Commit Graph

15716 Commits

Author SHA1 Message Date
Michael Tremer
67fbd255d1 fireperf: New package
https://lists.ipfire.org/pipermail/development/2021-February/009285.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-04 15:57:26 +00:00
Michael Tremer
e514d67f8e samba: Update to 4.13.4
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:50:36 +00:00
Michael Tremer
d086a16619 Update contributors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:31:02 +00:00
Michael Tremer
51605e1b52 Update languages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:30:37 +00:00
Michael Tremer
20918d700a core154: Ship sed
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:30:23 +00:00
Adolf Belka
8928b738d7 sed: Update to 4.8
- Update sed from 4.4 to 4.8
- Updated rootfile
- Changelog
	* Noteworthy changes in release 4.8 (2020-01-14) [stable]
		** Bug fixes
		- "sed -i" now creates temporary files with correct umask (limited to u=rwx).
		  Previously sed would incorrectly set umask on temporary files, resulting
		  in problems under certain fuse-like file systems.
		  [bug introduced in sed 4.2.1]
		** Release
		  distribute gzip-compressed tarballs once again
		** Improvements
		  a year's worth of gnulib development, including improved DFA performance
	* Noteworthy changes in release 4.7 (2018-12-20) [stable]
		** Bug fixes
		- Some uses of \b in the C locale and with the DFA matcher would fail, e.g.,
		  the following would mistakenly print "123-x" instead of "123":
		    echo 123-x|LC_ALL=C sed 's/.\bx//'
		- Using a multibyte locale or certain regexp constructs (some ranges,
		  backreferences) would avoid the bug.  [bug introduced in sed 4.6]
	* Noteworthy changes in release 4.6 (2018-12-19) [stable]
		** Improvements
		- sed now prints a clear error message when r/R/w/W (and s///w) commands
		  are missing a filename. Previously, w/W commands would fail with confusing
		  error message, while r/R would be a silent no-op.
		- sed now uses fully-buffered output (instead of line-buffered) when
		  writing to files. This should noticeably improve performance of "sed -i"
		  and other write commands.
		  Buffering can be disabled (as before) with "sed -u".
		- sed in non-cygwin windows environments (e.g. mingw) now properly handles
		  '\n' newlines in -b/--binary mode.
		** Bug fixes
		- sed no longer accesses invalid memory (heap overflow) when given invalid
		  backreferences in 's' command [bug#32082, present at least since sed-4.0.6].
		- sed no longer adds extraneous NUL when given s/$//n command.
		  [related to bug#32271, present since sed-4.0.7]
		- sed no longer accesses invalid memory (heap overflow) with s/$//n regexes.
		  [bug#32271, present since sed-4.3].
		** New Features
		  New option, --debug: print the input sed script in canonical form
		  and annotate program execution.
	* Noteworthy changes in release 4.5 (2018-03-31) [stable]
		** Bug fixes
		- sed now fails when matching very long input lines (>2GB).
		  Before, sed would silently ignore the regex without indicating an
		  error. [Bug present at least since sed-3.02]
		- sed no longer rejects comments and closing braces after y/// commands.
		  [Bug existed at least since sed-3.02]
		- sed -E --posix no longer ignores special meaning of '+','?','|' .
		  [Bug introduced in the original implementation of --posix option in
		  v4.1a-5-gba68fb4]
		- sed -i now creates selinux context based on the context of the symlink
		  instead of the symlink target. [Bug present since at least sed-4.2]
		- sed -i --follow-symlinks remains unchanged.
		- sed now treats the sequence '\x5c' (ASCII 92, backslash) as literal
		  backslash character, not as an escape prefix character.
		  [Bug present since sed-3.02.80]
		  Old behavior:
		     $ echo z | sed -E 's/(z)/\x5c1/' # identical to 's/(z)/\1/'
		     z
		  New behavior:
		     $ echo z | sed -E 's/(z)/\x5c1/'
		     \1

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:29:56 +00:00
Michael Tremer
be184f040f core154: Ship newt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:28:44 +00:00
Adolf Belka
fb87d2756e newt: Update to 0.52.21
- Update newt from 0.52.18 to 0.52.21
- Updated rootfile
- Changelog
	0.52.21
	- define env NEWT_NOFLOWCTRL to disable flow control (Robert Gill)
	- don't leak memory on errors in dialogboxes
	- fix radio button selection check in snack
	- fix plural forms in Lithuanian translation (#1568999)
	- fix parallel build (Émeric Dupont)
	- allow python versions to be specified with --with-python option
	0.52.20
	- improve handling of long strings in whiptail menu (#1353792)
	- support screen resize as hotkey in form (#1432926)
	0.52.19
	- support --notags in whiptail checklist and radiolist (#1319794)
	- don't hard-code -I/usr/include/slang in CPPFLAGS (Alex Suykov)
	- use $(CC) instead of $(CPP) to generate .depend files (Samuel Martin)
	- update translations from Zanata

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:28:16 +00:00
Michael Tremer
0610914f7b core154: Ship lvm2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:26:10 +00:00
Adolf Belka
b84005daaa lvm2: Update to 2.02.187
- Update lvm2 from 2.02.181 to 2.02.187
- Updated rootfile
- Changelog
	Version 2.02.187 - 24th March 2020
	==================================
	  Avoid running cache input arg validation when creating vdo pool.
	  Prevent raid reshaping of stacked volumes.
	  Ensure minimum required region size on striped RaidLV creation.
	  Fix resize of thin-pool with data and metadata of different segtype.
	  Fix splitting mirror leg in cluster.
	  Fix activation order when removing merged snapshot.
	  Add support for DM_DEVICE_GET_TARGET_VERSION into device_mapper.
	  Add lvextend-raid.sh to check on RaidLV extensions synchronization.
	  Fix lvmetad shutdown and avoid lenghty timeouts when rebooting system.
	  Prevent creating VGs with PVs with different logical block sizes.
	  Pvmove runs in exlusively activating mode for exclusively active LVs.
	  Activate thin-pool layered volume as 'read-only' device.
	  Ignore crypto devices with UUID signature CRYPT-SUBDEV.
	  Enhance validation for thin and cache pool conversion and swapping.
	  Fixed activation on boot - lvm2 no longer activates incomplete VGs.
	Version 2.02.186 - 27th August 2019
	===================================
	  Improve internal removal of cached devices.
	  Synchronize with udev when dropping snapshot.
	  Add missing device synchronization point before removing pvmove node.
	  Correctly set read_ahead for LVs when pvmove is finished.
	  Fix metadata writes from corrupting with large physical block size.
	  Report no_discard_passdown for cache LVs with lvs -o+kernel_discards.
	  Prevent shared active mirror LVs with lvmlockd.
	Version 2.02.185 - 13th May 2019
	================================
	  Fix change of monitoring in clustered volumes.
	  Improve -lXXX%VG modifier which improves cache segment estimation.
	  Add synchronization with udev before removing cached devices.
	  Fix missing growth of _pmspare volume when extending _tmeta volume.
	  Automatically grow thin metadata, when thin data gets too big.
	  Add support for vgsplit with cached devices.
	  Fix signal delivery checking race in libdaemon (lvmetad).
	  Add missing Before=shutdown.target to LVM2 services to fix shutdown ordering.
	Version 2.02.184 - 22nd March 2019
	==================================
	  Fix (de)activation of RaidLVs with visible SubLVs
	  Change scan_lvs default to 0 so LVs are not scanned for PVs.
	  Add scan_lvs config setting to control if lvm scans LVs for PVs.
	  Fix missing proper initialization of pv_list struct when adding pv.
	Version 2.02.183 - 07th December 2018
	=====================================
	  Avoid disabling lvmetad when repair does nothing.
	  Fix component detection for md version 0.90.
	  Use sync io if async io_setup fails, or use_aio=0 is set in config.
	  Avoid opening devices to get block size by using existing open fd.
	Version 2.02.182 - 30th October 2018
	====================================
	  Fix possible write race between last metadata block and the first extent.
	  Fix filtering of md 1.0 devices so they are not seen as duplicate PVs.
	  Fix lvconvert striped/raid0/raid0_meta -> raid6 regression.
	  Add After=rbdmap.service to {lvm2-activation-net,blk-availability}.service.
	  Fix pvs with lvmetad to avoid too many open files from filter reads.
	  Fix pvscan --cache to avoid too many open files from filter reads.
	  Reduce max concurrent aios to avoid EMFILE with many devices.
	  Fix lvconvert conversion attempts to linear.
	  Fix lvconvert raid0/raid0_meta -> striped regression.
	  Fix lvconvert --splitmirror for mirror type (2.02.178).
	  Do not pair cache policy and cache metadata format.
	  Fix mirrors honoring read_only_volume_list.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:25:49 +00:00
Adolf Belka
5ac4578d2e elfutils: Update to 0.182
- Update elfutils from 0.176 to 0.182
- Updated rootfile
- From version 0.178 debuginfod client/server capability was added.
	Additional .configure options required to disable debuginfod
	and libdebuginfod
- Changelog
	2020-10-28  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.182.
		* NEWS: Add 0.182 section.
	2020-10-28  Tom Tromey  <tom@tromey.com>
		* .gitignore: Add /tests/leb128.
	2020-10-01  Frank Ch. Eigler  <fche@redhat.com>
		PR25461
		* configure.ac: Add --enable-debuginfod-urls[=URLS] option.
	2020-09-18  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Check availability of libzstd and zstd.
	2020-09-08  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.181.
		* NEWS: Add 0.181 section.
	2020-08-20  Dmitry V. Levin  <ldv@altlinux.org>
		* configure.ac (--enable-libdebuginfod): AC_DEFINE ENABLE_LIBDEBUGINFOD.
	2020-07-17  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set -DBAD_FTS=1 also for CXXFLAGS.
	2020-06-19  Mark Wielaard  <mark@klomp.org>
		* Makefile.am (SUBDIRS): Always add debuginfod.
		* configure.ac (debuginfod): Split off...
		(libdebuginfod): ... this. Also add DUMME_DEBUGINFOD.
	2020-06-15  Sergei Trofimovich <slyfox@gentoo.org>
		* configure.ac: Use READELF in build-id check.
	2020-06-11  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.180.
		* NEWS: Add 0.180 section.
		* .gitignore: Update with new generated file.
	2020-06-10  Mark Wielaard  <mark@klomp.org>
		* configure.ac (MODVERSION): Remove.
	2020-03-30  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.179.
		* NEWS: Add 0.179 section.
	2020-03-25  Mark Wielaard  <mark@klomp.org>
		* README: Update mailinglist subscription info.
		* CONTRIBUTING: Likewise.
	2020-02-03  Frank Ch. Eigler  <fche@redhat.com>
		* configure.ac: Tolerate CXX= for debuginfod configuration.
	2019-12-11  Omar Sandoval  <osandov@fb.com>
		* configure.ac: Apply -Werror after user-defined CFLAGS in
		-D_FORTIFY_SOURCE=2 check.
	2019-12-06  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Add ac_cv_buildid check.
	2019-11-26  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.178.
		NEWS: Add 0.178 section.
	2019-11-26  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Add CXXFLAGS for gcov.
	2019-10-28  Aaron Merey  <amerey@redhat.com>
		* debuginfod/: New directory for debuginfod code.
		* Makefile.am (SUBDIRS): Recurse there.
		* configure.ac (--enable-debuginfod): New flag & checks.
	2019-08-25  Jonathon Anderson <jma14@rice.edu>
		* configure.ac: Add new --enable-valgrind-annotations
		* configure.ac: Add new --with-valgrind (headers only)
	2019-07-05  Omar Sandoval  <osandov@fb.com>
		* configure.ac: Get rid of --enable-libebl-subdir.
		* Makefile.am (SUBDIRS): Reorder backends and libcpu before libebl to
		satisfy build dependencies.
	2019-08-13  Mark Wielaard  <mark@klomp.org>
		* configure.ac: Set version to 0.177.
		* NEWS: Mention elfclassify, readelf DW_AT_data_member_location
		and DW_AT_discr_list attribute changes, dwarf.h DW_AT_GNU additions,
		dwelf_elf_e_machine_string function, dwelf_elf_begin change and
		C-SKY backend support.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:24:38 +00:00
Michael Tremer
dae10ab8c5 core154: Ship fcron
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:23:39 +00:00
Adolf Belka
a87abffc9e fcron: Update to 3.2.1
- Update fcron from 3.2.0 (Jul 2014) to 3.2.1 (Jun 2016 - latest version)
- Updated rootfile
- Changelog
	From version 3.2.0 to 3.2.1
	     * @-line can now be run every second (minimum every 10s previously)
	     * Fixed occasional 1s slippage. This was due to a race condition
	       between when time_to_sleep is run and when we compute how long to
	       sleep for, which could happen in the following second: if that
	       happened we end up sleeping for 1s instead of not sleeping at all.
	       The fix was to replace time_to_sleep() by next_wake_time().
	     * add From: header to emails. Similarly to other crons, use: "From:
	       %s (fcron)" with %s being either the user the job is run as or the
	       value of MAILFROM.
	     * The installation script now supports systemd fully.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:23:13 +00:00
Adolf Belka
8ace58e8ac p7zip: Update to 17.03
- Update p7zip from 16.02 (Jul 2016) to 17.03 (Dec 2020)
- Version 16.02 was the last version by the previous dev team.
	A fork was created in May 2020 with version 17.01
- Rootfile updated
- Changelog
	Version 17.03
	=============
	  - add zstd to zip
	  - add hash algorithm
	    - XXHASH32
	    - XXHASH64
	    - MD2
	    - MD4
	    - MD5
	    - sha384
	    - sha512
	  - add Lzfse to dmg
	  - add lz5 to 7z
	  - add lizard to 7z
	  - update lz4 to v1.9.3
	  - add brotli to 7z
	  - update cmake build
	  - fix xz crc64 error
	  - use system local to select OEM code
	  - add rpm install
	  - fix lzma2 and flzma22 call the same algorithm
	  - add 7zr build
	  - fix tar format link file compress and decompress
	Version 17.02
	=============
	  - p7zip 17.02 is more like 7zip 17.01(only 7za and 7z),The difference from 7zip 17.01
	    and older version p7zip is the following description
	  - Supports Fast lzma2 1.0.1 compression method
	  - Update Zstd method to 1.4.5
	  - Add zstd method parameters in 7z format
	    ZSTD parameters NEW name:
	         strategy -> strat
	         fast -> fast
	         long -> long
	         WindowLog -> wlog
	         HashLog -> hlog
	         ChainLog -> clog
	         SearchLog -> slog
	         MinMatch -> slen
	         TargetLen -> tlen
	         OverlapLog -> ovlog
	         LdmHashLog -> ldmhlog
	         LdmSearchLength -> ldmslen
	         LdmBucketSizeLog -> ldmblog
	         LdmHashRateLog -> ldmhevery
	  - Fix symlink files contained inside tar and squashfs as regular file
	  - Add lz4 and Zstd decompress method to squashfs
	Version 17.01
	=============
	  - Fix BUG CVE-2018-10115
	  - Fix BUG CVE-2018-5996
	  - Fix BUG CVE-2017-17969
	  - Fix BUG CVE-2016-9296
- The bug fixes in version 17.01 address the same CVE bugs as the
	p7zip-16.02-consolidated_fixes-1.patch Therefore this patch is no longer needed
- The patches for CVE-2016-2334 & 2335 were for versions before 16.00 so are no longer needed

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:21:29 +00:00
Adolf Belka
b51d19ece2 automake: Update to 1.16.3
- Update automake from 1.16.2 to 1.16.3
- No change to rootfile
- New in 1.16.3:
	* New features added
	  - In the testsuite summary, the "for $(PACKAGE_STRING)" suffix
	    can be overridden with the AM_TESTSUITE_SUMMARY_HEADER variable.
	* Bugs fixed
	  - Python 3.10 version number no longer considered to be 3.1.
	  - Broken links in manual fixed or removed, and new script
	    contrib/checklinkx (a small modification of W3C checklink) added,
	    with accompany target checklinkx to recheck urls.
	  - install-exec target depends on $(BUILT_SOURCES).
	  - valac argument matching more precise, to avoid garbage in DIST_COMMON.
	  - Support for Vala in VPATH builds fixed so that both freshly-generated and
	    distributed C files work, and operation is more reliable with or without
	    an installed valac.
	  - Dejagnu doesn't break on directories containing spaces.
	* Distribution
	  - new variable AM_DISTCHECK_DVI_TARGET, to allow overriding the
	    "make dvi" that is done as part of distcheck.
	* Miscellaneous changes
	  - install-sh tweaks:
	    . new option -p to preserve mtime, i.e., invoke cp -p.
	    . new option -S SUFFIX to attempt backup files using SUFFIX.
	    . no longer unconditionally uses -f when rm is overridden by RMPROG.
	    . does not chown existing directories.
	  - Removed function up_to_date_p in lib/Automake/FileUtils.pm.
	    We believe this function is completely unused.
	  - Support for in-tree Vala libraries improved.
- Full change details are in ChangeLog file in tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:21:03 +00:00
Michael Tremer
278b53e96f core154: Ship acl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:20:18 +00:00
Adolf Belka
10ad593d83 acl: Update to 2.2.53
- Update acl from 2.2.52 (May 2013) to 2.2.53 (Jun 2018 - latest version)
- Rootfile updated
- No make rules for install-lib or install-dev in new version. Only for install
- Changelog in tarball has 2.2.49 (Nov 2009) as the latest change
- Could not find changelog info anywhere else.
- Following changelog created by extracting from git commits (thanks for idea Peter Mueller)
	- include: fix uninstall for `make distcheck`	Mike Frysinger
	- acl.5 man page: Update link to POSIX.1e draft	Andreas Gruenbacher
	- test: add regression test	Dmitry V. Levin
	- Enable large-file support on systems that do not enable it by default	Dmitry V. Levin
	- libacl: Fix acl_from_text() returning NULL on all input	Dmitry V. Levin
	- setfacl --restore: Silence valgrind	Andreas Gruenbacher
	- setfacl: Preserve special mode bits on filesystems without POSIX ACL support	Andreas Gruenbacher
	- setfacl.1: document the meaning of '-' in perms	Kamil Dudka
	- setfacl: Allow more than four characters in the perms field	Andreas Gruenbacher
	- permissions.test: Fix umask	Andreas Gruenbacher
	- Add additional group names for root-specific tests	Andreas Gruenbacher
	- libtestlookup: Add missing EXPORT and static declarations	Andreas Gruenbacher
	- Minor man-page clarifications	Andreas Gruenbacher
	- Remove ACL_ADD and ACL_DELETE	Andreas Gruenbacher
	- test: fixups on SELinux machines for root testcases	He Zhe
	- libacl: Ignore warning in parse_acl_entry()	Andreas Gruenbacher
	- Cleanup visibility of API functions	Yury Usishchev
	- Cleanup internal headers usage	Yury Usishchev
	- Rework config.h usage	Yury Usishchev
	- walk_tree_rec: Add parentheses to clarify code	Andreas Gruenbacher
	- __acl_from_xattr: Set errno for invalid tag types	Andreas Gruenbacher
	- Fix checks for valid permissions in input	Corinna Vinschen
	- use portable AC_C_BIGENDIAN	Mike Frysinger
	- quote: escape literal backslashes	Jeff Mahoney
	- test: Add helper library to fake passwd/group files	Jeff Mahoney
	- ignore configure.lineno	Mike Frysinger
	- walk_tree: mark internal variables as static	Dmitry V. Levin
	- Do not export symbols that are not supposed to be exported	Dmitry V. Levin
	- getfacl: Fix minor resource leak	Andreas Gruenbacher
	- setfacl man page: Minor wording improvements	Andreas Gruenbacher
	- Fix the display block nesting in acl.5	Andreas Gruenbacher
	- getfacl: Fix memory leak	Andreas Gruenbacher
	- fix compilation with latest xattr git	Brice De Bruyne
	- libacl: acl_set_file: Remove unnecesary racy check	Andreas Gruenbacher
	- cp.test: Check permissions of the right file	Andreas Gruenbacher
	- add __acl_ prefixes to internal symbols	Mike Frysinger
	- mark libmisc funcs as hidden so they are not exported	Mike Frysinger
	- telldir return value and seekdir second parameters are of type long	Cristian Rodríguez
	- read_acl_{comments,seq}: switch to next_line	Mike Frysinger
	- read_acl_{comments,seq}: rename "line" to "lineno"	Mike Frysinger
	- build: ship a pkgconfig file for libacl	Mike Frysinger
	- build: make use of an aux-dir to stow away helper scripts	Mike Frysinger
	- build: drop aclincludedir, use pkgincludedir	Mike Frysinger
	- po: regenerate files after move	Mike Frysinger
	- modernize build system	Mike Frysinger
	- test: make running parallel/out-of-tree safe	Mike Frysinger
	- move gettext logic into misc.h	Mike Frysinger
	- punt debian/rpm packaging logic	Mike Frysinger
	- libacl: fix SIGSEGV of getfacl -e on overly long group name	Kamil Dudka
	- libacl: Make sure that acl_from_text() always sets errno when it fails	Andreas Gruenbacher
	- Use autoreconf rather than autoconf to regenerate the files.	Fabrice Bauzac
	- .gitignore: ignore *~ and config.h.in.	Fabrice Bauzac
	- Bad markup in acl.5 page	Eric S. Raymond
	- Makefile: rename configure.in to configure.ac	Mike Frysinger
	- test: fix insufficient quoting of '\'	Kamil Dudka
	- setfacl.1: fix typo 'inclu de' -> 'include'	John Bradshaw
	- Install the libraries to the appropriate directory	Brandon Philips

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:18:16 +00:00
Arne Fitzenreiter
2e2170bfb5 setup: fix field-order at addressconfig for red
i have added the gatewayfield at the line below the IP and Netmask
fields but prior this fields so the cursor jumps first the the gateway
and after this to the IP. This patch fix the activation order.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:17:37 +00:00
Michael Tremer
7b476adef3 lynis: Update rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:15:07 +00:00
Peter Müller
f1f2a8dbef lynis: update to 3.0.3
The changelog of lynis 3.0.3 is available at
https://github.com/CISOfy/lynis/releases/tag/3.0.3; all changes since
lynis 3.0.1 can be inspected at https://github.com/CISOfy/lynis/releases.

lynis 3.0.2 adds detection for IPFire, so we can hope to have those
"unknown operating system" messages omitted in future. :-)

Minor adjustments to LFS and rootfile were necessary to purge unused
CI/CD stuff as well as some markdown files (licence, code of conduct,
etc. pp.) from the extracted archive.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-02 10:56:19 +00:00
Michael Tremer
e36cd56431 core154: Ship unbound.conf
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-02 10:55:21 +00:00
Peter Müller
89b0449185 unbound.conf: do not set defaults again
These are meanwhile set by Unbound upstream as well, so there is no need
to do things twice here.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-02 10:54:31 +00:00
Michael Tremer
710b6ef1e8 Update the kernel's rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 11:13:24 +00:00
Michael Tremer
7a3f7634cc make.sh: Do not decrease nice level of build
This was designed to keep a workstation that is compiling IPFire
responsive during the build. However, the kernel's scheduler has been
improved enough that this is no longer an issue.

Instead of telling the kernel that the build job is something with a
lower priority (which it isn't) we now simply run with the nicelevel of
the parent process that has called make.sh.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:53:25 +00:00
Peter Müller
d5eb0e3906 libseccomp: update to 2.5.1
Release notes as per https://github.com/seccomp/libseccomp/releases/tag/v2.5.1:

Version 2.5.1 - November 20, 2020

    Fix a bug where seccomp_load() could only be called once
    Change the notification fd handling to only request a notification fd if
    the filter has a _NOTIFY action
    Add documentation about SCMP_ACT_NOTIFY to the seccomp_add_rule(3) manpage
    Clarify the maintainers' GPG keys

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:48:40 +00:00
Michael Tremer
f453ff8415 core154: Ship hyperscan
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:48:29 +00:00
Peter Müller
b815ec45d5 hyperscan: update to 5.4.0
Please refer to https://github.com/intel/hyperscan/releases/tag/v5.4.0
for the (rather length) release announcement.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:36 +00:00
Adolf Belka
d06693b487 qemu: Update to 5.2.0
- Update qemu from 5.0.0 to 5.2.0
- Changelogs for 5.1.0 and 5.2.0 available at https://wiki.qemu.org/ChangeLog/
- rootfile updated
- patch no longer needed as fix built into source. patch was not utilised
	for 5.0.0 version. Patch line was commented out in previous lfs

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:29 +00:00
Matthias Fischer
ae94f85b02 logwatch 7.5.5: Deleted no longer needed patch for clamav 0.103.0
I've should have read the changelog from opensuse more thoroughly:

...
4a862fa [clamav] Ignore new "Activating the newly loaded database" message
...

Sorry for the noise.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:21 +00:00
Adolf Belka
68fbf256e2 cups-filters: Update to 1.28.7
- Update cups-filters from 1.27.4 to 1.28.7
- Changelog
	CHANGES IN V1.28.7
		- driverless: Removed the support quality check from Pull
		  request #235 as it takes significant time for each printer
		  being listed, making cups-driverd (`lpinfo -m`) timing out
		  when there are many printers (OpenPrinting CUPS issue #65).
		- libcupsfilters: In the PPD generator give priority to Apple
		  Raster against PDF (Issue #331).
		- libcupsfilters: Added NULL check when removing ".Borderless"
		  suffixes from page size names (Issue #314, Pull request
		  #328).
		- libcupsfilters: In the cupsRasterParseIPPOptions() map the
		  color spaces the same way as in the PPD generator (Issue
		  #326, Pull request #327).
		- libcupsfilters: Fixed addition of grayscale mode in
		  generated PPD files, to avoid duplicate entries
		  (OpenPrinting CUPS issue #59).
	CHANGES IN V1.28.6
		- libcupsfilters: In generated PPDs add a grayscale mode if
		  there are only color printing modes (from OpenPrinting
		  CUPS).
		- libcupsfilters: In generated PPDs add an "OutputBin" option
		  also if it has only one choice (OpenPrinting CUPS pull
		  request #18).
		- libcupsfilters: Generated PPDs could have an "Unknown"
		  default InputSlot (OpenPrinting CUPS issue #44).
		- cups-browsed: Removed unneeded IPP attribute additions
		  preventing the created local queues from preserving a
		  location or description the user assigns to them (Issue
		  #323).
		- cups-browsed: Removed all calls of the resolve_uri() function
		  of libcupsfilters, as these are not actually needed and in case
		  the supplied DNS-SD-based URI is not resolvable, the function
		  gets stuck for ~5 seconds.
		- cups-browsed: Fixed several memory leaks, mainly from the
		  code to merge printer IPP attributes for clusters (Pull
		  request #322).
		- cups-browsed: Silenced compiler warning.
		- foomatic-rip: Fix infinite loop and input from file on raw
		  printing (Pull request #318).
		- foomatic-rip: Remove temporary file created during pdf-to-ps
		  conversion (Pull request #313).
	CHANGES IN V1.28.5
		- cups-browsed: UUID from IPP response was used after its
		  pointer was freed by ippDelete() (Pull request #311).
	CHANGES IN V1.28.4
		- driverless: Avoid duplicate PPD list entries from the same
	          device via UUID
		- driverless: Reduce ippfind calls by "driverless" and
		  "driverless-fax"called by CUPS. Let "driverless list" list
		  both print and fax PPDs and "driverless-fax list" do
		  nothing.
		- driverless: Avoid duplicate listings in printer discovery,
		  by "driverless-fax" not listing any URI as "driverless"
		  lists them all already.
		- driverless: Vastly improve performance by doing only one
		  ippfind call instead of two (IPP, IPPS) as ippfind accepts
		  more than one reg type on the command line.
		- Sample PPDs: Corrected manufacturer name in
		  Fuji_Xerox-DocuPrint_CM305_df-PDF.ppd.
	CHANGES IN V1.28.3
		- libcupsfilters, cups-browsed: Fixed inconsistency between
		  resolvers for DNS-SD-based URIs, resolve_uri() and
		  ippfind_based_uri_converter(). Now both return a freeable
		  string.
		- libcupsfilters: Fix uninitialized buffer and parsing ippfind
		  output in ippfind_based_uri_converter() function (Issue
		  #308, Pull request #309).
	CHANGES IN V1.28.2
		- driverless: Free allocated memory, use MAX_OUTPUT_LEN (Pull
		  request #304).
		- driverless: Make the two ippfind tasks(for IPP
		  and IPPS) run in parallel (Pull request #302, #305, #306).
		- braille: Support new liblouis tables not containing a
		  display name (Pull request #303)
		- Build system: Let ./configure not error out when there is
		  more than one DejaVuSans.ttf test font candidate (Issue
		  #300).
		- cups-browsed: Crash when a remote printer set as default
		  gets removed, due to missing variable in printf() call
		  (Issue #299).
		- libcupsfilters: Removed all signal handling and global
		  variables from get_printer_attributes() and
		  ippfind_based_uri_converter().  This is overkill for these
		  quick operations and causes problems when shutting down
		  cups-browsed (Issue #298).
	CHANGES IN V1.28.1
		- COPYING: Fixed several typos
		- libcupsfilters: Fixed typo in log message of
		  get_printer_attributes functions.
		- cups-browsed: Fixed typos in configuration file and man page
		- libcupsfilters: Let the PPD generator not suffix page size
		  names with ".Borderless" if all page sizes would get this
		  suffix, for example for printers which generally print
		  borderless.
		- libcupsfilters: Added "faxPrefix" option for generated IPP
		  Fax Out PPDs, so that this option also appears in print
		  dialogs.
		- driverless: List addresses for local services correctly when
		  using "--std-ipp-uris" (with "localhost" hostname).
		- driverless: Make calls of the ippfind utility somewhat faster,
		  setting the timeout of ippfind to automatic.
		- libcupsfilters: Resolve DNS-SD-based URIs for local services
		  correctly (using hostname "localhost").
		- libcupsfilters: In get_printer_attributes() functions do not
		  try to convert URIs which are not DNS-SD-based (Issue #294).
		- libcupsfilters: In get_printer_attributes() functions also
		  support URIs with "dnssd://..." scheme.
		- libcupsfilters: Moved signal handling back into main
		  function of the get_printer_attributes() variants, it got
		  moved out accidentally.
		- driverless: For generating a PPD, independent whether via
		  "driverless URI" or "driverless cat URI", always allow CUPS
		  driver URIs (prefixed with "driverless: " or
		  "driverless-fax:") and pure IPP URIs.
		- driverless: Accept clean IPP URIs also for 'driverless cat
		  ...' (Issue #295, Pull request #296).
		- driverless-fax: Do not use fixed path for call of driverless
		  itself (Pull request #293).
	CHANGES IN V1.28.0
		- driverless, driverless-fax, libcupsfilters: Added IPP Fax
		  Out support. Now printer setup tools list an additional fax
		  "driver".  A fax queue is created by selecting this
		  driver. Jobs have to be sent with "-o phone=12345" to supply
		  the destination phone number (Pull request #280).
		- libfontembed: Silenced warning with gcc 10.x (Pull request
		  #287).
		- cups-browsed: Added ./configure options
		  --enable-saving-created-queues and
		  --with-remote-cups-local-queue-naming (Pull request: #253,
		  #285).
		- cups-browsed: Fixed several memory leaks, mainly from the
		  code to merge printer IPP attributes for clusters (Pull
		  request #281, #283).
		- driverless: Added "--std-ipp-uris" command line option to
		  show listed URIs in standard hostname-based form (not the
		  CUPS DNS-SD-service-name-based form. Only for manual call of
		  the utility, for debugging purposes (Pull request #277).
		- libfontembed: Removed assert() calls which cause crashes
		  when unsupported emoji fonts are installed (Issue #254, Pull
		  request #276).
		- driverless: Added support for IPPS (use "ipps://..." URIs if
		  possible, Issue #251, Pull request #270, #273).
		- gstoraster, gstopdf: When converting PostScript to PDF use
		  the "pdfwrite" output device with "-dPDFSETTINGS=/default"
		  instead of with "-dPDFSETTINGS=/printer". This reproduces
		  bitmaps in the PostScript file with their original image
		  quality (Issue #272).
		- cups-browsed: Limit log file size and add backup file for
		  previous log entries. Introduced the configuration option
		  DebugLogFileSize in cups-browsed.conf to set the actual
		  limit in kilobytes or 0 to get the old behavior of an
		  unlimited size for the log file (Issue #260, Pull request
		  #267).
		- gstoraster, gstopdf: Do not apply margins when output format
		  is PDF, as then we convert an incoming PostScript file to
		  PDF (pre-pdftopdf) and do not prepare the pages for the
		  printer (post-pdftopdf, Issue #250).
		- cups-browsed: Do not write any log messages directly to
		  stderr, there were some concerning timeouts on queue
		  creation (Issue #260).
		- Build system: Fix cross-compilation without DejaVu test font
		  in configure.ac (Issue #262, Pull request #263).
		- libcupsfilters: Respect the fact that PPD keywords
		  are case-sensitive when adding "*cupsManualCopies: True" in
		  PPD file (Issue #242).
		- libcupsfilters: Older versions of libcups (< 2.3.1)
		  had the enum name for fold-accordion finishings mistyped.
		  Added a workaround.
		- cups-browsed: Remove left-over local queues from the
		  previous session more quickly when CUPS legacy browsing is
		  turned on.
		- cups-browsed: Left-over local queues from the previous
		  session for which the corresponding remote printer did not
		  appear again did not get removed as they were considered
		  externally overwritten.
		- gstoraster, gstopdf: Add option "-dDoNumCopies" to
		  Ghostscript command line if we are outputting PDF (called
		  via gstopdf wrapper) and the number of copies supplied to
		  CUPS is 1 (4th command line argument). In this case we
		  convert incoming PostScript to PDF and need to respect
		  embedded PostScript commands to implement the number of
		  copies (Issue #255, CUPS Issue #5796, OpenSUSE bug
		  #1173345).
		- imagetoraster: Potential null dereference fix (when no valid
		  PPD is supplied, Pull request #256).
		- cups-browsed: Call cupsGetNamedDest() only if
		  "OnlyUnsupportedByCUPS No"
		- Sample PPDs: Corrected ColorModel default for Generic PWG
		  Raster PPD to Color (Pull request #247).
		- cups-browsed: Mark the temp queue as cups-browsed-generated
	          during setting printer-is-shared (Pull request #246).
		- cups-browsed: Remove mentions of README and AUTHORS files in
	          the man page (Pull request #244).
		- pclmtoraster: Added new filter to extract Raster data from
		  raster-only PDF files, here for the special case of PCLm
		  files (Pull request #243, #257).
		- Sample PPDs: In Generic-PDF_Printer-PDF.ppd add option to
		  switch between color and grayscale printing (Pull request
		  #237).
	CHANGES IN V1.27.5
		- cups-browsed: Do not remove the created local queues on
		  shutdown, to avoid their re-creation on restart, so that
		  desktops get no cluttered with notifications of new queues
		  being created. One can return to the old behavior via
		  "KeepGeneratedQueuesOnShutdown No" in cups-browsed.conf
		  (Ubuntu bug #1869981, #1878241).
		- cups-browsed: Do not accept DNS-SD broadcasts of IPPS type
		  of "remote" CUPS queues of another CUPS instance on the
		  local machine. This way we get a local queue pointing to
		  such a printer only in unencrypted version (IPP). For some
		  reason printing from one CUPS server to another on the same
		  machine works only unencrypted.
		- foomatic-rip: Map two-sided-short-edge to DuplexTumble (Pull
	          request #236)
		- Build system: In configure.ac use AS_IF instead of
	          AC_CHECK_FILE for font check (Issue #239, Pull request #240)
		- cups-browsed: Cleaned up code for determining to which CUPS
		  server (host/port/domain socket) to connect, so that
		  connection via DomainSocket cups-browsed.conf directive,
		  CUPS_SERVER and IPP_PORT environment variables and all
		  defaults and methods of libcups, including CUPS' client.conf
		  work.
		- gstoraster, rastertopdf: Do not pass NULL to fprintf() (Pull
	          request #230).
		- libcupsfilters: Silence compiler warning (Pull request #229).
- rootfile updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:08 +00:00
Adolf Belka
aadf0a01e3 cifs-utils: Update to 6.12
- Update cifs-utils from 5.9 to 6.12
- Changelog - URL for each change gives more details of changes
	December, 2020: Release 6.12
	    get/setcifsacl tools are improved to support changing owner, group and SACLs
	    mount.cifs is enhanced to use SUDO_UID env variable for cruid
	    smbinfo is re-written in Python language
	    https://lists.samba.org/archive/samba-technical/2020-December/136156.html
	September, 2020: Release 6.11
	    CVE-2020-14342: mount.cifs: fix shell command injection
	    https://lists.samba.org/archive/samba-technical/2020-September/135747.html
	December 16, 2019: Release 6.10
	    smb3 alias/fstype is added
	    smb2-quota tool is added to display quota information
	    smb2-secdesc UI tool to view security descriptors is added
	    smbinfo is enhanced with capabilities to dump session keys and get/set compression of files
	    smbinfo bash completion is supported
	    getcifsacl tool is improved to support multiple files
	    https://lists.samba.org/archive/samba-technical/2019-December/134662.html
	April 5, 2019: Release 6.9
	    smbinfo utility is added to query various kinds of information from the server (objectId, snapshots, different FileInfo* classes and other metadata)
	    server IP change is supported by expiring DNS key resolver entries
	    get/setcifsacl tools are improved to handle unexpected behavior
	    share snapshot are allowed to be specified by a GMT token or SMB 100-nanoseconds time
	    various new mount option are documented: bsize, handletimeout, handlecache, rdma, max_credits and others
	    https://lists.samba.org/archive/samba-technical/2019-April/133233.html
	March 9, 2018: Release 6.8
	    man pages updates (auto-negotiate protocol version by default) and cleanups (moving to .rst format)
	    setcifsacl: fix security descriptor buffer size mismatch
	    cifscreds: fix a segfault for incorrect usage
	    minor mount.cifs fixes
	    https://lists.samba.org/archive/samba-technical/2018-March/126227.html
	March 2, 2017: Release 6.7
	    fixes for regressions from cifs.upcall overhaul
	    mount.cifs cleanups
	    https://lists.samba.org/archive/samba-technical/2017-March/119036.html
	September 3, 2016: Release 6.6
	    cleanup/overhaul of cifs.upcall krb5 credcache handling
	    https://lists.samba.org/archive/samba-technical/2016-September/115974.html
	February 22, 2016: Release 6.5
	    mount.cifs: ignore x- mount options
	    minor build fixes
	    minor manpage fix
	    https://lists.samba.org/archive/samba-technical/2016-February/112372.html
	July 11, 2014: Release 6.4
	    allow PAM directory to be configurable
	    better determination of default keytab file
	    better cifscreds error handling
	    uppercase devicename when retrying mount
	    https://lists.samba.org/archive/samba-technical/2014-July/101132.html
	January 9, 2014: Release 6.3
	    fixes for various bugs turned up by Coverity
	    clean unused cruft out of upcall binary
	    add new pam_cifscreds PAM module for establishing NTLM creds on login
	    https://lists.samba.org/archive/samba-technical/2014-January/097124.html
	October 4, 2013: Release 6.2
	    setcifsacl can now work without a plugin
	    systemd-ask-password is found using $PATH now
	    cifs.upcall now works with KEYRING: credcaches
	    https://lists.samba.org/archive/samba-technical/2013-October/095287.html
	July 2, 2013: Release 6.1
	    minor bugfixes
	    allow cifs.upcall to use dedicated keytab
	    https://lists.samba.org/archive/samba-technical/2013-July/093601.html
	March 25, 2013: Release 6.0
	    minor bugfixes and documentation updates
	    support for NFS-style device names removed
	    https://lists.samba.org/archive/samba-technical/2013-March/091169.html
- Rootfile updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:45:54 +00:00
Adolf Belka
9ab74511da screen: Update to 4.8.0
- Update screen from 4.2.1 to 4.8.0
- Changelog
	Version 4.8.0 (05/02/2020)
	  * Improve startup time by only polling for files to close
	  Fixes:
		- Fix for segfault if termcap doesn't have Km entry
		- Make screen exit code be 0 when checking --version
		- Fix potential memory corruption when using OSC 49
	Version 4.7.0 (02/10/2019)
	  * Add support for SGR (1006) mouse mode
	  * Add support for OSC 11
	  * Update Unicode ambiguous and wide tables to 12.1.0
	  * Fixes:
	  - cross-compilation support (bug #43223)
	  - a lot of manpage fixes and cleanups
	Version 4.6.2 (23/10/2017):
	  * Fixes:
		- revert changes to cursor position restore behavour (bug #51832)
		- set freed pointer to NULL (bug #52133)
		- documentation fixes
		- fix windowlist crashes (bug #43054 & #51500)
	Version 4.6.1 (10/07/2017):
	  * Fixes:
		- problems with starting session in some cases
		- parallel make install
		- segfault when querying info on nonUTF locale (bug #51402)
	Version 4.6.0 (28/06/2017):
	  * Update Unicode wide tables to 9.0 (bug #50044)
	  * Support more serial speeds
	  * Improved namespaces support
	  * Migrate from fifos to sockets
	  * Start viewing scrollback at first line of output (bug #49377)
	Version 4.5.1 (25/02/2017):
	  * Fixes:
		- logfile permissions problem (CVE-2017-5618)
		- SunOS build problem (bug #50089)
		- FreeBSD core dumps (bug #50143)
	Version 4.5.0 (10/12/2016):
	  * Allow specifying logfile's name via command line parameter '-L'
	  * Fixes:
		- broken handling of "bind u digraph U+" (bug #48691)
		- crash with long $TERM (bug #48983)
		- crash when bumping blank window
		- build for AIX (bug #49149)
		- %x improperly separating arguments
		- install with custom DESTDIR (bug #48370)
	Version 4.4.0 (19/06/2016):
	  * Support up to 24 function keys
	  * Fix runtime issues
	  * 'logfile' command, starts logging into new file upon changing
	Version 4.3.1 (28/06/2015):
	  * Fix resize bug
	Version 4.3.0 (13/06/2015):
	  * Introduce Xx string escape showing the executed command of a window
	  * Implement dead/zombie window polling, allowing for auto reconnecting
	  * Allow setting hardstatus on first line
	  New Commands:
	  * 'sort' command sorting windows by title
	  * 'bumpleft', 'bumpright' - manually move windows on window list
	  * 'collapse' removing numbering 'gaps' between windows, by renumbering
	  * 'windows' command now accepts arguments for use with querying
- Rootfile updated
- Two screen patchfiles deleted as the patch changes are now built into
	the source files

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:45:45 +00:00
Arne Fitzenreiter
69d90c36cc network-functions.pl: declare use of smartmatch
perl complains about the use of experimental smartmatch feature
if it is not declared.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:45:38 +00:00
Matthias Fischer
dd401c4d8a libassuan: Update to 2.5.4
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:38:31 +00:00
Michael Tremer
84371e42df core154: Ship libgpg-error
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:38:21 +00:00
Matthias Fischer
d3d5039924 libgpg-error: Update to 1.41
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:38:05 +00:00
Michael Tremer
f4abc0221f core154: Ship libgcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:37:51 +00:00
Matthias Fischer
47cf62d3b7 libgcrypt: Update to 1.9.1
For details - especially for this version - see:
https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html

Overview:
https://dev.gnupg.org/source/libgcrypt/browse/master/NEWS

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:37:31 +00:00
Peter Müller
f90fd27a70 Postfix: update to 3.5.9
This release adds runtime detection of DNSSEC support; please refer to
http://www.postfix.org/announcements/postfix-3.5.9.html for its full
announcement.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:37:16 +00:00
Matthias Fischer
bf2ff65e6c logwatch: Update to 7.5.5
For details see:
https://build.opensuse.org/package/view_file/server:monitoring/logwatch/ChangeLog?expand=1

Plus: deleted no longer need dhcpd-patch.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:36:54 +00:00
Michael Tremer
6106a465d7 core154: Ship dma
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:36:33 +00:00
Matthias Fischer
b3a4ea2817 knot: Update to 3.0.4
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:36:06 +00:00
Matthias Fischer
b1f5103899 knot: Cosmetic changes in lfs
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:35:57 +00:00
Adolf Belka
5bc11f39e3 dbus: Update to 1.12.20
- Update dbus from 1.11.12 to 1.12.20 (latest in release line
	1.13.x is also available but this is the development line
	and not recommended for production use
- Changelog between these two versions is very long (750 lines long) and
	can be found in the NEWS file in the source tarball.
- rootfile updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:31:29 +00:00
Adolf Belka
d1efdea0d3 dma: Update to 0.13
- Update dma from 0.12 to 0.13
- No changelog information available
- No change to the rootfile

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-30 17:38:59 +00:00
Michael Tremer
fa82a2156a Revert "core154: Ship freetype"
This reverts commit 45063142be.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-29 14:43:20 +00:00
Michael Tremer
52bf6075d0 Revert "freetype: update to 2.10.4"
This reverts commit 5653a45f81.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-29 14:43:05 +00:00
Michael Tremer
9a0e002098 core154: Ship ipset
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-29 11:14:43 +00:00
Adolf Belka
bc19698555 ipset: Update to 7.10
- Update ipset from 7.6 to 7.10
- Changelog
7.10
    Kernel part changes
        Fix patch "Handle false warning from -Wstringop-overflow"
        Backward compatibility: handle renaming nla_strlcpy to nla_strscpy
        treewide: rename nla_strlcpy to nla_strscpy. (Francis Laniel)
        netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)
        netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin)
        Handle false warning from -Wstringop-overflow
        Backward compatibility: handle missing strscpy with a wrapper of strlcpy.
        Move compiler specific compatibility support to separated file (broken compatibility support reported by Ed W)
7.9
    Userspace changes
        Fix library versioning (Jan Engelhardt)
7.8
    Kernel part changes
        Complete backward compatibility fix for package copy of <linux/jhash.h>
        Compatibility: check for kvzalloc() and GFP_KERNEL_ACCOUNT
        netfilter: ipset: enable memory accounting for ipset allocations (Vasily Averin)
        netfilter: ipset: prevent uninit-value in hash_ip6_add (Eric Dumazet)
        Compatibility: use skb_policy() from if_vlan.h if available
        Compatibility: Check for the fourth arg of list_for_each_entry_rcu()
        Backward compatibility fix for the package copy of <linux/jhash.h>
7.7
    Userspace changes
        Expose the initval hash parameter to userspace
        Handle all variable header parts in helper scripts instead ot test tasks
        Add bucketsize parameter to all hash types
        Support the -exist flag with the destroy command
    Kernel part changes
        Expose the initval hash parameter to userspace
        Add bucketsize parameter to all hash types
        Use fallthrough pseudo-keyword in the package copy of too
        Support the -exist flag with the destroy command
        netfilter: Use fallthrough pseudo-keyword (Gustavo A. R. Silva)
        netfilter: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)
        netfilter: ipset: call ip_set_free() instead of kfree() (Eric Dumazet)
        netfiler: ipset: fix unaligned atomic access (Russell King)
        netfilter: ipset: Fix subcounter update skip (Phil Sutter)
        ipset: Update byte and packet counters regardless of whether they match (Stefano Brivio)
        netfilter: ipset: Pass lockdep expression to RCU lists (Amol Grover)
        ip_set: Fix compatibility with kernels between v3.3 and v4.5 (Serhey Popovych)
        ip_set: Fix build on kernels without INIT_DEFERRABLE_WORK (Serhey Popovych)
        ipset: Support kernels with at least system_wq support
        ip_set: Fix build on kernels without system_power_efficient_wq (Serhey Popovych)
- Rootfiles updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-29 11:14:22 +00:00
Michael Tremer
45063142be core154: Ship freetype
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-29 11:14:06 +00:00