Commit Graph

16989 Commits

Author SHA1 Message Date
Arne Fitzenreiter
89f7a4a096 core160: add logs.cgi/firewalllog.dat
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:23:07 +00:00
Stefan Schantl
ca1f4a07ab firewalllog.dat: Proper display protocol names.
In some cases iptables logs the protocol number instead of the name.
When accessing the logs via the WUI, this number has been displayed as used
protocol, which is very hard to read and understand.

This commit adds a new function to the general-functions.pl, which
generates a hash to translate the protocol number into the protocol
name.

Fixes #11282.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:21:16 +00:00
Adolf Belka
5c9faddc97 texinfo: Update to version 6.8
- Update from 6.7 to 6.8
- Update rootfile
- Changelog is too large to include here. Full details can be found in the
   ChangeLog file in the source tarball
   Following is the content of the NEWS file from the source tarball which highlights
    noteworthy changes, very tersely.
   6.8 (3 July 2021)
    * Language
      . new command @displaymath for formatting of mathematical notation
      . @example takes an argument to specify the language
      . mark these commands as deprecated, not to be used:
        @centerchap, @definfoenclose, @refill, @inforef.
      . new paper size @bsixpaper
    * texi2any
      . should be faster as Perl XS parser is enabled by default
      . SHOW_MENU customization variable replaced by FORMAT_MENU.
        FORMAT_MENU set to 'menu' is the same as SHOW_MENU set to 1, and
        FORMAT_MENU set to 'nomenu' is the same as SHOW_MENU set to 0.
      . only check menu structure if CHECK_NORMAL_MENU_STRUCTURE variable is set
      . changes to HTML output:
          . MathJax support for display of math.  new variables HTML_MATH,
            MATHJAX_SCRIPT and MATHJAX_SOURCE.
          . new variables JS_WEBLABELS and JS_WEBLABELS_FILE to support
            JavaScript License Web Labels
          . by default, use sectional tables of contents instead of menus
          . use section names in links by default (configure with
            xrefautomaticsectiontitle customization variable)
          . CONTENTS_OUTPUT_LOCATION sets location of table of contents
          . document sections wrapped in <div> elements
          . new variable USE_NODE_DIRECTIONS to use node or section structure
            for node directions
          . copiable anchor links for definitions with COPIABLE_ANCHORS variable
          . experimental JavaScript browsing interface enabled with INFO_JS_DIR
          . don't add an extra period before file extension given as an argument
            to @image if image file is not found
    * info
      . support compressed dir files
    * texi2dvi
      . stop on first error in input file
    * texinfo.tex
      . put logical page numbers into PDF's ('page labels')
      . put chapter numbers in the PDF outline
      . new Finnish translation
    * Distribution
      . autoconf 2.71, automake 1.16.3, gettext 0.21

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:18:54 +00:00
Adolf Belka
7249b3446b taglib: Update to version 1.12
- Update from 1.11.1 to 1.12
- Update rootfile
- Changelog
   TagLib 1.12 (Feb 16, 2021)
    * Added support for WinRT.
    * Added support for Linux on POWER.
    * Added support for classical music tags of iTunes 12.5.
    * Added support for file descriptor to FileStream.
    * Added support for 'cmID', 'purl', 'egid' MP4 atoms.
    * Added support for 'GRP1' ID3v2 frame.
    * Added support for extensible WAV subformat.
    * Enabled FileRef to detect file types based on the stream content.
    * Dropped support for Windows 9x and NT 4.0 or older.
    * Check for mandatory header objects in ASF files.
    * More tolerant handling of RIFF padding, WAV files, broken MPEG streams.
    * Improved calculation of Ogg, Opus, Speex, WAV, MP4 bitrates.
    * Improved Windows compatibility by storing FLAC picture after comments.
    * Fixed numerical genres in ID3v2.3.0 'TCON' frames.
    * Fixed consistency of API removing MP4 items when empty values are set.
    * Fixed consistency of API preferring COMM frames with no description.
    * Fixed OOB read on invalid Ogg FLAC files (CVE-2018-11439).
    * Fixed handling of empty MPEG files.
    * Fixed parsing MP4 mdhd timescale.
    * Fixed reading MP4 atoms with zero length.
    * Fixed reading FLAC files with zero-sized seektables.
    * Fixed handling of lowercase field names in Vorbis Comments.
    * Fixed handling of 'rate' atoms in MP4 files.
    * Fixed handling of invalid UTF-8 sequences.
    * Fixed possible file corruptions when saving Ogg files.
    * Fixed handling of non-audio blocks, sampling rates, DSD audio in WavPack files.
    * TableOfContentsFrame::toString() improved.
    * UserTextIdentificationFrame::toString() improved.
    * Marked FileRef::create() deprecated.
    * Marked MPEG::File::save() with boolean parameters deprecated,
      provide overloads with enum parameters.
    * Several smaller bug fixes and performance improvements.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:18:29 +00:00
Arne Fitzenreiter
c0ce328e68 core160: add less
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:17:06 +00:00
Adolf Belka
af766db198 less: Update to version 590
- Update from 581.2 to 590
- Update of rootfile not required
- Changelog
   Major changes between "less" versions 581 and 590
    * Make less able to read lesskey source files (deprecating lesskey).
    * If XDG_CONFIG_HOME is set, find lesskey source file
      in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
    * If XDG_DATA_HOME is set, find and store history file
      in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
    * Add the --lesskey-src option.
    * Add the --file-size option.
    * With -F, if screen is resized to make file fit on one screen, don't exit.
    * Fix bug which could leave terminal in mouse-reporting mode
      after exiting less.
    * Fix bug which caused failure to respond to window resize.
    * Fix backslash bug searching in tag file.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:16:32 +00:00
Adolf Belka
b8239208ef hplip: Update to version 3.21.6
- Update from 3.21.2 to 3.21.6
- Update of rootfile
- Changelog
   3.21.6
    Added support for following new Distro's:
     Fedora 34
     Ubuntu 21.04
     OpenSuse 15.3
     Debian 10.9
   3.21.4
    Added support for following new Distro's:
     LinuxMint 20.1
     Debian 10.8
    Added support for the following new Printers:
     HP Envy 6400 series

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:16:04 +00:00
Arne Fitzenreiter
48e1d3ff46 core160: add shutdown.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:15:00 +00:00
Leo-Andres Hofmann
f27fb33d47 Run "./make.sh lang"
Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:13:22 +00:00
Leo-Andres Hofmann
e64a5b4f74 shutdown.cgi: Add "reboot with filesystem check" button
ipfirereboot.c is able to force a file system check during reboot.
This patch makes this function available in the shutdown GUI.

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:11:50 +00:00
Arne Fitzenreiter
f8c7460446 core160: add libloc
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:08:28 +00:00
Peter Müller
84f741e7bd libloc: update to 0.9.7
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:07:25 +00:00
Arne Fitzenreiter
0887a6b29c core160: add ddns
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:05:43 +00:00
Stefan Schantl
785903dbee ddns: Update to 014.
This is a major update to the latest available version of ddns.

Remove patches which are part of the upstream release.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:04:53 +00:00
Arne Fitzenreiter
34694d34bf core160: add style.css
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:02:52 +00:00
Leo-Andres Hofmann
3cc3edeca4 RRD graphs: Remove padding around graph images
The images inherited padding from the general design and
have been resized to fit the layout, resulting in blurred graphs.
This removes the padding and shows the graphs in full size.

Fixes: #12657

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:01:46 +00:00
Arne Fitzenreiter
d10a558196 core160: add firewall.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 08:58:21 +00:00
Stefan Schantl
ec0ed11d71 firewall.cgi: Make checked and selected hashes private for each single function.
Some functions uses those two hashes and are altering them - making them
private will erase and fill it with new data.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 08:56:56 +00:00
Stefan Schantl
04b6a4baa8 firewall.cgi: Fix multiple usage of configured net or interface.
When configuring a standard network as source or target the same
interface would be pre-selected as firewall interface when editing an
existing rule.

In case an existing input rule with an configured firewall interface
should be changed, the same network device has been pre-selected in the
standard networks dropdown box.

This easily confuses users and may lead to false configurations when
saving an edited rule.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 08:56:42 +00:00
Stefan Schantl
0e9b164722 firewall.cgi: Remove faulty assignments for selected hash.
The removed assignments are wrong because both are trying to assign
something different to the same key and will overwrite each other.

Secondary the assignment to the hash is not needed at this place, so it
safely can be removed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 08:56:07 +00:00
Arne Fitzenreiter
ee2cd894cd core160: add poppler
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 08:52:41 +00:00
Adolf Belka
1c5aa4affc poppler: Update to version 21.07.0
- Update from 21.05.0 to 21.07.0
- Update of rootfile
- Changelog is too large to include here. Full details can be found in the ChangeLog file
   in the source tarball. This is a collection of all the commits made.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 08:42:12 +00:00
Arne Fitzenreiter
bdac4c81d8 core160: add openssl
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-24 22:21:08 +02:00
Arne Fitzenreiter
a8366ef743 openssl: update to 1.1.1k
This update fix:
SM2 Decryption Buffer Overflow (CVE-2021-3711)
Read buffer overruns processing ASN.1 strings (CVE-2021-3712)
https://www.openssl.org/news/secadv/20210824.txt

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-24 22:17:06 +02:00
Arne Fitzenreiter
b040e0fe32 core160: add perl-MIME-Lite
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:55:02 +00:00
Adolf Belka
ce7054ba18 perl-MIME-Lite: Update to version 3.033
- Update from 3.030 (Nov 2013) to 3.033 (Jun 2021)
- Update of rootfile not required
- Changelog
   Version 3.033
     No changes since previous version, just made non-trial.
   Version 3.032
     Fix an error in printing to Net::SMTP (thanks, Peter Heirich)
     Add "use warnings" and require v5.6
   Version 3.031
     Add an SSL option to connect to the SMTP relay via SSL on port 465. (thanks,
      Max Maischein)
     Document some tips on using non-ASCII content with MIME::Lite (thanks,
      traveljury.com and Tom Hukins)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:53:59 +00:00
Arne Fitzenreiter
20743618b6 core160: add pcre
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:53:09 +00:00
Adolf Belka
3850aa4c89 pcre: Update to version 8.45
- Update from 8.44 to 8.45
- Updated rootfile
- Checked the dependencies of the old lib versions using find-dependencies
   nothing flagged
- Changelog
   Version 8.45 15-June-2021
    This is the final release of PCRE1. A few minor tidies are included.
   1. CMakeLists.txt has two user-supplied patches applied, one to allow for the
      setting of MODULE_PATH, and the other to support the generation of pcre-config
      file and libpcre*.pc files.
   2. There was a memory leak if a compile error occurred when there were more
      than 20 named groups (Bugzilla #2613).
   3. Fixed some typos in code and documentation.
   4. Fixed a small (*MARK) bug in the interpreter (Bugzilla #2771).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:52:19 +00:00
Arne Fitzenreiter
e9ab203103 core160: add iproute2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:51:35 +00:00
Adolf Belka
c175e58946 iproute2: Update to version 5.13.0
- Update from 5.12.0 to 5.13.0
- Update of rootfile not required
- Changelog is not available in source tarball and not on source website
   Below info obtained from the commits from the git repository
   devlink: Fix printf() type mismatches on 32-bit architectures	Ben Hutchings
   utils: Fix BIT() to support up to 64 bits on all architectures	Ben Hutchings
   uapi: update headers to 5.13	Stephen Hemminger
   devlink: Fix link errors on some systems	Roi Dayan
   tc: pedit: add decrement operation	Asbjørn Sloth Tønnesen
   tc: pedit: parse_cmd: add flags argument	Asbjørn Sloth Tønnesen
   iplink: support for WWAN devices	Sergey Ryazanov
   iplink: add support for parent device	Sergey Ryazanov
   Import wwan.h uapi file	David Ahern
   man: fix syntax for ip link property	Stephen Hemminger
   seg6: add support for SRv6 End.DT46 Behavior	Paolo Lungaroni
   Update kernel headers	David Ahern
   utils: bump max args number to 512 for batch files	Guillaume Nault
   uapi: update kernel headers to 5.13-rc6	Stephen Hemminger
   Merge branch 'devlink-rate-support' into next	David Ahern
   devlink: Add ISO/IEC switch	Dmytro Linkin
   devlink: Add port func rate support	Dmytro Linkin
   devlink: Add helper function to validate object handler	Dmytro Linkin
   Update kernel headers	David Ahern
   devlink: Add optional controller user input	Parav Pandit
   police: Add support for json output	Roi Dayan
   tc: fq: add horizon attributes	Eric Dumazet
   configure: convert LIBBPF environment variables to command-line options	Hangbin Liu
   configure: add options ability	Hangbin Liu
   ss: update ss man page	Roman Mashak
   tc: f_flower: Add missing ct_state flags to usage description	Ariel Levkovich
   tc: f_flower: Add option to match on related ct state	Ariel Levkovich
   libgenl: make genl_add_mcast_grp set errno on error	Florian Westphal
   lib/fs: fix issue when {name,open}_to_handle_at() is not implemented	Heiko Thiery
   config.mk: Rerun configure when it is newer than config.mk	David Ahern
   ip: dynamically size columns when printing stats	Jakub Kicinski
   seg6: add counters support for SRv6 Behaviors	Paolo Lungaroni
   tc: htb: improve burst error messages	Andrea Claudi
   tipc: bail out if key is abnormally long	Andrea Claudi
   tipc: bail out if algname is abnormally long	Andrea Claudi
   tipc: call a sub-routine in separate socket	Hoang Le
   tc-cake: update docs to include LE diffserv	Tyson Moore
   dcb: fix memory leak	Andrea Claudi
   dcb: fix return value on dcb_cmd_app_show	Andrea Claudi
   lib: bpf_legacy: avoid to pass invalid argument to close()	Andrea Claudi
   tc: q_ets: drop dead code from argument parsing	Andrea Claudi
   ip: align the name of the 'nohandler' stat	Jakub Kicinski
   Update kernel headers	David Ahern
   Merge branch 'rdma-copy-on-fork' into next	David Ahern
   rdma: Add copy-on-fork to get sys command	Gal Pressman
   rdma: update uapi headers	Gal Pressman
   mptcp: make sure flag signal is set when add addr with port	Jianguo Wu
   Merge branch 'main' into next	David Ahern
   ip: Add nodst option to macvlan type source	Jethro Beekman
   Merge branch 'rdma-resource-tracking' into next	David Ahern
   rdma: Add SRQ resource tracking information	Neta Ostrovsky
   rdma: Add context resource tracking information	Neta Ostrovsky
   rdma: Update uapi headers	Neta Ostrovsky
   Update kernel headers	David Ahern

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:51:09 +00:00
Arne Fitzenreiter
fe16865fb2 core160: add suricata and libhtp
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:49:13 +00:00
Matthias Fischer
1cfbca8e69 libhtp: Update to 5.0.38
For details see:
https://github.com/OISF/libhtp/releases/tag/0.5.38

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Acked-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:31:48 +00:00
Matthias Fischer
bacde6d9c1 suricata: Update to 5.0.7
For details see:

https://forum.suricata.io/t/suricata-6-0-3-and-5-0-7-released/1489

and

https://redmine.openinfosecfoundation.org/versions/166

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Acked-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:31:32 +00:00
Adolf Belka
4a53126945 traceroute: Update to version 2.1.0
- Update from 2.0.18 (2011) to 2.1.0 (2016 - latest version)
- Update of rootfile not required
- Changelog
    2016-03-08  Dmitry Butskoy  <Dmitry@Butskoy.name> - 2.1.0
	*  Improve the main loop for better interactivity.
	   Instead of waiting silently for maximum expiration time of probes
	    in progress, use timeout of the first probe (which will be printed
	    first from now) only.
	*  Speedup wait mechanism.
	   Traditional traceroute implementation always waited the whole timeout
	    for any probe. But if we already have some replies from the same hop,
	    or even from some next hop, we can use the round trip time
	    of such a reply as a hint to determine the actual reasonable
	    amount of time to wait.
	   Now the `-w' option has a form of three (in general) float values
	    separated by a comma (or a slash): `-w MAX_SECS,HERE,NEAR' .
	    (last two are optional). MAX_SECS specifies the maximum time
	    (in seconds) to wait, in any case.
	   The optional HERE specifies a factor to multiply the round trip time
	    of an already received response from the same hop.
	   The resulting value is used as a timeout for the probe, instead of
	    (but no more than) MAX_SECS. The optional NEAR specifies a similar
	    factor for a response from some next hop.
	   The time of the first found result is used in both cases.
	   First, we look for the same hop (of the probe which will be printed
	    first from now). If nothing found, then look for some next hop.
	   If nothing found, use MAX_SECS. If HERE and/or NEAR have zero values,
	    the corresponding computation is skipped.
	   HERE and NEAR are always set to zero if only MAX_SECS is specified
	    (which provides compatibility with previous versions). Thus, if your
	    scripts use `-w SECS', then nothing changed for you, since
	    the lonely SECS implies `-w SECS,0,0' .
	   Defaults are 5.0 seconds for MAX_SECS, 3.0 times for HERE and
	    10.0 times for NEAR.
	   Certainly, the new algorithm can lead to premature expiry
	    (especially when response times differ at times) and printing "*"
	    instead of a time. Anyway, you can always switch this algorithm off,
	    just by specifying `-w' with the desired timeout only (fe. `-w 5').
	   We continue to wait whole MAX_SECS when one probe per time
	    must be sent (`--sport', `-P proto'), because it seems more harmful
	    rather than helpful to try to wait less in such cases.
	   To provide compatibility with 2.0.x versions, use:
		traceroute -w 5
	    (or any other desired `-w' value).
	*  Hint people to use the system traceroute(8) instead of
	    tcptraceroute wrapper (by providing a stderr header).
	   The using of this wrapper is a little bit harmful, since it has
	    less possibilities and a little different set of options.
	   For those who are used to use tcptraceroute in cmdline,
	    just create a link with that name to the system traceroute.
	   When invoked as "tcp*", it then behaves as `traceroute -T'.
	   (The simple manual page added for this case in the wrapper subdir).
	   The original tcptraceroute had some options differ ("lpNSAE"),
	    but they was rare used. Most common "dnFifmqwst" was just the same.
	   Therefore it should be painless to use the system binary directly,
	    instead of the limited wrapper (which is still provided indeed).
    2016-02-15  Dmitry Butskoy  <Dmitry@Butskoy.name> - 2.0.22
	*  Some portability fixing and improvements (Felix Janda)
	*  Require clear numbers for options and arguments (Sergey Salnikov)
	*  Drop compilation date from the version string (Debian #774365)
	*  New tcp module option `reuse', which utilize SO_REUSEADDR
	    to reuse local port numbers for the huge workloads (Richard Sheehan)
	*  Avoid poll(2) call with spurious zero timeout in some rare cases
	    by rounding the value properly using ceil(3)
    2014-11-12  Dmitry Butskoy  <Dmitry@Butskoy.name> - 2.0.21
	*  Fix `--mtu' and `-F' working on kernels >= 3.13
	*  Some manual page improving (Christopher Mann)
    2014-06-14  Dmitry Butskoy  <Dmitry@Butskoy.name> - 2.0.20
	*  Describe all complementary long options in the man page (Jan Synacek)
	*  Use correct service name for AS lookups (Frederic Mangano)
	*  Avoid some rare case null dereference (geogriffin@jsgriff.com)
	*  Improve expiration check for simultaneous probes
    2012-11-19  Dmitry Butskoy  <Dmitry@Butskoy.name> - 2.0.19
	*  DCCP protocol support (rfc4340), by Samuel Jero
	    Use "-D" option for it (the protocol-specific options
	    are available too).
	*  Update COPYING and COPYING.LIB license files to the latest
	    published ones (due to FSF address changes etc.) (Jan Synacek)
	*  Add mention of "-l" option to manual (Filip Holec)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:31:04 +00:00
Arne Fitzenreiter
a66e5d3c7b core160: add Text-Tabs+Wrap
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:29:30 +00:00
Adolf Belka
fb9e027b98 Text-Tabs+Wrap: Update to 2013.0523
- Update from 2005.0824 to 2013.0523 - latest version
- Update of rootfile required
- Changelog
   = 2013/05/23
     Change module 'NAME'
   = 2013/05/22
     Typos
   = 2013/04/26
     Minor test suite fixes - bug 81698.
     Fixed bug 79766 -- an extraneous "=" in a regex.
     Changed the license to qualify as an "open source" license.
   = 2012/08/18
     Packaging fix.
     Minor documentation fixes.
   = 2012/08/15
     Minor fixes to test suites.
     Added back versions to support old versions of perl.
   = 2009/04/17
     Added support for Unicode combining characters to both
      Text::Tabs and Text::Wrap, plus a new test suite for each
      of these new functionalities.  --tchrist
   = 2009/03/05
     Test improvements from Dave Mitchel sent back in 2005...
     Added code to increase $columns if it's not big enough to accommodate
      the subsequent tab.
     Minor documentation fixes from David Landgren <david at landgren.net>.
     Use warnings::warnif instead of just warn for columns < 2.  Appled per
      request of Rafael Garcia-Suarez <rgarciasuarez at gmail.com>.
   = 2006/11/17
     Text::Tabs can handle newlines now so the BUGS section has been removed
      per request from Aristotle Pagaltzis.
   = 2006/07/11
     Further bomb-proofing to pass more tests: Dan Jacobson <jidanni at
      jidanni dot org> found another way to generate a "this shouldn't happen".
   = 2006/07/05
     Made documentation and code changes to address perlbug:
      https://rt.perl.org/rt3/Ticket/Display.html?id=30229
     Added in changes from the distributed-with-perl version.  This took
      care of perlbug: https://rt.perl.org/rt3/Ticket/Display.html?id=34902
     It also took care of suggestion from Matthijs Bomhoff <matthijs
      at bomhoff dot nl>.
     Made documentation changes (added EXAMPLES) as per a suggestion
      from Gabor Blasko <gblasko at cs dot columbia dot edu>
     belg4mit at MIT dot EDU reported that $columns==1 die'd.  No longer.
     Added tests for each bug report.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:27:12 +00:00
Arne Fitzenreiter
803603bba3 core160: add sqlite
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:25:43 +00:00
Adolf Belka
c0766d8abb sqlite: Update to version 3360000
- Update from 3350500 to 3360000
- Update of rootfile not required
- Changelog
   Improvement to the EXPLAIN QUERY PLAN output to make it easier to understand.
   Byte-order marks at the start of a token are skipped as if they were whitespace.
   An error is raised on any attempt to access the rowid of a VIEW or subquery. Formerly, the rowid of a VIEW would be indeterminate and often would be NULL. The -DSQLITE_ALLOW_ROWID_IN_VIEW compile-time option is available to restore the legacy behavior for applications that need it.
   The sqlite3_deserialize() and sqlite3_serialize() interfaces are now enabled by default. The -DSQLITE_ENABLE_DESERIALIZE compile-time option is no longer required. Instead, there is is a new -DSQLITE_OMIT_DESERIALIZE compile-time option to omit those interfaces.
   The "memdb" VFS now allows the same in-memory database to be shared among multiple database connections in the same process as long as the database name begins with "/".
   Back out the EXISTS-to-IN optimization (item 8b in the SQLite 3.35.0 change log) as it was found to slow down queries more often than speed them up.
   Improve the constant-propagation optimization so that it works on non-join queries.
   The REGEXP extension is now included in CLI builds.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:23:04 +00:00
Arne Fitzenreiter
a2ede2ed2a core160: add rules.pl
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:21:43 +00:00
Stefan Schantl
21b37391f9 Firewall: Proper allow to create REDIRECT rules.
This patch now proper allows to create rules for redirecting requests of a
given host, group or network(s) to a specified port or service to the
local IPFire system.

So it implements a very generic and easy to use feature to redirect
(for example all DNS, NTP, or whatever) requests to the a local running
instance and so to force usage of that local hosted service.

* The feature supports specifiying a single port and redirect the requests to another given one.
  ( For example requests to UDP 123 can be redirected to local UDP 1234
  if you run an NTP server on that port.)

* It also supports direct usage of services or even service groups.
  ( So you can create a service group for DNS and redirect them to the
  local recursor, or create a "redirected services" group which easily
  can be managed...)

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-16 06:18:00 +00:00
Adolf Belka
b89454b52a iperf3: Update to version 3.10.1
- Update from 3.9 to 3.10.1
- Update of rootfile not required
- Changelog
   iperf-3.10.1 2021-06-03
     * Notable user-visible changes
       * Fixed a problem with autoconf scripts that made builds fail in
         some environments (#1154 / #1155).
     * Developer-visible changes
       * GNU autoconf 2.71 or newer is now required to regenerate iperf3's
         configure scripts.
   iperf 3.10 2021-05-26
     * Notable user-visible changes
       * Fix a bug where some --reverse tests didn't terminate (#982 /
         #1054).
       * Responsiveness of control connections is slightly improved (#1045
         / #1046 / #1063).
       * The allowable clock skew when doing authentication between client
         and server is now configurable with the new --time-skew-threshold
         (#1065 / #1070).
       * Bitrate throttling using the -b option now works when a burst size
         is specified (#1090).
       * A bug with calculating CPU utilization has been fixed (#1076 /
         #1077).
       * A --bind-dev option to support binding sockets to a given network
         interface has been added to make iperf3 work better with
         multi-homed machines and/or VRFs (#817 / #1089 / #1097).
       * --pidfile now works with --client mode (#1110).
       * The server is now less likely to get stuck due to network errors
         (#1101, #1125), controlled by the new --rcv-timeout option.
       * Fixed a few bugs in termination conditions for byte or
         block-limited tests (#1113, #1114, #1115).
       * Added tcp_info.snd_wnd to JSON output (#1148).
       * Some bugs with garbled JSON output have been fixed (#1086, #1118,
         #1143 / #1146).
       * Support for setting the IPv4 don't-fragment (DF) bit has been
         added with the new --dont-fragment option (#1119).
       * A failure with not being able to read the congestion control
         algorithm under WSL1 has been fixed (#1061 / #1126).
       * Error handling and error messages now make more sense in cases
         where sockets were not successfully opened (#1129 / #1132 /
         #1136, #1135 / #1138, #1128 / #1139).
       * Some buffer overflow hazards were fixed (#1134).
     * Notable developer-visible changes
       * It is now possible to use the API to set/get the congestion
         control algorithm (#1036 / #1112).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 08:04:38 +00:00
Adolf Belka
b6eb1746c6 intltool: Update to version 0.51.0
- Update from 0.40.5 (2008) to 0.51.0 (2015 - latest release)
- Update of rootfile3 not required
- Changelog is too long to include here
   Changes from version 0.41.0 to 0.51.0 can be found at https://launchpad.net/intltool/+download
    and in the ChangeLog files in the Source Tarballs
   Changes prior to 0.41.0 can be found at https://download.gnome.org/sources/intltool/
    in the ChangeLog files in the Source Tarballs

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 08:04:12 +00:00
Adolf Belka
07335498ff ghostscript: Update version to 9.54.0
- Update from 9.53.3 to 9.54.0
- Update rootfile
- delete patch related to FT_CALLBACK_DEF as fix has been implemented in the source
   tarball
- Changelog highlights
   Version 9.54.0 (2021-03-30)
     The 9.54.0 release is a maintenance release, and also adds new functionality.
     Highlights in this release include:
       Overprint simulation is now available to all output devices, allowing quality previewing/proofing of PostScript and PDF jobs that rely on overprint. See the -dOverprint option documentation in: Overprint
       The "docxwrite" device adds the ability to output to Microsoft Word "docx" format. See: docxwrite
       The pdfwrite device is now capable of using the Tesseract OCR engine when it is built into Ghostscript to improve searchability and copy and paste functionality when the input lacks the metadata for that purpose. See: UseOCR
       Ghostscript/GhostPDL now includes a "map text to black" function, where text drawn by an input job (except when drawn using a Type 3 font) can be forced to draw in solid black. See: BlackText
       Ghostscript/GhostPDL now supports simple N-up imposition "internally". See: NupControl
       Our efforts in code hygiene and maintainability continue.
       The usual round of bug fixes, compatibility changes, and incremental improvements.
   Full details of above highlights can be found at https://www.ghostscript.com/doc/9.54.0/History9.htm

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 08:03:49 +00:00
Adolf Belka
ae367b9c8f alsa: Update to version 1.2.5.1
- Not really sure if a sound support capability is really appropriate for a firewall. I
   wouldn't have it. However if it stays as an add-on then it should be up to date.
- Update alsa-lib from 1.0.27.1 (2013) to 1.2.5.1 (2021)
- Update alsa-utils from 1.0.27.1 (2013) to 1.2.5.1 (2021)
- Update alsa-firmware from 1.0.27 (2013) to 1.2.4 (2020)
- Update rootfile
- Changelog is too large to include here. Changes back to 2019-11-20 can be found at
   https://www.alsa-project.org/wiki/Main_Page
   Earlier changes have to be found from the git commits at
   https://github.com/alsa-project/alsa-lib and
   https://github.com/alsa-project/alsa-utils
   There is no changelog or git commits that I have been able to find for alsa-firmware

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 08:03:28 +00:00
Arne Fitzenreiter
6bebdc5c56 core160: add fwhost.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 07:52:24 +00:00
Peter Müller
6f36132e68 fwhosts.cgi: properly fetch configured IPsec N2N subnets
Previously, the getcolor() function did not correctly process IPsec
N2N connections with more than one remote network configured, resulting
in networks mistakenly marked as being part of a VPN connection, or vice
versa.

Fixes: #11235

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 07:50:57 +00:00
Arne Fitzenreiter
9e47307d1b core160: add general-functions.pl
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 07:47:45 +00:00
Peter Müller
db4e10a6ec general-functions.pl: do not miscalculate when enumerating IPsec N2N subnet membership
Fixes: #11235

Cc: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 07:25:59 +00:00
Arne Fitzenreiter
4bf13a6a47 core160: begin updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 07:05:56 +00:00
Arne Fitzenreiter
ff54a798a5 grub: fix cloudhelper permissions
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-02 07:38:43 +02:00