Commit Graph

1510 Commits

Author SHA1 Message Date
Adolf Belka
fd0e08feb9 ffmpeg: Update deps to use sdl2 in place of sdl
- This patch needs to go together with the patch updating sdl to sdl2
   https://patchwork.ipfire.org/project/ipfire/patch/20210824212848.1311257-1-adolf.belka@ipfire.org/
- Update deps line in lfs to use sdl2 in place of sdl
- Update rootfile

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Adolf Belka
15c01e309d sdl2: Replace sdl with sdl2. Update to version 2.0.16
- Update from 1.2.15 (2013) to 2.0.16 (2021)
- Source file name changed from SDL to SDL2 so also deleted old sdl and created sdl2
   files for rootfile and lfs
- Changelog is too large to include here. Details can be found in the WhatsNew.txt file
   in the source tarball

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Matthias Fischer
f7627d8687 clamav: Update to 0.104.0
For details see:
https://blog.clamav.net/2021/09/clamav-01040-released.html

New requirements and major changes:
"As of ClamAV 0.104, CMake is required to build ClamAV
...
The built-in LLVM for the bytecode runtime has been removed."

But since the current 'llvm 12.0.1' version refused to be build
"...you will need to supply the development libraries for LLVM
version 3.6.2" - which is ~6 years old - I gave up with 'llvm'
and stayed with the bytecode "interpreter".

Cited:
"The bytecode interpreter is the default runtime for bytecode
signatures just as it was in ClamAV 0.103.

@ALL:
In 'clamav 0.104.0' there is no appropriate cmake option for
"CONFIGURE_FLAGS = --disable-fanotify" for ARM buildings anymore.
Perhaps there is a kernel option for this?
=> https://docs.clamav.net/manual/OnAccess.html#requirements

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 16:57:06 +00:00
Matthias Fischer
2664c94463 mc: Update to 7.8.27
For details see:
http://midnight-commander.org/wiki/NEWS-4.8.27

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-10 07:36:29 +00:00
Arne Fitzenreiter
55cb5e9324 Revert "lynis: Update to version 3.0.6"
This reverts commit d78fd31bb3.
downloads gives every time a different checksum
lookls like packetstorm never send the same file.

[root@helena cache]# wget https://packetstormsecurity.com/files/download/163629/lynis-3.0.6.tar.gz
--2021-09-05 18:29:39--  https://packetstormsecurity.com/files/download/163629/lynis-3.0.6.tar.gz
Resolving packetstormsecurity.com... 198.84.60.198
Connecting to packetstormsecurity.com|198.84.60.198|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: 'lynis-3.0.6.tar.gz.1'

lynis-3.0.6.tar.gz.     [ <=>                ]  20.27K  --.-KB/s    in 0s

2021-09-05 18:29:40 (164 MB/s) - 'lynis-3.0.6.tar.gz.1' saved [20753]

[root@helena cache]# wget https://packetstormsecurity.com/files/download/163629/lynis-3.0.6.tar.gz
--2021-09-05 18:29:43--  https://packetstormsecurity.com/files/download/163629/lynis-3.0.6.tar.gz
Resolving packetstormsecurity.com... 198.84.60.198
Connecting to packetstormsecurity.com|198.84.60.198|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: 'lynis-3.0.6.tar.gz.2'

lynis-3.0.6.tar.gz.     [ <=>                ]  20.27K  --.-KB/s    in 0s

2021-09-05 18:29:44 (177 MB/s) - 'lynis-3.0.6.tar.gz.2' saved [20753]

[root@helena cache]# md5sum lynis-3.0.6.tar.gz*
a13bad1e6ef81708a86f65d0f317eef6  lynis-3.0.6.tar.gz
841d1f2004220f78a13a702835c906fc  lynis-3.0.6.tar.gz.1
3d6435e94955da9f14d824a1618038c1  lynis-3.0.6.tar.gz.2
[root@helena cache]#
2021-09-05 18:32:50 +00:00
Adolf Belka
e170aabc85 faad2: Update to version 2.10.0
- Update from 2.8.8 to 2.10.0
- Update of rootfile carried out
- Changelog
   2.10.0:
     [ tatsuz ]
	* updated Visual Studio projects to VS 2019 (#54)
     [ Fabian Greffrath ]
	* mp4read.c: fix stack-buffer-overflow in stringin()/ftypin()
	* fix heap-buffer-overflow in mp4read.c
     [ Clayton Smith ]
	* Remove non-ASCII characters
	* Remove trailing whitespace
     [ Andrew Wesie ]
	* Check return value of ltp_data.
	* Restrict SBR frame length to 960 and 1024 samples.
	* Support object type 29.
	* Support implicit SBR signaling in frontend.
	* Fix PNS decoding when only right channel is noise.
	* Initialize element_id array with an invalid id.
	* Fix NULL pointer dereferences.
	* Fix infinite loop in adts_parse.
	* Fix infinite loop in huffman_getescape.
	* Check for error after each channel decode.
	* Check for inconsistent number of channels.
   2.9.2:
     [ Michał Janiszewski ]
	* Only use x86-assembly when explicitly on x86
	* Use unsigned integers correctly
	* Initialize pointers that might otherwise not be
     [ Fabian Greffrath ]
	* update README esp. WRT directory structure
     [ Rosen Penev ]
	* fix compilation without SBR/PS_DEC (#48)
	* fix compilation with LC_ONLY_DECODER (#47)
     [ Fabian Greffrath ]
	* fix "inline function 'cfftf1' declared but never defined" compiler warning
	* fix some inconsistencies in the frontend output
	* mp4read_open: add check for failed frame buffer allocation
	* stszin: add check for allocation error and integer overflow
	* add a pkg-config file
     [ Stefan Pöschel ]
	* frontend: address compile warning + add missing LF (#50)
     [ François Cartegnie ]
	* library name is faad (#52)
	* Unbreak PS audio (#51)
   2.9.1:
     [ Fabian Greffrath ]
	* Include stdio.h in libfaad/ps_dec.c for stderr (Michael Fink)
	* Fix Tille -> Title typo in frontend/mp4read.c (Alexander Thomas)
   2.9.0:
     [ Krzysztof Nikiel ]
	* Build system fixes and code clean-up
     [ LoRd_MuldeR ]
	* Fix compiler warnings and code indentation
	* Fix compilation with GCC <= 4.7.3
	* MSVC solution file clean-up
     [ Cameron Cawley ]
	* Fix compilation with GCC 4.7.4
	* Fix compilation with MinGW
     [ Michael Fink ]
	* MSVC 2017 project file update
     [ Hugo Lefeuvre ]
	* Fix crash with unsupported MP4 files (NULL pointer dereference,
	  division by zero)
	* CVE-2019-6956: ps_dec: sanitize iid_index before mixing
	* CVE-2018-20196: sbr_fbt: sanitize sbr->M (should not exceed MAX_M)
	* CVE-2018-20199, CVE-2018-20360: specrec: better handle unexpected
	  parametric stereo (PS)
	* CVE-2018-20362, CVE-2018-19504, CVE-2018-20195, CVE-2018-20198,
	  CVE-2018-20358: syntax.c: check for syntax element inconsistencies
	* CVE-2018-20194, CVE-2018-19503, CVE-2018-20197, CVE-2018-20357,
	  CVE-2018-20359, CVE-2018-20361: sbr_hfadj: sanitize frequency band
	  borders
     [ Hugo Beauzée-Luyssen ]
	* CVE-2019-15296, CVE-2018-19502: Fix a couple buffer overflows
     [ Filip Roséen ]
	* Prevent crash on SCE followed by CPE
     [ Gianfranco Costamagna ]
	* Fix linking with GCC 9 and "-Wl,--as-needed"
     [ Fabian Greffrath ]
	* Enable the frontend to be built reproducibly

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 17:46:41 +00:00
Adolf Belka
d78fd31bb3 lynis: Update to version 3.0.6
- Update from 3.0.3 to 3.0.6
- Update of rootfile carried out
- Changelog
   ## Lynis 3.0.6 (2021-07-22)
     ### Added
       - OS detection: Artix Linux, macOS Monterey, NethServer, openSUSE MicroOS
       - Check for outdated translation files
     ### Changed
       - DBS-1826 - Check if PostgreSQL is being used
       - DBS-1828 - Test multiple PostgreSQL configuration file(s)
       - KRNL-5830 - Sort kernels by version instead of modification date
       - PKGS-7410 - Don't show exception for systems using LXC
       - GetHostID function: fallback options added for Linux systems
       - Fix: macOS Big Sur detection
       - Fix: show correct text when egrep is missing
       - Fix: variable name for PostgreSQL
       - German and Spanish translations extended
   ## Lynis 3.0.5 (2021-07-02)
     ### Added
       - OS detection of Arch Linux 32, BunsenLabs Linux, and Rocky Linux
       - CRYP-8006 - Check MemoryOverwriteRequest bit to protect against cold-boot attacks (Linux)
     ### Changed
       - ACCT-9622 - Corrected typo
       - HRDN-7231 - When calling wc, use the short -l flag instead of --lines (Busybox compatibility)
       - PKGS-7320 - extended to Arch Linux 32
       - Generation of host identifiers (hostid/hostid2) extended
       - Linux host identifiers are now using ip as preferred input source
       - Improved logging in several areas
   ## Lynis 3.0.4 (2021-05-11)
     ### Added
       - ACCT-9670 - Detection of cmd tooling
       - ACCT-9672 - Test cmd configuration file
       - BOOT-5140 - Check for ELILO boot loader presence
       - OS detection of AlmaLinux, Garuda Linux, Manjaro (ARM), and others
     ### Changed
       - BOOT-5104 - Add service manager detection support for runit
       - FILE-6430 - Report suggestion only when at least one kernel module is not in the blacklist
       - FIRE-4540 - Corrected nftables empy ruleset test
       - LOGG-2138 - Do not check for klogd when metalog is being used
       - TIME-3185 - Improved support for Debian stretch
       - Corrected issue when Lynis is not executed directly from lynis directory

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-05 17:45:47 +00:00
Adolf Belka
7249b3446b taglib: Update to version 1.12
- Update from 1.11.1 to 1.12
- Update rootfile
- Changelog
   TagLib 1.12 (Feb 16, 2021)
    * Added support for WinRT.
    * Added support for Linux on POWER.
    * Added support for classical music tags of iTunes 12.5.
    * Added support for file descriptor to FileStream.
    * Added support for 'cmID', 'purl', 'egid' MP4 atoms.
    * Added support for 'GRP1' ID3v2 frame.
    * Added support for extensible WAV subformat.
    * Enabled FileRef to detect file types based on the stream content.
    * Dropped support for Windows 9x and NT 4.0 or older.
    * Check for mandatory header objects in ASF files.
    * More tolerant handling of RIFF padding, WAV files, broken MPEG streams.
    * Improved calculation of Ogg, Opus, Speex, WAV, MP4 bitrates.
    * Improved Windows compatibility by storing FLAC picture after comments.
    * Fixed numerical genres in ID3v2.3.0 'TCON' frames.
    * Fixed consistency of API removing MP4 items when empty values are set.
    * Fixed consistency of API preferring COMM frames with no description.
    * Fixed OOB read on invalid Ogg FLAC files (CVE-2018-11439).
    * Fixed handling of empty MPEG files.
    * Fixed parsing MP4 mdhd timescale.
    * Fixed reading MP4 atoms with zero length.
    * Fixed reading FLAC files with zero-sized seektables.
    * Fixed handling of lowercase field names in Vorbis Comments.
    * Fixed handling of 'rate' atoms in MP4 files.
    * Fixed handling of invalid UTF-8 sequences.
    * Fixed possible file corruptions when saving Ogg files.
    * Fixed handling of non-audio blocks, sampling rates, DSD audio in WavPack files.
    * TableOfContentsFrame::toString() improved.
    * UserTextIdentificationFrame::toString() improved.
    * Marked FileRef::create() deprecated.
    * Marked MPEG::File::save() with boolean parameters deprecated,
      provide overloads with enum parameters.
    * Several smaller bug fixes and performance improvements.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:18:29 +00:00
Adolf Belka
b8239208ef hplip: Update to version 3.21.6
- Update from 3.21.2 to 3.21.6
- Update of rootfile
- Changelog
   3.21.6
    Added support for following new Distro's:
     Fedora 34
     Ubuntu 21.04
     OpenSuse 15.3
     Debian 10.9
   3.21.4
    Added support for following new Distro's:
     LinuxMint 20.1
     Debian 10.8
    Added support for the following new Printers:
     HP Envy 6400 series

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-09-02 09:16:04 +00:00
Adolf Belka
07335498ff ghostscript: Update version to 9.54.0
- Update from 9.53.3 to 9.54.0
- Update rootfile
- delete patch related to FT_CALLBACK_DEF as fix has been implemented in the source
   tarball
- Changelog highlights
   Version 9.54.0 (2021-03-30)
     The 9.54.0 release is a maintenance release, and also adds new functionality.
     Highlights in this release include:
       Overprint simulation is now available to all output devices, allowing quality previewing/proofing of PostScript and PDF jobs that rely on overprint. See the -dOverprint option documentation in: Overprint
       The "docxwrite" device adds the ability to output to Microsoft Word "docx" format. See: docxwrite
       The pdfwrite device is now capable of using the Tesseract OCR engine when it is built into Ghostscript to improve searchability and copy and paste functionality when the input lacks the metadata for that purpose. See: UseOCR
       Ghostscript/GhostPDL now includes a "map text to black" function, where text drawn by an input job (except when drawn using a Type 3 font) can be forced to draw in solid black. See: BlackText
       Ghostscript/GhostPDL now supports simple N-up imposition "internally". See: NupControl
       Our efforts in code hygiene and maintainability continue.
       The usual round of bug fixes, compatibility changes, and incremental improvements.
   Full details of above highlights can be found at https://www.ghostscript.com/doc/9.54.0/History9.htm

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 08:03:49 +00:00
Adolf Belka
ae367b9c8f alsa: Update to version 1.2.5.1
- Not really sure if a sound support capability is really appropriate for a firewall. I
   wouldn't have it. However if it stays as an add-on then it should be up to date.
- Update alsa-lib from 1.0.27.1 (2013) to 1.2.5.1 (2021)
- Update alsa-utils from 1.0.27.1 (2013) to 1.2.5.1 (2021)
- Update alsa-firmware from 1.0.27 (2013) to 1.2.4 (2020)
- Update rootfile
- Changelog is too large to include here. Changes back to 2019-11-20 can be found at
   https://www.alsa-project.org/wiki/Main_Page
   Earlier changes have to be found from the git commits at
   https://github.com/alsa-project/alsa-lib and
   https://github.com/alsa-project/alsa-utils
   There is no changelog or git commits that I have been able to find for alsa-firmware

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-08-09 08:03:28 +00:00
Arne Fitzenreiter
19473c97dd pcengines-apu-firmware: update to 4.14.0.2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-22 10:48:47 +02:00
Arne Fitzenreiter
f56e93b9b4 vdr: update to 2.4.7
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-21 21:49:19 +02:00
Arne Fitzenreiter
5138aaeb9b tshark: update to 3.4.7
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 22:46:54 +00:00
Adolf Belka
c3e53a041d tshark: Update to version 3.4.6
- Update from 3.4.3 to 3.4.6
- Update rootfile
- Changelog
   Wireshark 3.4.6 Release Notes
    What’s New
     The Windows installers now ship with Npcap 1.31. They previously
      shipped with Npcap 1.10.
     The Windows installers now ship with Qt 5.15.2. They previously
      shipped with Qt 5.12.1.
     Bug Fixes
        • wnpa-sec-2021-04[1] DVB-S2-BB dissector infinite loop
     The following bugs have been fixed:
        • Macro filters can’t handle escaped characters Issue 17160[2].
        • Display filter crashes Wireshark Issue 17316[3].
        • IEEE-1588 Signalling Unicast TLV incorrectly reported as being
          malformed Issue 17355[4].
        • IETF QUIC TLS decryption error with extraneous packets during the
          handshake Issue 17383[5].
        • Statistics → Resolved Addresses: multi-protocol (TCP/UDP/…​)
          ports not displayed Issue 17395[6].
     New and Updated Features
      New Protocol Support
       There are no new protocols in this release.
      Updated Protocol Support
       DNP, DVB-S2-BB, ProtoBuf, PTP, QUIC, RANAP, and TACACS
      New and Updated Capture File Support
       Ascend, ERF, K12, NetScaler, and pcapng
   Wireshark 3.4.5 Release Notes
    What’s New
     Bug Fixes
      The following vulnerabilities have been fixed:
        • wnpa-sec-2021-04[1] MS-WSP dissector excessive memory
          consumption. Issue 17331[2].
      The following bugs have been fixed:
        • TShark does not print GeoIP information Issue 14691[3].
        • TShark error when piping to "head" Issue 16192[4].
        • Parts of ASCII representation in Packet Bytes pane are missing
          Issue 17087[5].
        • Buildbot crash output: fuzz-2021-02-22-1012761.pcap Issue
          17254[6].
        • NDPE attribute of NAN packet is not dissected Issue 17278[7].
        • TECMP: reserved flag interpreted as part of timestamp Issue
          17279[8].
        • Master branch does not compile at least with gcc-11 Issue
          17281[9].
        • DNS IXFR/AXFR multiple response Issue 17293[10].
        • File too large Issue 17301[11].
        • Build fails with CMake 3.20 Issue 17314[12].
     New and Updated Features
      New Protocol Support
       There are no new protocols in this release.
      Updated Protocol Support
       DECT, DNS, EAP, Kerberos, LDAP, MS-WSP, SMB2, Sysdig, TECMP, and WiFi
        NAN
      New and Updated Capture File Support
       pcapng
   Wireshark 3.4.4 Release Notes
    What’s New
     Bug Fixes
      The following vulnerabilities have been fixed:
        • wnpa-sec-2021-03[1] Wireshark could open unsafe URLs. Issue
          17232[2]. CVE-2021-22191[3].
      The following bugs have been fixed:
        • NTP Version 3 Client Decode PDML output issue (Reference ID
          Issue) Issue 17112[4].
        • 3.4.2: public wireshark include files are including build time
          "config.h" Issue 17190[5].
        • wireshark-3.4.3/epan/dissectors/packet-s7comm.c:3521: bad array
          index ? Issue 17198[6].
        • SIP protocol: P-Called-Party-ID header mixed up with
          P-Charge-Info header Issue 17215[7].
        • Asterix CAT010 Decode Error Issue 17226[8].
        • _ws.expert columns not populated for IPv4 Issue 17228[9].
        • Buildbot crash output: fuzz-2021-02-12-1651908.pcap Issue
          17233[10].
        • gQUIC: Wireshark 3.4.3 fails to dissect a packet (gQUIC q024)
          that v3.2.6 succeeds. Issue 17250[11].
     New and Updated Features
      New Protocol Support
       There are no new protocols in this release.
      Updated Protocol Support
       ASTERIX, Frame Relay, GQUIC, NTP, NVMe Fabrics RDMA, S7COMM, and SIP
      New and Updated Capture File Support
       iSeries

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:27:00 +00:00
Adolf Belka
7d5b68a92c tftpd: Update to version 5.2
- Update from 0.48 (2007) to 5.2 (2011)
   Version 5.2 is the last update made to this program
- Update to rootfile
- Changelog
   Changes in 5.2:
	Fix breakage on newer Linux when a single interface has
         multiple IP addresses.
   Changes in 5.1:
	Add -P option to write a PID file.  Patch by Ferenc Wagner.
	Bounce the syslog socket in standalone mode, in case the
         syslog daemon has been restarted.  Patch by Ferenc Wagner.
	Build fixes.
	Fix handling of block number wraparound after a successful
         options negotiation.
	Fix a buffer overflow in option parsing.
   Changes in 5.0:
	Try to on platforms with getaddrinfo() without AI_ADDRCONFIG or
         AI_CANONNAME.
	Implement the "rollover" option, for clients which want block
         number to rollover to anything other than zero.
	Correctly disable PMTU in standalone mode.  Patch by Florian
         Lohoff.
   Changes in 0.49:
	Add IPv6 support.  Patch by Karsten Keil.
	Support systems with editline instead of readline.
	Support long options in the server.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-19 18:23:14 +00:00
Michael Tremer
b90de21648 libstatgrab: Make it part of the core system
collectd will be using this

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-09 06:01:27 +00:00
Arne Fitzenreiter
201e5f689c openvmtools: update to stable-11.3.0
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-06 18:44:02 +02:00
Arne Fitzenreiter
aafdd71b04 switch arm 32 bit arch from armv5tel to armv6l
we have no supported armv5tel board left so we can switch to the higher
arch. This now can use the vpu (still in softfp calling convention to
not break existing installations.)
this fix many compile problems, also boost is now working again.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2021-07-05 07:42:39 +02:00
Michael Tremer
5996c28157 Revert "python-six: Removal of python2 & 3 addon versions of six"
This reverts commit 3a61ae73fa.

This module is required by awscli.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-07-01 17:16:09 +00:00
Michael Tremer
de6fd0881f Drop obsolete files from bluetooth package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-18 16:17:27 +00:00
Adolf Belka
85d2bb767f libogg: Update to 1.3.5
- Update from 1.3.4 to 1.3.5
- Update rootfile
- Changelog
   Version 1.3.5 (2020 June 3)
    * Fix unsigned typedef problem on macOS.
    * Fix overflow check in ogg_sync_buffer.
    * Clean up cmake and autotools build files.
    * Remove Symbian and Apple XCode build files.
    * Fix documentation cross-reference links.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:21:56 +00:00
Adolf Belka
5adf0ed40c elfutils: Update to 0.185
- Update from 0.184 to 0.185
- Update rootfile
- Changelog
   Version 0.185
     debuginfod-client: Simplify curl handle reuse so downloads which
                        return an error are retried.
     elfcompress: Always exit with code 0 when the operation succeeds (even
                  when nothing was done). On error the exit code is now always 1.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-10 12:21:03 +00:00
Michael Tremer
6f8a114146 Revert "python3-msgpack: update to 1.0.0"
This reverts commit f94fd54e0c.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-04 15:26:16 +00:00
Adolf Belka
bf2891dc5b perl-TimeDate: Update to 2.33
- Update from 1.20(2009) to 2.33(2020)
- Update rootfile
- Changelog
   2.33 -- Wed May 19 11:34:00 MT 2020
     * Remove PAX Headers in tarball using GNU tar
   2.32 -- Wed Mar 04 14:41:00 MT 2020
    * Fix t/date.t to run on leap years [arc]
   2.31 -- Thu Jan 16 14:00:00 MT 2020
     * Fix year 2020 bug from t/getdate.t [Prajith]
     * Fix warnings from t/date.t
     * Fix pod issue in lib/Date/Parse.pm
     * Fix for French language using English day suffixes in %o [mitchjacksontech]
     * RT#84075: Fix Date::Parse::str2time century issue. [perlpilot]
     * Adds Occitan language. [Quenty31]
     * Migrate GitHub repo and bugtracker to atoomic/perl-TimeDate
   2.30 -- Mon Feb 18 13:31:03 CST 2013
     * Syncing distribution version number with Date::Parse, not functional changes

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-04 10:50:14 +00:00
Adolf Belka
c372d43950 netsnmpd: Update to 5.9.1
- Update from 5.8 to 5.9.1
- Update rootfile
- find-dependencies run to check impact of so lib bump
   no issues found
- Changelog - for more details on the Many bug fixes for 5.9.1 see the
   ChangeLog file in the source tarball
   The following is from the CHANGES file in the source tarball
   *5.9.1*:
     General: Many bug fixes
   *5.9*
     snmplib:
      - Add IPv6 support to DTLSUDP transport
      - use new netsnmp_sockaddr_storage in netsnmp_addr_pair
      - add base_transport ptr for tunneled transports
      - Add support for OpenSSL 1.1.1
      - Dtls: overhaul of debug
      - Remove inline versions of container funcs
     snmpd:
      - Use ETHTOOL_GLINKSETTINGS when available Newer Linux kernels
	support ETHTOOL_GLINKSETTINGS. Use it when available instead of the
	older and deprecated ETHTOOL_GSET. This patch avoids that the Linux
	kernel reports the following kernel warning: warning: 'snmpd' uses
	legacy ethtool link settings API, link modes are only partially
	reported See also https://sourceforge.net/p/net-snmp/patches/1387/.
	[bvanassche: reworked this patch significantly]
      - Reduce the time needed to execute "pass" scripts on BSD systems See
	also https://github.com/net-snmp/net-snmp/issues/8.
      - [BUG 2926]: Make it possible to set agentXPingInterval for a
	subagent - register agentXPingInterval for the subagent list
	handler, before it was registered for snmp - added agentxTimeout to
	the subagent list handler. It's now possible to set for snmpd and
	the subagent. See 'man snmpd.conf' - added agentxRetries to the
	subagent list handler. See 'man snmpd.conf'. It's never used in the
	subagent, but it's now following the documentation Signed-off-by:
	Anders Wallin <wallinux@gmail.com>
     snmptrap:
      - BUG: 2899: Patch from Drew Roedersheimer to set library
	engineboots/time values before sending
     snmptrapd:
      - Add support for the latest libmysqlclient version
     libsnmp:
      - Scan MIB directories in alphabetical order This guarantees that
	e.g. mibs/RFC1213-MIB.txt is read before mibs/SNMPv2-MIB.txt. The
	order in which these MIBs is read matters because both define
	sysLocation but with different attributes.
     unspecified:
      - [BUG 2930]: Fix a Solaris hrSWInst crash Avoid that snmpd crashes
	on Solaris when querying software packages with an empty CATEGORY
	field. See also https://sourceforge.net/p/net-snmp/bugs/2930/. See
	also https://sourceforge.net/p/net-snmp/patches/1390/.
     FreeBSD:
      - Fix first byte of IF-MIB::ifPhysAddress   Don't write past the
	interface name, and use temporary copy instead. This fixes the
	first byte of ifPhysAddress always being 0 on FreeBSD. See also
	https://sourceforge.net/p/net-snmp/code/merge-requests/20/. [
	bvanassche: edited patch title / added test for malloc() result /
	reduced number of free(if_name) calls ]
     Win32:
      - BUG: 2779541 Fixed handle leak in pass_persist.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-04 10:49:31 +00:00
Peter Müller
f94fd54e0c python3-msgpack: update to 1.0.0
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-03 09:49:18 +00:00
Peter Müller
2c8a20af47 Drop unmaintained add-on dpfhack
This package seems to be unmaintained for at least five years. It's
(former?) upstream traces back to https://section5.ch/index.php/2011/01/13/dpf-hacking/,
but download links to both dpfhack and a patched version of lcd4linux
point to http://localhost/.

http://tech.section5.ch/files/dpfhack-0.1alpha.tgz still serves
something apparently related to dpfhack, but it is unclear whether that
is a previous version than the "0.12devel" we know about, or a
successor. https://tech.section5.ch/files/dpfhack-0.1alpha.tgz, just to
have it noticed, comes with a X.509 certificate not issued for this
FQDN.

dpfhack is solely needed as a dependancy for lcd4linux, which appears to
be unmaintained as well, hence being dropped in a dedicated patch.

Given the status quo, bugs in dpfhack cannot be reported properly,
security issues won't be addressed (by anybody else then ourselves), and
technical questions cannot be clarified aside a reverse engineering
approach.

We should not allow such an add-on to be installed on a firewall system.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-03 09:16:21 +00:00
Peter Müller
c62adbc448 Drop unmaintained add-on lcd4linux
This package has not received any updates or attention within the last
three years. It's sole known upstream URL (https://ssl.bulix.org/projects/lcd4linux/)
returns a HTTP error 404 nowadays, and the author was unable to locate
any upstream source that appears to be still maintained today.

Given the status quo, bugs in lcd4linux cannot be reported properly,
security issues won't be addressed (by anybody else then ourselves), and
technical questions cannot be clarified aside a reverse engineering
approach.

We should not allow such an add-on to be installed on a firewall system.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-06-03 09:16:13 +00:00
Michael Tremer
bf1ea6966b Merge branch 'master' into next 2021-05-25 09:46:50 +00:00
Peter Müller
2b51f53cfd Icinga: Do not ship event handlers for Nagios
These are owned (hence being writable) by "nobody", posing a potential
security risk. Since the files itself were already exluded from being
shipped, their parent directory should be as well.

This patch should reduce the amount of executable files being owned by
nobody to zero after upgrading to Core Update 157. Due to complexity
reasons, not all applications available in Pakfire could be tested,
though, so your mileage may vary.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-25 09:43:09 +00:00
Adolf Belka
495cf3e0b4 python-pyparsing: Update to 2.4.7 and migrate to python3
- Update from 2.2.0 to 2.4.7
- Migrate from python2 to python3
- Move the rootfile from common to packages as pyparsing is an addon

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 10:05:09 +00:00
Adolf Belka
398669f7c9 python3-setuptools: Create a python3 version of python-setuptools
- python3-setuptools works with python3-daemon but not with
   python-m2crypto. m2crypto has to stay with python2 because crda
   will not find the python3 version of m2crypto.
- python-m2crypto only works with python-setuptools so both the
   python2 and python3 versions of setuptools need to stay in place.
- Therefore this patch only creates python3-setuptools, it does not
   remove python-setuptools

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:48:22 +00:00
Adolf Belka
571de610a5 flac: Update to 1.3.3
- Update from 1.3.2 to 1.3.3
- Update rootfiles
- Changelog
    General:
        Fix CPU detection (Janne Hyvärinen).
        Switch from unsigned types to uint32_t (erikd).
        CppCheck fixes (erikd).
        Improve SIMD decoding of 24 bit files (lvqcl).
        POWER* amnd POWER9 improvements (Anton Blanchard).
        More tests.
    FLAC format:
        (none)
    Ogg FLAC format:
        (none)
    flac:
        When converting to WAV, use WAVEFORMATEXTENSIBLE when bits per
         second is not 8 or 16 (erikd).
        Fix --output-prefix with input-files in sub-directories (orbea).
    metaflac:
        (none)
    plugins:
        (none)
    build system:
        Cmake support (Vitaliy Kirsanov, evpobr).
        Visual Studio updates (Janne Hyvärinen).
        Fix for MSVC when UNICODE is enabled (lvqcl).
        Fix for OpenBSD/i386 (Christian Weisgerber).
    documentation:
        (none)
    libraries:
        (none).
    Interface changes:
        libFLAC:
            (none)
        libFLAC++:
            (none)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:46:08 +00:00
Michael Tremer
a915cdd6c9 intltool: Move into the core system and don't ship any more
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:39:12 +00:00
Peter Müller
28cffbc51c Drop sendEmail add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:32:10 +00:00
Peter Müller
a5ee98176c Drop miniupnpd add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Frankly, if you need or use UPnP, you probably do not even need to _think_
about running a firewall...

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:31:43 +00:00
Peter Müller
e55b268a4b Drop SANE add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:31:18 +00:00
Peter Müller
86f5f42f6b Drop orphaned dependency "libsrtp"
This was solely needed by Asterisk and is no longer used anymore.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:31:03 +00:00
Peter Müller
a326c9a623 Drop Asterisk add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:30:48 +00:00
Peter Müller
04bd81530a Drop orphaned dependency add-on libmicrohttpd
This was solely needed by "motion". It can be safely removed now.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:30:21 +00:00
Peter Müller
a7da7bcb07 Drop motion add-on
As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-20 09:30:05 +00:00
Michael Tremer
d267131be3 Fix merge error in samba rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-18 12:51:59 +00:00
Michael Tremer
504e72e173 Merge branch 'next' 2021-05-18 09:33:05 +00:00
Adolf Belka
81fba41961 elfutils: Update to 0.184
- Update from 0.183 to 0.184
- Update rootfiles
- Changelog
     2021-05-10  Mark Wielaard  <mark@klomp.org>
	* configure.ac (AC_INIT): Set version to 0.184.
	* NEWS: Add libdw, translation and debuginfod-client entries.
     2021-03-30  Frank Ch. Eigler  <fche@redhat.com>
	* configure.ac: Look for pthread_setname_np.
     2021-02-17  Timm Bäder  <tbaeder@redhat.com>
	* configure.ac: Add -Wno-packed-not-aligned check.
     2021-02-17  Timm Bäder  <tbaeder@redhat.com>
	* configure.ac: Add -Wtrampolines check.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-17 20:51:32 +00:00
Arne Fitzenreiter
05fed71761 python3-docutils: build prior python3-daemon
python3-daemon has a builddepency to python3-docutils

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 13:22:45 +00:00
Adolf Belka
3a533f70a0 python-distutils-extra: Removal of this python2 module
- python-distutils-extra is linked to python-distutils which is no longer
   used as it has been replaced by setuptools.
- python-distutils-extra is currently from 2011 and the latest version
   is from 2016. No development occurring on this.
- No problem on a clean build with this module being removed.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 12:23:21 +00:00
Adolf Belka
05a8e4c71d python-distutils: Removal of this python2 module
- python-distutils has been replaced by setuptools.
- python-distutils was not being built anyway as it was not listed in
   make.sh
- lfs has missing sections. There are no source and no build sections

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 12:22:42 +00:00
Adolf Belka
49ee22fcac python-optional-src: Removal of this python2 module
- python-optional-src was not getting built anyway as it was not listed
   in make.sh
- lfs file was missing most of the standard content. No source info
   and no build instructions
- missing source file from IPFire source system
- grep on build/ found no dependencies on this module

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 12:22:28 +00:00
Adolf Belka
38b4dcd729 nmap: Migrate to python3
- Added PYTHON=python3 prior to configure. This then builds nmap with
   python3.
- ndiff is written as python2 only and currently no patches to make it
   work wih python3 have been accepted by the nmap team. It looks like ndiff
   will stay as it is for some time so ndiff will be removed from the nmap
   package install.
- Added --without-ndiff to configure so nmap is built without ndiff
- Updated rootfile

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2021-05-16 12:21:16 +00:00