]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/log
people/pmueller/ipfire-2.x.git
2 years agocore158: Ship backup.pl script
Michael Tremer [Tue, 25 May 2021 09:44:20 +0000 (09:44 +0000)] 
core158: Ship backup.pl script

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agobackup.pl: Fix #12626 backup/include.user entries will not override backup/exclude
Adolf Belka [Fri, 21 May 2021 12:22:50 +0000 (14:22 +0200)] 
backup.pl: Fix #12626 backup/include.user entries will not override backup/exclude

- Current situation is that any restrictions in the exclude file will not
   be overwritten by the include.user file
- For example the global exclude file has *.tmp preventing any tmp files
   being backed up from the globally included IPFire files
   If a user has some specific tmp files they want to backup and include
   them in the include.user file they will not override the global
   exclude file.
- This fix does the backup of the global and user backups as two separate
   events and then appends them. This means that any tmp files in the
   include.user file will be backed up.
- The backups are created as a global tar file and then have the user
   tar file appended and then the combined file gzipped and given the .ipf
   suffix. This has to be done this was as gzipped files can not be
   appended to each other whereas tar files can.

Fixes: 12626
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore158: Ship ca-certificates
Michael Tremer [Fri, 21 May 2021 08:53:16 +0000 (08:53 +0000)] 
core158: Ship ca-certificates

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoupdate ca-certificates CA bundle
Peter Müller [Thu, 20 May 2021 22:06:14 +0000 (00:06 +0200)] 
update ca-certificates CA bundle

Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoClean up various files left from dropped add-ons and packages
Peter Müller [Thu, 20 May 2021 21:25:05 +0000 (23:25 +0200)] 
Clean up various files left from dropped add-ons and packages

Since I only ran "find . -type f -name ...", I missed mostly directories
containing configuration and initscripts of recently dropped add-ons and
packages.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython-pyparsing: Update to 2.4.7 and migrate to python3
Adolf Belka [Sun, 16 May 2021 11:46:20 +0000 (13:46 +0200)] 
python-pyparsing: Update to 2.4.7 and migrate to python3

- Update from 2.2.0 to 2.4.7
- Migrate from python2 to python3
- Move the rootfile from common to packages as pyparsing is an addon

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoelinks: Bump package version
Michael Tremer [Thu, 20 May 2021 10:02:43 +0000 (10:02 +0000)] 
elinks: Bump package version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoconfig/elinks/elinks.conf does not have to be executable
Peter Müller [Tue, 18 May 2021 19:50:47 +0000 (21:50 +0200)] 
config/elinks/elinks.conf does not have to be executable

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython3-setuptools: Create a python3 version of python-setuptools
Adolf Belka [Sun, 16 May 2021 17:25:49 +0000 (19:25 +0200)] 
python3-setuptools: Create a python3 version of python-setuptools

- python3-setuptools works with python3-daemon but not with
   python-m2crypto. m2crypto has to stay with python2 because crda
   will not find the python3 version of m2crypto.
- python-m2crypto only works with python-setuptools so both the
   python2 and python3 versions of setuptools need to stay in place.
- Therefore this patch only creates python3-setuptools, it does not
   remove python-setuptools

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore158: Ship ethtool
Michael Tremer [Thu, 20 May 2021 09:47:57 +0000 (09:47 +0000)] 
core158: Ship ethtool

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoethtool: Update to 5.12
Adolf Belka [Mon, 17 May 2021 15:10:38 +0000 (17:10 +0200)] 
ethtool: Update to 5.12

- Update from 3.16 (2014) to 5.12 (2021)
- Update of rootfile
- Changelog is too large to include here. Changelog details are available
   at https://git.kernel.org/pub/scm/network/ethtool/ethtool.git/log/

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore158: Ship qpdf
Michael Tremer [Thu, 20 May 2021 09:47:26 +0000 (09:47 +0000)] 
core158: Ship qpdf

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoqpdf: Update to 10.3.2
Adolf Belka [Mon, 17 May 2021 12:31:22 +0000 (14:31 +0200)] 
qpdf: Update to 10.3.2

- Update from 10.3.0 to 10.3.2
- Update rootfiles
- Changelog
   * 10.3.2: release
     * Fix problem that caused the generated manual from being included
       in the Windows distributions. Fixes #521.
     * Fix 11-year-old bug of leaving unreferenced objects in preserved
       object streams. Fixes #520.
     * Portability fix: use tm_gmtoff rather than global timezone
       variable if available to get timezone offset. This fixes
       compilation on BSD and also results in a daylight saving
       time-aware offset for Linux or other GNU systems. Fixes #515.
     * When adding a page, if the page already exists, make a shallow
       copy of the page instead of throwing an exception. This makes the
       behavior of adding a page from the library consistent with what
       the CLI does and also with what the library does if it starts with
       a file that already has a duplicated page. Note that this means
       that, in some cases, the page you pass to addPage or addPageAt
       (either in QPDF or QPDFPageDocumentHelper) will not be the same
       object that actually gets added. (This has actually always been
       the case.) That means that, if you are going to do subsequent
       modification on the page, you should retrieve it again.
   * 10.3.1: release
     * Bug fix: allow /DR to be direct in /AcroForm

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore158: Ship perl-CGI
Michael Tremer [Thu, 20 May 2021 09:47:00 +0000 (09:47 +0000)] 
core158: Ship perl-CGI

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoperl-CGI: Update to 4.52
Adolf Belka [Mon, 17 May 2021 12:31:06 +0000 (14:31 +0200)] 
perl-CGI: Update to 4.52

- Update from 4.44 to 4.52
- Update of rootfile not needed
- Changelog
   4.52 2021-05-04
     [ FIX ]
     - sort hash keys for deterministic behaviour (GH #245, GH #246)
   4.51 2020-10-01
     [ DOCUMENTATION ]
     - Document support for SameSite=None cookies in CGI::Cookie (GH #244)
   4.50 2020-06-22
     [ ENHANCEMENT ]
     - Add APPEND_QUERY_STRING option (GH #243, thanks to stevenh)
   4.49 2020-06-08
     [ FIX ]
     - remove deprecation warning as no longer in core (GH #221)
   4.48 2020-06-02
     [ FIX ]
     - fix CGI::Cookie->bake() doesn't work with mod_perl redirects (GH #240)
     - thanks to sherrardb for the PR (GH #241)
   4.47 2020-05-01
     [ FIX / TESTING ]
     - fix typo in variable name (GH #239)
   4.46 2020-02-03
     [ DOCUMENTATION ]
     - Document support for SameSite=None cookies (GH #238)
   4.45 2019-06-03
     [ ENHANCEMENT ]
     - Add support for SameSite=None cookies (GH #237, thanks to Dur09)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore158: Ship glib
Michael Tremer [Thu, 20 May 2021 09:46:36 +0000 (09:46 +0000)] 
core158: Ship glib

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoglib: Update to 2.68.2
Adolf Belka [Mon, 17 May 2021 12:30:48 +0000 (14:30 +0200)] 
glib: Update to 2.68.2

- Update from 2.68.1 to 2.68.2
- Update rootfiles
- Changelog
   Overview of changes in GLib 2.68.2
    * Fix building third-party projects against GLib on CentOS 7 (work by
      Ignacio Casal Quinteiro) (#2387)
    * Bugs fixed:
      - #2387 json-glib does not build with glib 2.68.1
      - !2060 gmacros: check that __cplusplus or _MSC_VER is defined
      - !2068 gmacros: missing check if __STDC_VERSION__ is defined
      - !2079 Backport !2078 “gthreadedresolver: don't ignore flags in lookup_by_name_with_flags” to glib-2-68
    * Translation updates:
      - Nepali
      - Serbian

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoflac: Update to 1.3.3
Adolf Belka [Mon, 17 May 2021 12:30:12 +0000 (14:30 +0200)] 
flac: Update to 1.3.3

- Update from 1.3.2 to 1.3.3
- Update rootfiles
- Changelog
    General:
        Fix CPU detection (Janne Hyvärinen).
        Switch from unsigned types to uint32_t (erikd).
        CppCheck fixes (erikd).
        Improve SIMD decoding of 24 bit files (lvqcl).
        POWER* amnd POWER9 improvements (Anton Blanchard).
        More tests.
    FLAC format:
        (none)
    Ogg FLAC format:
        (none)
    flac:
        When converting to WAV, use WAVEFORMATEXTENSIBLE when bits per
         second is not 8 or 16 (erikd).
        Fix --output-prefix with input-files in sub-directories (orbea).
    metaflac:
        (none)
    plugins:
        (none)
    build system:
        Cmake support (Vitaliy Kirsanov, evpobr).
        Visual Studio updates (Janne Hyvärinen).
        Fix for MSVC when UNICODE is enabled (lvqcl).
        Fix for OpenBSD/i386 (Christian Weisgerber).
    documentation:
        (none)
    libraries:
        (none).
    Interface changes:
        libFLAC:
            (none)
        libFLAC++:
            (none)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore158: Ship dhcp.cgi
Michael Tremer [Thu, 20 May 2021 09:45:43 +0000 (09:45 +0000)] 
core158: Ship dhcp.cgi

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agodhcp.cgi: Bug 10400 - Add Additional DHCP Options - change default
Adolf Belka [Wed, 19 May 2021 14:52:13 +0000 (16:52 +0200)] 
dhcp.cgi: Bug 10400 - Add Additional DHCP Options - change default

- Make the default that Additional DHCP options Enabled checkbox is
   checked when entering a new option.
- For existing options the Enabled checkbox status is honoured.

Fixes: #10400
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDelete UPnP initscript for ARM64 as well
Peter Müller [Tue, 18 May 2021 21:34:49 +0000 (23:34 +0200)] 
Delete UPnP initscript for ARM64 as well

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agompd: build without UPnP support
Peter Müller [Tue, 18 May 2021 21:34:32 +0000 (23:34 +0200)] 
mpd: build without UPnP support

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore158: Ship updated firewall initscript
Michael Tremer [Thu, 20 May 2021 09:44:56 +0000 (09:44 +0000)] 
core158: Ship updated firewall initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore158: Drop upnpd initscript
Michael Tremer [Thu, 20 May 2021 09:43:30 +0000 (09:43 +0000)] 
core158: Drop upnpd initscript

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDelete the remainings of libupnp and upnpd
Peter Müller [Tue, 18 May 2021 21:34:14 +0000 (23:34 +0200)] 
Delete the remainings of libupnp and upnpd

These include rootfiles, firewall menue entries that have been
unmaintained for a long time, and firewall chains which were never used
in recent time.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore158: Uninstall libupnp
Michael Tremer [Thu, 20 May 2021 09:41:39 +0000 (09:41 +0000)] 
core158: Uninstall libupnp

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop libupnp
Peter Müller [Tue, 18 May 2021 21:33:43 +0000 (23:33 +0200)] 
Drop libupnp

This library has received no attention within the last three years. By
design, UPnP is a security risk on any firewall, and and outdated
version of a UPnP library definitely is.

This patch therefore drops libupnp completely.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agointltool: Move into the core system and don't ship any more
Michael Tremer [Thu, 20 May 2021 09:39:12 +0000 (09:39 +0000)] 
intltool: Move into the core system and don't ship any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop miniupnpd stuff from rootfiles and all systems
Michael Tremer [Thu, 20 May 2021 09:38:02 +0000 (09:38 +0000)] 
Drop miniupnpd stuff from rootfiles and all systems

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agominiupnpd: Delete files that would have become orphaned after deletion of miniupnpd...
Peter Müller [Tue, 18 May 2021 19:58:27 +0000 (21:58 +0200)] 
miniupnpd: Delete files that would have become orphaned after deletion of miniupnpd add-on as well

This patch requires
https://patchwork.ipfire.org/project/ipfire/list/?series=2059 to be
applied in the first place.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Do no longer build fbset and sendEmail
Peter Müller [Mon, 17 May 2021 21:59:12 +0000 (23:59 +0200)] 
make.sh: Do no longer build fbset and sendEmail

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop sendEmail add-on
Peter Müller [Mon, 17 May 2021 21:58:54 +0000 (23:58 +0200)] 
Drop sendEmail add-on

As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop fbset
Peter Müller [Mon, 17 May 2021 21:58:35 +0000 (23:58 +0200)] 
Drop fbset

As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Please note this patch does not remove fbset on existing installations,
that has to be done via the corresponding upgrade script.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop miniupnpd add-on
Peter Müller [Mon, 17 May 2021 21:58:18 +0000 (23:58 +0200)] 
Drop miniupnpd add-on

As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Frankly, if you need or use UPnP, you probably do not even need to _think_
about running a firewall...

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop SANE add-on
Peter Müller [Mon, 17 May 2021 21:57:37 +0000 (23:57 +0200)] 
Drop SANE add-on

As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoZut alors, delete motion initiscript as well :-/
Peter Müller [Mon, 17 May 2021 21:57:18 +0000 (23:57 +0200)] 
Zut alors, delete motion initiscript as well :-/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop orphaned dependency "libsrtp"
Peter Müller [Mon, 17 May 2021 21:56:50 +0000 (23:56 +0200)] 
Drop orphaned dependency "libsrtp"

This was solely needed by Asterisk and is no longer used anymore.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop Asterisk add-on
Peter Müller [Mon, 17 May 2021 21:56:30 +0000 (23:56 +0200)] 
Drop Asterisk add-on

As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop orphaned dependency add-on libmicrohttpd
Peter Müller [Mon, 17 May 2021 21:56:09 +0000 (23:56 +0200)] 
Drop orphaned dependency add-on libmicrohttpd

This was solely needed by "motion". It can be safely removed now.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDrop motion add-on
Peter Müller [Mon, 17 May 2021 21:55:46 +0000 (23:55 +0200)] 
Drop motion add-on

As discussed in https://wiki.ipfire.org/devel/telco/2021-05-03.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agosarg: Update to 2.4.0
Adolf Belka [Tue, 18 May 2021 16:58:31 +0000 (18:58 +0200)] 
sarg: Update to 2.4.0

- Update from 2.3.11 to 2.4.0
- Update of rootfile not required
- Update of patches as the source code is different enough that the
   patches failed to work.
- Changelog has information on changes for version 2.4.0. Prior version
   information is for 2.3.3 from 2012. All intervening versions have no
   changelog information available.
   Version 2.4.0
    - Update translations.
    - Useragent report is produced if information is available.
    - Don't abort if DNS resolution is failing to resolve a host IP address.
    - xz compressed log files are supported.
    - Compressed redirector logs are now supported.
    - Filter converted and split logs using -t command line option.
    - Add many new buffer overflow checks.
    - Use random temporary directory name by default.
    - Many bug fixed.
    - Many new features added.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore158: Ship IPsec changes for iOS
Michael Tremer [Thu, 20 May 2021 09:28:21 +0000 (09:28 +0000)] 
core158: Ship IPsec changes for iOS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoRevert "IPsec: Ensure that iOS VPNs are always connected"
Michael Tremer [Thu, 20 May 2021 09:26:13 +0000 (09:26 +0000)] 
Revert "IPsec: Ensure that iOS VPNs are always connected"

This reverts commit 8ce6222a1002a669cb511ba75b9e4e57810a4432.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoMerge remote-tracking branch 'ms/ipsec-ios' into next
Michael Tremer [Thu, 20 May 2021 09:25:05 +0000 (09:25 +0000)] 
Merge remote-tracking branch 'ms/ipsec-ios' into next

2 years agofireinfo: Update to 2.2.0
Michael Tremer [Tue, 18 May 2021 13:52:11 +0000 (13:52 +0000)] 
fireinfo: Update to 2.2.0

This release ports fireinfo to Python 3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoStart Core Update 158
Michael Tremer [Tue, 18 May 2021 13:34:15 +0000 (13:34 +0000)] 
Start Core Update 158

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoFix merge error in samba rootfiles
Michael Tremer [Tue, 18 May 2021 12:51:59 +0000 (12:51 +0000)] 
Fix merge error in samba rootfiles

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoUpdate contributors
Michael Tremer [Tue, 18 May 2021 09:33:47 +0000 (09:33 +0000)] 
Update contributors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoUpdate language errors
Michael Tremer [Tue, 18 May 2021 09:33:32 +0000 (09:33 +0000)] 
Update language errors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoMerge branch 'next'
Michael Tremer [Tue, 18 May 2021 09:33:05 +0000 (09:33 +0000)] 
Merge branch 'next'

2 years agoelfutils: Update to 0.184
Adolf Belka [Mon, 17 May 2021 12:29:44 +0000 (14:29 +0200)] 
elfutils: Update to 0.184

- Update from 0.183 to 0.184
- Update rootfiles
- Changelog
     2021-05-10  Mark Wielaard  <mark@klomp.org>
* configure.ac (AC_INIT): Set version to 0.184.
* NEWS: Add libdw, translation and debuginfod-client entries.
     2021-03-30  Frank Ch. Eigler  <fche@redhat.com>
* configure.ac: Look for pthread_setname_np.
     2021-02-17  Timm Bäder  <tbaeder@redhat.com>
* configure.ac: Add -Wno-packed-not-aligned check.
     2021-02-17  Timm Bäder  <tbaeder@redhat.com>
* configure.ac: Add -Wtrampolines check.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agogdb: Update to 10.2
Adolf Belka [Mon, 17 May 2021 12:30:32 +0000 (14:30 +0200)] 
gdb: Update to 10.2

- Update from 10.1 to 10.2
- Update rootfiles
- Changelog
   GDB 10.2 brings the following fixes and enhancements over GDB 10.1:
    * PR remote/26614 (AddressSanitizer: heap-use-after-free of extended_remote_target in remote_async_inferior_event_handler)
    * PR gdb/26828 (SIGSEGV in follow_die_offset dwarf2/read.c:22950)
    * PR gdb/26861 (internal-error: void target_mourn_inferior(ptid_t): Assertion `ptid == inferior_ptid' failed. OS: Mac OSX Catalina; Compiler: GCC; Language: C)
    * PR gdb/26876 (gdb error: internal-error: Unknown CFA rule when debugging the linux kernel with qemu)
    * PR breakpoints/26881 (infrun.c:6384: internal-error: void process_event_stop_test(execution_control_state*): Assertion `ecs->event_thread->control.exception_resume_breakpoint != NULL' failed)
    * PR gdb/26901 (Array subscript fails with flexible array member without size)
    * PR tui/26973 (gdb crashes when not including the status window in a new layout)
    * PR python/26974 (Wrong Value.format_string docu for static members argument)
    * PR breakpoints/27009 ([s390] GDB branches randomly for BC instruction while displaced stepping)
    * PR tdep/27015 (ARC: "eret" value is collected from the wrong data in register cache)
    * PR backtrace/27147 ([GNU/Linux, sparc64] GDB is unable to print full stack trace (got "previous frame inner to this frame" errors))
    * PR rust/27194 (put rust demangler on 10.x branch)
    * PR threads/27239 (gdb/cp-support.c:1619:(.text+0x5502): relocation truncated to fit: R_X86_64_PC32 against undefined symbol `TLS init function for thread_local_segv_handler')
    * PR breakpoints/27330 (nextoverthrow.exp FAILs on arm-none-eabi)
    * PR symtab/27333 ([dwarf-5] abort on unhandled DW_TAG_type_unit in process_psymtab_comp_unit)
    * PR fortran/27341 ([dwarf-5] FAIL: gdb.fortran/function-calls.exp: p derived_types_and_module_calls::pass_cart_nd(c_nd))
    * PR tdep/27369 (ARC: Stepping over atomic instruction sequences loops infinitely)
    * PR build/27385 (Cannot compile arc.c with gcc-4.8 (error: no matching function for call to 'std::pair...'))
    * PR gdb/27435 (Attach on solaris segfaults GDB)
    * PR build/27535 (amd64-linux-siginfo.c fails to compile after updating to glibc-2.33 headers)
    * PR build/27536 (aarch64-linux-hw-point.c fails to compile after updating to glibc-2.33)
    * PR symtab/27541 (gdb crashes on "file -readnow")
    * PR gdb/27750 (local variables have wrong address and values on sparc64)
    * PR varobj/27757 (-var-list-children coredump)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCore Update 157: Apply changed permissions to /srv/web/ipfire/cgi-bin/cachemgr.cgi
Peter Müller [Mon, 17 May 2021 19:07:52 +0000 (21:07 +0200)] 
Core Update 157: Apply changed permissions to /srv/web/ipfire/cgi-bin/cachemgr.cgi

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoSquid: cachemgr.cgi does not have to be owned (hence writeable) by nobody
Peter Müller [Mon, 17 May 2021 19:07:32 +0000 (21:07 +0200)] 
Squid: cachemgr.cgi does not have to be owned (hence writeable) by nobody

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agonagios-plugins: Prevent Nagios plugins from being owned by nobody
Peter Müller [Mon, 17 May 2021 19:07:11 +0000 (21:07 +0200)] 
nagios-plugins: Prevent Nagios plugins from being owned by nobody

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoNRPE: Prevent NRPE binary from being owned by "nobody"
Peter Müller [Mon, 17 May 2021 19:06:50 +0000 (21:06 +0200)] 
NRPE: Prevent NRPE binary from being owned by "nobody"

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCore Update 157: Remove executable bit less ugly
Peter Müller [Mon, 17 May 2021 19:06:32 +0000 (21:06 +0200)] 
Core Update 157: Remove executable bit less ugly

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCore Update 157: Apply changed permissions to /var/ipfire/ovpn/ovpn-leases.db
Peter Müller [Mon, 17 May 2021 19:06:12 +0000 (21:06 +0200)] 
Core Update 157: Apply changed permissions to /var/ipfire/ovpn/ovpn-leases.db

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoOpenVPN: ovpn-leases.db for sure does not have to be executable
Peter Müller [Mon, 17 May 2021 19:05:49 +0000 (21:05 +0200)] 
OpenVPN: ovpn-leases.db for sure does not have to be executable

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCore Update 157: Apply changed permissions to /var/ipfire/updatexlrator/bin/
Peter Müller [Mon, 17 May 2021 19:05:26 +0000 (21:05 +0200)] 
Core Update 157: Apply changed permissions to /var/ipfire/updatexlrator/bin/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoSquid: Prevent binaries within /var/ipfire/updatexlrator/bin/ from being owned by...
Peter Müller [Mon, 17 May 2021 19:05:07 +0000 (21:05 +0200)] 
Squid: Prevent binaries within /var/ipfire/updatexlrator/bin/ from being owned by nobody

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCore Update 157: Apply changed permissions to /var/ipfire/urlfilter/bin/
Peter Müller [Mon, 17 May 2021 19:04:41 +0000 (21:04 +0200)] 
Core Update 157: Apply changed permissions to /var/ipfire/urlfilter/bin/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoSquidGuard: Prevent binaries within /var/ipfire/urlfilter/bin/ from being owned by...
Peter Müller [Mon, 17 May 2021 19:04:23 +0000 (21:04 +0200)] 
SquidGuard: Prevent binaries within /var/ipfire/urlfilter/bin/ from being owned by nobody

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agobackup: prevent /var/ipfire/backup/bin/backup.pl from being owned by nobody
Peter Müller [Mon, 17 May 2021 19:04:00 +0000 (21:04 +0200)] 
backup: prevent /var/ipfire/backup/bin/backup.pl from being owned by nobody

This is dangerous as nobody could write arbitrary contents to this file
and execute it afterwards.

Partially fixes: #12619

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCore Update 157: Ship changed iputils due to /usr/bin/ping changes
Peter Müller [Mon, 17 May 2021 19:03:36 +0000 (21:03 +0200)] 
Core Update 157: Ship changed iputils due to /usr/bin/ping changes

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCore Update 157: /var/ipfire/fwhosts/icmp-types does not have to be executable
Peter Müller [Mon, 17 May 2021 19:03:13 +0000 (21:03 +0200)] 
Core Update 157: /var/ipfire/fwhosts/icmp-types does not have to be executable

See commit 183ccaa5a5c95f4cb2b639360f3c1465567577e9.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCore Update 157: Delete orphaned DMA mail box creation binary as well
Peter Müller [Mon, 17 May 2021 19:02:56 +0000 (21:02 +0200)] 
Core Update 157: Delete orphaned DMA mail box creation binary as well

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoDMA: do not ship a binary for creating mail boxes
Peter Müller [Mon, 17 May 2021 19:02:36 +0000 (21:02 +0200)] 
DMA: do not ship a binary for creating mail boxes

This is only needed in case of bounces generated by locally emitted
messages. We neither store these, nor do we create mail boxes on a
firewall. Safe to drop.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCore Update 157: Delete ssh-keysign binary
Peter Müller [Mon, 17 May 2021 19:02:20 +0000 (21:02 +0200)] 
Core Update 157: Delete ssh-keysign binary

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years ago/usr/bin/ping does not need a SUID bit if appropriate capabilities are set
Peter Müller [Mon, 17 May 2021 19:01:54 +0000 (21:01 +0200)] 
/usr/bin/ping does not need a SUID bit if appropriate capabilities are set

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoCore Update 157: remove SUID bit from /usr/bin/gpg
Peter Müller [Mon, 17 May 2021 19:01:34 +0000 (21:01 +0200)] 
Core Update 157: remove SUID bit from /usr/bin/gpg

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoGnuPG does not need to have a SUID bit set
Peter Müller [Mon, 17 May 2021 19:00:33 +0000 (21:00 +0200)] 
GnuPG does not need to have a SUID bit set

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agounbound-dhcp-leases-bridge: Fix exception when running without debug
Michael Tremer [Mon, 17 May 2021 15:33:13 +0000 (15:33 +0000)] 
unbound-dhcp-leases-bridge: Fix exception when running without debug

Fixes: https://bugzilla.ipfire.org/show_bug.cgi?id=12622
Fixes: #12622
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoOpenSSH: do not ship ssh-keysign anymore
Peter Müller [Sun, 16 May 2021 20:48:58 +0000 (22:48 +0200)] 
OpenSSH: do not ship ssh-keysign anymore

To my surprise, this binary comes with suid flag set, and since we do
not have SSH key signing enabled, there is no need to ship it with
IPFire.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython3-docutils: Bump package version
Michael Tremer [Sun, 16 May 2021 13:23:37 +0000 (13:23 +0000)] 
python3-docutils: Bump package version

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython-docutils: drop python2 docutils
Arne Fitzenreiter [Sun, 16 May 2021 13:18:07 +0000 (15:18 +0200)] 
python-docutils: drop python2 docutils

we merging from python2 to 3 and this is not needed anymore

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython3-docutils: build prior python3-daemon
Arne Fitzenreiter [Sun, 16 May 2021 13:18:06 +0000 (15:18 +0200)] 
python3-docutils: build prior python3-daemon

python3-daemon has a builddepency to python3-docutils

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython-distutils-extra: Removal of this python2 module
Adolf Belka [Sat, 15 May 2021 21:50:34 +0000 (23:50 +0200)] 
python-distutils-extra: Removal of this python2 module

- python-distutils-extra is linked to python-distutils which is no longer
   used as it has been replaced by setuptools.
- python-distutils-extra is currently from 2011 and the latest version
   is from 2016. No development occurring on this.
- No problem on a clean build with this module being removed.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython-distutils: Removal of this python2 module
Adolf Belka [Sat, 15 May 2021 21:50:33 +0000 (23:50 +0200)] 
python-distutils: Removal of this python2 module

- python-distutils has been replaced by setuptools.
- python-distutils was not being built anyway as it was not listed in
   make.sh
- lfs has missing sections. There are no source and no build sections

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython-optional-src: Removal of this python2 module
Adolf Belka [Sat, 15 May 2021 21:50:32 +0000 (23:50 +0200)] 
python-optional-src: Removal of this python2 module

- python-optional-src was not getting built anyway as it was not listed
   in make.sh
- lfs file was missing most of the standard content. No source info
   and no build instructions
- missing source file from IPFire source system
- grep on build/ found no dependencies on this module

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Removal of three python2 modules
Adolf Belka [Sat, 15 May 2021 21:50:31 +0000 (23:50 +0200)] 
make.sh: Removal of three python2 modules

- Removal of python-distutils and python-distutils-extra as these have
   been replaced by setuptools.
- Removal of python-optional-src
- Only python-distutils-extra line is removed from make.sh as
   python-distutils and python-optional-src were not in make.sh
   These two modules have not been getting built historically

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agonmap: Migrate to python3
Adolf Belka [Sat, 15 May 2021 21:50:03 +0000 (23:50 +0200)] 
nmap: Migrate to python3

- Added PYTHON=python3 prior to configure. This then builds nmap with
   python3.
- ndiff is written as python2 only and currently no patches to make it
   work wih python3 have been accepted by the nmap team. It looks like ndiff
   will stay as it is for some time so ndiff will be removed from the nmap
   package install.
- Added --without-ndiff to configure so nmap is built without ndiff
- Updated rootfile

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoTor: update to 0.4.5.8
Peter Müller [Fri, 14 May 2021 21:11:49 +0000 (23:11 +0200)] 
Tor: update to 0.4.5.8

Full changelog as per https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.5.8:

Changes in version 0.4.5.8 - 2021-05-10
  Tor 0.4.5.8 fixes several bugs in earlier version, backporting fixes
  from the 0.4.6.x series.

  o Minor features (compatibility, Linux seccomp sandbox, backport from 0.4.6.3-rc):
    - Add a workaround to enable the Linux sandbox to work correctly
      with Glibc 2.33. This version of Glibc has started using the
      fstatat() system call, which previously our sandbox did not allow.
      Closes ticket 40382; see the ticket for a discussion of trade-offs.

  o Minor features (compilation, backport from 0.4.6.3-rc):
    - Make the autoconf script build correctly with autoconf versions
      2.70 and later. Closes part of ticket 40335.

  o Minor features (fallback directory list, backport from 0.4.6.2-alpha):
    - Regenerate the list of fallback directories to contain a new set
      of 200 relays. Closes ticket 40265.

  o Minor features (geoip data):
    - Update the geoip files to match the IPFire Location Database, as
      retrieved on 2021/05/07.

  o Minor features (onion services):
    - Add warning message when connecting to now deprecated v2 onion
      services. As announced, Tor 0.4.5.x is the last series that will
      support v2 onions. Closes ticket 40373.

  o Minor bugfixes (bridge, pluggable transport, backport from 0.4.6.2-alpha):
    - Fix a regression that made it impossible start Tor using a bridge
      line with a transport name and no fingerprint. Fixes bug 40360;
      bugfix on 0.4.5.4-rc.

  o Minor bugfixes (build, cross-compilation, backport from 0.4.6.3-rc):
    - Allow a custom "ar" for cross-compilation. Our previous build
      script had used the $AR environment variable in most places, but
      it missed one. Fixes bug 40369; bugfix on 0.4.5.1-alpha.

  o Minor bugfixes (channel, DoS, backport from 0.4.6.2-alpha):
    - Fix a non-fatal BUG() message due to a too-early free of a string,
      when listing a client connection from the DoS defenses subsystem.
      Fixes bug 40345; bugfix on 0.4.3.4-rc.

  o Minor bugfixes (compiler warnings, backport from 0.4.6.3-rc):
    - Fix an indentation problem that led to a warning from GCC 11.1.1.
      Fixes bug 40380; bugfix on 0.3.0.1-alpha.

  o Minor bugfixes (controller, backport from 0.4.6.1-alpha):
    - Fix a "BUG" warning that would appear when a controller chooses
      the first hop for a circuit, and that circuit completes. Fixes bug
      40285; bugfix on 0.3.2.1-alpha.

  o Minor bugfixes (onion service, client, memory leak, backport from 0.4.6.3-rc):
    - Fix a bug where an expired cached descriptor could get overwritten
      with a new one without freeing it, leading to a memory leak. Fixes
      bug 40356; bugfix on 0.3.5.1-alpha.

  o Minor bugfixes (testing, BSD, backport from 0.4.6.2-alpha):
    - Fix pattern-matching errors when patterns expand to invalid paths
      on BSD systems. Fixes bug 40318; bugfix on 0.4.5.1-alpha. Patch by
      Daniel Pinto.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore157: Ship sudo
Michael Tremer [Sun, 16 May 2021 11:59:16 +0000 (11:59 +0000)] 
core157: Ship sudo

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agosudo: Update to 1.9.7
Adolf Belka [Sat, 15 May 2021 21:49:32 +0000 (23:49 +0200)] 
sudo: Update to 1.9.7

- Update from 1.9.6p1 to 1.9.7
- Update of rootfile not required
- Changelog
    The fuzz Makefile target now runs all the fuzzers for 8192 passes (can be overridden via the FUZZ_RUNS variable). This makes it easier to run the fuzzers in-tree. To run a fuzzer indefinitely, set FUZZ_RUNS=-1, e.g. make FUZZ_RUNS=-1 fuzz.
    Fixed fuzzing on FreeBSD where the ld.lld linker returns an error by default when a symbol is multiply-defined.
    Added support for determining local IPv6 addresses on systems that lack the getifaddrs() function. This now works on AIX, HP-UX and Solaris (at least). Bug #969.
    Fixed a bug introduced in sudo 1.9.6 that caused sudo -V to report a usage error. Also, when invoked as sudoedit, sudo now allows a more restricted set of options that matches the usage statement and documentation. GitHub Issue #95.
    Fixed a crash in sudo_sendlog when the specified certificate or key does not exist or is invalid. Bug #970.
    Fixed a compilation error when sudo is configured with the disable-log-clientoption.
    Sudo's limited support for SUCCESS=return entries in nsswitch.conf is now documented. Bug #971.
    Sudo now requires autoconf 2.70 or higher to regenerate the configure script. Bug #972.
    sudo_logsrvd now has a relay mode which can be used to create a hierarchy of log servers. By default, when a relay server is defined, messages from the client are forwarded immediately to the relay. However, if the store_first setting is enabled, the log will be stored locally until the command completes and then relayed. Bug #965.
    Sudo now links with OpenSSL by default if it is available unless the --disable-openssl configure option is used or both the --disable-log-client and --disable-log-server configure options are specified.
    Fixed configure's Python version detection when the version minor number is more than a single digit, for example Python 3.10.
    The sudo Python module tests now pass for Python 3.10.
    Sudo will now avoid changing the datasize resource limit as long as the existing value is at least 1GB. This works around a problem on 64-bit HP-UX where it is not possible to exactly restore the original datasize limit. Bug #973.
    Fixed a race condition that could result in a hang when sudo is executed by a process where the SIGCHLD handler is set to SIG_IGN. This fixes the bug described by GitHub PR #98.
    Fixed an out-of-bounds read in sudoedit and visudo when the EDITOR, VISUAL or SUDO_EDITOR environment variables end in an unescaped backslash. Also fixed the handling of quote characters that are escaped by a backslash. GitHub Issue #99.
    Fixed a bug that prevented the log_server_verify sudoers option from taking effect.
    The sudo_sendlog utility has a new -s option to cause it to stop sending I/O records after a user-specified elapsed time. This can be used to test the I/O log restart functionality of sudo_logsrvd.
    Fixed a crash introduced in sudo 1.9.4 in sudo_logsrvd when attempting to restart an interrupted I/O log transfer.
    The TLS connection timeout in the sudoers log client was previously hard-coded to 10 seconds. It now uses the value of log_server_timeout.
    The configure script now outputs a summary of the user-configurable options at the end, separate from output of configure script tests. Bug #820.
    Corrected the description of which groups may be specified via the -g option in the Runas_Spec section. Bug #975.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agokernel: update to 4.14.232
Arne Fitzenreiter [Fri, 14 May 2021 16:32:02 +0000 (18:32 +0200)] 
kernel: update to 4.14.232

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore157: Ship python3-daemon
Michael Tremer [Fri, 14 May 2021 13:30:47 +0000 (13:30 +0000)] 
core157: Ship python3-daemon

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agounbound-dhcp-leases-bridge: Fix shebang
Michael Tremer [Fri, 14 May 2021 13:22:37 +0000 (13:22 +0000)] 
unbound-dhcp-leases-bridge: Fix shebang

Reported-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython-daemon: Port to Python 3
Michael Tremer [Fri, 14 May 2021 13:22:09 +0000 (13:22 +0000)] 
python-daemon: Port to Python 3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore157: Ship unbound-dhcp-leases-bridge
Michael Tremer [Fri, 14 May 2021 11:54:50 +0000 (11:54 +0000)] 
core157: Ship unbound-dhcp-leases-bridge

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agounbound-dhcp-leases-bridge: Migrate to Python 3
Michael Tremer [Fri, 14 May 2021 11:53:11 +0000 (12:53 +0100)] 
unbound-dhcp-leases-bridge: Migrate to Python 3

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython-ipaddress: Remove this python2 module
Adolf Belka [Fri, 14 May 2021 10:30:17 +0000 (12:30 +0200)] 
python-ipaddress: Remove this python2 module

- python-ipaddress is the python2 backport of the python3 built in
   ipaddress module. Therefore python-ipaddress is not needed with the
   move to try and remove python2
- Remove the lfs and rootfiles and adjust make.sh

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython3-inotify: Update to 0.2.10 and convert to python3
Adolf Belka [Thu, 13 May 2021 20:44:30 +0000 (22:44 +0200)] 
python3-inotify: Update to 0.2.10 and convert to python3

- Update from 0.2.7 to 0.2.10
- Convert from python-inotify to python3-inotify
   make.sh, lfs & rootfiles
- Update rootfiles
- Changelog
  0.2.8: - We now just *skip* the event if not known
    - Implement InotifyTree and InotifyTrees as sub-classes of new BaseTree
      class
    - Made InotifyTree and InotifyTrees sub-classes of new base class
      BaseTree
    - Recursively watch a list of paths/trees
  0.2.9: - Added getter for Inotify object from tree objects
    - Added note to docs about race-conditions. Added small change for
      redundant adds.
    - Slightly reorganized documentation. Updated example.
    - Merge pull request #35 from dsoprea/dustin. Added extensive unit-test
      coverage. Closes all bug requests.
    - Added large amount of unit-test coverage.
       - Now handle rename-specific events.
       - Can now also ignore issues with new directories not existing if
         you're created *and* deleted or renamed a folder since the last
         time events were read.
       - Adjusted requirements for simplicity.
       - Added Python 3 compatibility.
       - Fixed Unicode support.
       - Can now provide `filter_predicate` to event_gen() to allow custom
         loop termination based on events.
       - We'll now terminate the loop when certain events are encountered.
         These events are passed into event_gen() as `terminal_events`. By
         default these are the IN_Q_OVERFLOW and IN_UNMOUNT types.
       - Fixes #28
       - Fixes #23
       - Fixes #22
       - Fixes #19
       - Fixes #16
       - Fixes #15
       - Fixes #5
    - Check presence of both glibc errno and musl libc err
    - Support for musl libc (Alpine Linux)
    - Merge pull request #27 from jessesuen/master. Support for musl libc
      (Alpine Linux)
    - Check presence of both glibc errno and musl libc err
    - Merge pull request #26 from hathcock/hathcock/issue-25. resolves #25,
      list of binary paths can't be logged with existing call
       - Support for musl libc (Alpine Linux)
       - Resolves #25, list of binary paths can't be logged with existing
         call
  0.2.10: - Merge pull request #34 from davidparsson/
            feature/support-moved-directories
      - Support MOVED_FROM and MOVED_TO in BaseTree
    - events: Now log event types from epoll vs data stream.
    - This release implicitly fixed the botched binary package released
      in 0.2.9

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython3-dateutil: Removal of python3-six as a dependency
Adolf Belka [Thu, 13 May 2021 16:47:08 +0000 (18:47 +0200)] 
python3-dateutil: Removal of python3-six as a dependency

- python3-dateutil is installed as a python3 module.
- It had python3-six defined as a dependency. Python3-six is a module that
   allows a project to be capable of neing run under python2 or under
   python3
- With the planned removal of python2 there is no need to have
   python3-dateutil capable of working with python2.
- python3-six addon is being removed as there is no need for any python3
   module in IPFire to also be capable o0f running under python2

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agopython-six: Removal of python2 & 3 addon versions of six
Adolf Belka [Thu, 13 May 2021 16:47:07 +0000 (18:47 +0200)] 
python-six: Removal of python2 & 3 addon versions of six

- six is a python compatibility module to enable modules to run on
   both python2 and python3. The code from six has to be copied into
   any other module/project that is intending to use it.
- With the planned removal of python2 then neither version of this
   compatibility module is needed.
- Removal of the lfs and rootfiles. Although python-six is an addon
   its rootfile was installed into the common folder rather than the
   packages folder.
- Removal of the python-six and python3-six entries in make.sh

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agogetrrdimage.cgi: Allow more non-word characters in the URL
Leo-Andres Hofmann [Thu, 13 May 2021 09:27:04 +0000 (11:27 +0200)] 
getrrdimage.cgi: Allow more non-word characters in the URL

As discussed in bug #12615

Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agomake.sh: Removal of four python2 modules
Adolf Belka [Thu, 13 May 2021 11:43:31 +0000 (13:43 +0200)] 
make.sh: Removal of four python2 modules

- Removal of python-clientform, python-feedparser, python-mechanize
   and python-rssdler addons - lfs and rootfiles
- python-clientform was made obsolete in 2008 and its functions taken
   over by python-mechanize
- python-rssdler is an RSS feed downloader to facilitate downloading of
   podcasts, videocasts and torrents. Current IPFire version is 0.4.0a
   from 2008. The most recent version available is 0.4.2 from 2009. No
   further development is being done with this module. An RSS feed
   downloader is not appropriate for use in a firewall system, even
   less so when it is 12 years old.
- python-feedparser and python-mechanize are both dependencies for
   python-rssdler. They are not dependencies for any other addon.
- Full clean build with these four modules fully removed gave no problems.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore157: Ship ddns
Michael Tremer [Thu, 13 May 2021 08:40:01 +0000 (08:40 +0000)] 
core157: Ship ddns

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agoddns: Add upstream patch to fix argparse list-token-providers command.
Stefan Schantl [Wed, 12 May 2021 18:06:43 +0000 (20:06 +0200)] 
ddns: Add upstream patch to fix argparse list-token-providers command.

Fixes #12607.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2 years agocore157: Ship libxslt
Michael Tremer [Wed, 12 May 2021 10:38:54 +0000 (10:38 +0000)] 
core157: Ship libxslt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>