Commit Graph

1386 Commits

Author SHA1 Message Date
Adolf Belka
cdb7afe6de python-xattr: Removal of addon
- Update of attr causes current version of python-xattr to fail to build
- Following input from Michael Tremer
- This package was orihinally required for pakfire 3 which no longer depends on it
- This is a python 2 module. Python 2 is EOL
- lfs and rootfile removed from IPFire
- make.sh updated to remove python-xattr entry

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-12 11:58:21 +00:00
Michael Tremer
df490025fe qemu: Enable riscv64 targets
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-08 16:33:24 +00:00
Matthias Fischer
cfdfffd438 krb5: Update to 1.19
For details (complete list) see:
https://web.mit.edu/kerberos/krb5-1.19/krb5-1.19.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-08 11:55:02 +00:00
Michael Tremer
8234ae2642 Merge branch 'master' into next 2021-02-07 13:46:17 +00:00
Michael Tremer
fbbf44c62f fireperf: I accidentially committed an empty rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 17:13:56 +00:00
Michael Tremer
83e6fa56a5 rootfiles: Fix any files that lack a newline at the end
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 17:08:21 +00:00
Adolf Belka
ece62d2500 ddrescue: Update to 1.25
- Update ddrescue from 1.12 to 1.25
- Updated rootfiles
- Since 2013 gnu started to only use lzip for compression of ddrescue
	Therefore second patch of this series is the installation of lzip
	in the IPFire Build.
- Changelog
	2020-02-21  Antonio Diaz Diaz  <antonio@gnu.org>
		* Version 1.25 released.
		* block.h: Add default constructors to classes Block and Sblock.
		  (Reported by Rosen Penev).
		* check.sh: Quote all file name variables to allow names with spaces.
		  (Reported by David Morrison).
		* In rescue mode, join non-finished subsectors read from mapfile.
		  (Reported by David Burton).
		* mapbook.cc (update_mapfile): Exclude writing time from intervals.
		  (Reported by David Burton).
		* rescuebook.cc (extend_outfile_size): Use ftruncate if it works.
		* Print large numbers in groups of 3 digits separated by underscores.
		* main.cc: Set a valid invocation_name even if argc == 0.
	2019-02-24  Antonio Diaz Diaz  <antonio@gnu.org>
		* Version 1.24 released.
		* Added new option '--command-mode'.
		* Implemented mapfile backup.
		* ddrescue.texi: Documented final contents of bad areas in outfile.
		* configure: Accept appending to CXXFLAGS, 'CXXFLAGS+=OPTIONS'.
	2018-02-13  Antonio Diaz Diaz  <antonio@gnu.org>
		* Version 1.23 released.
		* rescuebook.cc (trim_errors): Fix wrong change to non-scraped.
		* Added new option '--same-file'.
		* Added new option '--shift' to ddrescuelog.
		* fillbook.cc (fill_block): Write location data as one line.
		* fillbook.cc (read_buffer): Do not require a seekable infile.
		* ddrescue.texi: Added chapter 'Output'.
		* check.sh: Added 'combined rescue' test.
		* io.cc: Added missing '#include <cstdio>'.
	2017-02-03  Antonio Diaz Diaz  <antonio@gnu.org>
		* Version 1.22 released.
		* Option '-X, --exit-on-error' replaced by '-X, --max-read-errors'.
		* Added new option '--max-slow-reads'.
		* Added new option '--delay-slow'.
		* Added new option '--reset-slow'.
		* Added new option '--log-events'.
		* Added new option '--mapfile-interval'.
		* Added new option '--pause-on-error'.
		* Option '--pause' has been renamed to '--pause-on-pass'.
		* Option '--max-errors' has been renamed to '--max-bad-areas'.
		* Renamed 'errsize' to 'bad_size' and 'errors' to 'bad_areas'
		* Rescuebook: Show read_errors, error_rate and slow_reads.
		* Added 'current_pass' field to mapfile.
		* Added two new passes (3 and 4) to the copying phase.
		* main.cc (parse_cpass): Accept ranges of passes.
		* Option '-K, --skip-size' now accepts sizes up to 1 EiB.
		* Initial skip size now defaults to (infile_size / 100_000).
		* rescuebook.cc (copy_non_tried): Don't reduce min_read_rate,
		  enable it only for passes 1 and 2.
		* rescuebook.cc (trim_errors): Don't trim bad edges.
		* main_common.cc (getnum): Accept 's' after other multiplier.
		* '--ask', '-vv' now show size along with model and serial number.
		* non_posix.cc: Add 'device_id' for Cygwin.
		  (Patch written by Christian Franke <franke@computer.org>).
		* rescuebook.cc (do_rescue): Show full sizes in domain warning.
		* Added new option '-A, --annotate-mapfile' to ddrescuelog.
	2016-03-17  Antonio Diaz Diaz  <antonio@gnu.org>
		* Version 1.21 released.
		* mapbook.cc (Mapbook): Fix iobuf alignment.
		  (Reported by Heikki Tauriainen).
		* Removed short option names '-1' and '-2'.
		* Allow only regular files for '--log-rates' and '--log-reads'.
		* Option '-D, --odirect' now works also in fill mode.
		* rescuebook.cc (copy_block): Return 1 on unaligned read error.
		  Set e_code on any error if verify_on_error.
		* Option '-X, --exit-on-error' has been extended to all phases.
		* Assigned short name '-Z' to option '--max-read-rate'.
		* mapbook.cc (update_mapfile): 'fsync' the mapfile every 5 minutes.
		* Rescuebook: Show full range of sizes from non-tried to finished.
		* rescuebook.cc (show_status): Show percentage rescued.
		* configure: Avoid warning on some shells when testing for g++.
		* Makefile.in: Detect the existence of install-info.
	2015-09-10  Antonio Diaz Diaz  <antonio@gnu.org>
		* Version 1.20 released.
		* 'logfile' has been renamed to 'mapfile' everywhere.
		* Changed short name of option '--synchronous' to '-y'.
		* Changed long name of option '-d' to '--idirect'.
		* Added new option '-D, --odirect'.
		* Added new option '-J, --verify-on-error'.
		* Added new option '--max-read-rate'.
		* rescuebook.cc (copy_block): Copy arbitrary blocks with '--idirect'.
		* Include only bad-sector blocks in 'errsize'.
		* rescuebook.cc (show_status): Show the estimated remaining time.
		* io.cc (format_time): Show time in days, hours, minutes and seconds.
		* Added per sector location data to fill mode.
		* mapbook.cc: Added emergency save of the mapfile.
		* Show device name with '--ask' or '-vv' on Haiku.
		* mapfile.cc (read_mapfile): Read read-only mapfiles from stdin.
		* ddrescuelog.cc: Allow multiple mapfiles for '-t, --show-status'.
		* ddrescuelog.cc (create_mapfile): '-' writes mapfile to stdout.
		* ddrescue.texi: Added new chapter 'Optical media'.
		* ddrescue.texi: Documented maximum size of the rescue domain.
		* configure: Option '--enable-linux' renamed to '--enable-non-posix'.
		* Makefile.in: Added new targets 'install*-compress'.
		* File 'ddrescue.h' renamed to 'mapbook.h'.
		* File 'logbook.cc' renamed to 'mapbook.cc'.
		* File 'logfile.cc' renamed to 'mapfile.cc'.
		* Files linux.{h,cc} renamed to non_posix.{h,cc}.
	2014-10-03  Antonio Diaz Diaz  <antonio@gnu.org>
		* Version 1.19 released.
		* Fixed a race condition at start of run with '--timeout=0'.
		* Added new option '-P, --data-preview'.
		* Added new option '-u, --unidirectional'.
		* Added new option '-X, --exit-on-error'.
		* Added new option '--ask' to ask for user confirmation.
		* Added new option '--cpass' to select passes during copying phase.
		* Added new option '--pause' to insert a pause between passes.
		* Removed option '-l, --logfile-size'.
		* Skip on the first error during the copying phase.
		* rescuebook.cc: Trimming done in one pass, may be run in reverse.
		* The splitting phase has been replaced by a scraping phase.
		* Changed long name of option '-n' to '--no-scrape'.
		* rescuebook.cc: Alternate direction of passes during retrying phase.
		* Show ATA model and serial number with '--ask' or '-vv' on Linux.
		* configure: Added new option '--enable-linux'.
		* New files linux.h linux.cc.
		* License changed to GPL version 2 or later.
	2014-06-10  Antonio Diaz Diaz  <antonio@gnu.org>
		* Version 1.18.1 released.
		* ddrescuelog.cc (do_logic_ops): Fixed 'or' and 'xor'.
		* Added new option '-H, --test-mode' to simulate read errors.
		* Added new option '-L, --loose-domain' to ddrescue and ddrescuelog.
		* Added new option '-N, --no-trim' to disable trimming of
		  damaged areas.
		* Added new option '-O, --reopen-on-error'.
		* Added new options '-1, --log-rates', '-2, --log-reads'.
		* Extended '-K, --skip-size' with maximum and disable values.
		* Changed long name of option '-r' to '--retry-passes'.
		* Changed short name of option '--generate-mode' to '-G'.
		* Default value of option '-l, --logfile-size' increased to 10000.
		* If interrupted, ddrescue terminates by raising the signal received.
		* rescuebook.cc (copy_non_tried): Don't mark skipped blocks as
		  non-trimmed. Try them in additional passes (before trimming).
		* rescuebook.cc: Limit the copying phase to 3 passes.
		* rescuebook.cc: Alternate direction of passes during copying phase.
		* rescuebook.cc: Smallest blocks are trimmed first.
		* rescuebook.cc (split_errors): Read largest first if logfile full.
		* Improved speed when using option '-m, --domain-logfile'.
		* io.cc (show_status): Show the current total run time.
		* rescuebook.cc: Show pass number and direction during copying.
		* rescuebook.cc (show_status): Show block pos instead of current_pos.
		* main.cc: Show "an unknown number of bytes" for unknown insize.
		* Added option '-B, --binary-prefixes' to ddrescuelog.
		* Added new option '-C, --complete-logfile' to ddrescuelog.
		* Added new option '-P, --compare-as-domain' to ddrescuelog.
		* Improved speed of logic operations in ddrescuelog.
		* rescuebook.cc (do_rescue): Show warning when domain is smaller
		  than logfile.
		* ddrescuelog.cc (do_show_status): Show logfile and domain extents
		  when domain is smaller than logfile.
		* block.h: Class Block now forces the invariant by itself.
		* Code reorganization. New class 'Logfile'.
		* Added status message to rescue logfile.
		* Many improvements to documentation.
		* ddrescue.texinfo: Renamed to ddrescue.texi.
	2013-07-09  Antonio Diaz Diaz  <antonio@gnu.org>
		* Version 1.17 released.
		* Added new option '-l, --logfile-size'.
		* Added new option '-w, --ignore-write-errors'.
		* Option '--fill' has been renamed to '--fill-mode'.
		* Option '--generate-logfile' has been renamed to '--generate-mode'.
		* Added option '--sector-size' as a synonym of '--block-size'.
		* Added option '--retries' as a synonym of '--max-retries'.
		* Added option '--size' as a synonym of '--max-size'.
		* rescuebook.cc: Trimming is now done from both edges of each
		  non-trimmed block. Largest blocks are trimmed first.
		* rescuebook.cc: Largest blocks are now split first until
		  logfile reaches '--logfile-size' entries.
		* logbook.cc (extend_sblock_vector, truncate_vector): Terminate
		  if truncation would discard finished blocks.
		* rescuebook.cc: Mark failed blocks with 1 sector as bad-sector.
		* logbook.cc (extend_sblock_vector): Remove last block of
		  logfile if it starts at insize and is not marked as finished.
		* io.cc (show_status, update_rates): Detect a jump back in time
		  and adjust status.
		* ddrescue.h (slow_read): Return false for the first 10 seconds.
		* io.cc (show_status) Leave cursor after message so that ^C does
		  not overwrite it.
		* main.cc: Don't require '--force' for generate mode.
		* ddrescue.h (Logbook::logfile_exists): Don't return false if
		  logfile exists but is empty.
		* ddrescue.texinfo: Added new chapter 'Using ddrescue safely'.
		* Documented that 'direct disc access' only reads whole sectors.
		* configure: Options now accept a separate argument.
		* Makefile.in: Added new target 'install-bin'.
	2012-06-11  Antonio Diaz Diaz  <ant_diaz@teleline.es>
		* Version 1.16 released.
		* Added new option '-K, --skip-size'.
		* Added new option '-T, --timeout'.
		* Changed short name of option '--try-again' to '-A'.
		* Maximum skip size is now limited to 1% of infile size or 1 GiB
		  (whichever is smaller), rounded to the next multiple of sector
		  size.
		* Set current_pos to end of block when reading backwards.
		* The option '-E, --max-error-rate' now checks the rate of
		  actually failed reads, not the growth of error size.
		* The option '-v, --verbose' now increases verbosity if repeated.
		* Changed quote characters in messages as advised by GNU Standards.
		* configure: 'datadir' renamed to 'datarootdir'.
		* New files rational.h, rational.cc.
	2012-01-01  Antonio Diaz Diaz  <ant_diaz@teleline.es>
		* Version 1.15 released.
		* Added new option '-a, --min-read-rate'.
		* Added new option '-I, --verify-input-size'.
		* Added new option '-x, --extend-outfile'.
		* main.cc: Verify that infile, outfile and logfile are all
		  different.
		* Non-tried blocks are now read aligned to cluster-size sectors.
		* rescuebook.cc: Improved skip algorithm for the split pass.
		* main.cc: Removed spurious warning about '-D' ignored in fill mode.
		* ddrescue.texinfo: Improved description of algorithm.
		* logbook.cc (change_chunk_status): Return an adjust value (-1, 0, 1)
		  to keep "errors" updated without calling count_errors every time.
		* ddrescue.cc: Renamed to io.cc.
		* Added 'ddrescuelog', a program for logfile manipulation.
	2011-01-10  Antonio Diaz Diaz  <ant_diaz@teleline.es>
		* Version 1.14 released.
		* Added new option '-R, --reverse'.
		* Added new option '-E, --max-error-rate'.
		* Extended syntax '--max-errors=+N' to specify new errors.
		* Changed short name of option '--retrim' to '-M'.
		* Removed spurious warning about 'preallocation not available'.
		* Code reorganization. New class 'Genbook'.
	2010-08-27  Antonio Diaz Diaz  <ant_diaz@teleline.es>
		* Version 1.13 released.
		* Non-regular output files are no longer overwritten by default.
		* Added new option '-f, --force'.
		* Added new option '-p, --preallocate'.
		* main.cc (write_logfile_header): Write command line to logfile.
		* ddrescue.texinfo: Added info about logfile and recoverable formats.
		* ddrescue.texinfo: Added a couple more warnings to the tutorial.
		* testsuite: 'test1' renamed to 'test.txt'
		* Revert to use 'long' instead of 'time_t' for time variables.
		  Ddrescue only needs counting seconds and 'time_t' causes
		  warnings on some systems.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 11:24:25 +00:00
Michael Tremer
67fbd255d1 fireperf: New package
https://lists.ipfire.org/pipermail/development/2021-February/009285.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-04 15:57:26 +00:00
Michael Tremer
e514d67f8e samba: Update to 4.13.4
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:50:36 +00:00
Adolf Belka
5ac4578d2e elfutils: Update to 0.182
- Update elfutils from 0.176 to 0.182
- Updated rootfile
- From version 0.178 debuginfod client/server capability was added.
	Additional .configure options required to disable debuginfod
	and libdebuginfod
- Changelog
	2020-10-28  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.182.
		* NEWS: Add 0.182 section.
	2020-10-28  Tom Tromey  <tom@tromey.com>
		* .gitignore: Add /tests/leb128.
	2020-10-01  Frank Ch. Eigler  <fche@redhat.com>
		PR25461
		* configure.ac: Add --enable-debuginfod-urls[=URLS] option.
	2020-09-18  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Check availability of libzstd and zstd.
	2020-09-08  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.181.
		* NEWS: Add 0.181 section.
	2020-08-20  Dmitry V. Levin  <ldv@altlinux.org>
		* configure.ac (--enable-libdebuginfod): AC_DEFINE ENABLE_LIBDEBUGINFOD.
	2020-07-17  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set -DBAD_FTS=1 also for CXXFLAGS.
	2020-06-19  Mark Wielaard  <mark@klomp.org>
		* Makefile.am (SUBDIRS): Always add debuginfod.
		* configure.ac (debuginfod): Split off...
		(libdebuginfod): ... this. Also add DUMME_DEBUGINFOD.
	2020-06-15  Sergei Trofimovich <slyfox@gentoo.org>
		* configure.ac: Use READELF in build-id check.
	2020-06-11  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.180.
		* NEWS: Add 0.180 section.
		* .gitignore: Update with new generated file.
	2020-06-10  Mark Wielaard  <mark@klomp.org>
		* configure.ac (MODVERSION): Remove.
	2020-03-30  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.179.
		* NEWS: Add 0.179 section.
	2020-03-25  Mark Wielaard  <mark@klomp.org>
		* README: Update mailinglist subscription info.
		* CONTRIBUTING: Likewise.
	2020-02-03  Frank Ch. Eigler  <fche@redhat.com>
		* configure.ac: Tolerate CXX= for debuginfod configuration.
	2019-12-11  Omar Sandoval  <osandov@fb.com>
		* configure.ac: Apply -Werror after user-defined CFLAGS in
		-D_FORTIFY_SOURCE=2 check.
	2019-12-06  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Add ac_cv_buildid check.
	2019-11-26  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.178.
		NEWS: Add 0.178 section.
	2019-11-26  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Add CXXFLAGS for gcov.
	2019-10-28  Aaron Merey  <amerey@redhat.com>
		* debuginfod/: New directory for debuginfod code.
		* Makefile.am (SUBDIRS): Recurse there.
		* configure.ac (--enable-debuginfod): New flag & checks.
	2019-08-25  Jonathon Anderson <jma14@rice.edu>
		* configure.ac: Add new --enable-valgrind-annotations
		* configure.ac: Add new --with-valgrind (headers only)
	2019-07-05  Omar Sandoval  <osandov@fb.com>
		* configure.ac: Get rid of --enable-libebl-subdir.
		* Makefile.am (SUBDIRS): Reorder backends and libcpu before libebl to
		satisfy build dependencies.
	2019-08-13  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.177.
		* NEWS: Mention elfclassify, readelf DW_AT_data_member_location
		and DW_AT_discr_list attribute changes, dwarf.h DW_AT_GNU additions,
		dwelf_elf_e_machine_string function, dwelf_elf_begin change and
		C-SKY backend support.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:24:38 +00:00
Adolf Belka
8ace58e8ac p7zip: Update to 17.03
- Update p7zip from 16.02 (Jul 2016) to 17.03 (Dec 2020)
- Version 16.02 was the last version by the previous dev team.
	A fork was created in May 2020 with version 17.01
- Rootfile updated
- Changelog
	Version 17.03
	=============
	  - add zstd to zip
	  - add hash algorithm
	    - XXHASH32
	    - XXHASH64
	    - MD2
	    - MD4
	    - MD5
	    - sha384
	    - sha512
	  - add Lzfse to dmg
	  - add lz5 to 7z
	  - add lizard to 7z
	  - update lz4 to v1.9.3
	  - add brotli to 7z
	  - update cmake build
	  - fix xz crc64 error
	  - use system local to select OEM code
	  - add rpm install
	  - fix lzma2 and flzma22 call the same algorithm
	  - add 7zr build
	  - fix tar format link file compress and decompress
	Version 17.02
	=============
	  - p7zip 17.02 is more like 7zip 17.01(only 7za and 7z),The difference from 7zip 17.01
	    and older version p7zip is the following description
	  - Supports Fast lzma2 1.0.1 compression method
	  - Update Zstd method to 1.4.5
	  - Add zstd method parameters in 7z format
	    ZSTD parameters NEW name:
	         strategy -> strat
	         fast -> fast
	         long -> long
	         WindowLog -> wlog
	         HashLog -> hlog
	         ChainLog -> clog
	         SearchLog -> slog
	         MinMatch -> slen
	         TargetLen -> tlen
	         OverlapLog -> ovlog
	         LdmHashLog -> ldmhlog
	         LdmSearchLength -> ldmslen
	         LdmBucketSizeLog -> ldmblog
	         LdmHashRateLog -> ldmhevery
	  - Fix symlink files contained inside tar and squashfs as regular file
	  - Add lz4 and Zstd decompress method to squashfs
	Version 17.01
	=============
	  - Fix BUG CVE-2018-10115
	  - Fix BUG CVE-2018-5996
	  - Fix BUG CVE-2017-17969
	  - Fix BUG CVE-2016-9296
- The bug fixes in version 17.01 address the same CVE bugs as the
	p7zip-16.02-consolidated_fixes-1.patch Therefore this patch is no longer needed
- The patches for CVE-2016-2334 & 2335 were for versions before 16.00 so are no longer needed

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:21:29 +00:00
Michael Tremer
7b476adef3 lynis: Update rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:15:07 +00:00
Peter Müller
f1f2a8dbef lynis: update to 3.0.3
The changelog of lynis 3.0.3 is available at
https://github.com/CISOfy/lynis/releases/tag/3.0.3; all changes since
lynis 3.0.1 can be inspected at https://github.com/CISOfy/lynis/releases.

lynis 3.0.2 adds detection for IPFire, so we can hope to have those
"unknown operating system" messages omitted in future. :-)

Minor adjustments to LFS and rootfile were necessary to purge unused
CI/CD stuff as well as some markdown files (licence, code of conduct,
etc. pp.) from the extracted archive.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-02 10:56:19 +00:00
Peter Müller
d5eb0e3906 libseccomp: update to 2.5.1
Release notes as per https://github.com/seccomp/libseccomp/releases/tag/v2.5.1:

Version 2.5.1 - November 20, 2020

    Fix a bug where seccomp_load() could only be called once
    Change the notification fd handling to only request a notification fd if
    the filter has a _NOTIFY action
    Add documentation about SCMP_ACT_NOTIFY to the seccomp_add_rule(3) manpage
    Clarify the maintainers' GPG keys

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:48:40 +00:00
Adolf Belka
d06693b487 qemu: Update to 5.2.0
- Update qemu from 5.0.0 to 5.2.0
- Changelogs for 5.1.0 and 5.2.0 available at https://wiki.qemu.org/ChangeLog/
- rootfile updated
- patch no longer needed as fix built into source. patch was not utilised
	for 5.0.0 version. Patch line was commented out in previous lfs

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:29 +00:00
Adolf Belka
68fbf256e2 cups-filters: Update to 1.28.7
- Update cups-filters from 1.27.4 to 1.28.7
- Changelog
	CHANGES IN V1.28.7
		- driverless: Removed the support quality check from Pull
		  request #235 as it takes significant time for each printer
		  being listed, making cups-driverd (`lpinfo -m`) timing out
		  when there are many printers (OpenPrinting CUPS issue #65).
		- libcupsfilters: In the PPD generator give priority to Apple
		  Raster against PDF (Issue #331).
		- libcupsfilters: Added NULL check when removing ".Borderless"
		  suffixes from page size names (Issue #314, Pull request
		  #328).
		- libcupsfilters: In the cupsRasterParseIPPOptions() map the
		  color spaces the same way as in the PPD generator (Issue
		  #326, Pull request #327).
		- libcupsfilters: Fixed addition of grayscale mode in
		  generated PPD files, to avoid duplicate entries
		  (OpenPrinting CUPS issue #59).
	CHANGES IN V1.28.6
		- libcupsfilters: In generated PPDs add a grayscale mode if
		  there are only color printing modes (from OpenPrinting
		  CUPS).
		- libcupsfilters: In generated PPDs add an "OutputBin" option
		  also if it has only one choice (OpenPrinting CUPS pull
		  request #18).
		- libcupsfilters: Generated PPDs could have an "Unknown"
		  default InputSlot (OpenPrinting CUPS issue #44).
		- cups-browsed: Removed unneeded IPP attribute additions
		  preventing the created local queues from preserving a
		  location or description the user assigns to them (Issue
		  #323).
		- cups-browsed: Removed all calls of the resolve_uri() function
		  of libcupsfilters, as these are not actually needed and in case
		  the supplied DNS-SD-based URI is not resolvable, the function
		  gets stuck for ~5 seconds.
		- cups-browsed: Fixed several memory leaks, mainly from the
		  code to merge printer IPP attributes for clusters (Pull
		  request #322).
		- cups-browsed: Silenced compiler warning.
		- foomatic-rip: Fix infinite loop and input from file on raw
		  printing (Pull request #318).
		- foomatic-rip: Remove temporary file created during pdf-to-ps
		  conversion (Pull request #313).
	CHANGES IN V1.28.5
		- cups-browsed: UUID from IPP response was used after its
		  pointer was freed by ippDelete() (Pull request #311).
	CHANGES IN V1.28.4
		- driverless: Avoid duplicate PPD list entries from the same
	          device via UUID
		- driverless: Reduce ippfind calls by "driverless" and
		  "driverless-fax"called by CUPS. Let "driverless list" list
		  both print and fax PPDs and "driverless-fax list" do
		  nothing.
		- driverless: Avoid duplicate listings in printer discovery,
		  by "driverless-fax" not listing any URI as "driverless"
		  lists them all already.
		- driverless: Vastly improve performance by doing only one
		  ippfind call instead of two (IPP, IPPS) as ippfind accepts
		  more than one reg type on the command line.
		- Sample PPDs: Corrected manufacturer name in
		  Fuji_Xerox-DocuPrint_CM305_df-PDF.ppd.
	CHANGES IN V1.28.3
		- libcupsfilters, cups-browsed: Fixed inconsistency between
		  resolvers for DNS-SD-based URIs, resolve_uri() and
		  ippfind_based_uri_converter(). Now both return a freeable
		  string.
		- libcupsfilters: Fix uninitialized buffer and parsing ippfind
		  output in ippfind_based_uri_converter() function (Issue
		  #308, Pull request #309).
	CHANGES IN V1.28.2
		- driverless: Free allocated memory, use MAX_OUTPUT_LEN (Pull
		  request #304).
		- driverless: Make the two ippfind tasks(for IPP
		  and IPPS) run in parallel (Pull request #302, #305, #306).
		- braille: Support new liblouis tables not containing a
		  display name (Pull request #303)
		- Build system: Let ./configure not error out when there is
		  more than one DejaVuSans.ttf test font candidate (Issue
		  #300).
		- cups-browsed: Crash when a remote printer set as default
		  gets removed, due to missing variable in printf() call
		  (Issue #299).
		- libcupsfilters: Removed all signal handling and global
		  variables from get_printer_attributes() and
		  ippfind_based_uri_converter().  This is overkill for these
		  quick operations and causes problems when shutting down
		  cups-browsed (Issue #298).
	CHANGES IN V1.28.1
		- COPYING: Fixed several typos
		- libcupsfilters: Fixed typo in log message of
		  get_printer_attributes functions.
		- cups-browsed: Fixed typos in configuration file and man page
		- libcupsfilters: Let the PPD generator not suffix page size
		  names with ".Borderless" if all page sizes would get this
		  suffix, for example for printers which generally print
		  borderless.
		- libcupsfilters: Added "faxPrefix" option for generated IPP
		  Fax Out PPDs, so that this option also appears in print
		  dialogs.
		- driverless: List addresses for local services correctly when
		  using "--std-ipp-uris" (with "localhost" hostname).
		- driverless: Make calls of the ippfind utility somewhat faster,
		  setting the timeout of ippfind to automatic.
		- libcupsfilters: Resolve DNS-SD-based URIs for local services
		  correctly (using hostname "localhost").
		- libcupsfilters: In get_printer_attributes() functions do not
		  try to convert URIs which are not DNS-SD-based (Issue #294).
		- libcupsfilters: In get_printer_attributes() functions also
		  support URIs with "dnssd://..." scheme.
		- libcupsfilters: Moved signal handling back into main
		  function of the get_printer_attributes() variants, it got
		  moved out accidentally.
		- driverless: For generating a PPD, independent whether via
		  "driverless URI" or "driverless cat URI", always allow CUPS
		  driver URIs (prefixed with "driverless: " or
		  "driverless-fax:") and pure IPP URIs.
		- driverless: Accept clean IPP URIs also for 'driverless cat
		  ...' (Issue #295, Pull request #296).
		- driverless-fax: Do not use fixed path for call of driverless
		  itself (Pull request #293).
	CHANGES IN V1.28.0
		- driverless, driverless-fax, libcupsfilters: Added IPP Fax
		  Out support. Now printer setup tools list an additional fax
		  "driver".  A fax queue is created by selecting this
		  driver. Jobs have to be sent with "-o phone=12345" to supply
		  the destination phone number (Pull request #280).
		- libfontembed: Silenced warning with gcc 10.x (Pull request
		  #287).
		- cups-browsed: Added ./configure options
		  --enable-saving-created-queues and
		  --with-remote-cups-local-queue-naming (Pull request: #253,
		  #285).
		- cups-browsed: Fixed several memory leaks, mainly from the
		  code to merge printer IPP attributes for clusters (Pull
		  request #281, #283).
		- driverless: Added "--std-ipp-uris" command line option to
		  show listed URIs in standard hostname-based form (not the
		  CUPS DNS-SD-service-name-based form. Only for manual call of
		  the utility, for debugging purposes (Pull request #277).
		- libfontembed: Removed assert() calls which cause crashes
		  when unsupported emoji fonts are installed (Issue #254, Pull
		  request #276).
		- driverless: Added support for IPPS (use "ipps://..." URIs if
		  possible, Issue #251, Pull request #270, #273).
		- gstoraster, gstopdf: When converting PostScript to PDF use
		  the "pdfwrite" output device with "-dPDFSETTINGS=/default"
		  instead of with "-dPDFSETTINGS=/printer". This reproduces
		  bitmaps in the PostScript file with their original image
		  quality (Issue #272).
		- cups-browsed: Limit log file size and add backup file for
		  previous log entries. Introduced the configuration option
		  DebugLogFileSize in cups-browsed.conf to set the actual
		  limit in kilobytes or 0 to get the old behavior of an
		  unlimited size for the log file (Issue #260, Pull request
		  #267).
		- gstoraster, gstopdf: Do not apply margins when output format
		  is PDF, as then we convert an incoming PostScript file to
		  PDF (pre-pdftopdf) and do not prepare the pages for the
		  printer (post-pdftopdf, Issue #250).
		- cups-browsed: Do not write any log messages directly to
		  stderr, there were some concerning timeouts on queue
		  creation (Issue #260).
		- Build system: Fix cross-compilation without DejaVu test font
		  in configure.ac (Issue #262, Pull request #263).
		- libcupsfilters: Respect the fact that PPD keywords
		  are case-sensitive when adding "*cupsManualCopies: True" in
		  PPD file (Issue #242).
		- libcupsfilters: Older versions of libcups (< 2.3.1)
		  had the enum name for fold-accordion finishings mistyped.
		  Added a workaround.
		- cups-browsed: Remove left-over local queues from the
		  previous session more quickly when CUPS legacy browsing is
		  turned on.
		- cups-browsed: Left-over local queues from the previous
		  session for which the corresponding remote printer did not
		  appear again did not get removed as they were considered
		  externally overwritten.
		- gstoraster, gstopdf: Add option "-dDoNumCopies" to
		  Ghostscript command line if we are outputting PDF (called
		  via gstopdf wrapper) and the number of copies supplied to
		  CUPS is 1 (4th command line argument). In this case we
		  convert incoming PostScript to PDF and need to respect
		  embedded PostScript commands to implement the number of
		  copies (Issue #255, CUPS Issue #5796, OpenSUSE bug
		  #1173345).
		- imagetoraster: Potential null dereference fix (when no valid
		  PPD is supplied, Pull request #256).
		- cups-browsed: Call cupsGetNamedDest() only if
		  "OnlyUnsupportedByCUPS No"
		- Sample PPDs: Corrected ColorModel default for Generic PWG
		  Raster PPD to Color (Pull request #247).
		- cups-browsed: Mark the temp queue as cups-browsed-generated
	          during setting printer-is-shared (Pull request #246).
		- cups-browsed: Remove mentions of README and AUTHORS files in
	          the man page (Pull request #244).
		- pclmtoraster: Added new filter to extract Raster data from
		  raster-only PDF files, here for the special case of PCLm
		  files (Pull request #243, #257).
		- Sample PPDs: In Generic-PDF_Printer-PDF.ppd add option to
		  switch between color and grayscale printing (Pull request
		  #237).
	CHANGES IN V1.27.5
		- cups-browsed: Do not remove the created local queues on
		  shutdown, to avoid their re-creation on restart, so that
		  desktops get no cluttered with notifications of new queues
		  being created. One can return to the old behavior via
		  "KeepGeneratedQueuesOnShutdown No" in cups-browsed.conf
		  (Ubuntu bug #1869981, #1878241).
		- cups-browsed: Do not accept DNS-SD broadcasts of IPPS type
		  of "remote" CUPS queues of another CUPS instance on the
		  local machine. This way we get a local queue pointing to
		  such a printer only in unencrypted version (IPP). For some
		  reason printing from one CUPS server to another on the same
		  machine works only unencrypted.
		- foomatic-rip: Map two-sided-short-edge to DuplexTumble (Pull
	          request #236)
		- Build system: In configure.ac use AS_IF instead of
	          AC_CHECK_FILE for font check (Issue #239, Pull request #240)
		- cups-browsed: Cleaned up code for determining to which CUPS
		  server (host/port/domain socket) to connect, so that
		  connection via DomainSocket cups-browsed.conf directive,
		  CUPS_SERVER and IPP_PORT environment variables and all
		  defaults and methods of libcups, including CUPS' client.conf
		  work.
		- gstoraster, rastertopdf: Do not pass NULL to fprintf() (Pull
	          request #230).
		- libcupsfilters: Silence compiler warning (Pull request #229).
- rootfile updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:08 +00:00
Adolf Belka
aadf0a01e3 cifs-utils: Update to 6.12
- Update cifs-utils from 5.9 to 6.12
- Changelog - URL for each change gives more details of changes
	December, 2020: Release 6.12
	    get/setcifsacl tools are improved to support changing owner, group and SACLs
	    mount.cifs is enhanced to use SUDO_UID env variable for cruid
	    smbinfo is re-written in Python language
	    https://lists.samba.org/archive/samba-technical/2020-December/136156.html
	September, 2020: Release 6.11
	    CVE-2020-14342: mount.cifs: fix shell command injection
	    https://lists.samba.org/archive/samba-technical/2020-September/135747.html
	December 16, 2019: Release 6.10
	    smb3 alias/fstype is added
	    smb2-quota tool is added to display quota information
	    smb2-secdesc UI tool to view security descriptors is added
	    smbinfo is enhanced with capabilities to dump session keys and get/set compression of files
	    smbinfo bash completion is supported
	    getcifsacl tool is improved to support multiple files
	    https://lists.samba.org/archive/samba-technical/2019-December/134662.html
	April 5, 2019: Release 6.9
	    smbinfo utility is added to query various kinds of information from the server (objectId, snapshots, different FileInfo* classes and other metadata)
	    server IP change is supported by expiring DNS key resolver entries
	    get/setcifsacl tools are improved to handle unexpected behavior
	    share snapshot are allowed to be specified by a GMT token or SMB 100-nanoseconds time
	    various new mount option are documented: bsize, handletimeout, handlecache, rdma, max_credits and others
	    https://lists.samba.org/archive/samba-technical/2019-April/133233.html
	March 9, 2018: Release 6.8
	    man pages updates (auto-negotiate protocol version by default) and cleanups (moving to .rst format)
	    setcifsacl: fix security descriptor buffer size mismatch
	    cifscreds: fix a segfault for incorrect usage
	    minor mount.cifs fixes
	    https://lists.samba.org/archive/samba-technical/2018-March/126227.html
	March 2, 2017: Release 6.7
	    fixes for regressions from cifs.upcall overhaul
	    mount.cifs cleanups
	    https://lists.samba.org/archive/samba-technical/2017-March/119036.html
	September 3, 2016: Release 6.6
	    cleanup/overhaul of cifs.upcall krb5 credcache handling
	    https://lists.samba.org/archive/samba-technical/2016-September/115974.html
	February 22, 2016: Release 6.5
	    mount.cifs: ignore x- mount options
	    minor build fixes
	    minor manpage fix
	    https://lists.samba.org/archive/samba-technical/2016-February/112372.html
	July 11, 2014: Release 6.4
	    allow PAM directory to be configurable
	    better determination of default keytab file
	    better cifscreds error handling
	    uppercase devicename when retrying mount
	    https://lists.samba.org/archive/samba-technical/2014-July/101132.html
	January 9, 2014: Release 6.3
	    fixes for various bugs turned up by Coverity
	    clean unused cruft out of upcall binary
	    add new pam_cifscreds PAM module for establishing NTLM creds on login
	    https://lists.samba.org/archive/samba-technical/2014-January/097124.html
	October 4, 2013: Release 6.2
	    setcifsacl can now work without a plugin
	    systemd-ask-password is found using $PATH now
	    cifs.upcall now works with KEYRING: credcaches
	    https://lists.samba.org/archive/samba-technical/2013-October/095287.html
	July 2, 2013: Release 6.1
	    minor bugfixes
	    allow cifs.upcall to use dedicated keytab
	    https://lists.samba.org/archive/samba-technical/2013-July/093601.html
	March 25, 2013: Release 6.0
	    minor bugfixes and documentation updates
	    support for NFS-style device names removed
	    https://lists.samba.org/archive/samba-technical/2013-March/091169.html
- Rootfile updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:45:54 +00:00
Matthias Fischer
dd401c4d8a libassuan: Update to 2.5.4
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:38:31 +00:00
Adolf Belka
5bc11f39e3 dbus: Update to 1.12.20
- Update dbus from 1.11.12 to 1.12.20 (latest in release line
	1.13.x is also available but this is the development line
	and not recommended for production use
- Changelog between these two versions is very long (750 lines long) and
	can be found in the NEWS file in the source tarball.
- rootfile updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:31:29 +00:00
Michael Tremer
968ad8ba8d samba: Update rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-29 11:09:34 +00:00
Adolf Belka
ecf0ba6d12 minicom: Update to 2.8
- Update minicom from 2.7.1 to 2.8
- Changelog for version 2.8
	New timestamp mode: Delta to previous line.
	Add HPA ESC sequence
	Add alternative window support (ti/te)
	Fix file name of non-global configuration settings.
	Update translations: Indonesian, French, Swedish, Spanish, German, Brazilian Portuguese, Vietnamese, Polish, Danish, Norwegian, Serbian
	New translation: Serbian, Simplified chinese
	Fix F10 macro key used in current setups
	Add F11 and F12 for macro use
	Fixed DTR for recent systems
	Add support for RS485.
	Add --capturefile-buffer-mode option
	Bug fixes
- Updated rootfile

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-28 16:49:00 +00:00
Adolf Belka
ff5aef9d30 tshark: Update to 3.4.2
- Update tshark from 3.2.6 (Old Stable Release line) to 3.4.2 (Stable Release line)
- Changelog at https://www.wireshark.org/docs/relnotes/
- Rootfile updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-28 16:48:09 +00:00
Michael Tremer
37fe3658a0 samba: Add helper script to pipe password
It is complicated to set the password in the C helper binary.

Therefore it is being set by a helper script.

This is still not an optimal solution since the password might be
exposed to the shell environment, but has the advantage that shell
command injection is no longer possible.

Fixes: #12562
Reported-by: Albert Schwarzkopf <ipfire@quitesimple.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 21:06:57 +00:00
Adolf Belka
2abcb7ee5f bacula: Update to 9.6.7
- Update bacula from 9.6.6 to 9.6.7
	This is a minor bug release
	See https://sourceforge.net/projects/bacula/files/bacula/9.6.7/ReleaseNotes/
- This is the last of the version 9 series. The next update will be the version 11 series.
- Update of lfs and rootfiles

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-28 13:15:29 +00:00
Adolf Belka
9cea690a93 htop: Update to 3.0.3
- Update htop from 3.0.2 to 3.0.3
	See the Change Log for details of changes
	https://github.com/htop-dev/htop/blob/master/ChangeLog
- Rootfiles updated

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-21 16:35:10 +00:00
Adolf Belka
9ee802c508 hplip: Update to 3.20.11
- Update from 3.18.6 to 3.20.11 (16 updates)
- See Release notes for bug fixes and support for additional printers
	https://sourceforge.net/p/hplip/news/
- Update of rootfile :-)

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-20 09:47:04 +00:00
ummeegge
50752f1b61 kerberos: Update to version 1.18.3
Since version 1.15.2 several fixes and enhancements has been introduced.
For a full overview the release notes can be found in the next lines.

https://web.mit.edu/kerberos/krb5-1.16/
https://web.mit.edu/kerberos/krb5-1.17/
https://web.mit.edu/kerberos/krb5-1.18/

Signed-off-by: ummeegge <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-10 12:32:11 +00:00
ummeegge
14baf8472a tshark: Update to version 3.4.0
- Since tshark uses since 3.4.0 an always enabled asynchronous DNS
resolution, c-ares is a needed dependency.
- Since the current actual version 3.2.6 a lot of bug fixes, fixed
vulnerabilities, updated features, new protocols but also updated
protocols has been integrated.
A full overview of all changes can be found in here -->
Update to version 3.2.7:
https://www.wireshark.org/docs/relnotes/wireshark-3.2.7.html
Update to version 3.2.8:
https://www.wireshark.org/docs/relnotes/wireshark-3.2.8.html
Update to version 3.4.0
https://www.wireshark.org/docs/relnotes/wireshark-3.4.0.html

Signed-off-by: ummeegge <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-10 12:31:15 +00:00
ummeegge
d44ce7d4c2 c-ares: New package. Needed as tshark Dependency
- Since tshark uses with version 3.4.0 an always enabled asynchronous DNS
resolution c-ares is a needed dependency.
- Since curl can also use c-ares --> https://c-ares.haxx.se/ it has been
placed in make.sh before curl even no compiletime options has been set
to enable this. c-ares has also been placed in packages and not in common
which would be needed if it should be used for curl too.

Signed-off-by: ummeegge <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-10 12:30:24 +00:00
Adolf Belka
c2f02d9d59 bacula: Update to use IPFire initscript
Bacula install used the bacula initscript for starting and stopping bacula.
This works fine but results in no pid or memory input in the addons table
under services.
Using the IPFire initscript also successfully starts and stops bacula with
no problems but also provides the pid and memory information in the services
addons table.
- rootfiles adjusted to remove the reference to bacula-ctl-fd
- lfs/bacula adjusted to remove the init.d/bacula link generation
             remove the "rm -f /root/.rnd" command. This file is not present
             and I have not seen this command in any other lfs file that I
             have looked at.
- new bacula initscript created

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-10 12:28:58 +00:00
Arne Fitzenreiter
8372d89000 vdr: version 2.4.4 still use plugin API 2.4.3
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-12-05 10:09:03 +00:00
Michael Tremer
77b7668c9e aws-cli: Update to 1.18.188
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-02 17:55:51 +00:00
Michael Tremer
57a0aedb3e python3-botocore: Update to 1.19.28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-02 17:55:22 +00:00
Michael Tremer
05be1c642a python3-urllib3: New package
Required by botocore

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-02 17:54:56 +00:00
Matthias Fischer
c2773f2371 ghostscript: Update to 9.53.3
For details see:
https://www.ghostscript.com/doc/current/History9.htm#Version9.53.3

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-27 15:49:50 +00:00
Arne Fitzenreiter
7adacda04c transmission: update to 3.00
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-26 16:15:48 +00:00
Arne Fitzenreiter
27023de931 vdr-dvbapi: fix rootfile
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-24 08:18:09 +01:00
Arne Fitzenreiter
e4f287a268 vdr: update to 2.4.4
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-23 18:15:48 +00:00
Adolf Belka
d0d63bbbee apcupsd: addition of backup/includes definition
Added a backup/includes file for apcupsd to backup the
/etc/apcupsd/ directory where all the configuration files
are stored. Currently there is no backup available to
save the state of any changes carried out to the configuration
or action files.
Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-23 15:12:54 +00:00
Arne Fitzenreiter
17a8437e82 pcengines-firmware: update to 4.12.0.6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-23 15:12:54 +00:00
Michael Tremer
6cab8977e0 amazon-ssm-agent: Package /usr/bin/ssm-agent-worker
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-19 18:35:36 +00:00
ummeegge
e23b3b08a8 git: Add missing Error.pm and LoadCPAN submodules
Fixes #12511

Signed-off-by: ummeegge <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-10 11:17:29 +00:00
Peter Müller
02489761db libseccomp: update to 2.4.4
Full changelog obtained from: https://github.com/seccomp/libseccomp/releases/tag/v2.4.4

Version 2.4.4 - August 21, 2020

    Update the syscall table for Linux v5.8-rc7
    Fix double free when BPF generation fails
    Add aarch64 support for clone3, getrlimit, and setrlimit

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-05 23:34:22 +00:00
Peter Müller
1cd27f38e6 lynis: update to 3.0.1
Full changelog obtained from: https://cisofy.com/changelog/lynis/#301

- Detection of Alpine Linux
- Detection of CloudLinux
- Detection of Kali Linux
- Detection of Linux Mint
- Detection of macOS Big Sur (11.0)
- Detection of Pop!_OS
- Detection of PHP 7.4
- Malware detection tool: Microsoft Defender ATP
- New flag: --slow-warning to allow tests more time before showing a
warning
- Test TIME-3185 to check systemd-timesyncd synchronized time
- rsh host file permissions

- AUTH-9229 - Added option for LOCKED accounts and bugfix for older bash
versions
- BOOT-5122 - Presence check for grub.d added
- CRYP-7902 - Added support for certificates in DER format
- CRYP-7931 - Added data to report
- CRYP-7931 - Redirect errors (e.g. when swap is not encrypted)
- FILE-6430 - Don't grep nonexistant modprobe.d files
- FIRE-4535 - Set initial firewall state
- INSE-8312 - Corrected text on screen
- KRNL-5728 - Handle zipped kernel configuration correctly
- KRNL-5830 - Improved version detection for non-symlinked kernel
- MALW-3280 - Extended detection of BitDefender
- TIME-3104 - Find more time synchronization commands
- TIME-3182 - Corrected detection of time peers
- Fix: hostid generation routine would sometimes show too short IDs
- Fix: language detection
- Generic improvements for macOS
- German translation updated
- End-of-life database updated
- Several minor code enhancements

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-05 23:33:14 +00:00
Peter Müller
3e19f681a1 drop SpamAssassin add-on
This package has not been maintained well and is thereof outdated. At
the time of writing, we neither
(a) have a maintainer for this nor
(b) believe it is wise to run a full-featured content scanner on a
    firewall for security purposes. (We can make do with Postfix, as it
    is known for being a very robust MTA and providess less attack
    surface than something actually inspecting transferred messages.)

Thereof, this patch drops the SpamAssassin add-on. In case it is desired
in future versions of IPFire, it can be easily reverted, restoring the
functionality and behaviour before.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:58:35 +00:00
Peter Müller
6483ec30b9 drop Amavis add-on
This package has not been maintained well and is thereof outdated. At
the time of writing, we neither
(a) have a maintainer for this nor
(b) believe it is wise to run a full-featured content scanner on a
    firewall for security purposes. (We can make do with Postfix, as it
    is known for being a very robust MTA and providess less attack
    surface than something actually inspecting transferred messages.)

Thereof, this patch drops the Amavis add-on. In case it is desired in
future versions of IPFire, it can be easily reverted, restoring the
functionality and behaviour before.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:58:20 +00:00
Michael Tremer
64c8811dee samba: Update rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-14 09:53:30 +00:00
Michael Tremer
7dea42ae84 samba: Drop PDC default configuration
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:17 +01:00
Michael Tremer
be1554336d samba: Export all printers from CUPS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:16 +01:00
Michael Tremer
97722ab69d samba: Remove printer management
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:16 +01:00