Commit Graph

9975 Commits

Author SHA1 Message Date
Michael Tremer
69aac83da9 core168: Add rd.auto to kernel command line
This parameter will enable dracut to automatically launch any MDRAID
arrays at boot time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-05-30 18:59:33 +00:00
Peter Müller
b630a9a8a8 Core Update 168: fcrontab != crontab
Silly me.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-18 17:42:24 +00:00
Michael Tremer
1c1d9fd7bf dracut: Enable automatic assembly of any RAID/LVM devices
This has changed in dracut 24 and we have used various hacks to enable
this behaviour again when it would have been so easy to just enable this
parameter.

Fixes: #12862 - Upgrade from Core 166 to 167 does not use RAID anymore
Reported-by: Dirk Sihling <dsihling@web.de>
Reported-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-16 18:31:12 +00:00
Peter Müller
bbd4767fcf Core Update 168: Ship liburcu
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-16 07:12:23 +00:00
Stefan Schantl
4eb6ba2bd5 poppler: Fix rootfile.
libpoppler.so.120.0.0 contains all the functions and symbols which
are required by the tools linked against it.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-05-16 07:12:00 +00:00
Stefan Schantl
691a83f237 libinih: Fix rootfile.
Some tools of the xfsprogs are linked against libinih and therefore
we need to ship those libs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-05-16 07:11:45 +00:00
Stefan Schantl
0f3b6da86d liburcu: Fix rootfile.
At least the xfsprogs is linked agains the urcu libraries and therefore
requires them to run and deal with xfs filesystems.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-05-16 07:11:35 +00:00
Stefan Schantl
ceb8b07b2c pango: Fix rootfile.
The main libraries libpangocairo and libpangosoft2 accidently have been
marked to be not shipped or part of the system.

They are required by collecty and various other libraries or binaries.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-05-13 20:38:43 +00:00
Peter Müller
9f42266a59 strongswan: Update rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-13 09:22:35 +00:00
Stefan Schantl
8615d42ce7 expat: Fix rootfile.
The libexpat.so.1 file is just a symlink to libexpat.so.1.8.8 which
contains all the functions and symbols required by the binaries, linked
against it. Therefore this file needs to be present on the systems.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-13 09:18:20 +00:00
Peter Müller
27d1dc083e Core Update 168: Ship and restart strongSwan
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-12 18:06:59 +00:00
Peter Müller
6758499749 Core Update 168: Ship core-files
https://community.ipfire.org/t/core-168-testing-working/7901/7

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-12 17:27:34 +00:00
Peter Müller
64fb91fedf Core Update 168: Ship necessary dependencies
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-10 14:12:21 +00:00
Peter Müller
7dc85dec94 Core Update 168: Ship coreutils
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-10 13:56:59 +00:00
Peter Müller
672582488b Core Update 168: Ship GnuPG
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-10 13:54:25 +00:00
Stefan Schantl
0e48c84c42 suricata: Perform ruleset update every 12 hours.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 14:24:44 +00:00
Peter Müller
3b92642427 Update rootfiles
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 14:16:10 +00:00
Peter Müller
dc871930f6 Core Update 168: Ship pakfire.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 13:14:16 +00:00
Peter Müller
d79814485f Core Update 168: Delete orphaned symlinks to Suricata ruleset updater
Reported-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 12:03:18 +00:00
Peter Müller
fd1e3e3c74 Core Update 168: Stop services before extracting files
https://lists.ipfire.org/pipermail/development/2022-May/013398.html

On a general note, we should do so for every Core Update, as it is more
sane to stop services before deleting or overwriting any files.

Reported-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 12:00:10 +00:00
Peter Müller
3e2e9c1593 Core Update 168: Ship intel-microcodes and rebuild initrds
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 11:41:09 +00:00
Peter Müller
99a79bcbd8 Revert "Core Update 168: Ship boost and delete orphaned libraries"
This reverts commit 3bd471b820.
2022-05-05 21:17:47 +00:00
Peter Müller
568215c84b Revert "boost: Fix rootfile entries that referred to python3.8 instead of 3.10"
This reverts commit 05a1fe1362.

For some reason, the rootfile changes introduced with this patch break
the build, as they do not seem to be present. Needs further
investigation.
2022-05-05 21:16:45 +00:00
Peter Müller
5ecf056d52 Drop libusb-compat
This was solely needed for NUT, which has now been updated, and does not
require an older libusb version to be carried around.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 16:47:44 +00:00
Adolf Belka
b2f707cb02 nut: Update to version 2.8.0
- Update from version 2.7.4 to 2.8.0
- 2.7.4 was released in 2016 and since then not a lot of progress was made with it but
   since the start of 2022 new work on nut has ocurred culminating in this release
- Update of rootfile
- Ran find-dependencies on the old libraries due to the sobump to confirm that nothing
   else than nut used them, which was the case.
- Changelog
	After a long and windy trip since the last official release v2.7.4 half a dozen
         years ago, we the community, contributors and maintainers are proud to announce
         at last the general availability of NUT v2.8.0!
	As always, the new release includes numerous new drivers, sub-drivers, protocols
         and bug-fixes, with many companies and individuals chipping in with contributions
         of code.Thanks to everyone involved in making this happen, inspiring the changes,
         and providing the open-source friendly infrastructure.
	This release also culminates a significant effort in improvements of NUT QA and
         CI, and as a result -- in codebase quality and portability across a decade or
         two of recent platforms, third-party tools and other dependencies. As a side
         effect, public API (in headers and libraries) has changed a bit, hence a new
         semantic "minor" number is claimed for this major body of work.
	During this time, the https://networkupstools.org/ web site has changed to a
         rolling-release model to serve current information to match the evolving
         codebase. There are now special Sub-sites for historic releases to keep
         documentation snapshots relevant for users of packages which are typically based
         on official NUT releases.
	We recognize that NUT is an important piece of infrastructure which gets built
         into all sorts of devices, projects and operating systems -- some of which the
         team never heard of until they pop up in a question, and others we haven't heard
         of for years -- so we take a seriously omnivorous stance towards covering many
         versions and implementations of compiler suites, C/C++ revisions, make programs,
         shell and other scripted language interpreters, OSes and CPUs, and other similar
         variables tamed with our new NUT CI farm test matrix dynamically driven by
         currently registered build agents and their declared capabilities.
	Sections in the NEWS and UPGRADING files about changes since last release are
         several pages long, so would not all be repeated here. A few important
         highlights for distribution packagers and custom builders follow, however:
	    NUT now supports more i2c and modbus devices, as well as libusb-1.0 support
             as an alternative to earlier libusb-0.1 (so new dependency-based categories
             of packages for drivers may be due);
	    NUT Python modules and scripts (e.g. NUT-Monitor variants) should work with
             python-2.7 and with python-3.x, so covering historic distro releases as
             well as new ones (and so your distro can deliver one or both, probably in
             several packages with different dependencies in the latter case);
	    NUT provides revised reference systemd and SMF service unit definitions,
             including support of drivers wrapped into individual service instances with
             varying dependencies based on different media required (networked stack, USB
             stack, etc.), and many daemons include -F option for running "in foreground"
             to avoid extra forking after one already done by a service framework - you
             may want to use those in your packaged deliverables;
	    NUT newly provides the "nut-driver-enumerator" script and service, which
             allows it to follow edition of ups.conf and dynamically define+(re)start and
             stop+undefine service instances for drivers - there are several ways it can
             be integrated for different use-cases;
	    There are several new configuration keywords and CLI options - so while new
             NUT builds should work with old configs and scripts, the opposite is not
             necessarily true (old binaries may reject configurations taking advantage
             of new features);
	    There are several new protocol keywords - but old and new NUT daemons (data
             server and clients) should be able to communicate both ways;
	    It is assumed that API/ABI changes may require third-party NUT clients
             (library consumers of libnutclient, libupsclient, libnutscan... -- their
             version info was bumped accordingly) to get rebuilt, in order to work with
             the new NUT release in a stable fashion;
	    The dummy-ups driver used in automated testing now processes *.dev filename
             patterns once and does not loop, like it still does for *.seq and other
             files (by default);
	    USB code is now more strict about logical minimum/maximum ranges for data
             reported from devices, and some devices were already found to make mistakes
             - so there is also a mechanism for turning a blind eye to known issues and
             fix-up such report descriptors to produce intended sane values;
	    New documentation page docs/config-prereqs.txt highlights packaged
             dependencies installable on a large range of platforms to build as much of
             NUT as possible (incidentally, ones NUT CI farm uses to test every iteration);
	    Finally, we hope that NUT codebase might be able to cater for everyone "out
             of the box" (it also simplifies local builds from GitHub sources on any
             systems, for troubleshooting and checking pre-release enhancements): if you
             as a packager have to apply patches for your distribution, give it a thought
             -- whether they address a common issue best solved upstream once and behave
             similarly for everyone (and conversely, if your platform can do with
             existing solutions already tracked in the NUT version du-jour). PRs welcome!
             Or at least Wiki entries to list all the distro efforts for cross-pollination

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 16:44:38 +00:00
Peter Müller
5b1299f717 oinkmaster: Delete remnants
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 16:22:51 +00:00
Peter Müller
6872503574 Core Update 168: Ship and apply IDSv4 changes
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 16:21:23 +00:00
Peter Müller
4d4f5df0c8 Merge branch 'temp-stevee-idsv4' into next 2022-05-05 16:07:41 +00:00
Peter Müller
e47f7c8295 Core Update 168: Ship freetype
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 15:31:16 +00:00
Adolf Belka
c78f6e33f8 freetype: Update to version 2.12.1
- Update from version 2.11.1 to 2.12.1
- Update of rootfile
- Changelog
     CHANGES BETWEEN 2.12.0 and 2.12.1
	  I. IMPORTANT BUG FIXES
	  - Loading CFF fonts sometimes made FreeType crash (bug introduced in
	    version 2.12.0)
	  - Loading  a fully  hinted  TrueType glyph  a  second time  (without
	    caching) sometimes yielded different rendering results if TrueType
	    hinting was active (bug introduced in version 2.12.0).
	  - The generation of the pkg-config file `freetype2.pc` was broken if
	    the build was done with cmake (bug introduced in version 2.12.0).
	  II. MISCELLANEOUS
	  - New option `--with-librsvg` for  the `configure` script for better
	    FreeType demo support.
	  - The  meson  build  no  longer enforces  both  static  and  dynamic
	    versions of the library by default.
	  - The internal  zlib library was  updated to version  1.2.12.  Note,
	    however, that  FreeType is *not* affected  by CVE-2018-25032 since
	    it only does decompression.
     CHANGES BETWEEN 2.11.1 and 2.12.0
	  I. IMPORTANT CHANGES
	  - FreeType  now   handles  OT-SVG  fonts,  to   be  controlled  with
	    `FT_CONFIG_OPTION_SVG`  configuration macro.   By default,  it can
	    only load the 'SVG ' table of an OpenType font.  However, by using
	    the `svg-hooks` property of the new 'ot-svg' module it is possible
	    to register an  external SVG rendering engine.   The FreeType demo
	    programs  have been  set  up  to use  'librsvg'  as the  rendering
	    library.
	    This work was Moazin Khatti's GSoC 2019 project.
	  II. MISCELLANEOUS
	  - The handling of fonts with an 'sbix' table has been improved.
	    - Corrected bitmap offsets.
	    - A  new tag  `FT_PARAM_TAG_IGNORE_SBIX` for  `FT_Open_Face` makes
	      FreeType ignore an 'sbix' table in a font, allowing applications
	      to access the font's outline glyphs.
	    - `FT_FACE_FLAG_SBIX`  and   `FT_FACE_FLAG_SBIX_OVERLAY`  together
	      with their  corresponding preprocessor macros  `FT_HAS_SBIX` and
	      `FT_HAS_SBIX_OVERLAY` enable applications to treat 'sbix' tables
	      as described in the OpenType specification.
	  - The internal 'zlib'  code has been updated to be  in sync with the
	    current 'zlib' version (1.2.11).
	  - The  previously internal  load  flag  `FT_LOAD_SBITS_ONLY` is  now
	    public.
	  - Some  minor improvements  of the  building systems,  in particular
	    handling of the 'zlib' library (internal vs. external).
	  - Support for non-desktop Universal Windows Platform.
	  - Various other minor bug and documentation fixes.
	  - The `ftdump` demo  program shows more information  for Type1 fonts
	    if option `-n` is given.
	  - `ftgrid` can now display embedded bitmap strikes.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 15:31:03 +00:00
Adolf Belka
6f3da00c53 sdl2: Update to version 2.0.22
- Update from version 2.0.20 to 2.0.22
- Update of rootfile
- Changelog
   2.0.22:
     General:
	* Added SDL_RenderGetWindow() to get the window associated with a renderer
	* Added floating point rectangle functions:
	    * SDL_PointInFRect()
	    * SDL_FRectEmpty()
	    * SDL_FRectEquals()
	    * SDL_FRectEqualsEpsilon()
	    * SDL_HasIntersectionF()
	    * SDL_IntersectFRect()
	    * SDL_UnionFRect()
	    * SDL_EncloseFPoints()
	    * SDL_IntersectFRectAndLine()
	* Added SDL_IsTextInputShown() which returns whether the IME window is currently
          shown
	* Added SDL_ClearComposition() to dismiss the composition window without disabling
          IME input
	* Added SDL_TEXTEDITING_EXT event for handling long composition text, and a hint
          SDL_HINT_IME_SUPPORT_EXTENDED_TEXT to enable it
	* Added the hint SDL_HINT_MOUSE_RELATIVE_MODE_CENTER to control whether the mouse
          should be constrained to the whole window or the center of the window when
          relative mode is enabled
	* The mouse is now automatically captured when mouse buttons are pressed, and the
          hint SDL_HINT_MOUSE_AUTO_CAPTURE allows you to control this behavior
	* Added the hint SDL_HINT_VIDEO_FOREIGN_WINDOW_OPENGL to let SDL know that a
          foreign window will be used with OpenGL
	* Added the hint SDL_HINT_VIDEO_FOREIGN_WINDOW_VULKAN to let SDL know that a
          foreign window will be used with Vulkan
	* Added the hint SDL_HINT_QUIT_ON_LAST_WINDOW_CLOSE to specify whether an
          SDL_QUIT event will be delivered when the last application window is closed
	* Added the hint SDL_HINT_JOYSTICK_ROG_CHAKRAM to control whether ROG Chakram
          mice show up as joysticks
     Windows:
	* Added support for SDL_BLENDOPERATION_MINIMUM and SDL_BLENDOPERATION_MAXIMUM to
          the D3D9 renderer
     Linux:
	* Compiling with Wayland support requires libwayland-client version 1.18.0 or later
	* Added the hint SDL_HINT_X11_WINDOW_TYPE to specify the _NET_WM_WINDOW_TYPE of
          SDL windows
	* Added the hint SDL_HINT_VIDEO_WAYLAND_PREFER_LIBDECOR to allow using libdecor
          with compositors that support xdg-decoration
     Android:
	* Added SDL_AndroidSendMessage() to send a custom command to the SDL java activity

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 15:30:53 +00:00
Adolf Belka
401a2f3db0 hplip: Update to version 3.22.4
- Update from version 3.22.2 to 3.22.4
- Update of rootfile
- Changelog
   HPLIP 3.22.4 - This release has the following changes:
     Added support for following new Distro's:
	Manjaro 21.2
     Added support for the following new Printers:
	HP LaserJet Pro 4001ne
	HP LaserJet Pro 4001n
	HP LaserJet Pro 4001dne
	HP LaserJet Pro 4001dn
	HP LaserJet Pro 4001dwe
	HP LaserJet Pro 4001dw
	HP LaserJet Pro 4001d
	HP LaserJet Pro 4001de
	HP LaserJet Pro 4002ne
	HP LaserJet Pro 4002n
	HP LaserJet Pro 4002dne
	HP LaserJet Pro 4002dn
	HP LaserJet Pro 4002dwe
	HP LaserJet Pro 4002dw
	HP LaserJet Pro 4002d
	HP LaserJet Pro 4002de
	HP LaserJet Pro 4003dn
	HP LaserJet Pro 4003dw
	HP LaserJet Pro 4003n
	HP LaserJet Pro 4003d
	HP LaserJet Pro 4004d
	HP LaserJet Pro 4004dn
	HP LaserJet Pro 4004dw
	HP LaserJet Pro MFP 4101dwe
	HP LaserJet Pro MFP 4101dw
	HP LaserJet Pro MFP 4101fdn
	HP LaserJet Pro MFP 4101fdne
	HP LaserJet Pro MFP 4101fdw
	HP LaserJet Pro MFP 4101fdwe
	HP LaserJet Pro MFP 4102dwe
	HP LaserJet Pro MFP 4102dw
	HP LaserJet Pro MFP 4102fdn
	HP LaserJet Pro MFP 4102fdw
	HP LaserJet Pro MFP 4102fdwe
	HP LaserJet Pro MFP 4102fdne
	HP LaserJet Pro MFP 4102fnw
	HP LaserJet Pro MFP 4102fnwe
	HP LaserJet Pro MFP 4103dw
	HP LaserJet Pro MFP 4103dn
	HP LaserJet Pro MFP 4103fdn
	HP LaserJet Pro MFP 4103fdw
	HP LaserJet Pro MFP 4104dw
	HP LaserJet Pro MFP 4104fdw
	HP LaserJet Pro MFP 4104fdn
	HP ScanJet Pro 3600 f1
	HP ScanJet Pro N4600 fnw1
	HP ScanJet Pro 2600 f1
	HP ScanJet Enterprise Flow N6600 fnw1
   HPLIP 3.22.2 - This release has the following changes:
     Added support for following new Distro's:
	Elementary OS 6.1
	RHEL 8.5
	Linux Mint 20.3
     Added support for the following new Printers:
	HP LaserJet Tank MFP 1602a
	HP LaserJet Tank MFP 1602w
	HP LaserJet Tank MFP 1604w
	HP LaserJet Tank MFP 2602dn
	HP LaserJet Tank MFP 2602sdn
	HP LaserJet Tank MFP 2602sdw
	HP LaserJet Tank MFP 2602dw
	HP LaserJet Tank MFP 2604dw
	HP LaserJet Tank MFP 2604sdw
	HP LaserJet Tank MFP 2603dw
	HP LaserJet Tank MFP 2603sdw
	HP LaserJet Tank MFP 2605sdw
	HP LaserJet Tank MFP 2606dn
	HP LaserJet Tank MFP 2606sdn
	HP LaserJet Tank MFP 2606sdw
	HP LaserJet Tank MFP 2606dw
	HP LaserJet Tank MFP 2606dc
	HP LaserJet Tank MFP 1005
	HP LaserJet Tank MFP 1005w
	HP LaserJet Tank MFP 1005nw
	HP LaserJet Tank 1502a
	HP LaserJet Tank 1502w
	HP LaserJet Tank 1504w
	HP LaserJet Tank 2502dw
	HP LaserJet Tank 2502dn
	HP LaserJet Tank 2504dw
	HP LaserJet Tank 2503dw
	HP LaserJet Tank 2506dw
	HP LaserJet Tank 2506d
	HP LaserJet Tank 2506dn
	HP LaserJet Tank 1020
	HP LaserJet Tank 1020w
	HP LaserJet Tank 1020nw

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 15:30:50 +00:00
Peter Müller
3bd471b820 Core Update 168: Ship boost and delete orphaned libraries
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 14:23:30 +00:00
Adolf Belka
05a1fe1362 boost: Fix rootfile entries that referred to python3.8 instead of 3.10
- In Jan 2022 I updated python from 3.8 to 3.10 but I missed that boost had rootfile
   entries with python38 in it.
- Running a build just now for another package it got flagged up that the rootfile for
   boost had been changed and the logfile now had the entries with python310 instead of
   python38
- Not clear why it only flagged this up now but this patch is to correct that error
- Running find-dependencies on both the pyton38 and python310 versions of the libraries
  flagged nothing as being linked to either, so probably lucky with this being missed
  first time around.
- Boost will need to be shipped with a Core Update

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 14:19:01 +00:00
Peter Müller
ce386d20ab Core Update 168: Ship OpenSSL
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 14:18:46 +00:00
Peter Müller
d97295c680 Merge branch 'master' into next 2022-05-05 14:18:13 +00:00
Arne Fitzenreiter
c22d834ca8 core167: generate uInit ramdisk images for u-boot
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-05-02 21:59:18 +00:00
Adolf Belka
66c022d887 fmt: Addition of new build time dependency for mpd
- lfs and rootfile created
- Added fmt to make.sh

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-05-02 20:22:22 +00:00
Peter Müller
2784c87b0e Core Update 168: Fix permissions of /etc/sudoers.d/
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-02 05:38:27 +00:00
Jon Murphy
64567c9423 pcengines-apu-firmware: Update to version 4.16.0.3
- Update from 4.15.0.1 to 4.16.0.3
- Update of rootfile
- Changelog
   v4.16.0.3 - Release date: 2022-04-21
      Rebased with official coreboot repository commit 2c4b426557
      See: https://github.com/pcengines/coreboot/compare/v4.16.0.2...v4.16.0.3
   v4.16.0.2 - Release date: 2022-03-29
      Rebased with official coreboot repository commit 66f99f7fa7
      See: https://github.com/pcengines/coreboot/compare/v4.16.0.1...v4.16.0.2
   v4.16.0.1 - Release date: 2022-03-08
      Rebased with official coreboot repository commit b4ba289fa5
      Disabled loglevel prefixes introduced in coreboot 4.16
      Disabled ANSI escape sequences introduced in coreboot 4.16
      Fixed AMD PSP CCP as entropy source
   v4.15.0.3 - Release date: 2022-02-16
      Rebased with official coreboot repository commit 36425312ee
      Added checking hardware matrix before regression tests
      Fixed the hard disk not visible in the Seabios Boot Menu
   v4.15.0.2 - Release date: 2022-01-11
      rebased with official coreboot repository commit 3990da0b
      disabled SMM
      enabled parallel AP initialization for apu2-6 for faster boot time

Signed-off-by: Jon Murphy <jon.murphy@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-02 05:36:16 +00:00
Peter Müller
d4afd45e11 Core Update 168: Ship and apply sysctl changes
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-02 05:30:08 +00:00
Peter Müller
1af975dceb sysctl: Use strict Reverse Path Filtering
The strict mode, as specified in RFC 3704, section 2.2, causes packets
to be dropped by the kernel if they arrive with a source IP address that
is not expected on the interface they arrived in. This prevents internal
spoofing attacks, and is considered best practice among the industry.

After a discussion with Michael, we reached the conclusion that
permitting users to configure the operating mode of RPF in IPFire causes
more harm than good. The scenarios where strict RPF is not usable are
negligible, and the vast majority of IPFire's userbase won't even
notice a difference.

This supersedes <495b4ca2-5a4b-2ffa-8306-38f152889582@ipfire.org>.

Suggested-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-05-02 05:28:52 +00:00
Adolf Belka
53736cfe67 man-pages: Update to version 5.13
- Update from version 2.34 (2006) to 5.13 (2021)
- Update of rootfile
- Changelog is too long to include here (~50000 lines)
   Details for version 5.13 can be found in the file Changes in the source tarball
   Details for version back to 2.34 can be found in  the file Changes.old in the
    source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-01 08:43:14 +00:00
Adolf Belka
908a25c644 libpipeline: Addition as build dependency for man
- Created lfs and rootfile
- Added entry into make.sh

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-01 08:43:09 +00:00
Adolf Belka
f5b9dcd1cc man: Update to version 2.10.2
- Update from version 2.4.3 (2005) to 2.10.2 (2022)
- Update of rootfile
- Addition of libpipeline as a build dependency - separate patch for that.
- Changelog is too long to include here (~14000 lines)
   Details back to 2013 can be found in the file ChangeLog in the source tarball
   Details from 2013 back to version 2.4.3 can be found in the file ChangeLog-2013 in the
    source tarball
   90 bug fixes listed in ChangeLog
   128 bug fixes listed in Changelog-2013 back to the version after 2.4.3

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-01 08:43:05 +00:00
Peter Müller
eecf8445e2 Core Update 168: Ship iana-etc
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-01 08:36:10 +00:00
Peter Müller
0f90707416 Core Update 168: Ship curl
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-01 08:35:18 +00:00
Adolf Belka
f61ced49e9 curl: Update to version 7.83.0
- Update from 7.82.0 to 7.83.0
- Update of rootfile
- Changelog
   7.83.0
     Changes:
	 o curl: add %header{name} experimental support in -w handling
	 o curl: add %{header_json} experimental support in -w handling
	 o curl: add --no-clobber [28]
	 o curl: add --remove-on-error [11]
	 o header api: add curl_easy_header and curl_easy_nextheader [56]
	 o msh3: add support for QUIC and HTTP/3 using msh3 [84]
     Bugfixes:
	 o appveyor: add Cygwin build [77]
	 o appveyor: only add MSYS2 to PATH where required [78]
	 o BearSSL: add CURLOPT_SSL_CIPHER_LIST support [27]
	 o BearSSL: add CURLOPT_SSL_CTX_FUNCTION support [26]
	 o BINDINGS.md: add Hollywood binding [34]
	 o CI: Do not use buildconf. Instead, just use: autoreconf -fi [42]
	 o CI: install Python package impacket to run SMB test 1451 [5]
	 o configure.ac: move -pthread CFLAGS setting back where it used to be [14]
	 o configure: bump the copyright year range int the generated output
	 o conncache: include the zone id in the "bundle" hashkey [112]
	 o connecache: remove duplicate connc->closure_handle check [90]
	 o connect: make Curl_getconnectinfo work with conn cache from share handle [22]
	 o connect: use TCP_KEEPALIVE only if TCP_KEEPIDLE is not defined [6]
	 o cookie.d: clarify when cookies are sent
	 o cookies: improve errorhandling for reading cookiefile [123]
	 o curl/system.h: update ifdef condition for MCST-LCC compiler [4]
	 o curl: error out if -T and -d are used for the same URL [99]
	 o curl: error out when options need features not present in libcurl [18]
	 o curl: escape '?' in generated --libcurl code [117]
	 o curl: fix segmentation fault for empty output file names. [60]
	 o curl_easy_header: fix typos in documentation [74]
	 o CURLINFO_PRIMARY_PORT.3: clarify which port this is [126]
	 o CURLOPT*TLSAUTH.3: they only work with OpenSSL or GnuTLS [105]
	 o CURLOPT_DISALLOW_USERNAME_IN_URL.3: use uppercase URL
	 o CURLOPT_PREQUOTE.3: only works for FTP file transfers, not dirs [79]
	 o CURLOPT_PROGRESSFUNCTION.3: fix typo in example [63]
	 o CURLOPT_UNRESTRICTED_AUTH.3: extended explanation [127]
	 o CURLSHOPT_UNLOCKFUNC.3: fix the callback prototype [9]
	 o docs/HYPER.md: updated to reflect current hyper build needs
	 o docs/opts: Mention Schannel client cert type is P12 [50]
	 o docs: Fix missing semicolon in example code [102]
	 o docs: lots of minor language polish [51]
	 o English: use American spelling consistently [95]
	 o fail.d: tweak the description [101]
	 o firefox-db2pem.sh: make the shell script safer [47]
	 o ftp: fix error message for partial file upload [61]
	 o gen.pl: change wording for mutexed options [98]
	 o GHA: add openssl3 jobs moved over from zuul [88]
	 o GHA: build hyper with nightly rustc [7]
	 o GHA: move bearssl jobs over from zuul [85]
	 o gha: move the event-based test over from Zuul [59]
	 o gtls: fix build for disabled TLS-SRP [48]
	 o http2: handle DONE called for the paused stream [69]
	 o http2: RST the stream if we stop it on our own will [67]
	 o http: avoid auth/cookie on redirects same host diff port [110]
	 o http: close the stream (not connection) on time condition abort [68]
	 o http: reject header contents with nul bytes [41]
	 o http: return error on colon-less HTTP headers [31]
	 o http: streamclose "already downloaded" [57]
	 o hyper: fix status_line() return code [13]
	 o hyper: fix tests 580 and 581 for hyper [107]
	 o hyper: no h2c support [33]
	 o infof: consistent capitalization of warning messages [103]
	 o ipv4/6.d: clarify that they are about using IP addresses [3]
	 o json.d: fix typo (overriden -> overridden) [24]
	 o keepalive-time.d: It takes many probes to detect brokenness [29]
	 o lib/warnless.[ch]: only check for WIN32 and ignore _WIN32 [45]
	 o lib670: avoid double check result [71]
	 o lib: #ifdef on USE_HTTP2 better [65]
	 o lib: fix some misuse of curlx_convert_wchar_to_UTF8 [38]
	 o lib: remove exclamation marks [100]
	 o libssh2: compare sha256 strings case sensitively [114]
	 o libssh2: make the md5 comparison fail if wrong length [111]
	 o libssh: fix build with old libssh versions [12]
	 o libssh: fix double close [124]
	 o libssh: Improve fix for missing SSH_S_ stat macros [10]
	 o libssh: unstick SFTP transfers when done event-based [58]
	 o macos: set .plist version in autoconf [122]
	 o mbedtls: remove 'protocols' array from backend when ALPN is not used [66]
	 o mbedtls: remove server_fd from backend [91]
	 o mk-ca-bundle.pl: Use stricter logic to process the certificates [39]
	 o mk-ca-bundle.vbs: delete this script in favor of mk-ca-bundle.pl [8]
	 o mlc_config.json: add file to ignore known troublesome URLs [35]
	 o mqtt: better handling of TCP disconnect mid-message [55]
	 o ngtcp2: add client certificate authentication for OpenSSL [15]
	 o ngtcp2: avoid busy loop in low CWND situation [119]
	 o ngtcp2: deal with sub-millisecond timeout [116]
	 o ngtcp2: disconnect the QUIC connection proper [19]
	 o ngtcp2: enlarge H3_SEND_SIZE [82]
	 o ngtcp2: fix HTTP/3 upload stall and avoid busy loop [83]
	 o ngtcp2: fix memory leak [80]
	 o ngtcp2: fix QUIC_IDLE_TIMEOUT [94]
	 o ngtcp2: make curl 1ms faster [93]
	 o ngtcp2: remove remote_addr which is not used in a meaningful way [81]
	 o ngtcp2: update to work after recent ngtcp2 updates [62]
	 o ngtcp2: use token when detecting :status header field [92]
	 o nonblock: restore setsockopt method to curlx_nonblock [20]
	 o openssl: check SSL_get_peer_cert_chain return value [1]
	 o openssl: enable CURLOPT_SSL_EC_CURVES with BoringSSL [23]
	 o openssl: fix CN check error code [21]
	 o options: remove mistaken space before paren in prototype
	 o perl: removed a double semicolon at end of line [64]
	 o pop3/smtp: return *WEIRD_SERVER_REPLY when not understood [43]
	 o projects/README: converted to markdown [76]
	 o projects: Update VC version names for VS2017, VS2022 [52]
	 o rtsp: don't let CSeq error override earlier errors [37]
	 o runtests: add 'bearssl' as testable feature [87]
	 o runtests: make 'oldlibssh' be before 0.9.4 [2]
	 o schannel: remove dead code that will never run [89]
	 o scripts/copyright.pl: ignore the new mlc_config.json file
	 o scripts: move three scripts from lib/ to scripts/ [44]
	 o test1135: sync with recent API updates [54]
	 o test1459: disable for oldlibssh [53]
	 o test375: fix line endings on Windows [40]
	 o test386: Fix an incorrect test markup tag
	 o test718: edited slightly to return better HTTP [32]
	 o tests/server/util.h: align WIN32 condition with util.c [46]
	 o tests: refactor server/socksd.c to support --unix-socket [96]
	 o timediff.[ch]: add curlx helper functions for timeval conversions [86]
	 o tls: make mbedtls and NSS check for h2, not nghttp2 [70]
	 o tool and tests: force flush of all buffers at end of program [17]
	 o tool_cb_hdr: Turn the Location: into a terminal hyperlink [30]
	 o tool_getparam: error out on missing -K file [115]
	 o tool_listhelp.c: uppercase URL
	 o tool_operate: fix a scan-build warning [16]
	 o tool_paramhlp: use feof(3) to identify EOF correctly when using fread(3) [97]
	 o transfer: redirects to other protocols or ports clear auth [109]
	 o unit1620: call global_init before calling Curl_open [125]
	 o url: check sasl additional parameters for connection reuse. [113]
	 o vtls: provide a unified APLN-disagree string for all backends [75]
	 o vtls: use a backend standard message for "ALPN: offers %s" [73]
	 o vtls: use a generic "ALPN, server accepted" message [72]
	 o winbuild/README.md: fixup dead link [36]
	 o winbuild: Add a Visual Studio example to the README [49]
	 o wolfssl: fix compiler error without IPv6 [25]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-01 08:35:05 +00:00
Adolf Belka
56b9ee7e7e libseccomp: Update to version 2.5.4
- Update from version 2.5.3 to 2.5.4
- Update of rootfile
- Changelog
   Version 2.5.4 - April 21, 2022
	- Update the syscall table for Linux v5.17
	- Fix minor issues with binary tree testing and with empty binary trees
	- Minor documentation improvements including retiring the mailing list

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-30 09:11:18 +00:00
Peter Müller
b314ad9e78 Core Update 168: Ship libaio
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-30 08:56:38 +00:00