Commit Graph

20739 Commits

Author SHA1 Message Date
Michael Tremer
db9cecd8db core178: Ship gettext
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:18:16 +00:00
Adolf Belka
63fb1beb81 procps: Add patch to fix errors that prevent build with gettext-0.22
- Gettext earlier than 0.21 would still build when it found errors in language files etc.
   With gettext-0.22 if it finds any errors it now stops.
- There were two lines in the french po file in procps that had erros in them. procps have
   raised a commit to fix those. The patch included here carries out that commit.
- Update of rootfile not required.
- This patch will not be needed when the next update of procps occurs.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:17:48 +00:00
Adolf Belka
fa7641cd88 gettext: Update to version 0.22
- Update from version 0.21 to 0.22
- Update of rootfile
- Changelog
    0.22 - June 2023
	* PO file format:
	  - When a #: line contains references to file names that contain spaces,
	    these file names are surrounded by Unicode characters U+2068 and U+2069.
	    This makes it possible to parse such references correctly.
	* Improvements for maintainers:
	  - The AM_GNU_GETTEXT macro now defines two variables localedir_c and
	    localedir_c_make, that can be used in C code or in Makefiles,
	    respectively, for representing the value of the --localedir configure
	    option.
	* Programming languages support:
	  - C, C++:
	    o xgettext now supports gettext-like functions that take wide strings
	      (of type 'const wchar_t *', 'const char16_t *', or 'const char32_t *')
	      as arguments.
	    o xgettext now recognizes numbers with digit separators, as defined by
	      ISO C 23, as tokens.
	    o xgettext and msgfmt now recognize the format string directive %b
	      (for binary integer output, as defined by ISO C 23) in format strings.
	    o xgettext and msgfmt now recognize the argument size specifiers
	      w8, w16, w32, w64, wf8, wf16, wf32, wf64 (as defined by ISO C 23)
	      in format strings.
	    o xgettext and msgfmt now recognize C++ format strings, as defined by
	      ISO C++ 20.  They are marked as 'c++-format' in POT and PO files.
	      A new example has been added, 'hello-c++20', that illustrates how
	      to use these format strings with gettext.
	  - Java:
	    o The build system and tools now also support Java versions newer than
	      Java 11. This is known to work up to Java 20, at least. On the other
	      hand, support for old versions of Java (Java 1.5 and GCJ) has been
	      dropped.
	  - Tcl: xgettext now supports the \x, \u, and \U escapes as defined in
	    Tcl 8.6.
	* Portability:
	  - On systems with musl libc, the *gettext() functions in libc now work
	    with MO files generated from PO files with an encoding other than UTF-8.
	    To this effect, the msgfmt program now converts the messages to UTF-8
	    encoding before storing them in a MO file.  You can prevent this by
	    using the msgfmt --no-convert option.
	  - On systems with musl libc, the *gettext() functions in libc now work
	    with MO files generated from PO files with ISO C 99 <inttypes.h> format
	    string directive macros.  To this effect, the msgfmt program pre-expands
	    strings with such macros.  You can prevent this by using the msgfmt
	    --no-redundancy option.
	* xgettext:
	  - The xgettext option '--sorted-output' is now deprecated.
	  - xgettext input files of type PO that are not all ASCII and not UTF-8
	    encoded are now handled correctly.
	* The base Unicode standard is now updated to 15.0.0.
	* Emacs PO mode:
	  Fix an incompatibility with Emacs version 29 or newer.
    0.21.1 - October 2022
	* Runtime behaviour:
	  - On AIX, locale names with a script or with an uppercase language are now
	    supported.
	    For example, sr_Cyrl_RS.UTF-8 is treated like sr_RS.UTF-8@cyrillic, and
	    EN_US.UTF-8 is treated like en_US.UTF-8.
	* The base Unicode standard is now updated to 14.0.0.
	* Portability:
	  - Building on macOS 11/arm64 is now supported.
	  - Building on Linux/powerpc64le with glibc ≥ 2.35 is now supported.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:17:48 +00:00
Michael Tremer
efb6130fd0 core178: Ship extrahd.pl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:15:31 +00:00
Michael Tremer
88513c0ef5 extrahd: Do not try to umount if nothing is mounted
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:14:46 +00:00
Michael Tremer
80eac2b523 extrahd: Skip relative mountpoints
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:14:46 +00:00
Michael Tremer
b49e4eec45 extrahd: Rewrite the mount script in shell
This is probably a lot easier than calling all sorts of shell commands
from Perl.

The script has also changed that it will try to mount/umount all
configured mountpoints unless a specific mountpoint is being given.

An initscript will be needed to mount everything when the system is
booting up and umount everything on shutdown.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:14:46 +00:00
Michael Tremer
bd4fd21fd2 core178: Ship extrahd.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:12:48 +00:00
Stefan Schantl
569c9ac668 extrahd.cgi: Adjust copyright header
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:58 +00:00
Stefan Schantl
19a3b883de extrahd.cgi: Do not allow "/mnt" or "/media" as mount points
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
65dc35dcf4 extrahd.cgi: Requires "auto" as hidden FS type to mount a new device
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
480c5253d0 extrahd.cgi: Drop select for FS selection.
This feature does not have any benefit because the linux kernel
knows best which filesystem a device/partition has.

So there is no need for a user to specify this by-hand. This also
prevents from choosing a wrong fs type and as a direct result in a
not mountable device.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
72dfa1b097 extrahd.cgi: Add missing translation strings
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
7907c1e068 extrahd.cgi: Re-order sanity check logic
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
fd815c36ea extrahd.cgi: Display mount status next to the corresponding drive
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
0aa77c2fd5 extrahd.cgi: Add is_configured function.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
d0a6f9bdb2 extrahd.cgi: Store configured drives in a hash
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
94aeac8a05 extrahd.cgi: Abort if a device could not be umounted.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
56ce3e19e6 extrahd.cgi: Refactor code to use new introduced perl functions.
This also gets rid of allmost all unsafe system calls.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Stefan Schantl
a2c88aadef extrahd.cgi: Add various perl functions deal with block devices
This functions are going to replace the former used scan/write to file/read from
file approach by directly collecting the required informations from the
kernel sysfs and devfs.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00
Michael Tremer
6ed00db36f Merge branch 'master' into next 2023-08-02 09:11:40 +00:00
Michael Tremer
c649a19441 core177: Ship suricata rulesets
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:10:22 +00:00
Stefan Schantl
422fce9cb0 ruleset-sources: Adjust download URL for snort community ruleset
Fixes: #13203

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:10:00 +00:00
Michael Tremer
91443f9234 udev: Drop hwrng rules
This is another fragment of rngd - the gift that keeps giving.

The udev rules file contains a lot of stuff for a prototype which never
went into production. So, that can be dropped.

It would have been left with one rule that starts rngd whenever a HWRNG
is being found. That is however no longer needed as rngd is being
started in the init process. We no longer need to initialize it as early
as possible to seed the kernel's PRNG.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 13:47:31 +00:00
Michael Tremer
833b9bc1d1 Merge branch 'master' into next 2023-07-31 09:29:22 +00:00
Michael Tremer
b1110eb1bd pmacct: Increment package release
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:27:27 +00:00
Adolf Belka
7642da793c pmacct: Fix for Bug#13163 - no such column: vlan_in [CU 175]
- This problem occurred with pmacct-1.7.8 and was raised with upstream. They identified a
   bug and provided a commit with a fix.
- Unfortunately the commit can not be used on version 1.7.8 from Dec 2022 as it depends on
   other commits applied in the period from Dec 2022 to July 2023.
- The next version release is likely to come out around Dec 2023 to Mar 2024 based on the
   previous release frequency (6 to 9 months)
- The only alternative was to make a release from the commit stage of the fix. In Github
   this only provides a zip file. So I extracted the zip file and then re-archived it
   as a .tar.gz file
- Build went successfully and the .ipfire package file was tested successfully by @Jon

Fixes: Bug#13163
Tested-by: Jon Murphy <jon.murphy@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:27:06 +00:00
Michael Tremer
b2cbdb1e3f core178: Ship glib
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:23:41 +00:00
Adolf Belka
5acaaf3b4c glib: Update to version 2.77.0
- Update from 2.71.1 to 2.77.0
- Update of rootfile
- Changelog is too large to include here. Details can be found in the NEWS file in the
   source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:23:21 +00:00
Adolf Belka
ec4b0a2938 groff: Update to version 1.23.0
- Update from version 1.22.4 to 1.23.0
- Update of rootfile
- Changelog is too large to show here.
   See the NEWS file in the source tarball for user visible changes. This does not
    include any bug fixes.
   For bug fixes and all commits see the ChangeLog file in the source tarball.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:23:03 +00:00
Michael Tremer
1f0c7a63d3 core178: Ship ovpnmain.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:22:21 +00:00
Adolf Belka
f46e8298ad ovpnmain.cgi: Fixes bug#13190 - connection status shows disconnected for connected client
- If the certificate name has underscores in it then the status always shows as DISCONNECTED
   alothough the actual connection is working and can be used.
- The certificate with underscores works fine. RFC5280 accepts underscores in the name.
- The code for checking the status splits up the status message and takes the first part
   as the common name for the connection. Then there is a regex command which rerplaces
   any underscores in the status common name with spaces. This results in the connection
   with underscores in the certificate name never matching any status feedback common
   name as the underscores have been replaced by spaces.
- This has been tested to work with my vm test bed. With existing code the connection with
   underscores in the certificate name permanently showed DISCONNECTED. With the code change
   the connection shows as CONNECTED very quickly.

Fixes: Bug#13190
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:21:47 +00:00
Adolf Belka
cb8168553b gnump3d: Update perl directory in gnump3d.conf to current version
- Update perl dircetory for plugin from 5.32.1 to 5.36.0
- Perl was updated in August 2022 but this directory was missed when that update was done.
   A forum member has tried to use gnump3d and had problems because it was trying to use
   the perl 5.32.1 directory for a plugin in the gnump3d.conf file
- Bumped the PAK_VER to ensure that gniump3d is shipped.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:21:37 +00:00
Michael Tremer
3acd120b01 core178: Ship xfsprogs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:21:01 +00:00
Adolf Belka
3b8206b74a xfsprogs: Update to version 6.4.0
- Update from version 6.2.0 to 6.4.0
- Update of rootfile not required
- Changelog is not available in the source tarball or on the website. Changes can be viewed
   in the git log https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/log/

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:20:49 +00:00
Michael Tremer
4b80d5e6c3 core178: Ship mpfr
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:20:33 +00:00
Adolf Belka
1f26a78259 mpfr: Update to version 4.2.0p12
- Update from version 4.2.0p9 to 4.2.0p12
- Update of rootfile not required
- Changelog - additional patches from 10 to 12 over previous update
    10 - GCC 12 emits a spurious "may be used uninitialized" warning on tests/tfpif.c
         with -O1, and GCC 13 has the same issue also with -O2 (GCC bug 106155). This can
         make some test scripts fail for the developers. The gcc-pr106155-workaround
         patch provides a workaround for this bug in GCC.
         Corresponding changeset in the 4.2 branch: c0031f1af.
    11 - The mpfr_inp_str function does not handle the '\0' character correctly when it
         is not a whitespace character (which is almost always the case in practice, or
         really always the case). For instance, if the word is the sequence
         { '1', '\0', '2' }, the string "1" is passed to mpfr_set_str because '\0' is
         regarded as a terminating null character, and one gets a valid number (1) while
         '\0' in a word is necessarily invalid. This is fixed by the inp_str-nullchar
         patch. The testcase in the repository cannot be provided in the patch because of
         the null character in one of the files.
         Corresponding changeset in the 4.2 branch: 6a68387b2.
    12 - When '\0' is a whitespace character, i.e. when isspace(0) is true in the current
         locale (as allowed by ISO C for non-"C" locales), the mpfr_strtofr function
         regards a '\0' in the leading whitespace sequence as a whitespace. This is
         incorrect, since from the definition of a string, the first '\0' is the
         terminating null character (before the notion of whitespace is involved). In
         such locales, this is a vulnerability, because characters after the terminating
         null character are read to determine the result; however, such locales are rare
         or nonexistent (Mutt's lib.h suggests that some systems have such locales, but
         this was in 1998). This is fixed by the strtofr-nullchar patch.
         Corresponding changeset in the 4.2 branch: 964fbaa31.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:20:09 +00:00
Adolf Belka
41f497df2d libarchive: Update to version 3.7.0
- Update from version 3.6.2 to 3.7.0
- Update of rootfile
- Changelog
    3.7.0 is a feature and bugfix release.
	New features:
	    bsdunzip: new tool ported from FreeBSD (#1873)
	    drop-in replacement for Info-ZIP unzip, not yet ported for Windows
	    7zip reader: support for Zstandard compression (#1894)
	    7zip reader: support for ARM64 filter (#1918)
	    zstd filter: support for multi-frame zstd archives (#1818)
	Other notable bugfixes and improvements:
	    pax: fix year 2038 problem on platforms with 64-bit time_t (#1840)
	    Windows: Universal Windows Platform (UWP) fixes and improvements (#1879, #1883, #1885, #1840)
	    Windows: bcrypt usage fixes and improvements (#1881, #1887)
	    Windows: time function usage fixes and improvements (#1820, #1824, #1830)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:19:33 +00:00
Adolf Belka
319fcaa4d7 curl: Update to version 8.2.1
- Update from version 8.2.0 to 8.2.1
- Update of rootfile not required
-Changelog
    8.2.1
      Bugfixes
	 o amigaos: fix sys/mbuf.h m_len macro clash [9]
	 o amissl: add missing signal.h include [8]
	 o amissl: fix AmiSSL v5 detection [2]
	 o cfilters: rename close/connect functions to avoid clashes [12]
	 o ciphers.d: put URL in first column [1]
	 o cmake: add `libcurlu`/`libcurltool` for unit tests [5]
	 o cmake: update ngtcp2 detection [4]
	 o configure: check for nghttp2_session_get_stream_local_window_size [14]
	 o CONTRIBUTE: drop mention of copyright year ranges [20]
	 o CONTRIBUTE: fix syntax in commit message description [21]
	 o curl_multi_wait.3: fix arg quoting to doc macro .BR [27]
	 o docs: mark two TLS options for TLS, not SSL [26]
	 o docs: provide more see also for cipher options [23]
	 o hostip: return IPv6 first for localhost resolves [16]
	 o http2: fix regression on upload EOF handling [13]
	 o http: VLH, very large header test and fixes [19]
	 o libcurl-errors.3: add CURLUE_OK [11]
	 o os400: correct EXPECTED_STRING_LASTZEROTERMINATED [7]
	 o quiche: fix lookup of transfer at multi [18]
	 o quiche: fix segfault and other things [15]
	 o rustls: update rustls-ffi 0.10.0 [24]
	 o socks: print ipv6 address within brackets [10]
	 o src/mkhelp: strip off escape sequences [22]
	 o tool: fix tool_seek_cb build when SIZEOF_CURL_OFF_T > SIZEOF_OFF_T [17]
	 o transfer: do not clear the credentials on redirect to absolute URL [6]
	 o unittest: remove unneeded *_LDADD [3]
	 o websocket: rename arguments/variables to match docs [25]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:19:10 +00:00
Michael Tremer
bde5bcaf39 core178: Drop sox package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:18:55 +00:00
Adolf Belka
1fa4116cf8 sox: Remove from IPFire as no longer needed for asterix
- sox was used for asterix but that addon was removed in Core Update 158 so sox is no
   longer needed.
- remove the lfs and rootfile files and remove sox from the make.sh script

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-31 09:15:45 +00:00
Michael Tremer
37a1a3fcec Merge remote-tracking branch 'origin/master' into next 2023-07-31 09:15:31 +00:00
Arne Fitzenreiter
d95a414ce1 core177: remove rngd link also from rcsysinit.d
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-07-29 09:48:29 +02:00
Arne Fitzenreiter
e0767e7dc4 core177: apply local ssh config after update sshd
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-07-29 09:26:56 +02:00
Michael Tremer
ef7ae3fd1d Merge branch 'master' into next 2023-07-28 16:57:15 +00:00
Arne Fitzenreiter
6084fa89bf kernel: update to 6.1.42
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:34:59 +00:00
Michael Tremer
d4781c29ae core177: Fix typo in removing rngd init links
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:21:12 +00:00
Arne Fitzenreiter
8ffe9b67de core177: remove rngd if the addon was not installed via pakfire
the old version is linked against the old openssl and will fail.

fixes: #13197

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:19:56 +00:00
Arne Fitzenreiter
0bb82a95dd initskripts: remove buggy remount at halt and reboot
mount -f does nothing and also the sync calls should do nothing
on a already ro mounted filesystem.

fixes: #13195

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-28 16:06:54 +00:00
Adolf Belka
d622d1c62e openjpeg: Update to version 2.5.0
- Update from version 2.4.0 to 2.5.0
- Update of rootfile
- Changelog
    2.5.0 (May 2022)
	No API/ABI break compared to v2.4.0, but additional symbols for subset of
         components decoding (hence the MINOR version bump).
	* Encoder: add support for generation of TLM markers [\#1359]
          (https://github.com/uclouvain/openjpeg/pull/1359)
	* Decoder: add support for high throughput \(HTJ2K\) decoding. [\#1381]
          (https://github.com/uclouvain/openjpeg/pull/1381)
	* Decoder: add support for partial bitstream decoding [\#1407]
          (https://github.com/uclouvain/openjpeg/pull/1407)
	* Bug fixes (including security fixes)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-07-26 16:09:00 +00:00