Development March 2018

development@lists.ipfire.org

13 participants
39 discussions

[PATCH] gnupg: update to 1.4.22
by Peter Müller 26 Mar '18

26 Mar '18

Update GnuPG to 1.4.22, which fixes some security vulnerabilities, such as the memory side channel attack CVE-2017-7526. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- lfs/gnupg | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/gnupg b/lfs/gnupg index aa76042e3..f131d2b08 100644 --- a/lfs/gnupg +++ b/lfs/gnupg @@ -24,7 +24,7 @@ include Config -VER = 1.4.21 +VER = 1.4.22 THISAPP = gnupg-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 9bdeabf3c0f87ff21cb3f9216efdd01d +$(DL_FILE)_MD5 = 082bda3951a94743e76b83fcf3627547 install : $(TARGET) -- 2.13.6

2 1

[PATCH] curl: update to 7.59.0
by Peter Müller 26 Mar '18

26 Mar '18

Update curl to 7.59.0 which fixes a number of bugs and some minor security issues. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- lfs/curl | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/curl b/lfs/curl index eb2354485..ebb093f56 100644 --- a/lfs/curl +++ b/lfs/curl @@ -24,10 +24,10 @@ include Config -VER = 7.49.1 +VER = 7.59.0 THISAPP = curl-$(VER) -DL_FILE = $(THISAPP).tar.lzma +DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = ae5e5e395da413d1fa0864e1d0a3fa57 +$(DL_FILE)_MD5 = a44f98c25c7506e7103039b542aa5ad8 install : $(TARGET) @@ -69,7 +69,7 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) - @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar xf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && ./configure \ --prefix=/usr \ --disable-ipv6 \ -- 2.13.6

2 1

[PATCH] Fix typo in 'makeqosscripts.pl'
by Matthias Fischer 26 Mar '18

26 Mar '18

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/qos/makeqosscripts.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/qos/makeqosscripts.pl b/config/qos/makeqosscripts.pl index 19809615a..824a9937f 100644 --- a/config/qos/makeqosscripts.pl +++ b/config/qos/makeqosscripts.pl @@ -726,7 +726,7 @@ print <<END echo "Quality of Service was successfully cleared!" ;; gen|generate) - echo -n "Generateing the QoS-Scripts..." + echo -n "Generating the QoS-Scripts..." /usr/bin/perl /var/ipfire/qos/bin/makeqosscripts.pl > /var/ipfire/qos/bin/qos.sh echo ".Done!" exit 0 -- 2.16.2

2 1

Qos - crash (imq0)
by Matthias Fischer 23 Mar '18

23 Mar '18

Hi, I'm playing with QoS since a few weeks on a Duo Box with (4 GB RAM), running smoothly. Now it happened twice - once two weeks ago, once yesterday - that QoS crashed with the following kernel messages: ***SNIP*** ... 04:50:35 kernel: grsec: Invalid alignment/Bus error occurred at b1928000 in /usr/local/bin/qosd[qosd:3695] uid/euid:0/0 gid/egid:0/0, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 04:50:35 kernel: grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/local/bin/qosd[qosd:3695] uid/euid:0/0 gid/egid:0/0, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0 ... ***SNAP*** System was still running without problems, but 'imq0'-QoS-graph was empty, only showing "-nan"-rates. 'red0'-graph was ok. Can someone explain what happened here and perhaps how to fix this? Shall I open a ticket at Bugzilla? Best, Matthias

2 2

[PATCH] systemd: Enable spwaning getty's on serial devices
by Stefan Schantl 22 Mar '18

22 Mar '18

Fixes #11678. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- systemd/systemd.nm | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/systemd/systemd.nm b/systemd/systemd.nm index 037f783dc..aa818c5fa 100644 --- a/systemd/systemd.nm +++ b/systemd/systemd.nm @@ -5,7 +5,7 @@ name = systemd version = 233 -release = 1 +release = 2 maintainer = Stefan Schantl <stefan.schantl(a)ipfire.org> groups = System/Base @@ -285,6 +285,7 @@ packages /usr/bin/systemctl enable \ getty@.service \ + serial-getty@.service \ remote-fs.target \ systemd-readahead-replay.service \ systemd-readahead-collect.service \ @@ -312,6 +313,9 @@ packages mv /etc/systemd/journald.conf.paknew /etc/systemd/journald.conf /usr/bin/systemctl restart systemd-journald.service >/dev/null 2>&1 || : fi + + # Enable spawning getty's on serial devices. + systemctl enable serial-getty@.service >/dev/null 2>&1 || : end # Be sure to start the new udev after everything is done. -- 2.14.3

1 0

[PATCH] dmidecode 3.1: Added patch (Fix firmware version of TPM device)
by Matthias Fischer 18 Mar '18

18 Mar '18

For details see: http://git.savannah.gnu.org/cgit/dmidecode.git/commit/?id=174387405e98cd94c… "Both the operator (detected by clang, reported by Xorg) and the mask for the minor firmware version field of TPM devices were wrong." Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/dmidecode | 3 ++- ..._support_for_structure_type_43_tpm_device.patch | 30 ++++++++++++++++++++++ 2 files changed, 32 insertions(+), 1 deletion(-) create mode 100644 src/patches/dmidecode/add_support_for_structure_type_43_tpm_device.patch diff --git a/lfs/dmidecode b/lfs/dmidecode index 8f8a2491c..fa0101594 100644 --- a/lfs/dmidecode +++ b/lfs/dmidecode @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2016 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2018 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -71,6 +71,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/dmidecode/0005-nothing-should-go-into-usr-local.patch + cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/dmidecode/add_support_for_structure_type_43_tpm_device.patch cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) cd $(DIR_APP) && make install @rm -rf $(DIR_APP) diff --git a/src/patches/dmidecode/add_support_for_structure_type_43_tpm_device.patch b/src/patches/dmidecode/add_support_for_structure_type_43_tpm_device.patch new file mode 100644 index 000000000..07f4f7ed7 --- /dev/null +++ b/src/patches/dmidecode/add_support_for_structure_type_43_tpm_device.patch @@ -0,0 +1,30 @@ +From 174387405e98cd94c627832ae23abcb9be7e5623 Mon Sep 17 00:00:00 2001 +From: Jean Delvare <jdelvare(a)suse.de> +Date: Wed, 31 Jan 2018 18:52:47 +0100 +Subject: dmidecode: Fix firmware version of TPM device + +Both the operator (detected by clang, reported by Xorg) and the mask +for the minor firmware version field of TPM devices were wrong. + +Signed-off-by: Jean Delvare <jdelvare(a)suse.de> +Fixes: 48a8132058a0 ("dmidecode: Add support for structure type 43 (TPM Device)") +--- + dmidecode.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/dmidecode.c b/dmidecode.c +index 87faaa9..a593170 100644 +--- a/dmidecode.c ++++ b/dmidecode.c +@@ -4511,7 +4511,7 @@ static void dmi_decode(const struct dmi_header *h, u16 ver) + case 0x02: + printf("\tFirmware Revision: %u.%u\n", + DWORD(data + 0x0A) >> 16, +- DWORD(data + 0x0A) && 0xFF); ++ DWORD(data + 0x0A) & 0xFFFF); + /* + * We skip the next 4 bytes, as their + * format is not standardized and their +-- +cgit v1.0-41-gc330 + -- 2.16.2

1 0

[PATCH] hdparm: Update to 9.55
by Matthias Fischer 18 Mar '18

18 Mar '18

Changelogs against 9.53: "hdparm-9.55: - added #include <sys/sysmacros.h> for major()/minor() macros hdparm-9.54: - Partial revert of Jmicron changes, from Jan Friesse." Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/hdparm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/hdparm b/lfs/hdparm index 68620bd6e..87d961d15 100644 --- a/lfs/hdparm +++ b/lfs/hdparm @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2017 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 9.53 +VER = 9.55 THISAPP = hdparm-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 1e54b52e0c8cb79389d4d47eacba411d +$(DL_FILE)_MD5 = adae46e9564075ae288af8082d5ad9fd install : $(TARGET) -- 2.16.2

1 0

[PATCH] PAM: Delete old lib and symlinks
by Erik Kapfer 18 Mar '18

18 Mar '18

Core 119 update delivers an updated PAM whereby the libdir has been changed from /lib to /usr/lib but the old libraries and symlinks are still presant. Since the system searches /lib before /usr/lib , the old libs and symlinks are used which ends up in an `LIBPAM_EXTENSION_1.1' not found. Signed-off-by: Erik Kapfer <erik.kapfer(a)ipfire.org> --- config/rootfiles/core/120/update.sh | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/config/rootfiles/core/120/update.sh b/config/rootfiles/core/120/update.sh index 2f1bca0..02f2ad0 100644 --- a/config/rootfiles/core/120/update.sh +++ b/config/rootfiles/core/120/update.sh @@ -34,6 +34,11 @@ done # Remove forgotten PHP file rm -f /etc/httpd/conf/conf.d/php5.conf +# Delete old PAM libs and symlinks if presant +if ls /lib | grep -q 'libpam.*'; then + rm -f /lib/libpam* +fi + # Stop services # Extract files -- 2.7.4

3 3

Addon Update asterisk and flac
by Michael Liekmeier 18 Mar '18

18 Mar '18

Hi, I have a problem update asterisk and flac via web frontend. Is this the right way to report this problem? Thanks Michael

2 1

[PATCH] logrotate: Update to 3.14.0
by Matthias Fischer 18 Mar '18

18 Mar '18

For details see: https://github.com/logrotate/logrotate/releases Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/logrotate | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/logrotate b/lfs/logrotate index 3749fd7d4..a6b735443 100644 --- a/lfs/logrotate +++ b/lfs/logrotate @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2017 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 3.13.0 +VER = 3.14.0 THISAPP = logrotate-$(VER) DL_FILE = logrotate-$(VER).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 72c2c3028d060131b388a9b330215549 +$(DL_FILE)_MD5 = 9d9cf1d0a0b0433f56e152c5117f7b31 install : $(TARGET) -- 2.16.2

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development March 2018