Commit Graph

11307 Commits

Author SHA1 Message Date
Michael Tremer
fc484aa8d4 core180: Ship json-c
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-29 09:51:41 +00:00
Adolf Belka
df80b0d554 json-c: Update to version 0.17
- Update from version 0.16 to 0.17
- Update of rootfile
- Changelog
    0.17 (up to commit 077661f, 2023-08-08)
	Deprecated and removed features:
		* None
	New features
		* json_patch: add first implementation only with patch application
		* Add --disable-static and --disable-dynamic options to the cmake-configure
		  script.
		* Add -DBUILD_APPS=NO option to disable app build
		* Minimum cmake version is now 3.9
	Significant changes and bug fixes
		* When serializing with JSON_C_TO_STRING_PRETTY set, keep the opening and
		  closing curly or square braces on same line for empty objects or arrays.
		* Disable locale handling when targeting a uClibc system due to problems
		  with its duplocale() function.
		* When parsing with JSON_TOKENER_STRICT set, integer overflow/underflow
		  now result in a json_tokener_error_parse_number.  Without that flag
		  values are capped at INT64_MIN/UINT64_MAX.
		* Fix memory leak with emtpy strings in json_object_set_string
		* json_object_from_fd_ex: fail if file is too large (>=INT_MAX bytes)
		* Add back json_number_chars, but only because it's part of the public API.
		* Entirely drop mode bits from open(O_RDONLY) to avoid warnings on certain
		  platforms.
		* Specify dependent libraries, including -lbsd, in a more consistent way so
		  linking against a static json-c works better
		* Fix a variety of build problems and add & improve tests
		* Update RFC reference to https://www.rfc-editor.org/rfc/rfc8259

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-29 09:51:28 +00:00
Michael Tremer
c8edf45e3e core180: Ship iana-etc
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-29 09:51:06 +00:00
Michael Tremer
0d7c058c32 core180: Ship SQLite
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-25 17:28:37 +00:00
Michael Tremer
d45c4768f9 pakfire: Don't give up mirror search on status code 500
The WWW library seems to report status code 500 for issues like DNS
resolving problems and connection timeouts. In that case, we won't go on
searching for another functioning mirror, which we should.

This patch removes that special break clause.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-25 09:44:38 +00:00
Michael Tremer
84d0ccd6bc core180: Ship MPFR
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-24 13:42:31 +00:00
Adolf Belka
0f34d606a1 mpfr: Update to version 4.2.1
- Update from version 4.2.0 to 4.2.1
- Update of rootfile
- Changelog
    4.2.1
	patches 1 to 12 from 4.2.0 have been built in to 4.2.1
	Other bugs fixed in the 4.2 branch for the MPFR 4.2.1 release:
	    The + and space flags were ignored on NaN and Inf. While this was loosely
	     documented as such (without an explicit mention of these flags), the MPFR
	     manual also says that the flags have the same meaning as for the standard
	     printf function. So this was contradictory and regarded as a bug. Behaving
	     like the ISO C standard should give less surprise, and this is probably
	     what is expected (better for alignment purpose). See discussion (only for
	     NaN and the + flag at that time).
	     Corresponding changeset in the 4.2 branch: 3761bee3c.
	    Huge negative exponents can trigger integer overflows in mpfr_strtofr,
	     meaning undefined behavior. Two bugs have been identified: 1, 2. In
	     practice, the consequences may be incorrect results. But for the first bug,
	     it has been seen that a GCC optimization makes it invisible. There are
	     other issues with the code for huge exponents, but it is not clear whether
	     the problematic cases can occur in the context of mpfr_strtofr; such
	     potential bugs are not fixed yet.
	     Corresponding changesets in the 4.2 branch: 261d3852b (tests), 06e7b6bc1
	      (bug fixes).

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-24 13:42:04 +00:00
Matthias Fischer
e3419f9469 mc: Update to 4.8.30
For details see:
http://midnight-commander.org/wiki/NEWS-4.8.30

Summary:

"Major changes since 4.8.29
Core
    Support PCRE2 as search engine (via --with-search-engine=pcre2) (#4450)
    Implement panelization buffers for both file panels (#4370)

VFS
    tar: support extended headers (including long file names and sparse files) (#1952, #2201)
    extfs helpers: replace "perl -w" with "use warnings" (MidnightCommander?/mc#174)
    extfs/patchfs: be more specific in error message (#4485)

Editor
    Add syntax highlighting:
        Jenkinsfiles (#4469)
        B language (#4470)
    Improve syntax highlighting:
        ECMAScript (MidnightCommander?/mc#172)
        ECMAScript in TypeScript? (MidnightCommander?/mc#172)
        use diff syntax highlighting for git commit messages (COMMIT_EDITMSG) (MidnightCommander?/mc#85)

Misc
    Code cleanup (#4426, #4438)
    Filehighlight:
        recognize vsix files as zip files (MidnightCommander?/mc#171)
    Skin updates:
        julia256 (#4441, #4445)

Fixes
    Usage of 'sed' in build system/makefiles is not portable (#4459, #4466)
    Unportable '$<' in Makefiles (#4460)
    FTBFS if ncurses used without --with-ncurses-includes= configure parameter (#4462)
    Ncurses library is duplicated in MCLIBS (#4463, #4465)
    FTBFS without ext2fs attributes support (#4464)
    Wrong sort order after swapping panels (#4432)
    Incorrect time delimiter in the copy/move progress window (#4437)
    Incorrect redraw of overlapped file panels (#4408)
    Subshell/Command? line prompt is empty/missing (#3121)
    Find file: relative ignore directory is applied to the start search directory (#4235)
    Diff viewer: options are not applied on second run (#4486)
    mc.ext.ini: 'Edit' command from 'Default' section is ignored (#4434)
    mc.ext.ini: .md files are not recognized as Markdown ones by extension (#4444)
    mcedit: off-by-one error in paragraph formatting (#4446)
    ftp: incomplete file listing: block and character devices, pipes, sockets are missed (#4472)
    Various typos in the source code (MidnightCommander?/mc#177, MidnightCommander?/mc#178)"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-24 10:14:26 +00:00
Michael Tremer
6aa8145d5f Merge branch 'master' into next 2023-08-24 10:12:09 +00:00
Michael Tremer
121652cf53 core179: Start OpenVPN N2N connections even if the RW server is disabled
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-24 10:11:28 +00:00
Peter Müller
fb7869feb2 Core Update 179: Only start services if they are enabled
Doing so avoids situations where a service is started without being
configured to do so, thus reducing the potential for confusion and
exposure of services not intended to be exposed by the user.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-24 10:10:40 +00:00
Michael Tremer
fabc2e112e core180: Ship man pages index
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-21 16:38:25 +00:00
Jon Murphy
81feac13b1 manualpages: correct link to dns help page
- point the dns help link to "configuration/network/dns-server"

Signed-off-by: Jon Murphy <jon.murphy@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-21 16:37:56 +00:00
Adolf Belka
b5d85855e5 ppp: Bug#13164 - Update configure options to have correct directory for pid
- The original poster of the bug#13164 has already tested out ppp-2.5.0 in CU179 (master)
   and identified that the startup could not find the directory /usr/var/run/. This is due
   to the change in use of the prefix command in 2.5.0 vs 2.4.9 so --localstatedir set to
   /var. runstatedir is then set to localstatedir/run ie /var/run which is then correct
   for IPFire.
- This fix needs to be implemented into CU179 so that the bug poster can test out the update
- Updated rootfile to remove additional empty line

Fixes: Bug#13164
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-21 10:01:08 +00:00
Jon Murphy
34345ff1ef avahi-daemo: remove orange interface
- fix Bug 13202
- add non-default config file
- enable mDNS reflector
- remove IPv6

Signed-off-by: Jon Murphy <jon.murphy@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-21 09:28:21 +00:00
Michael Tremer
c5487f8073 core180: Ship vnstat
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-21 09:27:57 +00:00
Michael Tremer
8a3a3856ac core180: Ship index.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-21 09:26:43 +00:00
Michael Tremer
5cfccb2c8c core180: Ship dhcpcd
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-21 09:25:07 +00:00
Michael Tremer
eef8486bdf core180: Ship ppp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-21 09:23:14 +00:00
Adolf Belka
9a40c7fb0d ppp: Bug#13164 - Update configure options to have correct directory for pid
- The original poster of the bug#13164 has already tested out ppp-2.5.0 in CU179 (master)
   and identified that the startup could not find the directory /usr/var/run/. This is due
   to the change in use of the prefix command in 2.5.0 vs 2.4.9 so --localstatedir set to
   /var. runstatedir is then set to localstatedir/run ie /var/run which is then correct
   for IPFire.
- This fix needs to be implemented into CU179 so that the bug poster can test out the update
- Updated rootfile to remove additional empty line

Fixes: Bug#13164
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-21 09:22:58 +00:00
Michael Tremer
0b0d4363cf core180: Ship toolchain
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-17 14:12:38 +00:00
Michael Tremer
3bca8ae11f glibc: Update to 2.38
This update builds glibc with FORTIFY_SOURCE and disables building nscd
which has been unused in IPFire.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-17 14:07:44 +00:00
Michael Tremer
e8bdca4d52 gcc: Update to 13.2.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-17 14:07:43 +00:00
Michael Tremer
fc0f09a833 binutils: Update to 2.41
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-17 14:07:43 +00:00
Michael Tremer
ee29f5647b Start Core Update 180
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-17 14:04:11 +00:00
Michael Tremer
872619f5ec core179: Ask users to reboot after this update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-16 15:03:18 +00:00
Michael Tremer
959497f90f core179: Restart OpenVPN services during the update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-16 15:02:48 +00:00
Michael Tremer
a8af2483a1 core179: Ship vulnerabilities.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 16:50:00 +00:00
Matthias Fischer
3e4e65dd28 monit: Fix for Bug #13246 - No such file or directory '/etc/monit.d'
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 16:46:49 +00:00
Michael Tremer
9f1636bf11 core179: Migrate old ExtraHD entries in /etc/fstab
The rewritten version of ExtraHD no longer stores entries in /etc/fstab
which is why they have to be removed during the update.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 10:18:38 +00:00
Michael Tremer
9bfe4848bc core179: Ship ca-certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 09:28:25 +00:00
Peter Müller
991ea18ebb ca-certificates: Update to 20230814
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 09:28:09 +00:00
Michael Tremer
02ecc13baa core179: Ship squid-asnbl
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 09:27:39 +00:00
Arne Fitzenreiter
cd78363404 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-12 16:48:54 +02:00
Arne Fitzenreiter
f41a54a2ea initskript: smt: disable smt on vulnerable cpu
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-12 09:11:52 +02:00
Arne Fitzenreiter
ee0ee29843 core178: insert urgent core update for new cpu vulnerability mitigations
this contain kernel-6.1.45, intel-microcode-20230808, linux-firmware-20230804 + fam19h patches and a fix
for early microcode load from initramdisk.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 23:32:01 +02:00
Arne Fitzenreiter
162a068448 kernel: update to 6.1.45
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 23:25:37 +02:00
Arne Fitzenreiter
285740b926 linux-firmware: update to 20230804
also updated amd_familiy_19h patch which was not in 20230804 yet.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 21:12:45 +02:00
Arne Fitzenreiter
20ad6285d6 intel-microcode: update to 20230808
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 16:51:42 +02:00
Michael Tremer
806cc1ffd1 core179: Move Core Update 178 over to 179
https://lists.ipfire.org/pipermail/development/2023-August/016295.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-11 12:24:38 +00:00
Arne Fitzenreiter
babb30f6ab core177: ship u-boot-mkimage
this is linked against openssl-1.1 on older installations and was not shipped with core175

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2023-08-11 13:30:18 +02:00
Arne Fitzenreiter
58cd7839b5 riscv64: rootfile updates for gcc, util-linux and rust
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:35:11 +00:00
Arne Fitzenreiter
57ae9ba587 kernel: update config for riscv64
i had disabled CONFIG_GCC_PLUGIN_LATENT_ENTROPY because this
fails to compile on riscv64.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:35:11 +00:00
Michael Tremer
47b248f292 core178: Ship libloc
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:34:38 +00:00
Adolf Belka
0d46ef0ce7 libloc: Update to version 0.9.17
- Update from version 0.9.16 to 0.9.17
- Update of rootfile
- Changelog
    0.9.17
	* The importer is now parsing Geofeeds where available. This helps us to create a
          database with better accuracy for large ISPs or cloud providers.
	* The database writer is trying to compress the database harder: It will now look
          for any duplicate networks and merge neighbouring networks which will reduce the
          size of the database by about half.
	* The importer has been improved so that it runs more efficient SQL queries to
          create the database faster.
	* Temuri Doghonadze contributed a Georgian translation.
	* Hans-Christoph Steiner contributed bash-completion for the location(8) command.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:34:27 +00:00
Michael Tremer
7302806652 core178: Ship squid
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-10 06:34:05 +00:00
Michael Tremer
647469bdeb core178: Ship rpcsvc-proto
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:20:53 +00:00
Michael Tremer
a93bb5d8f1 core178: Ship qpdf
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:09:33 +00:00
Adolf Belka
0436f28b42 qpdf: Update to version 11.5.0
- Update from version 11.3.0 to 11.5.0
- Update of rootfile
- Changelog
    11.5.0: release
        * This release consists entirely of changes made by M. Holger.
          Mostly this is changes to the private API, performance
          enhancements, code cleanup, and reformatting to 100 columns
          instead of 80. For qpdf development, we are starting to use
          JetBrains CLion, so a lot of the changes are moving us toward a
          cleaner development experience in that environment.
        * Bug fix: when a the same page is copied multiple times, copy
          the annotations rather than having multiple pages share an
          annotation object. Thanks to M. Holger for the fix. Fixes #600.
        * Add "FUTURE" build option for enabling experimental APIs. Do not
          package qpdf built with the FUTURE option as there are no binary
          compatibility or even source compatibility guarantees. The option
          is intended for developers who want to ensure that future
          potentially breaking changes are compatible with their code or
          provide feedback on upcoming changes. At present, the only feature
          enabled by FUTURE is a move constructor for QPDFObjectHandle.
          While this shouldn't break any code, it would change details about
          how many copies of a specific QPDFObjectHandle were in existence,
          so it could potentially break code that was relying on internal
          shared pointer reference counts. Thanks to M. Holger for the idea
          and contribution.
        * Add new method Buffer::copy and deprecate Buffer copy
          constructor and assignment operator. Buffer copy operations are
          expensive as they always involve copying the buffer content. Use
          "buffer2 = buffer1.copy();" or "Buffer buffer2{buffer1.copy()};"
          to make it explicit that copying is intended. This change was
          contributed by M. Holger.
    11.4.0: release
        * From M. Holger: add QPDF::newReserved as a better alternative to
          QPDFObjectHandle::newReserved. The operation of creating a new
          reserved object fits better in the QPDF API. The old call just
          delegates to the new one.
        * When an annotation dictionary's appearance dictionary (`/AP`)
          has a key that is a stream, disregard `/AS` (which is supposed to
          point to a subkey). This enables qpdf to not ignore annotations
          that have incorrect values for `/AS` when the appearance stream is
          directly in the `/AP` dictionary instead of in a subkey.
          Fixes #949.
        * Allow QPDFJob's workflow to be split into a reading phase and a
          writing phase to allow the caller to operate on the QPDF object
          before it is written. This adds methods QPDFJob::createQPDF and
          QPDFJob::writeQPDF and corresponding C API functions
          qpdfjob_create_qpdf and qpdfjob_write_qpdf. Thanks to M. Holger
          for the contribution.
        * From M. Holger: throw a logic error if an uninitialized or
          foreign QPDFObjectHandle is added to an array.
        * Enhance --optimize-images to support images nested inside of
          form XObjects. Thanks to Connor Osborne (github user cdosborn) for
          the contribution. Fixes #923.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:09:11 +00:00
Adolf Belka
640f08ea66 qemu: Update to version 8.0.3
- Update from version 7.1.0 to 8.0.3
- Update of rootfile
- Changelog is too large to include here. See the following links for more details
    8.0
	https://wiki.qemu.org/ChangeLog/8.0
    7.2
	https://wiki.qemu.org/ChangeLog/7.2

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-08 16:08:57 +00:00