b1de4128da core178: Ship poppler
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:06:55 +00:00
Adolf Belka
63b3698974 poppler: Update to version 23.08.0
- Update from version 23.03.0 to 23.08.0
- Update rootfile
- Changelog
    23.08.0:
        core:
         * Fix GWG 19.2 - DeviceN Overprint (White)
         * Splash: avoid bogus memory allocation size in doTilingPatternFill
         * Fix use-of-uninitialized-value in XRef
         * Fix float-cast-overflow error in Catalog
         * Cleanup gpgme backend code
         * Version symbols in poppler core
        glib:
         * Improve poppler_get_available_signing_certificates
         * Add new members to PopplerCertificateInfo
        utils:
         * pdftotext: small improvement to man page
    23.07.0:
        core:
         * Fix reading of utf8-with-bom files
         * Fix crash if CERT_ExtractPublicKey doesn't return a public key
         * Fix rendering of some malformed documents. Issue #1395
         * Allow for stream compression and compress font streams in forms
         * Remove method Hints::getPageRanges
        qt5:
         * Fix crash when overprint preview is enabled
         * Don't fail signature basics tests if backend is not configured
        qt6:
         * Fix crash when overprint preview is enabled
         * Don't fail signature basics tests if backend is not configured
        utils:
         * pdfsig: Allow showung and selecting signature backend
         * pdfsig: Describe signature dump format in manual page
        glib:
         * Add signing API
        build system:
         * zlib is now mandatory
    23.06.0:
        core:
         * CairoOutputDev: Fix crash when doing type3 rendering
         * Fix crash with unknown signature hashing algorithms
         * Add gpgme backend for signature handling
         * Windows: Fix crash when signing existing signature
         * FontInfo: Make it return proper information about font substitution
         * FontInfo: Try harder to get Type 3 font name
         * Store embedded fonts widths table in a more effective manner
         * Skip font lookup for nonprintable characters
         * Windows: Look for fonts in both windows font dir and poppler fonts dir
         * Windows: symbol.ttf is not a good Symbol font
         * Windows: Fix memory leak when looking for fonts
         * Fix crash on malformed files
        qt5:
         * Add API to allow selecting signature backend (nss or gpgme)
         * Convert embedded files to bytearray a bit smarter
        qt6:
         * Add API to allow selecting signature backend (nss or gpgme)
         * Convert embedded files to bytearray a bit smarter
    23.05.0:
        core:
         * Fix crash when filling some forms
         * Set SigFlags when signing unsigned signature
         * Add some infrastructure code to support multiple signing backends
         * Fix potential stack overflow in PostScriptFunction::parseCode
         * Fix some minor uninitialised memory reads
    23.04.0:
        core:
         * Fix memory issue when signing fails. Issue #1372
         * Internal improvements of signature related code
         * CairoOutputDev: improve type3 font rendering
         * Fix memory leak in GlobalParams::findSystemFontFileForFamilyAndStyle
        utils:
         * pdftocairo: Fix crash in some special situations
         * pdfsig: allow holes in -dump signature list
         * pdfsig: Support --help

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:06:28 +00:00
Adolf Belka
a1a45b0faa xz: Update to version 5.4.4
- Update from version 5.4.1 to 5.4.4
- Update of rootfile
- Changelog
    5.4.4 (2023-08-02)
	    * liblzma and xzdec can now build against WASI SDK when threading
	      support is disabled. xz and tests don't build yet.
	    * CMake:
	        - Fixed a bug preventing other projects from including liblzma
	          multiple times using find_package().
	        - Don't create broken symlinks in Cygwin and MSYS2 unless
	          supported by the environment. This prevented building for the
	          default MSYS2 environment. The problem was introduced in
	          xz 5.4.0.
	    * Documentation:
	        - Small improvements to man pages.
	        - Small improvements and typo fixes for liblzma API
	          documentation.
	    * Tests:
	        - Added a new section to INSTALL to describe basic test usage
	          and address recent questions about building the tests when
	          cross compiling.
	        - Small fixes and improvements to the tests.
	    * Translations:
	        - Fixed a mistake that caused one of the error messages to not
	          be translated. This only affected versions 5.4.2 and 5.4.3.
	        - Updated the Chinese (simplified), Croatian, Esperanto, German,
	          Korean, Polish, Romanian, Spanish, Swedish, Ukrainian, and
	          Vietnamese translations.
	        - Updated the German, Korean, Romanian, and Ukrainian man page
	          translations.
    5.4.3 (2023-05-04)
	    * All fixes from 5.2.12
	    * Features in the CMake build can now be disabled as CMake cache
	      variables, similar to the Autotools build.
	    * Minor update to the Croatian translation.
    5.4.2 (2023-03-18)
	    * All fixes from 5.2.11 that were not included in 5.4.1.
	    * If xz is built with support for the Capsicum sandbox but running
	      in an environment that doesn't support Capsicum, xz now runs
	      normally without sandboxing instead of exiting with an error.
	    * liblzma:
	        - Documentation was updated to improve the style, consistency,
	          and completeness of the liblzma API headers.
	        - The Doxygen-generated HTML documentation for the liblzma API
	          header files is now included in the source release and is
	          installed as part of "make install". All JavaScript is
	          removed to simplify license compliance and to reduce the
	          install size.
	        - Fixed a minor bug in lzma_str_from_filters() that produced
	          too many filters in the output string instead of reporting
	          an error if the input array had more than four filters. This
	          bug did not affect xz.
	    * Build systems:
	        - autogen.sh now invokes the doxygen tool via the new wrapper
	          script doxygen/update-doxygen, unless the command line option
	          --no-doxygen is used.
	        - Added microlzma_encoder.c and microlzma_decoder.c to the
	          VS project files for Windows and to the CMake build. These
	          should have been included in 5.3.2alpha.
	    * Tests:
	        - Added a test to the CMake build that was forgotten in the
	          previous release.
	        - Added and refactored a few tests.
	    * Translations:
	        - Updated the Brazilian Portuguese translation.
	        - Added Brazilian Portuguese man page translation.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:06:03 +00:00
Michael Tremer
a6afd1e065 core178: Ship smartmontools
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:05:15 +00:00
Adolf Belka
3afe372a51 smartmontools: Update to version 7.4
- Update from version 7.3 to 7.4
- Update of rootfile not required
- Changelog
    7.4
	- The docker image used for CI and release builds is now based on
	  Debian 12 instead of Ubuntu 18.04.
	- macOS: CI and release builds are now generated for the x86_64 and arm64
	  targets. 32 bit platforms will require to be compiled from the source.
	- smartctl '-t short', '-t long' and '-X': NVMe support.
	- smartctl '-l selftest': NVMe support.
	- smartctl '-l farm': Prints Seagate's vendor-specific Field Access
	  Reliability Metrics (FARM) log for ATA and SCSI drives.
	- smartctl '-l error': Now also prints an error message for each entry
	  of NVMe error information log.
	- smartctl '-l genstats': Prints SCSI General statistics and performance
	  log page.
	- smartctl '-i' and '--identify': ACS-4/5/6 enhancements.
	- smartctl '-c': Added NVMe 2.0 capability flags.
	- smartctl '-g security': Added 'ata_security.master_password_id'
	  to JSON output.  Plaintext output shows Master Password ID if set
	  to a non-default value.
	- smartctl '-q noserial': Now also suppresses the output of NVMe Namespace
	  IEEE EUI-64.
	- smartctl '-j': '-l error -l selftest' JSON output for NVMe devices.
	- smartctl '-j': Avoid invalid UTF-8 sequences in JSON/YAML strings.
	- smartctl '-j': Fixed a bogus exception during SCSI JSON output.
	- smartctl '-j': Renamed JSON element 'scsi_temperature' back to
	  'temperature' (regression).
	- smartctl '-a': Now suggests '-x' for ATA devices because '-a' only
	  provides legacy SMART information.
	- smartd: No longer issues LOG_CRIT warnings if new entries of NVMe error
	  information log do not indicate device problems.
	- smartd: Now detects accidental use of smartd_warning script as
	  '-M exec' parameter.
	- smartd: No longer writes the 'Copyright...' line to syslog.
	- smartd.conf '-M always': Sends reminder emails without any delay.
	- smartd.conf '-M diminishing': Limited email delay to 32 days.
	- ATA: Fixed decoding of extended self-test log on big endian hosts.
	- ATA: Enhanced LBA range for device types '-d jmb39x-q,...' and
	  '-d jms56x,...' from 33-62 to 1-255.
	- ATA: Device type '-d intelliprop,N' now fails with a deprecation message.
	  Added '-d intelliprop,N,force' flag to use it anyway.
	- ATA/USB: Device type '-d usbasm1352r,N' for ASMedia ASM1352R USB to SATA
	  RAID bridges
	- SCSI: Fixed possible corruption issue with the Error Counter and
	  Non medium Error log pages.
	- SCSI: Added more "Informational Exceptions" strings.
	- SCSI: Added initial support for REPORT SUPPORTED OPERATION command.
	- SCSI: Initial rework of SCSI debug output.
	- NVMe: Added error messages for NVMe status values.
	- NVMe: Fixed crash after read of error information log on big endian hosts.
	- HDD, SSD and USB additions to drive database.
	- update-smart-drivedb: Fixed syntax for 'sed' versions which require
	  ';' before '}' or do not support ';' at all.
	- update-smart-drivedb: Replaced a usually not executed bashism.
	- configure: Default for '--with-nvme-devicescan' is now 'yes' also on
	  Darwin and FreeBSD.  It is still 'no' on NetBSD only.
	- configure: Defines '_FORTIFY_SOURCE=3' if supported and not predefined.
	- configure: No longer fails if libsystemd-dev is installed and
	  'LDFLAGS=-static' is used.
	- Compile fix for systems without legacy 'getdtablesize()'.
	- Pre-releases from SVN snapshots now show "pre-VERSION" in version
	  information and 'smartctl.pre_release=true' in JSON output.
	- Linux: Device type '-d sssraid' for 3SNIC RAID controllers.
	- Linux: Device type '-d marvell' now fails with a deprecation message.
	  Added '-d marvell,force' flag to use it anyway.
	- Linux: The generic SCSI code now defaults to SG_IO_V3 and does no
	  longer fall back to the deprecated SCSI_IOCTL_SEND_COMMAND
	  (but this ioctl is still used for '-d 3ware' and '-d marvell,force').
	- Linux smartd: Now prevents systemd unit startup timeout when many
	  devices are registered and then initially checked.
	- Linux smartd: Systemd no longer reports a service failure if no device
	  is present and a '-q *nodev0*' option is used.
	- Solaris SPARC: Dropped legacy ATA support.  Dropped configure option
	  '--with-solaris-sparc-ata'.
	- Windows: IOCTL_STORAGE_PROTOCOL_COMMAND variant for NVMe self-tests.
	- Windows: Installer now defaults to 64-bit executables.
	- Windows: No longer prints bogus 'Local Time' if enhanced TZ syntax is used.
	- Windows: Workaround to keep backward compatibility with old versions
	  of Windows if some versions of MinGW-w64 are used.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:04:57 +00:00
Michael Tremer
2382732336 core178: Ship LVM2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:04:43 +00:00
Adolf Belka
20558b760b lvm2: Update to version 2.03.22
- Update from version 2.03.21 to 2.03.22
- Update of rootfile not required
- Changelog
    2.03.22 - 02nd August 2023
	  Fix pv_major/pv_minor report field types so they are integers, not strings.
	  Add lvmdevices --delnotfound to delete entries for missing devices.
	  Always use cachepool name for metadata backup LV for lvconvert --repair.
	  Make metadata backup LVs read-only after pool's lvconvert --repair.
	  Improve VDO and Thin support with lvmlockd.
	  Handle 'lvextend --usepolicies' for pools for all activation variants.
	  Fix memleak in vgchange autoactivation setup.
	  Update py-compile building script.
	  Support conversion from thick to fully provisioned thin LV.
	  Cache/Thin-pool can use error and zero volumes for testing.
	  Individual thin volume can be cached, but cannot take snapshot.
	  Better internal support for handling error and zero target (for testing).
	  Resize COW above trimmed maximal size is does not return error.
	  Support parsing of vdo geometry format version 4.
	  Add lvm.conf thin_restore and cache_restore settings.
	  Handle multiple mounts while resizing volume with a FS.
	  Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
	  Enhance lvm_import_vdo and use snapshot when converting VDO volume.
	  Fix parsing of VDO metadata.
	  Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
	  Allow snapshots of raid+integrity LV.
	  Fix multisegment RAID1 allocator to prevent using single disk for more legs.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:04:19 +00:00
Adolf Belka
2bda77fdc2 harfbuzz: Update to version 8.1.1
- Update from version 8.0.1 to 8.1.1
- Update of rootfile
- Changelog
    8.1.1
	- Fix shaping of contextual rules at the end of string, introduced in 8.1.0
	- Fix stack-overflow in repacker with malicious fonts.
	- 30% speed up loading Noto Duployan font.
    8.1.0
	- Fix long-standing build issue with the AIX compiler and older Apple clang.
	- Revert optimization that could cause timeout during subsetting with malicious fonts.
	- More optimization work:
	  - 45% speed up in shaping Noto Duployan font.
	  - 10% speed up in subsetting Noto Duployan font.
	  - Another 8% speed up in shaping Gulzar.
	  - 5% speed up in loading Roboto.
	- New API:
	  +hb_ot_layout_collect_features_map()

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:03:37 +00:00
Michael Tremer
ecb02cac7c core178: Ship gmp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:03:06 +00:00
Adolf Belka
c527a36833 gmp: Update to version 6.3.0
- Update fromn version 6.2.1 to 6.3.0
- Update of rootfile
- Changelog
    Changes between GMP version 6.2.* and 6.3.*.
       BUGS FIXED
	  * A possible overflow of type int is avoided for mpz_cmp on huge operands.
	  * A possible error condition when a malformed file is read with
	    mpz_inp_raw is now correctly handled.
       FEATURES
	  * New public function mpz_prevprime, companion of the existing
	    mpz_nextprime.
	  * New documented pointer types mpz_ptr, mpz_srcptr, and similar for
	    other GMP types. Refer to the manual for full list and suggested
	    usage. These types have been present in gmp.h at least since
	    GMP-4.0, but previously not advertised to users.
	  * Support for 64-bit Arm under Macos.
	  * Support for the loongarch64 CPU family.
	  * Support for building with LTO, link-time optimisations.
       SPEEDUPS
	  * New special code for base = 2 in mpz_powm reduces the average time
	    for the functions that test primality.
	  * Speedup for the function mpz_nextprime on large operands.
	  * Speedup for multiplications (some sizes only) thanks to new
	    internal functions to compute small negacyclic products.
	  * Special assembly code for IBM z13 and later "mainframe" CPUs, resulting in
	    a huge speedup.
	  * Improved assembly for several 64-bit x86 CPUs, Risc-V, 64-bit Arm.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:02:35 +00:00
Matthias Fischer
ea88c39989 nmap: Bumped PAK_VER to 16 due to removing the old OpenSSL files
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 15:59:44 +00:00
Michael Tremer
2f847b3213 core178: Ship updated RED network init script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-07 14:13:30 +00:00