Commit Graph

8321 Commits

Author SHA1 Message Date
Adolf Belka
006f9fda6b python3-outcome: Dependency for python3-trio
Fixes: Bug#12611
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-08-05 09:09:30 +00:00
Adolf Belka
37f8c0617a python3-sortedcontainers: Dependency for python3-trio
Fixes: Bug#12611
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-08-05 09:09:30 +00:00
Adolf Belka
f1e30a702a python3-sniffio: Dependency for python3-trio
Fixes: Bug#12611
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-08-05 09:09:30 +00:00
Adolf Belka
fea3c1eaf4 python3-attrs: Dependency for python3-trio
Fixes: Bug#12611
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-08-05 09:09:30 +00:00
Adolf Belka
d62b0fb202 python3-async_generator: Dependency for python3-trio
Fixes: Bug#12611
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-08-05 09:09:30 +00:00
Adolf Belka
36fab535bf python3-attr: Dependency for python3-trio
Fixes: Bug#12611
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-08-05 09:09:30 +00:00
Adolf Belka
0c161e8cfb python3-trio: Dependency for python3-pyfuse3
Fixes: Bug#12611
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-08-05 09:09:29 +00:00
Adolf Belka
a0b068783c python3-Cython: Required for build of pyfuse3
- rootfile has all entries commented out as not needed for execution only build

Fixes: Bug#12611
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-08-05 09:09:29 +00:00
Adolf Belka
9cb200c4d9 pyfuse3: Install to provide fuse capability for borgbackup
Fixes: Bug#12611
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-08-05 09:09:29 +00:00
Adolf Belka
c02bffe2be borgbackup: Fix Bug#12611 by adding fuse mount capability with pyfuse3
- The addition of pyfuse3 requires a total of 11 python3 module dependencies and the
   addition of python3-Cython during the build
- The other dependencies etc are submitted in the rest of this patch series.

Fixes: Bug#12611
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
2022-08-05 09:09:29 +00:00
Peter Müller
8a0383a7cd libloc: Update database version built into the ISO
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-04 12:33:02 +00:00
Peter Müller
0f006afff2 openvmtools: Update to 12.0.5
Please refer to https://github.com/vmware/open-vm-tools/releases/tag/stable-12.0.5
for the release announcement of this version.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-03 11:00:02 +00:00
Peter Müller
95d0ed0913 qemu-ga: Update to 7.0.0
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-03 10:59:32 +00:00
Peter Müller
86077bafc0 qemu: Update to 7.0.0
Please refer to https://wiki.qemu.org/ChangeLog/7.0 for the changelog of
this version.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-03 10:59:32 +00:00
Peter Müller
7e451c52dc GnuTLS: Update to 3.7.7
Please refer to https://lists.gnupg.org/pipermail/gnutls-help/2022-July/004746.html
the release notes of this version, and https://www.gnutls.org/security-new.html#GNUTLS-SA-2022-07-07
for the accompanying security advisory.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-03 10:57:24 +00:00
Peter Müller
7ee41667d0 Bash: Update to 5.1.16
This is a maintenance release that bundles all the previously added
patches, which have therefore been deleted.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-08-03 10:56:22 +00:00
Peter Müller
f22f1e21e9 mpd: Update to 0.23.8
Full changelog since version 0.23.6:

ver 0.23.8 (2022/07/09)
* storage
  - curl: fix crash if web server does not understand WebDAV
* input
  - cdio_paranoia: fix crash if no drive was found
  - cdio_paranoia: faster cancellation
  - cdio_paranoia: don't scan for replay gain tags
  - pipewire: fix playback of very short tracks
  - pipewire: drop all buffers before manual song change
  - pipewire: fix stuttering after manual song change
  - snapcast: fix busy loop while paused
  - snapcast: fix stuttering after resuming playback
* mixer
  - better error messages
  - alsa: fix setting volume before playback starts
  - pipewire: fix crash bug
  - pipewire: fix volume change events with PipeWire 0.3.53
  - pipewire: don't force initial volume=100%
* support libfmt 9

ver 0.23.7 (2022/05/09)
* database
  - upnp: support pupnp 1.14
* decoder
  - ffmpeg: fix HLS seeking
  - opus: fix missing song length on high-latency files
* output
  - shout: require at least libshout 2.4.0
* mixer
  - pipewire: fix volume restore
  - software: update volume of disabled outputs
* support libiconv

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-03 10:56:01 +00:00
Peter Müller
ef43621772 fmt: Update to 9.0.0
Please refer to https://github.com/fmtlib/fmt/releases/tag/9.0.0 for the
release announcement of this version.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-03 10:56:01 +00:00
Peter Müller
0fe652d886 ninja: Update to 1.11.0
https://groups.google.com/g/ninja-build/c/R2oCyDctDf8/m/-U94Y5I8AgAJ
appears to be the only release note-alike source for this version.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-03 10:55:43 +00:00
Peter Müller
ccadea0918 git: Update to 2.37.1
Please refer to
- https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.37.0.txt
- https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.37.1.txt
for the changes since 2.36.1.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-03 10:54:50 +00:00
Peter Müller
26324a2321 NRPE: Update to 4.1.0
Full changelog:

4.1.0 - 2022-07-18

ENHANCEMENTS

    Add support for OpenSSL 3 (and EL9/Debian 11/Ubuntu 22)
    Allow tcpd/libwrap to be excluded from build when present on the system
    Allow loading of full certificate chains
    Change -u (connection issues return UNKNOWN) to include all SSL-layer failures.
    Disable renegotiation and enforce server cipher order when using SSL
    Verify that private keys match certificates when using SSL

FIXES

    Fixed incorrect default for nasty_metachars in nrpe.cfg
    Fixed incorrect help text for --use-adh
    Fixed potential out-of-bound read when used with IPv6

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-03 10:54:47 +00:00
Adolf Belka
b07b7c8dc3 parted: Update LFS to reflect that parted is no longer an addon
- In 2018 parted was moved from being an addon to being a core program
- The rootfile was moved from rootfiles/packages/ to rootfiles/common/
- The LFS was not updated to remove the PAK_VER etc elements.
- This patch adjusts the LFS file to be in line with being a core program

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-02 15:10:50 +00:00
Peter Müller
bc6384a17b hdparm: Update to 9.64
Changes according to https://sourceforge.net/p/hdparm/news/2022/07/hdparm-964-is-released/:

Fixed bug whereby output from "hdparm --Istdin" would sometimes be truncated.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-08-02 06:47:42 +00:00
Peter Müller
03595939e2 rpcsvc-proto: Update to 1.4.3
NEWS mentions:

Version 1.4.3
* Fix rpcgen build on macos arm64

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-08-02 06:47:20 +00:00
Matthias Fischer
ee90ed8271 unbound: Update to 1.16.2
For details see:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-2

"Features

    Merge #718: Introduce infra-cache-max-rtt option to config max retransmit timeout.

Bug Fixes

    Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699.

    Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing
    for one loop pass'.

    Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT
    on outbound tcp sockets.

    Fix verbose EDE error printout.

    Fix dname count in sldns parse type descriptor for SVCB and HTTPS.

    For windows crosscompile, fix setting the IPV6_MTU socket option
    equivalent (IPV6_USER_MTU); allows cross compiling with latest cross-compiler versions.

    Merge PR 714: Avoid treat normal hosts as unresponsive servers. And fixup the lock code.

    iana portlist update.

    Update documentation for 'outbound-msg-retry:'.

    Tests for ghost domain fixes."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-08-02 06:45:53 +00:00
Peter Müller
59c6ea57fa kmod: Update to 30
Please refer to the tarballs's NEWS file for release announcements.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-07-29 17:04:28 +00:00
Peter Müller
ffce292e7a CUPS: Update to 2.4.2
Please refer to https://github.com/OpenPrinting/cups/releases/tag/v2.4.2
for the release notes of this version. Most notably for IPFire, it comes
with OpenSSL support again.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-07-29 17:04:17 +00:00
Peter Müller
21aac1a554 Samba: Update to 4.16.4
This is a security release, please refer to https://www.samba.org/samba/latest_news.html#4.16.4
for the respective advisory.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-29 17:04:06 +00:00
Peter Müller
37895e21bf linux: Update to 5.15.57
Please refer to https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.57
for the changelog of this version. Since it introduces
architecture-dependent rootfile changes due to CPU side-channel
mitigations, changes to ARM rootfiles have been omitted due to the lack
of hardware.

Supposed hardening changes will be submitted separately.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-28 13:34:52 +00:00
Michael Tremer
14909d5fe9 cups-pdf: Fix applying patch
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-07-27 09:49:36 +00:00
Matthias Fischer
b2ab2f4ccc clamav: Update to 0.105.1
For details see:
https://blog.clamav.net/2022/07/clamav-01037-01041-and-01051-patch.html

"ClamAV 0.105.1 is a critical patch release with the following fixes:

    Upgrade the vendored UnRAR library to version 6.1.7.

    Fix issue building macOS universal binaries in some configurations.

    Silence error message when the logical signature maximum functionality
    level is lower than the current functionality level.

    Fix scan error when scanning files containing malformed images that
    cannot be loaded to calculate an image fuzzy hash.

    Fix logical signature "Intermediates" feature.

    Relax constraints on slightly malformed ZIP archives that contain
    overlapping file entries."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-07-27 07:11:47 +00:00
Matthias Fischer
e88b454cfc logwatch: Update to 7.7
The developers do not provide a changelog, the only comment I could find was on:

https://packetstormsecurity.com/files/167798/Logwatch-7.7.html

"Changes: Fixed bugs."

Running here on Core 169. No seen problems.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-07-27 07:10:18 +00:00
Michael Tremer
71aba971c4 cups: Add link at /etc/cups pointing to configuration
This is needed because cups-pdf is looking for its configuration file in
/etc/cups.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-07-27 07:09:31 +00:00
Michael Tremer
fdf630e8d4 cups-pdf: New package
This package provides a CUPS backend to print into PDF files.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-07-27 07:09:30 +00:00
Matthias Fischer
731d2a06ce bind: Update to 9.16.31
For details see:
https://downloads.isc.org/isc/bind9/9.16.31/doc/arm/html/notes.html#notes-for-bind-9-16-31

Excerpt from changelog:

"	--- 9.16.31 released ---

5917.	[bug]		Update ifconfig.sh script as is miscomputed interface
			identifiers when destroying interfaces. [GL #3061]

5915.	[bug]		Detect missing closing brace (}) and computational
			overflows in $GENERATE directives. [GL #3429]

5913.	[bug]		Fix a race between resolver query timeout and
			validation in resolver.c:validated(). Remove
			resolver.c:maybe_destroy() as it is no loger needed.
			[GL #3398]

5909.	[bug]		The server-side destination port was missing from dnstap
			captures of client traffic. [GL #3309]

5905.	[bug]		When the TCP connection would be closed/reset between
			the connect/accept and the read, the uv_read_start()
			return value would be unexpected and cause an assertion
			failure. [GL #3400]

5903.	[bug]		When named checks that the OPCODE in a response matches
			that of the request, if there is a mismatch named logs
			an error.  Some of those error messages incorrectly
			used RCODE instead of OPCODE to lookup the nemonic.
			This has been corrected. [GL !6420]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-24 12:59:27 +00:00
Jon Murphy
064a04d943 pcengines-apu-firmware: Update to version 4.17.0.1
- Update from 4.16.0.3 to 4.17.0.1
- Changelog
    v4.17.0.1 - Release date: 2022-06-23
      Rebased with official coreboot repository commit 5eda52a
      updated sortbootorder to v4.6.24
      Added - Support for APU7 (APU3 variant with 2.5GbE i225 NICs)
      See: https://github.com/pcengines/coreboot/compare/v4.16.0.4...v4.17.0.1

    v4.16.0.4 Release date: 2022-05-26
      Rebased with official coreboot repository commit 9686ac2261
      updated sortbootorder to v4.6.23
      updated SeaBIOS to rel-1.16.0.1
      See: https://github.com/pcengines/coreboot/compare/v4.16.0.3...v4.16.0.4

Signed-off-by: Jon Murphy <jon.murphy@ipfire.org>
Acked-by: Bernhard Bitsch <bbitsch@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-07-20 10:21:16 +00:00
Peter Müller
35e8a57e34 krb5: Update to 1.20
Please refer to https://web.mit.edu/kerberos/krb5-1.20/ for the release
notes of this version. No rootfile changes were necessary.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-07-19 07:49:14 +00:00
Matthias Fischer
b7f887e3b1 suricata: Update to 5.0.10
Changelog:

"5.0.10 -- 2022-07-12

Bug #5429: TCP flow that retransmits the SYN with a newer TSval not properly tracked (5.0.x backport)
[Note: Therefore 'suricata-5.0-stream-tcp-Handle-retransmitted-SYN-with-TSval.patch' could be removed]

Bug #5424: inspection of smb traffic without smb/dcerpc doesn't work correct.  (5.0.x backport)
Bug #5423: DCERPC protocol detection when nested in SMB (5.0.x backport)
Bug #5404: detect: will still inspect packets of a "dropped" flow for non-TCP (5.0.x backport)
Bug #5388: detect/threshold: offline time handling issue (5.0.x backports)
Bug #5358: test failure on Ubuntu 22.04 with GCC 12 (5.0.x backport)
Bug #5354: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (5.0.x backport)
Bug #5345: CIDR prefix calculation fails on big endian archs (5.0.x backport)
Bug #5343: ftp: quadratic complexity for tx iterator with linked list (5.0.x backport)
Bug #5341: decode/mime: base64 decoding for data with spaces is broken (5.0.x backport)
Bug #5339: PreProcessCommands does not handle all the edge cases (5.0.x backport)
Bug #5325: FTP: expectation created in wrong direction (5.0.x backport)
Bug #5305: cppcheck: various static analyzer "warning"s
Bug #5302: Failed assert DeStateSearchState
Bug #5301: eve: payload field randomly missing even if the packet field is present
Bug #5289: Remove unneeded stack-on-signal initialization.
Bug #5283: 5.0.x: ftp: don't let first incomplete segment be over maximum length
Bug #5124: alerts: 5.0.8/6.0.4 count noalert sigs towards built-in alert limit (5.0.x backport)
Bug #5113: Off-by-one in flow-manager flow_hash row allocation
Bug #5055: Documentation copyright years are invalid
Bug #5021: dataset: error with space in rule language
Bug #4926: Rule error in SMB dce_iface and dce_opnum keywords (5.0.x backport)
Bug #4646: TCP reassembly, failed assert app_progress > last_ack_abs, both sides need to be pruned
Optimization #5123: alerts: use alert queing in DetectEngineThreadCtx (5.0.x backport)
Optimization #5121: Use configurable or more dynamic @ PACKET_ALERT_MAX@ (5.0.x backport)
Task #5322: stats/alert: log out to stats alerts that have been discarded from packet queue (5.0.x backport)"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-07-14 09:42:28 +00:00
Matthias Fischer
30c6cf7e3c unbound: Update to 1.16.1
For details see:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-1

"Features

    Fix #704: [FR] Statistics counter for number of outgoing UDP queries
    sent; introduces 'num.query.udpout' to the 'unbound-control stats'
    command.

Bug Fixes

    makedist.sh picks up 32bit libssp-0.dll when 32bit compile.
    Fix for edns client subnet to respect not looking in its cache when
    instructed to do so (e.g., prefetch).
    Merge PR #688: Rpz url notify issue.
    Note in the unbound.conf text that NOTIFY is allowed from the 'url:'
    addresses for auth and rpz zones.
    Remove unused LDNS function check for GOST Engine unloading.
    Fix for loading locally stored zones that have lines with blanks or
    blanks and comments.
    Fix #663: use after free issue with edns options.
    Clarify -v flag manpage entry (#705)
    Fix test program dohclient close to use portability routine.
    Show the output of the exact .rpl run that failed with 'make test'.
    Fix for cached 0 TTL records to not trigger prefetching when
    serve-expired-client-timeout is set.
    Add debug option to the mini_tdir.sh test code.
    Fix to not count cached NXDOMAIN for MAX_TARGET_NX.
    Allow fallback to the parent side when MAX_TARGET_NX is reached. This
    will also allow MAX_TARGET_NX more NXDOMAINs.
    iana portlist update.
    Fix detection of libz on windows compile with static option.
    Fix compile warning for windows compile.
    Merge PR #706: NXNS fallback.
    From #706: Cached NXDOMAIN does not increase the target nx responses.
    From #706: Don't generate parent side queries if we already have the
    lame records in cache.
    From #706: When a lame address is the best choice, don't try to
    generate target queries when the missing targets are all lame.
    Merge PR #671 from Petr Menšík: Disable ED25519 and ED448 in FIPS mode
    on openssl3.
    Merge PR #660 from Petr Menšík: Sha1 runtime insecure.
    For #660: formatting, less verbose logging, add EDE information.
    Fix for correct openssl error when adding windows CA certificates to
    the openssl trust store.
    Improve val_sigcrypt.c::algo_needs_missing for one loop pass.
    Reintroduce documentation and more EDE support for
    val_sigcrypt.c::dnskeyset_verify_rrset_sig.
    Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for
    one loop pass'.
    Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT on
    outbound tcp sockets."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-12 15:03:14 +00:00
Adolf Belka
5a2bd6d739 sqlite: Update to version 3390000
- Update from version 3380500 to 3890000
- Update of rootfile not required
- Changelog
   Release 3.39.0 On 2022-06-25
    Add (long overdue) support for RIGHT and FULL OUTER JOIN.
    Add new binary comparison operators IS NOT DISTINCT FROM and IS DISTINCT FROM that are
     equivalent to IS and IS NOT, respective, for compatibility with PostgreSQL and SQL
     standards.
    Add a new return code (value "3") from the sqlite3_vtab_distinct() interface that
     indicates a query that has both DISTINCT and ORDER BY clauses.
    Added the sqlite3_db_name() interface.
    The unix os interface resolves all symbolic links in database filenames to create a
     canonical name for the database before the file is opened.
    Defer materializing views until the materialization is actually needed, thus avoiding
     unnecessary work if the materialization turns out to never be used.
    The HAVING clause of a SELECT statement is now allowed on any aggregate query, even
     queries that do not have a GROUP BY clause.
    Many microoptimizations collectively reduce CPU cycles by about 2.3%.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-11 13:04:08 +00:00
Adolf Belka
be4bd649f1 vim: Update to version 9.0
- Update from version 8.2 to 9.0
- Update of rootfile
- Remove gcc10 detection patch as this is now built into the source tarball
- Update hardening crash patch. The issue related to the gcc10 patch seems to suggest
   that when that is fixed then the hardening crash patch is not required but it wasn't
   100% clear. So I have left the patch in place as it only changes one line and if it
   worked with the earlier versions then it should also work now. If it is decided that
   it is not needed then it can always be removed at a future update.
- Changelog is massive with over 30000 lines.
   vim provides fixed updates such as 8.2 and 9.0 but then issues very frequent patch
   updates. For version 8.2 there are 5172 patch updates none of which have been applied
   to IPFire. All of these are now built into version 9.0
   https://vimhelp.org/version9.txt.html#new-9 provides the details of what is new with
   version 9.0, including details of all the 5172 patches.
- Key thing for version 9.0 is that there is a new Vim9 script language which is not
   backwards compatible. However the old legacy script language will continue to be
   supported so all old scripts can continue to be used.
- Version 9.0 already has 48 patches released. The releases occur virtually every day
   with several days having multiple patch releases.
- Once this 9.0 version of vim has been confirmed to work successfully by people
   experienced in using vim (I struggle to remember the set of characters to press to
   exit from an editing session), then my plan is to periodically submit an update of the
   patches, although some may be missed out as they are not relevant for IPFire - such
   as deleting Travis CI config and improving the recognition of some Visual Basic files.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-11 13:04:05 +00:00
Adolf Belka
319b5ee2c6 i2c-tools: Update to version 4.3
- Update from version 3.1.2 (July 2017) to 4.3 (July 2021)
- Update of rootfile
- Changelog
    4.3 (2021-07-22)
	  decode-dimms: Attempt to decode LPDDR3 modules
	  eeprom, eepromer: Removed the tools in favor of eeprog
	  i2cdetect: Sort the bus list by number
	  i2cdump: Add range support to I2C block mode
	           Deprecate SMBus block mode
	  i2cget: Add support for I2C block read
	          Add support for SMBus block read
	  i2ctransfer: Reverted check for returned length from driver
    4.2 (2020-09-22)
	  manpages: Add BUGS section to let people know how to contact us
	  Makefile: Allow to preset all CFLAGS and LDFLAGS variables
	  tools: Consistently use snprintf instead of sprintf
	         Restrict addresses 0x03-0x07, too (defined by I2C standard)
	  decode-dimms: Print SPD revision for DDR3 too
	                Print primary bus width for DDR3 and DDR4
	                List ee1004 as a candidate driver
	                Display MAC for DDR3
	                Add MAC abbreviation for DDR4
	                Round DDR4 speed properly
	                Detect and report truncated input files
	                Print kernel driver used
	                Print DDR memory speed in MT/s
	                Add DDR5 memory types
	                Decode manufacturing data for LPDDR3
	                Fix the version string
	                Point the user to the right drivers
	                Update the list of vendors to Jedec JEP106BB
	  decode-vaio: Add support for the at24 driver
	               Scan more i2c buses
	  i2cset: Fix short writes with mask
	  i2ctransfer: Mention '-a' everywhere in the manpage
	               Support messages using I2C_M_RECV_LEN
	               Add check for returned length from driver
	  i2c-stub-from-dump: Read dumps from hexdump -C
	  library: Add a manual page to document the API
    4.1 (2018-11-30)
	  Makefile: Make STRIP, DESTDIR and PREFIX overridable
	  tools: Fix potential buffer overflows in i2cbusses
	         Fix build race
	         Allow usage of reserved addresses with the '-a' flag
	  decode-dimms: Add preliminary DDR4 support
	                Decode size and timings of DDR4
	                Decode misc parameters of DDR4
	                Decode physical characteristics of DDR4
	                Documentation update for DDR4
	                Verify the CRC of DDR4 data block 1
	                Update manufacturer IDs (JEP106AX)
	  eeprog: Fix ambiguous parentheses
	          Fix build race
	  i2ctransfer: Rename option '-f' to '-a' for consistency
	  i2c-dev.h: Delete
	  library: Fix build race
	           Allow disabling the dynamic flavor
	           Mention the correct license in source files
	  py-smbus: Fix i2c_smbus_* error propagation
    4.0 (2017-10-30)
	  tools: Fix build with recent compilers (gcc 4.6+)
	         Add examples to the manual pages
	  README: Clarify licenses
	          Mention the current maintainer
	  decode-dimms: Decode module configuration type of DDR2 SDRAM
	                Decode bus width extension of DDR3 SDRAM
	                Don't choke when no EEPROM is found
	                Don't make columns larger than they need to be
	                Make side-by-side output more robust
	                Print module organization of DDR SDRAM
	                Merge cells by default in side-by-side output
	                Print extra timing values of DDR SDRAM
	                Print DDR and DDR2 core timings for all supported CAS values
	                Print DDR2 equivalent speed of tCK max
	                Don't print undefined DDR2 SDRAM timings
			Print SDR, DDR, DDR2, DDR3 core timings for all standard speeds
	                Update manufacturer IDs
	                Make DDR3 manufacturer count parity error non-fatal
	                Strip former manufacturer name in side-by-side output mode
	                Remove duplicate "ns" in SDR timings
	                Add section headers for SDR modules
	                Fix decoding of SDR SPD revision
	                Prevent hang on reserved DDR3 module type
	                Decode more DDR3 module types
	                Fix DDR3 tRAS decoding
	                Fix DDR3 core timings rounding
	                Round down PC3 numbers to comply with Jedec
	                Don't print the DDR3 time bases
	                Decode the FTB fields of DDR3 tCk, tAA, tRCD, tRP and tRC
	                Fix speed and PC3 number of high-speed DDR3 modules
	                Decode DDR3 reference card revision
	                Print width of all known DDR3 module types
	                Print physical characteristics for all DDR3 module types
	                Don't print raw SSTE32882 register values
	                Add support for Load Reduced DIMM (LRDIMM) DDR3 modules
	                Fully decode the DDR3 SDRAM Device Type field
	                Fix DDR3 extended temp range refresh rate decoding
	                Encode "degrees" to HTML degree symbol
	                Generate XHTML 1.1 compliant markup
	                Add a manual page
	                Correctly check for out-of-bounds vendor ID
	                Update manufacturer IDs (JEP106AQ)
	  decode-vaio: Add a manual page
	  eeprog: Add a manual page
	          Moved to a separate subdirectory
	          Increase delay after writes
	  eeprom: Add a manual page
	          Marked as deprecated
	  eepromer: Add a manual page
	            Marked as deprecated
	  i2cdetect: Do a best effort detection if functionality is missing
	             Clarify the SMBus commands used for probing by default
	  i2ctransfer: New tool to send user-defined I2C messages in one transfer
	  i2c-dev.h: Minimize differences with kernel flavor
	             Move SMBus helper functions to include/i2c/smbus.h
	  i2c-stub-from-dump: Be more tolerant on input dump format
	  library: New libi2c library
	           Properly propagate real error codes on read errors
	           Use I2C_SMBUS_BLOCK_MAX instead of hard-coding 32
	  lib/smbus.c: Add missing include which was causing a build error
	  py-smbus: Fix module level docs
	            Add support for python 3

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-11 13:04:01 +00:00
Peter Müller
5972587884 configroot: Add missing "cp" directive for ipblocklist-functions.pl
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-11 10:12:39 +00:00
Peter Müller
d574941b90 Merge branch 'temp-stevee-ipblocklist-final' into next 2022-07-10 08:20:15 +00:00
Peter Müller
962600b21a screen: Update to 4.9.0
Full changelog as per https://savannah.gnu.org/forum/forum.php?forum_id=10107:

New in this release:
  * Hardstatus option for used encoding (escape string '%e')
  * OpenBSD uses native openpty() from its utils.h
  * Fixes:
    - fix combining char handling that could lead to a segfault
    - CVE-2021-26937: possible denial of service via a crafted UTF-8 character sequence (bug #60030)
    - make screen exit code be 0 when checking --help
    - session names limit is 80 symbols (bug #61534)
    - option -X ignores specified user in multiuser env (bug #37437)
    - a lot of reformations/fixes/cleanups (man page and source code)

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-07-09 14:58:58 +00:00
Peter Müller
104f21f387 usbutils: Update to 014
Full changelog as retrieved from NEWS file:

usbutils 014
============

Adrian Kalazi (1):
      Add Tx+Rx lanes to tree mode

Aurelien Jarno (1):
      lsusb(8): mention the udev's hardware database

Benson Leung (1):
      lsusb: Fix typo in string output for iAdditionalInfoURL

Bui Quang Minh (1):
      lsusb-t: Add lower bound checks in read_sysfs_file_string

Grant Grundler (2):
      lsusb: remove unused RETRIES constant
      lsusb: don't complain on EAGAIN

Greg Kroah-Hartman (10):
      sysfs: add copyright notice taken from name.*
      LICENSES: add symlink to handle "or-later" issue for GPL-2.0
      LICENSES: put spdx headers on the license files
      rename "GPL-2.0+" to "GPL-2.0-or-later"
      LICENSE: rename GPL-3.0.txt -> GPL-3.0-only.txt
      usbhid-dump.8.in: add copyright information
      .gitignore: add copyright and SPDX info
      usbhid-dump: add copyright and SPDX info
      SPDX header cleanups from GPL-2.0 -> GPL-2.0-only
      usbutils.spdx: update with output of latest reuse tool

Jonathan Neuschäfer (2):
      lsusb: Fix spelling of bEndpointAddress in UVC
      lsusb: Decode endpoint addresses in UVC

Lukas Zaoral (3):
      lsusb.c: fix leak in dump_printer_device
      usb-devices: do not use `local` in a POSIX shell script
      desc-defs.c: fix possible out-of-bound read

Matthias Braun (1):
      Fix typos in lsusb.8.in

Ruslan Kabatsayev (5):
      Fix locating endpoint when it's a directory rather than a symlink
      Fix formatting of interface descriptors to match /sys/kernel/debug/usb/devices
      Fix formatting of endpoint direction to match /sys/kernel/debug/usb/devices
      Fix formatting of endpoint type to match /sys/kernel/debug/usb/devices
      Fix formatting of max endpoint packet size to match /sys/kernel/debug/usb/devices

Thomas Hebb (1):
      lsusb: Fix buffer size copy/paste error

Tormod Volden (1):
      Makefile.am: Remove unused DATADIR

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
2022-07-09 14:58:14 +00:00
Peter Müller
65630b4a6b Finally get rid of orphaned xt_geoip directories
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-09 11:55:29 +00:00
Peter Müller
ac7f3c75aa Fireinfo: Amend upstream patches for fixing #12896
https://bugzilla.ipfire.org/show_bug.cgi?id=12896#c16

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-09 09:17:29 +00:00
Adolf Belka
390a55dcfa iperf: Update to version 2.1.7
- Update from version 2.0.14a to 2.1.7
- Update of rootfile not required
- Changelog
   2.1.7 (as of April 5th, 2022)
	o Support for tcp bounceback test
	o Code clean up
	o Regression fixes (see git-log)
   2.1.6
	o Fix to major 2.1.5 regeressions
   2.1.5 change set as of (December 3, 2021)
	o fix some HAVE_IPV6 conditional changes
	o fix SO_TIMEOUT regressiony
	o ren sockets.c to socket_io.c
	o fix compile breakage per abs() returning an int instead of float
	o support for gettcpinfo on Mac OS X (tested on both M1 and x86 silicon)
	o move setsock_blocking from sockets into PerfSocket.cpp
	o don't require -V for v6, instead try v6 when v4 hostname lookup fails, client only
	o add assert in writen
	o add tcp RTT variance to client output
	o use setsockopt to get the nagle status
	o show Nagle and TOS settings on client
	o more on connect-only testing
	o sample and output the initial rtt and cwnd in the connect report
	o fix multiple fullduplex regressions
	o fix for HAVE_TCP_STATS in configure, then linux compile
	o writen can have more than one write, fix accounting when this occurs
	o fix tos with --reverse and --full-duplex
	o add support for --tos-override <value> on server
	o add support for  --tcp-drain, add mmm stats, histograms - experimental feature
	o multiple man page updates
	o fix partial histogram print to not show (f)
	o some new scripts in python flows
	o fixes to incr-srcport
	o fixes for --incr-dstport
	o fix regression on very first UDP packet having transit latency of zero
	o fix --reverse and --isochronous when --trip-times not set
	o fix client_init regression, pull out tcp_shutdown
	o fix reporter startup race and one second delay by setting the threads ready predicate and issuing the signal under a lock
	o fix first send accounting for small -n
	o fix configure.ac to use '=' instead of '=='
   2.1.4 change set as of (August 12, 2021)
	o fix TCP isoch regression
	o fix regression in UDP header exchange for tests like --reverse
	o Add support for TCP_NOTSENT_LOWAT vi --tcp-write-prefetch and select() before write()
	o Add support for TCP_WINDOW_CLAMP
	o Rework recvn() and writen() for when SO_SNDTIMEO and SO_RCVTIMEO are enabled
	o Add support for --histograms on select with --tcp-write-prefetch
	o Add support for bind to device on the listener, i.e. iperf -s -i 1 -e -B 0.0.0.0%eth0, will only accept/receive on the eth0 interface
	o Add support for virtual/tap interfaces
	o Add support for --hide-ips (don't show the ip addresses in the report outputs)
	o Fix units of -pps with --reverse, --fullduplex, -r and -d
	o Remove use of MSG_PEEK by moving the mBuf buffer from client/server object to settings context
	o Use MSG_WAITALL in recvn (collided with MSG_PEEK on Windows)
   2.1.3 change set as of (July 13, 2021)
	o relax cli errors a bit to WARN instead of ERROR
	o fix TCP read fatal error macro
	o fix UDP server to not fatal error on EINTR, use macro
	o handle and warn on failed read of tcp test flags
	o redesign of tcp retry (2.1.2 fix was incomplete)
	o thread exit signals reporter thread condition var for timely exits of the tool
   2.1.2 change set (as of June 25th, 2021)
	o fix TCP retry regression per interval reporting
   2.1.1 change set (as of June 23rd, 2021)
	o isochronous bug fix
	o -P and -B src port will increment for unique quintuple
	o support for port ranges, e.g. -p 6000-6008
	o double free fix per memory corruption when -l is less than 244
	o don't use pthread_join on the client --reverse, symptom hung client
	o fixes for --trip-times and small 64 byte packets
	o udp fail on reverse should exit
	o support for low duty cycle bursts (--burst-period and --burst-size)
	o final report fixes
	o full duplex ouput fixex
	o support for --incr-scrip
	o multicast setsockopt fixes
   2.1.0 change set (as of January 5th, 2021)
	o scaling improvements for -P, i.e. improved support for large numbers of traffic threads
	o major code refactoring (see doc/DESIGN_NOTES) for maintainability, extensibilty, performance, scaling, memory usage
	o support for full duplex traffic using --full-duplex
	o support for reverse traffic using --reverse
	o support for role-reversal character of asterisk in the transfer id
	o transfer id now an incrementing integer and no longer the socket id
	o support for TCP connect only tests with --connect-only
	o isochronous support compiled in by default, must use config to disable
	o support --isochronous for both UDP or TCP traffic to simulate video streams
	o support for low duty cycle traffic patterns via --burst-period and --burst-size
	o use of clock_nanosleep when supported to schedule isochronous burst starts, otherwise use nanosleep delay
	o support for --trip-times indicating the client and server clocks are synchronized to an accuracy sufficient, note: consider the use of precision time protocol as well as ask your data center to provide access to a GPS disciplined reference time source
	o support for --trip-times with -d and -r bidirectional tests
	o output TCP connect times (3WHS) in connect reports
	o support for application level tcp connect retries via --connect-retries n
	o rate-limited options of -b and --fq-rate supported for unidirectional, full duplex and reverse traffic
	o reporter thread designed to automatically cause packet reports to aggregate - mitigating and hopefully removing thread thrashing
	o support for frame or burst based reporting or sampling vs time based via -i [f|F] (experimental)
	o support for UDP traffic only from client to server with --no-udp-fin
	o support for write to read latencies (UDP and TCP) with --trip-times
	o support for sum only outputs with --sum-only
	o support for little's law calculations in --trip-time outputs
	o support for --txstart-time <epoch-time> to schedule client traffic start, timestamp support microseconds, e.g. unix $(expr $(date +%s) + 1).$(date +%N)
	o support for --txdelay-time to insert delay between TCP three way handshake (3WHS) and data transfer
	o support for --no-connect-sync which disables transmit traffic start synchronization when -P is used, defaults to synchronized
	o option of --full-duplex implementation uses a barrier on the client side to synchronize full duplex traffic
	o no limits to group sum reports, i.e. all clients will get its own sum report per a server
	o improved report timestamps, e.g. end to end or client and server based timestamps with --trip-times
	o improved settings messaging
	o improved messaging for --tcp-congestion or -Z
	o re-implemented -U for single UDP server with minimal threading interactions
	o re-implemented -1 or --singleclient where server will serialize traffic runs
	o warning message if the test were likely CPU bound instead of network i/o bound
	o fix the case when -P <value> is set on the server such that summing output is displayed
	o multicast listener will autoset -U (single server), e.g -P > 1 not supported for multicast
	o multicast listener no longer busy drops multicast packets during traffic test, i.e. only server thread receives them
	o immediate bail out on mutually exclusive command line options
	o getaddrinfo bug with -static linkage workaround and DNS lookup one time in setttings context vs twice in Settings and client traffic thread
	o fix -o or --output using freopen to redirect stdout and stderr to a file
	o support for --local-only which sets SO_DONTROUTE on a socket to limit traffic to local hosts (default is off)
	o support compile time option of --local-only to set on by default via ./configure --enable-default-localonly
	o support for date and time of in connect messages,
	  e.g. [  0] local 192.168.1.108%eth0 port 5001 connected with 192.168.1.62 port 36724 (MSS=453) (sock=5) on 2020-12-22 19:43:42 (PST)
	o support for feature of --permit-key and permit-key-timeout (defaults to 20 seconds.) The permit-key must match for the server to accpet the client's traffic. It also sets the transfer id. TCP only.
	o support for experimental feature of --near-congestion (tcp only)
	o man page updates with examples
	o tested with 1000's of traffic streams, WiFi, 10G and 100G

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-09 09:09:21 +00:00
Adolf Belka
7772be8e37 htop: Update to version 3.2.1
- Update from version 3.1.2 to 3.2.1
- Update of rootfile not required
- Changelog
   What's new in version 3.2.1
	* Fix setting to show all branches collapsed by default
	* Restore functionality of stripExeFromCmdline setting
	* Fix some command line display settings not being honored without restart
	* Display single digit precision for CPU% greater than 99.9%
	* On Linux, FreeBSD and PCP consider only shrinkable ZFS ARC as cache
	* On Linux, increase field width of CPUD% and SWAPD% columns
	* Colorize process state characters in help screen
	* Use mousemask(3X) to enable and disable mouse control
	* Fix heap buffer overflow in Vector_compact
	* On Solaris, fix a process time scaling error
	* On Solaris, fix the build
	* On NetBSD, OpenBSD and Solaris ensure env buffer size is sufficient
	* On Linux, resolve processes exiting interfering with sampling
	* Fix ProcessList quadratic removal when scanning processes
	* Under LXC, limit CPU count to that given by /proc/cpuinfo
	* Improve container detection for LXC
	* Some minor documentation fixes
   What's new in version 3.2.0
	* Support for displaying multiple tabs in the user interface
	* Allow multiple filter and search terms (logical OR, separate by "|")
	* Set correct default sorting direction (defaultSortDesc)
	* Improve performance for process lookup and update
	* Rework the IOMeters initial display
	* Removed duplicate sections on COMM and EXE
	* Highlight process UNINTERRUPTIBLE_WAIT state (D)
	* Show only integer value when CPU% more than 99.9%
	* Handle rounding ambiguity between 99.9 and 100.0%
	* No longer leaves empty the last column in header
	* Fix header layout and meters reset if a header column is empty
	* Fix PID and UID column widths off-by-one error
	* On Linux, read generic sysfs batteries
	* On Linux, do not collect LRS per thread (it is process-wide)
	* On Linux, dynamically adjust the SECATTR and CGROUP column widths
	* On Linux, fix a crash in LXD
	* On FreeBSD, add support for showing process emulation
	* On Darwin, lazily set process TTY name
	* Always set SIGCHLD to default handling
	* Avoid zombie processes on signal races
	* Ensure last line is cleared when SIGINT is received
	* Instead of SIGTERM, pre-select the last sent signal
	* Internal Hashtable performance and sizing improvements
	* Add heuristics for guessing LXC or Docker from /proc/1/mounts
	* Force elapsed time display to zero if process started in the future
	* Avoid extremely large year values when printing time
	* Fix division by zero when calculating IO rates
	* Fix out of boundary writes in XUtils
	* Fix custom thread name display issue
	* Use AC_CANONICAL_HOST, not AC_CANONICAL_TARGET in configure.ac
	* Support libunwind of LLVM

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-07-09 09:09:10 +00:00