Commit Graph

7724 Commits

Author SHA1 Message Date
Peter Müller
74fe5c8673 libloc: Fix rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-13 11:32:48 +00:00
Peter Müller
9132bdd748 Core Update 167: Ship collectd initscript
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-13 09:24:15 +00:00
Michael Tremer
cad867506d c167: Ship vnstat
vnstat is linked against libgd which has had an SO bump and therefore
needs to be shipped again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-04-13 08:10:16 +00:00
Peter Müller
cad2ce78dd Core Update 167: Replace /etc/mtab by symlink to /proc/self/mounts
mount, as updated via util-linux, no longer writes /etc/mtab, causing
programs to rely on this file's content (such as the check_disk Nagios
plugin) to stop working.

/proc/self/mounts contains all the necessary information, so it is fine
to replace /etc/mtab by a symlink to it.

Fixes: #12843

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 14:10:08 +00:00
Peter Müller
2506def0a6 Core Update 167: Export the location database again and reload the firewall
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 14:05:04 +00:00
Peter Müller
e0da038fc9 Core Update 167: Ship libloc
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 12:53:29 +00:00
Peter Müller
0db4fbe1b5 libloc: Update to 0.9.13
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 12:53:03 +00:00
Peter Müller
423e2e7f92 Core Update 167: Ship accidentally deleted Perl library again
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 11:57:07 +00:00
Peter Müller
1e0314afdf Merge branch 'next' of ssh://people.ipfire.org/pub/git/ipfire-2.x into next 2022-04-12 11:56:18 +00:00
Peter Müller
c8d047f562 Core Update 167: Do not delete a file that should not have been deleted
My fault, again.

Fixes: #12841

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 11:54:27 +00:00
Arne Fitzenreiter
95229400b3 core167: add code needed for kernel update
remove the old kernel and reconfigure bootscripts for arm boards
and run user scripts to switch to a new kernel.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-04-12 11:35:20 +02:00
Peter Müller
f4dca7f1af Core Update 167: Ship xz
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-11 19:02:43 +00:00
Arne Fitzenreiter
f1b0673572 kernel: arm rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-04-10 09:42:16 +02:00
Peter Müller
83c8662be8 Core Update 167: Ship gzip
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-09 07:39:45 +00:00
Peter Müller
5a9b650759 Core Update 167: Ship backupiso script
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-08 16:05:29 +00:00
Peter Müller
6238a7098d Core Update 167: Apply local SSH changes to configuration file
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-08 16:01:03 +00:00
Peter Müller
490e86f403 Core Update 167: Update linker config before calling GPG
This avoids log messages like:
ldconfig: /lib/ld-linux-x86-64.so.2 is not a symbolic link

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-08 15:59:25 +00:00
Peter Müller
c9b5a4756f Core Update 167: Ship and apply sysctl changes
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-08 15:58:41 +00:00
Michael Tremer
855b46da2f core167: Ship coreutils
These have changed since they are now compiled with ACL/XATTR support

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-04-07 09:14:08 +00:00
Peter Müller
3f65e4996b kernel: Align rootfile again due to forgotten hardening patch
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-06 20:18:22 +00:00
Peter Müller
afb2d2a23d Core Update 167: Ship getrrdimage.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-06 17:16:59 +00:00
Peter Müller
df76e77cfb Core Update 167: Ship header.pl
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-06 17:16:15 +00:00
Peter Müller
af791343c7 Core Update 167: Ship sudo
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-06 17:15:02 +00:00
Peter Müller
e831404295 Core Update 167: Ship curl
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-06 17:14:14 +00:00
Adolf Belka
94e8598ff3 ghostscript: Update to version 9.56.1
- Update from 9.55.0 to 9.56.1
- Update of rootfile
- Changelog
   Version 9.56.0 (2022-02-22)
     Highlights in this release include:
	    New PDF Interpreter: This is an entirely new implementation written in C
             (rather than PostScript, as before). For a full discussion of this change
             and reasons for it see: Changes Coming to the PDF Interpreter.
	    In this (9.56.0) release, the new PDF interpreter is now ENABLED by default
             in Ghostscript, but the old PDF interpreter can be used as a fallback by
             specifying -dNEWPDF=false. We've provided this so users that encounter
             issues with the new interpreter can keep working while we iron out those
             issues, the option will not be available in the long term.
	    This also allows us to offer a new executable (gpdf, or gpdfwin??.exe on
             Windows) which is purely for PDF input. For this release, those new binaries
             are not included in the "install" make targets, nor in the Windows installers.
	    Calling Ghostscript via the GS API is now thread safe. The one limitation is
             that the X11 devices for Unix-like systems (x11, x11alpha, x11cmyk, x11cmyk2,
             x11cmyk4, x11cmyk8, x11gray2, x11gray4 and x11mono) cannot be made thread
             safe, due to their interaction with the X11 server, those devices have been
             modified to only allow one instance in an executable.
	    The PSD output device now writes ICC profiles to their output files, for
             improved color fidelity.
	    Our efforts in code hygiene and maintainability continue.
	    The usual round of bug fixes, compatibility changes, and incremental
             improvements.
     Included below are incompatible changes from recent releases (the specific release
      in question is listed in parentheses). We include these, for now, as we are aware
      that not everyone upgrades with every release.
	    (9.55.0) Changes to the device API. This will affect developers and
                      maintainers of Ghostscript devices. Firstly, and most importantly,
                      the way device-specific "procs" are specified has been rewritten
                      to make it (we think!) clearer and less confusing. See The
                      Interface between Ghostscript and Device Drivers and The Great
                      Device Rework Of 2021 for more details.
	    (9.55.0) The command line options -sGraphicsICCProfile=___,
                      -dGraphicsIntent=#, -dGraphicsBlackPt=#, -dGraphicsKPreserve=# have
                      been changed to -sVectorICCProfile=___, -dVectorIntent=#,
                      -dVectorBlackPt=#, -dVectorKPreserve=#.
	    (9.53.0) As of 9.53.0, we have (re-)introduced the patch level to the
                      version number, this helps facilitate a revised policy on handling
                      security-related issues.
	    Note for GSView Users: The patch level addition breaks GSView 5 (it is
             hardcoded to check for versions 704-999. It is possible, but not guaranteed
             that a GSView update might be forthcoming to resolve this.
	    (9.52) -dALLOWPSTRANSPARENCY: The transparency compositor (and related
                    features), whilst we are improving it, remains sensitive to being
                    driven correctly, and incorrect use can have unexpected/undefined
                    results. Hence, as part of improving security, we limited access to
                    these operators, originally using the -dSAFER feature. As we made
                    "SAFER" the default mode, that became unacceptable, hence the new
                    option -dALLOWPSTRANSPARENCY which enables access to the operators.
	    (9.50) There are a couple of subtle incompatibilities between the old and
                    new SAFER implementations. Firstly, as mentioned in the 9.50 release
                    notes, SAFER now leaves standard PostScript functionality unchanged
                    (except for the file access limitations). Secondly, the interaction
                    with save/restore operations has changed. See SAFER.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-06 17:13:51 +00:00
Peter Müller
70a5c36be5 Core Update 167: Ship iproute2
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-06 17:13:14 +00:00
Peter Müller
51fa79c613 Core Update 167: Ship collectd-/graphs-related changes
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-06 17:05:35 +00:00
Peter Müller
4fb7569811 linux: Update rootfile to reflect kernel hardening changes
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-05 08:42:00 +00:00
Peter Müller
1218b6a8b7 Core Update 167: Ship ddns
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-05 05:55:21 +00:00
Peter Müller
1b6f3fc548 Core Update 167: Ship smartmontools
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-04 20:17:14 +00:00
Peter Müller
be94980ab1 Core Update 167: Ship DHCP advoptions related files
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-04 20:10:23 +00:00
Peter Müller
6c8e6c0b8f Core Update 167: Ship unbound-dhcp-leases-bridge
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-04 20:08:41 +00:00
Peter Müller
d52a6280ec Revert "dvb-firmwares: Don't ship firmware that comes from linux-firmware"
This reverts commit 7ce3223dd8.

https://wiki.ipfire.org/devel/telco/2022-04-04
2022-04-04 20:06:31 +00:00
Peter Müller
9c3052d09d Revert "alsa: Do not ship compressed firmware again"
This reverts commit f0dc569d79.

https://wiki.ipfire.org/devel/telco/2022-04-04
2022-04-04 20:06:14 +00:00
Peter Müller
e121ee227e Core Update 167: Ship the Linux kernel
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-04 20:05:36 +00:00
Peter Müller
88a7b2d34b Core Update 167: Ship ca-certificates
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-04 19:58:25 +00:00
Peter Müller
1433ff8e18 Revert "Core Update 167: Ship qos.cgi"
This reverts commit dcb3c4aaac.

https://lists.ipfire.org/pipermail/development/2022-April/013014.html
2022-04-04 18:10:43 +00:00
Peter Müller
dcb3c4aaac Core Update 167: Ship qos.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-04 05:36:06 +00:00
Peter Müller
7ab7066f74 Core Update 167: Ship nano
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-04 05:35:41 +00:00
Peter Müller
c2058ff641 Core Update 167: Ship location-block.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-03 09:58:25 +00:00
Peter Müller
b7098581bd Core Update 167: Ship PCI and USB IDs
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-03 09:58:25 +00:00
Peter Müller
d95b4c94db Drop rfkill
It has been obsoleted by util-linux.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-02 07:42:59 +00:00
Peter Müller
c60f6b3847 Core Update 166: Drop orphaned convert-ovpn script
This script only appeared in conjunction with Core Update 75, released
January 2014. Although it is still being executed while restoring a
backup, it would only be effective if anyone tried to restore a backup
created before C75.

I don't think there is a realistic need to carry this script along any
further. In doubt, it might be better to start from scratch again rather
than trying to restore an 8 year old backup, expecting everything to be
peachy and vanilla with it.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-03-31 09:50:59 +00:00
Peter Müller
8a4780de64 Revert "linux-firmware: Compress firmware on disk"
This reverts commit 77e3829dc1.

For the time being, shipping this was found to be too difficult, since
we cannot get linux-firmware down to an acceptable size limit.
Compressing the firmware on installations would work, but takes about 4
minutes on an Intel Xenon CPU alone, hence it is an unacceptable
workload to do for IPFire installation running on weaker hardware.

Therefore, we do not proceed with this at the moment.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-03-31 09:33:53 +00:00
Peter Müller
d8d50f95f9 zlib: Update to 1.2.12
Full changelog, as retrieved from https://www.zlib.net/ChangeLog.txt :

Changes in 1.2.12 (27 Mar 2022)
- Cygwin does not have _wopen(), so do not create gzopen_w() there
- Permit a deflateParams() parameter change as soon as possible
- Limit hash table inserts after switch from stored deflate
- Fix bug when window full in deflate_stored()
- Fix CLEAR_HASH macro to be usable as a single statement
- Avoid a conversion error in gzseek when off_t type too small
- Have Makefile return non-zero error code on test failure
- Avoid some conversion warnings in gzread.c and gzwrite.c
- Update use of errno for newer Windows CE versions
- Small speedup to inflate [psumbera]
- Return an error if the gzputs string length can't fit in an int
- Add address checking in clang to -w option of configure
- Don't compute check value for raw inflate if asked to validate
- Handle case where inflateSync used when header never processed
- Avoid the use of ptrdiff_t
- Avoid an undefined behavior of memcpy() in gzappend()
- Avoid undefined behaviors of memcpy() in gz*printf()
- Avoid an undefined behavior of memcpy() in _tr_stored_block()
- Make the names in functions declarations identical to definitions
- Remove old assembler code in which bugs have manifested
- Fix deflateEnd() to not report an error at start of raw deflate
- Add legal disclaimer to README
- Emphasize the need to continue decompressing gzip members
- Correct the initialization requirements for deflateInit2()
- Fix a bug that can crash deflate on some input when using Z_FIXED
- Assure that the number of bits for deflatePrime() is valid
- Use a structure to make globals in enough.c evident
- Use a macro for the printf format of big_t in enough.c
- Clean up code style in enough.c, update version
- Use inline function instead of macro for index in enough.c
- Clarify that prefix codes are counted in enough.c
- Show all the codes for the maximum tables size in enough.c
- Add gznorm.c example, which normalizes gzip files
- Fix the zran.c example to work on a multiple-member gzip file
- Add tables for crc32_combine(), to speed it up by a factor of 200
- Add crc32_combine_gen() and crc32_combine_op() for fast combines
- Speed up software CRC-32 computation by a factor of 1.5 to 3
- Use atomic test and set, if available, for dynamic CRC tables
- Don't bother computing check value after successful inflateSync()
- Correct comment in crc32.c
- Add use of the ARMv8 crc32 instructions when requested
- Use ARM crc32 instructions if the ARM architecture has them
- Explicitly note that the 32-bit check values are 32 bits
- Avoid adding empty gzip member after gzflush with Z_FINISH
- Fix memory leak on error in gzlog.c
- Fix error in comment on the polynomial representation of a byte
- Clarify gz* function interfaces, referring to parameter names
- Change macro name in inflate.c to avoid collision in VxWorks
- Correct typo in blast.c
- Improve portability of contrib/minizip
- Fix indentation in minizip's zip.c
- Replace black/white with allow/block. (theresa-m)
- minizip warning fix if MAXU32 already defined. (gvollant)
- Fix unztell64() in minizip to work past 4GB. (Daniël Hörchner)
- Clean up minizip to reduce warnings for testing
- Add fallthrough comments for gcc
- Eliminate use of ULL constants
- Separate out address sanitizing from warnings in configure
- Remove destructive aspects of make distclean
- Check for cc masquerading as gcc or clang in configure
- Fix crc32.c to compile local functions only if used

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-03-31 09:29:38 +00:00
Peter Müller
f1f4250c14 Core Update 167: Ship network-hotplug-bridges udev script
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-03-31 09:28:42 +00:00
Peter Müller
ca4822a145 Core Update 167: Hardlink any identical firmware files on existing installations as well
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-03-31 09:27:12 +00:00
Peter Müller
7827c5fb9a Core Update 167: Delete dropped firmware files as well
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-03-31 09:22:40 +00:00
Peter Müller
1091a629ea Core Update 167: Add new Pakfire key after extracting the files
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-03-31 09:20:50 +00:00
Michael Tremer
13eaaa5657 core167: Ship util-linux
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-03-30 14:01:16 +00:00