Commit Graph

9455 Commits

Author SHA1 Message Date
Adolf Belka
91aefa33f9 pixman: Update to version 0.43.4
- Update from version 0.43.0 to 0.43.4
- Update of rootfile
- Changelog
    0.43.4
	      Revert the changes to fix the problem in big-endian architectures
	      Allow to build pixman on clang/arm32
	      pixman-arm: Fix build on clang/arm32
	      pixman-x86: Use cpuid.h header
	      pixman-x86: Move #include "cpuid.h" inside conditionals
	      Revert "Allow to build pixman on clang/arm32"
	      pixman-arm: Use unified syntax
    0.43.2
	Note, in the past pixman used a numbering scheme with odd minor number
	numbers for development versions and even minor number for stable
	versions. This is no longer the case, all releases (including this one)
	are stable production versions now.
	      Drop automatic DEBUG define
	      Drop ChangeLog
	      Drop contrib/ci.sh

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-06 21:34:21 +00:00
Michael Tremer
bc98c579cb core185: Ship pciutils
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-06 21:34:03 +00:00
Adolf Belka
730be02c8e pciutils: Update to version 3.11.1
- Update from version 3.10.0 to 3.11.1
- Update of rootfile
- Changelog
    3.11.1
	* Fixed wrong API version in lib/pci.h.
	* Updated README.Windows.
	* Fix compilation on Windows.
    3.11.0
	* update-pciids now supports XZ compression. If libpci is configured
	  with support for compression, all downloaded files are recompressed
	  as gzip. Otherwise they are stored as plain text.
	* update-pciids now sends itself as the User-Agent.
	* Added a pcilmr utility for PCIe lane margining. Thanks to Nikita
	  Proshkin for contributing it.
	* Re-factored access to i386 ports on all relevant platforms.
	* Added i386 port access on OpenBSD.
	* Back-ends for Windows received many bug fixes and improvements.
	* ECAM back-end now scans ACPI and BIOS memory faster.
	* Linux systems without pread/pwrite are no longer supported
	  as they are hopefully long gone. This helps avoid the tricky check
	  for presence of pread which was found to fail on musl libc.
	* Improved decoding of PCIe control and status registers.
	* Decoding of CXL capabilities now supports up to CXL 3.0.
	* lspci now displays interrupt message numbers consistently across
	  different capabilities.
	* Cache of IDs resolved via DNS, which was located in ~/.pci-ids
	  by default, is now stored according to the XDG base directory
	  specification in $XDG_CACHE_HOME/pci-ids.
	* All source files now have SPDX license identifiers.
	* Internal: The "aux" fields of structs pci_access and pci_dev
	  reserved for use by back-ends were renamed to backend_data to better
	  reflect their meaning.
	* As usually, various minor bug fixes and updated pci.ids.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-06 21:33:49 +00:00
Michael Tremer
97f69f7768 core185: Ship pango
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-06 21:33:36 +00:00
Adolf Belka
fc22e74b79 pango: Update to version 1.52.0
- Update from version 1.50.13 to 1.52.0
- Update of rootfile
- Changelog
    1.52.0
	- Add pango_font_map_reload_font
	- Improve formatting of font sizes
    1.51.2
	- Build improvements on Windows
	- Use single fontconfig thread
	- Fix problems with spaces at line ends
	- Allow custom fonts on Windows
	- pango-viewer: Fix hint-metrics options
	- Pangofont: Add properties
    1.51.0
	- itemize: Improve script itemization
	- build: Check for cairo DWrite dependency
	- win32: Fix various issues and crashes
	- layout: Add a missing switch case
    1.50.14
	- Fix underline thickness in scaled contexts

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-06 21:32:13 +00:00
Michael Tremer
05512cabe0 core185: Ship expat
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-06 21:31:59 +00:00
Adolf Belka
60e990fe3d expat: Update to version 2.6.1
- Update from version 6.2.0 to 6.2.1
- Update of rootfile
- Changelog
    2.6.1 Thu February 29 2024
        Bug fixes:
            #817  Make tests independent of CPU speed, and thus more robust
       #828 #836  Expose billion laughs API with XML_DTD defined and
                    XML_GE undefined, regression from 2.6.0
        Other changes:
            #829  Hide test-only code behind new internal macro
            #833  Autotools: Reject expat_config.h.in defining SIZEOF_VOID_P
            #819  Address compiler warnings
       #832 #834  Version info bumped from 10:0:9 (libexpat*.so.1.9.0)
                    to 10:1:9 (libexpat*.so.1.9.1); see https://verbump.de/
                    for what these numbers do
        Infrastructure:
            #818  CI: Adapt to breaking changes in clang-format

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-06 21:31:44 +00:00
Michael Tremer
01925627b1 core185: Ship ethtool
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-06 21:31:24 +00:00
Michael Tremer
825871b978 core185: Ship ovpn.cnf
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-04 20:53:51 +00:00
Adolf Belka
6dac44d40c update.sh: Fixes bug#13548 - make key 41 contain no-pass for N2N connections
- This code ensures that all existing N2N connections have no-pass in key 41 in place
   of disabled for some of them.
- Tested out and confirmed on my vm testbed.

Fixes: Bug#13548
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-03 10:09:14 +00:00
Arne Fitzenreiter
6ea7d8c67e core185: add index.cgi to update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-03 09:05:35 +01:00
Michael Tremer
6dd7451f11 core185: Ship initscript functions
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-01 16:14:14 +00:00
Robin Roevens
bff53f09ff zabbix_agentd: Add OpenVPN certificates items
- Adds Zabbix Agent userparameters `ipfire.ovpn.clientcert` and `ipfire.ovpn.cacert` for the agent to get details about openvpn client, server and ca certificates.
- Moves all `ipfire.ovpn.*` userparameters to a separate config file `userparameter_ovpn.conf` to enable users to selectively disable openvpn items when not needed
- Includes `ipfire_certificate_detail.sh` script in sudoers for Zabbix Agent as it needs root permission to read openvpn certificate details.
- Adapts lfs install script to install new script and configfile
- Adds new script and configfile to rootfiles
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-29 10:26:11 +00:00
Michael Tremer
1c0e8ff9fc core185: Ship shadow
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-29 10:24:50 +00:00
Michael Tremer
20e8c4739c core185: Ship libpng
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-29 10:24:10 +00:00
Michael Tremer
314315bee3 core185: Ship libgpg-error
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-29 10:23:17 +00:00
Adolf Belka
5fafff021f libgpg-error: Update to version 1.48
- Update from version 1.47 to 1.48
- Update of rootfile
- Changelog
    1.48
	 * New configure option --with-libtool-modification.  [T6619]
	 * New option parser flag to detect commands given without a double
	   dash.  There is also the new meta command "command-mode" to set
	   this flag via a config file.  [T6978]
	 * Added an es_fopen mode flag "sequential" with support on Windows.
	   [rE7a42ff0ec9]
	 * Added an es_fopen mode flag "wipe" to cleanup internal buffers at
	   close time.  [T6954]
	 * New function gpgrt_wipememory.  [T6964]
	 * Improvements to setenv on Windows.  [rE89e53ad90f]
	 * Fixed call to estream-printf string filters.  [T6737]
	 * Many improvements to the yat2m tool.
	 * Updates to the build system.
	 * Interface changes relative to the 1.47 release:
		 ARGPARSE_FLAG_COMMAND          NEW.
		 gpgrt_wipememory               NEW.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-29 10:22:57 +00:00
Michael Tremer
9b2298d92f core185: Ship libffi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-29 10:22:40 +00:00
Adolf Belka
f5a2b26bd1 libffi: Update to version 3.4.6
- Update from version 3.4.4 to 3.4.6
- Update of rootfile
- Changelog
    3.4.6
	Fix long double regression on mips64 and alpha.
    3.4.5
	Add support for wasm32.
	Add support for aarch64 branch target identification (bti).
	Add support for ARCv3: ARC32 & ARC64.
	Add support for HPPA64, and many HPPA fixes.
	Add support for Haikuos on PowerPC.
	Fixes for AIX, loongson, MIPS, power, sparc64, and x86 Darwin.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-29 10:22:01 +00:00
Adolf Belka
1087370d52 git: Update to version 2.44.0
- Update from version 2.43.0 to 2.44.0
- Update of rootfile
- Changelog is too large to include here.
   See the files 2.43.1.txt, 2.43.2.txt, 2.43.3.txt & 2.44.0.txt in the source tarball in
    directory Documentation/RelNotes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-29 10:21:40 +00:00
Michael Tremer
bed265cc5a Merge remote-tracking branch 'ms/wsdd' into next 2024-02-28 16:44:06 +00:00
Michael Tremer
3ee04b3b8a core185: Ship backup.pl and ovpnmain.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-28 16:41:22 +00:00
Michael Tremer
033252e043 core185: Ship dhcp.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-28 16:29:51 +00:00
Michael Tremer
bf93033801 core185: Ship dns.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-28 16:11:04 +00:00
Adolf Belka
84c599f55f Core Update 185: Ship elfutils
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-28 16:10:22 +00:00
Arne Fitzenreiter
e3a8147c67 libmpdclient: update to 2.22
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-02-25 02:03:24 +01:00
Arne Fitzenreiter
3de42257d0 mpd: move scripts and config from mpfire to mpd
this allows to use mpd without mpfire installed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-02-24 16:39:59 +01:00
Arne Fitzenreiter
db4977b30a core185: fix rpi4 firmare names
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-02-19 19:58:51 +01:00
Michael Tremer
1dbea7df56 core185: Ship ca-certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-19 10:17:13 +00:00
Peter Müller
0b29422c93 Core Update 185: Remove orphaned uncritical non-library files
See: https://patchwork.ipfire.org/project/ipfire/patch/c21b6fed-28cd-47ce-8a99-b36b37672a15@ipfire.org/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-02-17 20:45:41 +00:00
Peter Müller
d6511c820d Core Update 185: Delete orphaned linux-firmware files
See: https://patchwork.ipfire.org/project/ipfire/patch/c21b6fed-28cd-47ce-8a99-b36b37672a15@ipfire.org/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-02-17 20:42:28 +00:00
Peter Müller
6336428ef8 Core Update 185: Ensure correct permissions of /etc/sudoers.d/
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-02-17 20:40:39 +00:00
Peter Müller
2038b640e6 Core Update 185: Ship forgotten linux-firmware files
See: https://patchwork.ipfire.org/project/ipfire/patch/c21b6fed-28cd-47ce-8a99-b36b37672a15@ipfire.org/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-02-17 20:39:41 +00:00
Peter Müller
b8f2d9da4c Core Update 185: Restart ntp
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-02-17 20:37:04 +00:00
Peter Müller
ef2846e46d Core Update 185: Ship libcap and all packages dependant on it
See: https://patchwork.ipfire.org/project/ipfire/patch/c21b6fed-28cd-47ce-8a99-b36b37672a15@ipfire.org/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-02-17 20:35:02 +00:00
Michael Tremer
c73a75cb70 Merge remote-tracking branch 'origin/next' into next 2024-02-14 19:07:30 +00:00
Michael Tremer
5db2b07c89 Merge branch 'master' into next 2024-02-14 19:06:35 +00:00
Adolf Belka
dd24668627 files: Ship collectd.conf for bug#12981
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-14 19:06:20 +00:00
Michael Tremer
c5b441a4e6 core185: Ship unbound and BIND again
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-14 19:04:48 +00:00
Michael Tremer
64300f2212 Merge branch 'master' into next 2024-02-14 19:03:52 +00:00
Michael Tremer
f3d7ce3b5d core184: Ship unbound
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-14 19:01:25 +00:00
Matthias Fischer
e705636a85 unbound 1.19.1: Fix for forgotten rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-14 19:00:30 +00:00
Michael Tremer
0698daa3fb core184: Ship bind
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-14 19:00:03 +00:00
Matthias Fischer
de9e44e82d bind: Update to 9.16.48
For details see:
https://downloads.isc.org/isc/bind9/9.16.48/doc/arm/html/notes.html#notes-for-bind-9-16-48

Fixes several CVEs.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-14 18:59:48 +00:00
Arne Fitzenreiter
a4f29a5347 transmission: add menuentry to transmission webgui
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-02-11 13:33:39 +01:00
Arne Fitzenreiter
761e73230f mympd: update to 14.0.1
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-02-11 11:27:48 +01:00
Arne Fitzenreiter
394405b1dd vdr: add menu entry for vdr website
we had discussed this on december telco but it is not so
easy because our menusystem only shows entry's existing cgi's.
so i add a cgi redirect to http://$ENV{SERVER_ADDR}:3000
this add the entry under pakfire and also to service page.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-10 12:00:18 +00:00
Michael Tremer
65c1901411 core185: Ship suricata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-10 11:59:03 +00:00
Adolf Belka
e8972095c6 suricata: Update to version 7.0.2
- Update from version 6.0.15 to 7.0.2
- Update of rootfile
- suricata 7.0.2 requires libhtp >= 0.5.45
   it also requires libelf.so.1 for execution. Previous suricata versions only required
   libelf for building. libelf or elfutils are not mentioned anywhere in the changelog
- Without elfutils available during starting then suricata fails to start due to
   libelf.so.1 not being available.
- Tested out suricata7 with elfutils on my vm testbed and it successfully started.
- The suricata-5.0.8 patch has been removed as it got applied to configure.ac but this
   is not available in suricata-7.0.2. It looks like that patch was never actually used in
   suricata as all the builds I checked used the configure file from the source tarball
   and the configure was never created by running autoconf on the configure.ac
- Changelog is too large to include here. Details can be found in the ChangeLog file in
   the source tarball

Fixes: Bug#13516
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-10 11:56:23 +00:00
Matthias Fischer
bb25f15cf9 clamav: Update to 1.3.0
For details see:
https://blog.clamav.net/2023/11/clamav-130-122-105-released.html

Excerpts from changelog:

"Major changes

    Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be enabled by
    default, but may be optionally disabled using one of the following
    options:
    a. The clamscan command line option: --scan-onenote=no,
    b. The clamd.conf config option: ScanOneNote no,
    c. The libclamav scan option options.parse &= ~CL_SCAN_PARSE_ONENOTE;,
    d. A signature change to the daily.cfg dynamic configuration (DCONF).

Other improvements

    Fixed issue when building ClamAV on the Haiku (BeOS-like) operating
    system. Patch courtesy of Luca D'Amico

    ClamD: When starting, ClamD will now check if the directory specified
    by TemporaryDirectory in clamd.conf exists. If it doesn't, ClamD will
    print an error message and will exit with exit code 1. Patch courtesy
    of Andrew Kiggins.

    CMake: If configured to build static libraries, CMake will now also
    install the libclamav_rust, libclammspack, libclamunrar_iface, and
    libclamunrar static libraries required by libclamav.
    Note: These libraries are all linked into the clamscan, clamd, sigtool,
    and freshclam programs, which is why they did not need to be installed
    to function. However, these libraries would be required if you wish to
    build some other program that uses the libclamav static library.
    Added file type recognition for compiled Python (`.pyc`) files.

      The file type appears as a string parameter for these callback
      functions:

      - clcb_pre_cache
      - clcb_pre_scan
      - clcb_file_inspection

      When scanning a `.pyc` file, the `type` parameter will now show

      "CL_TYPE_PYTHON_COMPILED" instead of "CL_TYPE_BINARY_DATA".

    Improved support for decrypting PDFs with empty passwords.

    Assorted minor improvements and typo fixes.

Bug fixes

    Fixed a warning when scanning some HTML files.

    Fixed an issue decrypting some PDF's with an empty password.

    ClamOnAcc: Fixed an infinite loop when a watched directory does not
    exist.

    ClamOnAcc: Fixed an infinite loop when a file has been deleted before a
    scan.
    Patch courtesy of gsuehiro.

    Fixed a possible crash when processing VBA files on HP-UX/IA 64bit.
    Patch courtesy of Albert Chin-A-Young.

    ClamConf: Fixed an issue printing `MaxScanSize` introduced with the
    change to allow a `MaxScanSize` greater than 4 GB.
    Fix courtesy of teoberi.

    Fixed an issue building a ClamAV RPM in some configurations.
    The issue was caused by faulty CMake logic that intended to create an
    empty database directory during the installation."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-10 11:52:39 +00:00