Development August 2019

development@lists.ipfire.org

7 participants
23 discussions

[PATCH] BUG11695: Adding/editing rules with preset broken
by Alexander Marx 15 Jul '21

15 Jul '21

added another check to fill same ports in source and destination when a custom service is selected. Signed-off-by: Alexander Marx <alexander.marx(a)ipfire.org> Reported-by: erik(a)vanlinsteeict.nl --- html/cgi-bin/firewall.cgi | 1 + 1 file changed, 1 insertion(+) diff --git a/html/cgi-bin/firewall.cgi b/html/cgi-bin/firewall.cgi index 499f279..d17afab 100644 --- a/html/cgi-bin/firewall.cgi +++ b/html/cgi-bin/firewall.cgi @@ -757,6 +757,7 @@ sub checkrule } } if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'dnatport'} eq ''){$fwdfwsettings{'dnatport'}=$custsrvport;} + if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'grp3'} eq 'cust_srv'){$fwdfwsettings{'dnatport'}=$custsrvport;} } #check if DNAT port is multiple if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'dnatport'} ne ''){ -- 2.7.4

3 2

Improving build performance (on slow storage)
by Michael Tremer 18 Sep '19

18 Sep '19

Hello, I just wanted to post you an update about the build system which we have recently merged. The whole build process is primarily CPU bound and secondarily IO bound. Some builders have by definition slow storage (the ARM SBCs for example), but also for other reason it does not make sense to run the build on persistent storage. We can keep it in RAM instead which makes accessing files a lot faster and saves write cycles on the media. Therefore, the make.sh build script is mounting /usr/src in the build environment as a ramdisk. All source will be extracted there and the build will be performed. After the build is done, the whole ramdisk will be destroyed again. This feature is automatically enabled on all build systems which have 4GB of RAM or more. You can manually disable it with the ENABLE_RAMDISK=off switch in .config. I hope this brief email makes sense. If you have any questions, feel free to ask. Best, -Michael

3 8

[PATCH 1/2] WUI log-section Mail: bugfix for dmi
by Alex Koch 01 Sep '19

01 Sep '19

The prefix for dmi in /var/log/mail seems to have changed from "dmi[<PID>]: " to "dmi: ". This results in a bug where no lines are being shown at all in the WUI. Signed-off-by: Alex Koch <ipfire(a)starkstromkonsument.de> --- html/cgi-bin/logs.cgi/log.dat | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/logs.cgi/log.dat b/html/cgi-bin/logs.cgi/log.dat index 061525382..98b09041a 100644 --- a/html/cgi-bin/logs.cgi/log.dat +++ b/html/cgi-bin/logs.cgi/log.dat @@ -57,7 +57,7 @@ my %sections = ( 'cron' => '(fcron\[.*\]: )', 'ddns' => '(ddns\[\d+\]:)', 'dhcp' => '(dhcpd: )', - 'dma' => '(dma\[.*\]: )', + 'dma' => '(dma: |dma\[.*\]: )', 'guardian' => '(guardian\[.*\]: )', 'ipfire' => '(ipfire: )', 'ipsec' => '(ipsec_[\w_]+: |pluto\[.*\]: |charon: |vpnwatch: )', -- 2.17.1

2 3

[PATCH] BUG 12036: logwatch now starts at 00:05am to avoid conflicts with logrotate
by Matthias Fischer 31 Aug '19

31 Aug '19

Problem: Every once in a while 'logwatch' creates an empty log file with 0 Bytes. Probably 'logwatch' conflicts with the logrotate job which is launched at the same time. To avoid this in the future, the start of logwatch was postponed for four minutes. Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/cron/crontab | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/cron/crontab b/config/cron/crontab index 4561f4a24..56801394e 100644 --- a/config/cron/crontab +++ b/config/cron/crontab @@ -31,7 +31,7 @@ HOME=/ */5 * * * * [ -f "/var/ipfire/red/active" ] && /usr/bin/ddns update-all # Logwatch -01 0 * * * /usr/local/bin/logwatch > /var/log/logwatch/`date -I -d yesterday`; \ +05 0 * * * /usr/local/bin/logwatch > /var/log/logwatch/`date -I -d yesterday`; \ LOGWATCH_KEEP=$(sed -ne 's/^LOGWATCH_KEEP=$[0-9]\+$$/\1/p' /var/ipfire/logging/settings); \ find /var/log/logwatch/ -ctime +${LOGWATCH_KEEP=56} -exec rm -f '{}' ';' -- 2.18.0

1 0

IPFire Core 135 testing
by Kienker, Fred 31 Aug '19

31 Aug '19

Just reporting - we have been through our testing cycle for Core 135 and have found no issues to report. We have seen better stability in unbound in C135, for reasons unknown, compared to C134. Eagerly anticipating the official release. Best regards, Fred Kienker

3 4

[PATCH] unbound: Update to 1.9.3
by Matthias Fischer 31 Aug '19

31 Aug '19

For details see: https://nlnetlabs.nl/pipermail/unbound-users/2019-August/011765.html Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/unbound | 2 +- lfs/unbound | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 7bab5a7dc..78a741377 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.1.2 +usr/lib/libunbound.so.8.1.3 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/lfs/unbound b/lfs/unbound index e017dcd78..f81a4166d 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.9.2 +VER = 1.9.3 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 244e10977d1453dff669caa3c0efba18 +$(DL_FILE)_MD5 = fe1af630616d7d88d621e300fb87e5d5 install : $(TARGET) -- 2.18.0

1 0

[PATCH 1/2] freeradius: Update to 3.0.19
by Michael Tremer 28 Aug '19

28 Aug '19

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/rootfiles/packages/freeradius | 5 +++++ lfs/freeradius | 10 +++++----- 2 files changed, 10 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/freeradius b/config/rootfiles/packages/freeradius index 9cbd214ac..c193dcabd 100644 --- a/config/rootfiles/packages/freeradius +++ b/config/rootfiles/packages/freeradius @@ -1,3 +1,4 @@ +etc/logrotate.d/freeradius etc/raddb #etc/raddb/README.rst #etc/raddb/certs @@ -135,6 +136,7 @@ etc/raddb #etc/raddb/mods-config/sql/ippool/mysql/queries.conf #etc/raddb/mods-config/sql/ippool/mysql/schema.sql #etc/raddb/mods-config/sql/ippool/postgresql +#etc/raddb/mods-config/sql/ippool/postgresql/procedure.sql #etc/raddb/mods-config/sql/ippool/postgresql/queries.conf #etc/raddb/mods-config/sql/ippool/postgresql/schema.sql #etc/raddb/mods-config/sql/ippool/sqlite @@ -327,6 +329,7 @@ usr/bin/smbencrypt #usr/include/freeradius/rfc7499.h #usr/include/freeradius/rfc7930.h #usr/include/freeradius/rfc8045.h +#usr/include/freeradius/rfc8559.h #usr/include/freeradius/sha1.h #usr/include/freeradius/stats.h #usr/include/freeradius/sysutmp.h @@ -792,6 +795,7 @@ usr/share/freeradius #usr/share/freeradius/dictionary.paloalto #usr/share/freeradius/dictionary.patton #usr/share/freeradius/dictionary.perle +#usr/share/freeradius/dictionary.pfsense #usr/share/freeradius/dictionary.propel #usr/share/freeradius/dictionary.prosoft #usr/share/freeradius/dictionary.proxim @@ -832,6 +836,7 @@ usr/share/freeradius #usr/share/freeradius/dictionary.rfc7499 #usr/share/freeradius/dictionary.rfc7930 #usr/share/freeradius/dictionary.rfc8045 +#usr/share/freeradius/dictionary.rfc8559 #usr/share/freeradius/dictionary.riverbed #usr/share/freeradius/dictionary.riverstone #usr/share/freeradius/dictionary.roaringpenguin diff --git a/lfs/freeradius b/lfs/freeradius index 4afe55f18..daa8a7915 100644 --- a/lfs/freeradius +++ b/lfs/freeradius @@ -24,15 +24,15 @@ include Config -VER = 3.0.18 +VER = 3.0.19 THISAPP = freeradius-server-$(VER) -DL_FILE = $(THISAPP).tar.bz2 +DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = freeradius -PAK_VER = 8 +PAK_VER = 9 DEPS = "samba" @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 05f0c8c7ac79659f808ff31751daa857 +$(DL_FILE)_MD5 = 3e4048353931eda01f03ef89039f0651 install : $(TARGET) @@ -80,7 +80,7 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) - @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/freeradius-no-buildtime-cert-gen.patch $(UPDATE_AUTOMAKE) cd $(DIR_APP) && \ -- 2.20.1

1 1

Translating IPFire with Weblate
by Michael Tremer 26 Aug '19

26 Aug '19

Hello boys and girls, I would like to pre-announce that I have installed a new translation system. This is a problem that has been bothering me for quite a while because people in many places around the world are using IPFire and they should be able to use it in a language that is most easy for them. However, of course nobody of us can translate to all those languages ourselves. So we need the help from our community! Editing files is boring, but everyone likes a great webUI. In the past we have been using Transifex which was very nice, but has gone proprietary. Then I tried Pootle, but that was a bit of a pain to run and I think I never set it up all the way, because it just was too buggy. And since we are busy reinstalling all the things, it was a good time to review everything again. This time, I tried Weblate: https://translate.ipfire.org/ This is a Django app and has builtin support for Git. Importing the repositories was quick and easy. I have not idea how to programmatically get it back into the repositories again because I do not want to give that application permissions to push into our repositories. So if anyone has some free time and write a script to download the PO files I would appreciate that very much :) Apart from that, it would be nice for you guys to log in, test this - I did not spend too much time on that yet. And if it is all alright, I want to announce it to our community. Best, -Michael

1 0

[PATCH] dhcpcd: Update to 8.0.3
by Matthias Fischer 23 Aug '19

23 Aug '19

https://roy.marples.name/blog/dhcpcd-8-0-3-released "DHCP: Work with IP headers with options script: Assert that env string are correctly terminated script: Terminate env strings with no value script: Don't attempt to use an invalid env string route: Fix NULL deference error when using static routes ARP: Respect IFF_NOARP DHCP: Add support for ARPHRD_NONE interfaces DHCP: Allow full DHCP support for PtP interfaces, but not by default DragonFlyBSD: 500704 announces IPv6 address flag changes control: sends correct buffer to listeners" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/dhcpcd | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/dhcpcd b/lfs/dhcpcd index 20501f22b..18d8ee4b7 100644 --- a/lfs/dhcpcd +++ b/lfs/dhcpcd @@ -24,7 +24,7 @@ include Config -VER = 8.0.2 +VER = 8.0.3 THISAPP = dhcpcd-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = c0375a1f725f1c191b43af60e4f7175b +$(DL_FILE)_MD5 = 182d506dd88773aec017d93a22d0f025 install : $(TARGET) -- 2.18.0

1 0

[PATCH] clamav: Update to 0.101.4
by Matthias Fischer 23 Aug '19

23 Aug '19

For details see: https://blog.clamav.net/2019/08/clamav-01014-security-patch-release-has.html "An out of bounds write was possible within ClamAV's NSIS bzip2 library when attempting decompression in cases where the number of selectors exceeded the max limit set by the library (CVE-2019-12900). The issue has been resolved by respecting that limit. Thanks to Martin Simmons for reporting the issue here. The zip bomb vulnerability mitigated in 0.101.3 has been assigned the CVE identifier CVE-2019-12625. Unfortunately, a workaround for the zip-bomb mitigation was immediately identified. To remediate the zip-bomb scan time issue, a scan time limit has been introduced in 0.101.4. This limit now resolves ClamAV's vulnerability to CVE-2019-12625." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/clamav | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/clamav b/lfs/clamav index d6f8164b7..aa7715763 100644 --- a/lfs/clamav +++ b/lfs/clamav @@ -24,7 +24,7 @@ include Config -VER = 0.101.3 +VER = 0.101.4 THISAPP = clamav-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = clamav -PAK_VER = 45 +PAK_VER = 46 DEPS = "" @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 1981c5bd299c1f3cbf3f74095a00524c +$(DL_FILE)_MD5 = b6e6891035ce3e3f35830154bd280311 install : $(TARGET) -- 2.18.0

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development August 2019