Commit Graph

18845 Commits

Author SHA1 Message Date
Peter Müller
922013ca2a Core Update 169: Ship fuse
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-30 19:11:22 +00:00
Adolf Belka
37ddc46691 fuse: Update to version 3.11.0
- Update from 3.10.4 to 3.11.0
- Update of rootfile
- Changelog
   fuse 3.11.0 (2022-05-02)
	* Add support for flag FOPEN_NOFLUSH for avoiding flush on close.
	* Fixed returning an error condition to ioctl(2)
   fuse 3.10.5 (2021-09-06)
	* Various improvements to make unit tests more robust.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-30 19:11:14 +00:00
Peter Müller
8cd9c34439 Core Update 169: Ship curl
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-30 19:10:53 +00:00
Adolf Belka
247d9e685e curl: Update to version 7.83.1
- Update from version 7.83.0 to 7.83.1
- Update of rootfile not required
- Changelog
   version 7.83.1
    This release includes the following bugfixes:
	 o altsvc: fix host name matching for trailing dots [31]
	 o cirrus: Update to FreeBSD 12.3 [24]
	 o cirrus: Use pip for Python packages on FreeBSD [23]
	 o conn: fix typo 'connnection' -> 'connection' in two function names [1]
	 o cookies: make bad_domain() not consider a trailing dot fine [26]
	 o curl: free resource in error path [3]
	 o curl: guard against size_t wraparound in no-clobber code [4]
	 o CURLOPT_DOH_URL.3: mention the known bug [19]
	 o CURLOPT_HSTS*FUNCTION.3: document the involved structs as well [20]
	 o CURLOPT_SSH_AUTH_TYPES.3: fix the default [18]
	 o data/test376: set a proper name
	 o GHA/mbedtls: enabled nghttp2 in the build [11]
	 o gha: build msh3 [5]
	 o gskit: fixed bogus setsockopt calls [17]
	 o gskit: remove unused function set_callback [2]
	 o hsts: ignore trailing dots when comparing hosts names [28]
	 o HTTP-COOKIES: add missing CURLOPT_COOKIESESSION [40]
	 o http: move Curl_allow_auth_to_host() [9]
	 o http_proxy/hyper: handle closed connections [34]
	 o hyper: fix test 357 [32]
	 o Makefile: fix "make ca-firefox" [37]
	 o mbedtls: bail out if rng init fails [14]
	 o mbedtls: fix compile when h2-enabled [12]
	 o mbedtls: fix some error messages
	 o misc: use "autoreconf -fi" instead buildconf [22]
	 o msh3: get msh3 version from MsH3Version [6]
	 o msh3: print boolean value as text representation [10]
	 o msh3: psss remote_port to MsH3ConnectionOpen [7]
	 o ngtcp2: add ca-fallback support for OpenSSL backend [35]
	 o nss: return error if seemingly stuck in a cert loop [30]
	 o openssl: define HAVE_SSL_CTX_SET_EC_CURVES for libressl [8]
	 o post_per_transfer: remove the updated file name [27]
	 o sectransp: bail out if SSLSetPeerDomainName fails [33]
	 o tests/server: declare variable 'reqlogfile' static [39]
	 o tests: fix markdown formatting in README [38]
	 o test{898,974,976}: add 'HTTP proxy' keywords [16]
	 o tls: check more TLS details for connection reuse [25]
	 o url: check SSH config match on connection reuse [21]
	 o urlapi: address (harmless) UndefinedBehavior sanitizer warning [15]
	 o urlapi: reject percent-decoding host name into separator bytes [29]
	 o x509asn1: make do_pubkey handle EC public keys [13]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-30 19:10:46 +00:00
Peter Müller
3f6238f7c1 Merge branch 'next' into temp-c169-development 2022-05-30 19:09:46 +00:00
Michael Tremer
71d53192d3 core168: Add script to automatically repair MDRAID arrays
Please see the header of the script for more details.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-05-30 18:59:34 +00:00
Michael Tremer
69aac83da9 core168: Add rd.auto to kernel command line
This parameter will enable dracut to automatically launch any MDRAID
arrays at boot time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-05-30 18:59:33 +00:00
Peter Müller
8077bacb82 strongSwan: Bring back firewall rules for permitting IP-in-IP, ESP and AH traffic
Fixes: #12866
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-05-20 05:44:06 +00:00
Peter Müller
b630a9a8a8 Core Update 168: fcrontab != crontab
Silly me.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-18 17:42:24 +00:00
Peter Müller
690d420840 Start Core 169
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-18 14:32:32 +00:00
Michael Tremer
1c1d9fd7bf dracut: Enable automatic assembly of any RAID/LVM devices
This has changed in dracut 24 and we have used various hacks to enable
this behaviour again when it would have been so easy to just enable this
parameter.

Fixes: #12862 - Upgrade from Core 166 to 167 does not use RAID anymore
Reported-by: Dirk Sihling <dsihling@web.de>
Reported-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-16 18:31:12 +00:00
Peter Müller
bbd4767fcf Core Update 168: Ship liburcu
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-16 07:12:23 +00:00
Stefan Schantl
4eb6ba2bd5 poppler: Fix rootfile.
libpoppler.so.120.0.0 contains all the functions and symbols which
are required by the tools linked against it.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-05-16 07:12:00 +00:00
Stefan Schantl
691a83f237 libinih: Fix rootfile.
Some tools of the xfsprogs are linked against libinih and therefore
we need to ship those libs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-05-16 07:11:45 +00:00
Stefan Schantl
0f3b6da86d liburcu: Fix rootfile.
At least the xfsprogs is linked agains the urcu libraries and therefore
requires them to run and deal with xfs filesystems.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-05-16 07:11:35 +00:00
Stefan Schantl
e2f4f99e49 update-ids-ruleset: Silent script if no providers settings file exists.
Only try to read-in the providers settings file, in case it exists.
Otherwise the script produces an error message, about the missing file,
each time it gets executed.

Because of the fcron job this would be twice a day in most cases.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-05-13 20:38:45 +00:00
Stefan Schantl
ceb8b07b2c pango: Fix rootfile.
The main libraries libpangocairo and libpangosoft2 accidently have been
marked to be not shipped or part of the system.

They are required by collecty and various other libraries or binaries.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-05-13 20:38:43 +00:00
Peter Müller
9f42266a59 strongswan: Update rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-13 09:22:35 +00:00
Stefan Schantl
8615d42ce7 expat: Fix rootfile.
The libexpat.so.1 file is just a symlink to libexpat.so.1.8.8 which
contains all the functions and symbols required by the binaries, linked
against it. Therefore this file needs to be present on the systems.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-13 09:18:20 +00:00
Peter Müller
27d1dc083e Core Update 168: Ship and restart strongSwan
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-12 18:06:59 +00:00
Peter Müller
b074ebd6ad strongSwan: Update to 5.9.6
See: https://github.com/strongswan/strongswan/releases/tag/5.9.6

Since this addresses security issues, and also with regards to reports
such as https://community.ipfire.org/t/core-update-167-ipsec-issue/7893,
I take the liberty to push this straight into Core Update 168.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-12 18:04:52 +00:00
Peter Müller
1ad192722a intel-microcode: Update to 20220510
Please refer to https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220510
for further details.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-12 17:53:50 +00:00
Peter Müller
6758499749 Core Update 168: Ship core-files
https://community.ipfire.org/t/core-168-testing-working/7901/7

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-12 17:27:34 +00:00
Peter Müller
91f1aaaa86 nagios-plugins: Bump package version for OpenLDAP update
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-10 14:12:53 +00:00
Peter Müller
64fb91fedf Core Update 168: Ship necessary dependencies
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-10 14:12:21 +00:00
Peter Müller
7dc85dec94 Core Update 168: Ship coreutils
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-10 13:56:59 +00:00
Peter Müller
672582488b Core Update 168: Ship GnuPG
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-10 13:54:25 +00:00
Stefan Schantl
0e48c84c42 suricata: Perform ruleset update every 12 hours.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 14:24:44 +00:00
Peter Müller
3b92642427 Update rootfiles
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 14:16:10 +00:00
Peter Müller
dc871930f6 Core Update 168: Ship pakfire.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 13:14:16 +00:00
Leo-Andres Hofmann
2b5253bbbb pakfire.cgi: Cosmetic fixes
Add formatting to improve readability of dependencies list header.

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Acked-by: Peter Müller <peter.muelle@ipfire.org>
2022-05-08 13:13:21 +00:00
Leo-Andres Hofmann
3706e0a5b3 pakfire.cgi: Discard tac stderr output
Prevents meaningless "broken pipe" messages in the httpd error log.

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Acked-by: Peter Müller <peter.muelle@ipfire.org>
2022-05-08 13:13:21 +00:00
Leo-Andres Hofmann
85d570843e pakfire.cgi: Implement Post/Redirect/Get pattern
Refreshing the Pakfire page may cause a command to be
executed multiple times and induce odd errors.

This patch implements a HTTP 303 redirect after form processing,
which causes the browser to discard the POST form data.
Navigating backward or reloading the page now does not trigger
multiple executions anymore.

Fixes: #12781

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Acked-by: Peter Müller <peter.muelle@ipfire.org>
2022-05-08 13:13:21 +00:00
Leo-Andres Hofmann
3cdb83939b pakfire.cgi: Notify user if Pakfire is already performing a task
Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Acked-by: Peter Müller <peter.muelle@ipfire.org>
2022-05-08 13:13:21 +00:00
Leo-Andres Hofmann
4b5d1f3001 pakfire.cgi: Show error and log messages earlier
The main page cannot be used while an installation is running.
Therefore it makes more sense to generate the log output first.

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Acked-by: Peter Müller <peter.muelle@ipfire.org>
2022-05-08 13:13:20 +00:00
Leo-Andres Hofmann
0f506a130c pakfire.cgi: Fix indentation
Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Acked-by: Peter Müller <peter.muelle@ipfire.org>
2022-05-08 13:13:20 +00:00
Leo-Andres Hofmann
cd521e78b8 pakfire.cgi: Separate command processing and HTML generation
Move most of the command execution away from the HTML output.
This makes it easier to modify or extend individual commands.

Also load Pakfire settings earlier to ensure that they are
available during command execution.

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Acked-by: Peter Müller <peter.muelle@ipfire.org>
2022-05-08 13:13:20 +00:00
Peter Müller
c7105c6e66 spectre-meltdown-checker: Update to 0.45
Please refer to https://github.com/speed47/spectre-meltdown-checker/releases/tag/v0.45
for the release announcements of this version.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 12:05:53 +00:00
Peter Müller
d79814485f Core Update 168: Delete orphaned symlinks to Suricata ruleset updater
Reported-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 12:03:18 +00:00
Peter Müller
fd1e3e3c74 Core Update 168: Stop services before extracting files
https://lists.ipfire.org/pipermail/development/2022-May/013398.html

On a general note, we should do so for every Core Update, as it is more
sane to stop services before deleting or overwriting any files.

Reported-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 12:00:10 +00:00
Peter Müller
0ab31dfdb1 make.sh: Sigh, bump core update version
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 11:42:19 +00:00
Peter Müller
3e2e9c1593 Core Update 168: Ship intel-microcodes and rebuild initrds
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 11:41:09 +00:00
Peter Müller
822076e0c2 intel-microcode: Update to 20220419
Please refer to https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220419
for the release announcement.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 11:24:06 +00:00
Peter Müller
40811ff383 Suricata: Install Core Update 167 converter script
My fault, again. :-/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-08 09:01:24 +00:00
Peter Müller
99a79bcbd8 Revert "Core Update 168: Ship boost and delete orphaned libraries"
This reverts commit 3bd471b820.
2022-05-05 21:17:47 +00:00
Peter Müller
568215c84b Revert "boost: Fix rootfile entries that referred to python3.8 instead of 3.10"
This reverts commit 05a1fe1362.

For some reason, the rootfile changes introduced with this patch break
the build, as they do not seem to be present. Needs further
investigation.
2022-05-05 21:16:45 +00:00
Peter Müller
5ecf056d52 Drop libusb-compat
This was solely needed for NUT, which has now been updated, and does not
require an older libusb version to be carried around.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 16:47:44 +00:00
Adolf Belka
b2f707cb02 nut: Update to version 2.8.0
- Update from version 2.7.4 to 2.8.0
- 2.7.4 was released in 2016 and since then not a lot of progress was made with it but
   since the start of 2022 new work on nut has ocurred culminating in this release
- Update of rootfile
- Ran find-dependencies on the old libraries due to the sobump to confirm that nothing
   else than nut used them, which was the case.
- Changelog
	After a long and windy trip since the last official release v2.7.4 half a dozen
         years ago, we the community, contributors and maintainers are proud to announce
         at last the general availability of NUT v2.8.0!
	As always, the new release includes numerous new drivers, sub-drivers, protocols
         and bug-fixes, with many companies and individuals chipping in with contributions
         of code.Thanks to everyone involved in making this happen, inspiring the changes,
         and providing the open-source friendly infrastructure.
	This release also culminates a significant effort in improvements of NUT QA and
         CI, and as a result -- in codebase quality and portability across a decade or
         two of recent platforms, third-party tools and other dependencies. As a side
         effect, public API (in headers and libraries) has changed a bit, hence a new
         semantic "minor" number is claimed for this major body of work.
	During this time, the https://networkupstools.org/ web site has changed to a
         rolling-release model to serve current information to match the evolving
         codebase. There are now special Sub-sites for historic releases to keep
         documentation snapshots relevant for users of packages which are typically based
         on official NUT releases.
	We recognize that NUT is an important piece of infrastructure which gets built
         into all sorts of devices, projects and operating systems -- some of which the
         team never heard of until they pop up in a question, and others we haven't heard
         of for years -- so we take a seriously omnivorous stance towards covering many
         versions and implementations of compiler suites, C/C++ revisions, make programs,
         shell and other scripted language interpreters, OSes and CPUs, and other similar
         variables tamed with our new NUT CI farm test matrix dynamically driven by
         currently registered build agents and their declared capabilities.
	Sections in the NEWS and UPGRADING files about changes since last release are
         several pages long, so would not all be repeated here. A few important
         highlights for distribution packagers and custom builders follow, however:
	    NUT now supports more i2c and modbus devices, as well as libusb-1.0 support
             as an alternative to earlier libusb-0.1 (so new dependency-based categories
             of packages for drivers may be due);
	    NUT Python modules and scripts (e.g. NUT-Monitor variants) should work with
             python-2.7 and with python-3.x, so covering historic distro releases as
             well as new ones (and so your distro can deliver one or both, probably in
             several packages with different dependencies in the latter case);
	    NUT provides revised reference systemd and SMF service unit definitions,
             including support of drivers wrapped into individual service instances with
             varying dependencies based on different media required (networked stack, USB
             stack, etc.), and many daemons include -F option for running "in foreground"
             to avoid extra forking after one already done by a service framework - you
             may want to use those in your packaged deliverables;
	    NUT newly provides the "nut-driver-enumerator" script and service, which
             allows it to follow edition of ups.conf and dynamically define+(re)start and
             stop+undefine service instances for drivers - there are several ways it can
             be integrated for different use-cases;
	    There are several new configuration keywords and CLI options - so while new
             NUT builds should work with old configs and scripts, the opposite is not
             necessarily true (old binaries may reject configurations taking advantage
             of new features);
	    There are several new protocol keywords - but old and new NUT daemons (data
             server and clients) should be able to communicate both ways;
	    It is assumed that API/ABI changes may require third-party NUT clients
             (library consumers of libnutclient, libupsclient, libnutscan... -- their
             version info was bumped accordingly) to get rebuilt, in order to work with
             the new NUT release in a stable fashion;
	    The dummy-ups driver used in automated testing now processes *.dev filename
             patterns once and does not loop, like it still does for *.seq and other
             files (by default);
	    USB code is now more strict about logical minimum/maximum ranges for data
             reported from devices, and some devices were already found to make mistakes
             - so there is also a mechanism for turning a blind eye to known issues and
             fix-up such report descriptors to produce intended sane values;
	    New documentation page docs/config-prereqs.txt highlights packaged
             dependencies installable on a large range of platforms to build as much of
             NUT as possible (incidentally, ones NUT CI farm uses to test every iteration);
	    Finally, we hope that NUT codebase might be able to cater for everyone "out
             of the box" (it also simplifies local builds from GitHub sources on any
             systems, for troubleshooting and checking pre-release enhancements): if you
             as a packager have to apply patches for your distribution, give it a thought
             -- whether they address a common issue best solved upstream once and behave
             similarly for everyone (and conversely, if your platform can do with
             existing solutions already tracked in the NUT version du-jour). PRs welcome!
             Or at least Wiki entries to list all the distro efforts for cross-pollination

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 16:44:38 +00:00
Peter Müller
b6fe8ee88d Run ./make.sh update-contributors
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 16:24:20 +00:00
Peter Müller
5b1299f717 oinkmaster: Delete remnants
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-05 16:22:51 +00:00