Development August 2020

development@lists.ipfire.org

11 participants
55 discussions

[PATCH 1/3] perl: Add database_countries() function.
by Stefan Schantl 21 Aug '20

21 Aug '20

This function is used to the stored countries of a database, which easily can be assigned to an array. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/perl/Location.xs | 42 ++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 40 insertions(+), 2 deletions(-) diff --git a/src/perl/Location.xs b/src/perl/Location.xs index 5693744..3c347db 100644 --- a/src/perl/Location.xs +++ b/src/perl/Location.xs @@ -6,11 +6,10 @@ #include <stdio.h> #include <string.h> - #include <loc/libloc.h> #include <loc/database.h> #include <loc/network.h> - +#include <loc/country.h> MODULE = Location PACKAGE = Location @@ -119,6 +118,45 @@ get_license(db) OUTPUT: RETVAL +void +database_countries(db) + struct loc_database* db; + + PPCODE: + // Create Database enumerator + struct loc_database_enumerator* enumerator; + int err = loc_database_enumerator_new(&enumerator, db, LOC_DB_ENUMERATE_COUNTRIES); + + if (err) { + croak("Could not create a database enumerator\n"); + } + + // Init and enumerate first country. + struct loc_country* country; + err = loc_database_enumerator_next_country(enumerator, &country); + if (err) { + croak("Could not enumerate next country\n"); + } + + while (country) { + // Extract the country code. + const char* ccode = loc_country_get_code(country); + + // Push country code. + XPUSHs(sv_2mortal(newSVpv(ccode, 2))); + + // Unref country pointer. + loc_country_unref(country); + + // Enumerate next item. + err = loc_database_enumerator_next_country(enumerator, &country); + if (err) { + croak("Could not enumerate next country\n"); + } + } + + loc_database_enumerator_unref(enumerator); + # # Lookup functions # -- 2.20.1

2 3

[PATCH] smt: Fix check to detect if a system is running virtually
by Michael Tremer 21 Aug '20

21 Aug '20

/sys/hypervisor exists when a host has loaded the kvm modules. Fixes: #12472 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- src/initscripts/system/functions | 5 +++++ src/initscripts/system/smt | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/src/initscripts/system/functions b/src/initscripts/system/functions index 30119918c..234b798cf 100644 --- a/src/initscripts/system/functions +++ b/src/initscripts/system/functions @@ -784,6 +784,11 @@ umount_ramdisk() { rm -rf "${path_tmpfs}" } +# Returns true when this system running in a virtual environment +running_on_hypervisor() { + grep -qE "^flags\s+:.*hypervisor" /proc/cpuinfo +} + # https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/identify_ec2_instances.… running_on_ec2() { local uuid diff --git a/src/initscripts/system/smt b/src/initscripts/system/smt index bfa7d57b3..274ec4bba 100644 --- a/src/initscripts/system/smt +++ b/src/initscripts/system/smt @@ -21,7 +21,7 @@ case "${1}" in fi 2>/dev/null # Do not disable SMT inside virtual machines - if [ -d "/sys/hypervisor" ]; then + if running_on_hypervisor; then exit 0 fi -- 2.12.2

1 0

[PATCH] libgcrypt: Update to 1.8.6
by Matthias Fischer 19 Aug '20

19 Aug '20

For details see: https://lists.gnu.org/archive/html/info-gnu/2020-07/msg00001.html Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/libgcrypt | 2 +- lfs/libgcrypt | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt index 50aa47867..b22708afa 100644 --- a/config/rootfiles/common/libgcrypt +++ b/config/rootfiles/common/libgcrypt @@ -6,7 +6,7 @@ #usr/lib/libgcrypt.la #usr/lib/libgcrypt.so usr/lib/libgcrypt.so.20 -usr/lib/libgcrypt.so.20.2.5 +usr/lib/libgcrypt.so.20.2.6 #usr/lib/pkgconfig/libgcrypt.pc #usr/share/aclocal/libgcrypt.m4 #usr/share/info/gcrypt.info diff --git a/lfs/libgcrypt b/lfs/libgcrypt index 57a456e7b..a89cc9156 100644 --- a/lfs/libgcrypt +++ b/lfs/libgcrypt @@ -24,7 +24,7 @@ include Config -VER = 1.8.5 +VER = 1.8.6 THISAPP = libgcrypt-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 348cc4601ca34307fc6cd6c945467743 +$(DL_FILE)_MD5 = e9dfc1e789a2a42f36917c543fcd7862 install : $(TARGET) -- 2.18.0

1 0

[PATCH] libidn: Update to 1.36
by Matthias Fischer 19 Aug '20

19 Aug '20

For details see: https://lists.gnu.org/archive/html/info-gnu/2020-07/msg00004.html Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/libidn | 4 ++-- lfs/libidn | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/common/libidn b/config/rootfiles/common/libidn index 03b12f1fc..7f00a96ea 100644 --- a/config/rootfiles/common/libidn +++ b/config/rootfiles/common/libidn @@ -9,8 +9,8 @@ usr/bin/idn #usr/lib/libidn.a #usr/lib/libidn.la usr/lib/libidn.so -usr/lib/libidn.so.11 -usr/lib/libidn.so.11.6.18 +usr/lib/libidn.so.12 +usr/lib/libidn.so.12.6.1 #usr/lib/pkgconfig/libidn.pc #usr/share/emacs #usr/share/emacs/site-lisp diff --git a/lfs/libidn b/lfs/libidn index fe4fe9e86..b8be721a3 100644 --- a/lfs/libidn +++ b/lfs/libidn @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.34 +VER = 1.36 THISAPP = libidn-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = a829db6cd0b85733017c20a50bf10798 +$(DL_FILE)_MD5 = 813c7b268d1051ca02c3610986126f38 install : $(TARGET) -- 2.18.0

1 0

[PATCH 1/2] libvirt: Ship all CPU maps
by Michael Tremer 19 Aug '20

19 Aug '20

Reported-by: Daniel Weismüller <daniel.weismueller(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/rootfiles/packages/libvirt | 14 +++++++------- lfs/libvirt | 2 +- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/config/rootfiles/packages/libvirt b/config/rootfiles/packages/libvirt index b78b733b8..1c531b820 100644 --- a/config/rootfiles/packages/libvirt +++ b/config/rootfiles/packages/libvirt @@ -455,20 +455,20 @@ usr/share/libvirt/cpu_map/x86_Broadwell-IBRS.xml usr/share/libvirt/cpu_map/x86_Broadwell-noTSX-IBRS.xml usr/share/libvirt/cpu_map/x86_Broadwell-noTSX.xml usr/share/libvirt/cpu_map/x86_Broadwell.xml -#usr/share/libvirt/cpu_map/x86_Cascadelake-Server-noTSX.xml +usr/share/libvirt/cpu_map/x86_Cascadelake-Server-noTSX.xml usr/share/libvirt/cpu_map/x86_Cascadelake-Server.xml usr/share/libvirt/cpu_map/x86_Conroe.xml -#usr/share/libvirt/cpu_map/x86_Cooperlake.xml -#usr/share/libvirt/cpu_map/x86_Dhyana.xml +usr/share/libvirt/cpu_map/x86_Cooperlake.xml +usr/share/libvirt/cpu_map/x86_Dhyana.xml usr/share/libvirt/cpu_map/x86_EPYC-IBPB.xml usr/share/libvirt/cpu_map/x86_EPYC.xml usr/share/libvirt/cpu_map/x86_Haswell-IBRS.xml usr/share/libvirt/cpu_map/x86_Haswell-noTSX-IBRS.xml usr/share/libvirt/cpu_map/x86_Haswell-noTSX.xml usr/share/libvirt/cpu_map/x86_Haswell.xml -#usr/share/libvirt/cpu_map/x86_Icelake-Client-noTSX.xml +usr/share/libvirt/cpu_map/x86_Icelake-Client-noTSX.xml usr/share/libvirt/cpu_map/x86_Icelake-Client.xml -#usr/share/libvirt/cpu_map/x86_Icelake-Server-noTSX.xml +usr/share/libvirt/cpu_map/x86_Icelake-Server-noTSX.xml usr/share/libvirt/cpu_map/x86_Icelake-Server.xml usr/share/libvirt/cpu_map/x86_IvyBridge-IBRS.xml usr/share/libvirt/cpu_map/x86_IvyBridge.xml @@ -483,10 +483,10 @@ usr/share/libvirt/cpu_map/x86_Penryn.xml usr/share/libvirt/cpu_map/x86_SandyBridge-IBRS.xml usr/share/libvirt/cpu_map/x86_SandyBridge.xml usr/share/libvirt/cpu_map/x86_Skylake-Client-IBRS.xml -#usr/share/libvirt/cpu_map/x86_Skylake-Client-noTSX-IBRS.xml +usr/share/libvirt/cpu_map/x86_Skylake-Client-noTSX-IBRS.xml usr/share/libvirt/cpu_map/x86_Skylake-Client.xml usr/share/libvirt/cpu_map/x86_Skylake-Server-IBRS.xml -#usr/share/libvirt/cpu_map/x86_Skylake-Server-noTSX-IBRS.xml +usr/share/libvirt/cpu_map/x86_Skylake-Server-noTSX-IBRS.xml usr/share/libvirt/cpu_map/x86_Skylake-Server.xml usr/share/libvirt/cpu_map/x86_Westmere-IBRS.xml usr/share/libvirt/cpu_map/x86_Westmere.xml diff --git a/lfs/libvirt b/lfs/libvirt index dde05dac9..f41b32e46 100644 --- a/lfs/libvirt +++ b/lfs/libvirt @@ -33,7 +33,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) SUP_ARCH = i586 x86_64 PROG = libvirt -PAK_VER = 21 +PAK_VER = 22 DEPS = libpciaccess libyajl ncat qemu -- 2.12.2

1 1

Core Update 149
by Michael Tremer 19 Aug '20

19 Aug '20

Hello boys and girls, I would like to start a little conversation about Core Update 149. As you might have seen already, a large number of patches went into it and it updates the whole toolchain and brings many new features! Yay! Here is an excerpt from the change log: IPFire is based on glibc 2.32, the standard library for all C programs, and GCC 10.2, the GNU Compiler Collection. Both bring various bug fixes and improvements. The most notable change is that we have decided to remove a mitigation Spectre 2 which caused that user space programs in IPFire were running about 50% slower due to using a microcode feature which is called "retpoline". Those "return trampolines" disable the branch prediction engine in out-of-order processors which was considered to help with mitigating leaking any information from any unaccessible kernel space. This is however not as effective as thought and massively decreases performance in the user land which mainly affects features like our Intrusion Prevention System, Web Proxy and URL filter. We still use this mechanism to avoid leaking any kernel memory into the user space. On top of that, we have updated various tools used for building IPFire as well as core libraries. We have also enabled a new GCC feature called "stack clash protection" on x86_64 and aarch64 which adds additional checks to mitigate exploits and we have enabled "CF protection" which hardens all software against attackers gaining control over a program flow and circumventing security checks like password or signature validation. https://blog.ipfire.org/post/ipfire-2-25-core-update-149-is-available-for-t… (not published, yet) To make sure that this is not introducing any issues, I would like to ask everyone to install this as soon as they can. We have also updated GRUB which should run fine - Arne performed lots of testing - but I would like to know if there are still some corner cases on obscure updates that might render IPFire non-bootable after the update has been applied. We are going to release Core Update 148 next week and I would like to merge Core Update 149 into master the same day. That way we have a fresh update available for our community to test :) Please report any feedback here or on BZ. Happy testing! -Michael

1 0

[PATCH] rsync: Update to 3.2.3
by Matthias Fischer 18 Aug '20

18 Aug '20

For details see: https://download.samba.org/pub/rsync/NEWS#3.2.3 Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/rsync | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/rsync b/lfs/rsync index 092b0187b..3195438a4 100644 --- a/lfs/rsync +++ b/lfs/rsync @@ -24,7 +24,7 @@ include Config -VER = 3.2.1 +VER = 3.2.3 THISAPP = rsync-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = rsync -PAK_VER = 12 +PAK_VER = 13 DEPS = @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = d2d7f1c6b07a1434203a2a2406e0bddd +$(DL_FILE)_MD5 = 209f8326f5137d8817a6276d9577a2f1 install : $(TARGET) -- 2.18.0

1 0

[PATCH] zstd 1.4.5: Deleted obsolete files from '/src/paks/'
by Matthias Fischer 18 Aug '20

18 Aug '20

No longer needed => deleted because of: https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=c67ff7d72c2232b6994e1ff… Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- src/paks/zstd/install.sh | 25 ------------------------- src/paks/zstd/uninstall.sh | 25 ------------------------- src/paks/zstd/update.sh | 26 -------------------------- 3 files changed, 76 deletions(-) delete mode 100644 src/paks/zstd/install.sh delete mode 100644 src/paks/zstd/uninstall.sh delete mode 100644 src/paks/zstd/update.sh diff --git a/src/paks/zstd/install.sh b/src/paks/zstd/install.sh deleted file mode 100644 index 3fe8bc67e..000000000 --- a/src/paks/zstd/install.sh +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/bash -############################################################################ -# # -# This file is part of the IPFire Firewall. # -# # -# IPFire is free software; you can redistribute it and/or modify # -# it under the terms of the GNU General Public License as published by # -# the Free Software Foundation; either version 2 of the License, or # -# (at your option) any later version. # -# # -# IPFire is distributed in the hope that it will be useful, # -# but WITHOUT ANY WARRANTY; without even the implied warranty of # -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # -# GNU General Public License for more details. # -# # -# You should have received a copy of the GNU General Public License # -# along with IPFire; if not, write to the Free Software # -# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # -# # -# Copyright (C) 2009 IPFire-Team <info(a)ipfire.org>. # -# # -############################################################################ -# -. /opt/pakfire/lib/functions.sh -extract_files diff --git a/src/paks/zstd/uninstall.sh b/src/paks/zstd/uninstall.sh deleted file mode 100644 index f786519d6..000000000 --- a/src/paks/zstd/uninstall.sh +++ /dev/null @@ -1,25 +0,0 @@ -#!/bin/bash -############################################################################ -# # -# This file is part of the IPFire Firewall. # -# # -# IPFire is free software; you can redistribute it and/or modify # -# it under the terms of the GNU General Public License as published by # -# the Free Software Foundation; either version 2 of the License, or # -# (at your option) any later version. # -# # -# IPFire is distributed in the hope that it will be useful, # -# but WITHOUT ANY WARRANTY; without even the implied warranty of # -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # -# GNU General Public License for more details. # -# # -# You should have received a copy of the GNU General Public License # -# along with IPFire; if not, write to the Free Software # -# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # -# # -# Copyright (C) 2009 IPFire-Team <info(a)ipfire.org>. # -# # -############################################################################ -# -. /opt/pakfire/lib/functions.sh -remove_files diff --git a/src/paks/zstd/update.sh b/src/paks/zstd/update.sh deleted file mode 100644 index 89c40d0d7..000000000 --- a/src/paks/zstd/update.sh +++ /dev/null @@ -1,26 +0,0 @@ -#!/bin/bash -############################################################################ -# # -# This file is part of the IPFire Firewall. # -# # -# IPFire is free software; you can redistribute it and/or modify # -# it under the terms of the GNU General Public License as published by # -# the Free Software Foundation; either version 2 of the License, or # -# (at your option) any later version. # -# # -# IPFire is distributed in the hope that it will be useful, # -# but WITHOUT ANY WARRANTY; without even the implied warranty of # -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # -# GNU General Public License for more details. # -# # -# You should have received a copy of the GNU General Public License # -# along with IPFire; if not, write to the Free Software # -# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # -# # -# Copyright (C) 2007 IPFire-Team <info(a)ipfire.org>. # -# # -############################################################################ -# -. /opt/pakfire/lib/functions.sh -./uninstall.sh -./install.sh -- 2.18.0

2 1

[PATCH] tshark: Update to version 3.2.6
by Erik Kapfer 18 Aug '20

18 Aug '20

The version jump from 3.2.3 to 3.2.6 includes several changes. 3.2.4 includes only bugfixes. 3.2.5 includes bugfixes and updated protocols. 3.2.6 includes also bugfixes and updated protocols. For a full overview, the release notes can be found in here --> https://www.wireshark.org/docs/relnotes/ . Signed-off-by: Erik Kapfer <ummeegge(a)ipfire.org> --- config/rootfiles/packages/tshark | 4 ++-- lfs/tshark | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/tshark b/config/rootfiles/packages/tshark index 5b7824a9f..c5081989c 100644 --- a/config/rootfiles/packages/tshark +++ b/config/rootfiles/packages/tshark @@ -612,10 +612,10 @@ usr/bin/tshark #usr/include/wireshark/wsutil/xtea.h #usr/lib/libwireshark.so usr/lib/libwireshark.so.13 -usr/lib/libwireshark.so.13.0.3 +usr/lib/libwireshark.so.13.0.6 #usr/lib/libwiretap.so usr/lib/libwiretap.so.10 -usr/lib/libwiretap.so.10.0.3 +usr/lib/libwiretap.so.10.0.6 #usr/lib/libwsutil.so usr/lib/libwsutil.so.11 usr/lib/libwsutil.so.11.0.0 diff --git a/lfs/tshark b/lfs/tshark index c32fb181e..7b124ef5b 100644 --- a/lfs/tshark +++ b/lfs/tshark @@ -24,7 +24,7 @@ include Config -VER = 3.2.3 +VER = 3.2.6 THISAPP = wireshark-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -33,7 +33,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tshark DEPS = krb5 -PAK_VER = 6 +PAK_VER = 7 ############################################################################### # Top-level Rules @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = ff732e4586eebeb61a41abe2fcba7431 +$(DL_FILE)_MD5 = f14ef8d73fa5f30b57fec51283e6b73e install : $(TARGET) -- 2.20.1

1 0

[PATCH] Postfix: update to 3.5.6
by Peter Müller 17 Aug '20

17 Aug '20

Please refer to http://www.postfix.org/announcements/postfix-3.5.6.html for release announcements. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/postfix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/postfix b/lfs/postfix index e5f812d8e..d75f2a949 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -24,7 +24,7 @@ include Config -VER = 3.5.4 +VER = 3.5.6 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 25 +PAK_VER = 26 DEPS = @@ -66,7 +66,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 9a781213330e9aa9d0ccd81ea45ed598 +$(DL_FILE)_MD5 = c5819f40ffbe22bc785a30905b1f1c7a install : $(TARGET) -- 2.26.2

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development August 2020