Development October 2019

development@lists.ipfire.org

12 participants
77 discussions

[PATCH] fix link to public DNS server list in dns.cgi
by peter.mueller＠ipfire.org 13 Oct '19

13 Oct '19

Fixes: #11851 Reported-by: Dani W <assgex(a)gmail.com> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- html/cgi-bin/dns.cgi | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/html/cgi-bin/dns.cgi b/html/cgi-bin/dns.cgi index 314107df9..eee7a90b4 100644 --- a/html/cgi-bin/dns.cgi +++ b/html/cgi-bin/dns.cgi @@ -2,7 +2,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007 Michael Tremer & Christian Schmidt # +# Copyright (C) 2007-2019 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -91,7 +91,7 @@ print <<END <table border="0" width='100%'> <tr> - <td colspan="2">$Lang::tr{'dns desc'} <img src="/images/dns_link.png" border="0" align="absmiddle"/><a href="http://wiki.ipfire.org/en/dns/public-servers" target="_blank">$Lang::tr{'dns list'}</a></td> + <td colspan="2">$Lang::tr{'dns desc'} <img src="/images/dns_link.png" border="0" align="absmiddle"/><a href="https://wiki.ipfire.org/dns/public-servers" target="_blank">$Lang::tr{'dns list'}</a></td> </tr> <tr> <td colspan="2"> </td> -- 2.16.4

2 1

[PATCH] fix typo in hostapd initscript
by peter.mueller＠ipfire.org 13 Oct '19

13 Oct '19

Fixes: #11237 Reported-by: Tom Rymes <tomvend(a)rymes.com> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/hostapd | 2 +- src/initscripts/packages/hostapd | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/hostapd b/lfs/hostapd index c02c9724c..382482230 100644 --- a/lfs/hostapd +++ b/lfs/hostapd @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = hostapd -PAK_VER = 49 +PAK_VER = 50 DEPS = "" diff --git a/src/initscripts/packages/hostapd b/src/initscripts/packages/hostapd index 27e79f0a7..5945375f3 100644 --- a/src/initscripts/packages/hostapd +++ b/src/initscripts/packages/hostapd @@ -32,7 +32,7 @@ case "${1}" in # Check if INTERFACE is an actual wireless device if [ ! -d "/sys/class/net/${INTERFACE}/wireless" ]; then - boot_mesg "Interface $INTERFACE is no wireless device." ${FAILURE} + boot_mesg "Interface $INTERFACE is not a wireless device." ${FAILURE} echo_failure exit 0 fi -- 2.16.4

2 1

Core 136 released
by Matthias Fischer 13 Oct '19

13 Oct '19

Hi, ...I just noticed a typo/missing info on https://blog.ipfire.org/post/ipfire-2-23-core-update-136-released ...: ;_) Update packages: 'logrotate': should be version 3.*1*5.1 Addons: 'monit': is updated from version *3.23* (Release 10) to *3.25.3* (Release 11) jm2c ;-) Best, Matthias

2 1

[PATCH] rust: fix year in LFS file
by peter.mueller＠ipfire.org 13 Oct '19

13 Oct '19

Tempus fugit, I know... :-) Cc: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/rust | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lfs/rust b/lfs/rust index e4241bfb4..47e9a0ea5 100644 --- a/lfs/rust +++ b/lfs/rust @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2019 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # -- 2.16.4

2 1

[PATCH] dhcpcd: Update to 8.1.0
by Matthias Fischer 13 Oct '19

13 Oct '19

For details see: https://roy.marples.name/blog/dhcpcd-8-1-0-released "DragonFlyBSD: Improved rc.d handling Fix carrier status after a route socket overflow Allow domain spaced options DHCP: Allow not sending Force Renew Nonce or Reconf Accept IPv4LL: Now passes Apple Bonjour test versions 1.4 and 1.5 ARP: Fix a typo and remove pragma (thus working with old gcc) DHCP6: Fix a cosmetic issue with infinite leases DHCP6: SLA 0 and Prefix Len 0 will now add a delegated /64 address Ignore some virtual interfaces such as Tap and Bridge by default BPF: Move validation logic out of BPF and back into dhcpcd" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/dhcpcd | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/dhcpcd b/lfs/dhcpcd index d37cd67d3..26f261b57 100644 --- a/lfs/dhcpcd +++ b/lfs/dhcpcd @@ -24,7 +24,7 @@ include Config -VER = 8.0.6 +VER = 8.1.0 THISAPP = dhcpcd-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 5d3edd06595130f2b24609aade342488 +$(DL_FILE)_MD5 = f9e421e3c6f23b83cf82e9ab299c52b3 install : $(TARGET) -- 2.18.0

2 1

Redacting sensitive mail headers for authenticated clients
by peter.mueller＠ipfire.org 13 Oct '19

13 Oct '19

Hello *, as of today, our primary mail server, mail01.haj.ipfire.org, will redact IP address and HELO banner of messages received from authenticated clients (i.e. those who send via submissions.ipfire.org). Other mails remain unchanged. Stripping out other sensitive metadata such as User-Agent headers was in place for several weeks now, and as far as I am concerned, there were no complaints about it. Since the IP address reveals ISP, internal details and possibly the location of a sender, I consider removing it to be important in order to protect privacy of anyone using our mail infrastructure. Redacted Received headers will look like this one: > Received: from [127.0.0.1] (localhost [127.0.0.1]) > (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) > (Client did not present a certificate) > by mail01.ipfire.org (Postfix) with ESMTPSA id 46rgZ44pV1z2MS > for <test(a)lists.ipfire.org>; Sun, 13 Oct 2019 12:13:00 +0000 (UTC) If necessary, we are still able to look up the sender's IP address in the mail server log files. For the rest of the world, it's just none of their business. Please let me know if you experience any issues with this our our mail systems in general. Thanks, and best regards, Peter Müller

1 0

patchwork.ipfire.org => Error: MOZILLA_PKIX_ERROR_REQUIRED_TLS_FEATURE_MISSING
by Stephan Feddersen 13 Oct '19

13 Oct '19

Hi Matthias, same here with Firefox v69.03 64bit With Google Chrome 77.0.3865.120 (Offizieller Build) (64-Bit) evrything is fine. Best Stephan

1 0

IPFire 2.23 - Core Update 136 released
by Michael Tremer 10 Oct '19

10 Oct '19

https://blog.ipfire.org/post/ipfire-2-23-core-update-136-released This is the official release announcement for IPFire 2.23 - Core Update 136. A new update packed with loads of security fixes, bug fixes and a couple of important new features. Please donate [1] to help our developers and keep bringing you new features. Thank you, it means a lot. OpenSSL 1.1.1d This update ships the latest update of the OpenSSL library which has received some important fixes [2] in its latest release: * CVE-2019-1547: With custom elliptic curves, timing attacks were made possible again. This is of very low risk in IPFire, since we are not using any custom curves. * CVE-2019-1549: Forked processes could have shared the same seed for their random number generator which is being fixed in this one by mixing in a high precision timer. * CVE-2019-1563: Another padding oracle for large PKCS7 messages All of these are classified as "low severity". However, we recommend to install this update as soon as possible. Perl 5.30 Arne has been busy and been working on replacing Perl with the latest stable version. This requires that loads of applications that use Perl - like our own web user interface - have to be shipped again as well as many add-ons. Hence this update is rather large. GeoIP Since Maxmind is no longer publishing their GeoIP database in the original format, but unfortunately not providing any good bindings for the new release, we have only had an outdated version of the database that we made available in IPFire. There is now a script that converts the current data into the old format which allows us to ship a recent database again. This database is however only being used for showing the country flags on the web UI. GeoIP blocking uses a database in a different format and therefore always has recent data to only block the right things. Misc. * The firewall has a limit for log messages so that flooding the firewall with packets won't cause a Denial-of-Service by filling up the hard drive with gigabytes of logs and also to not starve on write operations. This limit was however very low for modern standards and has therefore been increased to 10 logged packets per second. That will ensure that we won't drop a packet without logging it. * Updated packages: apache 2.4.41, bind 9.11.10, clamav 0.101.4, dhcpcd 8.0.3, knot 2.8.3, logrotate 3.5.1, openssh 8.0p1, patch 2.7.6, texinfo 6.6, unbound 1.9.3, usb_modeswitch1.5.2 * logwatch and logrotate could conflict when running at the same time. This has been changed so only one of them is running at the same time. * Log messages for DMA, the IPFire mailer, and Postfix are now shown on the web UI * The toolchain now ships a compiler for Go Add-ons * Updated packages: freeradius 3.0.19, haproxy 2.0.5, postfix 3.4.6, spamassassin 3.4.2, zabbix_agent 4.2.6 * dnsdist has had its limit of open connections increased to work better in bigger environments * tor: A permission problem has been fixed so that the web UI can save settings again * wio: The RRD files will now be included in the backup as well as various UI improvements have been done Please reboot! This update needs a reboot of your IPFire system. [1] https://www.ipfire.org/donate [2] https://www.openssl.org/news/secadv/20190910.txt

1 0

[PATCH] ipset: Update to version 7.3
by Erik Kapfer 10 Oct '19

10 Oct '19

Some kernel part fixes are included. For a overview of the changelog, take a look in here --> http://ipset.netfilter.org/changelog.html . Signed-off-by: Erik Kapfer <ummeegge(a)ipfire.org> --- lfs/ipset | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/ipset b/lfs/ipset index 3382c668c..fb6a2f38f 100644 --- a/lfs/ipset +++ b/lfs/ipset @@ -24,7 +24,7 @@ include Config -VER = 7.1 +VER = 7.3 THISAPP = ipset-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 72b477d1ce076d681b0799f88280f2f3 +$(DL_FILE)_MD5 = a041d186097a23f1f87208f11144907e install : $(TARGET) -- 2.12.2

1 0

[PATCH 1/7] bash: update to 5.0
by peter.mueller＠ipfire.org 08 Oct '19

08 Oct '19

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/bash | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/lfs/bash b/lfs/bash index 09b4e71e6..79c21896b 100644 --- a/lfs/bash +++ b/lfs/bash @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2019 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 4.3 +VER = 5.0 THISAPP = bash-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -53,7 +53,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 81348932d5da294953e15d4814c74dd1 +$(DL_FILE)_MD5 = 2b44b47b905be16f45709648f671820b install : $(TARGET) @@ -87,8 +87,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) sed -e "s/filename, RTLD_LAZY/filename, RTLD_NOW/" \ -i $(DIR_APP)/builtins/enable.def - for i in $$(seq 1 30); do \ - cd $(DIR_APP) && patch -Np0 < $(DIR_SRC)/src/patches/bash/bash43-$$(printf "%03d" "$${i}") || exit 1; \ + for i in $$(seq 1 11); do \ + cd $(DIR_APP) && patch -Np0 < $(DIR_SRC)/src/patches/bash/bash50-$$(printf "%03d" "$${i}") || exit 1; \ done cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/bash-4.0-paths-1.patch -- 2.16.4

2 8

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development October 2019