Development August 2022

development@lists.ipfire.org

13 participants
74 discussions

[PATCH] update.sh: clean out old collectd process statistics
by Jon Murphy 02 Aug '22

02 Aug '22

- processes-mysqld - processes-snort - processes-rtorrent - processes-asterisk - processes-java - processes-spamd Signed-off-by: Jon Murphy <jon.murphy(a)ipfire.org> --- config/rootfiles/core/170/update.sh | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/config/rootfiles/core/170/update.sh b/config/rootfiles/core/170/update.sh index cbac8572e..ec6c5ad09 100644 --- a/config/rootfiles/core/170/update.sh +++ b/config/rootfiles/core/170/update.sh @@ -170,6 +170,20 @@ sed -i /etc/collectd.conf \ -e "/LoadPlugin entropy/d" /etc/init.d/collectd restart +# Stop collectd Sevice +/etc/init.d/collectd stop + +# Cleanup old collectd statistics... +rm -rf /var/log/rrd/collectd/localhost/processes-mysqld +rm -rf /var/log/rrd/collectd/localhost/processes-snort +rm -rf /var/log/rrd/collectd/localhost/processes-rtorrent +rm -rf /var/log/rrd/collectd/localhost/processes-asterisk +rm -rf /var/log/rrd/collectd/localhost/processes-java +rm -rf /var/log/rrd/collectd/localhost/processes-spamd +# +# Start collectd +/etc/init.d/collectd start + # Start services /etc/init.d/rc.d/unbound start /etc/init.d/rc.d/suricata start -- 2.30.2

3 5

[PATCH] parted: Update LFS to reflect that parted is no longer an addon
by Adolf Belka 02 Aug '22

02 Aug '22

- In 2018 parted was moved from being an addon to being a core program - The rootfile was moved from rootfiles/packages/ to rootfiles/common/ - The LFS was not updated to remove the PAK_VER etc elements. - This patch adjusts the LFS file to be in line with being a core program Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/parted | 9 --------- 1 file changed, 9 deletions(-) diff --git a/lfs/parted b/lfs/parted index 78914aa98..ced655af9 100644 --- a/lfs/parted +++ b/lfs/parted @@ -34,12 +34,6 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) -PROG = parted -PAK_VER = 5 - -DEPS = - -SERVICES = ############################################################################### # Top-level Rules @@ -59,9 +53,6 @@ download :$(patsubst %,$(DIR_DL)/%,$(objects)) b2 : $(subst %,%_BLAKE2,$(objects)) -dist: - @$(PAK) - ############################################################################### # Downloading, checking, b2sum ############################################################################### -- 2.37.1

2 1

[PATCH] openvmtools: Update to 12.0.5
by Peter Müller 02 Aug '22

02 Aug '22

Please refer to https://github.com/vmware/open-vm-tools/releases/tag/stable-12.0.5 for the release announcement of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/openvmtools | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/openvmtools b/lfs/openvmtools index 1207f9e2e..5a12c42a1 100644 --- a/lfs/openvmtools +++ b/lfs/openvmtools @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Open Virtual Machine Tools -VER = stable-12.0.0 +VER = stable-12.0.5 THISAPP = open-vm-tools-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -35,7 +35,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP)/open-vm-tools TARGET = $(DIR_INFO)/$(THISAPP) SUP_ARCH = x86_64 PROG = openvmtools -PAK_VER = 9 +PAK_VER = 10 DEPS = libtirpc @@ -51,7 +51,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 7958d43567c8620ab95ded57f8d7f472a7a361c2734b384a7443cede57f73a3f9f77f0949c5e6995635c5475b12405f7b8699c4dc0d81654767b3fd7102c1fc2 +$(DL_FILE)_BLAKE2 = 298a28bfdcb5791851392a0a8d1c301c528fa7f5eb239dfd9c5b6434c10ed90196fa1583d228ab0ef22e7b342cb9b1b65639b303b44b228ddca0d16bda54b437 install : $(TARGET) -- 2.35.3

1 0

[PATCH] ninja: Update to 1.11.0
by Peter Müller 02 Aug '22

02 Aug '22

https://groups.google.com/g/ninja-build/c/R2oCyDctDf8/m/-U94Y5I8AgAJ appears to be the only release note-alike source for this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/ninja | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/ninja b/lfs/ninja index 596f56018..60c08ea96 100644 --- a/lfs/ninja +++ b/lfs/ninja @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.10.2 +VER = 1.11.0 THISAPP = ninja-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b8160ca6d58cfa0edb93d16b7dfb9776d290c42e54b33b78cd925f167c80f8794e4cc30af984a526b8263c7904a734cf0770d3c27283d21d02f18d3e2eb70032 +$(DL_FILE)_BLAKE2 = 71c8b6cf9524bdc11cf73f7e761f0d7deef2498a970c1439c10cc7d361e31fed1e3b54bcb185f3c7ed041f15704851a96e42560058af61b8a5df6e918d52ebf3 install : $(TARGET) -- 2.35.3

1 0

[PATCH 1/2] fmt: Update to 9.0.0
by Peter Müller 02 Aug '22

02 Aug '22

Please refer to https://github.com/fmtlib/fmt/releases/tag/9.0.0 for the release announcement of this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/rootfiles/common/fmt | 6 +++--- lfs/fmt | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/common/fmt b/config/rootfiles/common/fmt index d9067f14a..8fbb8a7bd 100644 --- a/config/rootfiles/common/fmt +++ b/config/rootfiles/common/fmt @@ -6,11 +6,11 @@ #usr/include/fmt/core.h #usr/include/fmt/format-inl.h #usr/include/fmt/format.h -#usr/include/fmt/locale.h #usr/include/fmt/os.h #usr/include/fmt/ostream.h #usr/include/fmt/printf.h #usr/include/fmt/ranges.h +#usr/include/fmt/std.h #usr/include/fmt/xchar.h #usr/lib/cmake/fmt #usr/lib/cmake/fmt/fmt-config-version.cmake @@ -18,6 +18,6 @@ #usr/lib/cmake/fmt/fmt-targets-release.cmake #usr/lib/cmake/fmt/fmt-targets.cmake #usr/lib/libfmt.so -#usr/lib/libfmt.so.8 -#usr/lib/libfmt.so.8.1.1 +#usr/lib/libfmt.so.9 +#usr/lib/libfmt.so.9.0.0 #usr/lib/pkgconfig/fmt.pc diff --git a/lfs/fmt b/lfs/fmt index 754de03b1..89bcc9818 100644 --- a/lfs/fmt +++ b/lfs/fmt @@ -24,7 +24,7 @@ include Config -VER = 8.1.1 +VER = 9.0.0 THISAPP = fmt-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 8f3eafd72c0eff62cfcf26a8a37e4d89c8f4a2cec6e427e3ea8d0de3010dd6e5e45ce4486335d3b433308a967915b38ca4d422d789ceda4196153329128056b9 +$(DL_FILE)_BLAKE2 = 1455aec5bec73c56d4d4074ae034176143a3f6171aa60505ee48cbc4b6c66e0de4b5600c4a91e2d16073a285f98b3e5b5ee89b4061e49578c005bccc04855045 install : $(TARGET) -- 2.35.3

1 1

[PATCH v2 01/11] borgbackup: Fix Bug#12611 by adding fuse mount capability with pyfuse3
by Adolf Belka 02 Aug '22

02 Aug '22

- The addition of pyfuse3 requires a total of 11 python3 module dependencies and the addition of python3-Cython during the build - The other dependencies etc are submitted in the rest of this patch series. Fixes: Bug#12611 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/borgbackup | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/borgbackup b/lfs/borgbackup index c2faaac21..9c761eac4 100644 --- a/lfs/borgbackup +++ b/lfs/borgbackup @@ -33,9 +33,9 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = borgbackup -PAK_VER = 12 +PAK_VER = 13 -DEPS = python3-pkgconfig python3-msgpack python3-packaging +DEPS = python3-pkgconfig python3-msgpack python3-packaging python3-pyfuse3 SERVICES = -- 2.37.1

1 10

[PATCH] unbound: Update to 1.16.2
by Matthias Fischer 01 Aug '22

01 Aug '22

For details see: https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-2 "Features Merge #718: Introduce infra-cache-max-rtt option to config max retransmit timeout. Bug Fixes Fix the novel ghost domain issues CVE-2022-30698 and CVE-2022-30699. Fix bug introduced in 'improve val_sigcrypt.c::algo_needs_missing for one loop pass'. Merge PR #668 from Cristian Rodríguez: Set IP_BIND_ADDRESS_NO_PORT on outbound tcp sockets. Fix verbose EDE error printout. Fix dname count in sldns parse type descriptor for SVCB and HTTPS. For windows crosscompile, fix setting the IPV6_MTU socket option equivalent (IPV6_USER_MTU); allows cross compiling with latest cross-compiler versions. Merge PR 714: Avoid treat normal hosts as unresponsive servers. And fixup the lock code. iana portlist update. Update documentation for 'outbound-msg-retry:'. Tests for ghost domain fixes." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/unbound | 2 +- lfs/unbound | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 20fe72a57..7fc4f191a 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.1.17 +usr/lib/libunbound.so.8.1.18 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/lfs/unbound b/lfs/unbound index 539ea5005..5a3c70caf 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.16.1 +VER = 1.16.2 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 722e2d88f66f35459b71cd339f451bf803c836827f9f74540c4ae500b7f682f0e8c89bda34915fb8df289cc524486fab2a04018717e1ae7ad62006be68af1cad +$(DL_FILE)_BLAKE2 = 2f7f119d12807ff5c000fd500be72a0825614da3e1f079f9b8d15a651bda2fa0b41599a55c6f76b17ff56120aa61e48042469063f08dd199333520172ca16750 install : $(TARGET) -- 2.25.1

2 1

[PATCH] linux: Update rootfiles to reflect dropped support of dprintk
by Peter Müller 01 Aug '22

01 Aug '22

See: 883e29630cb1f5b16c8508b585c32d7f54a86e1a Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- config/rootfiles/common/aarch64/linux | 2 -- config/rootfiles/common/armv6l/linux | 2 -- config/rootfiles/common/x86_64/linux | 2 -- 3 files changed, 6 deletions(-) diff --git a/config/rootfiles/common/aarch64/linux b/config/rootfiles/common/aarch64/linux index b793caf08..d07437e44 100644 --- a/config/rootfiles/common/aarch64/linux +++ b/config/rootfiles/common/aarch64/linux @@ -9005,7 +9005,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/NFSD_V4_SECURITY_LABEL #lib/modules/KVER-ipfire/build/include/config/NFS_ACL_SUPPORT #lib/modules/KVER-ipfire/build/include/config/NFS_COMMON -#lib/modules/KVER-ipfire/build/include/config/NFS_DEBUG #lib/modules/KVER-ipfire/build/include/config/NFS_DISABLE_UDP_SUPPORT #lib/modules/KVER-ipfire/build/include/config/NFS_FS #lib/modules/KVER-ipfire/build/include/config/NFS_FSCACHE @@ -10101,7 +10100,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/SUNGEM_PHY #lib/modules/KVER-ipfire/build/include/config/SUNRPC #lib/modules/KVER-ipfire/build/include/config/SUNRPC_BACKCHANNEL -#lib/modules/KVER-ipfire/build/include/config/SUNRPC_DEBUG #lib/modules/KVER-ipfire/build/include/config/SUNRPC_GSS #lib/modules/KVER-ipfire/build/include/config/SUNXI_CCU #lib/modules/KVER-ipfire/build/include/config/SUNXI_MBUS diff --git a/config/rootfiles/common/armv6l/linux b/config/rootfiles/common/armv6l/linux index c3411fe8d..0b6503f26 100644 --- a/config/rootfiles/common/armv6l/linux +++ b/config/rootfiles/common/armv6l/linux @@ -9403,7 +9403,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/NFSD_V4_SECURITY_LABEL #lib/modules/KVER-ipfire/build/include/config/NFS_ACL_SUPPORT #lib/modules/KVER-ipfire/build/include/config/NFS_COMMON -#lib/modules/KVER-ipfire/build/include/config/NFS_DEBUG #lib/modules/KVER-ipfire/build/include/config/NFS_DISABLE_UDP_SUPPORT #lib/modules/KVER-ipfire/build/include/config/NFS_FS #lib/modules/KVER-ipfire/build/include/config/NFS_FSCACHE @@ -10563,7 +10562,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/SUNGEM_PHY #lib/modules/KVER-ipfire/build/include/config/SUNRPC #lib/modules/KVER-ipfire/build/include/config/SUNRPC_BACKCHANNEL -#lib/modules/KVER-ipfire/build/include/config/SUNRPC_DEBUG #lib/modules/KVER-ipfire/build/include/config/SUNRPC_GSS #lib/modules/KVER-ipfire/build/include/config/SUNXI_CCU #lib/modules/KVER-ipfire/build/include/config/SUNXI_MBUS diff --git a/config/rootfiles/common/x86_64/linux b/config/rootfiles/common/x86_64/linux index 00e6d1562..4e0f1f200 100644 --- a/config/rootfiles/common/x86_64/linux +++ b/config/rootfiles/common/x86_64/linux @@ -9090,7 +9090,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/NFSD_V4_SECURITY_LABEL #lib/modules/KVER-ipfire/build/include/config/NFS_ACL_SUPPORT #lib/modules/KVER-ipfire/build/include/config/NFS_COMMON -#lib/modules/KVER-ipfire/build/include/config/NFS_DEBUG #lib/modules/KVER-ipfire/build/include/config/NFS_DISABLE_UDP_SUPPORT #lib/modules/KVER-ipfire/build/include/config/NFS_FS #lib/modules/KVER-ipfire/build/include/config/NFS_FSCACHE @@ -10376,7 +10375,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/SUNGEM_PHY #lib/modules/KVER-ipfire/build/include/config/SUNRPC #lib/modules/KVER-ipfire/build/include/config/SUNRPC_BACKCHANNEL -#lib/modules/KVER-ipfire/build/include/config/SUNRPC_DEBUG #lib/modules/KVER-ipfire/build/include/config/SUNRPC_GSS #lib/modules/KVER-ipfire/build/include/config/SURFACE_HOTPLUG #lib/modules/KVER-ipfire/build/include/config/SURFACE_PLATFORMS -- 2.35.3

1 0

[PATCH] NRPE: Update to 4.1.0
by Peter Müller 01 Aug '22

01 Aug '22

Full changelog: 4.1.0 - 2022-07-18 ENHANCEMENTS Add support for OpenSSL 3 (and EL9/Debian 11/Ubuntu 22) Allow tcpd/libwrap to be excluded from build when present on the system Allow loading of full certificate chains Change -u (connection issues return UNKNOWN) to include all SSL-layer failures. Disable renegotiation and enforce server cipher order when using SSL Verify that private keys match certificates when using SSL FIXES Fixed incorrect default for nasty_metachars in nrpe.cfg Fixed incorrect help text for --use-adh Fixed potential out-of-bound read when used with IPv6 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/nagios_nrpe | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/lfs/nagios_nrpe b/lfs/nagios_nrpe index 79148dd9f..618096db8 100644 --- a/lfs/nagios_nrpe +++ b/lfs/nagios_nrpe @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,15 +26,15 @@ include Config SUMMARY = Nagios Remote Plug-In Executor -VER = 4.0.3 +VER = 4.1.0 THISAPP = nrpe-$(VER) DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) -DIR_APP = $(DIR_SRC)/$(THISAPP) +DIR_APP = $(DIR_SRC)/nrpe-$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nagios_nrpe -PAK_VER = 9 +PAK_VER = 10 DEPS = nagios-plugins @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = d2c99cadf718e7049c911388b105fb4f5248307c733d94a73fd02ac69c49be230dad58be0a182af9c8d7e0d1f34e8dba6b8fc46a7c01eb15d845f2b3a54499ed +$(DL_FILE)_BLAKE2 = abce679c9387c5c4624349eb66465910aaff49074e6b60c6b515ef803d9d79b2603db8629b35ce5da61c02734ba4d48b49600f17bdf93482bd53013e3d121429 install : $(TARGET) -- 2.35.3

1 0

[PATCH] git: Update to 2.37.1
by Peter Müller 01 Aug '22

01 Aug '22

Please refer to - https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.3… - https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.3… for the changes since 2.36.1. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/git | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/git b/lfs/git index a4cd9911a..a4bed2722 100644 --- a/lfs/git +++ b/lfs/git @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.36.1 +VER = 2.37.1 SUMMARY = Fast, scalable, distributed revision control system THISAPP = git-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = git -PAK_VER = 24 +PAK_VER = 25 DEPS = perl-Authen-SASL perl-MIME-Base64 perl-Net-SMTP-SSL @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 99f54efb4ea1d8db0e3afd3dc9780cb37fc853e4757f4b37d68a6badd90eeed3e2943c97393eaed6adf61c82b97b5d01ca8d015784f5425072b1db14d39144ce +$(DL_FILE)_BLAKE2 = b5423e4628f8c727aa74b3f7c7da12d46814eb45adfe84bf57e87a33e85a0a793ff690f4c1f7d2da4824bc8dd7d1df1c06cbe96adae857177d3fb204941b53ef install : $(TARGET) -- 2.35.3

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development August 2022