Commit Graph

20732 Commits

Author SHA1 Message Date
Michael Tremer
bd4fd21fd2 core178: Ship extrahd.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:12:48 +00:00
Stefan Schantl
569c9ac668 extrahd.cgi: Adjust copyright header
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:58 +00:00
Stefan Schantl
19a3b883de extrahd.cgi: Do not allow "/mnt" or "/media" as mount points
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
65dc35dcf4 extrahd.cgi: Requires "auto" as hidden FS type to mount a new device
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
480c5253d0 extrahd.cgi: Drop select for FS selection.
This feature does not have any benefit because the linux kernel
knows best which filesystem a device/partition has.

So there is no need for a user to specify this by-hand. This also
prevents from choosing a wrong fs type and as a direct result in a
not mountable device.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
72dfa1b097 extrahd.cgi: Add missing translation strings
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
7907c1e068 extrahd.cgi: Re-order sanity check logic
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
fd815c36ea extrahd.cgi: Display mount status next to the corresponding drive
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
0aa77c2fd5 extrahd.cgi: Add is_configured function.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
d0a6f9bdb2 extrahd.cgi: Store configured drives in a hash
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
94aeac8a05 extrahd.cgi: Abort if a device could not be umounted.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
56ce3e19e6 extrahd.cgi: Refactor code to use new introduced perl functions.
This also gets rid of allmost all unsafe system calls.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
a2c88aadef extrahd.cgi: Add various perl functions deal with block devices
This functions are going to replace the former used scan/write to file/read from
file approach by directly collecting the required informations from the
kernel sysfs and devfs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Michael Tremer
6ed00db36f Merge branch 'master' into next 2023-08-02 09:11:40 +00:00
Michael Tremer
c649a19441 core177: Ship suricata rulesets
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:10:22 +00:00
Stefan Schantl
422fce9cb0 ruleset-sources: Adjust download URL for snort community ruleset
Fixes: #13203

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:10:00 +00:00
Michael Tremer
91443f9234 udev: Drop hwrng rules
This is another fragment of rngd - the gift that keeps giving.

The udev rules file contains a lot of stuff for a prototype which never
went into production. So, that can be dropped.

It would have been left with one rule that starts rngd whenever a HWRNG
is being found. That is however no longer needed as rngd is being
started in the init process. We no longer need to initialize it as early
as possible to seed the kernel's PRNG.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 13:47:31 +00:00
Michael Tremer
833b9bc1d1 Merge branch 'master' into next 2023-07-31 09:29:22 +00:00
Michael Tremer
b1110eb1bd pmacct: Increment package release
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:27:27 +00:00
Adolf Belka
7642da793c pmacct: Fix for Bug#13163 - no such column: vlan_in [CU 175]
- This problem occurred with pmacct-1.7.8 and was raised with upstream. They identified a
   bug and provided a commit with a fix.
- Unfortunately the commit can not be used on version 1.7.8 from Dec 2022 as it depends on
   other commits applied in the period from Dec 2022 to July 2023.
- The next version release is likely to come out around Dec 2023 to Mar 2024 based on the
   previous release frequency (6 to 9 months)
- The only alternative was to make a release from the commit stage of the fix. In Github
   this only provides a zip file. So I extracted the zip file and then re-archived it
   as a .tar.gz file
- Build went successfully and the .ipfire package file was tested successfully by @Jon

Fixes: Bug#13163
Tested-by: Jon Murphy <jon.murphy@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:27:06 +00:00
Michael Tremer
b2cbdb1e3f core178: Ship glib
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:23:41 +00:00
Adolf Belka
5acaaf3b4c glib: Update to version 2.77.0
- Update from 2.71.1 to 2.77.0
- Update of rootfile
- Changelog is too large to include here. Details can be found in the NEWS file in the
   source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:23:21 +00:00
Adolf Belka
ec4b0a2938 groff: Update to version 1.23.0
- Update from version 1.22.4 to 1.23.0
- Update of rootfile
- Changelog is too large to show here.
   See the NEWS file in the source tarball for user visible changes. This does not
    include any bug fixes.
   For bug fixes and all commits see the ChangeLog file in the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:23:03 +00:00
Michael Tremer
1f0c7a63d3 core178: Ship ovpnmain.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:22:21 +00:00
Adolf Belka
f46e8298ad ovpnmain.cgi: Fixes bug#13190 - connection status shows disconnected for connected client
- If the certificate name has underscores in it then the status always shows as DISCONNECTED
   alothough the actual connection is working and can be used.
- The certificate with underscores works fine. RFC5280 accepts underscores in the name.
- The code for checking the status splits up the status message and takes the first part
   as the common name for the connection. Then there is a regex command which rerplaces
   any underscores in the status common name with spaces. This results in the connection
   with underscores in the certificate name never matching any status feedback common
   name as the underscores have been replaced by spaces.
- This has been tested to work with my vm test bed. With existing code the connection with
   underscores in the certificate name permanently showed DISCONNECTED. With the code change
   the connection shows as CONNECTED very quickly.

Fixes: Bug#13190
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:21:47 +00:00
Adolf Belka
cb8168553b gnump3d: Update perl directory in gnump3d.conf to current version
- Update perl dircetory for plugin from 5.32.1 to 5.36.0
- Perl was updated in August 2022 but this directory was missed when that update was done.
   A forum member has tried to use gnump3d and had problems because it was trying to use
   the perl 5.32.1 directory for a plugin in the gnump3d.conf file
- Bumped the PAK_VER to ensure that gniump3d is shipped.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:21:37 +00:00
Michael Tremer
3acd120b01 core178: Ship xfsprogs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:21:01 +00:00
Adolf Belka
3b8206b74a xfsprogs: Update to version 6.4.0
- Update from version 6.2.0 to 6.4.0
- Update of rootfile not required
- Changelog is not available in the source tarball or on the website. Changes can be viewed
   in the git log https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/log/

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:20:49 +00:00
Michael Tremer
4b80d5e6c3 core178: Ship mpfr
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:20:33 +00:00
Adolf Belka
1f26a78259 mpfr: Update to version 4.2.0p12
- Update from version 4.2.0p9 to 4.2.0p12
- Update of rootfile not required
- Changelog - additional patches from 10 to 12 over previous update
    10 - GCC 12 emits a spurious "may be used uninitialized" warning on tests/tfpif.c
         with -O1, and GCC 13 has the same issue also with -O2 (GCC bug 106155). This can
         make some test scripts fail for the developers. The gcc-pr106155-workaround
         patch provides a workaround for this bug in GCC.
         Corresponding changeset in the 4.2 branch: c0031f1af.
    11 - The mpfr_inp_str function does not handle the '\0' character correctly when it
         is not a whitespace character (which is almost always the case in practice, or
         really always the case). For instance, if the word is the sequence
         { '1', '\0', '2' }, the string "1" is passed to mpfr_set_str because '\0' is
         regarded as a terminating null character, and one gets a valid number (1) while
         '\0' in a word is necessarily invalid. This is fixed by the inp_str-nullchar
         patch. The testcase in the repository cannot be provided in the patch because of
         the null character in one of the files.
         Corresponding changeset in the 4.2 branch: 6a68387b2.
    12 - When '\0' is a whitespace character, i.e. when isspace(0) is true in the current
         locale (as allowed by ISO C for non-"C" locales), the mpfr_strtofr function
         regards a '\0' in the leading whitespace sequence as a whitespace. This is
         incorrect, since from the definition of a string, the first '\0' is the
         terminating null character (before the notion of whitespace is involved). In
         such locales, this is a vulnerability, because characters after the terminating
         null character are read to determine the result; however, such locales are rare
         or nonexistent (Mutt's lib.h suggests that some systems have such locales, but
         this was in 1998). This is fixed by the strtofr-nullchar patch.
         Corresponding changeset in the 4.2 branch: 964fbaa31.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:20:09 +00:00
Adolf Belka
41f497df2d libarchive: Update to version 3.7.0
- Update from version 3.6.2 to 3.7.0
- Update of rootfile
- Changelog
    3.7.0 is a feature and bugfix release.
	New features:
	    bsdunzip: new tool ported from FreeBSD (#1873)
	    drop-in replacement for Info-ZIP unzip, not yet ported for Windows
	    7zip reader: support for Zstandard compression (#1894)
	    7zip reader: support for ARM64 filter (#1918)
	    zstd filter: support for multi-frame zstd archives (#1818)
	Other notable bugfixes and improvements:
	    pax: fix year 2038 problem on platforms with 64-bit time_t (#1840)
	    Windows: Universal Windows Platform (UWP) fixes and improvements (#1879, #1883, #1885, #1840)
	    Windows: bcrypt usage fixes and improvements (#1881, #1887)
	    Windows: time function usage fixes and improvements (#1820, #1824, #1830)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:19:33 +00:00
Adolf Belka
319fcaa4d7 curl: Update to version 8.2.1
- Update from version 8.2.0 to 8.2.1
- Update of rootfile not required
-Changelog
    8.2.1
      Bugfixes
	 o amigaos: fix sys/mbuf.h m_len macro clash [9]
	 o amissl: add missing signal.h include [8]
	 o amissl: fix AmiSSL v5 detection [2]
	 o cfilters: rename close/connect functions to avoid clashes [12]
	 o ciphers.d: put URL in first column [1]
	 o cmake: add `libcurlu`/`libcurltool` for unit tests [5]
	 o cmake: update ngtcp2 detection [4]
	 o configure: check for nghttp2_session_get_stream_local_window_size [14]
	 o CONTRIBUTE: drop mention of copyright year ranges [20]
	 o CONTRIBUTE: fix syntax in commit message description [21]
	 o curl_multi_wait.3: fix arg quoting to doc macro .BR [27]
	 o docs: mark two TLS options for TLS, not SSL [26]
	 o docs: provide more see also for cipher options [23]
	 o hostip: return IPv6 first for localhost resolves [16]
	 o http2: fix regression on upload EOF handling [13]
	 o http: VLH, very large header test and fixes [19]
	 o libcurl-errors.3: add CURLUE_OK [11]
	 o os400: correct EXPECTED_STRING_LASTZEROTERMINATED [7]
	 o quiche: fix lookup of transfer at multi [18]
	 o quiche: fix segfault and other things [15]
	 o rustls: update rustls-ffi 0.10.0 [24]
	 o socks: print ipv6 address within brackets [10]
	 o src/mkhelp: strip off escape sequences [22]
	 o tool: fix tool_seek_cb build when SIZEOF_CURL_OFF_T > SIZEOF_OFF_T [17]
	 o transfer: do not clear the credentials on redirect to absolute URL [6]
	 o unittest: remove unneeded *_LDADD [3]
	 o websocket: rename arguments/variables to match docs [25]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:19:10 +00:00
Michael Tremer
bde5bcaf39 core178: Drop sox package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:18:55 +00:00
Adolf Belka
1fa4116cf8 sox: Remove from IPFire as no longer needed for asterix
- sox was used for asterix but that addon was removed in Core Update 158 so sox is no
   longer needed.
- remove the lfs and rootfile files and remove sox from the make.sh script

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:15:45 +00:00
Michael Tremer
37a1a3fcec Merge remote-tracking branch 'origin/master' into next 2023-07-31 09:15:31 +00:00
Arne Fitzenreiter
d95a414ce1 core177: remove rngd link also from rcsysinit.d
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-07-29 09:48:29 +02:00
Arne Fitzenreiter
e0767e7dc4 core177: apply local ssh config after update sshd
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-07-29 09:26:56 +02:00
Michael Tremer
ef7ae3fd1d Merge branch 'master' into next 2023-07-28 16:57:15 +00:00
Arne Fitzenreiter
6084fa89bf kernel: update to 6.1.42
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:34:59 +00:00
Michael Tremer
d4781c29ae core177: Fix typo in removing rngd init links
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:21:12 +00:00
Arne Fitzenreiter
8ffe9b67de core177: remove rngd if the addon was not installed via pakfire
the old version is linked against the old openssl and will fail.

fixes: #13197

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:19:56 +00:00
Arne Fitzenreiter
0bb82a95dd initskripts: remove buggy remount at halt and reboot
mount -f does nothing and also the sync calls should do nothing
on a already ro mounted filesystem.

fixes: #13195

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:06:54 +00:00
Adolf Belka
d622d1c62e openjpeg: Update to version 2.5.0
- Update from version 2.4.0 to 2.5.0
- Update of rootfile
- Changelog
    2.5.0 (May 2022)
	No API/ABI break compared to v2.4.0, but additional symbols for subset of
         components decoding (hence the MINOR version bump).
	* Encoder: add support for generation of TLM markers [\#1359]
          (https://github.com/uclouvain/openjpeg/pull/1359)
	* Decoder: add support for high throughput \(HTJ2K\) decoding. [\#1381]
          (https://github.com/uclouvain/openjpeg/pull/1381)
	* Decoder: add support for partial bitstream decoding [\#1407]
          (https://github.com/uclouvain/openjpeg/pull/1407)
	* Bug fixes (including security fixes)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
9a7a910c61 oci-python-sdk: Update to version 2.107.0
- Update from version 2.64.0 to 2.107.0
- Update of rootfile
- Changelog is too large to include here. For details look at the CHANGELOG.rst file in
   the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
148dca15f0 oci-cli: Update to version 3.29.4
- Update from version 3.7.3 to 3.29.4
- Update of rootfile
- Changelog is too large to include here. For details of the changes see the CHANGELOG.rst
   file in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
2a841d5ec2 observium-agent: Update to version 23.1
- Update from version 18.9.1 to 23.1
- Update of rootfile not required
- Changelog - There is no changelog file inb the source tarball.
   The commit changes are done in a SVN change management system. There is a Changelog
   page on the website, https://changelog.observium.org/, but this identifies all changes
   by their SVN number but with no relationship to the release version number.
- I have not been able to find out how to identify what changes have been made between
   version 18.9.1 and 23.1

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Michael Tremer
cf1dd0d4c8 core178: Ship oath-toolkit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
cb3e57a1f0 oath-toolkit: Update to version 2.6.9
- Update from version 2.6.7 to 2.6.9
- Update of rootfile not required
- Changelog
    2.6.9 (released 2023-07-09)
	** Improve compatibility with recent libxmlsec.
	** Update gnulib files, dropping gnulib self-tests.
    2.6.8 (released 2023-07-09)
	** libpskc: Fixes for recent libxmlsec releases.
	** pam_oath: Provide fallback pam_modutil_getpwnam implementation.
		Fixes <https://gitlab.com/oath-toolkit/oath-toolkit/-/issues/26> on
		Mac OS.  Patch from Nick Gaya <nicholasgaya+github@gmail.com>.
	** pam_oath: Don't fail authentication when pam_modutil_getpwnam doesn't
	** know the user when usersfile don't include ${USER} or ${HOME}. Closes: #27.
		Regression introduced in previous release.  Reported by Nick Gaya
		<nicholasgaya+github@gmail.com>.
	** pam_oath: Self-test improvements.
		Patch from Nick Gaya <nicholasgaya+github@gmail.com>.
	** liboath: Builds on Windows.
		The oath_authenticate_usersfile function is just a stub that returns
		an error.  This allows for use of the rest of the library on Windows.
		Thanks to David Woodhouse, see
		<https://gitlab.com/oath-toolkit/oath-toolkit/-/merge_requests/15>.
	** Disable PAM self-tests on Mac.  Fix --enable-root-tests logic.
	** Don't ship gtk-doc PDF's in tarball.
	** Use gitlog-to-changelog instead of git2cl.
	** Codespell typo fixes. Patch by Dimitri Papadopoulos.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Michael Tremer
3c6ceb551a core178: Ship ntfs-3g
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00
Adolf Belka
ccfa9a9199 ntfs-3g: Update to version 2022.10.3
- Update from version 2021.8.22 to 2022.10.3
- Update of rootfile not required
- Changelog
    Security release 2022.10.3 (Oct 3, 2022)
	    Rejected zero-sized runs
	    Avoided merging runlists with no runs
    Security release 2022.5.17 (May 26, 2022)
	    Improved defence against maliciously tampered NTFS partitions
	    Improved defence against improper use of options
	    Updated the documentation

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00