Commit Graph

2336 Commits

Author SHA1 Message Date
Matthias Fischer
2e4321c1f4 curl: Update to 7.75
For details see:
https://curl.se/changes.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 11:22:59 +00:00
Adolf Belka
5de33a38d8 findutils: Update to 4.8.0
- Update findutils from 4.6.0 to 4.8.0
- Remove findutils-4.6.0-glibc2.28.patch from lfs as all patch items are now
	in the new tarball files.
- Remove sed command on gl/lib/mountlist.c from lfs as all fixes are in the
	mountlist.c file in the new tarball.
- Update rootfiles
- Changelog
	Following are major changes. Further detailed info available in
	changelog file in tarball.
	* Noteworthy changes in release 4.8.0 (2021-01-09) [stable]
		** Changes in xargs
		'xargs -t' no longer outputs a trailing blank to stderr after the last argument
		of each constructed command line to be executed.  [#57291]
		xargs now warns when more than one of the conflicting options --max-lines (-L,
		-l), --replace (-i/-I) and --max-args (-n) are specified on the command line.
		[#52137]
		** Bug Fixes
		find no longer crashes when an XFS filesystem is heavily changed during the run.
		Discussed at: <https://lists.gnu.org/r/bug-gnulib/2020-04/msg00068.html>
		find -used works again.  This predicate was not working properly since adding
		the support for sub-second timestamp resolution for various predicates in
		FINDUTILS_4_3_3-1 back in 2007.
		Discussed at: <https://lists.gnu.org/r/bug-findutils/2019-11/msg00010.html>
		** Improvements
		'find -D exec' now diagnoses all -exec, -execdir, -ok and -okdir runs including
		the call arguments and the exit code of the launched process. [#59083]
		** Documentation Changes
		The documentation of 'find -printf %Ak' has been improved: it now refers to the
		strftime(3) documentation for a complete list of supported conversion
		specifiers, and documents the 'F' conversion specifier ('yyyy-mm-dd').
		The man pages (find.1, locate.1, locatedb.5, updatedb.1, and xargs.1) now
		consistently end with the sections "REPORTING BUGS", "COPYRIGHT" and "SEE ALSO",
		with the latter referring to the online page on the GNU web server.
		The "EXAMPLES" section in the find.1 man page now shows the examples in a better
		structure and uses consistent formatting.
		Various man page fixes - syntax issues and typos.
		[#59745, #59330, #59012, #58193, #57807, #57775]
		Other documentation changes:
		#58654: doc: clarify that 'find -perm +MODE' is unrelated to umask
		#58458: doc: improve section 'Hard links', especially fix the description
		        regarding 'find -L -samefile FILE'.
		#58205: find.1: clarify double dash '--' option
		#58149: 'xargs --help' now mentions that --replace (-I, -i) splits the input
		        at newline characters.
		#57025: doc: enhance description of tests accepting numeric arguments in find.1
		        [see also #49640].
		#54730: Add additional valuable example of find -quit
		#48135: Fix testsuite error on Hurd and BSD related to ln
		#35253: Clarify descriptions of -printf %f, %h.
		** Changes to the build process
		The configure option --without-fts has been removed.  The attempt to use
		it stopped configure with an error message since 4.5.18 (2015) anyway.
	* Major changes in release 4.7.0, 2019-08-29
		** Changes to locate / updatedb
		Support for generating old-format databases (with updatedb
		--old-format or updatedb --dbformat=old) has been removed.  The old
		database format was deprecated in 2007 (and updatedb has warned about
		this since that time).  The locate program will will read old-format
		databases, though this support also will be removed.
		The updatedb script now operates in the C locale only.  This means
		that character encoding issues are now not likely to cause sort to
		fail.  It also honours the TMPDIR environment variable if that was
		set, and no longer sorts file names case-insensitively.
		The (unspecified) order in which filenames are stored in the locate
		database is now different to previous versions.  However, you should
		not rely on locate's output appearing in any particular order in any
		case.
		** Improvements
		All utilities now only show the full usage text when requested via
		the --help option.  Previously, when the user passed invalid options
		or arguments, the user's attention to the corresponding error
		diagnostic was distracted by that lengthy text.
		find now accepts multiple file type arguments to the -type and -xtype
		options separated by comma ','.  For example, to search for symbolic
		links and directories simply provide the shorter '-type l,d' instead
		of the - yet more portable - '( -type l -o -type d )'.
		find now diagnoses failures returned by readdir().  This bug was inherent
		in the use of FTS.
		find now exits in more cases immediately after the error diagnostic, i.e.,
		without the following usage text, to make the former more eye-catching.
		find now outputs a better hint in case the user passed an unquoted shell-
		glob pattern to options like -name, i.e., when the offending argument is
		an existing file.
		find now supports the debug option '-D all' to include all of the other
		debug options at once.
		xargs now supports the -o, --open-tty option to reopen stdin as /dev/tty
		in the child process before executing the command; useful to run an
		interactive application.  Added for compatibility with BSD.
		xargs now supports the GNU_FINDUTILS_FD_LEAK_CHECK environment
		variable to enable/disable fd leak check.
		'xargs -t' (--verbose) now properly quotes each part of the command to the
		executed if needed when printing it to stderr; likewise -p (--interactive).
		** Documentation Changes
		Prefer https:// over http:// links where possible, e.g. for '*.gnu.org' servers.
		Both find.1 and the find texinfo manual now consistently document all of the
		'N', 'L' and '?' possibilities in '-printf %Y' output when the determination of
		the type of a symlink target fails.
		find.1 now correctly states the -prune has no effect when the -depth option is
		given.  Before, it wrongly stated that -prune would return false in that case.
		Some minor documentation improvements are listed in "Bug Fixes" below.
		** Bug Fixes
		#56820: find: improve diagnostic when a global option like -maxdepth is
		        specified after another argument like a test, thus hopefully avoiding
		        translation issues (at least French, German).
		#56142: doc: fix bug #56142 by specifying which actions inhibit the
		        default -print.
		#55272: find: improve diagnostic when -name or -iname is used with a pattern
		        containing a directory separator ('/'), suggesting to use -wholename
		        or -iwholename respectively.
		#54859: doc: fix typo in 'xargs -l' examples in texinfo manual.
		        Change from 'xargs -1' (minus one) to 'xargs -l' (minus El) in 3 places.
		#54838: doc: fix the examples of the -perm option in the texinfo documentation.
		        The example '-perm -g+w,o+w' was misplaced.
		        Bug present since FINDUTILS_4_2_27-1.
		#54262: 'find -printf "%Y"' now correctly outputs 'N' for broken symlinks
		        (ENOENT or ENOTDIR).  Previously, it output 'l' in such a case.
		        Bug introduced while attempting to fix #29460 in version v4.5.8.
		#54171: 'find -depth' now outputs the name of unreadable directories.
		        Previously, FTS-based find missed to output those entries.
		        Bug present since the FTS implementation in FINDUTILS_4_3_0-1.
		#52981: find: the '-delete' action no longer complains about disappeared files
		        when the '-ignore_readdir_race' option is given, too.  That action will
		        also returns true in such a case now.
		#52220: 'find -D' without any further argument no longer crashes.
		        Bug present since the implementation of -D in FINDUTILS_4_3_1-1.
		#51304: doc: use correct IEC unit prefixes in the documentation of 'find -size'.
		        find(1) uses binary-based units for the suffixes 'k', 'M', and 'G' of
		        the argument of the '-size' option: 1024, 1024*1024 and 1024^3.
		        Therefore, the documentation should use the correct IEC prefixes
		        kibibyte, mebibyte and gibibyte respectively (or their abbreviations
		        'KiB', 'MiB' and 'GiB').
		#50758: doc: fix the description of the -perm examples matching the permission
		        mode "022" in find's texinfo manual: the match is for the file's group
		        and 'other' mode bits instead of for user and group.
		        Bug introduced when adding the -perm examples in FINDUTILS-4.2.11.
		#50326: find no longer leaks memory for a recently added member in gnulib's
		        mount list structure.
		#50259: find -printf '%h' now outputs the correct path for arguments with one or
		        more trailing slashes.  Previously, it would e.g. output "foo" instead
		        of "." when "foo/" was passed; likewise, it would output "/user/xxx/"
		        instead of "/user" when "/user/xxx//" was passed.
		        Bug introduced in FINDUTILS-4.2.19.
		#48180: find -noop (an internal option not intended to be exposed to the user)
		        no longer crashes.  Bug introduced in FINDUTILS-4.3.1.
		#48030: find -exec + does not pass all arguments for certain specific filename
		        lengths.  After the internal (usually 128k) buffer is full and find(1)
		        executed the given command with these arguments, it would miss to run
		        the command yet another time if only one other file argument has to be
		        processed.  Bug introduced in FINDUTILS-4.2.12.
		#46784: frcode drops last char if no final newline
		** Changes to the build process
		The configure option --enable-id-cache has been removed.  It has been
		a no-op since findnutils-4.5.15.
		The configure option --enable-debug has been removed.  Debugging in
		find is now controlled by its -D option only.
		The configure option --enable-silent-rules is the default now.
		Use --disable-silent-rules or "make V=1" to get verbose build output.
		"make dist" no longer builds .tar.gz files.
		xz is portable enough and in wide-enough use that distributing
		only .tar.xz files is enough.
		Maintainer builds from the Git repository now derive the version string from
		the version control system instead of using a fixed string (changed after each
		release manually).  As a result, the inter-release builds can now be
		distinguished: e.g. "4.6.0.152-fe9c" is the 152th commit after the tag "v4.6.0"
		and has the Git short hash "fe9c".  Builds from an unclean tree are marked with
		the suffix "-dirty".
		The translation files in the PO directory are no longer version controlled;
		instead bootstrap auto-updates them from "translationproject.org" during a
		maintainer build.
		A shell-style test framework borrowed from GNU coreutils has been added.
		This allows better tests with more control over stdin, stdout, stderr,
		signals, preparatory steps, cleanup, return code verification, root-only
		tests, etc.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-05 11:16:27 +00:00
Adolf Belka
fb87d2756e newt: Update to 0.52.21
- Update newt from 0.52.18 to 0.52.21
- Updated rootfile
- Changelog
	0.52.21
	- define env NEWT_NOFLOWCTRL to disable flow control (Robert Gill)
	- don't leak memory on errors in dialogboxes
	- fix radio button selection check in snack
	- fix plural forms in Lithuanian translation (#1568999)
	- fix parallel build (Émeric Dupont)
	- allow python versions to be specified with --with-python option
	0.52.20
	- improve handling of long strings in whiptail menu (#1353792)
	- support screen resize as hotkey in form (#1432926)
	0.52.19
	- support --notags in whiptail checklist and radiolist (#1319794)
	- don't hard-code -I/usr/include/slang in CPPFLAGS (Alex Suykov)
	- use $(CC) instead of $(CPP) to generate .depend files (Samuel Martin)
	- update translations from Zanata

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:28:16 +00:00
Adolf Belka
a87abffc9e fcron: Update to 3.2.1
- Update fcron from 3.2.0 (Jul 2014) to 3.2.1 (Jun 2016 - latest version)
- Updated rootfile
- Changelog
	From version 3.2.0 to 3.2.1
	     * @-line can now be run every second (minimum every 10s previously)
	     * Fixed occasional 1s slippage. This was due to a race condition
	       between when time_to_sleep is run and when we compute how long to
	       sleep for, which could happen in the following second: if that
	       happened we end up sleeping for 1s instead of not sleeping at all.
	       The fix was to replace time_to_sleep() by next_wake_time().
	     * add From: header to emails. Similarly to other crons, use: "From:
	       %s (fcron)" with %s being either the user the job is run as or the
	       value of MAILFROM.
	     * The installation script now supports systemd fully.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:23:13 +00:00
Adolf Belka
10ad593d83 acl: Update to 2.2.53
- Update acl from 2.2.52 (May 2013) to 2.2.53 (Jun 2018 - latest version)
- Rootfile updated
- No make rules for install-lib or install-dev in new version. Only for install
- Changelog in tarball has 2.2.49 (Nov 2009) as the latest change
- Could not find changelog info anywhere else.
- Following changelog created by extracting from git commits (thanks for idea Peter Mueller)
	- include: fix uninstall for `make distcheck`	Mike Frysinger
	- acl.5 man page: Update link to POSIX.1e draft	Andreas Gruenbacher
	- test: add regression test	Dmitry V. Levin
	- Enable large-file support on systems that do not enable it by default	Dmitry V. Levin
	- libacl: Fix acl_from_text() returning NULL on all input	Dmitry V. Levin
	- setfacl --restore: Silence valgrind	Andreas Gruenbacher
	- setfacl: Preserve special mode bits on filesystems without POSIX ACL support	Andreas Gruenbacher
	- setfacl.1: document the meaning of '-' in perms	Kamil Dudka
	- setfacl: Allow more than four characters in the perms field	Andreas Gruenbacher
	- permissions.test: Fix umask	Andreas Gruenbacher
	- Add additional group names for root-specific tests	Andreas Gruenbacher
	- libtestlookup: Add missing EXPORT and static declarations	Andreas Gruenbacher
	- Minor man-page clarifications	Andreas Gruenbacher
	- Remove ACL_ADD and ACL_DELETE	Andreas Gruenbacher
	- test: fixups on SELinux machines for root testcases	He Zhe
	- libacl: Ignore warning in parse_acl_entry()	Andreas Gruenbacher
	- Cleanup visibility of API functions	Yury Usishchev
	- Cleanup internal headers usage	Yury Usishchev
	- Rework config.h usage	Yury Usishchev
	- walk_tree_rec: Add parentheses to clarify code	Andreas Gruenbacher
	- __acl_from_xattr: Set errno for invalid tag types	Andreas Gruenbacher
	- Fix checks for valid permissions in input	Corinna Vinschen
	- use portable AC_C_BIGENDIAN	Mike Frysinger
	- quote: escape literal backslashes	Jeff Mahoney
	- test: Add helper library to fake passwd/group files	Jeff Mahoney
	- ignore configure.lineno	Mike Frysinger
	- walk_tree: mark internal variables as static	Dmitry V. Levin
	- Do not export symbols that are not supposed to be exported	Dmitry V. Levin
	- getfacl: Fix minor resource leak	Andreas Gruenbacher
	- setfacl man page: Minor wording improvements	Andreas Gruenbacher
	- Fix the display block nesting in acl.5	Andreas Gruenbacher
	- getfacl: Fix memory leak	Andreas Gruenbacher
	- fix compilation with latest xattr git	Brice De Bruyne
	- libacl: acl_set_file: Remove unnecesary racy check	Andreas Gruenbacher
	- cp.test: Check permissions of the right file	Andreas Gruenbacher
	- add __acl_ prefixes to internal symbols	Mike Frysinger
	- mark libmisc funcs as hidden so they are not exported	Mike Frysinger
	- telldir return value and seekdir second parameters are of type long	Cristian Rodríguez
	- read_acl_{comments,seq}: switch to next_line	Mike Frysinger
	- read_acl_{comments,seq}: rename "line" to "lineno"	Mike Frysinger
	- build: ship a pkgconfig file for libacl	Mike Frysinger
	- build: make use of an aux-dir to stow away helper scripts	Mike Frysinger
	- build: drop aclincludedir, use pkgincludedir	Mike Frysinger
	- po: regenerate files after move	Mike Frysinger
	- modernize build system	Mike Frysinger
	- test: make running parallel/out-of-tree safe	Mike Frysinger
	- move gettext logic into misc.h	Mike Frysinger
	- punt debian/rpm packaging logic	Mike Frysinger
	- libacl: fix SIGSEGV of getfacl -e on overly long group name	Kamil Dudka
	- libacl: Make sure that acl_from_text() always sets errno when it fails	Andreas Gruenbacher
	- Use autoreconf rather than autoconf to regenerate the files.	Fabrice Bauzac
	- .gitignore: ignore *~ and config.h.in.	Fabrice Bauzac
	- Bad markup in acl.5 page	Eric S. Raymond
	- Makefile: rename configure.in to configure.ac	Mike Frysinger
	- test: fix insufficient quoting of '\'	Kamil Dudka
	- setfacl.1: fix typo 'inclu de' -> 'include'	John Bradshaw
	- Install the libraries to the appropriate directory	Brandon Philips

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-03 22:18:16 +00:00
Michael Tremer
710b6ef1e8 Update the kernel's rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 11:13:24 +00:00
Peter Müller
b815ec45d5 hyperscan: update to 5.4.0
Please refer to https://github.com/intel/hyperscan/releases/tag/v5.4.0
for the (rather length) release announcement.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:46:36 +00:00
Adolf Belka
9ab74511da screen: Update to 4.8.0
- Update screen from 4.2.1 to 4.8.0
- Changelog
	Version 4.8.0 (05/02/2020)
	  * Improve startup time by only polling for files to close
	  Fixes:
		- Fix for segfault if termcap doesn't have Km entry
		- Make screen exit code be 0 when checking --version
		- Fix potential memory corruption when using OSC 49
	Version 4.7.0 (02/10/2019)
	  * Add support for SGR (1006) mouse mode
	  * Add support for OSC 11
	  * Update Unicode ambiguous and wide tables to 12.1.0
	  * Fixes:
	  - cross-compilation support (bug #43223)
	  - a lot of manpage fixes and cleanups
	Version 4.6.2 (23/10/2017):
	  * Fixes:
		- revert changes to cursor position restore behavour (bug #51832)
		- set freed pointer to NULL (bug #52133)
		- documentation fixes
		- fix windowlist crashes (bug #43054 & #51500)
	Version 4.6.1 (10/07/2017):
	  * Fixes:
		- problems with starting session in some cases
		- parallel make install
		- segfault when querying info on nonUTF locale (bug #51402)
	Version 4.6.0 (28/06/2017):
	  * Update Unicode wide tables to 9.0 (bug #50044)
	  * Support more serial speeds
	  * Improved namespaces support
	  * Migrate from fifos to sockets
	  * Start viewing scrollback at first line of output (bug #49377)
	Version 4.5.1 (25/02/2017):
	  * Fixes:
		- logfile permissions problem (CVE-2017-5618)
		- SunOS build problem (bug #50089)
		- FreeBSD core dumps (bug #50143)
	Version 4.5.0 (10/12/2016):
	  * Allow specifying logfile's name via command line parameter '-L'
	  * Fixes:
		- broken handling of "bind u digraph U+" (bug #48691)
		- crash with long $TERM (bug #48983)
		- crash when bumping blank window
		- build for AIX (bug #49149)
		- %x improperly separating arguments
		- install with custom DESTDIR (bug #48370)
	Version 4.4.0 (19/06/2016):
	  * Support up to 24 function keys
	  * Fix runtime issues
	  * 'logfile' command, starts logging into new file upon changing
	Version 4.3.1 (28/06/2015):
	  * Fix resize bug
	Version 4.3.0 (13/06/2015):
	  * Introduce Xx string escape showing the executed command of a window
	  * Implement dead/zombie window polling, allowing for auto reconnecting
	  * Allow setting hardstatus on first line
	  New Commands:
	  * 'sort' command sorting windows by title
	  * 'bumpleft', 'bumpright' - manually move windows on window list
	  * 'collapse' removing numbering 'gaps' between windows, by renumbering
	  * 'windows' command now accepts arguments for use with querying
- Rootfile updated
- Two screen patchfiles deleted as the patch changes are now built into
	the source files

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:45:45 +00:00
Matthias Fischer
d3d5039924 libgpg-error: Update to 1.41
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:38:05 +00:00
Matthias Fischer
47cf62d3b7 libgcrypt: Update to 1.9.1
For details - especially for this version - see:
https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html

Overview:
https://dev.gnupg.org/source/libgcrypt/browse/master/NEWS

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-02-01 10:37:31 +00:00
Michael Tremer
52bf6075d0 Revert "freetype: update to 2.10.4"
This reverts commit 5653a45f81.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-29 14:43:05 +00:00
Adolf Belka
bc19698555 ipset: Update to 7.10
- Update ipset from 7.6 to 7.10
- Changelog
7.10
    Kernel part changes
        Fix patch "Handle false warning from -Wstringop-overflow"
        Backward compatibility: handle renaming nla_strlcpy to nla_strscpy
        treewide: rename nla_strlcpy to nla_strscpy. (Francis Laniel)
        netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)
        netfilter: ipset: fixes possible oops in mtype_resize (Vasily Averin)
        Handle false warning from -Wstringop-overflow
        Backward compatibility: handle missing strscpy with a wrapper of strlcpy.
        Move compiler specific compatibility support to separated file (broken compatibility support reported by Ed W)
7.9
    Userspace changes
        Fix library versioning (Jan Engelhardt)
7.8
    Kernel part changes
        Complete backward compatibility fix for package copy of <linux/jhash.h>
        Compatibility: check for kvzalloc() and GFP_KERNEL_ACCOUNT
        netfilter: ipset: enable memory accounting for ipset allocations (Vasily Averin)
        netfilter: ipset: prevent uninit-value in hash_ip6_add (Eric Dumazet)
        Compatibility: use skb_policy() from if_vlan.h if available
        Compatibility: Check for the fourth arg of list_for_each_entry_rcu()
        Backward compatibility fix for the package copy of <linux/jhash.h>
7.7
    Userspace changes
        Expose the initval hash parameter to userspace
        Handle all variable header parts in helper scripts instead ot test tasks
        Add bucketsize parameter to all hash types
        Support the -exist flag with the destroy command
    Kernel part changes
        Expose the initval hash parameter to userspace
        Add bucketsize parameter to all hash types
        Use fallthrough pseudo-keyword in the package copy of too
        Support the -exist flag with the destroy command
        netfilter: Use fallthrough pseudo-keyword (Gustavo A. R. Silva)
        netfilter: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)
        netfilter: ipset: call ip_set_free() instead of kfree() (Eric Dumazet)
        netfiler: ipset: fix unaligned atomic access (Russell King)
        netfilter: ipset: Fix subcounter update skip (Phil Sutter)
        ipset: Update byte and packet counters regardless of whether they match (Stefano Brivio)
        netfilter: ipset: Pass lockdep expression to RCU lists (Amol Grover)
        ip_set: Fix compatibility with kernels between v3.3 and v4.5 (Serhey Popovych)
        ip_set: Fix build on kernels without INIT_DEFERRABLE_WORK (Serhey Popovych)
        ipset: Support kernels with at least system_wq support
        ip_set: Fix build on kernels without system_power_efficient_wq (Serhey Popovych)
- Rootfiles updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-29 11:14:22 +00:00
Peter Müller
5653a45f81 freetype: update to 2.10.4
This fixes a heap buffer overflow in the handling of embedded PNG
bitmaps (CVE-2020-15999). Further information is available at
https://sourceforge.net/projects/freetype/files/freetype2/2.10.4/ .

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-29 11:13:40 +00:00
Michael Tremer
d9f9f16366 Drop launch-ether-wake
The helper binary is being dropped and etherwake is enabled
for CAP_NET_RAW. This allows execution by unprivileged users
as needed by the web user interface (nobody).

Reported-by: Albert Schwarzkopf <ipfire@quitesimple.org>
Fixes: #12562
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-27 21:06:57 +00:00
Adolf Belka
53f04366ed iptables: Update to version 1.8.7
- Update from 1.8.6 to 1.8.7
Florian Westphal (4):
      xtables-monitor: fix rule printing
      xtables-monitor: fix packet family protocol
      xtables-monitor: print packet first
      xtables-monitor:

Pablo Neira Ayuso (2):
      tests: shell: update format of registers in bitwise payloads.
      configure: bump version for 1.8.7 release

Phil Sutter (21):
      nft: Optimize class-based IP prefix matches
      ebtables: Optimize masked MAC address matches
      tests/shell: Add test for bitwise avoidance fixes
      ebtables: Fix for broken chain renaming
      iptables-test.py: Accept multiple test files on commandline
      iptables-test.py: Try to unshare netns by default
      libxtables: Extend MAC address printing/parsing support
      xtables-arp: Don't use ARPT_INV_*
      xshared: Merge some command option-related code
      tests/shell: Test for fixed extension registration
      extensions: dccp: Fix for DCCP type 'INVALID'
      nft: Fix selective chain compatibility checks
      nft: cache: Introduce nft_cache_add_chain()
      nft: Implement nft_chain_foreach()
      nft: cache: Move nft_chain_find() over
      nft: Introduce struct nft_chain
      nft: Introduce a dedicated base chain array
      nft: cache: Sort custom chains by name
      tests: shell: Drop any dump sorting in place
      nft: Avoid pointless table/chain creation
      tests/shell: Fix nft-only/0009-needless-bitwise_0
- Rootfile updated

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-25 21:23:49 +00:00
Adolf Belka
161613165a sudo: Upgrade to 1.9.5p1
- Upgrade sudo from 1.8.10p3 to 1.9.5p1
- Move sudo from legacy release (1.8) branch to stable release (1.9) branch
- Update rootfile
- Changelog available at https://www.sudo.ws/changes.html
- Tested out on vm testbed and sudo is working correctly

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-18 13:04:33 +00:00
Michael Tremer
5c21f1a078 kmod: Update to 28
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-13 11:22:59 +00:00
Adolf Belka
02037c964f sshfs: Update to 3.7.1
- Update sshfs from 2.2 to 3.7.1
- Changelog is available at https://github.com/libfuse/sshfs/releases
- Build had to be changed from autotools to meson/ninja
- Change in rootfiles

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:21:42 +00:00
Adolf Belka
35b8dc552d fuse: Update to 3.10.1
- Update fuse from 2.9.7 to 3.10.1
- Update also required by sshfs update
- Changelog is available at https://github.com/libfuse/libfuse/releases
- Build had to be changed from autools to meson/ninja
- Rootfiles changed
- namespace conflict fix patch no longer required. Fix now built into kernel.h

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:21:02 +00:00
Adolf Belka
84e4274e59 iptables: Update to 1.8.6
- Update from 1.8.5 to 1.8.6
- Changelog info
Arturo Borrero Gonzalez (1):
      xtables-translate: don't fail if help was requested

Giuseppe Scrivano (1):
      iptables: accept lock file name at runtime

Jan Engelhardt (2):
      doc: document danger of applying REJECT to INVALID CTs
      build: resolve iptables-apply not getting installed

Maciej Żenczykowski (1):
      libxtables: compiler warning fixes for NO_SHARED_LIBS

Pablo Neira Ayuso (4):
      extensions: libxt_conntrack: provide translation for DNAT and SNAT --ctstate
      iptables: replace libnftnl table list by linux list
      iptables-nft: fix basechain policy configuration
      configure: bump version for 1.8.6 release

Phil Sutter (31):
      xtables-restore: Fix verbose mode table flushing
      build: Fix for failing 'make uninstall'
      xtables-translate: Use proper clear_cs function
      tests: shell: Add help output to run-tests.sh
      nft: Make table creation purely implicit
      nft: Be lazy when flushing
      nft: cache: Drop duplicate chain check
      nft: Drop pointless nft_xt_builtin_init() call
      nft: Turn nft_chain_save() into a foreach-callback
      nft: Use nft_chain_find() in two more places
      nft: Reorder enum nft_table_type
      nft: Eliminate table list from cache
      nft: Fix command name in ip6tables error message
      tests: shell: Merge and extend return codes test
      xtables-monitor: Fix ip6tables rule printing
      nft: Fix for ruleset flush while restoring
      Makefile: Add missing man pages to CLEANFILES
      nft: cache: Check consistency with NFT_CL_FAKE, too
      nft: Extend use of nftnl_chain_list_foreach()
      nft: Fold nftnl_rule_list_chain_save() into caller
      nft: Use nft_chain_find() in nft_chain_builtin_init()
      nft: Fix for broken address mask match detection
      extensions: libipt_icmp: Fix translation of type 'any'
      libxtables: Make sure extensions register in revision order
      libxtables: Simplify pending extension registration
      libxtables: Register multiple extensions in ascending order
      nft: Make batch_add_chain() return the added batch object
      nft: Fix error reporting for refreshed transactions
      libiptc: Avoid gcc-10 zero-length array warning
      nft: Fix for concurrent noflush restore calls
      tests: shell: Improve concurrent noflush restore test a bit
- Rootfiles updated

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 15:11:01 +00:00
Michael Tremer
36f253d291 configroot: Make extrahd.pl executable
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 14:50:29 +00:00
Michael Tremer
1a79ef8e43 misc-progs: Drop unused upnpctrl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 14:50:07 +00:00
Michael Tremer
5cef36ccb1 misc-progs: Drop unused applejuicectrl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-06 14:48:34 +00:00
Michael Tremer
86bd9ccc95 Drop unused Asterisk CGI files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-03 11:17:28 +00:00
Michael Tremer
edd2710520 Drop unused upnp.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-01-03 11:16:22 +00:00
Adolf Belka
50992c7321 procps: Update to 3.3.16
- update from 3.2.8 to 3.3.16
	This is also an update from procps to procps-ng
	The previous version was no longer being maintained.
- Added autogen.sh into lfs as ity is needed to create the config script.
- Added libdir=/lib line into configure command as default is /usr/lib
- Added mv commands for kill, ps & sysctl to place them into the same locations
	as the previous version of procps
- Moved lfsmake2 procps line to after pkg-config in make.sh
	The autogen line requires autoconf, libtool, gettext and pkg-config
	to be available so procps moved to after them.
- procps-3.2.8-fix_unknown_HZ_value.patch no longer required with new
	version so removed.
- rootfile updated.
- libprocps library being maintained by the same people now maitaining this
	version of procps.
- information on the releases from 3.3.13 to 3.3.16 available on
	https://gitlab.com/procps-ng/procps/-/releases

Signed-off-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-27 10:55:03 +00:00
Stefan Schantl
630e8601f8 meson: New package.
More and more packages uses meson as build environment instead of
autotools or cmake.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-27 10:30:15 +00:00
Stefan Schantl
f8c5644dc5 ninja: New package
This tool required to build more and more packages.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-27 10:29:55 +00:00
Matthias Fischer
34081d2f23 bind: Update to 9.11.26
For details see:
https://downloads.isc.org/isc/bind9/9.11.26/RELEASE-NOTES-bind-9.11.26.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-20 09:46:42 +00:00
ummeegge
904b8b6259 Pam: Update to version 1.5.1
Several fixes and improvements since the current available 1.3.1 version are included.
CVE-2020-27780 has also been fixed.
For a full release overview --> https://github.com/linux-pam/linux-pam/releases .

Signed-off-by: ummeegge <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-10 13:03:18 +00:00
Matthias Fischer
5fd8c3e1f5 unbound: Update to 1.13.0
For details see:
https://lists.nlnetlabs.nl/pipermail/unbound-users/2020-December/007102.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-10 13:02:21 +00:00
Matthias Fischer
fde5772fde bind: Update to 9.11.25
For details see:
https://downloads.isc.org/isc/bind9/9.11.25/RELEASE-NOTES-bind-9.11.25.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-10 13:00:29 +00:00
Arne Fitzenreiter
a11783096e intel-microcode: update to 20201118
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-12-02 23:42:29 +01:00
Erik Kapfer
820edb2374 OpenVPN: Update to version 2.5.0
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Tested-by: Adolf Belka <ahb.ipfire@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-12-01 16:10:32 +00:00
Leo-Andres Hofmann
5c33a76135 zoneconf.cgi: Add NIC selection highlighting
This improves the usability of the zone configuration by marking assigned
NICs in the zone color. The highlighting is initially applied to the static
HTML output, and JavaScript is used to follow changes made by the user.

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-27 15:48:02 +00:00
Michael Tremer
8a4495a41f gdb: Build package to be available in the build environment
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-27 15:19:53 +00:00
Michael Tremer
05db64d0ea libloc: Import recent patches from upstream
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-18 19:18:40 +00:00
Michael Tremer
64d6b06a6d go: Update to 1.15.4
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-13 11:11:47 +00:00
Arne Fitzenreiter
2e1bf458e2 kernel: update to 4.14.206
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2020-11-12 09:02:02 +01:00
Arne Fitzenreiter
1c217406f2 intel-microcode: update to 20201110
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 11:50:14 +00:00
Arne Fitzenreiter
0163c62dee kernel: aarch64: enable ahci
this is needed to boot on ESXi on arm.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-11 11:50:12 +00:00
Michael Tremer
f521556111 usb-modeswitch: Update rootfile
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-06 10:13:19 +00:00
Peter Müller
a30f94ac4a curl: update to 7.73.0
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-05 23:33:29 +00:00
Peter Müller
699c61109a tzdata: update to 2020d
The pacificnew file has been dropped by IANA. Adding the "factory" file
makes sense to have a reasonable default in case the time zone is
unknown, which, however, should not happen in case of IPFire 2.x - just
trying to be consistent here.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-05 23:30:38 +00:00
Peter Müller
f55a00fea3 file: update to 5.39
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-11-05 23:29:18 +00:00
Michael Tremer
62efd2e9d2 libarchive: Ship on core system
Some tools link against this

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-30 16:29:02 +00:00
Ramax Lo
5cbc22ffa6 usb_modeswitch_data: update to 20191128
Signed-off-by: Ramax Lo <ramaxlo@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-30 15:18:04 +00:00
Stefan Schantl
0cdb151831 suricata: Update to 6.0.0.
* Enable RDP and SIP parsers.
* Enable new introduced parsers for RFB and DCERPC.

Because HTTP2 support and parser currently is experimental the suricata
developers decided to disable it at default - we keep this default
setting for now.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:50:56 +00:00
Stefan Schantl
d95cc821e7 yaml: Update to 0.2.5
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-15 15:33:44 +00:00
Michael Tremer
a88ea3463c samba: Remove help popup
This is outdated and should be put into the wiki.

It is also some very ugly JS.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:16 +01:00