Development June 2019

development@lists.ipfire.org

14 participants
77 discussions

Wrong filepermissions for '/var/log/rrd/wio' after upgrading to Core 133
by Matthias Fischer 23 Jun '19

23 Jun '19

Hi, I noticed that after upgrading to Core 133 and 'wio 1.3.2-4', that not only the wio-'rrd's had been reset, but the directory '/var/log/rrd/wio/' suddenly belonged to "nobody:nobody/0755". Because of this the wio-Graphs showed no colors at all, even if the client(s) were online. No errors, just white graphs. I changed '/var/log/rrd/wio/' to "root:root/0755" and colors are back. The old ones are gone, but there are colors at all again. IMHO this seems to be a bug in '/src/paks/wio/install', line 29: ... chown -R nobody.nobody /var/log/rrd/wio ... This should read: ... chown -R root.root /var/log/rrd/wio ... Can anyone confirm? Best, Matthias

1 0

[PATCH] less: Update to 551
by Stefan Schantl 23 Jun '19

23 Jun '19

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- less/less.nm | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/less/less.nm b/less/less.nm index e021e37ef..bd7272a76 100644 --- a/less/less.nm +++ b/less/less.nm @@ -4,7 +4,7 @@ ############################################################################### name = less -version = 530 +version = 551 release = 1 groups = Applications/Text @@ -13,10 +13,10 @@ license = GPLv3+ summary = A text file browser similar to more, but better. description - The less utility is a text file browser that resembles more, but has \ - more capabilities. Less allows you to move backwards in the file as \ - well as forwards. Since less doesn't have to read the entire input file \ - before it starts, less starts up more quickly than text editors (for \ + The less utility is a text file browser that resembles more, but has + more capabilities. Less allows you to move backwards in the file as + well as forwards. Since less doesn't have to read the entire input file + before it starts, less starts up more quickly than text editors (for example, vi). end @@ -24,7 +24,7 @@ source_dl = http://www.greenwoodsoftware.com/less/ build requires - ncurses-devel + ncurses-devel >= 6.1 pcre-devel end -- 2.20.1

1 0

[PATCH] suricata-update: New package
by Stefan Schantl 23 Jun '19

23 Jun '19

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- suricata-update/suricata-update.nm | 40 ++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 suricata-update/suricata-update.nm diff --git a/suricata-update/suricata-update.nm b/suricata-update/suricata-update.nm new file mode 100644 index 000000000..35bd9599d --- /dev/null +++ b/suricata-update/suricata-update.nm @@ -0,0 +1,40 @@ +############################################################################### +# IPFire.org - An Open Source Firewall Solution # +# Copyright (C) - IPFire Development Team <info(a)ipfire.org> # +############################################################################### + +name = suricata-update +version = 1.0.5 +release = 1 +thisapp = %{name}-%{version} +arch = noarch + +groups = Development/Tools +url = https://github.com/OISF/suricata-update +license = LGPLv2+ +summary = A tool for updating Suricata rules. + +description + This package contains a Python written tool to update the used rules for + suricata. +end + +source_dl = https://github.com/OISF/%{name}/archive/%{version}.tar.gz#/ + +build + build + %{python3} setup.py build + end + + install + %{python3} setup.py install --root=%{BUILDROOT} + end +end + +packages + package %{name} + + package %{name}-debuginfo + template DEBUGINFO + end +end -- 2.20.1

1 0

[PATCH] ncurses: Update to 6.1
by Stefan Schantl 23 Jun '19

23 Jun '19

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- ncurses/ncurses.nm | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/ncurses/ncurses.nm b/ncurses/ncurses.nm index a54057458..4da26b72a 100644 --- a/ncurses/ncurses.nm +++ b/ncurses/ncurses.nm @@ -4,10 +4,9 @@ ############################################################################### name = ncurses -version = 5.9 -revision = 20150117 -release = 12.%{revision} -thisapp = %{name}-%{version}-%{revision} +version = 6.1 +release = 1 +thisapp = %{name}-%{version} groups = System/Base url = http://invisible-island.net/ncurses/ncurses.html @@ -21,8 +20,7 @@ description discontinued 4.4 BSD classic curses library. end -source_dl = ftp://invisible-island.net/ncurses/current/ -sources = %{thisapp}.tgz +source_dl = https://github.com/mirror/%{name}/archive/v%{version}.tar.gz#/ build requires -- 2.20.1

1 0

[PATCH] compat-ncurses: New package
by Stefan Schantl 23 Jun '19

23 Jun '19

This package is used to keep compatibility for binaries which are linked to the series 5 of ncurses. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- compat-ncurses/compat-ncurses.nm | 106 +++++++++++++++++++++++++++++++ 1 file changed, 106 insertions(+) create mode 100644 compat-ncurses/compat-ncurses.nm diff --git a/compat-ncurses/compat-ncurses.nm b/compat-ncurses/compat-ncurses.nm new file mode 100644 index 000000000..677060fdf --- /dev/null +++ b/compat-ncurses/compat-ncurses.nm @@ -0,0 +1,106 @@ +############################################################################### +# IPFire.org - An Open Source Firewall Solution # +# Copyright (C) - IPFire Development Team <info(a)ipfire.org> # +############################################################################### + +name = compat-ncurses +version = 5.9 +revision = 20150117 +release = 12.%{revision} +thisapp = ncurses-%{version}-%{revision} + +groups = System/Base +url = http://invisible-island.net/ncurses/ncurses.html +license = MIT +summary = Ncurses support utilities. + +description + The curses library routines are a terminal-independent method of + updating character screens with reasonable optimization. The ncurses + (new curses) library is a freely distributable replacement for the + discontinued 4.4 BSD classic curses library. +end + +source_dl = ftp://invisible-island.net/ncurses/current/ +sources = %{thisapp}.tgz + +build + requires + gcc-c++ + end + + configure_options += \ + --with-shared \ + --without-debug \ + --without-ada \ + --with-ospeed=unsigned \ + --with-chtype=long \ + --enable-hard-tabs \ + --enable-xmc-glitch \ + --enable-colorfgbg \ + --with-terminfo-dirs=%{sysconfdir}/terminfo:%{datadir}/terminfo \ + --enable-overwrite \ + --enable-pc-files \ + --with-termlib=tinfo + + export PKG_CONFIG_LIBDIR=%{libdir}/pkgconfig + + build + mkdir -pv narrowc widec + + # Build narrowc version. + cd narrowc + ln -svf ../configure . + ./configure %{configure_options} --with-ticlib + make %{PARALLELISMFLAGS} libs + make %{PARALLELISMFLAGS} -C progs + + # Build widec version. + cd ../widec + ln -svf ../configure . + ./configure %{configure_options} --enable-widec --without-progs + make %{PARALLELISMFLAGS} libs + cd .. + end + + install + make -C narrowc DESTDIR=%{BUILDROOT} install.libs + rm -rvf %{BUILDROOT}%{libdir}/libtinfo.* + make -C widec DESTDIR=%{BUILDROOT} install.libs + + chmod -v 755 %{BUILDROOT}%{libdir}/lib*.so.*.* + + # don't require -ltinfo when linking with --no-add-needed + for l in %{BUILDROOT}%{libdir}/libncurses{,w}.so; do + soname=$(basename $(readlink $l)) + rm -f $l + echo "INPUT($soname -ltinfo)" > $l + done + + rm -f %{BUILDROOT}%{libdir}/libcurses{,w}.so + echo "INPUT(-lncurses)" > %{BUILDROOT}%{libdir}/libcurses.so + echo "INPUT(-lncursesw)" > %{BUILDROOT}%{libdir}/libcursesw.so + echo "INPUT(-ltinfo)" > %{BUILDROOT}%{libdir}/libtermcap.so + + rm -vf %{BUILDROOT}%{libdir}/terminfo + rm -vf %{BUILDROOT}%{libdir}/pkgconfig/{*_g,ncurses++*}.pc + end +end + +packages + package %{name} + template LIBS + + provides + ncurses-libs = %{thisver} + end + + obsoletes + ncurses-libs <= %{thisver} + end + end + + package %{name}-debuginfo + template DEBUGINFO + end +end -- 2.20.1

1 0

IPFire 2.23 - Core Update 133 has been released
by Michael Tremer 23 Jun '19

23 Jun '19

https://blog.ipfire.org/post/ipfire-2-23-core-update-133-has-been-released It is time for the next Core Update. Number 133! Another bug-fix release with many changes under the hood. As always, we recommend to install this update as soon as possible to benefit from the fixes and to help us keeping those coming and to support our developers, please donate now! Toolchain Updates This update brings many updates on the core libraries of the system. Various changes to our build systemare also helping us to build a more modern distribution, faster. The toolchain is now based on GCC 8.3.0, binutils 2.32 and glibc 2.29 which bring various bugfixes, performance improvements and some new features. Although these might not be the most exciting changes, we recommend upgrading as soon as possible since this is essential hardening for backbone components of the user-space. Disabling SMT - Intel's Security Issues Disabling SMT has also been fine-tuned. It is now also being disabled on systems that are vulnerable to "Foreshadow". Probably all processors that are vulnerable to MDS are vulnerable to Foreshadow, too, so this won't affect many systems, but it is more correct to do so. Increasing throughput of the new Intrusion Prevention System As announced before, we were working on increasing the throughput of the IPS. This is being shipped now with this update and integrates a library from Intel which is optimised to perform pattern matching very fast on huge data sets. Its name is hyperscan. This library comes in multiple versions which are all shipped at the same time and is being compiled with support for various CPU instructions which are enabled when the hardware supports them. Those are for example AVX2, AVX and of course all of the SSE series. By utilising those optimised instructions, the processor can process more data by executing only one instruction which is a lot faster. We are soon going to release benchmarks, but first tests have shown that larger systems are benefitting hugely from this and even some smaller embedded processors gain slightly. This feature is automatically configured and will always be enabled when supported. Another change on the IPS is coming from Tim Fitzgeorge who investigated that the IPS was occasionally dropping some packets which it was not meant to without logging. The rule generation was patched accordingly so that won't happen any more and rules will automatically updated when installing this Core Update. Misc. • A long-standing bug in adding fixed DHCP leases has been fixed. Those are now saved right away on the first click, but it is possible to edit the entry. • An incorrect list of cipher suites was generated for IPsec connections when PFS was disabled. This updates fixes that and updates all connections with the correct settings. • ddns: Some new provides have been added • Package updates: bind 9.11.7, jansson 2.12, knot 2.8.2, linux-pam 1.3.1, monit 5.25.3, openssl1.1.1.c, rrdtool 1.7.2, squid 4.7, strongswan 5.8.0, wpa_supplicant 2.8 Add-ons New Packages • tshark A CLI version of Wireshark which is like tcpdump, but has better support for decoding captured packets. Updated Packages • hostapd has been updated to version 2.8 which fixes various security vulnerabilities and other bugs • tor: some bugs that didn't allow the service to start after the last update have been fixed • wio: A problem which caused the IPFire system to unexpectedly shut down has been solved • miau, an IRC bouncer, which was unmaintained since 2010 has been dropped

1 0

[PATCH] nftables: Update to latest snaphot (20190622).
by Stefan Schantl 22 Jun '19

22 Jun '19

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- nftables/nftables.nm | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/nftables/nftables.nm b/nftables/nftables.nm index bca58c5f1..20b5947ac 100644 --- a/nftables/nftables.nm +++ b/nftables/nftables.nm @@ -5,7 +5,9 @@ name = nftables version = 0.9.0 -release = 1 +snapshot = 20190622 +release = 1.%{snapshot} +thisapp = %{name}-%{snapshot} groups = Networking/Tools url = http://netfilter.org/projects/nftables/ @@ -16,12 +18,15 @@ description %{summary} end -source_dl = http://ftp.netfilter.org/pub/nftables/ +source_dl = http://ftp.netfilter.org/pub/nftables/snapshot/ sources = %{thisapp}.tar.bz2 build requires + asciidoc + autoconf autogen + automake bison docbook2X docbook-xsl @@ -32,6 +37,10 @@ build libnftnl-devel >= 1.0.5 readline-devel end + + prepare_cmds + ./autogen.sh + end end packages -- 2.20.1

1 0

[PATCH] gawk: Update to 5.0.1
by Stefan Schantl 22 Jun '19

22 Jun '19

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- gawk/gawk.nm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gawk/gawk.nm b/gawk/gawk.nm index 8458b03a1..905b9e097 100644 --- a/gawk/gawk.nm +++ b/gawk/gawk.nm @@ -4,7 +4,7 @@ ############################################################################### name = gawk -version = 4.1.3 +version = 5.0.1 release = 1 groups = System/Tools @@ -13,8 +13,8 @@ license = GPLv3+ summary = The GNU version of the awk text processing utility. description - The gawk package contains the GNU version of awk, a text processing \ - utility. Awk interprets a special-purpose programming language to do \ + The gawk package contains the GNU version of awk, a text processing + utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs. end -- 2.20.1

1 0

[PATCH] kernel: add dependency to intel-microcode
by Arne Fitzenreiter 22 Jun '19

22 Jun '19

Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> --- kernel/kernel.nm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/kernel/kernel.nm b/kernel/kernel.nm index 033ef0e..aa52df1 100644 --- a/kernel/kernel.nm +++ b/kernel/kernel.nm @@ -5,7 +5,7 @@ name = kernel version = 5.0 -release = 2 +release = 3 thisapp = linux-%{version} maintainer = Arne Fitzenreiter <arne.fitzenreiter(a)ipfire.org> @@ -311,6 +311,7 @@ packages dracut kernel-updater linux-firmware + intel-microcode end files -- 2.6.3

1 0

[PATCH] openssh: Update to 8.0p1
by Stefan Schantl 22 Jun '19

22 Jun '19

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- openssh/openssh.nm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openssh/openssh.nm b/openssh/openssh.nm index cd5f32dad..0cb49bcbf 100644 --- a/openssh/openssh.nm +++ b/openssh/openssh.nm @@ -4,7 +4,7 @@ ############################################################################### name = openssh -version = 7.5p1 +version = 8.0p1 release = 1 groups = Application/Internet -- 2.20.1

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development June 2019