Commit Graph

16272 Commits

Author SHA1 Message Date
Michael Tremer
53d03ef352 hostapd: Find device by MAC address
With wireless device as members in bridges, we cannot predict the name
very well. So we will use the MAC address and find the correct device
name when we launch hostapd.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:58 +00:00
Adolf Belka
46f445b1a7 poppler: Update of rootfile due to update of glib
- Update of glib resulted in additional files in the poppler rootfile
    which has been updated in this patch

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:58 +00:00
Michael Tremer
ba5ae14aeb core157: Ship glib
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:58 +00:00
Adolf Belka
b1d7e005e8 glib: Update to 2.68.1
- Update from 2.54.3 to 2.68.1
- Update rootfile
- glib-2.54.3-compile-fixes-1.patch not required, all changes now
   incorporated in the source tarball
- meson/ninja have replaced autotools
- As so's updated ran find-dependencies
   No additional programs flagged up
- Changelog is too large to include here
   Full details can be viewed in the NEWS file in the source tarball
   Large number of bugs fixed

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:57 +00:00
Michael Tremer
1d681743eb hostapd: Drop custom configuration from initscript
The initscript it setting a lot of options which are set by hostapd
which will fail to start the AP instead of using fire-and-forget.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:57 +00:00
Adolf Belka
9f2ee0e9bf cifs-utils: Update to 6.13
- Update from 6.12 to 6.13
- Update of rootfile not needed
- Changelog
   This is a security release to address the following bug:
   CVE-2021-20208 cifs.upcall kerberos auth leak in container

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:31:54 +00:00
Adolf Belka
eea5db042f cups: Update to 2.3.3op2
- Update from 2.3.3 to 2.3.3op2
- OpenPrinting statement from March 2021:-
   CUPS has new home at OpenPrinting
   Due to the fact that CUPS development at Apple has stopped since the
   beginning of 2020 we had forked CUPS some months ago to incorporate
   patches and fixes from the distributions. As Apple did not resume the
   upstream work on CUPS, we have made OpenPrinting now the official
   upstream home for CUPS.
   This especially means that we can now continue developing CUPS,
   independent of Apple. So we can add features and lead CUPS into the new
   architecture without PPD files and with Printer Applications.
   CUPS has a new home page now and what was formerly our fork is now the
   official CUPS repository. Upcoming releases will be of the new 2.4.x
   series, without “opX” suffix as now. Also all documentation files which
   come with it are updated to point to the OpenPrinting resources.
- Update of rootfile not required.
- Changelog
   Changes in CUPS v2.3.3op2
    - Security: Fixed a buffer (read) overflow in the `ippReadIO` function
      (CVE-2020-10001)
    - Clarified the documentation for the "Listen" directive (Issue #53)
    - Fixed duplicate ColorModel entries for AirPrint printers (Issue 59)
    - Fixed directory/permission defaults for Debian kfreebsd-based systems
      (Issue #60, Issue #61)
    - Fixed crash bug in `ppdOpen` (Issue #64, Issue #78)
    - Fixed regression in `snprintf` emulation function (Issue #67)
    - The scheduler's systemd service file now waits for the nslcd service to start
      (Issue #69)
    - The libusb-based USB backend now uses a simpler read timer implementation to
      avoid a regression in a previous change (Issue #72)
    - The PPD caching code now only tracks the `APPrinterIconPath` value on macOS
      (Issue #73)
    - Fixed segfault in help.cgi when searching in man pages (Issue #81)
    - Root certificates were incorrectly stored in "~/.cups/ssl".
Changes in CUPS v2.3.3op1
    - The automated test suite can now be activated using `make test` for
      consistency with other projects and CI environments - the old `make check`
      continues to work as well, and the previous test server behavior can be
      accessed by running `make testserver`.
    - ippeveprinter now supports multiple icons and strings files.
    - ippeveprinter now uses the system's FQDN with Avahi.
    - ippeveprinter now supports Get-Printer-Attributes on "/".
    - ippeveprinter now uses a deterministic "printer-uuid" value.
    - ippeveprinter now uses system sounds on macOS for Identify-Printer.
    - Updated ippfind to look for files in "~/Desktop" on Windows.
    - Updated ippfind to honor `SKIP-XXX` directives with `PAUSE`.
    - Updated IPP Everywhere support to work around printers that only advertise
      color raster support but really also support grayscale (Issue #1)
    - ipptool now supports DNS-SD URIs like `ipps://My%20Printer._ipps._tcp.local`
      (Issue #5)
    - The scheduler now allows root backends to have world read permissions but not
      world execute permissions (Issue #21)
    - Failures to bind IPv6 listener sockets no longer cause errors if IPv6 is
      disabled on the host (Issue #25)
    - The SNMP backend now supports the HP and Ricoh vendor MIBs (Issue #28)
    - The scheduler no longer includes a timestamp in files it writes (Issue #29)
    - The systemd service names are now "cups.service" and "cups-lpd.service"
      (Issue #30, Issue #31)
    - The scheduler no longer adds the local hostname to the ServerAlias list
      (Issue #32)
    - Added `LogFileGroup` directive in "cups-files.conf" to control the group
      owner of log files (Issue #34)
    - Added `--with-max-log-size` configure option (Issue #35)
    - Added `--enable-sync-on-close` configure option (Issue #37)
    - Added `--with-error-policy` configure option (Issue #38)
    - IPP Everywhere PPDs could have an "unknown" default InputSlot (Issue #44)
    - The `httpAddrListen` function now uses a listen backlog of 128.
    - Added USB quirks (Apple issue #5789, #5823, #5831)
    - Fixed IPP Everywhere v1.1 conformance issues in ippeveprinter.
    - Fixed DNS-SD name collision support in ippeveprinter.
    - Fixed compiler and code analyzer warnings.
    - Fixed TLS support on Windows.
    - Fixed ippfind sub-type searches with Avahi.
    - Fixed the default hostname used by ippeveprinter on macOS.
    - Fixed resolution of local IPP-USB printers with Avahi.
    - Fixed coverity issues (Issue #2)
    - Fixed `httpAddrConnect` issues (Issue #3)
    - Fixed web interface device URI issue (Issue #4)
    - Fixed lp/lpr "printer/class not found" error reporting (Issue #6)
    - Fixed xinetd support for LPD clients (Issue #7)
    - Fixed libtool build issue (Issue #11)
    - Fixed a memory leak in the scheduler (Issue #12)
    - Fixed a potential integer overflow in the PPD hashing code (Issue #13)
    - Fixed output-bin and print-quality handling issues (Issue #18)
    - Fixed PPD options getting mapped to odd IPP values like "tray---4" (Issue #23)
    - Fixed remote access to the cupsd.conf and log files (Issue #24)
    - Fixed the automated test suite when running in certain build/CI environments
      (Issue #25)
    - Fixed a logging regression caused by a previous change for Apple issue #5604
      (Issue #25)
    - Fixed fax phone number handling with GNOME (Issue #40)
    - Fixed potential rounding error in rastertopwg filter (Issue #41)
    - Fixed the "uri-security-supported" value from the scheduler (Issue #42)
    - Fixed IPP backend crash bug with "printer-alert" values (Issue #43)
    - Removed old Solaris inetconv(1m) reference in cups-lpd man page (Issue #46)
    - Fixed default options that incorrectly use the "custom" prefix (Issue #48)
    - Fixed a memory leak when resolving DNS-SD URIs (Issue #49)
    - Fixed systemd status reporting by adopting the notify interface (Issue #51)
    - Fixed crash in rastertopwg (Apple issue #5773)
    - Fixed cupsManualCopies values in IPP Everywhere PPDs (Apple issue #5807)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:31:45 +00:00
Adolf Belka
93ebde9b3b cups-filters: Update to 1.28.8
- Update from 1.28.7 to 1.28.8
- Update of rootfile not required
- Changelog
    CHANGES IN V1.28.8
	- libcupsfilters: Made check whether the driverless PPD to
	  generate should be a fax out PPD more reliable (Issue #343).
	- foomatic-rip: Options in the 5th command line argument of
	  the CUPS filter command line are separated only by white
	  space and not by comma, also make sure that an option "none"
	  is not considered a custom page size (Issue #348).
	- implicitclass: Raise timeout for cups-browsed's answer from
	  20s to 60s (Pull request #346).
	- libcupsfilters: In the PPD generator really give priority to
	  Apple Raster against PDF (Issue #331).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:31:38 +00:00
Michael Tremer
1bd27a9a99 netsnmpd: Bump version to link against new lm_sensors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:31:16 +00:00
Michael Tremer
3c4baac573 core157: Ship lm_sensors & collectd
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:31:01 +00:00
Adolf Belka
a50af14f38 collectd: patch for successful build with updated lm_sensors
- Patch to remove checks for SENSORS_API_VERSION upper limit
   Patch based on one by Pavel Rochnyack
   https://git.ipfire.org/?p=thirdparty/collectd.git;a=commitdiff;h=d5a3c020>
- Without this patch collectd fails to build with the updated lm_sensors
   version (3-6-0) due to a problem with the version of libsensors used by
   lm_sensors

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:28:12 +00:00
Adolf Belka
c85b97ed5a lm_sensors: Update to 3-6-0
- Update from 3-4-0 to 3-6-0
- Update of rootfilers in each architecture
   Only the library version changed in each rootfile
- Installed updated lm_sensors. Confirmed updated version was installed.
   sensors-detect ran successfully but could not confirm successful sensor
   detection as installation was run on vm testbed and this has no sesnors
   Testing on real hardware to confirm that sensors are detected and
   sensor-* directories correctly created in IPFire.
- Changelog
   3.6.0 (2019-10-18)
     configs: Added a number of new configuration files
     fancontrol: AVERAGE env variable can be used to set the number of previ>
     Makefile: The MACHINE variable has been renamed to ARCH
     sensord: Add an option -1/--oneline to print chip and adapter on the sa>
     sensors: Fixed a stray comma bug in the JSON output
              Fixed Fahrenheit conversion with raw and JSON output
              Scale voltage and current values in the default output format
     sensors-detect: Add detection of AMD Family 17h, models 30h, 70h
                     Add detection of some AMD Family 15h models
                     Add detection of AMD Family 16h model 30h power sensors
                     Add detection of Hygon Family 18h thermal sensors
                     Add detection of Nuvoton NCT6797D
                     Add detection of Nuvoton NCT6798D
                     Add detection of Nuvoton NCT6112D/NCT6114D/NCT6116D
                     Fix printing CPU info on non-x86 arches
                     Fix printing lm_sensors version
                     Mark Fintek F75387SG/RG as supported by the f75375s dri>
   3.5.0 (2018-11-23)
     Fixed disappearance of certain hwmon chips with 4.19+ kernels
     Add the find-driver script for debugging
     Various documentation and man page improvements
     Fix various issues found by Coverity Scan
     Fix compilation with the musl C library
     Development version string now contains "+git" instead of "+SVN"
     Updated links in documentation to reflect the new home of lm_sensors
     sensors.1: Add reference to sensors-detect
                Document -j option (json output)
     sensors: Add support for json output
              Add support for power min, lcrit, min_alarm, lcrit_alarm
     sensors-detect: Fix systemd paths
                     Add detection of Fintek F81768
                     Only probe I/O ports on x86
                     Add detection of Nuvoton NCT6793D
                     Add detection of Microchip MCP9808
                     Mark F71868A as supported by the f71882fg driver
                     Mark F81768D as supported by the f71882fg driver
                     Mark F81866D as supported by the f71882fg driver
                     Add detection of various ITE chips
                     Add detection of Nuvoton NCT6795D
                     Add detection of DDR4 SPD
                     Add detection of ITE IT8987D
                     Add detection of AMD Family 17h temperature sensors
                     Add detection of AMD KERNCZ SMBus controller
                     Add detection of various Intel SMBus controllers
                     Add detection of Giantec GT30TS00
                     Add detection of ONS CAT34TS02C and CAT34TS04
                     Add detection of AMD Family 15h Model 60+ temperature s>
                     Add detection of Nuvoton NCT6796D
                     Add detection of AMD Family 15h Model 70+ temperature s>
     configs: Add sample configuration files.
     sensors.conf.default: Add hardwired inputs of NCT6795D
                           Add hardwired inputs of F71868A
                           Add hardwired NCT6796D inputs
     vt1211_pwm: replaced deprecated sub shell syntax
                 run with bash instead of sh
     pwmconfig: replaced deprecated sub shell syntax
     fancontrol: replaced deprecated sub shell syntax
                 save original pwm values
     fancontrol.8: replaced deprecated sub shell syntax
     libsensors: Add support for SENSORS_BUS_TYPE_SCSI
                 Add support for power min, lcrit, min_alarm, lcrit_alarm

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:27:11 +00:00
Adolf Belka
8bc33c6db3 meson: Update to 0.57.2
- Update from 0.56.0 to 0.57.2
- Update of rootfile
- Changelog is too large and complicated layout to include here
   Full details can be seen at https://mesonbuild.com/Release-notes.html

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:26:59 +00:00
Michael Tremer
ce11ea46c6 core157: Ship libxcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:26:40 +00:00
Adolf Belka
85ff8d4586 libxcrypt: Update to 4.4.19
- Update from 4.4.17 to 4.4.19
- Update of rootfile not needed
- Changelog
   libxcrypt NEWS -- history of user-visible changes.
    Version 4.4.19
     * Improve fallback implementation of explicit_bzero.
     * Add glibc-on-CSKY, ARC, and RISCV-32 entries to libcrypt.minver.
       These were added in GNU libc 2.29, 2.32, and 2.33 respectively
       (issue #122).
     * Do not build xcrypt.h if we’re not going to install it.
     * Do not apply --enable-obsolete-api-enosys mode to fcrypt.
     * Compilation fix for NetBSD.  NetBSD’s <unistd.h> declares encrypt
       and setkey to return int, contrary to POSIX (which says they return
       void).  Rename those declarations out of the way with macros.
     * Compilation fixes for building with GCC 11.
       Basically fixes for explicit type-casting.
     * Force update of existing symlinks during installation (issue #120).
    Version 4.4.18
     * Fix compilation errors on (Free)BSD (issue #110).
     * Fix conversion error in lib/alg-gost3411-core.c, which is seen by
       some sensitive compilers.
     * Convert build scripts to Perl.
       The minimum version of Perl required is 5.14.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:26:23 +00:00
Michael Tremer
dbdc389bc3 core157: Ship file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:23:06 +00:00
Adolf Belka
05599e171c file: Update to 5.40
- Update from 5.39 to 5.40
- Update of rootfile not needed
- Changelog
   * release 5.40
	* PR/234: Add limit to the number of bytes to scan for encoding
	* PR/230: Fix /T (trim flag) for regex
	* PR/77: Trim trailing separator.
	* PR/211: Convert system read errors from corrupt ELF
	  files into human readable error messages
	* fix multithreaded decompression file descriptor issue
	  by using close-on-exec (Denys Vlasenko)
	* Exclude surrogate pairs from utf-8 detection (Michael Liu)
	* Include # to the list of ignored format chars (Werner Fink)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:22:53 +00:00
Michael Tremer
ac92c4d971 core157: Ship expat
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:22:39 +00:00
Adolf Belka
a14c8d7d0f expat: Update to 2.3.0
- Update from 2.2.0 (2016) to 2.3.0 (2021)
- Update of rootfile
- Changelog is too large to include here
   Full details can be viewed in the Changes file in the source tarball
   Large number of bug fixes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:22:15 +00:00
Michael Tremer
5aff2d126f core157: Ship apache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:21:56 +00:00
Peter Müller
1fe39ef505 httpd: delete comment blocks and unused directives from our configuration
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:20:34 +00:00
Peter Müller
10189aa197 httpd: apply the same security headers on the captive portal instance as we do elsewhere
The Captive Portal should not be framed or leak sensitive detail via
Referrers either.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:20:30 +00:00
Peter Müller
59fa881ea7 httpd: disable sending ETag header completely
These cause caching trouble and pose a potential security risk due to
exposing inode numbers of files within the Apache site directories on an
IPFire machine.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:20:17 +00:00
Peter Müller
a8996f857c httpd: remove compatibility instructions for very old browsers
These are not in use any more - and if they would, we don't support them.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:20:02 +00:00
Arne Fitzenreiter
7885b1509c kernel: update to 4.14.230
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:37:17 +00:00
Michael Tremer
8cc05c7486 core157: Fix ppp symlink
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:36:08 +00:00
Adolf Belka
748ab174c2 libid3tag: Addition of pkgconfig file
- id3tag.pc pkgconfig file required for mpd-0.22.6 to find libid3tag
   library files
- Update of rootfile
- update lfs to install id3tag.pc file to /usr/lib/pkgconfig directory

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:35:29 +00:00
Michael Tremer
6216b6709f core157: Ship libupnp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:35:16 +00:00
Adolf Belka
1106abd31c libupnp: Update to 1.14.5
- Update from 1.6.18 to 1.14.5
- Update required for successfgul build of mpd-0.22.6
- Update of rootfile
- Changelog is too large to include here
   Full details can be found in the ChangeLog file in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:33:12 +00:00
Adolf Belka
4bad4d736c mpd: Update to 0.22.6
- Update from 0.19.19 to 0.22.6
- Update rootfile
- Required update of libupnp
- Autotools no longer available
   Build changed to meson
   Meson build required addition of pkgconfig file for libid3tag
- Changelog is too large to include here.
   Full details can be found in the NEWS file in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:32:49 +00:00
Michael Tremer
9272ab4a20 core157: Ship changes on RRD graphs tooling
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:32:00 +00:00
Leo-Andres Hofmann
c095f81435 rrdimage: Improve CGI & cosmetic changes
Write graph error messages to the system log, to simplify
further inspection by the user.
Add additional parameter check to prevent a possible redirect loop
if the URL format is changed in the future.

Cosmetic: Use underlining instead of background color for highlighting

Fixes #10643

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:31:18 +00:00
Michael Tremer
ad3cc7c98d samba: Update rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:25:26 +00:00
Michael Tremer
efaed42101 core157: Ship pppd
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-11 12:23:18 +00:00
Peter Müller
0cd9215b56 ppp: update to 2.4.9
This is the first ppp release for years, and the project appears to have
a different maintainer (team?) by now. As a result, some of our patches
are no longer necessary as they made it into upstream, while others need
to be adjusted slightly.

In addition, their configure script does not handle commas in CFLAGS
properly, which is why the delimiter for the 'sed' call in it has to be
changed to something neither appearing in a path nor in our CLFAGS set.

The full changelog of this release can be retrieved from
https://ppp.samba.org/README.html and says:

* Support for new EAP (Extensible Authentication Protocol) methods:
  - Support for EAP-TLS, from Jan Just Keijser and others
  - Support for EAP-MSCHAPv2, from Eivind Næss, Thomas Omerzu, Tijs
    Van Buggenhout and others

* New pppd options:
  - chap-timeout
  - chapms-strip-domain
  - replacedefaultroute
  - noreplacedefaultroute
  - ipv6cp-accept-remote
  - lcp-echo-adaptive
  - ip-up-script
  - ip-down-script
  - ca
  - capath
  - cert
  - key
  - crl-dir
  - crl
  - max-tls-version
  - need-peer-eap

* Fixes for CVE-2020-8597 and CVE-2015-3310.

* libpcap is now required when compiling on Linux (previously, if
  libpcap was not present, pppd would be compiled without packet
  filtering support).

* The rp-pppoe plugin has been renamed to pppoe, to distinguish it
  from the upstream rp-pppoe code.  Its options have changed names,
  but the old names are kept as aliases.

* The configure script now supports cross-compilation.

* Many bug fixes and cleanups.

Thanks to Michael for his hint on the ./configure CFLAGS issue.

The second version of this patch correctly updates the
src/patches/ppp/0013-everywhere-O_CLOEXEC-harder.patch patch for the
second hunk in pppd/main.c, where socket permissions have been changed
meanwhile.

Further, it has been successfully tested against a VDSL 100 line in
Germany, using PAP to Easybell via 1&1 L2 BSA. No connectivity issues or
other anomalies have been observed so far.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-11 12:21:33 +00:00
Michael Tremer
b83e0bd9a4 Install sysctl.conf only on those architectures where needed
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-11 12:12:16 +00:00
Peter Müller
c6353b0dc1 wireless-regdb: update to 2020.11.20
This release contains various regulatory updates for different
countries, too many to list them here. While
https://wireless.wiki.kernel.org/en/developers/regulatory/wireless-regdb
mentiones http://drvbp1.linux-foundation.org/~mcgrof/rel-html/wireless-regdb/
as the location for release announcements, that server seems to be
defunct, so there is only https://git.kernel.org/pub/scm/linux/kernel/git/sforshee/wireless-regdb.git
left for further details between the 2019.03.01 and 2020.11.20 version.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:50:27 +00:00
Michael Tremer
af8964d236 rpcbind: Update initscript for moved binary
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:49:47 +00:00
Michael Tremer
8460cfee52 linux: Remove old code for generating initramfs
These kernels are no longer supported or have been merged into the main
kernel.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:47:39 +00:00
Michael Tremer
b034722ccd core157: Ship kernel
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:44:55 +00:00
Arne Fitzenreiter
7e27f7cdc1 kernel: update to 4.14.229
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:40:01 +00:00
Michael Tremer
b982337a45 core157: Ship poppler-data
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:39:41 +00:00
Adolf Belka
0e8e452f49 poppler-data: Update to 0.4.10
- Update from 0.4.9 to 0.4.10
- Update rootfile
- There is no Changelog file in the source tarball
   The poppler website has no release info on poppler-data only poppler

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:39:32 +00:00
Michael Tremer
f2aabc967d core157: Ship poppler
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:39:19 +00:00
Adolf Belka
592054a00d poppler: Update to 21.04.0
- Update from 0.89.0 to 21.04.0
   From Aug 2020 file version naming changed to YY.MM.x
   Update issued every month since then
- Update rootfile
- Changelog is too large to include here
   Full content can be reviewed in ChangeLog file in source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:38:59 +00:00
Michael Tremer
3f30cc7709 core157: Ship sqlite
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:38:30 +00:00
Adolf Belka
8ef6632641 sqlite: Update to 3.35.4
- Update from 3.34.1 to 3.35.4
- Update of rootfile not required
- Changelog
3.35.0
  Added built-in SQL math functions(). (Requires the -DSQLITE_ENABLE_MATH_FUNCTIONS compile-time option.)
  Added support for ALTER TABLE DROP COLUMN.
  Generalize UPSERT:
    Allow multiple ON CONFLICT clauses that are evaluated in order,
    The final ON CONFLICT clause may omit the conflict target and yet still use DO UPDATE.
  Add support for the RETURNING clause on DELETE, INSERT, and UPDATE statements.
  Use less memory when running VACUUM on databases containing very large TEXT or BLOB values. It is no longer necessary to hold the entire TEXT or BLOB in memory all at once.
  Add support for the MATERIALIZED and NOT MATERIALIZED hints when specifying common table expressions. The default behavior was formerly NOT MATERIALIZED, but is now changed to MATERIALIZED for CTEs that are used more than once.
  The SQLITE_DBCONFIG_ENABLE_TRIGGER and SQLITE_DBCONFIG_ENABLE_VIEW settings are modified so that they only control triggers and views in the main database schema or in attached database schemas and not in the TEMP schema. TEMP triggers and views are always allowed.
  Query planner/optimizer improvements:
    Enhancements to the min/max optimization so that it works better with the IN operator and the OP_SeekScan optimization of the previous release.
    Attempt to process EXISTS operators in the WHERE clause as if they were IN operators, in cases where this is a valid transformation and seems likely to improve performance.
    Allow UNION ALL sub-queries to be flattened even if the parent query is a join.
    Use an index, if appropriate, on IS NOT NULL expressions in the WHERE clause, even if STAT4 is disabled.
    Expressions of the form "x IS NULL" or "x IS NOT NULL" might be converted to simply FALSE or TRUE, if "x" is a column that has a "NOT NULL" constraint and is not involved in an outer join.
    Avoid checking foreign key constraints on an UPDATE statement if the UPDATE does not modify any columns associated with the foreign key.
    Allow WHERE terms to be pushed down into sub-queries that contain window functions, as long as the WHERE term is made up of entirely of constants and copies of expressions found in the PARTITION BY clauses of all window functions in the sub-query.
  CLI enhancements:
    Enhance the ".stats" command to accept new arguments "stmt" and "vmstep", causing prepare statement statistics and only the virtual-machine step count to be shown, respectively.
    Add the ".filectrl data_version" command.
    Enhance the ".once" and ".output" commands so that if the destination argument begins with "|" (indicating that output is redirected into a pipe) then the argument does not need to be quoted.
  Bug fixes:
    Fix a potential NULL pointer dereference when processing a syntactically incorrect SELECT statement with a correlated WHERE clause and a "HAVING 0" clause. (Also fixed in the 3.34.1 patch release.)
    Fix a bug in the IN-operator optimization of version 3.33.0 that can cause an incorrect answer.
    Fix incorrect answers from the LIKE operator if the pattern ends with "%" and there is an "ESCAPE '_'" clause.
3.35.1
  Fix a bug in the new DROP COLUMN feature when used on columns that are indexed and that are quoted in the index definition.
  Improve the built-in documentation for the .dump command in the CLI.
3.35.2
  Fix a problem in the appendvfs.c extension that was introduced into version 3.35.0.
  Ensure that date/time functions with no arguments (which generate responses that depend on the current time) are treated as non-deterministic functions. Ticket 2c6c8689fb5f3d2f
  Fix a problem in the sqldiff utility program having to do with unusual whitespace characters in a virtual table definition.
  Limit the new UNION ALL optimization described by item 8c in the 3.35.0 release so that it does not try to make too many new subqueries. See forum thread 140a67d3d2 for details.
3.35.3
  Enhance the OP_OpenDup opcode of the bytecode engine so that it works even if the cursor being duplicated itself came from OP_OpenDup. Fix for ticket bb8a9fd4a9b7fce5. This problem only came to light due to the recent MATERIALIZED hint enhancement.
  When materializing correlated common table expressions, do so separately for each use case, as that is required for correctness. This fixes a problem that was introduced by the MATERIALIZED hint enhancement.
  Fix a problem in the filename normalizer of the unix VFS.
  Fix the "box" output mode in the CLI so that it works with statements that returns one or more rows of zero columns (such as PRAGMA incremental_vacuum). Forum post afbbcb5b72.
  Improvements to error messages generated by faulty common table expressions. Forum post aa5a0431c99e.
  Fix some incorrect assert() statements.
  Fix to the SELECT statement syntax diagram so that the FROM clause syntax is shown correctly. Forum post 9ed02582fe.
  Fix the EBCDIC character classifier so that it understands newlines as whitespace. Forum post 58540ce22dcd.
  Improvements the xBestIndex method in the implementation of the (unsupported) wholenumber virtual table extension so that it does a better job of convincing the query planner to avoid trying to materialize a table with an infinite number of rows. Forum post b52a020ce4.
3.35.4
  Fix a defect in the query planner optimization identified by item 8b above. Ticket de7db14784a08053.
  Fix a defect in the new RETURNING syntax. Ticket 132994c8b1063bfb.
  Fix the new RETURNING feature so that it raises an error if one of the terms in the RETURNING clause references a unknown table, instead of silently ignoring that error.
  Fix an assertion associated with aggregate function processing that was incorrectly triggered by the push-down optimization.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:38:20 +00:00
Michael Tremer
111a58cf02 core157: Ship bash
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:38:04 +00:00
Adolf Belka
f9f6cbd8c6 bash: Update to 5.1 with patch 4
- Update from 5.0 with patch 18 to 5.1 wih patch 4
- Remove old bash50 patches
- Update rootfiles
- Add new bash51 patches
- Installed updated version in a vm testbed system
   All bash commands that were run, executed correctly
   Script created to redirect output to a file and ran correctly
- Changelog
1. New Features in bash-5.1 since release of bash-5.0
a. `bind -x' now supports different bindings for different editing modes and
   keymaps.
b. Bash attempts to optimize the number of times it forks when executing
   commands in subshells and from `bash -c'.
c. Here documents and here strings now use pipes for the expanded document if
   it's smaller than the pipe buffer size, reverting to temporary files if it's
   larger.
d. There are new loadable builtins: mktemp, accept, mkfifo, csv, cut/lcut
e. In posix mode, `trap -p' now displays signals whose disposition is SIG_DFL
   and those that were SIG_IGN when the shell starts.
f. The shell now expands the history number (e.g., in PS1) even if it is not
   currently saving commands to the history list.
g. `read -e' may now be used with arbitrary file descriptors (`read -u N').
h. The `select' builtin now runs traps if its internal call to the read builtin
   is interrupted by a signal.
i. SRANDOM: a new variable that expands to a 32-bit random number that is not
   produced by an LCRNG, and uses getrandom/getentropy, falling back to
   /dev/urandom or arc4random if available. There is a fallback generator if
   none of these are available.
j. shell-transpose-words: a new bindable readline command that uses the same
   definition of word as shell-forward-word, etc.
k. The shell now adds default bindings for shell-forward-word,
   shell-backward-word, shell-transpose-words, and shell-kill-word.
l. Bash now allows ARGV0 appearing in the initial shell environment to set $0.
m. If `unset' is executed without option arguments, bash tries to unset a shell
   function if a name argument cannot be a shell variable name because it's not
   an identifier.
n. The `test -N' operator uses nanosecond timestamp granularity if it's
   available.
o. Bash posix mode now treats assignment statements preceding shell function
   definitions the same as in its default mode, since POSIX has changed and
   no longer requires those assignments to persist after the function returns
   (POSIX interp 654).
p. BASH_REMATCH is no longer readonly.
q. wait: has a new -p VARNAME option, which stores the PID returned by `wait -n'
   or `wait' without arguments.
r. Sorting the results of pathname expansion now uses byte-by-byte comparisons
   if two strings collate equally to impose a total order; the result of a
   POSIX interpretation.
s. Bash now allows SIGINT trap handlers to execute recursively.
t. Bash now saves and restores state around setting and unsetting posix mode,
   instead of having unsetting posix mode set a known state.
u. Process substitution is now available in posix mode.
v. READLINE_MARK: a new variable available while executing commands bound with
   `bind -x', contains the value of the mark.
w. Bash removes SIGCHLD from the set of blocked signals if it's blocked at shell
   startup.
x. `test -v N' can now test whether or not positional parameter N is set.
y. `local' now honors the `-p' option to display all local variables at the
    current context.
z. The `@a' variable transformation now prints attributes for unset array
   variables.
aa. The `@A' variable transformation now prints a declare command that sets a
    variable's attributes if the variable has attributes but is unset.
bb. `declare' and `local' now have a -I option that inherits attributes and
    value from a variable with the same name at a previous scope.
cc. When run from a -c command, `jobs' now reports the status of completed jobs.
dd. New `U', `u', and `L' parameter transformations to convert to uppercase,
    convert first character to uppercase, and convert to lowercase,
    respectively.
ee. PROMPT_COMMAND: can now be an  array variable, each element of which can
    contain a command to be executed like a string PROMPT_COMMAND variable.
ff. `ulimit' has a -R option to report and set the RLIMIT_RTTIME resource.
gg. Associative arrays may be assigned using a list of key-value pairs within
    a compound assignment. Compound assignments where the words are not of
    the form [key]=value are assumed to be key-value assignments. A missing or
    empty key is an error; a missing value is treated as NULL. Assignments may
    not mix the two forms.
hh. New `K' parameter transformation to display associative arrays as key-
    value pairs.
ii. Writing history to syslog now handles messages longer than the syslog max
    length by writing multiple messages with a sequence number.
jj. SECONDS and RANDOM may now be assigned using arithmetic expressions, since
    they are nominally integer variables. LINENO is not an integer variable.
kk. Bash temporarily suppresses the verbose option when running the DEBUG trap
    while running a command from the `fc' builtin.
ll. `wait -n' now accepts a list of job specifications as arguments and will
    wait for the first one in the list to change state.
mm. The associative array implementation can now dynamically increase the
    size of the hash table based on insertion patterns.
nn. HISTFILE is now readonly in a restricted shell.
oo. The bash malloc now returns memory that is 16-byte aligned on 64-bit
    systems.
pp. If the hash builtin is listing hashed filenames portably, don't print
   anything if the table is empty.
qq. GLOBIGNORE now ignores `.' and `..' as a terminal pathname component.
rr. Bash attempts to optimize away forks in the last command in a function body
    under appropriate circumstances.
ss. The globbing code now uses fnmatch(3) to check collation elements (if
    available) even in cases without multibyte characters.
tt. The `fg' and `bg' builtins now return an error in a command substitution
    when asked to restart a job inherited from the parent shell.
uu. The shell now attempts to unlink all FIFOs on exit, whether a consuming
    process has finished with them or not.
vv. There is a new contributed loadable builtin: asort.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:37:50 +00:00
Michael Tremer
08474cc60b core157: Ship readline
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:37:40 +00:00