Development January 2018

development@lists.ipfire.org

12 participants
52 discussions

[PATCH] tor: Update to 0.3.2.9
by Matthias Fischer 10 Jan '18

10 Jan '18

For details see: https://gitweb.torproject.org/tor.git/plain/ReleaseNotes?id=tor-0.3.2.9 Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/tor | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/tor b/lfs/tor index af84d186e..686129451 100644 --- a/lfs/tor +++ b/lfs/tor @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2017 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 0.3.1.9 +VER = 0.3.2.9 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 25 +PAK_VER = 26 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 585e62d086ae7df7cd873f735d726118 +$(DL_FILE)_MD5 = 9aafe4d11464548346fdfb95a3eb9e83 install : $(TARGET) -- 2.15.1

1 0

[PATCH] Somehow someone forgot to fix 'captive.cgi' after deleting the translation string 'Captive menu'...
by Matthias Fischer 10 Jan '18

10 Jan '18

Hm. Best, Matthias ;-) Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- html/cgi-bin/captive.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/captive.cgi b/html/cgi-bin/captive.cgi index f3bb28cb2..65cc349ba 100755 --- a/html/cgi-bin/captive.cgi +++ b/html/cgi-bin/captive.cgi @@ -237,7 +237,7 @@ if ($cgiparams{'ACTION'} eq 'delete-client') { } #open webpage, print header and open box -&Header::openpage($Lang::tr{'Captive menu'}, 1, ''); +&Header::openpage($Lang::tr{'Captive'}, 1, ''); &Header::openbigbox(); # If an error message exists, show a box with the error message -- 2.15.1

2 1

[PATCH] gzip: Update to 1.9
by Matthias Fischer 09 Jan '18

09 Jan '18

Excerpt from 'NEWS': "* Noteworthy changes in release 1.9 (2018-01-07) [stable] ** Bug fixes gzip -d -S SUFFIX file.SUFFIX would fail for any upper-case byte in SUFFIX. E.g., before, this command would fail: $ :|gzip > kT && gzip -d -S T kT gzip: kT: unknown suffix -- ignored [bug present since the beginning] When decompressing data in 'pack' format, gzip no longer mishandles leading zeros in the end-of-block code. [bug introduced in gzip-1.6] When converting from system-dependent time_t format to the 32-bit unsigned MTIME format used in gzip files, if a timestamp does not fit gzip now substitutes zero instead of the timestamp's low-order 32 bits, as per Internet RFC 1952. When converting from MTIME to time_t format, if a timestamp does not fit gzip now warns and substitutes the nearest in-range value instead of crashing or silently substituting an implementation-defined value (typically, the timestamp's low-order bits). This affects timestamps before 1970 and after 2106, and timestamps after 2038 on platforms with 32-bit signed time_t. [bug present since the beginning] Commands implemented via shell scripts are now more consistent about failure status. For example, 'gunzip --help >/dev/full' now consistently exits with status 1 (error), instead of with status 2 (warning) on some platforms. [bug present since the beginning] Support for VMS and Amiga has been removed. It was not working anyway, and it reportedly caused file name glitches on MS-Windowsish platforms." Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/gzip | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/gzip b/lfs/gzip index 233c6ce40..2318338cf 100644 --- a/lfs/gzip +++ b/lfs/gzip @@ -24,7 +24,7 @@ include Config -VER = 1.8 +VER = 1.9 THISAPP = gzip-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -49,7 +49,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = f7caabb65cddc1a4165b398009bd05b9 +$(DL_FILE)_MD5 = 9492c6ccb2239ff679a5475a7bb543ed install : $(TARGET) -- 2.15.1

2 1

[PATCH] hdparm: Update to 9.53
by Matthias Fischer 09 Jan '18

09 Jan '18

Changes from 9.52 to 9.53: - Read Drive Capacity fixes from Iestyn Walters. - SET MAX ADDRESS fixes from Tom Yan <tom.ty89(a)gmail.com>. - added --security-prompt-for-password to --security-help output. - fwdownload changes from Jihoon Lee. Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/hdparm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/hdparm b/lfs/hdparm index c26131eaa..68620bd6e 100644 --- a/lfs/hdparm +++ b/lfs/hdparm @@ -24,7 +24,7 @@ include Config -VER = 9.52 +VER = 9.53 THISAPP = hdparm-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 410539d0bf3cc247181594581edbfb53 +$(DL_FILE)_MD5 = 1e54b52e0c8cb79389d4d47eacba411d install : $(TARGET) -- 2.15.1

2 1

Procedure to build missing packages from sources?
by Jeffrey Walton 08 Jan '18

08 Jan '18

I'm trying to find the process or procedures to build missing programs and packages from sources. For example, emacs is missing so I would like to build it. I can build it locally on the IPfire or I can [attempt to] cross-compile and scp it up to the IPfire. My first question is, is there documentation that covers the topic? If so, where is it? My second question is, if there is no documentation, then what is the procedure? My third question is, if it is not possible, then what are the alternatives? Is there another way to get a missing program? Or should we start looking for alternative firewalls? (I like IPfire and I prefer to stay with it). Thanks in advance. Jeffrey Walton

2 1

3.14 kernel and LTS kernels
by Jeffrey Walton 08 Jan '18

08 Jan '18

Hi Everyone, I noticed IPfire 117 uses the 3.14 kernel: # uname -r 3.14.79-ipfire-pae I believe that was EOL about a year ago. It is not going to get the patches for the cpu bugs; and it has not gotten patches for many other vulnerabilities. Also see http://kroah.com/log/blog/2018/01/06/meltdown-status/ . Are there plans to move to a 4.x kernel or other LTS kernel? Thanks in advance, Jeffrey Walton

2 1

[PATCH] Fix bug 10504: match download's sourceurl mangling in, updxlrator
by Justin Luth 07 Jan '18

07 Jan '18

Updatexlrator stores its files in a hash of the URL. The download utility mangles the URL for [+/~], but the updxlrator only does it for [/]. Thus, download stores the result as one hash, and updxlrator looks for it with a different hash. The result is that the file is re-downloaded every time by both the client, and updxlrator. This is fixed by making updxlrator mangle the url in the same way as the downloader. apt-get install g++ would be a good test for this. Signed-off-by: Justin Luth <jluth(a)mail.com> --- I submitted the bug report and attached this patch three years ago, but the maintainer of updxlrator - although he incorporated it into his own ipcop packagea - has never released it (for ipcop) or any of the other promised updates that he has been working on (in ipfire). I have a few more fixes for updxlrator that I want to submit, if this process goes well. --- config/updxlrator/updxlrator | 2 ++ 1 file changed, 2 insertions(+) diff --git a/config/updxlrator/updxlrator b/config/updxlrator/updxlrator index 2ddc6d8e4..b728902f6 100644 --- a/config/updxlrator/updxlrator +++ b/config/updxlrator/updxlrator @@ -345,7 +345,9 @@ sub check_cache my $sourceurl=$_[0]; my $cfmirror=$_[4]; + $sourceurl =~ s@\%2b@+@ig; $sourceurl =~ s@\%2f@/@ig; + $sourceurl =~ s@\%7e@~@ig; $updfile = substr($sourceurl,rindex($sourceurl,"/")+1); $updfile =~ s@\%20@ @ig; -- 2.14.1

2 3

[PATCH] snort: Update to 2.9.11.1
by Matthias Fischer 07 Jan '18

07 Jan '18

For details see: Release notes: https://snort.org/downloads/snort/release_notes_2.9.11.1.txt Changelog: https://snort.org/downloads/snort/changelog_2.9.11.1.txt Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/snort | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/snort b/lfs/snort index f66bf0127..a5d0535b0 100644 --- a/lfs/snort +++ b/lfs/snort @@ -24,7 +24,7 @@ include Config -VER = 2.9.11 +VER = 2.9.11.1 THISAPP = snort-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 4f3ee0c2ad330e487273016efd0c9d64 +$(DL_FILE)_MD5 = 378e3938b2b5c8e358f942d0ffce18cc install : $(TARGET) -- 2.15.1

2 1

[PATCH] fix GeoIP lookup in showrequestfromcountry.dat
by Peter Müller 07 Jan '18

07 Jan '18

This issue was caused by the rewrite of the perl GeoIP library. Fixes #11571. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- html/cgi-bin/logs.cgi/showrequestfromcountry.dat | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/logs.cgi/showrequestfromcountry.dat b/html/cgi-bin/logs.cgi/showrequestfromcountry.dat index 605873ac0..69835370b 100644 --- a/html/cgi-bin/logs.cgi/showrequestfromcountry.dat +++ b/html/cgi-bin/logs.cgi/showrequestfromcountry.dat @@ -349,7 +349,7 @@ foreach $_ (@slice) if($iface eq $country || $srcaddr ne '') { my $ccode=''; if($iface ne $country) { - $ccode = $gi->country_code_by_name($srcaddr); + $ccode = &GeoIP::lookup($srcaddr); } if($iface eq $country || $ccode eq uc($country)) { my $chain = ''; -- 2.13.6

2 1

[PATCH] ship updated showrequestfromcountry.cgi file
by Peter Müller 07 Jan '18

07 Jan '18

Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- config/rootfiles/core/118/filelists/files | 1 + 1 file changed, 1 insertion(+) diff --git a/config/rootfiles/core/118/filelists/files b/config/rootfiles/core/118/filelists/files index cbc59893f..815efc152 100644 --- a/config/rootfiles/core/118/filelists/files +++ b/config/rootfiles/core/118/filelists/files @@ -4,4 +4,5 @@ etc/httpd/conf/loadmodule.conf etc/httpd/conf/vhosts.d/captive.conf etc/httpd/conf/vhosts.d/ipfire-interface-ssl.conf etc/httpd/conf/vhosts.d/ipfire-interface.conf +srv/web/ipfire/cgi-bin/logs.cgi/showrequestfromcountry.dat var/ipfire/langs -- 2.13.6

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development January 2018