Commit Graph

7967 Commits

Author SHA1 Message Date
Peter Müller
531f57d71c Zut alors, uniq 'files' as well
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-17 16:48:44 +00:00
Peter Müller
609f41867d Sort 'files'
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-17 16:48:13 +00:00
Peter Müller
3cf7a3b153 Core Update 169: Ship OpenVPN 2FA changes
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-17 16:47:44 +00:00
Peter Müller
29df9f89c9 Core Update 169: Ship libtiff and krb5
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-17 16:39:12 +00:00
Peter Müller
4c46690411 Core Update 169: Remove pakfire metadata for krb5 and libtiff
Both packages have become part of the core system, so these files
are not longer needed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-17 16:39:12 +00:00
Stefan Schantl
8d920449d2 libtiff: Move into core system.
pango and the PDF tools as core parts are linked against
libtiff, therefore this library has to become a part of the
core distribution too.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-06-17 16:39:12 +00:00
Stefan Schantl
c13e562b6e krb5: Move package into core system.
On one hand, the key.dns_resolver binary is linked against libkrb5, so this
library at least is required by the base system.

On the other hand this easily allows different services on the firewall
to use kerberos for authentication (ssh etc).

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-06-17 16:39:12 +00:00
Peter Müller
65264b3ba6 Core Update 169: Ship U-Boot
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-17 16:39:12 +00:00
Peter Müller
ed5572536f Core Update 169: Ship misc-progs
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-17 16:39:12 +00:00
Timo Eissler
6a53c26cf7 perl-URI-Encode: New package
Simple percent Encoding/Decoding

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:22:31 +00:00
Michael Tremer
339b84d509 openvpn-2fa: Import a prototype of an authenticator
This script runs aside of OpenVPN and connects to the management socket.
On the socket, OpenVPN will post any new clients trying to authenticate
which will be handled by the authenticator.

If a client has 2FA enabled, it will be challanged for the current token
which will then be checked in a second pass.

Clients which do not have 2FA enabled will just be authenticated no
matter what and tls-verify will have handled the rest.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-06-17 10:20:18 +00:00
Michael Tremer
f27d021470 openpvn-2fa: Fix rootfiles
Some rootfiles where in the wrong location, some others had some
architecture hard-coded.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-06-17 10:20:18 +00:00
Timo Eissler
dc124917e3 perl-MIME-Base32: New package
Base32 encoder and decoder

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:20:17 +00:00
Timo Eissler
e97759c292 perl-Imager-QRCode: New package
Generate QR Code with Imager using libqrencode

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:20:17 +00:00
Timo Eissler
bc8bea129c perl-Imager: New package
Perl extension for Generating 24 bit Images

Required by perl-Imager-QRCode.

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:20:17 +00:00
Timo Eissler
cb36c0929c perl-Module-Install: New package
Module::Install configuration system

Required by perl-Imager-QRCode.

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:20:17 +00:00
Timo Eissler
3aeadfd8bd perl-YAML-Tiny: New package
Read/Write YAML files with as little code as possible

Required by perl-Module-Install.

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:20:17 +00:00
Timo Eissler
bfc889a70a perl-Module-ScanDeps: New package
Recursively scan Perl code for dependencies

Required by perl-Module-Install.

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:20:17 +00:00
Timo Eissler
a102cdbae1 perl-Module-Build: New package
Build and install Perl modules

Required by perl-Module-Install.

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:20:17 +00:00
Timo Eissler
6f8b1c534e perl-File-Remove: New package
Remove files and directories

Required by perl-Module-Install.

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:20:17 +00:00
Timo Eissler
3780b7a4ac libqrcode: New package
A fast and compact QR Code encoding library.

Homepage: https://fukuchi.org/works/qrencode/
Source: https://fukuchi.org/works/qrencode/qrencode-4.1.1.tar.gz

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:20:16 +00:00
Timo Eissler
7e4af6eb54 oath-toolkit: New package
OATH Toolkit provide components to build one-time password
authentication systems.

Homepage: https://www.nongnu.org/oath-toolkit/index.html
Source: https://download.savannah.nongnu.org/releases/oath-toolkit/oath-toolkit-2.6.7.tar.gz

Signed-off-by: Timo Eissler <timo.eissler@ipfire.org>
2022-06-17 10:20:14 +00:00
Peter Müller
961e253e1a Core Update 169: Ship bind
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-17 06:56:05 +00:00
Matthias Fischer
07bd97edf7 bind: Update to 9.16.30
For details see:
https://downloads.isc.org/isc/bind9/9.16.30/doc/arm/html/notes.html#notes-for-bind-9-16-30

"Bug Fixes

    The fetches-per-server quota is designed to adjust itself downward
    automatically when an authoritative server times out too frequently.
    Due to a coding error, that adjustment was applied incorrectly,
    so that the quota for a congested server was always set to 1. This
    has been fixed. [GL #3327]

    DNSSEC-signed catalog zones were not being processed correctly. This
    has been fixed. [GL #3380]

    Key files were updated every time the dnssec-policy key manager ran,
    whether the metadata had changed or not. named now checks whether
    changes were applied before writing out the key files. [GL #3302]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-17 06:55:37 +00:00
Peter Müller
f391d8628b linux-firmware: Update to 20220610
No changelog is provided, please refer to
https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/
for all activity since the previous version.

This patch includes necessary directives for shipping added or modified
firmware files with Core Update 169, and deleting appropriate files on
existing installations.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-06-13 20:49:00 +00:00
Peter Müller
d819a62b14 linux: Update rootfiles
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-13 20:45:51 +00:00
Peter Müller
6d084eb8b1 xfsprogs: Fix rootfile
For some reason, this particular file's name always comprises of x86_64.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-13 20:36:13 +00:00
Peter Müller
d462422cc3 Core Update 169: Ship tzdata
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-13 15:52:19 +00:00
Peter Müller
0371726e94 tzdata: Update to 2022a
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-13 15:52:06 +00:00
Peter Müller
0360d235c8 Core Update 169: Ship and apply sysctl changes
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-13 15:49:40 +00:00
Peter Müller
d90b39982b Core Update 169: Ship localnet initscript
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-13 15:48:13 +00:00
Peter Müller
b41631c190 Core Updatw 169: Ship and apply updated Linux kernel
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-13 15:46:50 +00:00
Peter Müller
db8639bbfa linux: Update to 5.15.46
Please refer to https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.46
for the changelog of this version.

Due to operational constraints, ARM rootfile changes are simulated.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
2022-06-13 15:38:42 +00:00
Peter Müller
3e7e92652e Core Update 169: Ship ovpnmain.cgi
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-11 14:35:23 +00:00
Peter Müller
a56d36b078 Core Update 169: Ship and restart Apache
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-09 19:56:13 +00:00
Peter Müller
0f5b48467f Core Update 169: Ship toolchain changes
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-07 16:52:15 +00:00
Peter Müller
7dd292543e Core Update 169: Ship and restart Squid
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-07 16:46:37 +00:00
Peter Müller
3f8263b80a boost: Fix ARM rootfiles as well
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-07 16:44:26 +00:00
Matthias Fischer
b8939e4883 boost: Fix rootfile for x86_64
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-07 06:30:51 +00:00
Peter Müller
053189a4c3 Core Update 169: Ship lmdb
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-06 12:11:51 +00:00
Peter Müller
7567e71c07 Merge branch 'next' into temp-c169-development 2022-06-05 16:48:54 +00:00
Peter Müller
6a11476c28 Core Update 169: Ship changes related to manualpages in the webIF
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-04 09:24:56 +00:00
Peter Müller
4a4fc8f19a Core Update 168: Ship fcrontab and rebuild it from scratch
This is necessary due to IDSv4 changes introducing changes to fcrontab.
While this patch will cause any custom cron jobs configured there to be
lost, it is better to start with a defined state rather than sed'ing
on this file.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Cc: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-04 08:43:15 +00:00
Peter Müller
9152d4e453 Core Update 169: Ship and restart Unbound
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-04 08:38:41 +00:00
Matthias Fischer
ba4f3d9a23 unbound: Update to 1.16.0
For details see:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-0

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-06-04 08:37:02 +00:00
Peter Müller
b2b0bb7d82 Merge branch 'next' into temp-c169-development 2022-06-04 08:36:10 +00:00
Peter Müller
de5896985c intel-microcode: Update rootfile
Reported-by: Jon Murphy <jcmurphy26@gmail.com>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-31 17:21:54 +00:00
Peter Müller
8065ec2108 Core Update 169: Ship libxslt
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-30 19:46:45 +00:00
Adolf Belka
9bee4ce915 libxslt: Update to version 1.1.35
- Update from version 1.1.34 to 1.1.35
- Update of rootfile
- Changelog
   v1.1.35: Feb 16 2022:
     - Security:
	  [CVE-2021-30560] Fix use-after-free in xsltApplyTemplates
	  Fix memory leak in xsltDocumentElem (David King)
	  Fix memory leak in xsltCompileIdKeyPattern (David King)
	  Fix double-free with stylesheets containing entity nodes
     - Fixed regressions:
	  Fix performance regression with predicates in patterns
	  Fix regression in xsltComputeSortResult
     - Bug fixes:
	  Fix conflict resolution for templates with same priority
	  Fix xsl:number generating invalid UTF-8
	  Support attribute value templates in xsl:sort lang attributes
	  Don't pass first <xsl:sort> in <xsl:apply-templates> twice
	  Fix quadratic runtime with text and <xsl:message>
	  Don't allow empty EXSLT durations
     - Improvements:
	  Add xsltproc --huge Argument via libxml XML_PARSE_HUGE (William N. Braswell, Jr.)
     - Tests, code quality, fuzzing:
	  Remove .travis.yml
	  Fix some misleading indentation (David King)
	  Use actual types for templates in struct _xsltStylesheet
	  Add CI for CMake on MSVC (Markus Rickert)
	  Check for null pointer before calling freelocale
	  Add CI test for Python 3
	  Don't set maxDepth in XPath contexts
	  Transfer XPath limits to XPtr context
	  Stop using maxParserDepth XPath limit
	  Make long-to-double cast explicit in date.c
	  Disable LeakSanitizer
	  Run clang CI tests with -Wimplicit-int-conversion
	  Fix implicit-int-conversion warning in exslt/crypto.c
	  Fix clang -Wimplicit-int-conversion warning (David Kilzer)
	  Fix clang -Wconditional-uninitialized warning in libxslt/numbers.c (David Kilzer)
	  Fix -Wshadow warnings in libexslt/dynamic.c (David Kilzer)
	  Also search parent dir for source XML when fuzzing
     - Build system, portability:
	  Add CMake build files (Markus Rickert)
	  Initial support for Python 3 (Suleyman Poyraz)
	  Call ANSI versions of WinAPI functions explicitly
	  Remove redundant flags from pkg-config files
	  Suppress automake warning in tests/XSLTMark
	  Fix linking libexslt dynamic library when using MinGW (Vadim Zeitlin)
	  Added platform specific path separators (Dmitriy Korovkin)
	  win32: allow passing *FLAGS on command line
	  Fix export of xsltExtMarker on Windows (David Kilzer)
	  Fix redundant includes already in libexslt.h (David Kilzer)
	  Minor fixes to configure.js
	  Fix variable syntax in Python configuration
	  Add new EXSLT string tests to EXTRA_DIST
	  Fix xml2-config check in configure script
	  win32: Add configuration for profiler (Chun-wei Fan)
	  Check whether 'xml2-config --dynamic' is supported
     - Documentation:
	  Add Makefile rule to regenerate xsltproc.html
	  Update links
	  Remove MAINTAINERS
	  Upload documentation to GitLab Pages
	  Add documentation in devhelp format
	  Add --enable-rebuild-docs configure option
	  Fix libexslt header summaries
	  Fix validity of tutorial XML (David King)
	  Use DocBook URL for tutorial DTD (David King)
	  Update libxslt.doap
	  Add missing options to xsltproc man page

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-30 19:46:16 +00:00
Peter Müller
5d03d99e4c Core Update 169: Ship libxml2
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-05-30 19:45:55 +00:00