cdrom: Fix unattended mode on serial console

Reported-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core155: Ship graphs.pl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

QoS graphs: Add color mapping table

Use the traffic class description field to identify similar classes.
This ensures that a class used in both the up- and down-link is
printed with matching colors in both graphs.

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

update.sh: Fix path

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core155: Ship openssh

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssh: Update to 8.5p1

- Update Openssh from 8.4p1 to 8.5p1
- rootfiles not changed
- ssh access by keys tested with 8.5p1 and successfully worked
- Full Release notes can be read at https://www.openssh.com/releasenotes.html
- Future deprecation notice
   It is now possible[1] to perform chosen-prefix attacks against the
   SHA-1 algorithm for less than USD$50K.
   In the SSH protocol, the "ssh-rsa" signature scheme uses the SHA-1
   hash algorithm in conjunction with the RSA public key algorithm.
   OpenSSH will disable this signature scheme by default in the near
   future.
   Note that the deactivation of "ssh-rsa" signatures does not necessarily
   require cessation of use for RSA keys. In the SSH protocol, keys may be
   capable of signing using multiple algorithms. In particular, "ssh-rsa"
   keys are capable of signing using "rsa-sha2-256" (RSA/SHA256),
   "rsa-sha2-512" (RSA/SHA512) and "ssh-rsa" (RSA/SHA1). Only the last of
   these is being turned off by default.
- Checked if the weak ssh-rsa public key algorithm was being used with
   openssh8.4p1 by running
    ssh -oHostKeyAlgorithms=-ssh-rsa user@host
   host verification was successful with no issue so IPFire will not be
   affected by this deprecation when it happens
- Potentially-incompatible changes
    * ssh(1), sshd(8): this release changes the first-preference signature
      algorithm from ECDSA to ED25519.
   This did not affect my use of ssh login but I use ED25519 as the only
    key algorithm that I use. It might be good to get it tested by
    someone who has ECDSA and ED25519 keys and prefers ECDSA
   Remaining changes don't look likely to affect IPFire users
- Bugfixes
 * ssh(1): Prefix keyboard interactive prompts with "(user@host)" to
   make it easier to determine which connection they are associated
   with in cases like scp -3, ProxyJump, etc. bz#3224
 * sshd(8): fix sshd_config SetEnv directives located inside Match
   blocks. GHPR201
 * ssh(1): when requesting a FIDO token touch on stderr, inform the
   user once the touch has been recorded.
 * ssh(1): prevent integer overflow when ridiculously large
   ConnectTimeout values are specified, capping the effective value
   (for most platforms) at 24 days. bz#3229
 * ssh(1): consider the ECDSA key subtype when ordering host key
   algorithms in the client.
 * ssh(1), sshd(8): rename the PubkeyAcceptedKeyTypes keyword to
   PubkeyAcceptedAlgorithms. The previous name incorrectly suggested
   that it control allowed key algorithms, when this option actually
   specifies the signature algorithms that are accepted. The previous
   name remains available as an alias. bz#3253
 * ssh(1), sshd(8): similarly, rename HostbasedKeyTypes (ssh) and
   HostbasedAcceptedKeyTypes (sshd) to HostbasedAcceptedAlgorithms.
 * sftp-server(8): add missing lsetstat@openssh.com documentation
   and advertisement in the server's SSH2_FXP_VERSION hello packet.
 * ssh(1), sshd(8): more strictly enforce KEX state-machine by
   banning packet types once they are received. Fixes memleak caused
   by duplicate SSH2_MSG_KEX_DH_GEX_REQUEST (oss-fuzz #30078).
 * sftp(1): allow the full range of UIDs/GIDs for chown/chgrp on 32bit
   platforms instead of being limited by LONG_MAX. bz#3206
 * Minor man page fixes (capitalization, commas, etc.) bz#3223
 * sftp(1): when doing an sftp recursive upload or download of a
   read-only directory, ensure that the directory is created with
   write and execute permissions in the interim so that the transfer
   can actually complete, then set the directory permission as the
   final step. bz#3222
 * ssh-keygen(1): document the -Z, check the validity of its argument
   earlier and provide a better error message if it's not correct.
   bz#2879
 * ssh(1): ignore comments at the end of config lines in ssh_config,
   similar to what we already do for sshd_config. bz#2320
 * sshd_config(5): mention that DisableForwarding is valid in a
   sshd_config Match block. bz3239
 * sftp(1): fix incorrect sorting of "ls -ltr" under some
   circumstances. bz3248.
 * ssh(1), sshd(8): fix potential integer truncation of (unlikely)
   timeout values. bz#3250
 * ssh(1): make hostbased authentication send the signature algorithm
   in its SSH2_MSG_USERAUTH_REQUEST packets instead of the key type.
   This make HostbasedAcceptedAlgorithms do what it is supposed to -
   filter on signature algorithm and not key type.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge remote-tracking branch 'ms/riscv64-for-next' into next

pcre2: Disable JIT for RISC-V

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dhcp: Update automake

The bundles BIND package contains some outdated files as well which is
why I am extracting it first and then call UPDATE_AUTOMAKE.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libstatgrab: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lcdproc: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iftop: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

haproxy: Link against libatomic on riscv64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gpgme: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

frr: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

vnstat: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

powertop: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

parted: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nut: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mtr: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpd: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

minidlna: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iperf3: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

iperf: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fping: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

asterisk: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

apcupsd: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

samba: Add rootfile for riscv64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

rust: Enable build only for supported architectures

Unfortunately, Rust is not available for riscv64, which is why we have
to disable this package and all that depend on it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

suricata: Disable build on riscv64 for lack of Rust

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ragel: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid: Link against libatomic on riscv64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

sdparm: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pixman: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pango: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ntp: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ntfs-3g: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nmap: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

netatalk: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ncat: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lzo: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libtirpc: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libdvbpsi: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lcms2: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gnupg: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

fetchmail: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

alsa: Update automake

All sources are being extracted into $(DIR_APP) now because the
UPDATE_AUTOMAKE macro does not search outside of that directory.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cups: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

colm: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cifs-utils: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

usbutils: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xfsprogs: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

slang: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libxml2: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libnl-3: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pcre: Disable JIT on riscv64

This architecture is not supporting this feature, yet

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

util-linux: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libusb-compat: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libusb: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libnfnetlink: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libnetfilter_cttimeout: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libnetfilter_cthelper: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libmnl: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libgcrypt: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libassuan: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

json-c: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

expat: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bind: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

shadow: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

attr: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gettext: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libtool: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libmpc: Update automake

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

autoconf: Update automake scripts for riscv64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gcc: Compile for rv64gc

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

riscv64: Enable stack clash protection

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

riscv64: Move libraries back to /usr/lib64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Config: riscv64 is a 64 bit architecture

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pkg-config: Update automake scripts

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

gawk: Update automake scripts

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

flex: Update automake scripts

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Config: Enable UPDATE_AUTOMAKE for riscv64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

make.sh: Add support for building on riscv64

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core155: It looks like our tooling can't handle this

Python3 has a common rootfile for x86_64 and aarch64 and separate files
for armv5tel and i586. The core update build scripts cannot deal with
this which makes it necessary to create individual links to the correct
rootfile for each architecture.

Third time lucky.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rename update accelerator passive mode

Fixes #12577

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Tor: update to 0.4.5.6

Please refer to
https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.5.6 for
the full changelog of this release.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3: I didn't realise that i586 had a separate rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

bind: Enable parallel build

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core155: Ship dhcp

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

dhcp: Update to 4.4.2

For details see:
https://downloads.isc.org/isc/dhcp/4.4.2/dhcp-4.4.2-RELNOTES

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core155: Ship wget

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

wget: Update to 1.21.1

Sorry, no changelog found, only:
https://fossies.org/linux/wget/ChangeLog

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mc: Update to 4.8.26

For details see:
http://midnight-commander.org/wiki/NEWS-4.8.26

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

python3: Update to 3.8.7

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core155: Ship libffi and all dependencies

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libffi: Update to 3.3

This contains a version bump which requires us to ship Python 2 and
Python 3 again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

suricata: Update to 5.0.6

For details see:
https://forum.suricata.io/t/suricata-6-0-2-and-5-0-6-released/1170

and

https://redmine.openinfosecfoundation.org/versions/164

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core155: Ship libhtp

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

libhtp: Update to 0.5.37

For details see:
https://github.com/OISF/libhtp/releases

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>