Commit Graph

16284 Commits

Author SHA1 Message Date
Adolf Belka
d5b6dfba96 curl: Update to 7.76.1
- Update from 7.75.0 to 7.76.1
- Update of rootfile
- Changelog is too large to include here.
   Full details can be found in the CHANGES file in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-20 09:06:16 +00:00
Michael Tremer
43988191e6 core157: Crypt-PasswdMD5
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-20 09:05:57 +00:00
Adolf Belka
6bfac21862 Crypt-PasswdMD5: Update to 1.41
- Update from 1.3 to 1.41
- Update of rootfile not needed
- Changelog
1.41  2021-02-01T15:56:00
        - Adopt new repo structure. See
                http://savage.net.au/Ron/html/My.Workflow.for.Building.Distros.html.
        - Reformat Makefile.PL.
        - Add t/00.*.
        - Update POD to change RT to github.
1.40  2013-09-30T15:32:00
        - No code changes.
        - Maintenance by Ron Savage <rsavage@cpan.org>.
        - Fabricate some version #s for this file.
        - Made Passwd.pm utf-8 so we can use Luis' proper name.
        - Clean up code formatting.
        - Clean up Makefile.PL.
        - Use fake (ASCII) ñ in Makefile.PL to keep Solaris happy. See RT#68478.
        - Clean up README.
        - Add Build.PL.
        - Add Changes and Changelog.ini.
        - Add META.*.
        - Adopt Test::More in t/basic.t.
        - Adopt 'use strict' and 'use warnings' to PasswdMD5.pm and t/basic.t.
        - Accept patch for new function random_md5_salt(), and tests, from kbrint@rufus.net.
                With thanx. See RT#37036.
        - Add xt/author/pod.t.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-20 09:05:37 +00:00
Michael Tremer
f9370e1046 core157: Ship Canary-Stability
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-20 09:05:24 +00:00
Adolf Belka
c9131f4cf6 Canary-Stability: Needed for building Convert-UUlib since version 1.5
- Install Canary-Stability-2013
   Required to build Convert-UUlib since version 1.5 (2015)
- Create rootfile
- Canary::Stability - canary to check perl compatibility for schmorp's
    modules

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-20 09:05:03 +00:00
Michael Tremer
446f722f2f core157: Ship Convert-UUlib
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-20 09:04:49 +00:00
Adolf Belka
c43dffab08 Convert-UUlib: Update to 1.8
- Update from 1.06 to 1.8
- Update of rootfiles
- Changelog
1.8  Thu Dec 17 02:23:53 CET 2020
	- no bugfixes in this release due to lack of known bugs, but the major changes
          in this release might have introduced new bugs, so watch out.
	- update large decoder example to disable OPT_AUTOCHK and use Smerge -1.
	- some micro-optimisations.
        - avoid costly string comparisons by comparing hashes when isnerting items,
          which speeds up insertion by a constant factor.
        - improve uulist (and other) structure layout and size.
        - reverse the order of file list items, which heuristically improves
          match speed with large usenet file lists.
        - use getc instead of fgetc, which makes no difference on gnu/linux.
        - clean up _FP symbol names toi not start with an underscore.
        - use feof_unlocked and ferror_unlocked.
        - implement a faster ascii-only strnicmp.
	- misc very minor code improvements.
        - remove quite a bit of pre-posix/dos/etc. cruft.
        - use flockfile, if available, for a potential but small
          speed gain.
        - speed up inner yenc decoder loop.
        - kentnl said that this module should no longer claim to be a simple
          interface to uulib, as the bunndled copy is now better maintained
          than the original upstream library.
1.71 Tue Mar 17 00:54:06 CET 2020
	- backport to c89 (patch by Paul Howarth).
1.7  Sat Feb 29 22:07:54 CET 2020
	- new function: GetFileList.
	- experimental perlmulticore support (see manpage).
        - Initialize is now a NOP and CleanUp automatically initializes again.
        - updated example decoder and documentation a bit.
	- include ecb.h to deal with compiler builtins and endianness.
	- some further µ-optimisations in hot code, especially for yEnc.
        - replace crc32 function by slice-by-16 version by Stephan Brumme,
          which should speed up yEnc en-/decoding.
        - yEnc: do not calculate two crcs per part, instead, combine
          the part crcs together to form the file crc.
        - yEnc: allow pcrc= in addition to pcrc32= for yenc trailers, as
          some draft mentions both and it is actually in active use.
        - yEnc: ignore crc32= on multiparts, except on the last part,
          which avoids spurious corruption warnings.
        - be more precise in documenting code licenses in COPYING.
        - convert constant creation to the method I normally use.
        - use common::sense.
1.62 Mon Feb 17 23:19:42 CET 2020
	- major performance improvement by simplifying code in _FP_gets
          to not use fscanf. This might slow things down on platforms
          with very slow fgetc.
1.61 Sun Feb  9 18:38:29 CET 2020
	- lint uulib: fix some format string type mismatches
          and some other minor issues.
1.6  Thu Oct 24 17:11:54 CEST 2019
	- fix heap overflow (testcase by Noel Duffy, reported
          by Robert Scheck). The defense-in-depth mechanism based
          on mmap should make this unexploitable for other than denial
          of service, on systems supporting mmap/mprotect.
1.5  Sat Jul 11 03:56:06 CEST 2015
	- fix a heap overflow (testcase by Krzysztof Wojtaś).
        - on systems that support it (posix + mmap + map_anonymous),
          allocate all dynamic areas via mmap and put four guard
          pages around them, to catch similar heap overflows
          safely in the future.
        - find a safer way to pass in CC/CFLAGS to uulib.
        - added stability canary support.
1.4  Sun May 29 17:17:01 CEST 2011
	- avoid a classical buffer overflow in case a progress
          message is too long.
        - this release adds dependencies for snprintf/vsnprintf.
	- some uuencode encoders do not generate a final "space" line
          before the "end" marker, so do not rely on the line to be there.
1.34 Tue Dec 14 22:20:00 CET 2010
	- fix a one-byte-past-end-write buffer overflow in UURepairData
          (reported, analysed and testcase provided by Marco Walther).
	- quoted-printable decoding was completely broken, try a fix.
1.33 Wed Oct 28 09:04:38 CET 2009
	- handle yEnc files with part end=0 and total= more gracefully.
          I wish yEnc had been created by somebody who knows;
          what he does;
          but I doubt he even knows;
          what he did.
1.32 Wed Sep 16 20:07:13 CEST 2009
	- Due to a glitch with CVS, configure lacked executable bits.
          (Quickly reported by Anton Berezin).
1.31 Wed Sep 16 09:04:30 CEST 2009
        - do not use system-replacements for case-insensitive string
          functions when found, as they are broken on too many systems
          (mostly bsds, as usual, but at least some versions of GNU/Linux
          disagree with themselves apparently). Analyzed by Anton Berezin.
1.3 Sat Aug 29 01:24:35 CEST 2009
	- major changes, new bugs and changes in decoding behaviour are
          expected (but not intended).
        - major scanning and decoding speed-up (by a factor of 4),
          by replacing ultra-slow _FP_gets and improving IsKnownHeader
          (but fgets is *still* responsible for >50% if the time).
        - new option OPT_AUTOCHECK to disable O(n) UUCheckGlobalList
          call after every loadfile, majorly speeds up large decodes
          (easily by a factor of 10..100).
        - allow "Smerge -1" to call UUCheckGlobalList.
        - majorly speed up part insertion (still O(n), but much faster).
	- allow for 1023 octet headers instead of the standard
          255 octet ones.
        - support strcasestr, strcasecmp, strncasecmp for added speed.
1.12 Mon Oct 13 14:11:01 CEST 2008
	- use the yencode filesize as additional matching criterium
          to avoid false matches.
        - made the example decoder more verbose w.r.t. error handling.
        - removed potentially confusing decode_temp calls from
          example decoder.
1.11 Fri Jun 13 15:32:30 CEST 2008
	- don't ask.
1.10 Fri Jun 13 14:22:42 CEST 2008
	- fix an infinite-looping problem when scanning in freestyle
          mode (testcase provided by Pieter Geens and Reinhard Pfau).
1.09 Fri May 25 19:38:11 CEST 2007
        - create something sensible, trust a windows program to fuck
          it up: work around literal "(null)" filenames in yenc-encoded
          files.
        - some minor cleanups.
1.08 Sat Dec 16 23:27:13 CET 2006
	- URGENT update, the last release did not
          decode files correctly, usually not at all.
        - my last patch was, of course, completely bogus.
          (sorry. looked simple...).
1.07 Sun Dec 10 17:41:46 CET 2006
	- fixed an uninitialised variable based on analysis
          and patch by Mark Martinec.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-20 09:04:34 +00:00
Michael Tremer
78a4ecd5c4 core157: Ship Convert-TNEF
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-20 09:04:19 +00:00
Adolf Belka
08448b82cc Convert-TNEF: Update to 0.18
- Update from 0.17 to 0.18
- Update of rootfile not needed
- Changelog
        - Add IO::Wrap dependency to Makefile.PL (RT78412).
        - Change longname() to detect names in newer versions of Outlook.
          (RT78484)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-20 09:04:01 +00:00
Michael Tremer
aae62d83b2 hostapd: Bump package version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:05:02 +00:00
Michael Tremer
5f50e89217 core157: Ship network-functions.pl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:04:38 +00:00
Michael Tremer
5a4412385f hostaopd: Drop box with links to other configuration pages
We do not have this for any other feature and it clutters the UI.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:58 +00:00
Michael Tremer
53d03ef352 hostapd: Find device by MAC address
With wireless device as members in bridges, we cannot predict the name
very well. So we will use the MAC address and find the correct device
name when we launch hostapd.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:58 +00:00
Adolf Belka
46f445b1a7 poppler: Update of rootfile due to update of glib
- Update of glib resulted in additional files in the poppler rootfile
    which has been updated in this patch

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:58 +00:00
Michael Tremer
ba5ae14aeb core157: Ship glib
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:58 +00:00
Adolf Belka
b1d7e005e8 glib: Update to 2.68.1
- Update from 2.54.3 to 2.68.1
- Update rootfile
- glib-2.54.3-compile-fixes-1.patch not required, all changes now
   incorporated in the source tarball
- meson/ninja have replaced autotools
- As so's updated ran find-dependencies
   No additional programs flagged up
- Changelog is too large to include here
   Full details can be viewed in the NEWS file in the source tarball
   Large number of bugs fixed

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:57 +00:00
Michael Tremer
1d681743eb hostapd: Drop custom configuration from initscript
The initscript it setting a lot of options which are set by hostapd
which will fail to start the AP instead of using fire-and-forget.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-16 10:03:57 +00:00
Adolf Belka
9f2ee0e9bf cifs-utils: Update to 6.13
- Update from 6.12 to 6.13
- Update of rootfile not needed
- Changelog
   This is a security release to address the following bug:
   CVE-2021-20208 cifs.upcall kerberos auth leak in container

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:31:54 +00:00
Adolf Belka
eea5db042f cups: Update to 2.3.3op2
- Update from 2.3.3 to 2.3.3op2
- OpenPrinting statement from March 2021:-
   CUPS has new home at OpenPrinting
   Due to the fact that CUPS development at Apple has stopped since the
   beginning of 2020 we had forked CUPS some months ago to incorporate
   patches and fixes from the distributions. As Apple did not resume the
   upstream work on CUPS, we have made OpenPrinting now the official
   upstream home for CUPS.
   This especially means that we can now continue developing CUPS,
   independent of Apple. So we can add features and lead CUPS into the new
   architecture without PPD files and with Printer Applications.
   CUPS has a new home page now and what was formerly our fork is now the
   official CUPS repository. Upcoming releases will be of the new 2.4.x
   series, without “opX” suffix as now. Also all documentation files which
   come with it are updated to point to the OpenPrinting resources.
- Update of rootfile not required.
- Changelog
   Changes in CUPS v2.3.3op2
    - Security: Fixed a buffer (read) overflow in the `ippReadIO` function
      (CVE-2020-10001)
    - Clarified the documentation for the "Listen" directive (Issue #53)
    - Fixed duplicate ColorModel entries for AirPrint printers (Issue 59)
    - Fixed directory/permission defaults for Debian kfreebsd-based systems
      (Issue #60, Issue #61)
    - Fixed crash bug in `ppdOpen` (Issue #64, Issue #78)
    - Fixed regression in `snprintf` emulation function (Issue #67)
    - The scheduler's systemd service file now waits for the nslcd service to start
      (Issue #69)
    - The libusb-based USB backend now uses a simpler read timer implementation to
      avoid a regression in a previous change (Issue #72)
    - The PPD caching code now only tracks the `APPrinterIconPath` value on macOS
      (Issue #73)
    - Fixed segfault in help.cgi when searching in man pages (Issue #81)
    - Root certificates were incorrectly stored in "~/.cups/ssl".
Changes in CUPS v2.3.3op1
    - The automated test suite can now be activated using `make test` for
      consistency with other projects and CI environments - the old `make check`
      continues to work as well, and the previous test server behavior can be
      accessed by running `make testserver`.
    - ippeveprinter now supports multiple icons and strings files.
    - ippeveprinter now uses the system's FQDN with Avahi.
    - ippeveprinter now supports Get-Printer-Attributes on "/".
    - ippeveprinter now uses a deterministic "printer-uuid" value.
    - ippeveprinter now uses system sounds on macOS for Identify-Printer.
    - Updated ippfind to look for files in "~/Desktop" on Windows.
    - Updated ippfind to honor `SKIP-XXX` directives with `PAUSE`.
    - Updated IPP Everywhere support to work around printers that only advertise
      color raster support but really also support grayscale (Issue #1)
    - ipptool now supports DNS-SD URIs like `ipps://My%20Printer._ipps._tcp.local`
      (Issue #5)
    - The scheduler now allows root backends to have world read permissions but not
      world execute permissions (Issue #21)
    - Failures to bind IPv6 listener sockets no longer cause errors if IPv6 is
      disabled on the host (Issue #25)
    - The SNMP backend now supports the HP and Ricoh vendor MIBs (Issue #28)
    - The scheduler no longer includes a timestamp in files it writes (Issue #29)
    - The systemd service names are now "cups.service" and "cups-lpd.service"
      (Issue #30, Issue #31)
    - The scheduler no longer adds the local hostname to the ServerAlias list
      (Issue #32)
    - Added `LogFileGroup` directive in "cups-files.conf" to control the group
      owner of log files (Issue #34)
    - Added `--with-max-log-size` configure option (Issue #35)
    - Added `--enable-sync-on-close` configure option (Issue #37)
    - Added `--with-error-policy` configure option (Issue #38)
    - IPP Everywhere PPDs could have an "unknown" default InputSlot (Issue #44)
    - The `httpAddrListen` function now uses a listen backlog of 128.
    - Added USB quirks (Apple issue #5789, #5823, #5831)
    - Fixed IPP Everywhere v1.1 conformance issues in ippeveprinter.
    - Fixed DNS-SD name collision support in ippeveprinter.
    - Fixed compiler and code analyzer warnings.
    - Fixed TLS support on Windows.
    - Fixed ippfind sub-type searches with Avahi.
    - Fixed the default hostname used by ippeveprinter on macOS.
    - Fixed resolution of local IPP-USB printers with Avahi.
    - Fixed coverity issues (Issue #2)
    - Fixed `httpAddrConnect` issues (Issue #3)
    - Fixed web interface device URI issue (Issue #4)
    - Fixed lp/lpr "printer/class not found" error reporting (Issue #6)
    - Fixed xinetd support for LPD clients (Issue #7)
    - Fixed libtool build issue (Issue #11)
    - Fixed a memory leak in the scheduler (Issue #12)
    - Fixed a potential integer overflow in the PPD hashing code (Issue #13)
    - Fixed output-bin and print-quality handling issues (Issue #18)
    - Fixed PPD options getting mapped to odd IPP values like "tray---4" (Issue #23)
    - Fixed remote access to the cupsd.conf and log files (Issue #24)
    - Fixed the automated test suite when running in certain build/CI environments
      (Issue #25)
    - Fixed a logging regression caused by a previous change for Apple issue #5604
      (Issue #25)
    - Fixed fax phone number handling with GNOME (Issue #40)
    - Fixed potential rounding error in rastertopwg filter (Issue #41)
    - Fixed the "uri-security-supported" value from the scheduler (Issue #42)
    - Fixed IPP backend crash bug with "printer-alert" values (Issue #43)
    - Removed old Solaris inetconv(1m) reference in cups-lpd man page (Issue #46)
    - Fixed default options that incorrectly use the "custom" prefix (Issue #48)
    - Fixed a memory leak when resolving DNS-SD URIs (Issue #49)
    - Fixed systemd status reporting by adopting the notify interface (Issue #51)
    - Fixed crash in rastertopwg (Apple issue #5773)
    - Fixed cupsManualCopies values in IPP Everywhere PPDs (Apple issue #5807)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:31:45 +00:00
Adolf Belka
93ebde9b3b cups-filters: Update to 1.28.8
- Update from 1.28.7 to 1.28.8
- Update of rootfile not required
- Changelog
    CHANGES IN V1.28.8
	- libcupsfilters: Made check whether the driverless PPD to
	  generate should be a fax out PPD more reliable (Issue #343).
	- foomatic-rip: Options in the 5th command line argument of
	  the CUPS filter command line are separated only by white
	  space and not by comma, also make sure that an option "none"
	  is not considered a custom page size (Issue #348).
	- implicitclass: Raise timeout for cups-browsed's answer from
	  20s to 60s (Pull request #346).
	- libcupsfilters: In the PPD generator really give priority to
	  Apple Raster against PDF (Issue #331).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:31:38 +00:00
Michael Tremer
1bd27a9a99 netsnmpd: Bump version to link against new lm_sensors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:31:16 +00:00
Michael Tremer
3c4baac573 core157: Ship lm_sensors & collectd
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:31:01 +00:00
Adolf Belka
a50af14f38 collectd: patch for successful build with updated lm_sensors
- Patch to remove checks for SENSORS_API_VERSION upper limit
   Patch based on one by Pavel Rochnyack
   https://git.ipfire.org/?p=thirdparty/collectd.git;a=commitdiff;h=d5a3c020>
- Without this patch collectd fails to build with the updated lm_sensors
   version (3-6-0) due to a problem with the version of libsensors used by
   lm_sensors

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:28:12 +00:00
Adolf Belka
c85b97ed5a lm_sensors: Update to 3-6-0
- Update from 3-4-0 to 3-6-0
- Update of rootfilers in each architecture
   Only the library version changed in each rootfile
- Installed updated lm_sensors. Confirmed updated version was installed.
   sensors-detect ran successfully but could not confirm successful sensor
   detection as installation was run on vm testbed and this has no sesnors
   Testing on real hardware to confirm that sensors are detected and
   sensor-* directories correctly created in IPFire.
- Changelog
   3.6.0 (2019-10-18)
     configs: Added a number of new configuration files
     fancontrol: AVERAGE env variable can be used to set the number of previ>
     Makefile: The MACHINE variable has been renamed to ARCH
     sensord: Add an option -1/--oneline to print chip and adapter on the sa>
     sensors: Fixed a stray comma bug in the JSON output
              Fixed Fahrenheit conversion with raw and JSON output
              Scale voltage and current values in the default output format
     sensors-detect: Add detection of AMD Family 17h, models 30h, 70h
                     Add detection of some AMD Family 15h models
                     Add detection of AMD Family 16h model 30h power sensors
                     Add detection of Hygon Family 18h thermal sensors
                     Add detection of Nuvoton NCT6797D
                     Add detection of Nuvoton NCT6798D
                     Add detection of Nuvoton NCT6112D/NCT6114D/NCT6116D
                     Fix printing CPU info on non-x86 arches
                     Fix printing lm_sensors version
                     Mark Fintek F75387SG/RG as supported by the f75375s dri>
   3.5.0 (2018-11-23)
     Fixed disappearance of certain hwmon chips with 4.19+ kernels
     Add the find-driver script for debugging
     Various documentation and man page improvements
     Fix various issues found by Coverity Scan
     Fix compilation with the musl C library
     Development version string now contains "+git" instead of "+SVN"
     Updated links in documentation to reflect the new home of lm_sensors
     sensors.1: Add reference to sensors-detect
                Document -j option (json output)
     sensors: Add support for json output
              Add support for power min, lcrit, min_alarm, lcrit_alarm
     sensors-detect: Fix systemd paths
                     Add detection of Fintek F81768
                     Only probe I/O ports on x86
                     Add detection of Nuvoton NCT6793D
                     Add detection of Microchip MCP9808
                     Mark F71868A as supported by the f71882fg driver
                     Mark F81768D as supported by the f71882fg driver
                     Mark F81866D as supported by the f71882fg driver
                     Add detection of various ITE chips
                     Add detection of Nuvoton NCT6795D
                     Add detection of DDR4 SPD
                     Add detection of ITE IT8987D
                     Add detection of AMD Family 17h temperature sensors
                     Add detection of AMD KERNCZ SMBus controller
                     Add detection of various Intel SMBus controllers
                     Add detection of Giantec GT30TS00
                     Add detection of ONS CAT34TS02C and CAT34TS04
                     Add detection of AMD Family 15h Model 60+ temperature s>
                     Add detection of Nuvoton NCT6796D
                     Add detection of AMD Family 15h Model 70+ temperature s>
     configs: Add sample configuration files.
     sensors.conf.default: Add hardwired inputs of NCT6795D
                           Add hardwired inputs of F71868A
                           Add hardwired NCT6796D inputs
     vt1211_pwm: replaced deprecated sub shell syntax
                 run with bash instead of sh
     pwmconfig: replaced deprecated sub shell syntax
     fancontrol: replaced deprecated sub shell syntax
                 save original pwm values
     fancontrol.8: replaced deprecated sub shell syntax
     libsensors: Add support for SENSORS_BUS_TYPE_SCSI
                 Add support for power min, lcrit, min_alarm, lcrit_alarm

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:27:11 +00:00
Adolf Belka
8bc33c6db3 meson: Update to 0.57.2
- Update from 0.56.0 to 0.57.2
- Update of rootfile
- Changelog is too large and complicated layout to include here
   Full details can be seen at https://mesonbuild.com/Release-notes.html

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:26:59 +00:00
Michael Tremer
ce11ea46c6 core157: Ship libxcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:26:40 +00:00
Adolf Belka
85ff8d4586 libxcrypt: Update to 4.4.19
- Update from 4.4.17 to 4.4.19
- Update of rootfile not needed
- Changelog
   libxcrypt NEWS -- history of user-visible changes.
    Version 4.4.19
     * Improve fallback implementation of explicit_bzero.
     * Add glibc-on-CSKY, ARC, and RISCV-32 entries to libcrypt.minver.
       These were added in GNU libc 2.29, 2.32, and 2.33 respectively
       (issue #122).
     * Do not build xcrypt.h if we’re not going to install it.
     * Do not apply --enable-obsolete-api-enosys mode to fcrypt.
     * Compilation fix for NetBSD.  NetBSD’s <unistd.h> declares encrypt
       and setkey to return int, contrary to POSIX (which says they return
       void).  Rename those declarations out of the way with macros.
     * Compilation fixes for building with GCC 11.
       Basically fixes for explicit type-casting.
     * Force update of existing symlinks during installation (issue #120).
    Version 4.4.18
     * Fix compilation errors on (Free)BSD (issue #110).
     * Fix conversion error in lib/alg-gost3411-core.c, which is seen by
       some sensitive compilers.
     * Convert build scripts to Perl.
       The minimum version of Perl required is 5.14.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:26:23 +00:00
Michael Tremer
dbdc389bc3 core157: Ship file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:23:06 +00:00
Adolf Belka
05599e171c file: Update to 5.40
- Update from 5.39 to 5.40
- Update of rootfile not needed
- Changelog
   * release 5.40
	* PR/234: Add limit to the number of bytes to scan for encoding
	* PR/230: Fix /T (trim flag) for regex
	* PR/77: Trim trailing separator.
	* PR/211: Convert system read errors from corrupt ELF
	  files into human readable error messages
	* fix multithreaded decompression file descriptor issue
	  by using close-on-exec (Denys Vlasenko)
	* Exclude surrogate pairs from utf-8 detection (Michael Liu)
	* Include # to the list of ignored format chars (Werner Fink)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:22:53 +00:00
Michael Tremer
ac92c4d971 core157: Ship expat
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:22:39 +00:00
Adolf Belka
a14c8d7d0f expat: Update to 2.3.0
- Update from 2.2.0 (2016) to 2.3.0 (2021)
- Update of rootfile
- Changelog is too large to include here
   Full details can be viewed in the Changes file in the source tarball
   Large number of bug fixes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:22:15 +00:00
Michael Tremer
5aff2d126f core157: Ship apache
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:21:56 +00:00
Peter Müller
1fe39ef505 httpd: delete comment blocks and unused directives from our configuration
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:20:34 +00:00
Peter Müller
10189aa197 httpd: apply the same security headers on the captive portal instance as we do elsewhere
The Captive Portal should not be framed or leak sensitive detail via
Referrers either.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:20:30 +00:00
Peter Müller
59fa881ea7 httpd: disable sending ETag header completely
These cause caching trouble and pose a potential security risk due to
exposing inode numbers of files within the Apache site directories on an
IPFire machine.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:20:17 +00:00
Peter Müller
a8996f857c httpd: remove compatibility instructions for very old browsers
These are not in use any more - and if they would, we don't support them.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-14 17:20:02 +00:00
Arne Fitzenreiter
7885b1509c kernel: update to 4.14.230
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:37:17 +00:00
Michael Tremer
8cc05c7486 core157: Fix ppp symlink
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:36:08 +00:00
Adolf Belka
748ab174c2 libid3tag: Addition of pkgconfig file
- id3tag.pc pkgconfig file required for mpd-0.22.6 to find libid3tag
   library files
- Update of rootfile
- update lfs to install id3tag.pc file to /usr/lib/pkgconfig directory

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:35:29 +00:00
Michael Tremer
6216b6709f core157: Ship libupnp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:35:16 +00:00
Adolf Belka
1106abd31c libupnp: Update to 1.14.5
- Update from 1.6.18 to 1.14.5
- Update required for successfgul build of mpd-0.22.6
- Update of rootfile
- Changelog is too large to include here
   Full details can be found in the ChangeLog file in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:33:12 +00:00
Adolf Belka
4bad4d736c mpd: Update to 0.22.6
- Update from 0.19.19 to 0.22.6
- Update rootfile
- Required update of libupnp
- Autotools no longer available
   Build changed to meson
   Meson build required addition of pkgconfig file for libid3tag
- Changelog is too large to include here.
   Full details can be found in the NEWS file in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:32:49 +00:00
Michael Tremer
9272ab4a20 core157: Ship changes on RRD graphs tooling
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:32:00 +00:00
Leo-Andres Hofmann
c095f81435 rrdimage: Improve CGI & cosmetic changes
Write graph error messages to the system log, to simplify
further inspection by the user.
Add additional parameter check to prevent a possible redirect loop
if the URL format is changed in the future.

Cosmetic: Use underlining instead of background color for highlighting

Fixes #10643

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:31:18 +00:00
Michael Tremer
ad3cc7c98d samba: Update rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-12 09:25:26 +00:00
Michael Tremer
efaed42101 core157: Ship pppd
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-11 12:23:18 +00:00
Peter Müller
0cd9215b56 ppp: update to 2.4.9
This is the first ppp release for years, and the project appears to have
a different maintainer (team?) by now. As a result, some of our patches
are no longer necessary as they made it into upstream, while others need
to be adjusted slightly.

In addition, their configure script does not handle commas in CFLAGS
properly, which is why the delimiter for the 'sed' call in it has to be
changed to something neither appearing in a path nor in our CLFAGS set.

The full changelog of this release can be retrieved from
https://ppp.samba.org/README.html and says:

* Support for new EAP (Extensible Authentication Protocol) methods:
  - Support for EAP-TLS, from Jan Just Keijser and others
  - Support for EAP-MSCHAPv2, from Eivind Næss, Thomas Omerzu, Tijs
    Van Buggenhout and others

* New pppd options:
  - chap-timeout
  - chapms-strip-domain
  - replacedefaultroute
  - noreplacedefaultroute
  - ipv6cp-accept-remote
  - lcp-echo-adaptive
  - ip-up-script
  - ip-down-script
  - ca
  - capath
  - cert
  - key
  - crl-dir
  - crl
  - max-tls-version
  - need-peer-eap

* Fixes for CVE-2020-8597 and CVE-2015-3310.

* libpcap is now required when compiling on Linux (previously, if
  libpcap was not present, pppd would be compiled without packet
  filtering support).

* The rp-pppoe plugin has been renamed to pppoe, to distinguish it
  from the upstream rp-pppoe code.  Its options have changed names,
  but the old names are kept as aliases.

* The configure script now supports cross-compilation.

* Many bug fixes and cleanups.

Thanks to Michael for his hint on the ./configure CFLAGS issue.

The second version of this patch correctly updates the
src/patches/ppp/0013-everywhere-O_CLOEXEC-harder.patch patch for the
second hunk in pppd/main.c, where socket permissions have been changed
meanwhile.

Further, it has been successfully tested against a VDSL 100 line in
Germany, using PAP to Easybell via 1&1 L2 BSA. No connectivity issues or
other anomalies have been observed so far.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-11 12:21:33 +00:00
Michael Tremer
b83e0bd9a4 Install sysctl.conf only on those architectures where needed
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-11 12:12:16 +00:00
Peter Müller
c6353b0dc1 wireless-regdb: update to 2020.11.20
This release contains various regulatory updates for different
countries, too many to list them here. While
https://wireless.wiki.kernel.org/en/developers/regulatory/wireless-regdb
mentiones http://drvbp1.linux-foundation.org/~mcgrof/rel-html/wireless-regdb/
as the location for release announcements, that server seems to be
defunct, so there is only https://git.kernel.org/pub/scm/linux/kernel/git/sforshee/wireless-regdb.git
left for further details between the 2019.03.01 and 2020.11.20 version.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:50:27 +00:00
Michael Tremer
af8964d236 rpcbind: Update initscript for moved binary
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-04-10 13:49:47 +00:00