Commit Graph

18112 Commits

Author SHA1 Message Date
Adolf Belka
61320ea2ca perl-HTML-Tagset: Renamed from HTML-Tagset
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
79e1d40e33 perl-HTML-Parser: Renamed from HTML-Parser
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
5ebc703e02 perl-GD-TextUtil: Renamed from GD-TextUtil
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
ea1744d421 perl-GD-Graph: Renamed from GD-Graph
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
b8c4670070 perl-ExtUtils-PkgConfig: Renamed from ExtUtils-PkgConfig
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
cbd39ddae0 perl-Digest-SHA1: Renamed from Digest-SHA1
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
ddf87f1ae5 perl-Digest: Renamed from Digest
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
d45bba3b6a perl-Digest-HMAC: Renamed from Digest-HMAC
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
e2c711c6d6 perl-Convert-UUlib: Renamed from Convert-UUlib
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
741fa99f3b perl-Convert-UUlib: Renamed from Convert-UUlib
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
225cad2bf2 perl-Convert-TNEF: Renamed from Convert-TNEF
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
30fbc67ea9 perl-Compress-Zlib: Renamed from Compress-Zlib
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
a47fc3aa12 perl-Canary-Stability: Renamed from Canary-Stability
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
14cf575741 perl-BerkeleyDB: Renamed from BerkeleyDB
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
8b08a90326 perl-Archive-Zip: Renamed from Archive-Zip
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
e1f8b41f00 perl-Archive-Tar: Renamed from Archive-Tar
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
Adolf Belka
3ad4e75697 make.sh: name all perl packages to start with perl
- Currently some perl packages start with perl, others don't have perl in the name
   at all and one has perl at the end of the IPFire name.
- This patch series places perl at the start of all lfs and rootfile files for perl
   packages in a similar way as is done for python3.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:18:44 +00:00
smooky@v16.de
2f8ae1c282 New Addon: gptfdisk 1.0.8
>>> https://www.rodsbooks.com/gdisk/ <<<

source = https://sourceforge.net/projects/gptfdisk/files/gptfdisk/1.0.8/gptfdisk-1.0.8.tar.gz/download

Hi @ all

I have a new add-on here which I use e.g. to bring partitions from mbr to gpt without data loss.
It is also well suited for rescuing broken partitions.

GPT fdisk (consisting of the gdisk, cgdisk, sgdisk, and fixparts programs) is a set of text-mode partitioning tools for Linux,
FreeBSD, Mac OS X, and Windows.
The gdisk, cgdisk, and sgdisk programs work on Globally Unique Identifier (GUID) Partition Table (GPT) disks,
rather than on the older (and once more common) Master Boot Record (MBR) partition tables.
The fixparts program repairs certain types of damage to MBR disks and enables changing partition types from
primary to logical and vice-versa.

Signed-off-by: Marcel Follert (Smooky) <smooky@v16.de>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-02-16 17:11:25 +00:00
Peter Müller
d0353b73c7 perl-Net-HTTP: Fix rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-16 17:06:03 +00:00
Peter Müller
9dd886fa57 Core Update 165: Sort filelist of rm command for better readability
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:25:18 +00:00
Peter Müller
063ec85aed Core Update 165: Delete files from xtables-addons
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:24:08 +00:00
Stefan Schantl
97fe0c0823 xtables-addons: Drop package.
None of the provided modules are in use, so this package
safely can be dropped.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:20:07 +00:00
Peter Müller
7987879e21 firewall: Get rid of xt_geoip for DROP_HOSTILE
This is required to drop xtables-addons altogether.

Cc: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:18:31 +00:00
Peter Müller
3071989cfc Core Update 165: Ship changes related to P2P block removal
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:15:53 +00:00
Stefan Schantl
8796d41a4d firewall: Drop P2P chains from initscript.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:13:27 +00:00
Stefan Schantl
52c8eaac4b firewall.menu: Drop entry for P2P-Block.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:13:20 +00:00
Stefan Schantl
0b2d66c7a0 p2p-block.cgi: Drop CGI.
The support for creating P2P based rules has been removed from the
firewall. So this CGI file is not longer needed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:13:17 +00:00
Stefan Schantl
31c64b9d0d configroot: Drop config file for p2protocols.
The support for creating P2P based rules has been removed from the
firewall. So this file is not longer needed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:13:12 +00:00
Stefan Schantl
b6e4ebe86f firewall: Drop support for blocking P2P protocols.
The main P2P (peer-to-peer) aera has passed for several year now, so
this kind of feature is realy out-dated.

The feature only supports a handfull of P2P protocols (mostly unencrypted)
for applications, which have been superseeded by various other
applications and protocols.

So, this fairly is not longer required and safely can be dropped.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:12:59 +00:00
Peter Müller
f14000733b Core Update 165: Ship ipset-related changes and restart the firewall engine
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:11:28 +00:00
Stefan Schantl
5108775b59 libloc: Export DB in ipset compatible format.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:45 +00:00
Stefan Schantl
0564b0c7c9 rules.pl: Add workaround to hide a warning about an only once used variable.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:07:31 +00:00
Stefan Schantl
50e4305955 rules.pl: Check if an ipset db file exists before call to restore it.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:26 +00:00
Stefan Schantl
278289690d rules.pl: Do not try to restore the same ipset multiple times.
When an ipset list get restored, this now will be documented in a hash
and this hash also will be checked before restoring a list if this has
not be done previously.

This will prevent from restoring the same list multiple times.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:07:22 +00:00
Stefan Schantl
edad13b46b update-location-database: Export database to ipset compatible format now.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:17 +00:00
Stefan Schantl
07106467b8 rules.pl: Move to ipset based data for location based firewall rules.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:13 +00:00
Stefan Schantl
0df1d268ed rules.pl: Move to ipset based data for LOCATIONBLOCK feature.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:07 +00:00
Stefan Schantl
6babb404cc rules.pl: Add tiny ipset_restore function.
This helper function is used to load a previously exported list of
networks for a given country code into the ipset module, so it can be
used for any kind of firewall rules.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:07:03 +00:00
Stefan Schantl
3d88688075 rules.pl: Destroy all ipset lists on rule reload.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:06:59 +00:00
Stefan Schantl
bbeb2a5067 rules.pl: Move flush of LOCATIONBLOCK into main flush() function.
It is required to get rid of all ipset based rules before all of
the loaded ipset lists can be destroyed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 18:06:54 +00:00
Stefan Schantl
19e5c03f15 location-functions.pl: Remove ending backslash from location_dir variable.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:05:36 +00:00
Stefan Schantl
a5f22bf03c location-functions.pl: Rename and set the location for exported databases to "/var/lib/location/ipset/".
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:05:22 +00:00
Peter Müller
28965d275b Core Update 165: Ship gdbm
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:04:48 +00:00
Adolf Belka
ceedba20de gdbm: Update to version 1.23
- Update from 1.20 to 1.23
- Update of rootfile not required
- Changelog
   Version 1.23, 2022-02-04
	* Bucket cache switched from balanced tree to hash table
	 Change suggested by Terence Kelly.
	* Speed up flushing the changed buckets on disk
	* New option codes for gdbm_setopt
	** GDBM_GETDBFORMAT
	 Return the database format.
	** GDBM_GETDIRDEPTH
	 Return the directory depth, i.e. the number of initial (most significant)
	  bits in hash value that are interpreted as index to the directory.
	** GDBM_GETBUCKETSIZE
	 Return maximum number of keys per bucket.
	** GDBM_GETCACHEAUTO
	 Return the status of the automatic cache adjustment.
	** GDBM_SETCACHEAUTO
	 Enable or disable automatic cache adjustment.
   Version 1.22, 2021-10-19
	* Fix file header validation
	* Fix key verification in sequential access
	* Fix testing with DejaGNU 1.6.3
	* Fix stack overflow in print_usage
	* Fix a leak of avail entry on pushing a new avail block
	 The leak would occur if the original avail table had odd number of entries.
	* New gdbmtool variables: errorexit, errormask, trace, timing
	 "Errorexit" and "errormask" control which GDBM errors would cause the
	  program termination and emitting a diagnostic message,
	  correspondingly.  Both variables are comma-delimited lists of error
	  codes.
	 The "trace" variable enables tracing of the gdbmtool commands.
	 The "timing" variable, when set, instructs gdbmtool to print time
	  spent in each command it runs.
	* New gdbmtool options: -t (--trace), and -T (--timing)
   Version 1.21, 2021-09-02
	* Crash tolerance
	 By default it is possible for an abrupt crash (e.g., power failure,
	  OS kernel panic, or application process crash) to corrupt the gdbm
	  database file.  A new Linux-only mechanism enables applications to
	  recover the database state corresponding to the most recent
	  successful gdbm_sync() call before the crash.  See the chapter 17
	  "Crash Tolerance" in the GDBM manual.
	* New database file format: numsync
	 The new "numsync" database format is designed to better support
	  crash tolerance.  To create a database in numsync format, the gdbm_open
	  (or gdbm_fd_open) function must be given the GDBM_NEWDB|GDBM_NUMSYNC
	  flags.  The GDBM_NUMSYNC flag also takes effect when used together
	  with GDBM_WRCREAT, provided that the new file is created.
	 New function gdbm_convert() is provided for converting the databases
	  from standard GDBM format to numsync and vice versa.
	 The gdbmtool tool can also be used for converting databases between
	  these two formats.
	* Changes in gdbmtool
	** Fix string output in non-ASCII encodings
	 Printable multi-byte sequences are correctly represented on output.
	 This also fixes octal representation of unprintable characters.
	** The filename variable
	 This variable supplies the name of database file for use in "open"
	 command, if the latter is called without arguments.  If "open" is
	 called with the file name argument, the "filename" variable is
	 initialized to this value.
	** The fd variable
	 If set, its value must be an open file descriptor referring to a
	 GDBM database file.  The "open" command will use gdbm_fd_open
	 function to use this file.   Upon closing the database, this
	 descriptor will be closed and the variable will be unset.
	 The file descriptor to use can also be supplied using the
	 -d (--db-descriptor) command line option.
	** The format variable
	 Defines the format in which new databases will be created.  Allowed
	 values are: "standard" (default) and "numsync".
	** New commands: upgrade and downgrade
	 The "upgrade" command converts current database to the numsync
	 (extended) format.  The "downgrade" command converts current database
	 to the standard format.
	** New command: snapshot
	 The "snapshot" command is part of the new crash tolerance support.
	 Given the names of two snapshot files, it analyzes them and selects
	 the one to be used for database recovery.  See the GDBM manual,
	 section 17.5 "Manual crash recovery" for a detailed discussion of its
	 use.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:04:37 +00:00
Peter Müller
5fd4dfe002 Core Update 165: Ship ovpnclients.dat
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 18:04:00 +00:00
Michael Tremer
6e40963459 ovpnclients.dat: Fix adjusting input dates
This patch changes that we no longer interpret any dates put in by the
user as UTC. They used to be converted into localtime because, although
they have already been in local time.

This went unnoticed since in Europe we are close (enough) to UTC that
there is no significant discrepancy on the report. However, being in
North America is enough to generate confusing reports.

Reported-by: Paul <kairis@gmail.com>
Fixes: #12768
Tested-by: Jon Murphy <jon.murphy@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-02-15 17:59:01 +00:00
Peter Müller
bccde9948b Core Update 165: Ship libarchive
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 16:57:00 +00:00
Adolf Belka
215a205a13 libarchive: Update to version 3.6.0
- Update from 3.5.2 to 3.6.0
- Update of rootfile
- Changelog
   Libarchive 3.6.0 is a feature and bugfix release.
     New features:
	    tar: new option "--no-read-sparse" (#1614)
	    tar: threads support for zstd (#1567)
	    RAR reader: filter support (#1503)
	    RAR5 reader: self-extracting archive support (#1585)
	    ZIP reader: zstd decompression support (#1518)
     Other notable bugfixes and improvements:
	    tar: respect "--ignore-zeros" in c, r and u modes (#1620)
	    reduced size of application binaries (#1625)
	    internal code optimizations
   Libarchive 3.5.3 is a security release
     Security Fixes:
	    extended fix for following symlinks when processing the fixup list
              (#1566, #1617, CVE-2021-31566)
	    fix invalid memory access and out of bounds read in RAR5 reader
              (#1491, #1492, #1493, CVE-2021-36976)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 16:56:51 +00:00
Adolf Belka
af20e3bbdc stunnel: Update to version 5.62
- Update from 5.58 to 5.62
- Update of rootfile
- Changelog
   ### Version 5.62, 2022.01.17, urgency: MEDIUM
	* New features
	  - Added a bash completion script.
	* Bugfixes
	  - Fixed a transfer() loop bug.
   ### Version 5.61, 2021.12.22, urgency: LOW
	* New features sponsored by the University of Maryland
	  - Added new "protocol = capwin" and "protocol = capwinctrl"
	    configuration file options.
	* New features for the Windows platform
	  - Added client mode allowing authenticated users to view
	    logs, reconfigure and terminate running stunnel services.
	  - Added support for multiple GUI and service instances
	    distinguised by the location of stunnel.conf.
	  - Improved log window scrolling.
	  - Added a new 'Pause auto-scroll' GUI checkbox.
	  - Double click on the icon tray replaced with single click.
	  - OpenSSL DLLs updated to version 3.0.1.
	* Other new features
	  - Rewritten the testing framework in python (thx to
	    Peter Pentchev for inspiration and initial framework).
	  - Added support for missing SSL_set_options() values.
	  - Updated stunnel.spec to support RHEL8.
	* Bugfixes
	  - Fixed OpenSSL 3.0 build.
	  - Fixed reloading configuration with
	    "systemctl reload stunnel.service".
	  - Fixed incorrect messages logged for OpenSSL errors.
	  - Fixed printing IPv6 socket option defaults on FreeBSD.
   ### Version 5.60, 2021.08.16, urgency: LOW
	* New features
	  - New 'sessionResume' service-level option to allow
	    or disallow session resumption
	  - Added support for the new SSL_set_options() values.
	  - Download fresh ca-certs.pem for each new release.
	* Bugfixes
	  - Fixed 'redirect' with 'protocol'.  This combination is
	    not supported by 'smtp', 'pop3' and 'imap' protocols.
	  - Enforced minimum WIN32 log window size.
	  - Fixed support for password-protected private keys with
	    OpenSSL 3.0 (thx to Dmitry Belyavskiy).
   ### Version 5.59, 2021.04.05, urgency: HIGH
	* Security bugfixes
	  - OpenSSL DLLs updated to version 1.1.1k.
	* New features
	  - Client-side "protocol = ldap" support (thx to Bart
	    Dopheide and Seth Grover).
	* Bugfixes
	  - The test suite fixed not to require external connectivity.
	  - Fixed paths in generated manuals (thx to Tatsuki Makino).
	  - Fixed configuration reload when compression is used.
	  - Fixed compilation with early releases of OpenSSL 1.1.1.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 16:56:31 +00:00
Peter Müller
64b72c4038 Core Update 165: Ship lcms2
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-02-15 16:44:56 +00:00