Development October 2017

development@lists.ipfire.org

14 participants
88 discussions

[PATCH v2] WebUI: print more information on used nameservers
by Peter Müller 29 Jan '18

29 Jan '18

Show rDNS/PTR entry and country flag of the used nameservers on the nameserver status list at "netexternal.cgi". These information might be useful for debugging, or are just "nice to have" and do not harm anything. :-) Changes since v1: Corrected file link to country.cgi and added title to flag. Please disregard the first version of this patch. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- diff --git a/html/cgi-bin/netexternal.cgi b/html/cgi-bin/netexternal.cgi index 299612d4c..6fe0cc7d6 100644 --- a/html/cgi-bin/netexternal.cgi +++ b/html/cgi-bin/netexternal.cgi @@ -25,9 +25,13 @@ use strict; #use warnings; #use CGI::Carp 'fatalsToBrowser'; +use IO::Socket; +use Geo::IP::PurePerl; + require '/var/ipfire/general-functions.pl'; require "${General::swroot}/lang.pl"; require "${General::swroot}/header.pl"; +require "${General::swroot}/geoip-functions.pl"; require "${General::swroot}/graphs.pl"; my %color = (); @@ -99,6 +103,12 @@ if ( $querry[0] ne~ ""){ $Lang::tr{'nameserver'} </th> <th align="center"> + $Lang::tr{'flag'} + </th> + <th align="center"> + $Lang::tr{'rdns'} + </th> + <th align="center"> $Lang::tr{'status'} </th> </tr> @@ -139,9 +149,22 @@ END my $table_colour = ($id++ % 2) ? $color{'color22'} : $color{'color20'}; + # Get rDNS entry for nameserver (might be useful) + my $iaddr = inet_aton($nameserver); + my $rdns = gethostbyaddr($iaddr, AF_INET); + if (!$rdns) { $rdns = $Lang::tr{'lookup failed'}; } + + # Get country flag for the nameserver (might be useful) + my $gi = Geo::IP::PurePerl->new(); + my $ccode = $gi->country_code_by_name($nameserver); + my $fcode = lc($ccode); + my $flag_icon = &GeoIP::get_flag_icon($fcode); + print <<END; <tr bgcolor="$table_colour"> <td>$nameserver</td> + <td align="center"><a href="country.cgi#$fcode"><img src="$flag_icon" border="0" align="absmiddle" alt="$ccode" title="$ccode"></a></td> + <td>$rdns</td> <td bgcolor="$bgcolour" align="center"> $message </td> @@ -271,3 +294,4 @@ sub check_dnssec($$) { return $aware + $validating; } + diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index 0138cbc02..a63eb3160 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -1902,6 +1902,7 @@ 'quick playlist' => 'Quick Playlist', 'ram' => 'RAM-Speicher', 'random number generator daemon' => 'Random Number Generator Daemon', +'rdns' => 'rDNS', 'read bytes' => 'Gelesene Bytes', 'read list' => 'Liste der Leseberechtigten', 'real address' => 'Reale Addresse', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index b3aee5a2b..13c18f4c8 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -1936,6 +1936,7 @@ 'quick playlist' => 'Quick Playlist', 'ram' => 'RAM', 'random number generator daemon' => 'Random Number Generator Daemon', +'rdns' => 'rDNS', 'read bytes' => 'Read Bytes', 'read list' => 'list with readonly hosts', 'real address' => 'Real Address',

4 16

Security vulnerabilities in snort and Guardian
by Peter Müller 08 Nov '17

08 Nov '17

Hello, there are two security vulnerabilities in IPFire's IDS/IPS (snort/Guardian) which I consider quite critical: (a) Guardian does not malicious destination IP addresses As described in bug #11532, it is possible to access a "bad" IP address (C&C server, Spamhaus DROP, Dshield, and others) in the internet from a internal network behind IPFire. This is because Guardian only looks at the source IP of a snort alert, and in this case, it is the firewall's IP which should not be blocked for obvious reason. There is little change that an admin will notice that the IPS is only working in case of inbound attacks since snort triggers an alert correctly. Could someone (maintainer?) have a look at Guardian and fix this? Unfortunately, my programming skills are too little for this job. :-| (b) Snort does not detect internal attacks As described in bug #10273 (which has been reported back in 2012), the IDS is fully working on RED only. Although it can be turned on for GREEN, BLUE and ORANGE, too, it does not capture any attacks in internal networks. This can be hardly examined from the WebUI, too, since it shows snort being up and running on GREEN and others. Changing this also allows blocking an infected PC in a local network which is spreading malware. On RED, the internal IP is already NATted. Maybe Guardian can be configured so it shows a big warning in case of blocked local IPs (internal networks should be clean), but this is kind of a feature request. See also: * https://bugzilla.ipfire.org/show_bug.cgi?id=10273 * https://bugzilla.ipfire.org/show_bug.cgi?id=11532 (Thanks again to Michael for enabling HTTPS with trusted certificates.) One question left: If there are attacks from a network connected via VPN, where are they captured by snort? On RED? I hate bringing up bugs like this - and hope I did not harm anybody :-) - but since this has a security impact, it seems okay to me. Thanks and best regards, Peter Müller

3 3

Updated Apache configuration
by Wolfgang Apolinarski 07 Nov '17

07 Nov '17

Hi! This last patch is just a suggestion on how an apache configuration based on the Mozilla suggestion would look like. It includes a 4096-bit DH parameter that is used instead of the one defined in RFC 5144. Generating the DH parameter has been the suggested approach by the weakdh-team. Of course, as already discussed, this would be the standard parameter for IPFire, then, similar as the already chosen EC curve and similar to the standard parameters defined in RFC 5144. Best regards, Wolfgang

3 3

[PATCH] rpcbind: update to 0.2.4 and add patch for CVE-2017-8779
by Marcel Lorenz 31 Oct '17

31 Oct '17

Signed-off-by: Marcel Lorenz <marcel.lorenz(a)ipfire.org> --- lfs/rpcbind | 10 ++++---- .../rpcbind-0.2.4-vulnerability_fixes-1.patch | 29 ++++++++++++++++++++++ 2 files changed, 34 insertions(+), 5 deletions(-) create mode 100644 src/patches/rpcbind-0.2.4-vulnerability_fixes-1.patch diff --git a/lfs/rpcbind b/lfs/rpcbind index 046121f36..f6bd05d9c 100644 --- a/lfs/rpcbind +++ b/lfs/rpcbind @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2016 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2017 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 0.2.3 +VER = 0.2.4 THISAPP = rpcbind-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = rpcbind -PAK_VER = 2 +PAK_VER = 3 DEPS = "libtirpc" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = c8875246b2688a1adfbd6ad43480278d +$(DL_FILE)_MD5 = cf10cd41ed8228fc54c316191c1f07fe install : $(TARGET) @@ -77,8 +77,8 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/rpcbind-0.2.4-vulnerability_fixes-1.patch cd $(DIR_APP) && sed -i "/servname/s:rpcbind:sunrpc:" src/rpcbind.c - cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/rpcbind/rpcbind-0.2.3-tirpc_fix-1.patch cd $(DIR_APP) && ./configure --prefix=/usr --bindir=/sbin --with-rpcuser=root --without-systemdsystemunitdir --disable-ipv6 cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) cd $(DIR_APP) && make install diff --git a/src/patches/rpcbind-0.2.4-vulnerability_fixes-1.patch b/src/patches/rpcbind-0.2.4-vulnerability_fixes-1.patch new file mode 100644 index 000000000..d8137d3c9 --- /dev/null +++ b/src/patches/rpcbind-0.2.4-vulnerability_fixes-1.patch @@ -0,0 +1,29 @@ +Submitted By: Ken Moffat <ken at linuxfromscratch dot org> +Date: 2017-05-29 +Initial Package Version: 0.2.4 (also affects earlier versions) +Upstream Status: Unknown +Origin: Guido Vranken +Description: Fixes CVE-2017-8779 (DOS by remote attackers - memory consumption +without subsequent free). + +diff --git a/src/rpcb_svc_com.c b/src/rpcb_svc_com.c +index 5862c26..e11f61b 100644 +--- a/src/rpcb_svc_com.c ++++ b/src/rpcb_svc_com.c +@@ -48,6 +48,7 @@ + #include <rpc/rpc.h> + #include <rpc/rpcb_prot.h> + #include <rpc/svc_dg.h> ++#include <rpc/rpc_com.h> + #include <netconfig.h> + #include <errno.h> + #include <syslog.h> +@@ -432,7 +433,7 @@ rpcbproc_taddr2uaddr_com(void *arg, struct svc_req *rqstp /*__unused*/, + static bool_t + xdr_encap_parms(XDR *xdrs, struct encap_parms *epp) + { +- return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), ~0)); ++ return (xdr_bytes(xdrs, &(epp->args), (u_int *) &(epp->arglen), RPC_MAXDATASIZE)); + } + + /* -- 2.14.2

1 0

[PATCH] tcl: update to 6.6.7
by Marcel Lorenz 31 Oct '17

31 Oct '17

Signed-off-by: Marcel Lorenz <marcel.lorenz(a)ipfire.org> --- config/rootfiles/common/tcl | 78 +++++++++++++++++++++++---------------------- lfs/tcl | 4 +-- 2 files changed, 42 insertions(+), 40 deletions(-) diff --git a/config/rootfiles/common/tcl b/config/rootfiles/common/tcl index c4232d244..a796e2a30 100644 --- a/config/rootfiles/common/tcl +++ b/config/rootfiles/common/tcl @@ -25,20 +25,20 @@ usr/bin/tclsh8.6 #usr/include/tdbc.h #usr/include/tdbcDecls.h #usr/include/tdbcInt.h -#usr/lib/itcl4.0.5 -usr/lib/itcl4.0.5/itcl.tcl -usr/lib/itcl4.0.5/itclConfig.sh -usr/lib/itcl4.0.5/itclHullCmds.tcl -usr/lib/itcl4.0.5/itclWidget.tcl -usr/lib/itcl4.0.5/libitcl4.0.5.so -usr/lib/itcl4.0.5/libitclstub4.0.5.a -usr/lib/itcl4.0.5/pkgIndex.tcl +#usr/lib/itcl4.1.0 +usr/lib/itcl4.1.0/itcl.tcl +usr/lib/itcl4.1.0/itclConfig.sh +usr/lib/itcl4.1.0/itclHullCmds.tcl +usr/lib/itcl4.1.0/itclWidget.tcl +usr/lib/itcl4.1.0/libitcl4.1.0.so +#usr/lib/itcl4.1.0/libitclstub4.1.0.a +usr/lib/itcl4.1.0/pkgIndex.tcl usr/lib/libtcl8.6.so #usr/lib/libtclstub8.6.a #usr/lib/pkgconfig/tcl.pc -#usr/lib/sqlite3.13.0 -usr/lib/sqlite3.13.0/libsqlite3.13.0.so -usr/lib/sqlite3.13.0/pkgIndex.tcl +#usr/lib/sqlite3.20.0 +usr/lib/sqlite3.20.0/libsqlite3.20.0.so +usr/lib/sqlite3.20.0/pkgIndex.tcl #usr/lib/tcl8 #usr/lib/tcl8.6 usr/lib/tcl8.6/auto.tcl @@ -266,41 +266,42 @@ usr/lib/tcl8.6/tclIndex usr/lib/tcl8.6/tm.tcl usr/lib/tcl8.6/word.tcl #usr/lib/tcl8/8.4 -usr/lib/tcl8/8.4/platform +#usr/lib/tcl8/8.4/platform usr/lib/tcl8/8.4/platform-1.0.14.tm usr/lib/tcl8/8.4/platform/shell-1.1.4.tm #usr/lib/tcl8/8.5 -usr/lib/tcl8/8.5/msgcat-1.6.0.tm -usr/lib/tcl8/8.5/tcltest-2.4.0.tm +usr/lib/tcl8/8.5/msgcat-1.6.1.tm +usr/lib/tcl8/8.5/tcltest-2.4.1.tm #usr/lib/tcl8/8.6 -usr/lib/tcl8/8.6/http-2.8.9.tm +usr/lib/tcl8/8.6/http-2.8.11.tm usr/lib/tcl8/8.6/tdbc -usr/lib/tcl8/8.6/tdbc/sqlite3-1.0.4.tm +usr/lib/tcl8/8.6/tdbc/sqlite3-1.0.5.tm usr/lib/tclConfig.sh usr/lib/tclooConfig.sh -#usr/lib/tdbc1.0.4 -usr/lib/tdbc1.0.4/libtdbc1.0.4.so -usr/lib/tdbc1.0.4/libtdbcstub1.0.4.a -usr/lib/tdbc1.0.4/pkgIndex.tcl -usr/lib/tdbc1.0.4/tdbc.tcl -usr/lib/tdbc1.0.4/tdbcConfig.sh -#usr/lib/tdbcmysql1.0.4 -usr/lib/tdbcmysql1.0.4/libtdbcmysql1.0.4.so -usr/lib/tdbcmysql1.0.4/pkgIndex.tcl -usr/lib/tdbcmysql1.0.4/tdbcmysql.tcl -#usr/lib/tdbcodbc1.0.4 -usr/lib/tdbcodbc1.0.4/libtdbcodbc1.0.4.so -usr/lib/tdbcodbc1.0.4/pkgIndex.tcl -usr/lib/tdbcodbc1.0.4/tdbcodbc.tcl -#usr/lib/tdbcpostgres1.0.4 -usr/lib/tdbcpostgres1.0.4/libtdbcpostgres1.0.4.so -usr/lib/tdbcpostgres1.0.4/pkgIndex.tcl -usr/lib/tdbcpostgres1.0.4/tdbcpostgres.tcl -#usr/lib/thread2.8.0 -usr/lib/thread2.8.0/libthread2.8.0.so -usr/lib/thread2.8.0/pkgIndex.tcl -usr/lib/thread2.8.0/ttrace.tcl +#usr/lib/tdbc1.0.5 +usr/lib/tdbc1.0.5/libtdbc1.0.5.so +usr/lib/tdbc1.0.5/libtdbcstub1.0.5.a +usr/lib/tdbc1.0.5/pkgIndex.tcl +usr/lib/tdbc1.0.5/tdbc.tcl +usr/lib/tdbc1.0.5/tdbcConfig.sh +#usr/lib/tdbcmysql1.0.5 +usr/lib/tdbcmysql1.0.5/libtdbcmysql1.0.5.so +usr/lib/tdbcmysql1.0.5/pkgIndex.tcl +usr/lib/tdbcmysql1.0.5/tdbcmysql.tcl +#usr/lib/tdbcodbc1.0.5 +usr/lib/tdbcodbc1.0.5/libtdbcodbc1.0.5.so +usr/lib/tdbcodbc1.0.5/pkgIndex.tcl +usr/lib/tdbcodbc1.0.5/tdbcodbc.tcl +#usr/lib/tdbcpostgres1.0.5 +usr/lib/tdbcpostgres1.0.5/libtdbcpostgres1.0.5.so +usr/lib/tdbcpostgres1.0.5/pkgIndex.tcl +usr/lib/tdbcpostgres1.0.5/tdbcpostgres.tcl +#usr/lib/thread2.8.1 +usr/lib/thread2.8.1/libthread2.8.1.so +usr/lib/thread2.8.1/pkgIndex.tcl +usr/lib/thread2.8.1/ttrace.tcl #usr/man/man1/tclsh.1 +#usr/man/man3 #usr/man/man3/TCL_MEM_DEBUG.3 #usr/man/man3/Tcl_Access.3 #usr/man/man3/Tcl_AddErrorInfo.3 @@ -1136,6 +1137,7 @@ usr/lib/thread2.8.0/ttrace.tcl #usr/share/man/mann/tdbc_mapSqlState.n #usr/share/man/mann/tdbc_mysql.n #usr/share/man/mann/tdbc_odbc.n +#usr/share/man/mann/tdbc_postgres.n #usr/share/man/mann/tdbc_resultset.n #usr/share/man/mann/tdbc_sqlite3.n #usr/share/man/mann/tdbc_statement.n diff --git a/lfs/tcl b/lfs/tcl index 06e9e0835..910117bbd 100644 --- a/lfs/tcl +++ b/lfs/tcl @@ -24,7 +24,7 @@ include Config -VER = 8.6.6 +VER = 8.6.7 THISAPP = tcl$(VER) DL_FILE = $(THISAPP)-src.tar.gz @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 5193aea8107839a79df8ac709552ecb7 +$(DL_FILE)_MD5 = 5673aaf45b5de5d8dd80bb3daaeb8838 install : $(TARGET) -- 2.14.2

1 0

[PATCH] libupnp: update to 1.6.22
by Marcel Lorenz 31 Oct '17

31 Oct '17

Signed-off-by: Marcel Lorenz <marcel.lorenz(a)ipfire.org> --- config/rootfiles/common/libupnp | 4 ++-- lfs/libupnp | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/common/libupnp b/config/rootfiles/common/libupnp index cec62c463..1c5bd0ff6 100644 --- a/config/rootfiles/common/libupnp +++ b/config/rootfiles/common/libupnp @@ -25,10 +25,10 @@ usr/lib/libixml.so.2.0.8 #usr/lib/libthreadutil.la usr/lib/libthreadutil.so usr/lib/libthreadutil.so.6 -usr/lib/libthreadutil.so.6.0.3 +usr/lib/libthreadutil.so.6.0.4 #usr/lib/libupnp.a #usr/lib/libupnp.la usr/lib/libupnp.so usr/lib/libupnp.so.6 -usr/lib/libupnp.so.6.3.2 +usr/lib/libupnp.so.6.3.6 #usr/lib/pkgconfig/libupnp.pc diff --git a/lfs/libupnp b/lfs/libupnp index 3f8d2b549..aae2b94a8 100644 --- a/lfs/libupnp +++ b/lfs/libupnp @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007 Michael Tremer & Christian Schmidt # +# Copyright (C) 2007-2016 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.6.18 +VER = 1.6.22 THISAPP = libupnp-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 11c6484fd2e2927bf3b8d8108407ca56 +$(DL_FILE)_MD5 = 530e91e96119ee32a9523a73572b8d8f install : $(TARGET) -- 2.14.2

1 0

[PATCH] minidlna: update to 1.2.1
by Marcel Lorenz 31 Oct '17

31 Oct '17

Signed-off-by: Marcel Lorenz <marcel.lorenz(a)ipfire.org> --- config/rootfiles/packages/minidlna | 1 + lfs/minidlna | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/packages/minidlna b/config/rootfiles/packages/minidlna index f0b953653..42a83f8da 100644 --- a/config/rootfiles/packages/minidlna +++ b/config/rootfiles/packages/minidlna @@ -7,6 +7,7 @@ usr/sbin/minidlnad #usr/share/locale/fr/LC_MESSAGES/minidlna.mo #usr/share/locale/it/LC_MESSAGES/minidlna.mo #usr/share/locale/ja/LC_MESSAGES/minidlna.mo +#usr/share/locale/ko/LC_MESSAGES/minidlna.mo #usr/share/locale/nb/LC_MESSAGES/minidlna.mo #usr/share/locale/nl/LC_MESSAGES/minidlna.mo #usr/share/locale/pl/LC_MESSAGES/minidlna.mo diff --git a/lfs/minidlna b/lfs/minidlna index 3302cdd5c..3c855f994 100644 --- a/lfs/minidlna +++ b/lfs/minidlna @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007 Michael Tremer & Christian Schmidt # +# Copyright (C) 2007-2017 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.1.3 +VER = 1.2.1 THISAPP = minidlna-$(VER) DL_FILE = minidlna-$(VER).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = minidlna -PAK_VER = 4 +PAK_VER = 5 DEPS = "ffmpeg flac libexif libid3tag libogg" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 879027192c89e5376cdd2ae2d1aa33b4 +$(DL_FILE)_MD5 = a968d3d84971322471cabda3669cc0f8 install : $(TARGET) -- 2.14.2

1 0

[PATCH] minidlna: update to 1.2.1
by Marcel Lorenz 31 Oct '17

31 Oct '17

1 0

[PATCH] stunnel: update to 5.42
by Marcel Lorenz 31 Oct '17

31 Oct '17

Signed-off-by: Marcel Lorenz <marcel.lorenz(a)ipfire.org> --- config/rootfiles/packages/stunnel | 6 +++--- lfs/stunnel | 9 +++++---- 2 files changed, 8 insertions(+), 7 deletions(-) diff --git a/config/rootfiles/packages/stunnel b/config/rootfiles/packages/stunnel index eaf7fcece..91650166a 100644 --- a/config/rootfiles/packages/stunnel +++ b/config/rootfiles/packages/stunnel @@ -1,4 +1,3 @@ -etc/rc.d/init.d/stunnel etc/stunnel etc/stunnel/stunnel.conf #etc/stunnel/stunnel.conf-sample @@ -28,14 +27,15 @@ usr/lib/stunnel/libstunnel.so #usr/share/doc/stunnel/examples/importCA.sh #usr/share/doc/stunnel/examples/script.sh #usr/share/doc/stunnel/examples/stunnel.init +#usr/share/doc/stunnel/examples/stunnel.logrotate +#usr/share/doc/stunnel/examples/stunnel.rh.init #usr/share/doc/stunnel/examples/stunnel.service #usr/share/doc/stunnel/examples/stunnel.spec -#usr/share/doc/stunnel/stunnel.fr.html #usr/share/doc/stunnel/stunnel.html #usr/share/doc/stunnel/stunnel.pl.html #usr/share/man/man8/stunnel.8 -#usr/share/man/man8/stunnel.fr.8 #usr/share/man/man8/stunnel.pl.8 var/ipfire/backup/addons/includes/stunnel var/lib/stunnel var/lib/stunnel/run +etc/rc.d/init.d/stunnel diff --git a/lfs/stunnel b/lfs/stunnel index 684e4522d..d046db65d 100644 --- a/lfs/stunnel +++ b/lfs/stunnel @@ -24,7 +24,7 @@ include Config -VER = 5.01 +VER = 5.42 THISAPP = stunnel-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = stunnel -PAK_VER = 2 +PAK_VER = 3 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 7b63266b6fa05da696729e245100da65 +$(DL_FILE)_MD5 = ad0a6c63b30ec40afc7a2326e9ce04e0 install : $(TARGET) @@ -80,7 +80,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && ./configure \ --prefix=/usr \ --sysconfdir=/etc \ - --localstatedir=/var + --localstatedir=/var \ + --disable-systemd cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install -- 2.14.2

1 0

[PATCH] nmap: update to 7.6.0
by Marcel Lorenz 31 Oct '17

31 Oct '17

Signed-off-by: Marcel Lorenz <marcel.lorenz(a)ipfire.org> --- config/rootfiles/packages/nmap | 34 +++++++++++++++++++++++++++++++++- lfs/nmap | 6 +++--- 2 files changed, 36 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/packages/nmap b/config/rootfiles/packages/nmap index 111610a62..b2c612c60 100644 --- a/config/rootfiles/packages/nmap +++ b/config/rootfiles/packages/nmap @@ -110,6 +110,7 @@ usr/share/nmap/nselib/data/psexec/network.lua usr/share/nmap/nselib/data/psexec/nmap_service.c usr/share/nmap/nselib/data/psexec/nmap_service.vcproj usr/share/nmap/nselib/data/psexec/pwdump.lua +usr/share/nmap/nselib/data/publickeydb usr/share/nmap/nselib/data/rtsp-urls.txt usr/share/nmap/nselib/data/snmpcommunities.lst usr/share/nmap/nselib/data/ssl-fingerprints @@ -144,12 +145,15 @@ usr/share/nmap/nselib/informix.lua usr/share/nmap/nselib/ipOps.lua usr/share/nmap/nselib/ipmi.lua usr/share/nmap/nselib/ipp.lua +usr/share/nmap/nselib/irc.lua usr/share/nmap/nselib/iscsi.lua usr/share/nmap/nselib/isns.lua usr/share/nmap/nselib/jdwp.lua usr/share/nmap/nselib/json.lua usr/share/nmap/nselib/ldap.lua usr/share/nmap/nselib/lfs.luadoc +usr/share/nmap/nselib/libssh2-utility.lua +usr/share/nmap/nselib/libssh2.luadoc usr/share/nmap/nselib/listop.lua usr/share/nmap/nselib/lpeg-utility.lua usr/share/nmap/nselib/lpeg.luadoc @@ -194,6 +198,7 @@ usr/share/nmap/nselib/shortport.lua usr/share/nmap/nselib/sip.lua usr/share/nmap/nselib/slaxml.lua usr/share/nmap/nselib/smb.lua +usr/share/nmap/nselib/smb2.lua usr/share/nmap/nselib/smbauth.lua usr/share/nmap/nselib/smtp.lua usr/share/nmap/nselib/snmp.lua @@ -267,6 +272,7 @@ usr/share/nmap/scripts/broadcast-ms-sql-discover.nse usr/share/nmap/scripts/broadcast-netbios-master-browser.nse usr/share/nmap/scripts/broadcast-networker-discover.nse usr/share/nmap/scripts/broadcast-novell-locate.nse +usr/share/nmap/scripts/broadcast-ospf2-discover.nse usr/share/nmap/scripts/broadcast-pc-anywhere.nse usr/share/nmap/scripts/broadcast-pc-duo.nse usr/share/nmap/scripts/broadcast-pim-discovery.nse @@ -287,6 +293,8 @@ usr/share/nmap/scripts/cassandra-brute.nse usr/share/nmap/scripts/cassandra-info.nse usr/share/nmap/scripts/cccam-version.nse usr/share/nmap/scripts/cics-enum.nse +usr/share/nmap/scripts/cics-info.nse +usr/share/nmap/scripts/cics-user-brute.nse usr/share/nmap/scripts/cics-user-enum.nse usr/share/nmap/scripts/citrix-brute-xml.nse usr/share/nmap/scripts/citrix-enum-apps-xml.nse @@ -352,6 +360,7 @@ usr/share/nmap/scripts/ftp-bounce.nse usr/share/nmap/scripts/ftp-brute.nse usr/share/nmap/scripts/ftp-libopie.nse usr/share/nmap/scripts/ftp-proftpd-backdoor.nse +usr/share/nmap/scripts/ftp-syst.nse usr/share/nmap/scripts/ftp-vsftpd-backdoor.nse usr/share/nmap/scripts/ftp-vuln-cve2010-4221.nse usr/share/nmap/scripts/ganglia-info.nse @@ -390,6 +399,7 @@ usr/share/nmap/scripts/http-cisco-anyconnect.nse usr/share/nmap/scripts/http-coldfusion-subzero.nse usr/share/nmap/scripts/http-comments-displayer.nse usr/share/nmap/scripts/http-config-backup.nse +usr/share/nmap/scripts/http-cookie-flags.nse usr/share/nmap/scripts/http-cors.nse usr/share/nmap/scripts/http-cross-domain-policy.nse usr/share/nmap/scripts/http-csrf.nse @@ -447,6 +457,7 @@ usr/share/nmap/scripts/http-rfi-spider.nse usr/share/nmap/scripts/http-robots.txt.nse usr/share/nmap/scripts/http-robtex-reverse-ip.nse usr/share/nmap/scripts/http-robtex-shared-ns.nse +usr/share/nmap/scripts/http-security-headers.nse usr/share/nmap/scripts/http-server-header.nse usr/share/nmap/scripts/http-shellshock.nse usr/share/nmap/scripts/http-sitemap-generator.nse @@ -485,6 +496,10 @@ usr/share/nmap/scripts/http-vuln-cve2014-3704.nse usr/share/nmap/scripts/http-vuln-cve2014-8877.nse usr/share/nmap/scripts/http-vuln-cve2015-1427.nse usr/share/nmap/scripts/http-vuln-cve2015-1635.nse +usr/share/nmap/scripts/http-vuln-cve2017-1001000.nse +usr/share/nmap/scripts/http-vuln-cve2017-5638.nse +usr/share/nmap/scripts/http-vuln-cve2017-5689.nse +usr/share/nmap/scripts/http-vuln-cve2017-8917.nse usr/share/nmap/scripts/http-vuln-misfortune-cookie.nse usr/share/nmap/scripts/http-vuln-wnr1000-creds.nse usr/share/nmap/scripts/http-waf-detect.nse @@ -497,10 +512,12 @@ usr/share/nmap/scripts/http-xssed.nse usr/share/nmap/scripts/iax2-brute.nse usr/share/nmap/scripts/iax2-version.nse usr/share/nmap/scripts/icap-info.nse +usr/share/nmap/scripts/iec-identify.nse usr/share/nmap/scripts/ike-version.nse usr/share/nmap/scripts/imap-brute.nse usr/share/nmap/scripts/imap-capabilities.nse usr/share/nmap/scripts/imap-ntlm-info.nse +usr/share/nmap/scripts/impress-remote-discover.nse usr/share/nmap/scripts/informix-brute.nse usr/share/nmap/scripts/informix-query.nse usr/share/nmap/scripts/informix-tables.nse @@ -612,6 +629,7 @@ usr/share/nmap/scripts/omp2-enum-targets.nse usr/share/nmap/scripts/omron-info.nse usr/share/nmap/scripts/openlookup-info.nse usr/share/nmap/scripts/openvas-otp-brute.nse +usr/share/nmap/scripts/openwebnet-discovery.nse usr/share/nmap/scripts/oracle-brute-stealth.nse usr/share/nmap/scripts/oracle-brute.nse usr/share/nmap/scripts/oracle-enum-users.nse @@ -628,6 +646,7 @@ usr/share/nmap/scripts/pop3-brute.nse usr/share/nmap/scripts/pop3-capabilities.nse usr/share/nmap/scripts/pop3-ntlm-info.nse usr/share/nmap/scripts/pptp-version.nse +usr/share/nmap/scripts/puppet-naivesigning.nse usr/share/nmap/scripts/qconn-exec.nse usr/share/nmap/scripts/qscan.nse usr/share/nmap/scripts/quake1-info.nse @@ -666,6 +685,7 @@ usr/share/nmap/scripts/sip-enum-users.nse usr/share/nmap/scripts/sip-methods.nse usr/share/nmap/scripts/skypev2-version.nse usr/share/nmap/scripts/smb-brute.nse +usr/share/nmap/scripts/smb-double-pulsar-backdoor.nse usr/share/nmap/scripts/smb-enum-domains.nse usr/share/nmap/scripts/smb-enum-groups.nse usr/share/nmap/scripts/smb-enum-processes.nse @@ -677,19 +697,25 @@ usr/share/nmap/scripts/smb-ls.nse usr/share/nmap/scripts/smb-mbenum.nse usr/share/nmap/scripts/smb-os-discovery.nse usr/share/nmap/scripts/smb-print-text.nse +usr/share/nmap/scripts/smb-protocols.nse usr/share/nmap/scripts/smb-psexec.nse usr/share/nmap/scripts/smb-security-mode.nse usr/share/nmap/scripts/smb-server-stats.nse usr/share/nmap/scripts/smb-system-info.nse usr/share/nmap/scripts/smb-vuln-conficker.nse +usr/share/nmap/scripts/smb-vuln-cve-2017-7494.nse usr/share/nmap/scripts/smb-vuln-cve2009-3103.nse usr/share/nmap/scripts/smb-vuln-ms06-025.nse usr/share/nmap/scripts/smb-vuln-ms07-029.nse usr/share/nmap/scripts/smb-vuln-ms08-067.nse usr/share/nmap/scripts/smb-vuln-ms10-054.nse usr/share/nmap/scripts/smb-vuln-ms10-061.nse +usr/share/nmap/scripts/smb-vuln-ms17-010.nse usr/share/nmap/scripts/smb-vuln-regsvc-dos.nse -usr/share/nmap/scripts/smbv2-enabled.nse +usr/share/nmap/scripts/smb2-capabilities.nse +usr/share/nmap/scripts/smb2-security-mode.nse +usr/share/nmap/scripts/smb2-time.nse +usr/share/nmap/scripts/smb2-vuln-uptime.nse usr/share/nmap/scripts/smtp-brute.nse usr/share/nmap/scripts/smtp-commands.nse usr/share/nmap/scripts/smtp-enum-users.nse @@ -715,7 +741,11 @@ usr/share/nmap/scripts/snmp-win32-users.nse usr/share/nmap/scripts/socks-auth-info.nse usr/share/nmap/scripts/socks-brute.nse usr/share/nmap/scripts/socks-open-proxy.nse +usr/share/nmap/scripts/ssh-auth-methods.nse +usr/share/nmap/scripts/ssh-brute.nse usr/share/nmap/scripts/ssh-hostkey.nse +usr/share/nmap/scripts/ssh-publickey-acceptance.nse +usr/share/nmap/scripts/ssh-run.nse usr/share/nmap/scripts/ssh2-enum-algos.nse usr/share/nmap/scripts/sshv1.nse usr/share/nmap/scripts/ssl-ccs-injection.nse @@ -751,6 +781,7 @@ usr/share/nmap/scripts/telnet-encryption.nse usr/share/nmap/scripts/telnet-ntlm-info.nse usr/share/nmap/scripts/tftp-enum.nse usr/share/nmap/scripts/tls-nextprotoneg.nse +usr/share/nmap/scripts/tls-ticketbleed.nse usr/share/nmap/scripts/tn3270-screen.nse usr/share/nmap/scripts/tor-consensus-checker.nse usr/share/nmap/scripts/traceroute-geolocation.nse @@ -763,6 +794,7 @@ usr/share/nmap/scripts/url-snarf.nse usr/share/nmap/scripts/ventrilo-info.nse usr/share/nmap/scripts/versant-info.nse usr/share/nmap/scripts/vmauthd-brute.nse +usr/share/nmap/scripts/vmware-version.nse usr/share/nmap/scripts/vnc-brute.nse usr/share/nmap/scripts/vnc-info.nse usr/share/nmap/scripts/vnc-title.nse diff --git a/lfs/nmap b/lfs/nmap index 92ac90316..d1c753c24 100644 --- a/lfs/nmap +++ b/lfs/nmap @@ -24,7 +24,7 @@ include Config -VER = 7.40 +VER = 7.60 THISAPP = nmap-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nmap -PAK_VER = 8 +PAK_VER = 9 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 9c5a28bfb46228bade82b238408c065e +$(DL_FILE)_MD5 = 4e454266559ddf2c4e2109866c62560c install : $(TARGET) -- 2.14.2

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development October 2017