Commit Graph

4381 Commits

Author SHA1 Message Date
Peter Müller
d95e4d0dd5 Revert "colm: Update to version 0.14.7"
This reverts commit 59408f2cbf.

https://lists.ipfire.org/pipermail/development/2023-January/015316.html

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-27 00:09:21 +00:00
Adolf Belka
e44d567877 cairo: Update to version 1.17.6
- Update from version 1.16.0 to 1.17.6
- Update of rootfile
- Next version will only build with meson and as there were some bugs with the autoconf
   tools build which required a hack to overcome, this version was changed to run with
   meson. beos and os2 backends are no longer supported and windows only builds if the
   platform being used for the build is windows based. Therefore those options are no
   longer needed. meson uses shared libraries only by default.
- The cairo-1.16.0-binutils-2.34 patch is no longer needed as the changes have been
   included in the source tarball.
- tarball had to be changed to .bz2 as xz is no longer provided.
- Changelog
Release 1.17.6 (2022-03-18 Emmanuele Bassi <ebassi@gnome.org>)
	I spy with my little eye… a Cairo snapshot!
	First of all, many, many thanks to everyone who contributed to Cairo
	during this development cycle. A special thank you goes to:
		- Adrian Johnson
		- Uli Schlachter
		for their tireless efforts in ensuring that the lights are still on
		in the Cairo project.
	This snapshot sees the removal of the following backends and platform
	support:
		- Qt4
		- BeOS
		- OS/2
		- DirectFB
		- DRM
		- Cogl
		- OpenVG
	Thanks to all past contributors for their work on them. If you were using
	any of these backends then you will need to stick to Cairo 1.16.
	To offset the removal of the backends above, Adrian Johnson landed the
	DWrite font rendering backend on Windows.
	There have been multiple improvements in the Quartz backend, courtesy of
	John Ralls.
	Tim-Philipp Müller has kept the Meson build in top shape.
	This snapshot is going to be the **last** release of Cairo with the
	Autotools build system. The Meson build has seen many improvements and
	it is considerably easier to maintain and faster to build.
Release 1.17.4 (2020-11-27 Bryce Harrington <bryce@bryceharrington.org>)
	Thank you to the many people who have contributed the large number of
	bug fixes and refinements since 1.17.2.
	A particularly noteworthy improvement in this release is the addition of
	the meson build system as an alternative to autotools.  Autotools is
	still used for producing the releases, so will be the default in the
	tarball and presumably will still be preferred by distro packagers of
	Cairo.  It should be possible to build the release tarball using meson,
	but as this is new functionality consider it still a work in progress.
	The meson configuration has striven to track the autotools
	implementation but be aware there may still be some differences between
	the two.
	Continuous Integration configurations have been added that enable
	testing on a variety of platforms including Fedora, Windows MSVC, etc.
	This work has helped in identifying updates and fixes including
	adjusting to changes in API calls in dependencies like rsvg and
	fontconfig, and to fix platform-specific build issues.
	The cogl Cairo backend underwent significant development this cycle.
	Cogl provides GPU accelerated drawing support.  The development work
	includes implementation of core functionality, performance
	optimizations, and stabilization.
	Subpixel positioning support allows improved glyph outlines with the
	Freetype font backend.
	For a complete log of changes, please see
	    https://cairographics.org/releases/ChangeLog.1.17.4
	[On a personal note, this will be my last release for Cairo.  My Cairo
	time availability has been non-existent (particularly this crazy past
	year).  The release process is well documented and hopefully will help
	whomever picks up the baton from here.]
Release 1.17.2 (2019-01-31 Bryce Harrington <bryce@bryceharrington.org>)
	This snapshot provides the new support for writing floating point
	formats as 16 bpc PNGs, with support for RGBA128F and RGB96F formats.
	This new feature increases Cairo's pixman version requirement to 0.36.0.
	Beyond this are a range of bugfixes and some work on establishing CI for
	Cairo.
	For a complete log of changes, please see
	    https://cairographics.org/releases/ChangeLog.1.17.2
	API Changes
		None
	Dependency Changes
		pixman 0.36.0

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-26 23:19:05 +00:00
Adolf Belka
a72263c6c5 lz4: Update to version 1.9.4
- Update from version 1.9.3 to 1.9.4
- Update of rootfile
- Changelog
v1.9.4
perf : faster decoding speed (~+20%) on aarch64 platforms
perf : faster decoding speed (~+70%) for -BD4 setting in CLI
api  : new function `LZ4_decompress_safe_partial_usingDict()` by @yawqi
api  : lz4frame: ability to provide custom allocators at state creation
api  : can skip checksum validation for improved decoding speed
api  : new experimental unit `lz4file` for file i/o API, by @anjiahao1
api  : new experimental function `LZ4F_uncompressedUpdate()`, by @alexmohr
cli  : `--list` works on `stdin` input, by @Low-power
cli  : `--no-crc` does not produce (compression) nor check (decompression) checksums
cli  : fix: `--test` and `--list` produce an error code when parsing invalid input
cli  : fix: support skippable frames when passed via `stdin`, reported by @davidmankin
build: fix: Makefile respects CFLAGS directives passed via environment variable
build: `LZ4_FREESTANDING`, new build macro for freestanding environments, by @t-mat
build: `make` and `make test` are compatible with `-j` parallel run
build: AS/400 compatibility, by @jonrumsey
build: Solaris 10 compatibility, by @pekdon
build: MSVC 2022 support, by @t-mat
build: improved meson script, by @eli-schwartz
doc  : Updated LZ4 block format, provide an "implementation notes" section

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-26 23:17:50 +00:00
Adolf Belka
31c0c32779 libtool: Update to version 2.4.7
- Update from version 2.4.6 (Feb 2015) to 2.4.7 (Mar 2022)
- Update of rootfile
- The shebang in the libtoolize script has changed from ! /bin/sh to ! /usr/bin/env sh
   because apparently the previous version presented challenges for containerised
   environments. For IPFire build it meant that using libtoolize in the build of libxcrypt
   failed because it could not deal with the changed shebang.
- Patch created to change the shebang for libtoolize.in back to the version in 2.4.6 and
   earlier.
- The change of libtoolize.in then caused the libtool build to try and rebuild the man
   page for it but this fails as help2man is required for this. There is no option in the
   configure to not build the docs so hence there is an associated patch with this one
   that build help2man but the rootfile is completely commented out as it is only
   required for the build
- Added --disable-static to the configure options
- Changelog
    Noteworthy changes in release 2.4.7 (2022-03-16) [stable]
	New features:
	  - Libtool script now supports (configure-time and runtime) ARFLAGS
	    variable, which obsoletes AR_FLAGS.  This is due to naming conventions
	    among other *FLAGS and to be consistent with Automake's ARFLAGS.
	  - Gnulib testsuite is enabled and run during 'make check'.
	  - Support the Windows version of the Intel C Compiler (icl) in
	    libtool script.
	  - Pass '-fsanitize=*' flags for GCC and LLVM, and '-specs=*' for GCC
	    to linker.
	  - Pass '-Xassembler=*' and '-Wa,*' flag to compilers and linkers.
	  - The variable 'FILECMD' with default value of '/usr/bin/file' was used to
	    replace existing hard coded references to '/usr/bin/file'.
	  - Add MidnightBSD support.
	Important incompatible changes:
	  - Libtool changed ARFLAGS/AR_FLAGS default from 'cru' to 'cr'.
	  - Do not pass '-pthread' to Solaris linker.
	  - 'libtool' and 'libtoolize' scripts now use '#! /usr/bin/env sh' shebang.
	    Previously '#! /bin/sh' was used, which presents challenges for
	    containerized environments.
	Bug fixes:
	  - Fix significant slowdown of libtoolize for certain projects (regression
	    introduced in 2.4.3 release) caused by infinite m4 macro recursion.
	  - Mitigate the slowdown of libtool script (introduced in v2.4.3) caused by
	    increased number of calls to '$SED $sed_quote_subst' (bug#20006).
	  - Properly parse and export TLS symbols on AIX.
	  - Various bug fixes surrounding use of 'sed'.
	  - Darwin systems set proper "allow undefined" flag on OSX 11, and
	    PowerPC 10.5.
	  - Removed some deprecated tests related to 'Makefile.inc' files.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-26 23:11:22 +00:00
Adolf Belka
0645867f1d shadow: Update to version 4.13
- Update from version 4.11.1 to 4.13
- Update of rootfile not required
- Changelog
	4.13
	    * useradd.8: fix default group ID (Tim Biermann)
	    * Revert drop of subid_init() (Serge Hallyn)
	    * Georgian translation (NorwayFun)
	    * useradd: Avoid taking unneeded space: do not reset non-existent data
	      in lastlog (David Kalnischkies)
	    * relax username restrictions (Alexander Kanavin)
	    * selinux: check MLS enabled before setting serange (genBTC)
	    * copy_tree: use fchmodat instead of chmod (Samanta Navarro)
	    * copy_tree: don't block on FIFOs (Samanta Navarro)
	    * add shell linter (Jan Macku)
	    * copy_tree: carefully treat permissions (Samanta Navarro)
	    * lib/commonio: make lock failures more detailed (Luca BRUNO)
	    * lib: use strzero and memzero where applicable (Christian Göttsche)
	    * Update Dutch translation (Frans Spiesschaert)
	    * Don't test for NULL before calling free (Alex Colomar)
	    * Use libc MAX() and MIN() (Alejandro Colomar)
	    * chage: Fix regression in print_date (Xiami)
	    * usermod: report error if homedir does not exist (Iker Pedrosa)
	    * libmisc: minimum id check for system accounts (Iker Pedrosa)
	    * fix usermod -rG x y wrongly adding a group (xyz)
	    * man: add missing space in useradd.8.xml (Iker Pedrosa)
	    * lastlog: check for localtime() return value (Iker Pedrosa)
	    * Raise limit for passwd and shadow entry length (Iker Pedrosa)
	    * Remove adduser-old.c (Alejandro Colomar)
	    * useradd: Fix buffer overflow when using a prefix (David Michael)
	    * Don't warn when failed to open /etc/nsswitch.conf (Serge Hallyn)
	4.12.3
	    Revert removal of subid_init, which should have bumped soname. So note that 4.12
	     through 4.12.2 were broken for subid users.
	4.12.2
	    This includes the fix by Christian Göttsche for a TOCTTOU when copying directories.
	4.12.1
	    This should fix the broken uk manpages in 4.12.
	4.12
	    This release includes the following changes:
	    * Add absolute path hint to --root (Celeste Liu)
	    * Various cleanups (Christian Göttsche)
	    * Fix Ubuntu release used in CI tests (Jeremy Whiting)
	    * add -F options to useradd (and tests) (Masatake YAMATO)
	    * useradd manpage updates (Masatake YAMATO and Alexander Zhang))
	    * Check for ownerid (not just username) in subid ranges (Iker Pedrosa)
	    * Declare file local functions static (Christian Göttsche)
	    * Use strict prototypes (Christian Göttsche)
	    * Do not drop const qualifier for Basename (Christian Göttsche)
	    * Constify various pointers (Christian Göttsche)
	    * Don't return uninitialized memory (Christian Göttsche)
	    * Don't let compiler optimize away memory cleaning (Christian Göttsche)
	    * Remove many obsolete compatibility checks  and defines (Alejandro Colomar)
	    * Modify ID range check in useradd (Iker Pedrosa)
	    * Use "extern "C"" to make libsubid easier to use from C++ (Alois Wohlschlager)
	    * French translation updates (bubu)
	    * Fix s/with-pam/with-libpam/ (serge)
	    * Spanish translation updates (Fernando)
	    * French translation fixes (Balint Reczey)
	    * Default max group name length to 32 (Jami Kettunen)
	    * Fix PAM service files without-selinux (Ali Riza KESKIN)
	    * Improve manpages (Markus Hiereth)
	      - groupadd, useradd, usermod
	      - groups and id
	      - pwck
	    * Add fedora to CI builds (Iker Pedrosa)
	    * Fix condition under which pw_dir check happens (Ed Neville)
	    * logoutd: switch to strncat (Steve Grubb)
	    * AUTHORS: improve markdown output (Iker Pedrosa)
	    * Handle ERANGE errors correctly (Niko)
	    * Check for fopen NULL return (juyin)
	    * Split get_salt() into its own fn juyin)
	    * Get salt before chroot to ensure /dev/urandom. (juyin)
	    * Chpasswd code cleanup (juyin)
	    * Work around git safe.directory enforcement (serge)
	    * Alphabetize order in usermod help (Matheus Marques)
	    * Erase password copy on error branches (Christian Göttsche)
	    * Suggest using --badname if needed (Iker Pedrosa)
	    * Update translation files (Iker Pedrosa)
	    * Correct badnames option to badname (Iker Pedrosa)
	    * configure: replace obsolete autoconf macros (Christian Göttsche)
	    * tests: replace egrep with grep -E (Sam James)
	    * Update Ukrainian translations (Yuri Chornoivan)
	    * Cleanups (Iker Pedrosa)
	      - Remove redeclared variable
	      - Remove commented out code and FIXMEs
	      - Add header guards
	      - Initialize local variables
	    * CI updates (Iker Pedrosa)
	      - Create github workflow to install dependencies
	      - Enable CodeQL
	      - Update actions version
	    * libmisc: use /dev/urandom as fallback if other methods fail (Xi Ruoyao)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-26 22:48:51 +00:00
Adolf Belka
59408f2cbf colm: Update to version 0.14.7
- Update from version 0.13.0.6 to 0.14.7
- Update of rootfile
- patch from colm commit fc61ecb required to fix bug of make looking for static and
   dynamic libs even if one of them was disabled
- Changelog is not available in source tarball or on website etc. Changes have to be
   reviewed by the commits https://github.com/adrian-thurston/colm/commits/0.14.7

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-26 22:46:19 +00:00
Adolf Belka
b8a598fc92 borgbackup: Update to version 1.2.3 and fix bug 13032
- Update from version 1.2.0 to 1.2.3
- Update of rootfile
- This update works with python3-msgpack-1.0.4 and fixes bug 13032
- To make it work then the borgbackup-1.2.3-py3.10.egg-info directory must be the only
   egg-info directory for borgbackup otherwise version 1.2.3 will end up with an error.
   Versions 1.2.2 and earlier workled without any problem if there was an earlier egg-info
   directory for a different version number. The borgbackup rootfile had the egg-info
   directory commented out so an uninstall cleared the directory but did not remove it.
   This patch has the egg-info directory in the rootfile uncommented and so an uninstall
   removes the directory.
- borgbackup paks files created so that the uninstall.sh file will remove any egg-info
   directory that starts with "borgbackup-1." as the first ever borgbackup was 1.0.12
   When the old 1.2.0 or earlier borgbackup is uninstalled it will use the old default
   paks uninstall.sh file and rootfile which will leave the old egg-info directory in
   place. When version 1.2.3 is installed it will use the new install.sh script which
   will remove any existing egg-info directories present still.
- Changelog
Version 1.2.3 (2022-12-24)
Upgrade notes:
Some things can be recommended for the upgrade process from borg 1.1.x (please also read the important compatibility notes below):
    do you already want to upgrade? 1.1.x also will get fixes for a while.
    be careful, first upgrade your less critical / smaller repos.
    first upgrade to a recent 1.1.x release - especially if you run some older 1.1.* or even 1.0.* borg release.
    using that, run at least one borg create (your normal backup), prune and especially a check to see everything is in a good state.
    check the output of borg check - if there is anything special, consider a borg check --repair followed by another borg check.
    if everything is fine so far (borg check reports no issues), you can consider upgrading to 1.2.x. if not, please first fix any already existing issue.
    if you want to play safer, first create a backup of your borg repository.
    upgrade to latest borg 1.2.x release (you could use the fat binary from github releases page)
    run borg compact --cleanup-commits to clean up a ton of 17 bytes long files in your repo caused by a borg 1.1 bug
    run borg check again (now with borg 1.2.x) and check if there is anything special.
    run borg info (with borg 1.2.x) to build the local pre12-meta cache (can take significant time, but after that it will be fast) - for more details see below.
    check the compatibility notes (see below) and adapt your scripts, if needed.
    if you run into any issues, please check the github issue tracker before posting new issues there or elsewhere.
If you follow this procedure, you can help avoiding that we get a lot of “borg 1.2” issue reports that are not really 1.2 issues, but existed before and maybe just were not noticed.
Compatibility notes:
    matching of path patterns has been aligned with borg storing relative paths. Borg archives file paths without leading slashes. Previously, include/exclude patterns could contain leading slashes. You should check your patterns and remove leading slashes.
    dropped support / testing for older Pythons, minimum requirement is 3.8. In case your OS does not provide Python >= 3.8, consider using our binary, which does not need an external Python interpreter. Or continue using borg 1.1.x, which is still supported.
    freeing repository space only happens when “borg compact” is invoked.
    mount: the default for --numeric-ids is False now (same as borg extract)
    borg create --noatime is deprecated. Not storing atime is the default behaviour now (use --atime if you want to store the atime).
    --prefix is deprecated, use -a / --glob-archives, see #6806
    list: corrected mix-up of “isomtime” and “mtime” formats. Previously, “isomtime” was the default but produced a verbose human format, while “mtime” produced a ISO-8601-like format. The behaviours have been swapped (so “mtime” is human, “isomtime” is ISO-like), and the default is now “mtime”. “isomtime” is now a real ISO-8601 format (“T” between date and time, not a space).
    create/recreate --list: file status for all files used to get announced AFTER the file (with borg < 1.2). Now, file status is announced BEFORE the file contents are processed. If the file status changes later (e.g. due to an error or a content change), the updated/final file status will be printed again.
    removed deprecated-since-long stuff (deprecated since):
        command “borg change-passphrase” (2017-02), use “borg key …”
        option “--keep-tag-files” (2017-01), use “--keep-exclude-tags”
        option “--list-format” (2017-10), use “--format”
        option “--ignore-inode” (2017-09), use “--files-cache” w/o “inode”
        option “--no-files-cache” (2017-09), use “--files-cache=disabled”
    removed BORG_HOSTNAME_IS_UNIQUE env var. to use borg you must implement one of these 2 scenarios:
            the combination of FQDN and result of uuid.getnode() must be unique and stable (this should be the case for almost everybody, except when having duplicate FQDN and MAC address or all-zero MAC address)
            if you are aware that 1) is not the case for you, you must set BORG_HOST_ID env var to something unique.
    exit with 128 + signal number, #5161. if you have scripts expecting rc == 2 for a signal exit, you need to update them to check for >= 128.
Fixes:
    create: fix --list --dry-run output for directories, #7209
    diff/recreate: normalize chunker params before comparing them, #7079
    check: fix uninitialised variable if repo is completely empty, #7034
    xattrs: improve error handling, #6988
    fix args.paths related argparsing, #6994
    archive.save(): always use metadata from stats (e.g. nfiles, size, …), #7072
    tar_filter: recognize .tar.zst as zstd, #7093
    get_chunker: fix missing sparse=False argument, #7056
    file_integrity.py: make sure file_fd is always closed on exit
    repository: cleanup(): close segment before unlinking
    repository: use os.replace instead of os.rename
Other changes:
    remove python < 3.7 compatibility code
    do not use version_tuple placeholder in setuptools_scm template
    CI: fix tox4 passenv issue, #7199
    vagrant: update to python 3.9.16, use the openbsd 7.1 box
    misc. test suite and docs fixes / improvements
    remove deprecated --prefix from docs, #7109
    Windows: use MSYS2 for Github CI, remove Appveyor CI
Version 1.2.2 (2022-08-20)
New features:
    prune/delete --checkpoint-interval=1800 and ctrl-c/SIGINT support, #6284
Fixes:
    SaveFile: use a custom mkstemp with mode support, #6933, #6400, #6786. This fixes umask/mode/ACL issues (and also “chmod not supported” exceptions seen in 1.2.1) of files updated using SaveFile, e.g. the repo config.
    hashindex_compact: fix eval order (check idx before use), #5899
    create --paths-from-(stdin|command): normalize paths, #6778
    secure_erase: avoid collateral damage, #6768. If a hardlink copy of a repo was made and a new repo config shall be saved, do NOT fill in random garbage before deleting the previous repo config, because that would damage the hardlink copy.
    list: fix {flags:<WIDTH>} formatting, #6081
    check: try harder to create the key, #5719
    misc commands: ctrl-c must not kill other subprocesses, #6912
        borg create with a remote repo via ssh
        borg create --content-from-command
        borg create --paths-from-command
        (de)compression filter process of import-tar / export-tar
Other changes:
    deprecate --prefix, use -a / --glob-archives, see #6806
    make setuptools happy (“package would be ignored”), #6874
    fix pyproject.toml to create a fixed _version.py file, compatible with both old and new setuptools_scm version, #6875
    automate asciinema screencasts
    CI: test on macOS 12 without fuse / fuse tests (too troublesome on github CI due to kernel extensions needed by macFUSE)
    tests: fix test_obfuscate byte accounting
    repository: add debug logging for issue #6687
    _chunker.c: fix warnings on macOS
    requirements.lock.txt: use the latest cython 0.29.32
    docs:
        add info on man page installation, #6894
        update archive_progress json description about “finished”, #6570
        json progress_percent: some values are optional, #4074
        FAQ: full quota / full disk, #5960
        correct shell syntax for installation using git
Version 1.2.1 (2022-06-06)
Fixes:
    create: skip with warning if opening the parent dir of recursion root fails, #6374
    create: fix crash. metadata stream can produce all-zero chunks, #6587
    fix crash when computing stats, escape % chars in archive name, #6500
    fix transaction rollback: use files cache filename as found in txn.active/, #6353
    import-tar: kill filter process in case of borg exceptions, #6401 #6681
    import-tar: fix mtime type bug
    ensure_dir: respect umask for created directory modes, #6400
    SaveFile: respect umask for final file mode, #6400
    check archive: improve error handling for corrupt archive metadata block, make robust_iterator more robust, #4777
    pre12-meta cache: do not use the cache if want_unique is True, #6612
    fix scp-style repo url parsing for ip v6 address, #6526
    mount -o versions: give clear error msg instead of crashing. it does not make sense to request versions view if you only look at 1 archive, but the code shall not crash in that case as it did, but give a clear error msg.
    show_progress: add finished=true/false to archive_progress json, #6570
    delete/prune: fix --iec mode output (decimal vs. binary units), #6606
    info: fix authenticated mode repo to show “Encrypted: No”, #6462
    diff: support presence change for blkdev, chrdev and fifo items, #6615
New features:
    delete: add repository id and location to prompt, #6453
    borg debug dump-repo-objs --ghost: new --segment=S --offset=O options
Other changes:
    support python 3.11
    allow msgpack 1.0.4, #6716
    load_key: no key is same as empty key, #6441
    give a more helpful error msg for unsupported key formats, #6561
    better error msg for defect or unsupported repo configs, #6566
    docs:
        document borg 1.2 pattern matching behavior change, #6407 Make clear that absolute paths always go into the matcher as if they are relative (without leading slash). Adapt all examples accordingly.
        authentication primitives: improved security and performance infos
        mention BORG_FILES_CACHE_SUFFIX as alternative to BORG_FILES_CACHE_TTL, #5602
        FAQ: add a hint about --debug-topic=files_cache
        improve borg check --max-duration description
        fix values of TAG bytes, #6515
        borg compact --cleanup-commits also runs a normal compaction, #6324
        virtualization speed tips
        recommend umask for passphrase file perms
        borg 1.2 is security supported
        update link to ubuntu packages, #6485
        use --numeric-ids in pull mode docs
        remove blake2 docs, blake2 code not bundled any more, #6371
        clarify on-disk order and size of segment file log entry fields, #6357
        docs building: do not transform --/--- to unicode dashes
    tests:
        check that borg does not require pytest for normal usage, fixes #6563
        fix OpenBSD symlink mode test failure, #2055
    vagrant:
        darwin64: remove fakeroot, #6314
        update development.lock.txt
        use pyinstaller 4.10 and python 3.9.13 for binary build
        upgrade VMCPUS and xdistn from 4 to 16, maybe this speeds up the tests
    crypto:
        use hmac.compare_digest instead of ==, #6470
        hmac_sha256: replace own cython wrapper code by hmac.digest python stdlib (since py38)
        hmac and blake2b minor optimizations and cleanups
        removed some unused crypto related code, #6472
        avoid losing the key (potential use-after-free). this never could happen in 1.2 due to the way we use the code. The issue was discovered in master after other changes, so we also “fixed” it here before it bites us.
    setup / build:
        add pyproject.toml, fix sys.path, #6466
        setuptools_scm: also require it via pyproject.toml
        allow extra compiler flags for every extension build
        fix misc. C / Cython compiler warnings, deprecation warnings
        fix zstd.h include for bundled zstd, #6369
    source using python 3.8 features: pyupgrade --py38-plus ./**/*.py

Fixes: Bug #13032
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-26 22:44:30 +00:00
Michael Tremer
758951bf25 nqptp: Update to latest version in main branch
This patch also creates symlinks that the daemon is automatically
started.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-23 15:23:19 +00:00
Adolf Belka
c12dab0ee8 hwdata: Update of pci and usb ids files
- Update pci.ids from version 2022.12.04 to 2023.01.18
- Update usb.ids from version 2022.12.09 to 2023.01.16
- Update of rootfile not required
- Update of LFS not required

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-19 21:35:24 +00:00
Adolf Belka
0d82593f67 hdparm: Update to version 9.65
- Update from version 9.64 to 9.65
- Update of rootfile not required
- fix glibc headers patch updated for hdparm-9.65
- Changelog
    hdparm-9.65:
	- Another --Istdin fix: cannot read log pages when no device specified

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2023-01-18 23:30:15 +00:00
Peter Müller
177db98c21 Merge remote-tracking branch 'arne_f/kernel-6.1' into next 2023-01-18 22:31:44 +00:00
Adolf Belka
3d0cdaea87 mpfr: Update to version 4.2.0
- Update from version 4.1.1 to 4.2.0
- Update of rootfile
- Changelog
    Changes from versions 4.1.1 to version 4.2.0
	    Binary compatible with MPFR 4.0.* and 4.1.*, though some minor changes in
             the behavior of the formatted output functions may be visible, regarded as
             underspecified behavior or bug fixes (see below).
	    New functions mpfr_cosu, mpfr_sinu, mpfr_tanu, mpfr_acosu, mpfr_asinu,
             mpfr_atanu and mpfr_atan2u.
	    New functions mpfr_cospi, mpfr_sinpi, mpfr_tanpi, mpfr_acospi, mpfr_asinpi,
             mpfr_atanpi and mpfr_atan2pi.
	    New functions mpfr_log2p1, mpfr_log10p1, mpfr_exp2m1, mpfr_exp10m1 and
             mpfr_compound_si.
	    New functions mpfr_fmod_ui, mpfr_powr, mpfr_pown, mpfr_pow_uj, mpfr_pow_sj
             and mpfr_rootn_si (mpfr_pown is actually a macro defined as an alias for
             mpfr_pow_sj).
	    Bug fixes.
	        In particular, for the formatted output functions (mpfr_printf, etc.),
                 the case where the precision consists only of a period has been fixed
                 to be like .0 as specified in the ISO C standard, and the manual has
                 been corrected and clarified.
	        The macros of the custom interface have also been fixed: they now behave
                 like functions (except a minor limitation for mpfr_custom_init_set).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-09 18:43:22 +00:00
Arne Fitzenreiter
6535255270 kernel: update to 6.1.3
the kernel-6.1.x series should be the next lts series...
2023-01-08 10:08:33 +00:00
Arne Fitzenreiter
be88f0696e rtl8822bu: update to 20210702-2590672d717e2516dd2e96ed66f1037a6815bced
this is needed for kernel-6.1.x
2023-01-08 10:08:32 +00:00
Arne Fitzenreiter
f5be1e572f rtl8189fs: update to 476020109b3841421af289a7b78c7a25b0c45fac
this is needed for kernel 6.1.x
2023-01-08 10:08:32 +00:00
Arne Fitzenreiter
5cf1e265a9 rtl8189es: update to e58bd86c9d9408c648b1246a0dd76b16856ec172
this is needed for kernel 6.1.x
2023-01-08 10:08:32 +00:00
Arne Fitzenreiter
0c3838cb40 postfix: patch for build with kernel 6.x 2023-01-08 10:08:32 +00:00
Adolf Belka
43692f1f2e iperf3: Update to version 3.12
- Update from version 3.10.1 to 3.12
- Update of rootfile not required
- patch to remove pg flag no longer needed. Source code no longer has pg flag set
   in CFLAGS
- Changelog
        iperf-3.12 2022-09-30
            * Notable user-visible changes
              * cJSON has been updated to version 1.7.15 (#1383).
              * The --bind <host>%<dev> option syntax now works properly (#1360 /
                #1371).
              * A server-side file descriptor leak with the --logfile option has
                been fixed (#1369 / #1360 / #1369 / #1389 / #1393).
              * A bug that caused some large values from TCP_INFO to be misprinted
                as negative numbers has been fixed (#1372).
              * Using the -k or -n flags with --reverse no longer leak into future
                tests (#1363 / #1364).
              * There are now various debug level options available with the
                --debug option. These can be used to adjust the amount of
                debugging output (#1327).
              * A new --snd-timeout option has been added to set a termination
                timeout for idle TCP connections (#1215 / #1282).
              * iperf3 is slightly more robust to out-of-order packets during UDP
                connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 /
                #1260).
              * iperf3 will now use different ports for each direction when the
                --cport and --bdir options are set (#1249 / #1259).
              * The iperf3 server will now exit if it can't open its log file
                (#1225 / #1251).
              * Various help message and output fixes have been made (#1299 /
                #1330 / #1345 / #1350).
              * Various compiler warnings have been fixed (#1211 / #1316).
            * Developer-visible changes
              * Operation of bootstrap.sh has been fixed and simplified (#1335 /
                #1325).
              * Flow label support / compatibility under Linux has been improved
                (#1310).
              * Various minor memory leaks have been fixed (#1332 / #1333).
              * A getter/setter has been added for the bind_port parameter
                (--cport option). (#1303, #1305)
              * Various internal documentation improvements (#1265 / #1285 / #1304).
        iperf-3.11 2022-01-31
            * Notable user-visible changes
              * Update links to Discussions in documentation
              * Fix DSCP so that TOS = DSCP * 4 (#1162)
              * Fix --bind-dev for TCP streams (#1153)
              * Fix interface specification so doesn't overlap with IPv6 link-local
                addresses for -c and -B (#1157, #1180)
              * Add get/set test_unit_format function declaration to iperf_api.h
              * Auto adjustment of test-end condition for file transfers (-F), if no end
                condition is set, it will automatically adjust it to file size in bytes
              * Exit if idle time expires waiting for a connection in one-off mode (#1187,
                #1197)
              * Support zerocopy by reverse mode (#1204)
              * Update help and manpage text for #1157, support bind device
              * Consistently print target_bandwidth in JSON start section (#1177)
              * Test bitrate added to JSON output (#1168)
              * Remove fsync call after every write to receiving --file (#1176, #1159)
              * Update documentation for -w (#1175)
              * Fix for #952, different JSON object names for bidir reverse channel

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-05 10:48:10 +00:00
Peter Müller
63b3a6edb3 linux: Update to 5.15.85
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2023-01-03 16:07:48 +00:00
Adolf Belka
f5a57a8d6a curl: Update to version 7.87.0
- Update from version 7.86.0 to 7.87.0
- Update of rootfile
- version 7.87.0 changed hoiw it deals with deprecated typecheck expressions. This caused
   zabbix_agentd build to fail. Curl developers created a commit to fix this in next
   version release. Added as patch here. Should be able to be removed with next curl
   update.
- Changelog
    curl and libcurl 7.87.0
	This release includes the following changes:
		 o curl: add --url-query [52]
		 o CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit [75]
		 o lib: add CURL_WRITEFUNC_ERROR to signal write callback error [47]
		 o openssl: reduce CA certificate bundle reparsing by caching [11]
		 o version: add a feature names array to curl_version_info_data [67]
	This release includes the following bugfixes:
		 o altsvc: fix rejection of negative port numbers [144]
		 o aws_sigv4: consult x-%s-content-sha256 for payload hash [102]
		 o aws_sigv4: fix typos in aws_sigv4.c [101]
		 o base64: better alloc size [124]
		 o base64: encode without using snprintf [123]
		 o base64: faster base64 decoding [120]
		 o build: assume assert.h is always available [111]
		 o build: assume errno.h is always available [110]
		 o c-hyper: CONNECT respones are not server responses [137]
		 o c-hyper: fix multi-request mechanism [115]
		 o CI: Change FreeBSD image from 12.3 to 12.4 [108]
		 o CI: LGTM.com will be shut down in December 2022 [112]
		 o ci: Remove zuul fuzzing job as it's superseded by CIFuzz
		 o cmake: check for cross-compile, not for toolchain [54]
		 o CMake: fix build with `CURL_USE_GSSAPI` [78]
		 o cmake: really enable warnings with clang [25]
		 o cmake: set the soname on the shared library [140]
		 o cmdline-opts/gen.pl: fix the linkifier [64]
		 o cmdline-opts/page-footer: remove long option nroff formatting
		 o config-mac: define HAVE_SYS_IOCTL_H [107]
		 o config-mac: fix typo: size_T -> size_t [125]
		 o config-mac: remove HAVE_SYS_SELECT_H [116]
		 o config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW [41]
		 o configure: require fork for NTLM-WB [36]
		 o contributors.sh: actually use $CURLWWW instead of just setting it [129]
		 o cookie: compare cookie prefixes case insensitively [14]
		 o cookie: expire cookies at once when max-age is negative [45]
		 o cookie: open cookie jar as a binary file [89]
		 o curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS [90]
		 o curl-rustls.m4: on macOS, rustls also needs the Security framework [44]
		 o curl.h: include <sys/select.h> on SerenityOS [104]
		 o curl.h: name all public function parameters [118]
		 o curl.h: reword comment to not use deprecated option [132]
		 o curl: override the numeric locale and set "C" by force [60]
		 o curl: timeout in the read callback [15]
		 o curl_endian: remove Curl_write64_le from header [81]
		 o curl_get_line: allow last line without newline char [88]
		 o curl_path: do not add '/' if homedir ends with one [4]
		 o curl_url_get.3: remove spurious backtick [127]
		 o curl_url_set.3: document CURLU_DISALLOW_USER [139]
		 o curl_url_set.3: fix typo [148]
		 o CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE [1]
		 o CURLOPT_COOKIEFILE.3: advice => advise [131]
		 o CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example [31]
		 o CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw" [130]
		 o CURLOPT_POST.3: Explain setting to 0 changes request type [61]
		 o docs/curl_ws_send: Fixed typo in websocket docs [114]
		 o docs/EARLY-RELEASE.md: how to determine an early release [37]
		 o docs/examples: spell correction ('Retrieve') [119]
		 o docs/INSTALL.md: expand on static builds [62]
		 o docs/WEBSOCKET.md: explain the URL use [71]
		 o docs: add missing parameters for --retry flag [2]
		 o docs: add more "SEE ALSO" links to CA related pages [82]
		 o docs: explain the noproxy CIDR notation support [17]
		 o docs: extend the dump-header documentation [150]
		 o docs: remove performance note in CURLOPT_SSL_VERIFYPEER [13]
		 o examples/10-at-a-time: fix possible skipped final transfers [85]
		 o examples: update descriptions [83]
		 o ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH [96]
		 o gen.pl: do not generate CURLHELP bitmask lines > 79 characters [10]
		 o GHA: clarify workflows permissions, set least possible privilege [79]
		 o GHA: NSS use clang instead of clang-9 [103]
		 o gnutls: use common gnutls init and verify code for ngtcp2 [98]
		 o headers: add endif comments [51]
		 o HTTP-COOKIES.md: mention that http://localhost is a secure context [76]
		 o HTTP-COOKIES.md: update the 6265bis link to draft-11 [70]
		 o http: do not send PROXY more than once [46]
		 o http: fix the ::1 comparison for IPv6 localhost for cookies [155]
		 o http: set 'this_is_a_follow' in the Location: logic [40]
		 o http: use the IDN decoded name in HSTS checks [154]
		 o hyper: classify headers as CONNECT and 1XX [56]
		 o hyper: fix handling of hyper_task's when reusing the same address [33]
		 o idn: remove Curl_win32_ascii_to_idn [153]
		 o INSTALL: update operating systems and CPU archs [91]
		 o KNOWN_BUGS: remove eight entries [50]
		 o lib1560: add some basic IDN host name tests [151]
		 o lib: connection filters (cfilter) addition to curl: [43]
		 o lib: feature deprecation warnings in gcc >= 4.3 [58]
		 o lib: fix some type mismatches and remove unneeded typecasts [12]
		 o lib: parse numbers with fixed known base 10 [77]
		 o lib: remove bad set.opt_no_body assignments [42]
		 o lib: rewind BEFORE request instead of AFTER previous [65]
		 o lib: sync guard for Curl_getaddrinfo_ex() definition and use [6]
		 o lib: use size_t or int etc instead of longs [145]
		 o libcurl-errors.3: remove duplicate word [3]
		 o libssh2: return error when ssh_hostkeyfunc returns error [121]
		 o limit-rate.d: see also --rate
		 o log2changes.pl: wrap long lines at 80 columns [59]
		 o Makefile.mk: address minor issues [87]
		 o Makefile.mk: improve a GNU Make hack [122]
		 o Makefile.mk: portable Makefile.m32 [86]
		 o maketgz: set the right version in lib/libcurl.plist [53]
		 o mime: relax easy/mime structures binding [94]
		 o misc: Fix incorrect spelling [113]
		 o misc: remove duplicated include files [28]
		 o misc: typo and grammar fixes [23]
		 o negtelnetserver.py: have it call its close() method [68]
		 o netrc.d: provide mutext info [63]
		 o netware: remove leftover traces [80]
		 o noproxy: also match with adjacent comma [19]
		 o noproxy: guard against empty hostnames in noproxy check [136]
		 o noproxy: tailmatch like in 7.85.0 and earlier [35]
		 o nroff-scan.pl: detect double highlights
		 o ntlm: improve comment for encrypt_des [55]
		 o ntlm: silence ubsan warning about copying from null target_info pointer [69]
		 o openssl/mbedtls: use %d for outputing port with failf (int) [72]
		 o openssl: prefix errors with '[lib]/[version]: ' [105]
		 o os400: use platform socklen_t in Curl_getnameinfo_a [18]
		 o page-header: grammar improvement (display transfer rate) [126]
		 o proxy: refactor haproxy protocol handling as connection filter [57]
		 o README.md: remove badges and xmas-tree garnish [9]
		 o rtsp: fix RTSP auth [49]
		 o runtests: --no-debuginfod now disables DEBUGINFOD_URLS [100]
		 o runtests: do CRLF replacements per section only [97]
		 o scripts/checksrc.pl: detect duplicated include files [29]
		 o sendf: change Curl_read_plain to wrap Curl_recv_plain [48]
		 o sendf: remove unnecessary if condition [26]
		 o setup: do not require __MRC__ defined for Mac OS 9 builds [117]
		 o smb/telnet: do not free the protocol struct in *_done() [152]
		 o socks: fix username max size is 255 (0xFF) [146]
		 o spellcheck.words: remove 'github' as an accepted word [22]
		 o ssl-reqd.d: clarify that this is for upgrading connections only [138]
		 o strcase: use curl_str(n)equal for case insensitive matches [8]
		 o styled-output.d: this option does not work on Windows [93]
		 o system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS [133]
		 o system.h: support 64-bit curl_off_t for NonStop 32-bit [21]
		 o test1421: fix typo [109]
		 o test3026: reduce runtime in legacy mingw builds [73]
		 o tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
		 o tests: add authorityInfoAccess to generated certs [99]
		 o tests: add HTTP/3 test case, custom location for proper nghttpx [106]
		 o tls: backends use connection filters for IO, enabling HTTPS-proxy [92]
		 o tool: determine the correct fopen option for -D [95]
		 o tool_cfgable: free the ssl_ec_curves on exit [142]
		 o tool_cfgable: make socks5_gssapi_nec a boolean [128]
		 o tool_formparse: avoid clobbering on function params [135]
		 o tool_getparam: make --no-get work as the opposite of --get [39]
		 o tool_operate: provide better errmsg for -G with bad URL [16]
		 o tool_operate: when aborting, make sure there is a non-NULL error buffer [20]
		 o tool_paramhlp: free the proto strings on exit [141]
		 o url: move back the IDN conversion of proxy names [74]
		 o urlapi: reject more bad letters from the host name: &+() [143]
		 o urldata: change port num storage to int and unsigned short [66]
		 o vms: remove SIZEOF_SHORT [134]
		 o vtls: fix build without proxy support [38]
		 o vtls: localization of state data in filters [84]
		 o WEBSOCKET.md: fix broken link [30]
		 o Websocket: fixes for partial frames and buffer updates [7]
		 o websockets: fix handling of partial frames [32]
		 o windows: fail early with a missing windres in autotools [5]
		 o windows: fix linking .rc to shared curl with autotools [24]
		 o winidn: drop WANT_IDN_PROTOTYPES [27]
		 o ws: if no connection is around, return error [149]
		 o ws: return CURLE_NOT_BUILT_IN when websockets not built in [34]
		 o x509asn1: avoid freeing unallocated pointers [147]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-12-29 11:23:41 +00:00
Adolf Belka
2d8367ddb6 libcdada: Update to version 0.4.0
- Update from version 0.3.5 to 0.4.0
- Update of rootfile not required
- Update of patch in line with libcdada version
- Changelog
    v0.4.0 (12th March 2022)
	Add `cdada_map_insert_replace()`

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-12-29 11:22:22 +00:00
Adolf Belka
bdfe675987 libarchive: Update to version 3.6.2
- Update from version 3.6.1 to 3.6.2
- Update of rootfile
- patch to fix glibc 2.36 headers is now part of the source code
- Changelog
    Libarchive 3.6.2 is a bugfix and security release.
	Important bug fixes:
	    include ZSTD in Windows builds (#1688)
	    SSL fixes on Windows (#1714, #1723, #1724)
	    rar5 reader: fix possible garbled output with bsdtar -O (#1745)
	    mtree reader: support reading mtree files with tabs (#1783)
	    various small fixes for issues found by CodeQL

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-12-26 08:53:33 +00:00
Adolf Belka
0da1e37ada hwdata: Update of pci and usb ids files
- Update pci.ids from version 2022.03.22 to 2022.12.04
- Update usb.ids from version 2022.03.18 to 2022.12.09
- No update of rootfile
- No change to lfs

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-12-26 08:42:40 +00:00
Adolf Belka
15214970e6 avahi: Fix bug #13017 - - dbus[n]: Unknown group "netdev" in message bus configuration file
- add command into avahi install.sh paks file to add netdev group if it doesn't exist
- Update avahi PAK_VER to ensure that change is shipped

Tested-by: Jon Murphy <jon.murphy@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-12-26 08:41:51 +00:00
Adolf Belka
5e1db85c4f mpfr: Update to version 4.1.1 with patch 1
- Update from version 4.1.0 with patch set 1 to 13 to 4.1.1 with aptch set 1 to 1
- Update of rootfile
- Changelog
    Changes from version 4.1.0 to version 4.1.1:
	- Bug fixes (see <https://www.mpfr.org/mpfr-4.1.0/#fixed> and/or the
	  ChangeLog file), in particular for macros implementing functions.
	- Improved manual formatting.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-12-26 08:33:28 +00:00
Stefan Schantl
883ec31e3c QMI: Update red/iface file when using QMI.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-12-17 17:25:35 +00:00
Michael Tremer
b1ff8adbf0 network: Silence any output during the QMI setup
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
580c249a5b network: Assign "static" MAC addresses to QMI interfaces
This is really badly hacky, but I do not know a better way to solve this
with our existing "setup" program which would be a nightmare to extend.

So we are using the device number to generate a static MAC address which
can then be used as usual. I doubt many people will have more than one
device.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
8d09028b69 network: Force dhcpcd to ask for an IP address
So since all this static nonsense wasn't feeling right, I opened a
ticket upstream and got a lead how to actually get some proper DHCP
working.

  https://github.com/NetworkConfiguration/dhcpcd/issues/129

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
86ba5ce316 dhcpcd.exe: Add a safety net to make sure we always have a route
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
ece96c6f56 dhcpcd.exe: Ignore some events
We don't want any log messages printed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
e3da491238 dhcpcd.exe: Reformat the reason dispatcher
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
1f568cc0ed network: dhcpcd fails to check link state for QMI interfaces
When acquiring an IP address, dhcpcd seems to think that the interface
is down or does not work properly for some reason. It will
subsequentially decide to exit which is not what we want here.

Therefore this patch tells dhcpcd to ignore the link state and keep
happily running.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
cb4b6f433e dhcpcd.exe: Fix typo in configuring DNS server
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
c2e2c2824a dhcpcd.exe: Run everything no matter how RED is configured
This could potentially create problems when we abuse these functions to
launch the DHCP client on IPTV interfaces. This would have to be tested
and confirmed or potentially we would need some more changes to keep
supporting that use-case, too.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
7a67f77f10 dhcpcd.exe: Only touch /var/ipfire/red/active once
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
4ffd18a774 dhcpcd.exe: Do not overwrite the default gateway when empty
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
ccf36e9e8c dhcpcd.exe: Use DNS servers from QMI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
261727435d dhcpcd.exe: Store the default gateway when in QMI mode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
36914cce70 dhcpcd.exe: Only set gateway when we have received one
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
11f6226f65 dhcpcd.exe: Actually use the received MTU
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
a22e3c8ec7 dhcpcd.exe: Flush any configured IP addresses on shutdown
This allows us to start with a fresh interface every time dhcpcd is
being restarted.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
f28d5fa8cc network: Remove --debug switch for dhcpcd in QMI mode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
a0918657c9 network: Drop any traces of ISDN
This has been removed a long time ago and we should probably spend a
little bit more time on keeping the networking code tidy :)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:46 +00:00
Michael Tremer
957863f754 network: Add support for QMI modems
QMI is a proprietary interface from Qualcomm which are absolute pioneers
when it comes to interfacing with modems. I don't think there would be
any way to make this any more complicated and bloated.

So, bascially we will put the modem into a raw IP mode which changes the
interface into Point-to-Point mode.

We then configure the provider settings using qmicli. After that, the
modem will try to connect to the provider and obtain an IP address.

We will then start a DHCP client which does not do any DHCP-ing because
implementing that would be too complicated. Instead we do something even
*more* complicated where we would launch a custom script which asks the
modem for the allocated IP address and will configure it into the
device. The DHCP client then reads that IP address from the device and
pretends it came up with it by itself. Such an easy way to do this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:45 +00:00
Michael Tremer
c6551e73c2 network: Allow passing custom options to dhcpcd
This is useful for debugging.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:45 +00:00
Michael Tremer
33d2aa6d02 dhcpcd.exe: Allow using the DHCP setup scripts when RED is not configured as DHCP
This is useful for dial-up methods that use DHCP, but when RED_TYPE is
configured as PPP.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:45 +00:00
Michael Tremer
177ec16705 dhcpcd: Log any unhandled client events
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-17 17:20:45 +00:00
Peter Müller
8d1f604b4a ca-certificates: Remove TrustCor Systems root CAs
On November 30, 2022, Mozilla decided to take the following
actions as a response to the concerns raised about the merits
of this root CA operator (excerpt taken from
https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/oxX69KFvsm4/m/yLohoVqtCgAJ):

> 1. Set "Distrust for TLS After Date" and "Distrust for S/MIME
>    After Date" to November 30, 2022, for the 3 TrustCor root
>    certificates (TrustCor RootCert CA-1, TrustCor ECA-1,
>    TrustCor RootCert CA-2) that are currently included in
>    Mozilla's root store.
>
> 2. Remove those root certificates from Mozilla's root store
>    after the existing end-entity TLS certificates have expired.

As far as the latter is concerned, the offending certificates
have these expiry dates set:
- TrustCor RootCert CA-1: Mon, 31 Dec 2029 17:23:16 GMT
- TrustCor RootCert CA-2: Sun, 31 Dec 2034 17:26:39 GMT
- TrustCor ECA-1:         Mon, 31 Dec 2029 17:28:07 GMT

The way IPFire 2 currently processes Mozilla's trust store
does not feature a way of incorporate a "Distrust for XYZ After
Date" attribute. This means that despite TrustCor Systems root
CAs are no longer trusted by browsers using Mozilla's trust
store, IPFire would still accept certificates directly or
indirectly issued by this CA until December 2029 or December 2034.

To protect IPFire users, this patch therefore suggests to
patch our copy of Mozilla's trust store in order to remove
TrustCor Systems' root CAs: The vast majority of HTTPS connections
established from an IPFire machine take place in a non-interactive
context, so there is no security benefit from a "Distrust After
Date" information. Instead, if we do not want IPFire installations
to trust this CA, we have no other option other than remove it
unilaterally from our copy of Mozilla's trust store.

See also: https://lists.ipfire.org/pipermail/development/2022-November/014681.html

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-12-01 18:01:08 +01:00
Adolf Belka
bcef2fe0f6 elinks: Update to version 0.15.1
- Update from version 0.12pre6 (2012) to 0.15.1 (July 2022)
- Update of rootfile
- Original elinks was last updated in 2012. In Jan 2020 a fork was made of the package
   and has been maintained since then on an ongoing basis. This new fork is used by Arch
   Linux
- elinks has not been an addon since CU141 but the lfs file was still in the addon format
   This has been adjusted to make it in line with a core program
- The previous patches related to ssl have been removed as the fixes are now part of the
   source tarball.
- Changelog
    ELinks 0.15.1 Released on 2022-07-31
	* about:config
	* option --always-load-config #137
	* compilation fixes on Windows #140
	* added ui.background_char #142
	* sample build scripts and docker files
	* experimental DGI support
	* DOS port based on links code
	* configurable Accept-Header #143
	* minor compilation fixes
    ELinks 0.15.0 Released on 2021-12-24
	* Serbian translation update
    ELinks 0.15.0rc2 Released on 2021-12-19
	* Serbian translation update
	* HOME_ETC
    ELinks 0.15.0rc1 Released on 2021-12-04
	* removed -Wno-pointer-sign from CFLAGS
	* close stdin before calling a background program (sgerwk)
	  and options related to it #108, #109, #110, #113
	* gemini protocol and text/gemini mime type
	* changed rendering of blockquote element
	* avoid tmpfile in lua (sgerwk) #115, #118
	* console.log in js (mtatton) #93
	* localstorage (mtatton) #98
	* options document.browse.search.beginning_only
	  document.browse.search.ignore_history
	  ui.double_esc
	* ui.temperature.* to show temperature of CPU
	* document.plain.fixup_tables
	* enhanced ecmascript code. Added QuickJS
	* Notes on ECMAScript:
	  requires C++ compiler, sqlite3, libxml++5 >= 5.0.1.GIT
	  and either mozjs78-dev or QuickJS-2021-03-27
	  Most sites don't work, some crash. Some workarounds were implemented:
	  a) ECMAScript is disabled by default
	  b) ~/.elinks/allow.txt and ~/.elinks/disallow.txt with url prefixes
	  c) Added toggle-ecmascript action. You can bind it to some key
	* other small fixes
    ELinks 0.14.3 Released on 2021-09-26
	* Fix issue with negative value of cells #126
    ELinks 0.14.2 Released on 2021-08-29
	* crash in nttp #114
	* XSS in gopher #125
    ELinks 0.14.1 Released on 2021-05-30
	* Disable spidermonkey by default #85
	* Show error message about libgcrypt-config. #86
	* off by two. #88
	* Check NULL. #99
	* fix error message when no previous search was performed #100
	* alert when moving to the next match of a failed search #101
	* include unistd.h and errno.h to define safe_read() #107
    ELinks 0.14.0 Released on 2020-12-27
	No changes since 0.14.0rc2.
    ELinks 0.14.0rc2 Released on 2020-12-13
	* ~/.elinks/allow.txt - list of allowed url prefixes for js
    ELinks 0.14.0rc1 Released on 2020-12-06
	* dblatex for pdf. PR #64
	* fixes CTRL-Z. #65
	* changes in mime handlers. PR #66
	* fixes in data protocol. #67, #68, #71, #72, #73
	* allow to wrap text in PRE. #69
	* pass #fragment to external command. #75
	* introduced "document.browse.search.reset". #76
	* added meson as alternative build system
	* in #77 I'm going to attach static binaries for released versions
	* mozjs dependency updated to 52.*
		Note that, to compile with javascript support you must compile by g++ with -fpermissive option.
		There is a lot of warnings. Unfortunately JS often crashes. Without help from someone familiar
		with SpiderMonkey, we won't go far.
		As you might notice, I renamed repo to elinks.
		Thanks to all involved in this release.
    ELinks 0.13.5 Released on 2020-08-30
	* added clipboard selection using keyboard. #59
	* fixed drawing menus over emoji characters. #60
	* encoding to utf-8 and decoding back in python's pre_format_html_hook
		This is likely the last release of 0.13.x series.
    ELinks 0.13.4: Released on 2020-07-31.
	* fixed segfault with gnutls. introduced in 0.13.3
	* updated smart and dumb prefixes to https. Thanks Guido Cella. PR #54
	* added the st terminal to config options. PR #55
	* doc updates PR #57
	* also pass the uri as %u to external handler. Thanks sgerwk. PR #58
	* added the ui.clipboard_file config option
    ELinks 0.13.3: Released on 2020-06-29.
	* configure option --with-luapkg=name
	  You can choose lua version at compilation time. For example: --with-luapkg=luajit
	* config option connection.ssl.https_by_default (Thanks Guido Cella)
	  not enabled by default
	* docs updates (Guido Cella)
	* fixes related to ui.mouse_disable and xterm-like terminals (Thanks sgerwk)
	* show an alert when the search string is not found (sgerwk)
    ELinks 0.13.2: Released on 2020-05-31.
	* command line option -remote search(...) (thanks sgerwk)
	* command line option -bind-address
	* config option ui.mouse_disable (sgerwk)
	* config option ui.tostop
	* config option ui.sessions.fork_on_start
	* compatibility (compilability) with lua-5.2 and 5.3
	* modified cookies code (not well tested)
    ELinks 0.13.1: Released on 2020-01-31.
	* Fixed issue with uploading files to local cgi.
	* Python scripts in contrib converted to python3.
    ELinks 0.13.0: Released on 2019-12-27.
	Incompatibilities:
		* The protocol.fsp.sort option has been removed.  ELinks always sorts.
		* bug 1024: Verify the host name or IP address in the server certificate
		  if connection.ssl.cert_verify is not 0.
	Miscellaneous:
		* The configure script is no longer part of tarball, you must generate it.
		  For example running ./autogen.sh
		* major bug 181: Slave ELinks processes can now run an external editor.
		  This used to work in the master process only.
		* major bug 722: Filter CSS according to media types.  New option
		  document.css.media.
		* bug 638: Propagate the existence of $DISPLAY from slave terminals to
		  mailcap test commands.
		* bugs 762, 1082: Small memory leak in goto_current_link/goto_imgmap
		* bug 963: New option document.css.ignore_display_none.
		* bug 977: Fixed crash when opening in new tab a non link with onclick
		  attribute.
		* bug 1008: File upload fields in HTML forms now stream the files to
		  the server, instead of reading them to memory in advance.  This lets
		  you upload larger files.  The downsides are that ELinks may use a
		  cached response even if you have modified a file between requests,
		  and that ELinks can send inconsistent data if you modify a file
		  while it is being uploaded.
		* bug 1054: Don't abort downloads when closing the terminal from which
		  they were started.  When such a download ends, display the message
		  in the most recently used terminal.  If the user chooses
		  ``Background and Notify'' via the download manager in some terminal,
		  reassociate the download with that terminal.  These changes do not
		  apply to downloads to external handlers.
		* Really retry forever when connection.retries = 0.
		* enhancement: Session-specific options.  Any options changed with
		  toggle-* actions no longer affect other tabs or other terminals.
		* Do not crash when document.browse.minimum_refresh_time = 0 and
		  a document has a meta refresh with a delay of 0.
		* Properly update link highlighting and status bar information when the
		  repeat prefix is changed.
		* Handle SSL rehandshakes
		* Fix compatibility with Ruby >= 1.9
		* enhancement 15: Domain-specific options.  Use set_domain in
		  elinks.conf to e.g. disable cookies for google.com.  The option
		  manager window does not yet support this.
		* enhancement 867: Use bracketed paste mode on xterm.  This requires
		  xterm patch #228 or later configured with --enable-readline-mouse.
		* enhancement 824: Experimental support for combining characters.
		  See features.conf for details.
		* enhancement: Add a new entry Link Info under Link main menu.
		* enhancement: Indicate backgrounded downloads using an unused led.
		* enhancement: Display the number of ECMAScript interpreters that have
		  been allocated for documents in the Resources dialog.
		* Fedora enhancement 346861: Add support for nss_compat_ossl library
		  (OpenSSL replacement).
		* enhancement: ``elinks --dump'' uses box-drawing characters if supported
		  by the charset.
		* enhancement 1070: Support 256 colors on fbterm-1.4.
		* enhancement 1075: Scrolling the entire contents of dialog boxes.
		  Especially useful for multi-file BitTorrent downloads.
		* Report if the Lua function edit_bookmark_dialog receives the wrong
		  number or types of arguments instead of silently failing.
		* enhancement: Add ``Invalidate'' button to the cache manager.
		* enhancement: Add ``Search contents'' button to the cache manager with
		  which one can search through the cache items' data rather than their
		  metadata.
		* enhancement: Add rudimentary support for the HTML5 media elements,
		  <video> and <audio>.
		* enhancement: Add move-half-page-up and move-half-page-down actions.
		* enhancement: Add option to change overlap for vertical scrolling.
		* enhancement: HTML meta refresh allows semicolons in URLs, and the
		  syntax is more like in Firefox.
		* link against lua51 not lua50
		* SpiderMonkey must be mozjs-17.0. This version is latest with C API.
		  Find it with pkg-config.
		* using iconv for some multibyte charsets. It works if the terminal codepage
		  is UTF-8. More charsets will be added on demand.
		* enhancement: support SSL client certificate
		* python scripting is Python3 only
		* brotli and zstd encodings
		* possibility to make use of libevent instead of select for event loop
		* terminfo queries for output (not input) as compilation option

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-11-28 13:05:19 +01:00