Development May 2020

development@lists.ipfire.org

16 participants
95 discussions

[PATCH] firewall: Accept traffic on loopback interface if source and destination are within 127.0.0.0/8 only
by Peter Müller 20 May '20

20 May '20

This ensures traffic on the loopback interface matches the IPv4 loopback characteristics (source and destination are within 127.0.0.0/8) and prevents any damage in the unlikely case of non-loopback traffic being injected/emitted (in)to the loopback interface. Cc: Arne Fitzenreiter <arne.fitzenreiter(a)ipfire.org> Cc: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/initscripts/system/firewall | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index 00512d9fa..409aaf7a9 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -219,10 +219,10 @@ iptables_init() { iptables -A INPUT -j ICMPINPUT iptables -A ICMPINPUT -p icmp --icmp-type 8 -j ACCEPT - # Accept everything on loopback + # Accept everything on loopback if both source and destination are within 127.0.0.0/8 iptables -N LOOPBACK - iptables -A LOOPBACK -i lo -j ACCEPT - iptables -A LOOPBACK -o lo -j ACCEPT + iptables -A LOOPBACK -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + iptables -A LOOPBACK -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT # Filter all packets with loopback addresses on non-loopback interfaces. iptables -A LOOPBACK -s 127.0.0.0/8 -j DROP -- 2.26.1

3 8

[PATCH] ids-functions.pl: Quote array of subnets
by Michael Tremer 20 May '20

20 May '20

Reported-by: Daniel Weismüller <daniel.weismueller(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/cfgroot/ids-functions.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/cfgroot/ids-functions.pl b/config/cfgroot/ids-functions.pl index e33569849..d45e1c70a 100644 --- a/config/cfgroot/ids-functions.pl +++ b/config/cfgroot/ids-functions.pl @@ -677,7 +677,7 @@ sub generate_home_net_file() { } # Format home net declaration. - my $line = "[" . join(',', @networks) . "]"; + my $line = "\"[" . join(',', @networks) . "]\""; # Open file to store the addresses of the home net. open(FILE, ">$homenet_file") or die "Could not open $homenet_file. $!\n"; -- 2.20.1

1 0

[PATCH v2] bacula: Update to 9.6.3
by Adolf Belka 20 May '20

20 May '20

- Update bacula from 9.0.6 to 9.6.3 - Current version of bacula in ipfire is 9.0.6 and is over two and a half years old. - Update config options in lfs to include bacula recommended smartalloc option. - Add install, uninstall and update files in src/paks/bacula - Updated backup/includes to only backup the config file. - Corrected items highlighted by Michael Tremer. Bumped PAK_VER to 5 instead of 1 in lfs Removed "" from DEPS = line in lfs Removed an if statement from install.sh with regard to the creation of bacula-fd.conf.new for any update - Added in the bacula rootfile. Signed-off-by: Adolf Belka<ahb.ipfire(a)gmail.com> --- diff --git a/config/backup/includes/bacula b/config/backup/includes/bacula index 8d5c119f9..0da11db7d 100644 --- a/config/backup/includes/bacula +++ b/config/backup/includes/bacula @@ -1 +1 @@ -/etc/bacula/ +/etc/bacula/bacula-fd.conf diff --git a/config/rootfiles/packages/bacula b/config/rootfiles/packages/bacula index 64fb0d2ca..963dc00c8 100644 --- a/config/rootfiles/packages/bacula +++ b/config/rootfiles/packages/bacula @@ -13,22 +13,23 @@ etc/bacula/bacula-fd.conf #etc/bacula/btraceback.gdb #etc/bacula/btraceback.mdb #etc/bacula/disk-changer +#etc/bacula/isworm #etc/bacula/mtx-changer #etc/bacula/mtx-changer.conf #etc/bacula/tapealert etc/rc.d/init.d/bacula #opt/bacula #opt/bacula/log -usr/lib/bpipe-fd.so -usr/lib/libbac-9.0.6.so +#usr/lib/bpipe-fd.so +usr/lib/libbac-9.6.3.so #usr/lib/libbac.la -#usr/lib/libbac.so -usr/lib/libbaccfg-9.0.6.so +usr/lib/libbac.so +usr/lib/libbaccfg-9.6.3.so #usr/lib/libbaccfg.la -#usr/lib/libbaccfg.so -usr/lib/libbacfind-9.0.6.so +usr/lib/libbaccfg.so +usr/lib/libbacfind-9.6.3.so #usr/lib/libbacfind.la -#usr/lib/libbacfind.so +usr/lib/libbacfind.so #usr/sbin/bacula usr/sbin/bacula-fd #usr/sbin/bbconsjson @@ -61,4 +62,4 @@ usr/sbin/bacula-fd #usr/share/man/man8/bwild.8.gz #usr/share/man/man8/dbcheck.8.gz #var/bacula -var/bacula/working +#var/bacula/working diff --git a/lfs/bacula b/lfs/bacula index 8c96c7ba1..9803225bb 100644 --- a/lfs/bacula +++ b/lfs/bacula @@ -24,15 +24,15 @@ include Config -VER = 9.0.6 +VER = 9.6.3 THISAPP = bacula-$(VER) DL_FILE = $(THISAPP).tar.gz -DL_FROM = $(URL_IPFIRE) +DL_FROM =https://www.bacula.org/download/10266/ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = bacula -PAK_VER = 4 +PAK_VER = 5 DEPS = @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 9168e398808c42bf290515f60892f643 +$(DL_FILE)_MD5 = 6d64bc27de773ee0e0ca1d836cbe4008 install : $(TARGET) @@ -80,12 +80,13 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) $(UPDATE_AUTOMAKE) cd $(DIR_APP) && ./configure \ --prefix=/usr \ + --enable-smartalloc \ --sysconfdir=/etc/bacula \ --with-working-dir=/var/bacula/working \ --enable-client-only cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install - ln -s /etc/bacula/bacula-ctl-fd /etc/rc.d/init.d/bacula + ln -sf /etc/bacula/bacula-ctl-fd /etc/rc.d/init.d/bacula rm -f/root/.rnd @rm -rf $(DIR_APP) @$(POSTBUILD) diff --git a/src/paks/bacula/install.sh b/src/paks/bacula/install.sh new file mode 100644 index 000000000..49aef9379 --- /dev/null +++ b/src/paks/bacula/install.sh @@ -0,0 +1,38 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 2 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2007 IPFire-Team<info(a)ipfire.org>. # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh +extract_files +if [ -f /etc/bacula/bacula-fd.conf ]; then + cp /etc/bacula/bacula-fd.conf /etc/bacula/bacula-fd.conf.new +fi +if [ ! -d /var/bacula/working ]; then + mkdir -p /var/bacula/working +fi +restore_backup ${NAME} +# create startlinks +ln -sf ../init.d/bacula /etc/rc.d/rc0.d/K35bacula +ln -sf ../init.d/bacula /etc/rc.d/rc3.d/S65bacula +ln -sf ../init.d/bacula /etc/rc.d/rc6.d/K35bacula +start_service ${NAME} +exit 0 diff --git a/src/paks/bacula/uninstall.sh b/src/paks/bacula/uninstall.sh new file mode 100644 index 000000000..762bb103c --- /dev/null +++ b/src/paks/bacula/uninstall.sh @@ -0,0 +1,33 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 2 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2007 IPFire-Team<info(a)ipfire.org>. # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh +stop_service ${NAME} +make_backup ${NAME} +# Remove bacula-fd.conf.new file and/var/bacula/ directory +rm -rf /etc/bacula/bacula-fd.conf.new +rm -r /var/bacula +remove_files +# Remove all start links. +rm -rf/etc/rc.d/rc*.d/*bacula +exit 0 diff --git a/src/paks/bacula/update.sh b/src/paks/bacula/update.sh new file mode 100644 index 000000000..89c40d0d7 --- /dev/null +++ b/src/paks/bacula/update.sh @@ -0,0 +1,26 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 2 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2007 IPFire-Team<info(a)ipfire.org>. # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh +./uninstall.sh +./install.sh

1 0

'cannot access'-message after building 64bit
by Matthias Fischer 20 May '20

20 May '20

Hi, I tried to install and configure the 64bit-Devel the same way as the 32bit-Devel but I always get these final "cannot access"-message (ONLY after building with 64bit!): ... git (2.12.2) [ 8 ][ DONE ] mpc (0.21) [ 0 ][ DONE ] xen-image [ 0 ][ SKIP ] ls: cannot access '*.bz2': No such file or directory Checking Logfiles for new Files *** Build finished in 2:49:36 ... This seems to depend on the following command(s) in 'make.sh' (Core144, line 1695 or 1700): ... mv $LFS/install/images/*.bz2 $BASEDIR >> $LOGFILE 2>&1 ... Perhaps this is only cosmetic - on 64bit the xen-image is passed over anyway (normal), but why do I see these message? As far as I know it should be sent to nowhere!? Thanks for any hints. Best, Matthias

2 2

Re: [PATCH 0/3] Help for GUI
by Jon Murphy 19 May '20

19 May '20

My 2 cents below... > Status / VPN: Net-to-Net Statistics Need wiki page for this. > Firewall / Firewall Groups https://wiki.ipfire.org/configuration/firewall/fwgroups <https://wiki.ipfire.org/configuration/firewall/fwgroups> > Firewall / Blue Access https://wiki.ipfire.org/configuration/firewall/accesstoblue <https://wiki.ipfire.org/configuration/firewall/accesstoblue> > Firewall / OpenVPN Roadwarrior connections log I did not see this in the IPFire WebGUI. The only place I saw this was menu Logs > System Logs > Section: OpenVPN But I don’t think this is what you are referring to. --- > Status / Qos Graphs * I did not see "Status / QoS Graphs" in the IPFire WebGUI. The only place I saw QoS Graphs was here: https://ipfire:444/cgi-bin/qos.cgi <https://ipfire:444/cgi-bin/qos.cgi> And the only Help (though without graphs) is here: https://wiki.ipfire.org/configuration/services/qos <https://wiki.ipfire.org/configuration/services/qos> > Status / Modem Status I did not see "Status / Modem Status" in the IPFire WebGUI. I’m not sure I know what this is... > Status / Atm-status I did not see "Status / Atm-Status" in the IPFire WebGUI. I’m not sure I know what this is... > Network / Network configuration * Is this the Zone Configuration? I don’t think Zone Config is what you are referring to but I am not sure https://wiki.ipfire.org/configuration/network/zoneconf <https://wiki.ipfire.org/configuration/network/zoneconf> > Firewall / UPnP Is this "P2P networks"? https://wiki.ipfire.org/configuration/firewall/p2p-block <https://wiki.ipfire.org/configuration/firewall/p2p-block> > IPFire / Help * I’m not sure I know what is needed here… Is this a new wiki page? > Log / Open VPN Log * Is a section specifically for OpenVPN Logs needed on this wiki page? https://wiki.ipfire.org/configuration/logs/system <https://wiki.ipfire.org/configuration/logs/system> --- > Status / Entropy https://wiki.ipfire.org/configuration/status/entropy <https://wiki.ipfire.org/configuration/status/entropy> Need skilled help with this wiki page > Status / Connections https://wiki.ipfire.org/configuration/status/connections <https://wiki.ipfire.org/configuration/status/connections> Need skilled help with this wiki page > Status / MDstat Need skilled help with this wiki page > Network / URL Filter https://wiki.ipfire.org/configuration/network/proxy/url-filter <https://wiki.ipfire.org/configuration/network/proxy/url-filter> > > Actually, it's not too bad. The only menu items (out of 72) in the core > that I couldn't find help for are: > > Status / VPN: Net-to-Net Statistics > Firewall / Firewall Groups > Firewall / Blue Access > Firewall / OpenVPN Roadwarrior connections log > > Status / Qos Graphs * > Status / Modem Status > Status / Atm-status > Network / Network configuration * > Firewall / UPnP > IPFire / Help * > Log / Open VPN Log * > > and at least four of those (*) don't appear to exist. There might well > be pages for some of these which I didn't see when I was adding the links. > There are also four pages which obviously require further work: > > Status / Entropy > Status / Connections > Status / MDstat > Network / URL Filter >

2 1

Re: Development Digest, Vol 100, Issue 41
by Jon Murphy 19 May '20

19 May '20

My 2 cents below... > Status / VPN: Net-to-Net Statistics Need wiki page for this. > Firewall / Firewall Groups https://wiki.ipfire.org/configuration/firewall/fwgroups > Firewall / Blue Access https://wiki.ipfire.org/configuration/firewall/accesstoblue > Firewall / OpenVPN Roadwarrior connections log I did not see this in the IPFire WebGUI. The only place I saw this was menu Logs > System Logs > Section: OpenVPN But I don’t think this is what you are referring to. --- > Status / Qos Graphs * I did not see "Status / QoS Graphs" in the IPFire WebGUI. The only place I saw QoS Graphs was here: https://ipfire:444/cgi-bin/qos.cgi And the only Help (though without graphs) is here: https://wiki.ipfire.org/configuration/services/qos > Status / Modem Status I did not see "Status / Modem Status" in the IPFire WebGUI. I’m not sure I know what this is... > Status / Atm-status I did not see "Status / Atm-Status" in the IPFire WebGUI. I’m not sure I know what this is... > Network / Network configuration * Is this the Zone Configuration? I don’t think Zone Config is what you are referring to but I am not sure https://wiki.ipfire.org/configuration/network/zoneconf > Firewall / UPnP Is this "P2P networks"? https://wiki.ipfire.org/configuration/firewall/p2p-block > IPFire / Help * I’m not sure I know what is needed here… Is this a new wiki page? > Log / Open VPN Log * Is a section specifically for OpenVPN Logs needed on this wiki page? https://wiki.ipfire.org/configuration/logs/system <https://wiki.ipfire.org/configuration/logs/system> --- > Status / Entropy https://wiki.ipfire.org/configuration/status/entropy <https://wiki.ipfire.org/configuration/status/entropy> Need skilled help with this wiki page > Status / Connections https://wiki.ipfire.org/configuration/status/connections <https://wiki.ipfire.org/configuration/status/connections> Need skilled help with this wiki page > Status / MDstat Need skilled help with this wiki page > Network / URL Filter https://wiki.ipfire.org/configuration/network/proxy/url-filter > > Actually, it's not too bad. The only menu items (out of 72) in the core > that I couldn't find help for are: > > Status / VPN: Net-to-Net Statistics > Firewall / Firewall Groups > Firewall / Blue Access > Firewall / OpenVPN Roadwarrior connections log > > Status / Qos Graphs * > Status / Modem Status > Status / Atm-status > Network / Network configuration * > Firewall / UPnP > IPFire / Help * > Log / Open VPN Log * > > and at least four of those (*) don't appear to exist. There might well > be pages for some of these which I didn't see when I was adding the links. > There are also four pages which obviously require further work: > > Status / Entropy > Status / Connections > Status / MDstat > Network / URL Filter >

1 0

[PATCH] bacula: Update to 9.6.3
by Adolf Belka 19 May '20

19 May '20

Update bacula from 9.0.6 to 9.6.3 - Current version of bacula in ipfire is 9.0.6 and is over two and a half years old. - update config options in lfs to include bacula recommended smartalloc option. - Add install, uninstall and update files in src/paks/bacula - updated backup/includes to only backup the config file. Signed-off-by: Adolf Belka <ahb.ipfire(a)gmail.com> --- diff --git a/config/backup/includes/bacula b/config/backup/includes/bacula index 8d5c119f9..0da11db7d 100644 --- a/config/backup/includes/bacula +++ b/config/backup/includes/bacula @@ -1 +1 @@ -/etc/bacula/ +/etc/bacula/bacula-fd.conf diff --git a/lfs/bacula b/lfs/bacula index 8c96c7ba1..878aefa0c 100644 --- a/lfs/bacula +++ b/lfs/bacula @@ -24,17 +24,17 @@ include Config -VER = 9.0.6 +VER = 9.6.3 THISAPP = bacula-$(VER) DL_FILE = $(THISAPP).tar.gz -DL_FROM = $(URL_IPFIRE) +DL_FROM = https://www.bacula.org/download/10266/ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = bacula -PAK_VER = 4 +PAK_VER = 1 -DEPS = +DEPS = "" ############################################################################### # Top-level Rules @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 9168e398808c42bf290515f60892f643 +$(DL_FILE)_MD5 = 6d64bc27de773ee0e0ca1d836cbe4008 install : $(TARGET) @@ -80,12 +80,13 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) $(UPDATE_AUTOMAKE) cd $(DIR_APP) && ./configure \ --prefix=/usr \ + --enable-smartalloc \ --sysconfdir=/etc/bacula \ --with-working-dir=/var/bacula/working \ --enable-client-only cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install - ln -s /etc/bacula/bacula-ctl-fd /etc/rc.d/init.d/bacula + ln -sf /etc/bacula/bacula-ctl-fd /etc/rc.d/init.d/bacula rm -f /root/.rnd @rm -rf $(DIR_APP) @$(POSTBUILD) diff --git a/src/paks/bacula/install.sh b/src/paks/bacula/install.sh new file mode 100644 index 000000000..fb45b593b --- /dev/null +++ b/src/paks/bacula/install.sh @@ -0,0 +1,44 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 2 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2007 IPFire-Team <info(a)ipfire.org>. # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh +extract_files + +if [ -f /etc/bacula/bacula-fd.conf ]; then + mv /etc/bacula/bacula-fd.conf /etc/bacula/bacula-fd.conf.new +fi + +restore_backup ${NAME} + +if [ ! -f /etc/bacula/bacula-fd.conf ]; then + cp -a /etc/bacula/bacula-fd.conf.new /etc/bacula/bacula-fd.conf +fi + +# create startlinks +ln -sf ../init.d/bacula /etc/rc.d/rc0.d/K35bacula +ln -sf ../init.d/bacula /etc/rc.d/rc3.d/S65bacula +ln -sf ../init.d/bacula /etc/rc.d/rc6.d/K35bacula + +start_service bacula + +exit 0 diff --git a/src/paks/bacula/uninstall.sh b/src/paks/bacula/uninstall.sh new file mode 100644 index 000000000..4a97eb3e9 --- /dev/null +++ b/src/paks/bacula/uninstall.sh @@ -0,0 +1,32 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 2 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2007 IPFire-Team <info(a)ipfire.org>. # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh +stop_service ${NAME} +make_backup ${NAME} +remove_files + +# Remove all start links. +rm -rf /etc/rc.d/rc*.d/*bacula + +exit 0 diff --git a/src/paks/bacula/update.sh b/src/paks/bacula/update.sh new file mode 100644 index 000000000..89c40d0d7 --- /dev/null +++ b/src/paks/bacula/update.sh @@ -0,0 +1,26 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 2 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2007 IPFire-Team <info(a)ipfire.org>. # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh +./uninstall.sh +./install.sh

2 5

[PATCH] unbound: Update to 1.10.1
by Matthias Fischer 19 May '20

19 May '20

For details see: https://lists.nlnetlabs.nl/pipermail/unbound-users/2020-May/006833.html Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/unbound | 2 +- lfs/unbound | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 945b08507..cfa8d8ae5 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.1.7 +usr/lib/libunbound.so.8.1.8 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/lfs/unbound b/lfs/unbound index 14c1bca5b..c119d6b2d 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2019 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.10.0 +VER = 1.10.1 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 0754392baee77c18fd8295b5e51e6fd8 +$(DL_FILE)_MD5 = 48f8ee02d0d92603a8d7f4fda7152da0 install : $(TARGET) -- 2.18.0

2 2

[PATCH] bind: Update to 9.11.19
by Matthias Fischer 19 May '20

19 May '20

For details see: https://downloads.isc.org/isc/bind9/9.11.19/RELEASE-NOTES-bind-9.11.19.html "Security Fixes To prevent exhaustion of server resources by a maliciously configured domain, the number of recursive queries that can be triggered by a request before aborting recursion has been further limited. Root and top-level domain servers are no longer exempt from the max-recursion-queries limit. Fetches for missing name server address records are limited to 4 for any domain. This issue was disclosed in CVE-2020-8616. [GL #1388] Replaying a TSIG BADTIME response as a request could trigger an assertion failure. This was disclosed in CVE-2020-8617. [GL #1703] Feature Changes Message IDs in inbound AXFR transfers are now checked for consistency. Log messages are emitted for streams with inconsistent message IDs. [GL #1674] Bug Fixes When running on a system with support for Linux capabilities, named drops root privileges very soon after system startup. This was causing a spurious log message, "unable to set effective uid to 0: Operation not permitted", which has now been silenced. [GL #1042] [GL #1090] When named-checkconf -z was run, it would sometimes incorrectly set its exit code. It reflected the status of the last view found; if zone-loading errors were found in earlier configured views but not in the last one, the exit code indicated success. Thanks to Graham Clinch. [GL #1807] When built without LMDB support, named failed to restart after a zone with a double quote (") in its name was added with rndc addzone. Thanks to Alberto Fernández. [GL #1695]" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/bind | 4 ++-- lfs/bind | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index 8c6f7983c..d70ce3272 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -271,7 +271,7 @@ usr/lib/libbind9.so.161.0.4 #usr/lib/libdns.la #usr/lib/libdns.so usr/lib/libdns.so.1110 -usr/lib/libdns.so.1110.0.1 +usr/lib/libdns.so.1110.0.2 #usr/lib/libisc.la #usr/lib/libisc.so usr/lib/libisc.so.1105 @@ -283,7 +283,7 @@ usr/lib/libisccc.so.161.0.1 #usr/lib/libisccfg.la #usr/lib/libisccfg.so usr/lib/libisccfg.so.163 -usr/lib/libisccfg.so.163.0.6 +usr/lib/libisccfg.so.163.0.7 #usr/lib/liblwres.la #usr/lib/liblwres.so usr/lib/liblwres.so.161 diff --git a/lfs/bind b/lfs/bind index 1d5bca986..4d0602eda 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@ include Config -VER = 9.11.18 +VER = 9.11.19 THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 83144af1532ba16e95f90b42036ef519 +$(DL_FILE)_MD5 = 41bc2c6509a4c324e16775b462608820 install : $(TARGET) -- 2.18.0

1 0

[PATCH] Tor: update to 0.4.3.5
by Peter Müller 19 May '20

19 May '20

Please refer to https://blog.torproject.org/node/1872 for release notes. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/tor | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/tor b/lfs/tor index 83ffa7371..ec08bf0f3 100644 --- a/lfs/tor +++ b/lfs/tor @@ -24,7 +24,7 @@ include Config -VER = 0.4.2.7 +VER = 0.4.3.5 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 48 +PAK_VER = 49 DEPS = libseccomp @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = a4b338b9f7444f4f89259c9736ff74c8 +$(DL_FILE)_MD5 = 0ad32a560bce8eeb64496d2a0fd8035c install : $(TARGET) -- 2.26.1

1 0

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development May 2020