* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 9f2ee0e9bf4708cb899cd7e3b7bef6af5f18956a
@ 2021-04-14 18:22 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2021-04-14 18:22 UTC (permalink / raw)
To: ipfire-scm
[-- Attachment #1: Type: text/plain, Size: 57349 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via 9f2ee0e9bf4708cb899cd7e3b7bef6af5f18956a (commit)
via eea5db042f7870b92b68f0efd84a45dd18b726f7 (commit)
via 93ebde9b3be52a2d43d937abdb7b7a73e70880ee (commit)
via 1bd27a9a99d878b800000de7b36bb7233d06d8fb (commit)
via 3c4baac573566ef6a1d1734d63a377af08f4eece (commit)
via a50af14f381867b876419f6229981a882ef6f707 (commit)
via c85b97ed5a76eb670ffb79d1377ad642f3ca32ec (commit)
via 8bc33c6db3d45fae460181c2651a7830e37fecea (commit)
via ce11ea46c63a9b3f60bf9463b0aa689811251845 (commit)
via 85ff8d45865d92ec85c33d2f5cb3700d8c6ac785 (commit)
via dbdc389bc3e5c94c85458ded4ce6c6bab00274d1 (commit)
via 05599e171cfb2876d9708905bbe67272143e7c75 (commit)
via ac92c4d9715e4d8ad9b3cc28f6310a1079fb0e69 (commit)
via a14c8d7d0fb67d6a5096747d6dcbd54adb883ba8 (commit)
via 5aff2d126ff090a960b9d1be9b0e7bfd851f365f (commit)
via 1fe39ef505931b2abfe588565ab4d950ff0b09bf (commit)
via 10189aa197f4e4c4c8701a86912f516b611ebb36 (commit)
via 59fa881ea7380b5ac5f283892c9c4882de6ff28a (commit)
via a8996f857cda8bb5b11bf335eeb84cdad040b9b4 (commit)
from 7885b1509cfb7d8aed4bc921bbafc18bbf67b62d (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 9f2ee0e9bf4708cb899cd7e3b7bef6af5f18956a
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date: Wed Apr 14 18:44:47 2021 +0200
cifs-utils: Update to 6.13
- Update from 6.12 to 6.13
- Update of rootfile not needed
- Changelog
This is a security release to address the following bug:
CVE-2021-20208 cifs.upcall kerberos auth leak in container
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit eea5db042f7870b92b68f0efd84a45dd18b726f7
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date: Wed Apr 14 13:54:52 2021 +0200
cups: Update to 2.3.3op2
- Update from 2.3.3 to 2.3.3op2
- OpenPrinting statement from March 2021:-
CUPS has new home at OpenPrinting
Due to the fact that CUPS development at Apple has stopped since the
beginning of 2020 we had forked CUPS some months ago to incorporate
patches and fixes from the distributions. As Apple did not resume the
upstream work on CUPS, we have made OpenPrinting now the official
upstream home for CUPS.
This especially means that we can now continue developing CUPS,
independent of Apple. So we can add features and lead CUPS into the new
architecture without PPD files and with Printer Applications.
CUPS has a new home page now and what was formerly our fork is now the
official CUPS repository. Upcoming releases will be of the new 2.4.x
series, without “opX” suffix as now. Also all documentation files which
come with it are updated to point to the OpenPrinting resources.
- Update of rootfile not required.
- Changelog
Changes in CUPS v2.3.3op2
- Security: Fixed a buffer (read) overflow in the `ippReadIO` function
(CVE-2020-10001)
- Clarified the documentation for the "Listen" directive (Issue #53)
- Fixed duplicate ColorModel entries for AirPrint printers (Issue 59)
- Fixed directory/permission defaults for Debian kfreebsd-based systems
(Issue #60, Issue #61)
- Fixed crash bug in `ppdOpen` (Issue #64, Issue #78)
- Fixed regression in `snprintf` emulation function (Issue #67)
- The scheduler's systemd service file now waits for the nslcd service to start
(Issue #69)
- The libusb-based USB backend now uses a simpler read timer implementation to
avoid a regression in a previous change (Issue #72)
- The PPD caching code now only tracks the `APPrinterIconPath` value on macOS
(Issue #73)
- Fixed segfault in help.cgi when searching in man pages (Issue #81)
- Root certificates were incorrectly stored in "~/.cups/ssl".
Changes in CUPS v2.3.3op1
- The automated test suite can now be activated using `make test` for
consistency with other projects and CI environments - the old `make check`
continues to work as well, and the previous test server behavior can be
accessed by running `make testserver`.
- ippeveprinter now supports multiple icons and strings files.
- ippeveprinter now uses the system's FQDN with Avahi.
- ippeveprinter now supports Get-Printer-Attributes on "/".
- ippeveprinter now uses a deterministic "printer-uuid" value.
- ippeveprinter now uses system sounds on macOS for Identify-Printer.
- Updated ippfind to look for files in "~/Desktop" on Windows.
- Updated ippfind to honor `SKIP-XXX` directives with `PAUSE`.
- Updated IPP Everywhere support to work around printers that only advertise
color raster support but really also support grayscale (Issue #1)
- ipptool now supports DNS-SD URIs like `ipps://My%20Printer._ipps._tcp.local`
(Issue #5)
- The scheduler now allows root backends to have world read permissions but not
world execute permissions (Issue #21)
- Failures to bind IPv6 listener sockets no longer cause errors if IPv6 is
disabled on the host (Issue #25)
- The SNMP backend now supports the HP and Ricoh vendor MIBs (Issue #28)
- The scheduler no longer includes a timestamp in files it writes (Issue #29)
- The systemd service names are now "cups.service" and "cups-lpd.service"
(Issue #30, Issue #31)
- The scheduler no longer adds the local hostname to the ServerAlias list
(Issue #32)
- Added `LogFileGroup` directive in "cups-files.conf" to control the group
owner of log files (Issue #34)
- Added `--with-max-log-size` configure option (Issue #35)
- Added `--enable-sync-on-close` configure option (Issue #37)
- Added `--with-error-policy` configure option (Issue #38)
- IPP Everywhere PPDs could have an "unknown" default InputSlot (Issue #44)
- The `httpAddrListen` function now uses a listen backlog of 128.
- Added USB quirks (Apple issue #5789, #5823, #5831)
- Fixed IPP Everywhere v1.1 conformance issues in ippeveprinter.
- Fixed DNS-SD name collision support in ippeveprinter.
- Fixed compiler and code analyzer warnings.
- Fixed TLS support on Windows.
- Fixed ippfind sub-type searches with Avahi.
- Fixed the default hostname used by ippeveprinter on macOS.
- Fixed resolution of local IPP-USB printers with Avahi.
- Fixed coverity issues (Issue #2)
- Fixed `httpAddrConnect` issues (Issue #3)
- Fixed web interface device URI issue (Issue #4)
- Fixed lp/lpr "printer/class not found" error reporting (Issue #6)
- Fixed xinetd support for LPD clients (Issue #7)
- Fixed libtool build issue (Issue #11)
- Fixed a memory leak in the scheduler (Issue #12)
- Fixed a potential integer overflow in the PPD hashing code (Issue #13)
- Fixed output-bin and print-quality handling issues (Issue #18)
- Fixed PPD options getting mapped to odd IPP values like "tray---4" (Issue #23)
- Fixed remote access to the cupsd.conf and log files (Issue #24)
- Fixed the automated test suite when running in certain build/CI environments
(Issue #25)
- Fixed a logging regression caused by a previous change for Apple issue #5604
(Issue #25)
- Fixed fax phone number handling with GNOME (Issue #40)
- Fixed potential rounding error in rastertopwg filter (Issue #41)
- Fixed the "uri-security-supported" value from the scheduler (Issue #42)
- Fixed IPP backend crash bug with "printer-alert" values (Issue #43)
- Removed old Solaris inetconv(1m) reference in cups-lpd man page (Issue #46)
- Fixed default options that incorrectly use the "custom" prefix (Issue #48)
- Fixed a memory leak when resolving DNS-SD URIs (Issue #49)
- Fixed systemd status reporting by adopting the notify interface (Issue #51)
- Fixed crash in rastertopwg (Apple issue #5773)
- Fixed cupsManualCopies values in IPP Everywhere PPDs (Apple issue #5807)
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 93ebde9b3be52a2d43d937abdb7b7a73e70880ee
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date: Wed Apr 14 13:55:15 2021 +0200
cups-filters: Update to 1.28.8
- Update from 1.28.7 to 1.28.8
- Update of rootfile not required
- Changelog
CHANGES IN V1.28.8
- libcupsfilters: Made check whether the driverless PPD to
generate should be a fax out PPD more reliable (Issue #343).
- foomatic-rip: Options in the 5th command line argument of
the CUPS filter command line are separated only by white
space and not by comma, also make sure that an option "none"
is not considered a custom page size (Issue #348).
- implicitclass: Raise timeout for cups-browsed's answer from
20s to 60s (Pull request #346).
- libcupsfilters: In the PPD generator really give priority to
Apple Raster against PDF (Issue #331).
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 1bd27a9a99d878b800000de7b36bb7233d06d8fb
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Apr 14 17:31:16 2021 +0000
netsnmpd: Bump version to link against new lm_sensors
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 3c4baac573566ef6a1d1734d63a377af08f4eece
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Apr 14 17:31:01 2021 +0000
core157: Ship lm_sensors & collectd
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit a50af14f381867b876419f6229981a882ef6f707
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date: Wed Apr 14 13:57:45 2021 +0200
collectd: patch for successful build with updated lm_sensors
- Patch to remove checks for SENSORS_API_VERSION upper limit
Patch based on one by Pavel Rochnyack
https://git.ipfire.org/?p=thirdparty/collectd.git;a=commitdiff;h=d5a3c020>
- Without this patch collectd fails to build with the updated lm_sensors
version (3-6-0) due to a problem with the version of libsensors used by
lm_sensors
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit c85b97ed5a76eb670ffb79d1377ad642f3ca32ec
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date: Wed Apr 14 13:57:44 2021 +0200
lm_sensors: Update to 3-6-0
- Update from 3-4-0 to 3-6-0
- Update of rootfilers in each architecture
Only the library version changed in each rootfile
- Installed updated lm_sensors. Confirmed updated version was installed.
sensors-detect ran successfully but could not confirm successful sensor
detection as installation was run on vm testbed and this has no sesnors
Testing on real hardware to confirm that sensors are detected and
sensor-* directories correctly created in IPFire.
- Changelog
3.6.0 (2019-10-18)
configs: Added a number of new configuration files
fancontrol: AVERAGE env variable can be used to set the number of previ>
Makefile: The MACHINE variable has been renamed to ARCH
sensord: Add an option -1/--oneline to print chip and adapter on the sa>
sensors: Fixed a stray comma bug in the JSON output
Fixed Fahrenheit conversion with raw and JSON output
Scale voltage and current values in the default output format
sensors-detect: Add detection of AMD Family 17h, models 30h, 70h
Add detection of some AMD Family 15h models
Add detection of AMD Family 16h model 30h power sensors
Add detection of Hygon Family 18h thermal sensors
Add detection of Nuvoton NCT6797D
Add detection of Nuvoton NCT6798D
Add detection of Nuvoton NCT6112D/NCT6114D/NCT6116D
Fix printing CPU info on non-x86 arches
Fix printing lm_sensors version
Mark Fintek F75387SG/RG as supported by the f75375s dri>
3.5.0 (2018-11-23)
Fixed disappearance of certain hwmon chips with 4.19+ kernels
Add the find-driver script for debugging
Various documentation and man page improvements
Fix various issues found by Coverity Scan
Fix compilation with the musl C library
Development version string now contains "+git" instead of "+SVN"
Updated links in documentation to reflect the new home of lm_sensors
sensors.1: Add reference to sensors-detect
Document -j option (json output)
sensors: Add support for json output
Add support for power min, lcrit, min_alarm, lcrit_alarm
sensors-detect: Fix systemd paths
Add detection of Fintek F81768
Only probe I/O ports on x86
Add detection of Nuvoton NCT6793D
Add detection of Microchip MCP9808
Mark F71868A as supported by the f71882fg driver
Mark F81768D as supported by the f71882fg driver
Mark F81866D as supported by the f71882fg driver
Add detection of various ITE chips
Add detection of Nuvoton NCT6795D
Add detection of DDR4 SPD
Add detection of ITE IT8987D
Add detection of AMD Family 17h temperature sensors
Add detection of AMD KERNCZ SMBus controller
Add detection of various Intel SMBus controllers
Add detection of Giantec GT30TS00
Add detection of ONS CAT34TS02C and CAT34TS04
Add detection of AMD Family 15h Model 60+ temperature s>
Add detection of Nuvoton NCT6796D
Add detection of AMD Family 15h Model 70+ temperature s>
configs: Add sample configuration files.
sensors.conf.default: Add hardwired inputs of NCT6795D
Add hardwired inputs of F71868A
Add hardwired NCT6796D inputs
vt1211_pwm: replaced deprecated sub shell syntax
run with bash instead of sh
pwmconfig: replaced deprecated sub shell syntax
fancontrol: replaced deprecated sub shell syntax
save original pwm values
fancontrol.8: replaced deprecated sub shell syntax
libsensors: Add support for SENSORS_BUS_TYPE_SCSI
Add support for power min, lcrit, min_alarm, lcrit_alarm
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 8bc33c6db3d45fae460181c2651a7830e37fecea
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date: Wed Apr 14 13:58:09 2021 +0200
meson: Update to 0.57.2
- Update from 0.56.0 to 0.57.2
- Update of rootfile
- Changelog is too large and complicated layout to include here
Full details can be seen at https://mesonbuild.com/Release-notes.html
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit ce11ea46c63a9b3f60bf9463b0aa689811251845
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Apr 14 17:26:40 2021 +0000
core157: Ship libxcrypt
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 85ff8d45865d92ec85c33d2f5cb3700d8c6ac785
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date: Wed Apr 14 13:57:19 2021 +0200
libxcrypt: Update to 4.4.19
- Update from 4.4.17 to 4.4.19
- Update of rootfile not needed
- Changelog
libxcrypt NEWS -- history of user-visible changes.
Version 4.4.19
* Improve fallback implementation of explicit_bzero.
* Add glibc-on-CSKY, ARC, and RISCV-32 entries to libcrypt.minver.
These were added in GNU libc 2.29, 2.32, and 2.33 respectively
(issue #122).
* Do not build xcrypt.h if we’re not going to install it.
* Do not apply --enable-obsolete-api-enosys mode to fcrypt.
* Compilation fix for NetBSD. NetBSD’s <unistd.h> declares encrypt
and setkey to return int, contrary to POSIX (which says they return
void). Rename those declarations out of the way with macros.
* Compilation fixes for building with GCC 11.
Basically fixes for explicit type-casting.
* Force update of existing symlinks during installation (issue #120).
Version 4.4.18
* Fix compilation errors on (Free)BSD (issue #110).
* Fix conversion error in lib/alg-gost3411-core.c, which is seen by
some sensitive compilers.
* Convert build scripts to Perl.
The minimum version of Perl required is 5.14.
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit dbdc389bc3e5c94c85458ded4ce6c6bab00274d1
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Apr 14 17:23:06 2021 +0000
core157: Ship file
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 05599e171cfb2876d9708905bbe67272143e7c75
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date: Wed Apr 14 13:55:53 2021 +0200
file: Update to 5.40
- Update from 5.39 to 5.40
- Update of rootfile not needed
- Changelog
* release 5.40
* PR/234: Add limit to the number of bytes to scan for encoding
* PR/230: Fix /T (trim flag) for regex
* PR/77: Trim trailing separator.
* PR/211: Convert system read errors from corrupt ELF
files into human readable error messages
* fix multithreaded decompression file descriptor issue
by using close-on-exec (Denys Vlasenko)
* Exclude surrogate pairs from utf-8 detection (Michael Liu)
* Include # to the list of ignored format chars (Werner Fink)
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit ac92c4d9715e4d8ad9b3cc28f6310a1079fb0e69
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Apr 14 17:22:39 2021 +0000
core157: Ship expat
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit a14c8d7d0fb67d6a5096747d6dcbd54adb883ba8
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date: Wed Apr 14 13:55:35 2021 +0200
expat: Update to 2.3.0
- Update from 2.2.0 (2016) to 2.3.0 (2021)
- Update of rootfile
- Changelog is too large to include here
Full details can be viewed in the Changes file in the source tarball
Large number of bug fixes
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 5aff2d126ff090a960b9d1be9b0e7bfd851f365f
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date: Wed Apr 14 17:21:56 2021 +0000
core157: Ship apache
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 1fe39ef505931b2abfe588565ab4d950ff0b09bf
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date: Mon Apr 12 23:01:41 2021 +0200
httpd: delete comment blocks and unused directives from our configuration
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 10189aa197f4e4c4c8701a86912f516b611ebb36
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date: Mon Apr 12 23:01:13 2021 +0200
httpd: apply the same security headers on the captive portal instance as we do elsewhere
The Captive Portal should not be framed or leak sensitive detail via
Referrers either.
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit 59fa881ea7380b5ac5f283892c9c4882de6ff28a
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date: Mon Apr 12 23:00:46 2021 +0200
httpd: disable sending ETag header completely
These cause caching trouble and pose a potential security risk due to
exposing inode numbers of files within the Apache site directories on an
IPFire machine.
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
commit a8996f857cda8bb5b11bf335eeb84cdad040b9b4
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date: Mon Apr 12 23:00:19 2021 +0200
httpd: remove compatibility instructions for very old browsers
These are not in use any more - and if they would, we don't support them.
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/httpd/default-server.conf | 3 -
config/httpd/global.conf | 1 +
config/httpd/httpd.conf | 81 ++--------------------
config/httpd/mod_log_config.conf | 33 +--------
config/httpd/server-tuning.conf | 10 ---
config/httpd/ssl-global.conf | 45 ++----------
config/httpd/vhosts.d/captive.conf | 2 +
config/httpd/vhosts.d/ipfire-interface-ssl.conf | 3 -
config/rootfiles/common/aarch64/lm_sensors | 4 +-
config/rootfiles/common/armv5tel/lm_sensors | 4 +-
config/rootfiles/common/expat | 23 +++---
config/rootfiles/common/i586/lm_sensors | 4 +-
config/rootfiles/common/meson | 26 ++++---
config/rootfiles/common/x86_64/lm_sensors | 4 +-
.../core/157/filelists/aarch64/lm_sensors | 1 +
.../{oldcore/114 => core/157}/filelists/apache2 | 0
.../110 => core/157}/filelists/armv5tel/lm_sensors | 0
.../{oldcore/125 => core/157}/filelists/collectd | 0
.../{oldcore/106 => core/157}/filelists/expat | 0
.../{oldcore/106 => core/157}/filelists/file | 0
.../77 => core/157}/filelists/i586/lm_sensors | 0
.../{oldcore/155 => core/157}/filelists/libxcrypt | 0
.../rootfiles/core/157/filelists/x86_64/lm_sensors | 1 +
config/rootfiles/core/157/update.sh | 2 +
lfs/cifs-utils | 6 +-
lfs/collectd | 1 +
lfs/cups | 6 +-
lfs/cups-filters | 6 +-
lfs/expat | 4 +-
lfs/file | 4 +-
lfs/libxcrypt | 4 +-
lfs/lm_sensors | 10 +--
lfs/meson | 4 +-
lfs/netsnmpd | 2 +-
...hecks-for-SENSORS_API_VERSION-upper-limit.patch | 63 +++++++++++++++++
35 files changed, 146 insertions(+), 211 deletions(-)
create mode 120000 config/rootfiles/core/157/filelists/aarch64/lm_sensors
copy config/rootfiles/{oldcore/114 => core/157}/filelists/apache2 (100%)
copy config/rootfiles/{oldcore/110 => core/157}/filelists/armv5tel/lm_sensors (100%)
copy config/rootfiles/{oldcore/125 => core/157}/filelists/collectd (100%)
copy config/rootfiles/{oldcore/106 => core/157}/filelists/expat (100%)
copy config/rootfiles/{oldcore/106 => core/157}/filelists/file (100%)
copy config/rootfiles/{oldcore/77 => core/157}/filelists/i586/lm_sensors (100%)
copy config/rootfiles/{oldcore/155 => core/157}/filelists/libxcrypt (100%)
create mode 120000 config/rootfiles/core/157/filelists/x86_64/lm_sensors
create mode 100644 src/patches/collectd-4.10.9-remove-checks-for-SENSORS_API_VERSION-upper-limit.patch
Difference in files:
diff --git a/config/httpd/default-server.conf b/config/httpd/default-server.conf
index db082298a..e82dfa088 100644
--- a/config/httpd/default-server.conf
+++ b/config/httpd/default-server.conf
@@ -2,7 +2,4 @@
# Global configuration that will be applicable for all virtual hosts, unless
# deleted here, or overriden elswhere.
#
-
DocumentRoot /srv/web/ipfire/html
-
-#Include /etc/httpd/conf/conf.d/*.conf
diff --git a/config/httpd/global.conf b/config/httpd/global.conf
index cc8000379..46878baf5 100644
--- a/config/httpd/global.conf
+++ b/config/httpd/global.conf
@@ -8,6 +8,7 @@ Include /etc/httpd/conf/hostname.conf
HostnameLookups off
AddHandler cgi-script .cgi
EnableSendfile Off
+FileETag None
# Always unset HTTP_PROXY variable, https://httpoxy.org
RequestHeader unset Proxy early
diff --git a/config/httpd/httpd.conf b/config/httpd/httpd.conf
index 14dcc735c..c694bffe2 100644
--- a/config/httpd/httpd.conf
+++ b/config/httpd/httpd.conf
@@ -1,37 +1,4 @@
-#
-# /etc/httpd/conf/httpd.conf
-#
-# This is the main Apache2 server configuration file for IPFire.
-# Plese do not change this file!
-
-# Overview of include files, chronologically:
-#
-# httpd.conf
-# |
-# |-- uid.conf . . . . . . . . . . . . . . UserID/GroupID to run under
-# |-- server-tuning.conf . . . . . . . . . sizing of the server (how many processes to start, ...)
-# |-- loadmodule.conf . . . . . . . . . . . load these modules
-# |-- listen.conf . . . . . . . . . . . . . IP adresses / ports to listen on
-# |-- mod_log_config.conf . . . . . . . . . define logging formats
-# |-- sysconfig.d/global.conf . . . . . . . server-wide general settings
-# |-- mod_status.conf . . . . . . . . . . . restrict access to mod_status (server monitoring)
-# |-- mod_info.conf . . . . . . . . . . . . restrict access to mod_info
-# |-- mod_usertrack.conf . . . . . . . . . defaults for cookie-based user tracking
-# |-- mod_autoindex-defaults.conf . . . . . defaults for displaying of server-generated directory listings
-# |-- mod_mime-defaults.conf . . . . . . . defaults for mod_mime configuration
-# |-- errors.conf . . . . . . . . . . . . . customize error responses
-# |-- ssl-global.conf . . . . . . . . . . . SSL conf that applies to default server _and all_ virtual hosts
-# |
-# |-- default-server.conf . . . . . . . . . set up the default server that replies to non-virtual-host requests
-# |
-# `-- vhosts.d/ . . . . . . . . . . . . . . for each virtual host, place one file here
-# `-- *.conf . . . . . . . . . . . . . (*.conf is automatically included)
-#
-
-### Global Environment ######################################################
-#
-# The directives in this section affect the overall operation of Apache,
-# such as the number of concurrent requests.
+# Apache2 server configuration file for IPFire
# run under this user/group id
Include /etc/httpd/conf/uid.conf
@@ -40,17 +7,13 @@ Include /etc/httpd/conf/uid.conf
# - usage of KeepAlive
Include /etc/httpd/conf/server-tuning.conf
-# ErrorLog: The location of the error log file.
-# If you do not specify an ErrorLog directive within a <VirtualHost>
-# container, error messages relating to that virtual host will be
-# logged here. If you *do* define an error logfile for a <VirtualHost>
-# container, that host's errors will be logged there and not here.
+# ErrorLog: The location of the error log file
ErrorLog /var/log/httpd/error_log
# Load Modules here
Include /etc/httpd/conf/loadmodule.conf
-# IP addresses / ports to listen on
+# IP addresses and ports to listen on
Include /etc/httpd/conf/listen.conf
# predefined logging formats
@@ -59,15 +22,10 @@ Include /etc/httpd/conf/mod_log_config.conf
# global settings
Include /etc/httpd/conf/global.conf
-# optional mod_status, mod_info
-#Include /etc/httpd/conf/mod_status.conf
-#Include /etc/httpd/conf/mod_info.conf
-
# associate MIME types with filename extensions
TypesConfig /etc/mime.types
-# global (server-wide) SSL configuration, that is not specific to
-# any virtual host
+# global (server-wide) SSL configuration, that is not specific to any virtual host
Include /etc/httpd/conf/ssl-global.conf
<Directory />
@@ -85,35 +43,10 @@ AccessFileName .htaccess
# List of resources to look for when the client requests a directory
DirectoryIndex index.html index.htm index.shtml index.cgi
-### 'Main' server configuration #############################################
-#
-# The directives in this section set up the values used by the 'main'
-# server, which responds to any requests that aren't handled by a
-# <VirtualHost> definition. These values also provide defaults for
-# any <VirtualHost> containers you may define later in the file.
-#
-# All of these directives may appear inside <VirtualHost> containers,
-# in which case these default settings will be overridden for the
-# virtual host being defined.
-#
+# 'Main' server configuration
Include /etc/httpd/conf/default-server.conf
-
-### Virtual server configuration ############################################
-#
-# VirtualHost: If you want to maintain multiple domains/hostnames on your
-# machine you can setup VirtualHost containers for them. Most configurations
-# use only name-based virtual hosts so the server doesn't need to worry about
-# IP addresses. This is indicated by the asterisks in the directives below.
-#
-# Please see the documentation at
-# <URL:http://httpd.apache.org/docs-2.0/vhosts/>
-# for further details before you try to setup virtual hosts.
-#
-# You may use the command line option '-S' to verify your virtual host
-# configuration.
-#
+# Virtual server configuration
Include /etc/httpd/conf/vhosts.d/*.conf
-# Dummy LoadModule directive to aid module installations
-#LoadModule dummy_module /usr/lib/apache2/modules/mod_dummy.so
+# EOF
diff --git a/config/httpd/mod_log_config.conf b/config/httpd/mod_log_config.conf
index 89ad09a80..94151c29d 100644
--- a/config/httpd/mod_log_config.conf
+++ b/config/httpd/mod_log_config.conf
@@ -1,31 +1,2 @@
-#
-# The following directives define some format nicknames for use with
-# a CustomLog directive.
-#
-
-#
-# Format string: Nickname:
-#
-LogFormat "%h %l %u %t \"%r\" %>s %b" common
-LogFormat "%v %h %l %u %t \"%r\" %>s %b" vhost_common
-LogFormat "%{Referer}i -> %U" referer
-LogFormat "%{User-agent}i" agent
-LogFormat "%h %l %u %t \"%r\" %>s %b \
-\"%{Referer}i\" \"%{User-Agent}i\"" combined
-LogFormat "%v %h %l %u %t \"%r\" %>s %b \
-\"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
-
-# To use %I and %O, you need to enable mod_logio
-<IfModule mod_logio.c>
-LogFormat "%h %l %u %t \"%r\" %>s %b \
-\"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
-</IfModule>
-
-# Use one of these when you want a compact non-error SSL logfile on a virtual
-# host basis:
-<IfModule mod_ssl.c>
-Logformat "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \
-\"%r\" %b" ssl_common
-Logformat "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \
-\"%r\" %b \"%{Referer}i\" \"%{User-Agent}i\"" ssl_combined
-</IfModule>
+LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
+LogFormat "%v %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
diff --git a/config/httpd/server-tuning.conf b/config/httpd/server-tuning.conf
index 5642a1e44..9ee651e45 100644
--- a/config/httpd/server-tuning.conf
+++ b/config/httpd/server-tuning.conf
@@ -22,13 +22,3 @@ MaxSpareThreads 20
StartServers 2
MaxRequestWorkers 256
ThreadsPerChild 16
-
-#
-# The following directives modify normal HTTP response behavior to
-# handle known problems with browser implementations.
-#
-BrowserMatch "Mozilla/2" nokeepalive
-BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
-BrowserMatch "RealPlayer 4\.0" force-response-1.0
-BrowserMatch "Java/1\.0" force-response-1.0
-BrowserMatch "JDK/1\.0" force-response-1.0
diff --git a/config/httpd/ssl-global.conf b/config/httpd/ssl-global.conf
index 154815cea..0c3a96a6c 100644
--- a/config/httpd/ssl-global.conf
+++ b/config/httpd/ssl-global.conf
@@ -1,54 +1,17 @@
-##
-## SSL Global Context
-##
-## All SSL configuration in this context applies both to
-## the main server and all SSL-enabled virtual hosts.
-##
-
-# These are the configuration directives to instruct the server how to
-# serve pages over an https connection. For detailing information about these
-# directives see <URL:http://httpd.apache.org/docs-2.0/mod/mod_ssl.html>
-#
-# Do NOT simply read the instructions in here without understanding
-# what they do. They're here only as hints or reminders. If you are unsure
-# consult the online docs. You have been warned.
-
<IfModule mod_ssl.c>
- #
- # Some MIME-types for downloading Certificates and CRLs
- #
+ # Some MIME-types for downloading Certificates and CRLs
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
- # Pass Phrase Dialog:
- # Configure the pass phrase gathering process.
- # The filtering dialog program (`builtin' is a internal
- # terminal dialog) has to provide the pass phrase on stdout.
+ # Pass Phrase Dialog
SSLPassPhraseDialog builtin
- # Inter-Process Session Cache:
- # Configure the SSL Session Cache: First the mechanism
- # to use and second the expiring timeout (in seconds).
- # shm means the same as shmht.
- # Note that on most platforms shared memory segments are not allowed to be on
- # network-mounted drives, so in that case you need to use the dbm method.
- #SSLSessionCache none
- #SSLSessionCache dbm:/var/log/httpd/ssl_scache
- #SSLSessionCache shmht:/var/log/httpd/ssl_scache(512000)
+ # Inter-Process Session Cache
SSLSessionCache shmcb:/var/log/httpd/ssl_scache(512000)
SSLSessionCacheTimeout 900
- # Pseudo Random Number Generator (PRNG):
- # Configure one or more sources to seed the PRNG of the
- # SSL library. The seed data should be of good random quality.
- # WARNING! On some platforms /dev/random blocks if not enough entropy
- # is available. This means you then cannot use the /dev/random device
- # because it would lead to very long connection times (as long as
- # it requires to make more entropy available). But usually those
- # platforms additionally provide a /dev/urandom device which doesn't
- # block. So, if available, use this one instead. Read the mod_ssl User
- # Manual for more details.
+ # Pseudo Random Number Generator (PRNG)
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
diff --git a/config/httpd/vhosts.d/captive.conf b/config/httpd/vhosts.d/captive.conf
index 629fa8180..51af6eac4 100644
--- a/config/httpd/vhosts.d/captive.conf
+++ b/config/httpd/vhosts.d/captive.conf
@@ -11,6 +11,8 @@ Listen 1013
Header always set X-Content-Type-Options nosniff
Header always set Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'"
+ Header always set Referrer-Policy strict-origin
+ Header always set X-Frame-Options sameorigin
ScriptAlias /cgi-bin/ /srv/web/ipfire/cgi-bin/captive/
Alias /assets/ /srv/web/ipfire/html/captive/assets/
diff --git a/config/httpd/vhosts.d/ipfire-interface-ssl.conf b/config/httpd/vhosts.d/ipfire-interface-ssl.conf
index de7b8559d..8c4cf3806 100644
--- a/config/httpd/vhosts.d/ipfire-interface-ssl.conf
+++ b/config/httpd/vhosts.d/ipfire-interface-ssl.conf
@@ -64,9 +64,6 @@
SSLOptions +StdEnvVars
</Directory>
SetEnv HOME /home/nobody
- SetEnvIf User-Agent ".*MSIE.*" \
- nokeepalive ssl-unclean-shutdown \
- downgrade-1.0 force-response-1.0
CustomLog /var/log/httpd/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
diff --git a/config/rootfiles/common/aarch64/lm_sensors b/config/rootfiles/common/aarch64/lm_sensors
index 1346047b9..f10ad80bd 100644
--- a/config/rootfiles/common/aarch64/lm_sensors
+++ b/config/rootfiles/common/aarch64/lm_sensors
@@ -7,8 +7,8 @@ usr/bin/sensors-conf-convert
#usr/include/sensors/sensors.h
#usr/lib/libsensors.a
#usr/lib/libsensors.so
-usr/lib/libsensors.so.4
-usr/lib/libsensors.so.4.4.0
+usr/lib/libsensors.so.5
+usr/lib/libsensors.so.5.0.0
#usr/man/man1/sensors.1
#usr/man/man3/libsensors.3
#usr/man/man5/sensors.conf.5
diff --git a/config/rootfiles/common/armv5tel/lm_sensors b/config/rootfiles/common/armv5tel/lm_sensors
index 998b02e9f..52514f1ab 100644
--- a/config/rootfiles/common/armv5tel/lm_sensors
+++ b/config/rootfiles/common/armv5tel/lm_sensors
@@ -7,8 +7,8 @@ usr/bin/sensors-conf-convert
#usr/include/sensors/sensors.h
#usr/lib/libsensors.a
usr/lib/libsensors.so
-usr/lib/libsensors.so.4
-usr/lib/libsensors.so.4.4.0
+usr/lib/libsensors.so.5
+usr/lib/libsensors.so.5.0.0
#usr/man/man1/sensors.1
#usr/man/man3/libsensors.3
#usr/man/man5/sensors.conf.5
diff --git a/config/rootfiles/common/expat b/config/rootfiles/common/expat
index 81a8ba7a0..365286f85 100644
--- a/config/rootfiles/common/expat
+++ b/config/rootfiles/common/expat
@@ -2,15 +2,22 @@
#usr/include/expat.h
#usr/include/expat_config.h
#usr/include/expat_external.h
+#usr/lib/cmake/expat-2.3.0
+#usr/lib/cmake/expat-2.3.0/expat-config-version.cmake
+#usr/lib/cmake/expat-2.3.0/expat-config.cmake
+#usr/lib/cmake/expat-2.3.0/expat-noconfig.cmake
+#usr/lib/cmake/expat-2.3.0/expat.cmake
#usr/lib/libexpat.a
#usr/lib/libexpat.la
-usr/lib/libexpat.so
+#usr/lib/libexpat.so
usr/lib/libexpat.so.1
-usr/lib/libexpat.so.1.6.2
+usr/lib/libexpat.so.1.7.0
#usr/lib/pkgconfig/expat.pc
-#usr/share/doc/expat-2.2.0
-#usr/share/doc/expat-2.2.0/expat.png
-#usr/share/doc/expat-2.2.0/reference.html
-#usr/share/doc/expat-2.2.0/style.css
-#usr/share/doc/expat-2.2.0/valid-xhtml10.png
-#usr/share/man/man1/xmlwf.1
+#usr/share/doc/expat
+#usr/share/doc/expat-2.3.0
+#usr/share/doc/expat-2.3.0/expat.png
+#usr/share/doc/expat-2.3.0/reference.html
+#usr/share/doc/expat-2.3.0/style.css
+#usr/share/doc/expat-2.3.0/valid-xhtml10.png
+#usr/share/doc/expat/AUTHORS
+#usr/share/doc/expat/changelog
diff --git a/config/rootfiles/common/i586/lm_sensors b/config/rootfiles/common/i586/lm_sensors
index 9936e0466..0f7461d4c 100644
--- a/config/rootfiles/common/i586/lm_sensors
+++ b/config/rootfiles/common/i586/lm_sensors
@@ -7,8 +7,8 @@ usr/bin/sensors-conf-convert
#usr/include/sensors/sensors.h
#usr/lib/libsensors.a
usr/lib/libsensors.so
-usr/lib/libsensors.so.4
-usr/lib/libsensors.so.4.4.0
+usr/lib/libsensors.so.5
+usr/lib/libsensors.so.5.0.0
#usr/man/man1/sensors.1
#usr/man/man3/libsensors.3
#usr/man/man5/sensors.conf.5
diff --git a/config/rootfiles/common/meson b/config/rootfiles/common/meson
index a9c2d7ad0..ac2ef3ccb 100644
--- a/config/rootfiles/common/meson
+++ b/config/rootfiles/common/meson
@@ -1,14 +1,13 @@
#usr/bin/meson
-#usr/lib/python3.8/site-packages/meson-0.56.0-py3.8.egg-info
-#usr/lib/python3.8/site-packages/meson-0.56.0-py3.8.egg-info/PKG-INFO
-#usr/lib/python3.8/site-packages/meson-0.56.0-py3.8.egg-info/SOURCES.txt
-#usr/lib/python3.8/site-packages/meson-0.56.0-py3.8.egg-info/dependency_links.txt
-#usr/lib/python3.8/site-packages/meson-0.56.0-py3.8.egg-info/entry_points.txt
-#usr/lib/python3.8/site-packages/meson-0.56.0-py3.8.egg-info/requires.txt
-#usr/lib/python3.8/site-packages/meson-0.56.0-py3.8.egg-info/top_level.txt
+#usr/lib/python3.8/site-packages/meson-0.57.2-py3.8.egg-info
+#usr/lib/python3.8/site-packages/meson-0.57.2-py3.8.egg-info/PKG-INFO
+#usr/lib/python3.8/site-packages/meson-0.57.2-py3.8.egg-info/SOURCES.txt
+#usr/lib/python3.8/site-packages/meson-0.57.2-py3.8.egg-info/dependency_links.txt
+#usr/lib/python3.8/site-packages/meson-0.57.2-py3.8.egg-info/entry_points.txt
+#usr/lib/python3.8/site-packages/meson-0.57.2-py3.8.egg-info/requires.txt
+#usr/lib/python3.8/site-packages/meson-0.57.2-py3.8.egg-info/top_level.txt
#usr/lib/python3.8/site-packages/mesonbuild
#usr/lib/python3.8/site-packages/mesonbuild/__init__.py
-#usr/lib/python3.8/site-packages/mesonbuild/_pathlib.py
#usr/lib/python3.8/site-packages/mesonbuild/arglist.py
#usr/lib/python3.8/site-packages/mesonbuild/ast
#usr/lib/python3.8/site-packages/mesonbuild/ast/__init__.py
@@ -93,7 +92,12 @@
#usr/lib/python3.8/site-packages/mesonbuild/mconf.py
#usr/lib/python3.8/site-packages/mesonbuild/mdist.py
#usr/lib/python3.8/site-packages/mesonbuild/mesondata.py
-#usr/lib/python3.8/site-packages/mesonbuild/mesonlib.py
+#usr/lib/python3.8/site-packages/mesonbuild/mesonlib
+#usr/lib/python3.8/site-packages/mesonbuild/mesonlib/__init__.py
+#usr/lib/python3.8/site-packages/mesonbuild/mesonlib/platform.py
+#usr/lib/python3.8/site-packages/mesonbuild/mesonlib/posix.py
+#usr/lib/python3.8/site-packages/mesonbuild/mesonlib/universal.py
+#usr/lib/python3.8/site-packages/mesonbuild/mesonlib/win32.py
#usr/lib/python3.8/site-packages/mesonbuild/mesonmain.py
#usr/lib/python3.8/site-packages/mesonbuild/minit.py
#usr/lib/python3.8/site-packages/mesonbuild/minstall.py
@@ -115,11 +119,13 @@
#usr/lib/python3.8/site-packages/mesonbuild/modules/qt.py
#usr/lib/python3.8/site-packages/mesonbuild/modules/qt4.py
#usr/lib/python3.8/site-packages/mesonbuild/modules/qt5.py
+#usr/lib/python3.8/site-packages/mesonbuild/modules/qt6.py
#usr/lib/python3.8/site-packages/mesonbuild/modules/rpm.py
#usr/lib/python3.8/site-packages/mesonbuild/modules/sourceset.py
#usr/lib/python3.8/site-packages/mesonbuild/modules/unstable_cuda.py
#usr/lib/python3.8/site-packages/mesonbuild/modules/unstable_external_project.py
#usr/lib/python3.8/site-packages/mesonbuild/modules/unstable_icestorm.py
+#usr/lib/python3.8/site-packages/mesonbuild/modules/unstable_rust.py
#usr/lib/python3.8/site-packages/mesonbuild/modules/unstable_simd.py
#usr/lib/python3.8/site-packages/mesonbuild/modules/windows.py
#usr/lib/python3.8/site-packages/mesonbuild/mparser.py
@@ -135,10 +141,10 @@
#usr/lib/python3.8/site-packages/mesonbuild/scripts/clangtidy.py
#usr/lib/python3.8/site-packages/mesonbuild/scripts/cleantrees.py
#usr/lib/python3.8/site-packages/mesonbuild/scripts/cmake_run_ctgt.py
-#usr/lib/python3.8/site-packages/mesonbuild/scripts/commandrunner.py
#usr/lib/python3.8/site-packages/mesonbuild/scripts/coverage.py
#usr/lib/python3.8/site-packages/mesonbuild/scripts/delwithsuffix.py
#usr/lib/python3.8/site-packages/mesonbuild/scripts/depfixer.py
+#usr/lib/python3.8/site-packages/mesonbuild/scripts/depscan.py
#usr/lib/python3.8/site-packages/mesonbuild/scripts/dirchanger.py
#usr/lib/python3.8/site-packages/mesonbuild/scripts/externalproject.py
#usr/lib/python3.8/site-packages/mesonbuild/scripts/gettext.py
diff --git a/config/rootfiles/common/x86_64/lm_sensors b/config/rootfiles/common/x86_64/lm_sensors
index 9936e0466..0f7461d4c 100644
--- a/config/rootfiles/common/x86_64/lm_sensors
+++ b/config/rootfiles/common/x86_64/lm_sensors
@@ -7,8 +7,8 @@ usr/bin/sensors-conf-convert
#usr/include/sensors/sensors.h
#usr/lib/libsensors.a
usr/lib/libsensors.so
-usr/lib/libsensors.so.4
-usr/lib/libsensors.so.4.4.0
+usr/lib/libsensors.so.5
+usr/lib/libsensors.so.5.0.0
#usr/man/man1/sensors.1
#usr/man/man3/libsensors.3
#usr/man/man5/sensors.conf.5
diff --git a/config/rootfiles/core/157/filelists/aarch64/lm_sensors b/config/rootfiles/core/157/filelists/aarch64/lm_sensors
new file mode 120000
index 000000000..68ac1285c
--- /dev/null
+++ b/config/rootfiles/core/157/filelists/aarch64/lm_sensors
@@ -0,0 +1 @@
+../../../../common/aarch64/lm_sensors
\ No newline at end of file
diff --git a/config/rootfiles/core/157/filelists/apache2 b/config/rootfiles/core/157/filelists/apache2
new file mode 120000
index 000000000..eef95efa7
--- /dev/null
+++ b/config/rootfiles/core/157/filelists/apache2
@@ -0,0 +1 @@
+../../../common/apache2
\ No newline at end of file
diff --git a/config/rootfiles/core/157/filelists/armv5tel/lm_sensors b/config/rootfiles/core/157/filelists/armv5tel/lm_sensors
new file mode 120000
index 000000000..eec84cd56
--- /dev/null
+++ b/config/rootfiles/core/157/filelists/armv5tel/lm_sensors
@@ -0,0 +1 @@
+../../../../common/armv5tel/lm_sensors
\ No newline at end of file
diff --git a/config/rootfiles/core/157/filelists/collectd b/config/rootfiles/core/157/filelists/collectd
new file mode 120000
index 000000000..871b32f14
--- /dev/null
+++ b/config/rootfiles/core/157/filelists/collectd
@@ -0,0 +1 @@
+../../../common/collectd
\ No newline at end of file
diff --git a/config/rootfiles/core/157/filelists/expat b/config/rootfiles/core/157/filelists/expat
new file mode 120000
index 000000000..e1923cf63
--- /dev/null
+++ b/config/rootfiles/core/157/filelists/expat
@@ -0,0 +1 @@
+../../../common/expat
\ No newline at end of file
diff --git a/config/rootfiles/core/157/filelists/file b/config/rootfiles/core/157/filelists/file
new file mode 120000
index 000000000..0c60e43aa
--- /dev/null
+++ b/config/rootfiles/core/157/filelists/file
@@ -0,0 +1 @@
+../../../common/file
\ No newline at end of file
diff --git a/config/rootfiles/core/157/filelists/i586/lm_sensors b/config/rootfiles/core/157/filelists/i586/lm_sensors
new file mode 120000
index 000000000..17d6c016e
--- /dev/null
+++ b/config/rootfiles/core/157/filelists/i586/lm_sensors
@@ -0,0 +1 @@
+../../../../common/i586/lm_sensors
\ No newline at end of file
diff --git a/config/rootfiles/core/157/filelists/libxcrypt b/config/rootfiles/core/157/filelists/libxcrypt
new file mode 120000
index 000000000..ad93616b5
--- /dev/null
+++ b/config/rootfiles/core/157/filelists/libxcrypt
@@ -0,0 +1 @@
+../../../common/libxcrypt
\ No newline at end of file
diff --git a/config/rootfiles/core/157/filelists/x86_64/lm_sensors b/config/rootfiles/core/157/filelists/x86_64/lm_sensors
new file mode 120000
index 000000000..bb454cec4
--- /dev/null
+++ b/config/rootfiles/core/157/filelists/x86_64/lm_sensors
@@ -0,0 +1 @@
+../../../../common/x86_64/lm_sensors
\ No newline at end of file
diff --git a/config/rootfiles/core/157/update.sh b/config/rootfiles/core/157/update.sh
index b5a10b9b3..4230c8da4 100644
--- a/config/rootfiles/core/157/update.sh
+++ b/config/rootfiles/core/157/update.sh
@@ -103,6 +103,8 @@ ldconfig
/usr/local/bin/filesystem-cleanup
# Start services
+/etc/init.d/apache restart
+/etc/init.d/collectd restart
# remove lm_sensor config after collectd was started
# to reserch sensors at next boot with updated kernel
diff --git a/lfs/cifs-utils b/lfs/cifs-utils
index c3a98f6d6..a363bb83b 100644
--- a/lfs/cifs-utils
+++ b/lfs/cifs-utils
@@ -24,7 +24,7 @@
include Config
-VER = 6.12
+VER = 6.13
THISAPP = cifs-utils-$(VER)
DL_FILE = $(THISAPP).tar.bz2
@@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = cifs-utils
-PAK_VER = 2
+PAK_VER = 3
DEPS =
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = b49b10692bcae7f28669173a472077dd
+$(DL_FILE)_MD5 = 4348921483c530826950e9503b08b033
install : $(TARGET)
diff --git a/lfs/collectd b/lfs/collectd
index 7c9744531..36b507868 100644
--- a/lfs/collectd
+++ b/lfs/collectd
@@ -106,6 +106,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
cd $(DIR_APP) && patch -p1 -i $(DIR_SRC)/src/patches/collectd/silence-openvpn-errors.patch
cd $(DIR_APP) && patch -p1 -i $(DIR_SRC)/src/patches/collectd-4.10.9-xfs-compile-fix.patch
cd $(DIR_APP) && patch -p1 -i $(DIR_SRC)/src/patches/collectd-4.10-libiptc-build-fixes.patch
+ cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/collectd-4.10.9-remove-checks-for-SENSORS_API_VERSION-upper-limit.patch
cd $(DIR_APP) && autoupdate -v configure.in
cd $(DIR_APP) && autoreconf -vfi
cd $(DIR_APP)/libltdl && autoreconf -vfi
diff --git a/lfs/cups b/lfs/cups
index e219bcf1b..e16fcda6d 100644
--- a/lfs/cups
+++ b/lfs/cups
@@ -24,7 +24,7 @@
include Config
-VER = 2.3.3
+VER = 2.3.3op2
THISAPP = cups-$(VER)
DL_FILE = $(THISAPP)-source.tar.gz
@@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/cups-$(VER)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = cups
-PAK_VER = 21
+PAK_VER = 22
DEPS = avahi cups-filters dbus ghostscript krb5 libtiff
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 412434ceefbdf3ec71bc9188a035f589
+$(DL_FILE)_MD5 = 524266752cf243c968921547b18ee594
install : $(TARGET)
diff --git a/lfs/cups-filters b/lfs/cups-filters
index e7640f307..aedaaf927 100644
--- a/lfs/cups-filters
+++ b/lfs/cups-filters
@@ -24,7 +24,7 @@
include Config
-VER = 1.28.7
+VER = 1.28.8
THISAPP = cups-filters-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = cups-filters
-PAK_VER = 4
+PAK_VER = 5
DEPS = cups ghostscript
@@ -46,7 +46,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 2efeed97e11ea5e157c5f4f2e0780fe7
+$(DL_FILE)_MD5 = 914fb53d31ff8500dc25d2e2c68ca5c1
install : $(TARGET)
diff --git a/lfs/expat b/lfs/expat
index 878b59270..92c42bf82 100644
--- a/lfs/expat
+++ b/lfs/expat
@@ -24,7 +24,7 @@
include Config
-VER = 2.2.0
+VER = 2.3.0
THISAPP = expat-$(VER)
DL_FILE = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 2f47841c829facb346eb6e3fab5212e2
+$(DL_FILE)_MD5 = 54ea624caca3f9003cebcab4f0a75c8f
install : $(TARGET)
diff --git a/lfs/file b/lfs/file
index ac2db8ceb..4f166d560 100644
--- a/lfs/file
+++ b/lfs/file
@@ -24,7 +24,7 @@
include Config
-VER = 5.39
+VER = 5.40
THISAPP = file-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 1c450306053622803a25647d88f80f25
+$(DL_FILE)_MD5 = 72540ea1cc8c6e1dee35d6100ec66589
install : $(TARGET)
diff --git a/lfs/libxcrypt b/lfs/libxcrypt
index 8fb937c9b..c452034c9 100644
--- a/lfs/libxcrypt
+++ b/lfs/libxcrypt
@@ -24,7 +24,7 @@
include Config
-VER = 4.4.17
+VER = 4.4.19
THISAPP = libxcrypt-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -45,7 +45,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 12118d098ead971f9a8377cacfdd0da7
+$(DL_FILE)_MD5 = a088bd62745b1e29a9318eb5a44c09f7
install : $(TARGET)
diff --git a/lfs/lm_sensors b/lfs/lm_sensors
index 8403be6e0..42c55d6d6 100644
--- a/lfs/lm_sensors
+++ b/lfs/lm_sensors
@@ -24,10 +24,10 @@
include Config
-VER = 3.4.0
+VER = 3-6-0
-THISAPP = lm_sensors-$(VER)
-DL_FILE = $(THISAPP).tar.bz2
+THISAPP = lm-sensors-$(VER)
+DL_FILE = $(THISAPP).tar.gz
DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = c03675ae9d43d60322110c679416901a
+$(DL_FILE)_MD5 = f60e47b5eb50bbeed48a9f43bb08dd5e
install : $(TARGET)
@@ -72,7 +72,7 @@ $(subst %,%_MD5,$(objects)) :
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
- @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE)
+ @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
cd $(DIR_APP) && make PREFIX=/usr $(MAKETUNING)
cd $(DIR_APP) && make PREFIX=/usr install
@rm -rf $(DIR_APP)
diff --git a/lfs/meson b/lfs/meson
index 13c8c8c46..437b0065a 100644
--- a/lfs/meson
+++ b/lfs/meson
@@ -24,7 +24,7 @@
include Config
-VER = 0.56.0
+VER = 0.57.2
THISAPP = meson-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 67ce2c0c3eab1b8ee9ddaa1c5143e7c0
+$(DL_FILE)_MD5 = 4a07b6d42d7a46a6b6e9604fae7da9aa
install : $(TARGET)
diff --git a/lfs/netsnmpd b/lfs/netsnmpd
index 49eb25f3b..4b6cc4fa6 100644
--- a/lfs/netsnmpd
+++ b/lfs/netsnmpd
@@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = netsnmpd
-PAK_VER = 10
+PAK_VER = 11
DEPS =
diff --git a/src/patches/collectd-4.10.9-remove-checks-for-SENSORS_API_VERSION-upper-limit.patch b/src/patches/collectd-4.10.9-remove-checks-for-SENSORS_API_VERSION-upper-limit.patch
new file mode 100644
index 000000000..ae3cc4c7d
--- /dev/null
+++ b/src/patches/collectd-4.10.9-remove-checks-for-SENSORS_API_VERSION-upper-limit.patch
@@ -0,0 +1,63 @@
+Based on patch from Pavel Rochnyack
+https://git.ipfire.org/?p=thirdparty/collectd.git;a=commitdiff;h=d5a3c020d33cc33ee8049f54c7b4dffcd123bf83
+
+diff -Naur collectd-4.10.9/src/sensors.c.orig collectd-4.10.9/src/sensors.c
+--- collectd-4.10.9/src/sensors.c.orig 2013-04-08 08:26:17.000000000 +0200
++++ collectd-4.10.9/src/sensors.c 2021-04-13 23:17:43.196069346 +0200
+@@ -150,7 +150,7 @@
+ # endif
+ /* #endif SENSORS_API_VERSION < 0x400 */
+
+-#elif (SENSORS_API_VERSION >= 0x400) && (SENSORS_API_VERSION < 0x500)
++#elif (SENSORS_API_VERSION >= 0x400)
+ typedef struct featurelist
+ {
+ const sensors_chip_name *chip;
+@@ -162,11 +162,7 @@
+ # ifndef SENSORS_CONF_PATH
+ # define SENSORS_CONF_PATH "/etc/sensors3.conf"
+ # endif
+-/* #endif (SENSORS_API_VERSION >= 0x400) && (SENSORS_API_VERSION < 0x500) */
+
+-#else /* if SENSORS_API_VERSION >= 0x500 */
+-# error "This version of libsensors is not supported yet. Please report this " \
+- "as bug."
+ #endif
+
+ static const char *conffile = SENSORS_CONF_PATH;
+@@ -394,7 +390,7 @@
+ } /* while sensors_get_detected_chips */
+ /* #endif SENSORS_API_VERSION < 0x400 */
+
+-#elif (SENSORS_API_VERSION >= 0x400) && (SENSORS_API_VERSION < 0x500)
++#elif (SENSORS_API_VERSION >= 0x400)
+ chip_num = 0;
+ while ((chip = sensors_get_detected_chips (NULL, &chip_num)) != NULL)
+ {
+@@ -448,7 +444,7 @@
+ } /* while (subfeature) */
+ } /* while (feature) */
+ } /* while (chip) */
+-#endif /* (SENSORS_API_VERSION >= 0x400) && (SENSORS_API_VERSION < 0x500) */
++#endif /* (SENSORS_API_VERSION >= 0x400) */
+
+ if (first_feature == NULL)
+ {
+@@ -541,7 +537,7 @@
+ } /* for fl = first_feature .. NULL */
+ /* #endif SENSORS_API_VERSION < 0x400 */
+
+-#elif (SENSORS_API_VERSION >= 0x400) && (SENSORS_API_VERSION < 0x500)
++#elif (SENSORS_API_VERSION >= 0x400)
+ for (fl = first_feature; fl != NULL; fl = fl->next)
+ {
+ double value;
+@@ -576,7 +572,7 @@
+
+ sensors_submit (plugin_instance, type, type_instance, value);
+ } /* for fl = first_feature .. NULL */
+-#endif /* (SENSORS_API_VERSION >= 0x400) && (SENSORS_API_VERSION < 0x500) */
++#endif /* (SENSORS_API_VERSION >= 0x400) */
+
+ return (0);
+ } /* int sensors_read */
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2021-04-14 18:22 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-04-14 18:22 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 9f2ee0e9bf4708cb899cd7e3b7bef6af5f18956a Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox