]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/log
people/pmueller/ipfire-2.x.git
8 months agoharfbuzz: Update to version 10.1.0
Adolf Belka [Sun, 10 Nov 2024 10:39:49 +0000 (11:39 +0100)] 
harfbuzz: Update to version 10.1.0

- This v2 version corrects the Comment section of the lfs where a b2sum was accidentally
   pasted.
- Update from version 8.2.2 to 10.1.0
- Update of rootfile
- From version 9.0.0 meson is the only build system for harfbuzz
- Changelog
    10.1.0
- Fix the sign of fallback vertical glyph advance (used when font has no
  vertical advance data).
- Increase maximum “CFF” operands limit 20 times to support more complex fonts.
- Add “--face-loader” option to command line utilities.
- Support “COLR” v0 table in hb_font_get_glyph_extents().
- Add support for font functions that use Core Text APIs, similar to FreeType
  font functions. This allows, for example, using drawing fonts that use the new
  (and undocumented) “hvgl” table.
- Update IANA and OT language registries, as well ase USE data files.
- Fix build with ICU 76.
- Various compiler warnings and build fixes.
- Various subsetter fixes.
- New API:
+hb_face_create_or_fail()
+hb_face_create_from_file_or_fail()
+hb_coretext_face_create_from_file_or_fail()
+hb_coretext_font_set_funcs()
+hb_ft_face_create_from_file_or_fail()
    10.0.1
- Relax sanitization checks for “morx” subtables to fix broken AAT shaping of
  macOS 15.0 version of GeezaPro.
    10.0.0
- Unicode 16.0.0 support.
- Various documentation fixes.
- Various build fixes.
- Add API to allow HarfBuzz client to set what glyph to use when a Unicode
  Variation Selector is not supported by the font, which would allow the client
  to customize what happens in this case, by using a different font for example.
- Add a callback to for “hb_face_t” for getting the list of table tags. This is
  now used to make calling “hb_face_get_table_tags()” work on a faces created by
  “hb_face_create_for_tables()” (e.g. faces returned by “hb_subset_or_fail()”).
- CGJ and Mongolian Variation Selectors are now ignored during glyph
  positioning, previously they would block both glyph substitution and
  positioning across them.
- Support cairo script as an output format for “hb-view” command line tool.
- Drop an optimization that would cause HarfBuzz not apply pair positioning
  lookup subtables under certain circumstances, for compatibility with other
  implementations that do apply these subtables.
- Subsetting will now fail if source font has no glyphs, so feeding the subsetter
  invalid data will not silently return an empty face.
- If after partially instancing a font no variation data is left (the instance
  is fully static), don’t consider this a failure.
- Workaround a Firefox bug in displaying SVGs generated be “hb-view” command
  line tool under certain circumstances.
- Fix bug in macroman mapping for “cmap” table.
- Fix difference shaping output when HarfBuzz is built with with
  “HB_NO_OT_RULESETS_FAST_PATH” enabled.
- Various subsetting and instancing fixes.
- Various fuzzing fixes.
- Add “with_libstdcxx” meson build option.
- New API:
+HB_SCRIPT_GARAY
+HB_SCRIPT_GURUNG_KHEMA
+HB_SCRIPT_KIRAT_RAI
+HB_SCRIPT_OL_ONAL
+HB_SCRIPT_SUNUWAR
+HB_SCRIPT_TODHRI
+HB_SCRIPT_TULU_TIGALARI
+hb_buffer_set_not_found_variation_selector_glyph()
+hb_buffer_get_not_found_variation_selector_glyph()
+hb_get_table_tags_func_t
+hb_face_set_get_table_tags_func()
    9.0.0
- HarfBuzz now the supports the proposed new OpenType “VARC” table. This
  replaces the previously supported “Variable Composites” experimental feature.
  “VARC” support is still experimental and it is not enabled unless HarfBuzz is
  built with experimental APIs enabled:
  https://github.com/harfbuzz/boring-expansion-spec/blob/main/VARC.md
- Autotools build system have been dropped. Meson is the only supported build
  system in HarfBuzz going forward.
- Speed up “AAT” shaping for short words by up to 4%.
- Ignore unknown “CFF” operators.
- “hb_subset_input_keep_everything()” now keeps also non-unicode “name” table
  records.
- Update the IANA and OpenType language tag registries.
- Support composite glyphs with very large number of points in hb-draw API.
- Various build fixes.
    8.5.0
- API for partial instancing is now stable and have been promoted out of
  experimental APIs.
- Support instancing “BASE” table.
- Speedup AAT shaping by 13–30%.
- Various build fixes.
- Various subsetter and instancer fixes.
- New API:
+HB_SUBSET_FLAGS_OPTIMIZE_IUP_DELTAS
+hb_subset_input_get_axis_range()
+hb_subset_input_pin_axis_location()
    8.4.0
- Add /bigobj to MSVC compiler flags in meson build, to fix building hb-subset.cc
- Specify minimum versions of various dependencies in meson and autotools build.
- When subsetting, place variation store at the end of “GDEF” table  to fix
  shaping issues with some versions of Adobe InDesign.
- Various build fixes.
- New API:
+hb_buffer_set_random_state()
+hb_buffer_get_random_state()
    8.3.1
- hb_blob_create_from_file_or_fail() on Windows will now try to interpret the
  file name as UTF-8 first, and as system code page if it is not valid UTF-8.
- Fix hb_style_get_value() in fonts with “STAT” table.
- Properly handle negative offsets in CFF table.
- Update IANA Language Subtag Registry to 2024-03-07.
- Subsetter now supports subsetting “BASE” table.
- Subsetter will update “hhea” font metrics in sync with “OS/2” ones.
- “--variations” option of “hb-subset” now supports leaving out values that
  should be unchanged, e.g. “wght=:500:” will change the default and keep max
  and min unchanged. It also supports “*=drop” to to pin all axes to default
  location.
- Fix hb_ot_math_get_glyph_kerning() to match updated “MATH” table spec.
- Support legacy MacRoman encoding in “cmap” table.
- Various build fixes.
- Various subsetting and instancing fixes.
- New API:
hb_subset_input_pin_all_axes_to_default()
    8.3.0
- Improve memory barrier to fix potential segfaults.
- Various build fixes.
- Various subsetting and instancing fixes.
- Rename “hb-subset” option “--instance” to “--variations” to match the other
  tools. Old option is kept as an alias.
- New API:
HB_AAT_LAYOUT_FEATURE_TYPE_CURSIVE_CONNECTION
- Deprecated API:
HB_AAT_LAYOUT_FEATURE_TYPE_CURISVE_CONNECTION

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agocore191: ship pixman
Arne Fitzenreiter [Sun, 8 Dec 2024 15:51:02 +0000 (16:51 +0100)] 
core191: ship pixman

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agopixman: Update to version 0.44.0
Adolf Belka [Sat, 9 Nov 2024 17:38:13 +0000 (18:38 +0100)] 
pixman: Update to version 0.44.0

- Update from version 0.43.4 to 0.44.0
- Update of rootfile
- Disabling iwmmxt no longer required as support for it in pixman has been dropped.
- Changelog  not provided. Review of changes only available by review of commits.
   https://gitlab.freedesktop.org/pixman/pixman/-/commits/master?ref_type=heads

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agocore191: ship lvm2
Arne Fitzenreiter [Sun, 8 Dec 2024 15:49:20 +0000 (16:49 +0100)] 
core191: ship lvm2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agolvm2: Update to version 2.03.28
Adolf Belka [Sat, 9 Nov 2024 17:38:12 +0000 (18:38 +0100)] 
lvm2: Update to version 2.03.28

- Update from version 2.03.26 to 2.03.28
- Update of rootfile not required
- Changelog
    2.03.28
  Use radix_tree to lookup for UUID within committed metadata.
  Use radix_tree to lookup LV list entry within VG struct.
  Introduce setting config/validate_metadata = full | none.
  Restore fs resize call for lvresize -r on the same size LV (2.03.17).
  Correct off-by-one devicesfile backup counting.
  Replace use of dm_hash with radix_tree for lv names and uuids.
  Refactor vg_validate with uniq_insert and better use of CPU caches.
  Add radix_tree_uniq_insert.
  Update DM cache when taking next VG lock instead of dropping it.
  Generate json string id only for json reporting.
  For vgsummary use new API call dm_config_parse_only_section().
  Use radix_tree for PV names mapping.
  Split check_lv_segment into separate _in/complete_vg variant.
  Use find_lv instead of find_lv_in_vg when possible.
  Do a mirror fixup only when mirrors with logs are imported.
  Add faster crc32 calculation from zlib code for x86_64.
  Fall back to direct zeroing if BLKZEROOUT fails during new LV initialization.
    2.03.27
  Fix swap device size detection using blkid for lvresize/lvreduce/lvextend.
  Detect GPT partition table and pass partition filter if no partitions defined.
  Add global/sanlock_align_size option to configure sanlock lease size.
  Disable mem locking when activation/reserved_stack or reserved_memory is 0.
  Fix locking issues in lvmlockd leaving thin pool locked.
  Deprecate vdo settings vdo_write_policy and vdo_write_policy.
  Lots of typo fixes across lvm2 code base (codespell).
  Corrected integrity parameter interleave_sectors for DM table line.
  Ignore -i|--stripes, -I|--stripesize for lvextend on raid0 LV, like raid10.
  Do not accept duplicate device names for pvcreate.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agocore191: ship gnutls
Arne Fitzenreiter [Sun, 8 Dec 2024 15:47:46 +0000 (16:47 +0100)] 
core191: ship gnutls

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agoffmpeg: Update to version 7.1
Adolf Belka [Sat, 9 Nov 2024 17:38:10 +0000 (18:38 +0100)] 
ffmpeg: Update to version 7.1

- Update from version 7.0.2 to 7.1
- Update of rootfile
- Changelog
    7.1
- Raw Captions with Time (RCWT) closed caption demuxer
- LC3/LC3plus decoding/encoding using external library liblc3
- ffmpeg CLI filtergraph chaining
- LC3/LC3plus demuxer and muxer
- pad_vaapi, drawbox_vaapi filters
- vf_scale supports secondary ref input and framesync options
- vf_scale2ref deprecated
- qsv_params option added for QSV encoders
- VVC decoder compatible with DVB test content
- xHE-AAC decoder
- removed DEC Alpha DSP and support code
- VVC encoding support via libvvenc
- perlin video source
- D3D12VA HEVC encoder
- Cropping metadata parsing and writing in Matroska and MP4/MOV de/muxers
- Intel QSV-accelerated VVC decoding
- MediaCodec AAC/AMR-NB/AMR-WB/MP3 decoding
- YUV colorspace negotiation for codecs and filters, obsoleting the
  YUVJ pixel format
- Vulkan H.264 encoder
- Vulkan H.265 encoder
- stream specifiers in fftools can now match by stream disposition
- LCEVC enhancement data exporting in H.26x and MP4/ISOBMFF
- LCEVC filter
- MV-HEVC decoding

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agocore191: ship expat
Arne Fitzenreiter [Sun, 8 Dec 2024 15:46:23 +0000 (16:46 +0100)] 
core191: ship expat

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agoexpat: Update to version 2.6.4
Adolf Belka [Sat, 9 Nov 2024 17:38:09 +0000 (18:38 +0100)] 
expat: Update to version 2.6.4

- Update from version 2.6.3 to 2.6.4
- Update of rootfile
- Changelog
    2.6.4
        Security fixes:
            #915  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
                    from a NULL pointer dereference by disallowing function
                    XML_StopParser to (stop or) suspend an unstarted parser.
                    A new error code XML_ERROR_NOT_STARTED was introduced to
                    properly communicate this situation.  // CWE-476 CWE-754
        Other changes:
            #903  CMake: Add alias target "expat::expat"
            #905  docs: Document use via CMake >=3.18 with FetchContent
                    and SOURCE_SUBDIR and its consequences
            #902  tests: Reduce use of global parser instance
            #904  tests: Resolve duplicate handler
       #317 #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
            #914  Fix signedness of format strings
       #919 #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
                    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
                    for what these numbers do
        Infrastructure:
            #907  CI: Upgrade Clang from 18 to 19
            #913  CI: Drop macos-12 and add macos-15
            #910  CI: Adapt to breaking changes in GitHub Actions
            #898  Add missing entries to .gitignore

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agocore191: ship curl
Arne Fitzenreiter [Sun, 8 Dec 2024 15:45:10 +0000 (16:45 +0100)] 
core191: ship curl

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agocurl: Update to version 8.11.0
Adolf Belka [Sat, 9 Nov 2024 17:38:08 +0000 (18:38 +0100)] 
curl: Update to version 8.11.0

- Update from version 8.10.0 to 8.11.0
- Update of rootfile
- Changelog
    8.11.0
Changes:
    curl: --create-dirs works for --dump-header as well
    gtls: Add P12 format support
    ipfs: add options to disable
    TLS: TLSv1.3 earlydata support for curl
    WebSockets: make support official (non-experimental)
Bugfixes:
    alt-svc: honor data->state.httpwant
    altsvc: avoid using local buffer and memcpy
    asyn-ares: remove typecast, fix expire
    autotools: add support for 'unity' builds, enable in CI
    bearssl: avoid strpcy() when generating TLS version log message
    bearssl: improved session handling, test exceptions
    bufq: unwrite fix
    build: add `ldap` to `libcurl.pc` `Requires:`
    build: add pytest targets
    build: clarify CA embed is for curl tool, mark default, improve summary
    build: detect and use `_setmode()` with Cygwin/MSYS, also use on Windows
    build: disable warning `-Wunreachable-code-break`
    build: fix clang-cl builds, add CI job
    build: fix cross-compile check for poll with bionic
    build: fix possible `-Wformat-overflow` in lib557
    build: limit arc4random detection to no-SSL configs
    build: show if CA bundle to embed was found
    build: tidy up and improve versioned-symbols options
    build: tidy up deprecation suppression, enable warnings for clang
    certs: add missing `-CAcreateserial` option for LibreSSL
    checksrc: add check for spaces around logical AND operators
    checksrc: Added checks for colon operator in ternary expressions
    checksrc: check for spaces around '?', '>' and '<'
    ci: dump `curl_config.h` to log in all jobs
    CI: run with standard mod_http2
    cmake, Makefile.mk: use -isystem for headers, silence BearSSL issues
    cmake/FindCares: fix version detection for c-ares 1.34.1
    cmake/FindNGTCP2: use library path as hint for finding crypto module
    cmake: add missed variable to comment
    cmake: add native `pkg-config` detection for mbedTLS, MSH3, Quiche, Rustls, wolfSSL
    cmake: allow building tests in unity mode
    cmake: apply `WIN32_LEAN_AND_MEAN` to all feature checks
    cmake: avoid setting `BUILD_TESTING`
    cmake: clear package version after `pkg-config` detection
    cmake: delete unused NEED_LBER_H, HAVE_LDAP_H
    cmake: detect `HAVE_NETINET_IN6_H`, `HAVE_CLOSESOCKET_CAMEL`, `HAVE_PROTO_BSDSOCKET_H`
    cmake: detect GNU GSS
    cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
    cmake: do not propagate unused `HAVE_GSSAPI_GSSAPI_KRB5_H` to C
    cmake: document `-D` and env build options
    cmake: drop obsolete items from `TODO` and `INSTALL-CMAKE`
    cmake: drop redundant assignments
    cmake: drop redundant zlib var, rename function (internals)
    cmake: expand CURL_USE_PKGCONFIG to non-cross MINGW
    cmake: fix broken dependency chain for cmdline-opts, tidy-ups
    cmake: fix compile warnings for clang-cl
    cmake: fix missing spacing in log message
    cmake: limit `CURL_STATIC_CRT` to MSVC
    cmake: make `test-ci` target skip building dependencies
    cmake: mark as advanced some internal Find* variables
    cmake: readd `generate-curl.1` dependency for `src` just in case
    cmake: rename LDAP dependency config variables to match Find modules
    cmake: replace `check_include_file_concat()` for LDAP and GSS detection
    cmake: replace `CURL_*_DIR` with `{PROJECT,CMAKE_CURRENT}_*_DIR`
    cmake: require quictls (or fork) when using msh3 on non-Windows
    cmake: separate target for examples, optimize CI, fix fallouts
    cmake: set version for `project()` and add CPack support
    cmake: stop adding dependency headers to global `CMAKE_REQUIRED_INCLUDES`
    cmake: sync torture test parallelism with autotools
    cmake: tidy up `CURL_DISABLE_FORM_API` initialization
    cmake: tidy up and shorten symbol hiding initialization
    cmake: tidy up line order
    cmake: tidy up picky warning initialization
    cmake: tidy-ups and rebase fixups
    cmake: tweaks around debug mode and hidden symbols
    cmake: untangle feature detection interdependencies
    cmake: use `list(APPEND)` on `CURL_INCLUDES`
    cmake: use OpenSSL for LDAP detection only if available
    cmake: use the `BSD` variable
    config: rename the OS define to CURL_OS to reduce collision risk
    configure: add GSS to `libcurl.pc` `Depends:`
    configure: catch Apple in more target triplets
    configure: drop duplicate feature checks for `poll()`, `if_nametoindex()`
    configure: drop unused bare `socket.h` detection
    configure: improve help string for some options
    conncache: find bundle again in case it is removed
    conncache: more efficient implementation of cpool_remove_bundle
    cookie: overhaul and cleanup
    curl-rustls.m4: set linker flags to allow rustls build on macos
    curl.h: remove the struct pointer for CURL/CURLSH/CURLM typedefs
    curl: add build options for safe/no CA bundle search (Windows)
    curl: detect ECH support dynamically, not at build time
    curl_addrinfo: support operating systems with only getaddrinfo(3)
    curl_multi_perform.md: fix typo
    curl_trc: fix build with verbose messages disabled
    curl_url_set.md: document HOST handling when URL is parsed
    curl_ws_recv.md: the 'meta' pointer is only returned on success
    curl_ws_recv: return recv 0 and point meta to NULL on all errors
    CURLMOPT_PIPELINING.md: clarify that CURLPIPE_NOTHING is not default
    CURLOPT_APPEND.md: goes for SFTP as well
    CURLOPT_HEADERFUNCTION.md: do not modify the passed in buffer
    DISABLED: disable test 1060 with hyper
    DISTROS: avoid use of "very"
    Dockerfile: update Docker digest to d830561
    docs/cmdline-opts: GnuTLS supports PKCS#11 URI in --cert option
    docs: clarify FTP over HTTP proxy functionality somewhat
    docs: fix a typo in some cipher options
    ech: spelling, whitespace, say `--ech` default config
    ftp: fix 0-length last write on upload from stdin
    ftp: move listen handling to socket filter
    GHA: optimize test prereq steps
    gnutls: use session cache for QUIC
    hsts: avoid the local buffer and memcpy on lookup
    hsts: improve subdomain handling
    hsts: support "implied LWS" properly around max-age
    http2: auto reset stream on server eos
    http_aws_sigv4: avoid local buffer and strcpy
    INSTALL-CMAKE.md: mention focus on shared libraries
    INSTALL-CMAKE: fix punctuation and a typo
    INSTALL.md: fix a typo that slipped in to RISC OS
    json.md: cli-option `--json` is an alias of `--data-binary`
    lib, src, tests: added space around ternary expressions
    lib/cw-out: initialize 'flush_all' directly
    lib/src: white space edits to comply better with code style
    lib: avoid assigning 'result' temporarily
    lib: fix disabled-verbose-strings + enable-debug build warnings
    lib: fix unity builds with BearSSL, MSH3, Quiche, OmniOS
    lib: move curl_path.[ch] into vssh/
    lib: msnprintf tidy-ups
    lib: remove Curl_ prefix from static functions
    lib: remove function pointer typecasts for hmac/sha256/md5
    lib: use bool/TRUE/FALSE properly
    libcurl/opts: improve phrasing for connection cap related options
    libssh.c: handle EGAINS during proto-connect correctly
    libssh2: delete duplicate `break`
    libssh2: put the readdir buffers into struct
    libssh2: use the Curl_* memory functions to avoid memdebug
    libssh2: use the filename buffer when getting the homedir
    libtests: generate the lib1521 atomically
    mbedTLS: fix handling of TLSv1.3 sessions
    mbedtls: handle session as blobs
    mbedtls: remove failf() use from mbedtls_random
    mk-lib1521: fix the long return code check
    mprintf: do not ignore length modifiers of `%o`, `%x`, `%X`
    mprintf: treat `%o` as unsigned, add tests for `%o`, `%x`, `%X`
    mqtt: fix mqtt.md wording and add clearer explanation
    multi.c: make stronger check for paused transfer before asserting
    multi.c: warn/assert on stall only without timer
    multi: avoid reading whole struct pointer from pointer
    multi: convert Curl_follow to static multi_follow
    multi: make curl_multi_cleanup invalidate magic latter
    multi: make multi_handle_timeout use the connect timeout
    multi: split multi_runsingle into sub functions
    negotiate: conditional check around GSS & SSL specific code
    netrc: cache the netrc file in memory
    ngtcp2: do not loop on recv
    ngtcp2: set max window size to 10x of initial (128KB)
    openssl quic: populate x509 store before handshake
    openssl: convert a memcpy to dynbuf use
    openssl: extend the OpenSSL error messages
    openssl: improve retries on shutdown
    openssl: remove two strcpy() calls
    OS400: don't delete source files when building with debug
    packages/OS400/curlmain: remove the strncpy calls
    processhelp.pm: improve taskkill calls (Windows)
    pytest: fix run against multissl curl
    pytest: improve pytest_07_42a reliability
    pytest: include `buildinfo.txt` in the output
    pytest: include curl version string and python platform in log
    pytest: show curl features and protocols
    quic: use send/recvmmsg when available
    quic: use the session cache with wolfSSL as well
    request: on shutdown send, proceed normally on timeout
    runtests.md: suggest a value for -j for torture tests
    runtests: add comment for handle64 pathsep requirement
    runtests: drop unused code for old/classic-mingw support
    runtests: pass single backslashes with Windows Perl
    runtests: use deterministic sort for `TESTINFO` lines
    schannel: fix TLS cert verification by IP SAN
    schannel: ignore error on recv beyond close notify
    schannel: reclassify extra-verbose schannel_recv messages
    select: use poll() if existing, avoid poll() with no sockets
    sendf: add condition to max-filesize check
    server/mqttd: fix two memory leaks
    setopt: avoid superfluous length checks before strcmp()
    setopt: return error for bad input to CURLOPT_RTSP_REQUEST
    setopt_cptr: make overflow check only done when needed
    singleuse: make `git grep` faster, add Apple `nm` support
    smb: do not redefine `getpid` on Windows
    smb: replace use of strcpy() with snprintf()
    socks_gssapi: switch to dynbuf from buffer with strcpy
    source: avoid use of 'very' in comments
    src/lib: remove redundant ternary operators
    src: guard for double declaration of `curl_ca_embed` in unity builds
    sws: fix unused static function with `TCP_NODELAY` undefined
    telnet: avoid two strcpy() by pointing to the strings instead
    test1035: convert host name back to utf8 as should be
    test1515: add tracing and more debug info
    test1540: add debug logging
    test190: replace %FTPTIME2 with a fixed value
    test1915: add tracing and connect timeout
    test1915: remove wrong comment
    test2502: add libtest debug tracing
    test504: fix handling on pending connect
    testrun: explicitly set proper IP address for stunnel listen/connect
    tests/http: fix ubuntu GnuTLS CI failures
    tests/scorecard: allow remote server test
    tests/server/util.c: remove use of strncpy
    tests/valgrind.pm: fix warnings with no valgrind report to show
    tests/valgrind.supp: remove a travis suppression, add a Debian
    tests: add and use `%PERL` variable to refer to the Perl binary
    tests: add codeset-utf8 as a feature
    tests: add file: tests with existing files
    tests: allow pytests to run in out-of-tree builds
    tests: capture stdin to get the vsftpd version number
    tests: change Python code style to pass ruff checks
    tests: check http/2 and http/3 server responsiveness
    tests: delete duplicate macro check
    tests: enable additional ruff Python lint options
    tests: fix `%POSIX_PWD` on native Windows Perl
    tests: fix callback signatures to please UndefinedBehaviorSanitizer
    tests: Fix FILEFORMAT <file name=""> directive
    tests: fix keyword for test1411
    tests: fix shell quoting on native Windows Perl
    tests: fix some Python typing issues
    tests: fixup `checkcmd` `PATH` on non-unixy platforms
    tests: improve mqtt server handling
    tests: introduce %CLIENT6IP-NB
    tests: let openssl generate random cert serials
    tests: libtests and unit tests need explicit #include memdebug
    tests: make precheck for HTTP on 127.0.0.1 into a feature
    tests: Only log warnings or worse by default in smbserver
    tests: postcheck is now in verify
    tests: remove all valgrind disable instructions
    tests: remove debug requirement on 38 tests
    tests: remove the %FTPTIME3 variable
    tests: replace `%PWD` with `%FILE_PWD` for `file://`
    tests: replace `%PWD` with `%SSH_PWD` in SCP/SFTP tests
    tests: replace hard-coded `/dev/null` with variable
    tests: simplify `pathhelp.pm`, avoid using external tools
    tests: speed up builds with single-binary test bundles
    tests: testrunner fairness
    tests: testrunner reliability improvements
    tests: use '-4' where needed
    tests: use a set for several of the curl_props
    tftp: avoid two memcpy/strcpy
    tidy-up: rename CURL_WINDOWS_APP to CURL_WINDOWS_UWP
    tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
    tool: support --show-headers AND --remote-header-name
    tool_doswin: simplify; remove unused options and strncpy calls
    tool_getparam: drop unused time() call
    tool_getparam: replace two uses of strncpy(), ban strncpy
    tool_operate: make --skip-existing work for --parallel
    tool_operate: reuse the schannel backend check
    tool_xattr: create the user.creator xattr attribute
    unit1307: tidy up Apple OS detection
    unit1660: fix unreachable code warning in no-SSL builds
    url: connection reuse on h3 connections
    url: use same credentials on redirect
    urlapi: drop unused header
    urlapi: normalize the IPv6 address
    version: minor cleanups
    version: say quictls in MSH3 builds
    vquic: fix compiler warning with gcc + MUSL
    vquic: recv_mmsg, use fewer, but larger buffers
    vtls: convert Curl_pin_peer_pubkey to use dynbuf
    vtls: convert pubkey_pem_to_der to use dynbuf
    warnless: remove curlx_sktosi and curlx_sitosk
    winbuild/README: consolidate command prompt section
    winbuild/README: document how to clean a build
    winbuild: add initial wolfSSL support
    winbuild: drop `gen_resp_file.bat`
    wolfssl: convert malloc + memcpys to dynbuf for cipher string
    wolfSSL: fix handling of TLSv1.3 sessions
    wolfssl: no more use of the OpenSSL API
    wolfssl: use old version API without openssl extra
    8.10.1
Bugfixes:
    autotools: fix `--with-ca-embed` build rule
    cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
    cmake: fix MSH3 to appear on the feature list
    connect: store connection info when really done
    CURLMOPT_TIMERFUNCTION.md: emphasize that only a single timer should run
    FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
    http2: when uploading data from stdin, fix eos forwarding
    http: make max-filesize check not count ignored bodies
    lib: fix AF_INET6 use outside of USE_IPV6
    libcurl-docs: CURLINFO_LOCAL_* work for QUIC as well as TCP
    multi: check that the multi handle is valid in curl_multi_assign
    QUIC: on connect, keep on trying on draining server
    request: correctly reset the eos_sent flag
    runtests: accecpt 'quictls' as OpenSSL compatible
    rustls: fixed minor logic bug in default cipher selection
    rustls: rustls-ffi 0.14.0 update
    rustls: support strong CSRNG data
    setopt: remove superfluous use of ternary expressions
    singleuse: drop `Curl_memrchr()` for no-HTTP builds
    test537: cap the rlimit max this test runs
    tests: tweak lock file handling and timers
    tool_cb_wrt: use "curl_response" if no file name in URL
    transfer: fix sendrecv() without interim poll
    vtls: fix `Curl_ssl_conn_config_match` doc param

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agocore191: start updater
Arne Fitzenreiter [Sun, 8 Dec 2024 15:40:55 +0000 (16:40 +0100)] 
core191: start updater

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agoupdate.sh: Remove existing entries for the three FEODO_ tracker lists
Adolf Belka [Wed, 16 Oct 2024 16:50:20 +0000 (18:50 +0200)] 
update.sh: Remove existing entries for the three FEODO_ tracker lists

- This removes any time entries in the modified file for either FEODO_RECOMMENDED,
   FEODO_IP or FEODO_AGGRESSIVE.
- This also removes any blocklists for any of these sources from the /var/lib/ipblocklist
   directory.
- This patch will ensure that any reference to any of these sources is removed from the
   ipblocklist files.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agosources: Removal of Feodo Tracker lists from ipblocklist sources file
Adolf Belka [Wed, 16 Oct 2024 16:50:19 +0000 (18:50 +0200)] 
sources: Removal of Feodo Tracker lists from ipblocklist sources file

- FEODO_RECOMMENDED list is empty and has been since 2024-08-23, when it was last
   updated.
- FEODO_IP list is empty and has been since 2024-08-23, when it was last updated.
- FEODO_AGGRESSIVE list still contains IP's but they were last updated on 2024-08-23.
- According to the Feodo Tracker web site these lists are updated every 5 minutes but
   not for nearly 8 weeks now.
- Contacted Spamhaus who, since 2022, are the primary licensee for Abuse.ch, who created
   the Feodo Tracker lists. No response at all from Spamhaus after one week, not even
   any acknowledgement response.
- This patch set removes these three lists from the sources file and an associated patch
   to the update.sh file removes references to these lists, if used, from the "modified"
   file and removes the "list_name.conf" files.
- This is the same process as used for the removal of the ALIENVAULT list earlier this
   year.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agonetpbm: Removal of netpbm config.mk
Adolf Belka [Mon, 14 Oct 2024 16:55:47 +0000 (18:55 +0200)] 
netpbm: Removal of netpbm config.mk

- netpbm addon was removed from IPFire in April 2022. This configuration file was
   missed at that time.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agolinux-firmware: ship needed config txt files.
Arne Fitzenreiter [Tue, 26 Nov 2024 11:02:50 +0000 (12:02 +0100)] 
linux-firmware: ship needed config txt files.

these files are parsed by the kernel at firmware load and are needed!
don't remove it again.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
8 months agokernel: update to 6.6.63
Arne Fitzenreiter [Mon, 25 Nov 2024 17:32:27 +0000 (18:32 +0100)] 
kernel: update to 6.6.63

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agokernel: rootfile update aarch64
Arne Fitzenreiter [Wed, 20 Nov 2024 14:51:39 +0000 (15:51 +0100)] 
kernel: rootfile update aarch64

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agokernel: rebase aarch64 patchset and add nanopi r2s plus oc devicetree
Arne Fitzenreiter [Wed, 20 Nov 2024 08:47:59 +0000 (09:47 +0100)] 
kernel: rebase aarch64 patchset and add nanopi r2s plus oc devicetree

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agotransmission: add minipnpc as dependency
Arne Fitzenreiter [Tue, 19 Nov 2024 19:32:47 +0000 (20:32 +0100)] 
transmission: add minipnpc as dependency

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agominiupnpc: change to addon pak
Arne Fitzenreiter [Tue, 19 Nov 2024 19:27:42 +0000 (20:27 +0100)] 
miniupnpc: change to addon pak

transmission need the lib at runtime.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agokernel: update to 6.6.62
Arne Fitzenreiter [Tue, 19 Nov 2024 18:19:28 +0000 (19:19 +0100)] 
kernel: update to 6.6.62

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agocollectd: fix errormessage on fresh installations
Arne Fitzenreiter [Sat, 9 Nov 2024 08:46:53 +0000 (09:46 +0100)] 
collectd: fix errormessage on fresh installations

the /etc/collectd.d/ folder must have at least one file in it
so this add an file with a comment that custom configs should placed
there.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agokernel: update to 6.6.60
Arne Fitzenreiter [Sat, 9 Nov 2024 08:46:24 +0000 (09:46 +0100)] 
kernel: update to 6.6.60

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agonetworking/red: remove leftover debugging messages.
Arne Fitzenreiter [Fri, 8 Nov 2024 17:49:52 +0000 (18:49 +0100)] 
networking/red: remove leftover debugging messages.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agohostapd: fix start/stop buttons
Arne Fitzenreiter [Wed, 6 Nov 2024 10:49:11 +0000 (11:49 +0100)] 
hostapd: fix start/stop buttons

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agonetwork-functions: fix add newline in $wireless_status
Arne Fitzenreiter [Tue, 5 Nov 2024 16:48:17 +0000 (17:48 +0100)] 
network-functions: fix add newline in $wireless_status

with the other syntax perl suggest this change.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agocore190: ship intel-microcode
Arne Fitzenreiter [Tue, 5 Nov 2024 13:34:35 +0000 (14:34 +0100)] 
core190: ship intel-microcode

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agointel-microcode: Update to version 20241029
Adolf Belka [Wed, 30 Oct 2024 13:28:38 +0000 (14:28 +0100)] 
intel-microcode: Update to version 20241029

- Update from version 20240910 to 20241029
- Update of rootfile not required
- Changelog
    20241029
Update for functional issues. Refer to 14th/13th Generation Intel® Core™
 Processor Specification Update for details at
 https://cdrdv2.intel.com/v1/dl/getContent/740518
Updated Platforms
 Processor   Stepping  F-M-S/PI     Old Ver   New Ver   Products
 RPL-E/HX/S  B0        06-b7-01/32  00000129  0000012b  Core Gen13/Gen14

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agosuricata: Explicitly ignore IPsec traffic unless enabled
Michael Tremer [Mon, 21 Oct 2024 17:03:06 +0000 (17:03 +0000)] 
suricata: Explicitly ignore IPsec traffic unless enabled

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agocore190: ship bind
Arne Fitzenreiter [Tue, 5 Nov 2024 08:19:23 +0000 (09:19 +0100)] 
core190: ship bind

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agobind: Update to 9.20.3
Matthias Fischer [Fri, 18 Oct 2024 16:46:18 +0000 (18:46 +0200)] 
bind: Update to 9.20.3

For details see:
https://downloads.isc.org/isc/bind9/9.20.3/doc/arm/html/notes.html#notes-for-bind-9-20-3

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agounbound: Update to 1.22.0
Matthias Fischer [Fri, 18 Oct 2024 16:37:22 +0000 (18:37 +0200)] 
unbound: Update to 1.22.0

For details see:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-22-0

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agocore190: ship unbound-dhcp-leases-bridge
Arne Fitzenreiter [Tue, 5 Nov 2024 08:13:56 +0000 (09:13 +0100)] 
core190: ship unbound-dhcp-leases-bridge

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agounbound-dhcp-leases-bridge: Fix expiry check on leases
Michael Tremer [Mon, 21 Oct 2024 16:38:49 +0000 (16:38 +0000)] 
unbound-dhcp-leases-bridge: Fix expiry check on leases

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agounbound-dhcp-leases-bridge: Don't overwrite static leases
Michael Tremer [Mon, 21 Oct 2024 16:38:48 +0000 (16:38 +0000)] 
unbound-dhcp-leases-bridge: Don't overwrite static leases

When we import all static leases, their remark will be used as hostname
(because WTF?) and might be overwritten if the device is not sending any
or even the same hostname.

This patch avoids that static leases will be modified.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agounbound-dhcp-leases-bridge: Fix typo
Michael Tremer [Mon, 21 Oct 2024 16:38:47 +0000 (16:38 +0000)] 
unbound-dhcp-leases-bridge: Fix typo

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agounbound-dhcp-leases-bridge: Don't export expired leases to Unbound
Michael Tremer [Mon, 21 Oct 2024 16:38:46 +0000 (16:38 +0000)] 
unbound-dhcp-leases-bridge: Don't export expired leases to Unbound

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agocore190: ship dhcp client changes
Arne Fitzenreiter [Tue, 5 Nov 2024 08:10:01 +0000 (09:10 +0100)] 
core190: ship dhcp client changes

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agonetworking: Allow changing DHCP Option Rapid Commit
Michael Tremer [Wed, 16 Oct 2024 10:47:17 +0000 (10:47 +0000)] 
networking: Allow changing DHCP Option Rapid Commit

This option needs to be configurable since some (braindead) ISPs have
started running broken DHCP servers to be bug-compatible with cheap
broken plastic routers.

By default we keep this option enabled, but it can now be turned off
whenever needed.

Suggested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agocore190: ship files with fixed chown syntax
Arne Fitzenreiter [Tue, 5 Nov 2024 07:57:59 +0000 (08:57 +0100)] 
core190: ship files with fixed chown syntax

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agochown: Replace . with : on all shipped scripts
Michael Tremer [Thu, 17 Oct 2024 14:54:16 +0000 (14:54 +0000)] 
chown: Replace . with : on all shipped scripts

I don't like this messy bootup screen that we have with all sorts of
warnings that actually don't cause any problems, but make the boot
messy and send the wrong message to users.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agocore190: ship network-hotplug-bridges
Arne Fitzenreiter [Tue, 5 Nov 2024 07:50:01 +0000 (08:50 +0100)] 
core190: ship network-hotplug-bridges

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agoudev: network-hotplug-bridges: Silence a warning when interfaces have gone away
Michael Tremer [Thu, 17 Oct 2024 14:54:15 +0000 (14:54 +0000)] 
udev: network-hotplug-bridges: Silence a warning when interfaces have gone away

It can happen that udev has an event for an interface in the queue that
has already gone away - or even just being renamed.

Then reading the MAC address fails. Because the shell expands the
"$(<...)" statement before running the whole line, the read check is
useless.

Because the code would get too complicated otherwise, I decided to use
cat. Not cool, but this does the job.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agowlanap.cgi: Use the correct array to fetch the current interface
Michael Tremer [Thu, 17 Oct 2024 14:54:14 +0000 (14:54 +0000)] 
wlanap.cgi: Use the correct array to fetch the current interface

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agohostapd: Enable logging to syslog
Michael Tremer [Thu, 17 Oct 2024 14:54:13 +0000 (14:54 +0000)] 
hostapd: Enable logging to syslog

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agokernel: update to 6.6.59
Arne Fitzenreiter [Mon, 4 Nov 2024 17:00:11 +0000 (18:00 +0100)] 
kernel: update to 6.6.59

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agogdb: rootfile update
Arne Fitzenreiter [Tue, 29 Oct 2024 12:03:16 +0000 (13:03 +0100)] 
gdb: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agoConfig: add ROOTFILE_APPEND variable to select rootfile
Arne Fitzenreiter [Sun, 27 Oct 2024 12:47:57 +0000 (13:47 +0100)] 
Config: add ROOTFILE_APPEND variable to select rootfile

also gcc on riscv64 has to different rootfile at build so make
the selection of an additional rootfile univarsal.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agokernel: fix riscv64 rootfile
Arne Fitzenreiter [Sun, 27 Oct 2024 08:48:23 +0000 (09:48 +0100)] 
kernel: fix riscv64 rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agokernel: update riscv64 config and rootfile
Arne Fitzenreiter [Sat, 26 Oct 2024 08:06:12 +0000 (10:06 +0200)] 
kernel: update riscv64 config and rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agogdb: update rootfile
Arne Fitzenreiter [Sat, 26 Oct 2024 08:01:08 +0000 (10:01 +0200)] 
gdb: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agoruby: make rootfile arch independend
Arne Fitzenreiter [Sat, 26 Oct 2024 07:54:31 +0000 (09:54 +0200)] 
ruby: make rootfile arch independend

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agogdb: update aarch64 rootfile
Arne Fitzenreiter [Thu, 24 Oct 2024 06:22:54 +0000 (08:22 +0200)] 
gdb: update aarch64 rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agokernel: update to 6.6.58
Arne Fitzenreiter [Thu, 24 Oct 2024 06:22:21 +0000 (08:22 +0200)] 
kernel: update to 6.6.58

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
9 months agocdrom: add serial console to uEFI menu
Arne Fitzenreiter [Thu, 24 Oct 2024 06:20:17 +0000 (08:20 +0200)] 
cdrom: add serial console to uEFI menu

this is only needed on systems that support both video out and serial
console to force serial.

9 months agoflash-images: move sleep 1 to a better place
Arne Fitzenreiter [Thu, 24 Oct 2024 06:18:07 +0000 (08:18 +0200)] 
flash-images: move sleep 1 to a better place

kpartx trigger the automount feature of some desktop environments
which result in a mounted filesystem if it was created to fast after
kpartx.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agoflash-images: add sleep 1 after umount the images
Arne Fitzenreiter [Wed, 16 Oct 2024 19:37:19 +0000 (21:37 +0200)] 
flash-images: add sleep 1 after umount the images

sometime zerofree will not able to write without this delay.
I have no idea why?

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agovdr: update to version 2.6.9
Arne Fitzenreiter [Wed, 16 Oct 2024 19:35:00 +0000 (21:35 +0200)] 
vdr: update to version 2.6.9

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agolfs/Config: fix used rootfile for linux headers
Arne Fitzenreiter [Wed, 16 Oct 2024 19:33:58 +0000 (21:33 +0200)] 
lfs/Config: fix used rootfile for linux headers

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agonmap: rootfile update
Arne Fitzenreiter [Wed, 16 Oct 2024 19:32:40 +0000 (21:32 +0200)] 
nmap: rootfile update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agofreeradius: update rootfile and increment PAK_VER
Arne Fitzenreiter [Wed, 16 Oct 2024 19:30:32 +0000 (21:30 +0200)] 
freeradius: update rootfile and increment PAK_VER

new package is needed because a lib was not shipped with v21

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agowhatmask: update rootfile
Arne Fitzenreiter [Wed, 16 Oct 2024 19:29:15 +0000 (21:29 +0200)] 
whatmask: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agopkg-config: update rootfile
Arne Fitzenreiter [Wed, 16 Oct 2024 19:28:27 +0000 (21:28 +0200)] 
pkg-config: update rootfile
:
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agoperl-MIME-Tools: update rootfile
Arne Fitzenreiter [Wed, 16 Oct 2024 19:27:34 +0000 (21:27 +0200)] 
perl-MIME-Tools: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agoperl-Archive-Zip: update rootfile
Arne Fitzenreiter [Wed, 16 Oct 2024 19:26:16 +0000 (21:26 +0200)] 
perl-Archive-Zip: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agoautoconf-archive: update rootfile
Arne Fitzenreiter [Wed, 16 Oct 2024 19:25:17 +0000 (21:25 +0200)] 
autoconf-archive: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agocmake: update rootfile
Arne Fitzenreiter [Wed, 16 Oct 2024 19:24:16 +0000 (21:24 +0200)] 
cmake: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agomake.sh: Check for changes in logs
Michael Tremer [Wed, 16 Oct 2024 16:40:50 +0000 (16:40 +0000)] 
make.sh: Check for changes in logs

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agodhcpcd: Update to version 10.1.0
Adolf Belka [Tue, 15 Oct 2024 07:35:22 +0000 (09:35 +0200)] 
dhcpcd: Update to version 10.1.0

- Update from version 10.0.10 to 10.1.0
- Update of rootfile not required
- Changelog
    10.1.0
Bug Fixes
dhcp: get_option_uint32/16 only accept options with correct len by
 @taoyl-g in #357
Include frame header in buffer length by @acst1223 in #371
For full changelog see commits delta in
 https://github.com/NetworkConfiguration/dhcpcd/compare/v10.0.10...v10.1.0

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agosquid: Update to 6.12
Matthias Fischer [Sat, 12 Oct 2024 15:48:43 +0000 (17:48 +0200)] 
squid: Update to 6.12

For details see:
https://github.com/squid-cache/squid/commits/v6

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agomonit: Update to 5.34.2
Matthias Fischer [Sat, 12 Oct 2024 15:46:12 +0000 (17:46 +0200)] 
monit: Update to 5.34.2

For details see:
https://mmonit.com/monit/changes/

"Fixed: The network protocol test may occasionally fail with a
"Poll failed: Interrupted system call" error."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agomake.sh: Avoid finding non-existant rootfiles
Michael Tremer [Mon, 14 Oct 2024 09:02:37 +0000 (09:02 +0000)] 
make.sh: Avoid finding non-existant rootfiles

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agokernel: Enable IO uring
Michael Tremer [Mon, 14 Oct 2024 09:00:21 +0000 (09:00 +0000)] 
kernel: Enable IO uring

This is a feature more and more tools start using now and will help to
keep performance of the OS up.

This was enabled on riscv64 already.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agotshark: Update to version 4.4.1
Adolf Belka [Thu, 10 Oct 2024 16:01:11 +0000 (18:01 +0200)] 
tshark: Update to version 4.4.1

- Update from version 4.2.7 to 4.4.1
- The 4.4.x series is the new Stable Release replascing the 4.2.x series which becomes
   the Old Stable Release.
- There is an sobump so find-dependencies was run for the three libraries with changes
   but all linked programs are within tshark.
- Changelog is too large to include here. Links provided
    4.4.1
https://www.wireshark.org/docs/relnotes/wireshark-4.4.1.html
    4.4.0
https://www.wireshark.org/docs/relnotes/wireshark-4.4.0.html

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agomake.sh: Show rootfiles that contain some architecture
Michael Tremer [Sat, 12 Oct 2024 09:34:45 +0000 (09:34 +0000)] 
make.sh: Show rootfiles that contain some architecture

Previously, make.sh just failed but did not explain why it was unhappy.

This patch adds a message which rootfiles contain which architecture.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agomympd: update to 18.0.0
Arne Fitzenreiter [Fri, 11 Oct 2024 11:30:13 +0000 (13:30 +0200)] 
mympd: update to 18.0.0

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agokernel: update to 6.6.56
Arne Fitzenreiter [Fri, 11 Oct 2024 11:17:53 +0000 (13:17 +0200)] 
kernel: update to 6.6.56

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agortl8812au: add missing rootfile.
Arne Fitzenreiter [Fri, 11 Oct 2024 11:12:17 +0000 (13:12 +0200)] 
rtl8812au: add missing rootfile.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
10 months agomonit: Update to 5.34.1
Matthias Fischer [Wed, 9 Oct 2024 12:42:00 +0000 (14:42 +0200)] 
monit: Update to 5.34.1

For details see:
https://mmonit.com/monit/changes/

"Fixed: The check program now avoids leaving zombie processes between cycles."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agolcdproc: removal as discussed in Conf call 7th Oct
Adolf Belka [Tue, 8 Oct 2024 21:34:26 +0000 (23:34 +0200)] 
lcdproc: removal as discussed in Conf call 7th Oct

- removal of lfs, rootfile and config files
- backup includes file is also removed, althouigh it was an empty file, so not backing
   anything up.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agompfire: removal as discussed in Conf call 7th Oct
Adolf Belka [Tue, 8 Oct 2024 16:45:59 +0000 (18:45 +0200)] 
mpfire: removal as discussed in Conf call 7th Oct

- removal of lfs, rootfile, backup, paks, misc-progs, mpfire perl, language file
   content, mpfire.cgi, mpfire menu references and files, mpfire specific image,
   web-user-interface references and references in manualpages.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agocore190: Ship ppp
Michael Tremer [Wed, 9 Oct 2024 18:25:33 +0000 (18:25 +0000)] 
core190: Ship ppp

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agoppp: Update to version 2.5.1
Adolf Belka [Tue, 8 Oct 2024 12:24:24 +0000 (14:24 +0200)] 
ppp: Update to version 2.5.1

- Update from version commit e1266c7 to 2.5.1
- Version 2.5.1 has around 34 additional commits from e1266c7. To me all look minor
   changes, some related to other system types such as Solaris that we don't use.
- Update of rootfile
- They have added example to the configuration files to prevent accidental overwriting
   of configuration systems.
- Changelog - There is no longer any changelog provided. Even the one that used to
   exist for version 2.5.0 has been removed. The only option now is to look through the
   commits - https://github.com/ppp-project/ppp/commits/master/?before=d5aeec65752d4a9b3bb46771d0b221c4a4a6539e+35
- Some of the patches had to be updated as the changes were enough that some hunks did
   not get found for patching. Patch file number 6 has been removed as the sed lines are
   no longer to be found in the configure file. The other files that patched successfully
   were renamed to 2.5.1

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agoMerge branch 'master' into next
Michael Tremer [Tue, 8 Oct 2024 08:48:14 +0000 (08:48 +0000)] 
Merge branch 'master' into next

10 months agohostapd: update to git 64d60bb4
Arne Fitzenreiter [Sun, 29 Sep 2024 16:03:58 +0000 (18:03 +0200)] 
hostapd: update to git 64d60bb4

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agowlanap.cgi: Fix copying configuration
Michael Tremer [Fri, 20 Sep 2024 12:12:07 +0000 (14:12 +0200)] 
wlanap.cgi: Fix copying configuration

This allows to uncheck checkboxes again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agowlanap.cgi: Change broadcast SSID to hide SSID
Michael Tremer [Fri, 20 Sep 2024 11:55:40 +0000 (13:55 +0200)] 
wlanap.cgi: Change broadcast SSID to hide SSID

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agowlanap.cgi: Default to channel 0 for ACS
Michael Tremer [Fri, 20 Sep 2024 11:19:10 +0000 (13:19 +0200)] 
wlanap.cgi: Default to channel 0 for ACS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agowlanap.cgi: Enable Neighbourhood Scan by default
Michael Tremer [Fri, 20 Sep 2024 11:17:59 +0000 (13:17 +0200)] 
wlanap.cgi: Enable Neighbourhood Scan by default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agowlanap.cgi: Don't try to show status if there is no interface
Michael Tremer [Fri, 20 Sep 2024 11:16:44 +0000 (13:16 +0200)] 
wlanap.cgi: Don't try to show status if there is no interface

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agowlanap.cgi: Correctly show broadcast SSID status
Michael Tremer [Fri, 20 Sep 2024 11:13:41 +0000 (13:13 +0200)] 
wlanap.cgi: Correctly show broadcast SSID status

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agowlanap.cgi: Disable generating Perl warnings
Michael Tremer [Fri, 20 Sep 2024 10:30:03 +0000 (11:30 +0100)] 
wlanap.cgi: Disable generating Perl warnings

Reported-by: Waynie <waynet@ucpix.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agocore189: Ship rules.pl
Michael Tremer [Tue, 8 Oct 2024 08:43:39 +0000 (08:43 +0000)] 
core189: Ship rules.pl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agofirewall: Flush SYN_FLOOD_PROTECTION
Michael Tremer [Mon, 7 Oct 2024 09:13:12 +0000 (09:13 +0000)] 
firewall: Flush SYN_FLOOD_PROTECTION

This chain was not flushed when the firewall was being reloaded which
made any ports appear as open when rules have been disabled or deleted.

This has no security implications, but nevertheless isn't right.

Reported-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agocore190: Ship ncat again (just to be sure)
Michael Tremer [Mon, 7 Oct 2024 10:24:09 +0000 (10:24 +0000)] 
core190: Ship ncat again (just to be sure)

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agoMerge branch 'master' into next
Michael Tremer [Mon, 7 Oct 2024 10:23:22 +0000 (10:23 +0000)] 
Merge branch 'master' into next

10 months agocore189: Ship ncat
Michael Tremer [Mon, 7 Oct 2024 10:22:33 +0000 (10:22 +0000)] 
core189: Ship ncat

This is required for the new Unbound/DHCP Leases bridge to work.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agoncat: Make this package part of the core system
Michael Tremer [Mon, 7 Oct 2024 10:18:57 +0000 (10:18 +0000)] 
ncat: Make this package part of the core system

The nc command is required for the Unbound/DHCP leases bridge.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
10 months agocore190: Ship Unbound again
Michael Tremer [Mon, 7 Oct 2024 09:15:40 +0000 (09:15 +0000)] 
core190: Ship Unbound again

This was a late addition to c189

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>