Commit Graph

8585 Commits

Author SHA1 Message Date
Michael Tremer
db7ef52a91 core158: Run sshctrl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-09 15:24:33 +00:00
Michael Tremer
a26986a3b0 core158: Ship pakfire functions.sh
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-09 13:25:41 +00:00
Michael Tremer
92a5ad86e7 core158: Ship ppp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-02 14:43:01 +00:00
Michael Tremer
2d6e633d7f Revert "ppp: update to 2.4.9"
This reverts commit 0cd9215b56.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-02 14:38:28 +00:00
Michael Tremer
5996c28157 Revert "python-six: Removal of python2 & 3 addon versions of six"
This reverts commit 3a61ae73fa.

This module is required by awscli.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-01 17:16:09 +00:00
Michael Tremer
29e59d8c3e core158: Fully terminate apache before restarting it
Asking apache to restart itself fails when the binary is changed and
some symbols cannot be resolved. We therefore terminate all processes
and start them again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-01 10:10:17 +00:00
Michael Tremer
17f0494bf2 core158: Fix name of vnstat initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-01 10:09:40 +00:00
Michael Tremer
0a48e5694b core158: Actually drop motion instead of monit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-28 19:29:27 +00:00
Michael Tremer
c304035042 core158: Uninstall all dropped add-ons
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-28 17:32:52 +00:00
Michael Tremer
27ca856f72 Merge branch 'core157' 2021-06-21 19:41:25 +00:00
Michael Tremer
05de8ec3c8 core157: Ship lua
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-21 19:39:30 +00:00
Michael Tremer
556edb5adc Merge remote-tracking branch 'origin/next' 2021-06-21 10:04:11 +00:00
Michael Tremer
de6fd0881f Drop obsolete files from bluetooth package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-18 16:17:27 +00:00
Michael Tremer
2a52353f3c general-functions.pl: Explicitely call new system function
Perl seems to just "guess" that someone no longer wants to use the
builtin "system" command when there is a function with the same name.

I have no idea what kind of liquid they are drinking, but because of the
side effects of that stuff, we explicitely call our system() function.

Not that that would be necessary, but why not waste a couple more CPU
cycles?

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-18 15:12:53 +00:00
Michael Tremer
270d7c0d37 core158: Ship web-user-interface
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:12:32 +00:00
Michael Tremer
46443100e0 Merge branch 'perl-system' into next 2021-06-17 20:11:47 +00:00
Stefan Schantl
8163192065 ids-functions.pl: Use new system methods
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2021-06-17 20:11:37 +00:00
Stefan Schantl
f3e3cb371d network-functions.pl: Use new system methods
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2021-06-17 20:11:37 +00:00
Michael Tremer
fa7f2e219a core158: Ship xfsprogs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:06:52 +00:00
Michael Tremer
7d72dba39d core158: Ship smartmontools
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:04:31 +00:00
Michael Tremer
30b8e6a1bd core158: Ship hwdata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:03:58 +00:00
Adolf Belka
3514a0bc0f glib: Update to 2.68.3
- Update from 2.68.2 to 2.68.3
- Update rootfile
- Changelog
   Overview of changes in GLib 2.68.3
    * Bugs fixed:
      - #2311 testfilemonitor test leaks ip_watched_file_t struct
      - #2417 GFile: `g_file_replace_contents()` reports `G_IO_ERROR_WRONG_ETAG` when saving from a symlink
      - !2133 Backport !2128 “inotify: Fix a memory leak” to glib-2-68
      - !2137 Backport !2136 “tlscertificate: Avoid possible invalid read” to glib-2-68
      - !2141 Backport !2138 “glocalfileoutputstream: Fix ETag check when replacing through a symlink” to glib-2-68

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:02:53 +00:00
Michael Tremer
e4104affc4 core158: Ship fuse
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:02:35 +00:00
Adolf Belka
b217d8a70f fuse: Update to 3.10.4
- Update from 3.10.3 to 3.10.4
- Update of rootfile
- Changelog
   * Building of unit tests is now optional.
   * Fixed a test failure when running tests under XFS.
   * Fixed memory leaks in examples.
   * Minor documentation fixes.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-17 20:02:19 +00:00
Michael Tremer
627b84f9e9 core158: Ship sudo
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-14 09:05:34 +00:00
Michael Tremer
4a5932d55d core158: Ship libpcap
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-12 09:34:36 +00:00
Matthias Fischer
200ed6b4df libpcap: Update to 1.10.1
For details see:
http://www.tcpdump.org/libpcap-changes.txt

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-12 09:32:19 +00:00
Michael Tremer
053a582d3a ipsec-policy: Do no create DROP rules for on-demand mode
This is not necessary and gets in the way if users have SNAT rules or
other things that make the check be in the wrong place.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-11 16:15:37 +00:00
Peter Müller
8dc908de4a update ca-certificates CA bundle
Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-11 09:11:59 +00:00
Michael Tremer
1ca8bd7aa2 core157: Fix shipping boost
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 18:01:00 +00:00
Michael Tremer
03fe408112 general-functions.pl: Add "safe" system commands
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 14:29:42 +01:00
Michael Tremer
189d41d200 core158: Ship nettle
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:23:12 +00:00
Adolf Belka
b4cb1ed58b nettle: Update to 3.7.3
- Update from 3.7.2 to 3.7.3
- Update rootfile
- Changelog
    2021-05-22  Niels Möller  <nisse@lysator.liu.se>
	* configure.ac: Bump package version, to 3.7.3.
	  (LIBNETTLE_MINOR): Bump minor number, to 8.4.
	  (LIBHOGWEED_MINOR): Bump minor number, to 6.4.
    2021-05-17  Niels Möller  <nisse@lysator.liu.se>
	* rsa-decrypt-tr.c (rsa_decrypt_tr): Check up-front that input is
	  in range.
	* rsa-sec-decrypt.c (rsa_sec_decrypt): Likewise.
	* rsa-decrypt.c (rsa_decrypt): Likewise.
	* testsuite/rsa-encrypt-test.c (test_main): Add tests with input > n.
    2021-05-14  Niels Möller  <nisse@lysator.liu.se>
	* rsa-sign-tr.c (rsa_sec_blind): Delete mn argument.
	  (_rsa_sec_compute_root_tr): Delete mn argument, instead require
	  that input size matches key size. Rearrange use of temporary
	  storage, to support in-place operation, x == m. Update all
	  callers.
	* rsa-decrypt-tr.c (rsa_decrypt_tr): Make zero-padded copy of
	  input, for calling _rsa_sec_compute_root_tr.
	* rsa-sec-decrypt.c (rsa_sec_decrypt): Likewise.
	* testsuite/rsa-encrypt-test.c (test_main): Test calling all of
	  rsa_decrypt, rsa_decrypt_tr, and rsa_sec_decrypt with zero input.
    2021-05-06  Niels Möller  <nisse@lysator.liu.se>
	* pkcs1-sec-decrypt.c (_pkcs1_sec_decrypt): Check that message
	  length is valid, for given key size.
	* testsuite/rsa-sec-decrypt-test.c (test_main): Add test cases for
	  calls to rsa_sec_decrypt specifying a too large message length.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:22:59 +00:00
Michael Tremer
3fbad7e512 core158: Ship libxcrypt
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:22:45 +00:00
Adolf Belka
85d2bb767f libogg: Update to 1.3.5
- Update from 1.3.4 to 1.3.5
- Update rootfile
- Changelog
   Version 1.3.5 (2020 June 3)
    * Fix unsigned typedef problem on macOS.
    * Fix overflow check in ogg_sync_buffer.
    * Clean up cmake and autotools build files.
    * Remove Symbian and Apple XCode build files.
    * Fix documentation cross-reference links.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:21:56 +00:00
Michael Tremer
a906734840 core158: Ship libedit
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:21:38 +00:00
Adolf Belka
5be657270f libedit: Update to 20210522-3.1
- Update from 20210419-3.1 to 20210522-3.1
- Update rootfile
- Changelog
   2021-05-22 Jess Thrysoee
      * version-info: 0:66:0
      * all: sync with upstream source
      * src/el.c: editrc not read on systems without issetugid
            Patch by Trevor Cordes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:21:17 +00:00
Adolf Belka
5adf0ed40c elfutils: Update to 0.185
- Update from 0.184 to 0.185
- Update rootfile
- Changelog
   Version 0.185
     debuginfod-client: Simplify curl handle reuse so downloads which
                        return an error are retried.
     elfcompress: Always exit with code 0 when the operation succeeds (even
                  when nothing was done). On error the exit code is now always 1.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:21:03 +00:00
Michael Tremer
662b1d802e core158: Ship memory.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 09:12:40 +00:00
Michael Tremer
65171dc956 intel-microcode: Update to 20210608
Fixes various security vulnerabilities:

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-09 17:02:11 +00:00
Michael Tremer
52c84741cf Merge branch 'master' into next 2021-06-08 14:10:22 +00:00
Michael Tremer
f8b0610c53 Update linux-firmware to 20210511
Core Update 158 specifically ships files that are new or have changed to
keep the size of the update down.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-08 13:38:15 +00:00
Michael Tremer
0aad67988b core158: Ship apache2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-07 11:15:34 +00:00
Matthias Fischer
0957a949db apache: Update to 2.4.48
apache: Update to 2.4.48

For details see:
https://mirror.synyx.de/apache//httpd/CHANGES_2.4.48

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-07 11:15:01 +00:00
Michael Tremer
a86c5df80d core158: Ship rng-tools
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-07 11:14:40 +00:00
Michael Tremer
6f8a114146 Revert "python3-msgpack: update to 1.0.0"
This reverts commit f94fd54e0c.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-04 15:26:16 +00:00
Adolf Belka
bf2891dc5b perl-TimeDate: Update to 2.33
- Update from 1.20(2009) to 2.33(2020)
- Update rootfile
- Changelog
   2.33 -- Wed May 19 11:34:00 MT 2020
     * Remove PAX Headers in tarball using GNU tar
   2.32 -- Wed Mar 04 14:41:00 MT 2020
    * Fix t/date.t to run on leap years [arc]
   2.31 -- Thu Jan 16 14:00:00 MT 2020
     * Fix year 2020 bug from t/getdate.t [Prajith]
     * Fix warnings from t/date.t
     * Fix pod issue in lib/Date/Parse.pm
     * Fix for French language using English day suffixes in %o [mitchjacksontech]
     * RT#84075: Fix Date::Parse::str2time century issue. [perlpilot]
     * Adds Occitan language. [Quenty31]
     * Migrate GitHub repo and bugtracker to atoomic/perl-TimeDate
   2.30 -- Mon Feb 18 13:31:03 CST 2013
     * Syncing distribution version number with Date::Parse, not functional changes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-04 10:50:14 +00:00
Michael Tremer
84f7176501 core158: Ship pcre2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-04 10:50:01 +00:00
Adolf Belka
7112adbc86 pcre2: Update to 10.37
- Update from 10.36 to 10.37
- Update rootfile
- find-dependencies run to check impact of so lib bump
   No issues found
- Changelog
   Version 10.37 26-May-2021
    1. Change RunGrepTest to use tr instead of sed when testing with binary
       zero bytes, because sed varies a lot from system to system and has problems
       with binary zeros. This is from Bugzilla #2681. Patch from Jeremie
       Courreges-Anglas via Nam Nguyen. This fixes RunGrepTest for OpenBSD. Later:
       it broke it for at least one version of Solaris, where tr can't handle binary
       zeros. However, that system had /usr/xpg4/bin/tr installed, which works OK, so
       RunGrepTest now checks for that command and uses it if found.
    2. Compiling with gcc 10.2's -fanalyzer option showed up a hypothetical problem
       with a NULL dereference. I don't think this case could ever occur in practice,
       but I have put in a check in order to get rid of the compiler error.
    3. An alternative patch for CMakeLists.txt because 10.36 #4 breaks CMake on
       Windows. Patch from email@cs-ware.de fixes bugzilla #2688.
    4. Two bugs related to over-large numbers have been fixed so the behaviour is
       now the same as Perl.
       (a) A pattern such as /\214748364/ gave an overflow error instead of being
           treated as the octal number \214 followed by literal digits.
       (b) A sequence such as {65536 that has no terminating } so is not a
           quantifier was nevertheless complaining that a quantifier number was too big.
    5. A run of autoconf suggested that configure.ac was out-of-date with respect
       to the lastest autoconf. Running autoupdate made some valid changes, some valid
       suggestions, and also some invalid changes, which were fixed by hand. Autoconf
       now runs clean and the resulting "configure" seems to work, so I hope nothing
       is broken. Later: the requirement for autoconf 2.70 broke some automatic test
       robots. It doesn't seem to be necessary: trying a reduction to 2.60.
    6. The pattern /a\K.(?0)*/ when matched against "abac" by the interpreter gave
       the answer "bac", whereas Perl and JIT both yield "c". This was because the
       effect of \K was not propagating back from the full pattern recursion. Other
       recursions such as /(a\K.(?1)*)/ did not have this problem.
    7. Restore single character repetition optimization in JIT. Currently fewer
       character repetitions are optimized than in 10.34.
    8. When the names of the functions in the POSIX wrapper were changed to
       pcre2_regcomp() etc. (see change 10.33 #4 below), functions with the original
       names were left in the library so that pre-compiled programs would still work.
       However, this has proved troublesome when programs link with several libraries,
       some of which use PCRE2 via the POSIX interface while others use a native POSIX
       library. For this reason, the POSIX function names are removed in this release.
       The macros in pcre2posix.h should ensure that re-compiling fixes any programs
       that haven't been compiled since before 10.33.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-04 10:49:47 +00:00
Adolf Belka
c372d43950 netsnmpd: Update to 5.9.1
- Update from 5.8 to 5.9.1
- Update rootfile
- find-dependencies run to check impact of so lib bump
   no issues found
- Changelog - for more details on the Many bug fixes for 5.9.1 see the
   ChangeLog file in the source tarball
   The following is from the CHANGES file in the source tarball
   *5.9.1*:
     General: Many bug fixes
   *5.9*
     snmplib:
      - Add IPv6 support to DTLSUDP transport
      - use new netsnmp_sockaddr_storage in netsnmp_addr_pair
      - add base_transport ptr for tunneled transports
      - Add support for OpenSSL 1.1.1
      - Dtls: overhaul of debug
      - Remove inline versions of container funcs
     snmpd:
      - Use ETHTOOL_GLINKSETTINGS when available Newer Linux kernels
	support ETHTOOL_GLINKSETTINGS. Use it when available instead of the
	older and deprecated ETHTOOL_GSET. This patch avoids that the Linux
	kernel reports the following kernel warning: warning: 'snmpd' uses
	legacy ethtool link settings API, link modes are only partially
	reported See also https://sourceforge.net/p/net-snmp/patches/1387/.
	[bvanassche: reworked this patch significantly]
      - Reduce the time needed to execute "pass" scripts on BSD systems See
	also https://github.com/net-snmp/net-snmp/issues/8.
      - [BUG 2926]: Make it possible to set agentXPingInterval for a
	subagent - register agentXPingInterval for the subagent list
	handler, before it was registered for snmp - added agentxTimeout to
	the subagent list handler. It's now possible to set for snmpd and
	the subagent. See 'man snmpd.conf' - added agentxRetries to the
	subagent list handler. See 'man snmpd.conf'. It's never used in the
	subagent, but it's now following the documentation Signed-off-by:
	Anders Wallin <wallinux@gmail.com>
     snmptrap:
      - BUG: 2899: Patch from Drew Roedersheimer to set library
	engineboots/time values before sending
     snmptrapd:
      - Add support for the latest libmysqlclient version
     libsnmp:
      - Scan MIB directories in alphabetical order This guarantees that
	e.g. mibs/RFC1213-MIB.txt is read before mibs/SNMPv2-MIB.txt. The
	order in which these MIBs is read matters because both define
	sysLocation but with different attributes.
     unspecified:
      - [BUG 2930]: Fix a Solaris hrSWInst crash Avoid that snmpd crashes
	on Solaris when querying software packages with an empty CATEGORY
	field. See also https://sourceforge.net/p/net-snmp/bugs/2930/. See
	also https://sourceforge.net/p/net-snmp/patches/1390/.
     FreeBSD:
      - Fix first byte of IF-MIB::ifPhysAddress   Don't write past the
	interface name, and use temporary copy instead. This fixes the
	first byte of ifPhysAddress always being 0 on FreeBSD. See also
	https://sourceforge.net/p/net-snmp/code/merge-requests/20/. [
	bvanassche: edited patch title / added test for malloc() result /
	reduced number of free(if_name) calls ]
     Win32:
      - BUG: 2779541 Fixed handle leak in pass_persist.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-04 10:49:31 +00:00