Commit Graph

17251 Commits

Author SHA1 Message Date
Peter Müller
970e8547be location-functions.pl: Recognise XD / LOC_NETWORK_FLAG_DROP
This enables creating firewall rules using the special country code "XD"
for hostile networks safe to drop and ipinfo.cgi to display a meaningful
text for IP addresses having this flag set.

At the moment, the "LOC_NETWORK_FLAG_DROP" is not yet populated, but
will be in the future (as soon as libloc 0.9.9 is released and running
in production).

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-19 07:02:43 +01:00
Peter Müller
73efd9b7dc libloc: update to 0.9.8
Please refer to
https://git.ipfire.org/?p=location/libloc.git;a=commit;h=a138fbfec116981407588c05127b8e7c02e29ae5
for further information on this release.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2021-11-19 07:02:23 +01:00
Arne Fitzenreiter
191347cc46 core161: add ovpnmain.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-04 08:04:20 +00:00
Stefan Schantl
cc79d2810f ovpnmain.cgi: Do not interpret $? as error code of move()
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-11-04 07:51:19 +00:00
Arne Fitzenreiter
9d418afb8c Merge branch 'next' 2021-10-31 13:48:29 +00:00
Arne Fitzenreiter
f8dce3555a IO-Stringy: download from IPFire server
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-30 18:06:36 +02:00
Arne Fitzenreiter
0049737e26 core161: remove dropped client175 addon
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-30 14:54:53 +00:00
Adolf Belka
2d78849475 avahi: Install backup definition - bug#12714
- Addition of backup definition install into lfs file
- Update of rootfile

Fixes: 12714
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-30 14:48:21 +00:00
Adolf Belka
71b06657f9 backup definitions: housekeeping to remove orphaned definitions
- check_mk_agent, client175 & lcr are addons that have been removed so the backup
   definitions are no longer required.
- dma is not a package but a core program and has its config backup requirements
   built into the core backup include file so the addon backup definition is not
   used or needed.
- No issues found in the build after these files were removed.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-30 14:47:21 +00:00
Arne Fitzenreiter
8ca80092c2 core161: disconnect before replace pppd
after replacing a running pppd connectd is failing until next boot so stop pppd before updating.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-29 21:58:32 +02:00
Arne Fitzenreiter
869d9788f1 core161: delete more orphaned shared obbject files
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-29 17:14:49 +02:00
Arne Fitzenreiter
f625c4207e core161: reconnect only if ppp is used
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-29 13:55:43 +02:00
Arne Fitzenreiter
635e22e024 core161: fix typo in path
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-29 12:02:24 +02:00
Arne Fitzenreiter
3c2b8c6cd9 gcc: enable parallel build
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-29 10:07:15 +02:00
Arne Fitzenreiter
09b36b16c3 core161: reconnect after firewall restart
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-29 10:06:23 +02:00
Arne Fitzenreiter
967e2973b4 kernel: armv6l rootfile update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-29 10:03:40 +02:00
Arne Fitzenreiter
edb856c4af core161: restart firewall to update IPSec nat exclude rule
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-28 19:24:08 +02:00
Arne Fitzenreiter
4c19c5b6ec core161: qosctrl need full path to start
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-28 19:23:00 +02:00
Peter Müller
409b263f9f Core Update 161: fix typo (stronswan != strongswan)
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-27 22:41:58 +00:00
Arne Fitzenreiter
832490f063 kernel: update to 5.10.76
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-28 00:39:07 +02:00
Arne Fitzenreiter
a7b4f84711 general-functions: remove comment that system_output also in speed.cgi
this functions was removed from speed.cgi by reading kernel netowrk
statistics instead of parsing ip -s show ...

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 16:59:08 +00:00
Peter Müller
95539a589e Remove orphaned ddns patches
These are no longer necessary, since ddns 0.14 comes with both of them
applied.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 16:58:11 +00:00
Adolf Belka
642318cbaa git: Update to version 2.33.1
- Update from 2.31.0 to 2.33.1
- Update rootfile
- Changelog is too long to show here. The details can be found in the 2.31.1.txt,
   2.32.0.txt, 2.33.0.txt and 2.33.1.txt files in the Documentation/RelNotes
   directory in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 16:57:48 +00:00
Adolf Belka
9d72f4b059 htop: Update to version 3.1.1
- Update from 3.0.5 to 3.1.1
- Update of rootfile not required
- Changelog is too long to include here. Full details can be found at
   https://github.com/htop-dev/htop/blob/main/ChangeLog

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 16:57:06 +00:00
Arne Fitzenreiter
b88f6c476b core161: add curl
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 16:55:26 +00:00
Adolf Belka
be52d700f1 curl: Update to version 7.79.1
- Update from 7.78.0 to 7.79.1
- Update of rootfile not required
- Changelog
  Fixed in 7.79.1 - September 22 2021
   Bugfixes:
    Curl_http2_setup: don't change connection data on repeat invokes
    curl_multi_fdset: make FD_SET() not operate on sockets out of range
    dist: provide lib/.checksrc in the tarball
    FAQ: add GOPHERS + curl works on data, not files
    hsts: CURLSTS_FAIL from hsts read callback should fail transfer
    hsts: handle unlimited expiry
    http: fix the broken >3 digit response code detection
    strerror: use sys_errlist instead of strerror on Windows
    test1184: disable
    tests/sshserver.pl: make it work with openssh-8.7p1
  Fixed in 7.79.0 - September 15 2021
   Changes:
    bearssl: support CURLOPT_CAINFO_BLOB
    http: consider cookies over localhost to be secure
    secure transport: support CURLINFO_CERTINFO
   Bugfixes:
    CVE-2021-22945: clear the leftovers pointer when sending succeeds
    CVE-2021-22946: do not ignore --ssl-reqd
    CVE-2021-22947: reject STARTTLS server response pipelining
    ares: use ares_getaddrinfo()
    asyn-ares.c: move all version number checks to the top
    auth: do not append zero-terminator to authorisation id in kerberos
    auth: properly handle byte order in kerberos security message
    auth: use sasl authzid option in kerberos
    auth: we do not support a security layer after kerberos authentication
    BINDINGS.md: update links to use https where available
    build: fix compiler warnings
    c-hyper: deal with Expect: 100-continue combined with POSTFIELDS
    c-hyper: fix header value passed to debug callback
    c-hyper: handle HTTP/1.1 => HTTP/1.0 downgrade on reused connection
    c-hyper: initial step for 100-continue support
    c-hyper: initial support for "dumping" 1xx HTTP responses
    c-hyper: remove the hyper_executor_poll() loop from Curl_http
    CI/cirrus: reduce compile time with increased parallism
    CI: use GitHub Container Registry instead of Docker Hub
    cirrus: Add FreeBSD 13.0 job and disable sanitizer build
    cmake: avoid poll() on macOS
    cmake: sync CURL_DISABLE options
    codeql: fix error "Resource not accessible by integration"
    compressed.d: it's a request, not an order
    config.d: escape the backslash properly
    config.d: note that curlrc is used even when --config
    config: get rid of the unused HAVE_SIG_ATOMIC_T et. al.
    configure.ac: revert bad nghttp2 library detection improvements
    configure: error out if both ngtcp2 and quiche are specified
    configure: make --disable-hsts work
    configure: set classic mingw minimum OS version to XP
    configure: tweak nghttp2 library name fix
    connect: get local port + ip also when reusing connections
    connect: remove superfluous conditional
    curl-openssl.m4: check lib64 for the pkg-config file
    curl-openssl.m4: show correct output for OpenSSL v3
    curl.1: mention "global" flags
    curl.1: provide examples for each option
    curl: add warning for ignored data after quoted form parameter
    curl: add warning for incompatible parameters usage
    curl: better error message when -O fails to get a good name
    curl: stop retry if Retry-After: is longer than allowed
    curl_easy_setopt.3: improve the string copy wording
    Curl_hsts_loadcb: don't attempt to load if hsts wasn't inited
    curl_setup.h: sync values for HTTP_ONLY
    curl_url_get.3: clarify about path and query
    CURLMOPT_TIMERFUNCTION.3: remove misplaced "time"
    CURLOPT_DOH_URL.3: CURLOPT_OPENSOCKETFUNCTION is not inherited
    CURLOPT_SSL_CTX_*.3: tidy up the example
    CURLOPT_UNIX_SOCKET_PATH.3: remove nginx reference, add see also
    docs/MQTT: update state of username/password support
    docs: remove experimental mentions from HSTS and MQTT
    docs: the security list is reached at security at curl.se now
    easy: use a custom implementation of wcsdup on Windows
    examples/*hiperfifo.c: fix calloc arguments to match function proto
    examples/cookie_interface: avoid printfing time_t directly
    examples/cookie_interface: fix scan-build printf warning
    examples/ephiperfifo.c: simplify signal handler
    FAQ: add two dev related questions
    getparameter: fix the --local-port number parser
    happy-eyeballs-timeout-ms.d: polish the wording
    hostip: Make Curl_ipv6works function independent of getaddrinfo
    http2: Curl_http2_setup needs to init stream data in all invokes
    http2: revert a change that broke upgrade to h2c
    http2: revert call the handle-closed function correctly on closed stream
    http: disallow >3-digit response codes
    http: ignore content-length if any transfer-encoding is used
    http_proxy: clear 'sending' when the outgoing request is sent
    http_proxy: fix the User-Agent inclusion in CONNECT
    http_proxy: fix user-agent and custom headers for CONNECT with hyper
    http_proxy: only wait for writable socket while sending request
    INTERNALS: bump c-ares requirement to 1.16.0
    INTERNALS: c-ares has a new home: c-ares.org
    lib: don't use strerror()
    libcurl-errors.3: clarify two CURLUcode errors
    limit-rate.d: clarify base unit
    mailing lists: move from cool.haxx.se to lists.haxx.se
    mbedtls: avoid using a large buffer on the stack
    mbedTLS: initial 3.0.0 support
    mbedtls_threadlock: fix unused variable warning
    mksymbolsmanpage.pl: Fix showing symbol's last used version
    mksymbolsmanpage.pl: match symbols case insenitively
    multi: fix compiler warning with `CURL_DISABLE_WAKEUP`
    ngtcp2: compile with the latest ngtcp2 and nghttp3
    ngtcp2: fix build with ngtcp2 and nghttp3
    ngtcp2: remove the acked_crypto_offset struct field init
    ngtcp2: replace deprecated functions with nghttp3_conn_shutdown_stream_read
    ngtcp2: reset the oustanding send buffer again when drained
    ngtcp2: rework the return value handling of ngtcp2_conn_writev_stream
    ngtcp2: stop buffering crypto data
    ngtcp2: utilize crypto API functions to simplify
    openssl: annotate SSL3_MT_SUPPLEMENTAL_DATA
    openssl: when creating a new context, there cannot be an old one
    opt-docs: make sure all man pages have examples
    opt-docs: verify man page sections + order
    opts docs: unify phrasing in NAME header
    output.d: add method to suppress response bodies
    page-header: add GOPHERS, simplify wording in the 1st para
    progress: fix a compile warning on some systems
    progress: make trspeed avoid floats
    runtests: add option -u to error on server unexpectedly alive
    schannel: Work around typo in classic mingw macro
    scripts: invoke interpreters through /usr/bin/env
    setopt: enable CURLOPT_IGNORE_CONTENT_LENGTH for hyper
    strerror.h: remove the #include from files not using it
    symbols-in-versions: fix CURLSSLBACKEND_QSOSSL last used version
    test1138: remove trailing space to make work with hyper
    test1173: check references to libcurl options
    test1280: CRLFify the response to please hyper
    test1565: fix windows build errors
    test365: verify response with chunked AND Content-Length headers
    tests/*server.pl: flush output before executing subprocess
    tests/*server.py: remove pidfile on server termination
    tests/runtests.pl: cleanup copy&paste mistakes and unused code
    tests/server/*.c: align handling of portfile argument and file
    tests: adjust the tftpd output to work with hyper mode
    tests: be explicit about using 'python3' instead of 'python'
    tests: enable test 1129 for hyper builds
    tests: make three tests pass until 2037
    tool/tests: fix potential year 2038 issues
    tool_operate: Fix --fail-early with parallel transfers
    url: fix compiler warning in no-verbose builds
    urlapi.c:seturl: assert URL instead of using if-check
    vtls: fix typo in schannel_verify.c
    winbuild/README.md: clarify GEN_PDB option
    wolfssl: clean up wolfcrypt error queue
    write-out.d: clarify size_download/upload
    x509asn1: fix heap over-read when parsing x509 certificates

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 16:54:28 +00:00
Arne Fitzenreiter
c04ebdccee core161: add strongswan changes to update.
this core also stops strongwan before extracting because the updown script
is changed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 16:52:15 +00:00
Peter Müller
c4c7563335 strongSwan: update to 5.9.4
Release notes as per https://github.com/strongswan/strongswan/releases/tag/5.9.4:

    Fixed a denial-of-service vulnerability in the gmp plugin that was caused by an integer overflow when processing RSASSA-PSS signatures with very large salt lengths. This vulnerability has been registered as CVE-2021-41990.
    Please refer to our blog for details.
    Fixed a denial-of-service vulnerability in the in-memory certificate cache if certificates are replaced and a very large random value caused an integer overflow. This vulnerability has been registered as CVE-2021-41991.
    Please refer to our blog for details.
    Fixed a related flaw that caused the daemon to accept and cache an infinite number of versions of a valid certificate by modifying the parameters in the signatureAlgorithm field of the outer X.509 Certificate structure.
    AUTH_LIFETIME notifies are now only sent by a responder if it can't reauthenticate the IKE_SA itself due to asymmetric authentication (i.e. EAP) or the use of virtual IPs.
    Several corner cases with reauthentication have been fixed (48fbe1d, 36161fe, 0d373e2).
    Serial number generation in several pki sub-commands has been fixed so they don't start with an unintended zero byte (#631).
    Loading SSH public keys via vici has been improved (#467).
    Shared secrets, PEM files, vici messages, PF_KEY messages, swanctl configs and other data is properly wiped from memory.
    Use a longer dummy key to initialize HMAC instances in the openssl plugin in case it's used in FIPS-mode (#557).
    The --enable-tpm option now implies --enable-tss-tss2 as the plugin doesn't do anything without a TSS 2.0.
    libtpmtss is initialized in all programs and libraries that use it.
    Migrated testing scripts to Python 3.
    The testing environment uses images based on Debian bullseye by default (support for jessie was removed).

To my understanding, IPFire is not affected by CVE-2021-41990, as we do
not support creation of IPsec connections using RSASSA-PSS (please
correct me if we do :-). In contrast, CVE-2021-41991 affects IPFire
installations indeed.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 16:46:52 +00:00
Arne Fitzenreiter
aa60fd7b3e strongswan: remove unneded -j RETURN rules
after removimg the mark rules this rules are useless because they should skip expensive policy matches
that now are removed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 18:43:45 +02:00
Arne Fitzenreiter
98d78fa824 makeqosscript: fix typo in comment.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 15:46:07 +02:00
Arne Fitzenreiter
a38c882bfb strongswan: remove CONNMARK rules.
the marks are not used by firewall and QoS anymore.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 13:45:39 +02:00
Arne Fitzenreiter
a8dd6e98ba speed.cgi: replave parsing of ip show output
latest ipfroute2 update change the output so this repkace it by reading /sys/class/net/*/statistics

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 12:58:10 +02:00
Arne Fitzenreiter
36b00b8ed1 makeqosscript: replace marks b< ipt policy match for upsec
this is more reliable at not loose some connections.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-25 11:46:06 +02:00
Arne Fitzenreiter
66bc17dcc1 iproute2: build after iptables to get ipt filters for tc
to proper filter IPSec im QoS without using mark or connmark i need ipt filters
for tc which are only build if iptables are build prior iproute2.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-24 17:06:34 +02:00
Arne Fitzenreiter
572249bbf3 core161: add iproute2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-24 12:13:20 +00:00
Adolf Belka
05b6dd44be iproute2: Update version to 5.14.0
- Update from 5.13.0 to 5.14.0
- Update rootfile
- Changelog
   Alexander Mikhalitsyn (2):
      ip route: ignore ENOENT during save if RT_TABLE_MAIN is being dumped
      libnetlink: check error handler is present before a call
   Andrea Claudi (9):
      tc: q_ets: drop dead code from argument parsing
      lib: bpf_legacy: avoid to pass invalid argument to close()
      dcb: fix return value on dcb_cmd_app_show
      dcb: fix memory leak
      tipc: bail out if algname is abnormally long
      tipc: bail out if key is abnormally long
      tc: htb: improve burst error messages
      lib: bpf_legacy: fix potential NULL-pointer dereference
      lib: bpf_glue: remove useless assignment
   Ariel Levkovich (2):
      tc: f_flower: Add option to match on related ct state
      tc: f_flower: Add missing ct_state flags to usage description
   Asbjørn Sloth Tønnesen (2):
      tc: pedit: parse_cmd: add flags argument
      tc: pedit: add decrement operation
   Christian Schürmann (1):
      man8/ip-tunnel.8: fix typo, 'encaplim' is not a valid option
   David Ahern (6):
      Update kernel headers
      Update kernel headers
      config.mk: Rerun configure when it is newer than config.mk
      Update kernel headers
      Update kernel headers
      Import wwan.h uapi file
   Dmytro Linkin (3):
      devlink: Add helper function to validate object handler
      devlink: Add port func rate support
      devlink: Add ISO/IEC switch
   Eric Dumazet (1):
      tc: fq: add horizon attributes
   Feng Zhou (1):
      lib/bpf: Fix btf_load error lead to enable debug log
   Gal Pressman (2):
      rdma: update uapi headers
      rdma: Add copy-on-fork to get sys command
   Gokul Sivakumar (3):
      bridge: reorder cmd line arg parsing to let "-c" detected as "color" option
      bridge: fdb: don't colorize the "dev" & "dst" keywords in "bridge -c fdb"
      man: bridge: fix the typo to change "-c[lor]" into "-c[olor]" in man page
   Guillaume Nault (1):
      utils: bump max args number to 512 for batch files
   Hangbin Liu (3):
      configure: add options ability
      configure: convert LIBBPF environment variables to command-line options
      ip/bond: add arp_validate filter support
   Heiko Thiery (1):
      lib/fs: fix issue when {name,open}_to_handle_at() is not implemented
   Hoang Le (1):
      tipc: call a sub-routine in separate socket
   Jacob Keller (1):
      devlink: fix infinite loop on flash update for drivers without status
   Jakub Kicinski (3):
      ip: align the name of the 'nohandler' stat
      ip: dynamically size columns when printing stats
      ss: fix fallback to procfs for raw sockets
   Jethro Beekman (1):
      ip: Add nodst option to macvlan type source
   Jianguo Wu (1):
      mptcp: make sure flag signal is set when add addr with port
   Lahav Schlesinger (1):
      ipmonitor: Fix recvmsg with ancillary data
   Martynas Pumputis (1):
      libbpf: fix attach of prog with multiple sections
   Neta Ostrovsky (3):
      rdma: Update uapi headers
      rdma: Add context resource tracking information
      rdma: Add SRQ resource tracking information
   Paolo Lungaroni (2):
      seg6: add counters support for SRv6 Behaviors
      seg6: add support for SRv6 End.DT46 Behavior
   Parav Pandit (2):
      devlink: Add optional controller user input
      devlink: Show port state values in man page and in the help command
   Peilin Ye (1):
      tc/skbmod: Remove misinformation about the swap action
   Phil Sutter (1):
      tc: u32: Fix key folding in sample option
   Roi Dayan (2):
      police: Add support for json output
      police: Fix normal output back to what it was
   Sergey Ryazanov (2):
      iplink: add support for parent device
      iplink: support for WWAN devices
   Stephen Hemminger (6):
      lib: remove blank line at eof
      uapi: update kernel headers from 5.14-rc1
      libnetlink: cosmetic changes
      uapi: headers update
      uapi: update neighbour.h
      v5.14.0
   Tyson Moore (1):
      tc-cake: update docs to include LE diffserv

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-24 12:11:08 +00:00
Peter Müller
10941827db Core Update 161: Delete shared object files leftover from pppd 2.4.8
Rolled forward from commit 488e29e033.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-23 07:59:46 +00:00
Arne Fitzenreiter
01141196f6 core161: ship azure-setup
with core158 was a bug fixed that local hyperV installations wait to long
for the metadata service for azure but it was not shipped to existing
installations.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:18:46 +00:00
Arne Fitzenreiter
80a1f80591 core161: add speed.cgi
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:16:32 +00:00
Arne Fitzenreiter
110d4c8106 speed.cgi: reduce system load by copying two general-functions.
include general-functions.pl load and initialize many subfunctions that are not
needed by speed.cgi which was executed very often.
So this reduce the system load significant if webif was open in browser
and ajax-speed display enabled.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:15:34 +00:00
Adolf Belka
6befc952cc minidlna: Add backup capability - bug#12710
- Backup definition missing - created ro backup config file
- Update of rootfile
- Addition of backup definition install into lfs file
- Addition of restore and backup statements into install.sh and uninstall.sh pak scripts

Fixes: 12710
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:14:43 +00:00
Arne Fitzenreiter
ada4f4cc99 core161: add gd changes
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:11:35 +00:00
Adolf Belka
5f965f36f0 GD-Graph: Update to version 1.54
- Update from 1.4308 (2006) to 1.54 (2016 - latest version)
- Update of rootfile not required
- Changelog
   1.54 21 Nov 2016
     - Disable two Y axes alignment when any y[12]_{min,max}_value is defined
       RT#62665
   1.53 08 Jul 2016
     - Fix 'Illegal division by zero' when x_min_value and x_max_value
       are defined and x_tick_number set to 'auto' RT#73185
       Thanks to Bob Rogers, https://github.com/ruz/GDGraph/pull/12
   1.52 28 Jan 2016
     - y1_min_range and y2_min_range instead of min_range_1 and min_range_2,
       niether were documented before.
     - Update documentation in regards to all *_min_range options available.
   1.51 27 Dec 2015
     - fix shadows rendering on cumulative bar charts
       thanks to https://github.com/Tordek
       see https://github.com/ruz/GDGraph/pull/4
   1.50 27 Dec 2015
     - run samples as part of test suite to make sure no sample crashes
       thanks to https://github.com/tynovsky
     - properly define test requirements using newer MakeMaker
   1.49 11 Mar 2015
     - fix to Z-axis color filling in 3D pie charts (Debian Bug #489184)
     - bump ExtUtils::MakeMaker dependency
     - tiny improvement in the code of the samples
   1.48 02 Aug 2013
     - no code changes, just release enginering cleanup
     - adjust MANIFEST.SKIP file so MANIFEST can be generated
       once again
     - ship sample58.pl file, so `make samples` stop failing
     - mention the current and past maintainers in META files
       as authors
     - use newer CPAN::Meta and ExtUtils::MakeMaker, older
       versions generated META files without runtime prerequisites
   1.47 28 Jun 2013
     - experimental hide_overlapping_values option for bar graphs
   1.46 26 Jun 2013
     - This release is based on old work by Martien that was sitting
       in his repo
     - x_last_label_skip option
     - new samples and tweaks to old
   1.45 21 Jun 2013
     - read DISTRIBUTION STATUS in perldoc GD::Graph
     - no code changes since 1.44
   1.44 25 Apr 2007
     - Patched bugs 21610, 20792, 20802, 23755 and 22932
     - Updated POD to clarify current maintenance status, and encourage
       bug reporting via RT (and to point out some external help resources)

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:04:31 +00:00
Adolf Belka
6cdc5164ff ExtUtils-PkgConfig: Build of this required for latest version of perl-GD
- ExtUtils-PkgConfig is required when building perl-GD
- lfs and rootfile created
- All rootfile entries commented out as only required for building of perl-GD
- added to make.sh file just before perl-GD

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:04:09 +00:00
Adolf Belka
0aca0b419f perl-GD: Update to version 2.73
- Update from 2.35 (2006) to 2.73 (2020)
- Update of rootfile
- Updated version of perl-GD required ExtUtils-PkgConfig for build. Seperate patch
   to build that is part of this series
- Changelog
   2.73    * allow --options override the libgd options. Not recommended.
             See GH #33 and RT #130045
   2.72    * fix CVE 2019-6977 colorMatch for older unpatched libgd versions.
             This is a severe security problem, an exploitable heap-overflow.
             See https://nvd.nist.gov/vuln/detail/CVE-2019-6977
   2.71    * skip Test::Fork on freebsd (GH #25)
   2.70    * fixes for hardened CCFLAGS with -Werror (RT #128167)
   2.69    * little spelling error, GH #29 Xavier Guimard
   2.68    * fix GD::Polygon->clear, RT #124463 Michael Cain
   2.67    * fix thread-safety for GD::Simple %COLORS (#26 melak)
           * fix arc start-angle docs, RT #123277 Andrew G Gray
           * improve setBrush docs, RT #123194 Andrew G Gray
           * improve StringFT docs, RT #123193
           * replace MacOSX by darwin, and not by Mac OS X/macOS as suggested
             in PR #24
           * add GD::Image->_file method as suggested in RT #60488 by Kevin Ryde,
             also the helper GD::supportsFileType
   2.66    * throw proper error on newFrom* with not-existing file
           * add t/transp.t from RT #40525
           * Improve RT #54366 multiple gd.h warning
           * better doc for GD::Simple->arc
           * fix ANIMGIF with libgd 2.3.0-dev
   2.65    * fix --gdlib_config_path to accept an argument (fperrad)
   2.64    * Update doc for LIBGD_VERSION()
           * Fix 5.6.2, which does not have float in its typemap
   2.63    * renamed VERSION() to LIBGD_VERSION(), RT #121307.
             It was treated magically by "use GD 2.18"
   2.62    * fixed wrong <5.14 code generated with ExtUtils::Constants
             RT #121297. Don't generate const-xs.inc, only when missing.
           * add -liconv on hpux also (our pkgconfig parser cannot handle it)
   2.61    * add CONFIGURE_REQUIRES META
           * add --gdlib_config_path
           * add Image Filters: scatter, pixelate, negate, grayscale, brightness,
             contrast, color, selectiveBlur, edgeDetectQuick, gaussianBlur, emboss,
             meanRemoval, smooth, copyGaussianBlurred
           * add palette methods: createPaletteFromTrueColor,
             neuQuant (but discouraged), colorMatch.
           * add interpolation methods: copyScale, copyRotateInterpolated,
             interpolationMethod.
           * add double GD::VERSION
           * add all gd.h constants
   2.60    * add missing methods newFromWBMP, newFromXbm,
             (RT #68784) and some missing docs
           * Add --lib_fontconfig_path, --fcgi options
           * rewrote most of the XS code
           * cleanup Makefile.PL #20
   2.59    * error on failing libgd calls
           * fix colorClosestAlpha, colorAllocateAlpha
           * add missing documentation
   2.58    * fix VERSION_STRING for 2.0.x
           * honor --lib_gd_path specific gdlib-config
           * Loosen the comparison tests with GDIMAGETYPE ne gd2
           * Improve gdlib-config parsing (PR #17), esp. with 2.0.34
   2.57    * fix Jpeg magic number detection RT #26146
           * fix RGB - HSV roundtrips: RT #120572 by J2N-FORGET
           * fix -print-search-dirs errors RT #106265
           * co-maint to rurban
           * add hv_fetchs, CI smokers
           * add GD::VERSION_STRING api
   2.56_03 * add alpha method
           * improve option handling
           * fix meta data
   2.56_02 * fix feature extraction >= 2.2 [RT #119459]
   2.56_01 * rm Build.PL, fix permissions, fix for missing gdlib-config
   2.56    * Fix Makefile.PL so that it works again.
   2.55    * Great simplification of regression framework ought to fix make test problems.
           * Replace ExtUtils::MakeMaker script with Module::Build system
	     (just in time for Module::Build to be deprecated).
	   * Remove archaic qd.pl (for creating QuickDraw picts) from distribution.
   2.54	   Patch from yurly@unet.net to fix image corruption in rotate180 when image height is odd.
   2.53	   Points to Gabor Szabo's GD::Simple tutorial, and fix link to repository.
   2.52    Fix regression tests to run on Ubuntu 12.04 64bit.
   2.51	   Fix misleading warning message about location of gd.h file.
   2.50	   Fix gdUseFontConfig so that it can be called as a class method.
   2.49    Add GitHub information to README.
   2.48    Fix compile crash on windows and strawberry (https://rt.cpan.org/Public/Bug/Display.html?id=67990).
   2.47	   Fix compilation on older perl's without the Newxz macros.
   2.46    Added a basic "use" test for GD::Simple
   2.45	   Clarified the GD license. There is now a formal LICENSE file in the package.
   2.44    GD::Group now installed properly.
	   Quenched compiler warning caused by Newxs() calls.
   2.43    Added "transparent" color to GD::Simple.
	   Fixed Makefile so that GD/Image.pm depends both on GD/Image.pm.PLS and .config.cache
   2.42	   Fixed magic number detection to autodetect certain missed jpeg files (thanks to Mike Walker)
   2.41    Added backend support for grouping features in GD::SVG module.
   2.40    ** Do not use - contains a bug **
   2.39	   Makefile.PL will refuse to run if the proper version of libgd is unavailable.
   2.38	   Fixed bizarre warning about /usr/include/gd.h != /usr/include/gd.h.
   2.37	   GD/Image.pm did not bring in croak() properly, meaning that incorrect error messages are printed out when any of the newFromXXX() calls are made.
   2.36	   Instructions on using gdAntiAliased with palette images.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:02:56 +00:00
Adolf Belka
5f71d0a6bf gd: Update to version 2.3.3
- Update from 2.0.33 (2006) to 2.3.3 (Sep 2021)
- Updating gd requires GD-Graph and perl-GD to be updated otherwise the png graphs
   didn't work so all required changes are part of this patch series
- Update rootfile
- Dependencies checked from library so bump. Nothing found.
- Changelog is too large to include here.
   For full details see https://github.com/libgd/libgd/releases

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:02:22 +00:00
Arne Fitzenreiter
726891607b core161: add backup exclude
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 16:00:49 +00:00
Adolf Belka
d2c2025b3d backup/exclude: unbound is missing hosts.conf include after restoring a backup of an older version
- Added unbound.conf to backup/exclude list to fix bug #12441

Fixes: #12441
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 15:59:05 +00:00
Arne Fitzenreiter
bca0fb8147 core161: add ppp changes
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 15:56:53 +00:00
Peter Müller
52764dbe7f Tell pppd not to ask for IPv6 addresses during dial-up
pppd 2.4.9 supports IPv6 and asks for an IPv6 configuration by default.
Setting the received prefix in the kernel will never work, however, as
the rest of IPFire 2.x does not support IPv6.

pppd notices the ISP about this, and at least Otenet (GR) and British
Telecom (several countries) decide to close a dial-up connection then.
German DTAG seems to ignore such errors silently.

This patch adds an option to the pppd call to prevent asking for an
IPv6 configuration, hence avoiding this errors.

To apply this patch, it is necessary to ship ppp 2.4.9 again. Since I
have no access to a testing machine behind an ISP supporting IPv6, this
patch unfortunately is untested.

Fixes: #12651

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-10-22 10:54:21 +00:00