Commit Graph

16508 Commits

Author SHA1 Message Date
Michael Tremer
7704b31320 core158: Ship vnstat
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-25 09:46:10 +00:00
Matthias Fischer
26a9784751 vnstat 2.7: Adjusted 'traffic.cgi' to display 5-minute graphs
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-25 09:44:53 +00:00
Matthias Fischer
bc3df8befd vnstat: Update to 2.7
For details see:

https://humdi[dot]net/vnstat/CHANGES

"2.7 / 16-May-2021

 - Fixed
   - Possibility of segmentation fault with image list output when database
     existed but no data was available
   - ./configure output could show invalid install paths with some parameter
     combinations (pull request by Severin Glöckner)
   - Columns in text hours graph output could get misaligned if the selected
     system locale used a UTF-8 sequence for the thousands separator instead
     of a single character
 - New
   - Add -5g / --fivegraph options to image output with sizing related
     parameters for the output of a 5 minute resolution bar graph
   - Add configuration option SummaryGraph and optional parameter for
     --hsummary and --vsummary for selecting which graph is shown next to
     the summary data in the horizontal and vertical summary image outputs
   - Add --large / --small options and configuration option LargeFonts for
     controlling the image output font size
   - Add --scale and configuration option ImageScale for scaling the image
     output to a given percent
   - Add configuration option LineSpacingAdjustment for adjusting the line
     spacing of list format image outputs
   - Add bar visualizations for traffic estimations in image output
   - Allow writing image output to a filename starting with -
   - Add --initdb to daemon for creating a new empty database without having
     the daemon process staying running, doesn't discard data if a database
     already exists
   - Add configuration option BarColumnShowsRate for having the bar column in
     image list outputs be scaled according to the average rate column values
     when those values are visible, disabled by default
   - Add --dbiflist for getting a list of interfaces in the database, both
     --iflist and --dbiflist also get alternative more parseable outputs
   - Add configuration option for large font output and make 5 minute
     resolution graph visible in vnstat.cgi"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-25 09:44:40 +00:00
Michael Tremer
3d79695465 core158: Ship backup.pl script
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-25 09:44:20 +00:00
Adolf Belka
e5f3e0397c backup.pl: Fix #12626 backup/include.user entries will not override backup/exclude
- Current situation is that any restrictions in the exclude file will not
   be overwritten by the include.user file
- For example the global exclude file has *.tmp preventing any tmp files
   being backed up from the globally included IPFire files
   If a user has some specific tmp files they want to backup and include
   them in the include.user file they will not override the global
   exclude file.
- This fix does the backup of the global and user backups as two separate
   events and then appends them. This means that any tmp files in the
   include.user file will be backed up.
- The backups are created as a global tar file and then have the user
   tar file appended and then the combined file gzipped and given the .ipf
   suffix. This has to be done this was as gzipped files can not be
   appended to each other whereas tar files can.

Fixes: 12626
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-25 09:43:57 +00:00
Michael Tremer
7849bdd2af core158: Ship ca-certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-21 08:53:16 +00:00
Peter Müller
fd61df2a86 update ca-certificates CA bundle
Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-21 08:52:54 +00:00
Peter Müller
0bbf388799 Clean up various files left from dropped add-ons and packages
Since I only ran "find . -type f -name ...", I missed mostly directories
containing configuration and initscripts of recently dropped add-ons and
packages.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-21 08:52:45 +00:00
Adolf Belka
495cf3e0b4 python-pyparsing: Update to 2.4.7 and migrate to python3
- Update from 2.2.0 to 2.4.7
- Migrate from python2 to python3
- Move the rootfile from common to packages as pyparsing is an addon

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 10:05:09 +00:00
Michael Tremer
609c27b2fa elinks: Bump package version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 10:02:43 +00:00
Peter Müller
2feefae21a config/elinks/elinks.conf does not have to be executable
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 10:01:50 +00:00
Adolf Belka
398669f7c9 python3-setuptools: Create a python3 version of python-setuptools
- python3-setuptools works with python3-daemon but not with
   python-m2crypto. m2crypto has to stay with python2 because crda
   will not find the python3 version of m2crypto.
- python-m2crypto only works with python-setuptools so both the
   python2 and python3 versions of setuptools need to stay in place.
- Therefore this patch only creates python3-setuptools, it does not
   remove python-setuptools

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:48:22 +00:00
Michael Tremer
e689de3365 core158: Ship ethtool
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:47:57 +00:00
Adolf Belka
19465bc094 ethtool: Update to 5.12
- Update from 3.16 (2014) to 5.12 (2021)
- Update of rootfile
- Changelog is too large to include here. Changelog details are available
   at https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/log/

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:47:41 +00:00
Michael Tremer
530e1e7637 core158: Ship qpdf
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:47:26 +00:00
Adolf Belka
e4b8c09391 qpdf: Update to 10.3.2
- Update from 10.3.0 to 10.3.2
- Update rootfiles
- Changelog
   * 10.3.2: release
     * Fix problem that caused the generated manual from being included
       in the Windows distributions. Fixes #521.
     * Fix 11-year-old bug of leaving unreferenced objects in preserved
       object streams. Fixes #520.
     * Portability fix: use tm_gmtoff rather than global timezone
       variable if available to get timezone offset. This fixes
       compilation on BSD and also results in a daylight saving
       time-aware offset for Linux or other GNU systems. Fixes #515.
     * When adding a page, if the page already exists, make a shallow
       copy of the page instead of throwing an exception. This makes the
       behavior of adding a page from the library consistent with what
       the CLI does and also with what the library does if it starts with
       a file that already has a duplicated page. Note that this means
       that, in some cases, the page you pass to addPage or addPageAt
       (either in QPDF or QPDFPageDocumentHelper) will not be the same
       object that actually gets added. (This has actually always been
       the case.) That means that, if you are going to do subsequent
       modification on the page, you should retrieve it again.
   * 10.3.1: release
     * Bug fix: allow /DR to be direct in /AcroForm

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:47:11 +00:00
Michael Tremer
e6681e3d44 core158: Ship perl-CGI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:47:00 +00:00
Adolf Belka
6cedf68893 perl-CGI: Update to 4.52
- Update from 4.44 to 4.52
- Update of rootfile not needed
- Changelog
   4.52 2021-05-04
     [ FIX ]
     - sort hash keys for deterministic behaviour (GH #245, GH #246)
   4.51 2020-10-01
     [ DOCUMENTATION ]
     - Document support for SameSite=None cookies in CGI::Cookie (GH #244)
   4.50 2020-06-22
     [ ENHANCEMENT ]
     - Add APPEND_QUERY_STRING option (GH #243, thanks to stevenh)
   4.49 2020-06-08
     [ FIX ]
     - remove deprecation warning as no longer in core (GH #221)
   4.48 2020-06-02
     [ FIX ]
     - fix CGI::Cookie->bake() doesn't work with mod_perl redirects (GH #240)
     - thanks to sherrardb for the PR (GH #241)
   4.47 2020-05-01
     [ FIX / TESTING ]
     - fix typo in variable name (GH #239)
   4.46 2020-02-03
     [ DOCUMENTATION ]
     - Document support for SameSite=None cookies (GH #238)
   4.45 2019-06-03
     [ ENHANCEMENT ]
     - Add support for SameSite=None cookies (GH #237, thanks to Dur09)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:46:47 +00:00
Michael Tremer
f8cd37cb1c core158: Ship glib
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:46:36 +00:00
Adolf Belka
19c0bc43c0 glib: Update to 2.68.2
- Update from 2.68.1 to 2.68.2
- Update rootfiles
- Changelog
   Overview of changes in GLib 2.68.2
    * Fix building third-party projects against GLib on CentOS 7 (work by
      Ignacio Casal Quinteiro) (#2387)
    * Bugs fixed:
      - #2387 json-glib does not build with glib 2.68.1
      - !2060 gmacros: check that __cplusplus or _MSC_VER is defined
      - !2068 gmacros: missing check if __STDC_VERSION__ is defined
      - !2079 Backport !2078 “gthreadedresolver: don't ignore flags in lookup_by_name_with_flags” to glib-2-68
    * Translation updates:
      - Nepali
      - Serbian

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:46:18 +00:00
Adolf Belka
571de610a5 flac: Update to 1.3.3
- Update from 1.3.2 to 1.3.3
- Update rootfiles
- Changelog
    General:
        Fix CPU detection (Janne Hyvärinen).
        Switch from unsigned types to uint32_t (erikd).
        CppCheck fixes (erikd).
        Improve SIMD decoding of 24 bit files (lvqcl).
        POWER* amnd POWER9 improvements (Anton Blanchard).
        More tests.
    FLAC format:
        (none)
    Ogg FLAC format:
        (none)
    flac:
        When converting to WAV, use WAVEFORMATEXTENSIBLE when bits per
         second is not 8 or 16 (erikd).
        Fix --output-prefix with input-files in sub-directories (orbea).
    metaflac:
        (none)
    plugins:
        (none)
    build system:
        Cmake support (Vitaliy Kirsanov, evpobr).
        Visual Studio updates (Janne Hyvärinen).
        Fix for MSVC when UNICODE is enabled (lvqcl).
        Fix for OpenBSD/i386 (Christian Weisgerber).
    documentation:
        (none)
    libraries:
        (none).
    Interface changes:
        libFLAC:
            (none)
        libFLAC++:
            (none)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:46:08 +00:00
Michael Tremer
79d6544eb8 core158: Ship dhcp.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:45:43 +00:00
Adolf Belka
6fcd779c05 dhcp.cgi: Bug 10400 - Add Additional DHCP Options - change default
- Make the default that Additional DHCP options Enabled checkbox is
   checked when entering a new option.
- For existing options the Enabled checkbox status is honoured.

Fixes: #10400
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:45:20 +00:00
Peter Müller
6622925b36 Delete UPnP initscript for ARM64 as well
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:45:14 +00:00
Peter Müller
59e476630e mpd: build without UPnP support
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:45:09 +00:00
Michael Tremer
fdc5bfef07 core158: Ship updated firewall initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:44:56 +00:00
Michael Tremer
f65e725e83 core158: Drop upnpd initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:43:30 +00:00
Peter Müller
9d0b7c1a78 Delete the remainings of libupnp and upnpd
These include rootfiles, firewall menue entries that have been
unmaintained for a long time, and firewall chains which were never used
in recent time.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:42:55 +00:00
Michael Tremer
b6bfdcc2cd core158: Uninstall libupnp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:41:39 +00:00
Peter Müller
06f03f5bbb Drop libupnp
This library has received no attention within the last three years. By
design, UPnP is a security risk on any firewall, and and outdated
version of a UPnP library definitely is.

This patch therefore drops libupnp completely.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:39:46 +00:00
Michael Tremer
a915cdd6c9 intltool: Move into the core system and don't ship any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:39:12 +00:00
Michael Tremer
cb69bf13ca Drop miniupnpd stuff from rootfiles and all systems
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:38:02 +00:00
Peter Müller
5f16813c8a miniupnpd: Delete files that would have become orphaned after deletion of miniupnpd add-on as well
This patch requires
https://patchwork.ipfire.org/project/ipfire/list/?series=2059 to be
applied in the first place.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:32:33 +00:00
Peter Müller
014296524b make.sh: Do no longer build fbset and sendEmail
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:32:22 +00:00
Peter Müller
28cffbc51c Drop sendEmail add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:32:10 +00:00
Peter Müller
937748f96d Drop fbset
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Please note this patch does not remove fbset on existing installations,
that has to be done via the corresponding upgrade script.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:32:03 +00:00
Peter Müller
a5ee98176c Drop miniupnpd add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Frankly, if you need or use UPnP, you probably do not even need to _think_
about running a firewall...

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:31:43 +00:00
Peter Müller
e55b268a4b Drop SANE add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:31:18 +00:00
Peter Müller
a0dbbb73a9 Zut alors, delete motion initiscript as well :-/
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:31:12 +00:00
Peter Müller
86f5f42f6b Drop orphaned dependency "libsrtp"
This was solely needed by Asterisk and is no longer used anymore.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:31:03 +00:00
Peter Müller
a326c9a623 Drop Asterisk add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:30:48 +00:00
Peter Müller
04bd81530a Drop orphaned dependency add-on libmicrohttpd
This was solely needed by "motion". It can be safely removed now.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:30:21 +00:00
Peter Müller
a7da7bcb07 Drop motion add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:30:05 +00:00
Adolf Belka
bb4d1624cb sarg: Update to 2.4.0
- Update from 2.3.11 to 2.4.0
- Update of rootfile not required
- Update of patches as the source code is different enough that the
   patches failed to work.
- Changelog has information on changes for version 2.4.0. Prior version
   information is for 2.3.3 from 2012. All intervening versions have no
   changelog information available.
   Version 2.4.0
    - Update translations.
    - Useragent report is produced if information is available.
    - Don't abort if DNS resolution is failing to resolve a host IP address.
    - xz compressed log files are supported.
    - Compressed redirector logs are now supported.
    - Filter converted and split logs using -t command line option.
    - Add many new buffer overflow checks.
    - Use random temporary directory name by default.
    - Many bug fixed.
    - Many new features added.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:29:22 +00:00
Michael Tremer
43f7b1d7d2 core158: Ship IPsec changes for iOS
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:28:38 +00:00
Michael Tremer
08fa1272d2 Revert "IPsec: Ensure that iOS VPNs are always connected"
This reverts commit 8ce6222a10.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:26:13 +00:00
Michael Tremer
616d3bf9ac Merge remote-tracking branch 'ms/ipsec-ios' into next 2021-05-20 09:25:05 +00:00
Michael Tremer
9ae65c8e08 fireinfo: Update to 2.2.0
This release ports fireinfo to Python 3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-18 13:52:11 +00:00
Michael Tremer
b4d83d1af3 Start Core Update 158
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-18 13:34:15 +00:00
Michael Tremer
d267131be3 Fix merge error in samba rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-18 12:51:59 +00:00