Development February 2023

development@lists.ipfire.org

9 participants
118 discussions

Re: IPFire 2.27 - Core Update 164 is available for testing
by Adolf Belka 28 May '24

28 May '24

Hi All, Just tested out CU164 on my vm testbed system. The update went without any problems. You see the pakfire log status again on the wui page during the update. OpenVPN RW setup ran without any issues. Connection successfully made. IPS has the multiple providers option successfully in place. I eventually found the Force Update of rules button, which was very useful for my vm testbed as it is not running all the time and so the rules were a bit out of date. As far as I can tell everything is working fine on it. No issues detected. I will let it run over the next few days during the daytime and see how things go. Regards, Adolf. On 20/02/2022 18:35, IPFire Project wrote: > IPFire Logo > > there is a new post from Michael Tremer on the IPFire Blog: > > *IPFire 2.27 - Core Update 164 is available for testing* > > It is time to test another release for IPFire: IPFire 2.27 - Core Update 164. It comes with a vastly improved firewall engine, a new kernel and various security and bug fixes. Please help us testing this release and if you would like to support us, please donate. > > Click Here To Read More <https://blog.ipfire.org/post/ipfire-2-27-core-update-164-is-available-for-t…> > > The IPFire Project > Don't like these emails? Unsubscribe <https://people.ipfire.org/unsubscribe>. >

4 8

[PATCH 1/2] procy.cgi: Fix bug#12701 - remove advproxy wpad notice line
by Adolf Belka 12 Mar '23

12 Mar '23

- This line is no longer needed with the help button at the top of each WUI page that was implemented by @Leo - Sorry for long time for me to get around to finalising this patch but it is done now. Fixes: bug#12701 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- html/cgi-bin/proxy.cgi | 3 --- 1 file changed, 3 deletions(-) diff --git a/html/cgi-bin/proxy.cgi b/html/cgi-bin/proxy.cgi index b4073343e..a718d5771 100644 --- a/html/cgi-bin/proxy.cgi +++ b/html/cgi-bin/proxy.cgi @@ -1421,9 +1421,6 @@ print <<END <tr> <td colspan="4"> </td> </tr> -<tr> - <td colspan="4">$Lang::tr{'advproxy wpad notice'}</td> -</tr> </table> <hr size='1'> -- 2.39.1

2 3

[PATCH] ovpnmain.cgi: Fix for bug#11048 - insecure download icon for connections with a password
by Adolf Belka 10 Mar '23

10 Mar '23

- The insecure package download icon is shown if entry 41 in /var/ipfire/ovpn/ovpnconfig is set to no-pass. The code block on ovpnmain.cgi that deals with this checks if the connection is a host and if the first password entry is a null. Then it adds no-pass to ovpnconfig. - The same block of code is also used for when he connection is edited. However at this stage the password entry is back to null because the password value is only kept until the connection has been saved. Therefore doing an edit results in the password value being taken as null even for connections with a password. - This fix checks the password value only if entry 41 in the ovpnconfig file is a null. If it is a null then it enters no-pass if the password is a null and it enters pass if the password contains characters. This way the entry 41 always contains either pass or no-pass, except when the connection is being first added and saved. - When adding this fix into a Core Update the update.sh script will need to check if ovpnconfig exists and then add pass to all lines that have a null at entry 41. This will only fix those connections that have not already been edited. Any connections already edited will have no-pass at entry 41 of ovpnconfig and will therefore show the insecure package download icon. - The only way I can think of dealing with entries that already have no-pass added is to go through all .p12 files in the certs directory and if there is a connection entry with that name then to change the no-pass to a pass. However that will only work if the connection name has been set the same as the certificate name, which is not a requirement. - So I think we can only fix those coneections that have never been edited. Any connections with passwords that have already been edited and containg no-pass in ovpnconfig and showing the insecure package download icon will have to be manually dealt with by users. - I think that should still be okay because they currently have two icons when they shouldn't and that will continue to be the case if they don't carry out a manual edit of ovpnconfig. - Maybe someone can think of an alternative way of identifying all connections using a password so that they can have entry 41 changed to pass. I haven't been able to do that so far - Looking forward to feedback Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- html/cgi-bin/ovpnmain.cgi | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index 42a7354fc..2586a1796 100644 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -4326,9 +4326,13 @@ if ($cgiparams{'TYPE'} eq 'net') { $confighash{$key}[39] = $cgiparams{'DAUTH'}; $confighash{$key}[40] = $cgiparams{'DCIPHER'}; - if (($cgiparams{'TYPE'} eq 'host') && ($cgiparams{'CERT_PASS1'} eq "")) { - $confighash{$key}[41] = "no-pass"; - } + if ($confighash{$key}[41] eq "") { + if (($cgiparams{'TYPE'} eq 'host') && ($cgiparams{'CERT_PASS1'} eq "")) { + $confighash{$key}[41] = "no-pass"; + } elsif (($cgiparams{'TYPE'} eq 'host') && ($cgiparams{'CERT_PASS1'} ne "")) { + $confighash{$key}[41] = "pass"; + } + } $confighash{$key}[42] = 'HOTP/T30/6'; $confighash{$key}[43] = $cgiparams{'OTP_STATE'}; -- 2.39.1

1 1

[PATCH 1/2] OpenVPN: Show indication when OpenVPN certificates expire
by Michael Tremer 05 Mar '23

05 Mar '23

This will help with #11742 - OpenVPN: No method to replace expired certificates. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- doc/language_issues.en | 2 ++ doc/language_issues.es | 2 ++ doc/language_issues.fr | 2 ++ doc/language_issues.it | 2 ++ doc/language_issues.nl | 2 ++ doc/language_issues.pl | 2 ++ doc/language_issues.ru | 2 ++ doc/language_issues.tr | 2 ++ doc/language_missings | 14 +++++++++++ html/cgi-bin/ovpnmain.cgi | 51 +++++++++++++++++++++++++-------------- langs/de/cgi-bin/de.pl | 2 ++ langs/en/cgi-bin/en.pl | 2 ++ 12 files changed, 67 insertions(+), 18 deletions(-) diff --git a/doc/language_issues.en b/doc/language_issues.en index c29e3bed6..474921415 100644 --- a/doc/language_issues.en +++ b/doc/language_issues.en @@ -1413,6 +1413,8 @@ WARNING: untranslated string: only digits allowed in max retries field = Only di WARNING: untranslated string: only digits allowed in the idle timeout = Only digits allowed in the idle timeout. WARNING: untranslated string: open connections = Open Connections WARNING: untranslated string: openssl produced an error = OpenSSL produced an error +WARNING: untranslated string: openvpn cert expires soon = Expires Soon +WARNING: untranslated string: openvpn cert has expired = Expired WARNING: untranslated string: openvpn client = OpenVPN client WARNING: untranslated string: openvpn default = Default WARNING: untranslated string: openvpn destination port used = The destination port is already used by another OpenVPN server. diff --git a/doc/language_issues.es b/doc/language_issues.es index 0bd390d5d..91240dbe6 100644 --- a/doc/language_issues.es +++ b/doc/language_issues.es @@ -980,6 +980,8 @@ WARNING: untranslated string: hardware vulnerabilities = Hardware Vulnerabilitie WARNING: untranslated string: info messages = unknown string WARNING: untranslated string: invalid ip or hostname = Invalid IP Address or Hostname WARNING: untranslated string: no data = unknown string +WARNING: untranslated string: openvpn cert expires soon = Expires Soon +WARNING: untranslated string: openvpn cert has expired = Expired WARNING: untranslated string: pakfire ago = ago. WARNING: untranslated string: route config changed = unknown string WARNING: untranslated string: routing config added = unknown string diff --git a/doc/language_issues.fr b/doc/language_issues.fr index 56d69d86e..f70cda819 100644 --- a/doc/language_issues.fr +++ b/doc/language_issues.fr @@ -946,6 +946,8 @@ WARNING: untranslated string: guardian logtarget_file = unknown string WARNING: untranslated string: guardian logtarget_syslog = unknown string WARNING: untranslated string: guardian no entries = unknown string WARNING: untranslated string: guardian service = unknown string +WARNING: untranslated string: openvpn cert expires soon = Expires Soon +WARNING: untranslated string: openvpn cert has expired = Expired WARNING: untranslated string: pakfire ago = ago. WARNING: untranslated string: retbleed = Retbleed WARNING: untranslated string: route config changed = unknown string diff --git a/doc/language_issues.it b/doc/language_issues.it index 9999f947c..cfde3f8e4 100644 --- a/doc/language_issues.it +++ b/doc/language_issues.it @@ -1174,6 +1174,8 @@ WARNING: untranslated string: one month = One Month WARNING: untranslated string: one week = One Week WARNING: untranslated string: one year = One Year WARNING: untranslated string: open connections = Open Connections +WARNING: untranslated string: openvpn cert expires soon = Expires Soon +WARNING: untranslated string: openvpn cert has expired = Expired WARNING: untranslated string: optional = Optional WARNING: untranslated string: otp qrcode = OTP QRCode WARNING: untranslated string: outgoing compression in bytes per second = Outgoing compression diff --git a/doc/language_issues.nl b/doc/language_issues.nl index 14a7b420e..738d7c706 100644 --- a/doc/language_issues.nl +++ b/doc/language_issues.nl @@ -1197,6 +1197,8 @@ WARNING: untranslated string: one month = One Month WARNING: untranslated string: one week = One Week WARNING: untranslated string: one year = One Year WARNING: untranslated string: open connections = Open Connections +WARNING: untranslated string: openvpn cert expires soon = Expires Soon +WARNING: untranslated string: openvpn cert has expired = Expired WARNING: untranslated string: optional = Optional WARNING: untranslated string: otp qrcode = OTP QRCode WARNING: untranslated string: outgoing compression in bytes per second = Outgoing compression diff --git a/doc/language_issues.pl b/doc/language_issues.pl index a53a208d9..ab21f1381 100644 --- a/doc/language_issues.pl +++ b/doc/language_issues.pl @@ -1355,6 +1355,8 @@ WARNING: untranslated string: one month = One Month WARNING: untranslated string: one week = One Week WARNING: untranslated string: one year = One Year WARNING: untranslated string: open connections = Open Connections +WARNING: untranslated string: openvpn cert expires soon = Expires Soon +WARNING: untranslated string: openvpn cert has expired = Expired WARNING: untranslated string: openvpn default = Default WARNING: untranslated string: openvpn destination port used = The destination port is already used by another OpenVPN server. WARNING: untranslated string: openvpn fragment allowed with udp = Using fragment is only allowed when using the UDP protocol. diff --git a/doc/language_issues.ru b/doc/language_issues.ru index c5dc1aa61..6b2622f26 100644 --- a/doc/language_issues.ru +++ b/doc/language_issues.ru @@ -1353,6 +1353,8 @@ WARNING: untranslated string: one month = One Month WARNING: untranslated string: one week = One Week WARNING: untranslated string: one year = One Year WARNING: untranslated string: open connections = Open Connections +WARNING: untranslated string: openvpn cert expires soon = Expires Soon +WARNING: untranslated string: openvpn cert has expired = Expired WARNING: untranslated string: openvpn default = Default WARNING: untranslated string: openvpn destination port used = The destination port is already used by another OpenVPN server. WARNING: untranslated string: openvpn fragment allowed with udp = Using fragment is only allowed when using the UDP protocol. diff --git a/doc/language_issues.tr b/doc/language_issues.tr index 552082a96..6b86ebc7e 100644 --- a/doc/language_issues.tr +++ b/doc/language_issues.tr @@ -1091,6 +1091,8 @@ WARNING: untranslated string: no entries = No entries at the moment. WARNING: untranslated string: not affected = Not Affected WARNING: untranslated string: not validating = Not validating WARNING: untranslated string: open connections = Open Connections +WARNING: untranslated string: openvpn cert expires soon = Expires Soon +WARNING: untranslated string: openvpn cert has expired = Expired WARNING: untranslated string: optional = Optional WARNING: untranslated string: otp qrcode = OTP QRCode WARNING: untranslated string: ovpn connection name = Connection Name diff --git a/doc/language_missings b/doc/language_missings index 65d38b422..934c5a60c 100644 --- a/doc/language_missings +++ b/doc/language_missings @@ -105,6 +105,8 @@ < dns servers < hardware vulnerabilities < invalid ip or hostname +< openvpn cert expires soon +< openvpn cert has expired < service boot setting unavailable < transport mode does not support vti < wlanap @@ -127,6 +129,8 @@ < retbleed < service boot setting unavailable < show dh +< openvpn cert expires soon +< openvpn cert has expired < upload fcdsl.o ############################################################################ # Checking cgi-bin translations for language: it # @@ -470,6 +474,8 @@ < one week < one year < open connections +< openvpn cert expires soon +< openvpn cert has expired < optional < otp qrcode < outgoing compression in bytes per second @@ -997,6 +1003,8 @@ < one week < one year < open connections +< openvpn cert expires soon +< openvpn cert has expired < optional < otp qrcode < outgoing compression in bytes per second @@ -1829,6 +1837,8 @@ < one week < one year < open connections +< openvpn cert expires soon +< openvpn cert has expired < openvpn default < openvpn destination port used < openvpn disabled @@ -2812,6 +2822,8 @@ < one week < one year < open connections +< openvpn cert expires soon +< openvpn cert has expired < openvpn default < openvpn destination port used < openvpn disabled @@ -3316,6 +3328,8 @@ < not validating < okay < open connections +< openvpn cert expires soon +< openvpn cert has expired < optional < otp qrcode < ovpn connection name diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index 42a7354fc..87bda4f1e 100644 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -33,6 +33,7 @@ use File::Temp qw/ tempfile tempdir /; use strict; use Archive::Zip qw(:ERROR_CODES :CONSTANTS); use Sort::Naturally; +use Date::Parse; require '/var/ipfire/general-functions.pl'; require "${General::swroot}/lang.pl"; require "${General::swroot}/header.pl"; @@ -5352,31 +5353,45 @@ END END } if ($confighash{$key}[0] eq 'on') { $gif = 'on.gif'; } else { $gif = 'off.gif'; } - if ($id % 2) { - print "<tr>"; - $col="bgcolor='$color{'color20'}'"; - } else { - print "<tr>"; - $col="bgcolor='$color{'color22'}'"; - } - print "<td align='center' nowrap='nowrap' $col>$confighash{$key}[1]</td>"; - print "<td align='center' nowrap='nowrap' $col>" . $Lang::tr{"$confighash{$key}[3]"} . " (" . $Lang::tr{"$confighash{$key}[4]"} . ")</td>"; - #if ($confighash{$key}[4] eq 'cert') { - #print "<td align='left' nowrap='nowrap'>$confighash{$key}[2]</td>"; - #} else { - #print "<td align='left'> </td>"; - #} - my @cavalid = &General::system_output("/usr/bin/openssl", "x509", "-text", "-in", "${General::swroot}/ovpn/certs/$confighash{$key}[1]cert.pem"); - my $cavalid; + # Fetch information about the certificate + my @cavalid = &General::system_output("/usr/bin/openssl", "x509", "-text", + "-in", "${General::swroot}/ovpn/certs/$confighash{$key}[1]cert.pem"); + + my $expiryDate = 0; + + # Parse the certificate information foreach my $line (@cavalid) { if ($line =~ /Not After : (.*)[\n]/) { - $cavalid = $1; - + $expiryDate = &Date::Parse::str2time($1); last; } } + # Calculate the remaining time + my $remainingTime = $expiryDate - time(); + + # Create some simple booleans to check the status + my $hasExpired = ($remainingTime <= 0); + my $expiresSoon = ($remainingTime <= 30 * 24 * 3600); + + print "<tr>"; + + if ($hasExpired || $expiresSoon) { + $col="bgcolor='$color{'color14'}'"; + } elsif ($id % 2) { + $col="bgcolor='$color{'color20'}'"; + } else { + $col="bgcolor='$color{'color22'}'"; + } + print "<td align='center' nowrap='nowrap' $col>$confighash{$key}[1]"; + if ($hasExpired) { + print " ($Lang::tr{'openvpn cert has expired'})"; + } elsif ($expiresSoon) { + print " ($Lang::tr{'openvpn cert expires soon'})"; + } + print "</td>"; + print "<td align='center' nowrap='nowrap' $col>" . $Lang::tr{"$confighash{$key}[3]"} . " (" . $Lang::tr{"$confighash{$key}[4]"} . ")</td>"; print "<td align='center' $col>$confighash{$key}[25]</td>"; $col1="bgcolor='${Header::colourred}'"; my $active = "<b><font color='#FFFFFF'>$Lang::tr{'capsclosed'}</font></b>"; diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index 5fbab2ff8..a57b62ad8 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -1884,6 +1884,8 @@ 'open connections' => 'Offene Verbindungen', 'open to all' => 'Überschreibe externen Zugang zu ALL', 'openssl produced an error' => 'OpenSSL hat einen Fehler verursacht', +'openvpn cert expires soon' => 'Läuft bald ab', +'openvpn cert has expired' => 'Abgelaufen', 'openvpn client' => 'OpenVPN-Client', 'openvpn default' => 'Vorgabe', 'openvpn destination port used' => 'Der Zielport wird bereits von einer anderen OpenVPN-Server-Instanz genutzt.', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index 80753b841..4dc9d8577 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -1940,6 +1940,8 @@ 'open connections' => 'Open Connections', 'open to all' => 'Override external access to ALL', 'openssl produced an error' => 'OpenSSL produced an error', +'openvpn cert expires soon' => 'Expires Soon', +'openvpn cert has expired' => 'Expired', 'openvpn client' => 'OpenVPN client', 'openvpn default' => 'Default', 'openvpn destination port used' => 'The destination port is already used by another OpenVPN server.', -- 2.30.2

2 3

[PATCH 1/2] checkrootfiles: add riscv64 checks
by Arne Fitzenreiter 28 Feb '23

28 Feb '23

--- tools/checkrootfiles | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/tools/checkrootfiles b/tools/checkrootfiles index ab27c594b..a2712808b 100755 --- a/tools/checkrootfiles +++ b/tools/checkrootfiles @@ -2,7 +2,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team info(a)ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info(a)ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -53,3 +53,11 @@ if [ "${?}" == "0" ]; then --exclude-dir oldcore --exclude-dir aarch64 echo "Replace by xxxMACHINExxx !" fi + +grep -r '/riscv64' ./config/rootfiles/ --exclude gcc --exclude rust-libc --exclude gdb --exclude liburcu --exclude go --exclude-dir oldcore --exclude-dir riscv64 >/dev/null 2>&1 +if [ "${?}" == "0" ]; then + echo "Error! '/riscv64' in rootfiles files found!" + grep -r '/riscv64' ./config/rootfiles/ --exclude gcc --exclude rust-libc --exclude go \ + --exclude-dir oldcore --exclude-dir riscv64 + echo "Replace by xxxMACHINExxx !" +fi -- 2.34.1

1 1

[PATCH] efivar: fix build for correct cpu
by Arne Fitzenreiter 28 Feb '23

28 Feb '23

the makefile add --march=native which optimize the code to the cpu of the buildhost which can result in unsupported instructions on other machines. --- lfs/efivar | 3 ++- .../efivar-38_remove_march=native.patch | 18 ++++++++++++++++++ 2 files changed, 20 insertions(+), 1 deletion(-) create mode 100644 src/patches/efivar-38_remove_march=native.patch diff --git a/lfs/efivar b/lfs/efivar index 70ed90170..ee278c50c 100644 --- a/lfs/efivar +++ b/lfs/efivar @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -73,6 +73,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/efivar-37-compile-fixes-3.patch + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/efivar-38_remove_march=native.patch # fix an issue in Makefile causing the package to be rebuilt during installation # obtained from https://linuxfromscratch.org/blfs/view/11.1/postlfs/efivar.html diff --git a/src/patches/efivar-38_remove_march=native.patch b/src/patches/efivar-38_remove_march=native.patch new file mode 100644 index 000000000..7c22576e6 --- /dev/null +++ b/src/patches/efivar-38_remove_march=native.patch @@ -0,0 +1,18 @@ +diff -Naur efivar-38.org/src/include/defaults.mk efivar-38/src/include/defaults.mk +--- efivar-38.org/src/include/defaults.mk 2022-01-14 20:29:35.000000000 +0100 ++++ efivar-38/src/include/defaults.mk 2023-02-23 19:38:12.493736490 +0100 +@@ -71,12 +71,8 @@ + -Wl,--version-script=$(MAP) \ + $(call family,SOFLAGS) + +-HOST_ARCH=$(shell uname -m) +-ifneq ($(HOST_ARCH),ia64) +- HOST_MARCH=-march=native +-else +- HOST_MARCH= +-endif ++HOST_MARCH= ++ + HOST_CPPFLAGS ?= $(CPPFLAGS) + override _HOST_CPPFLAGS := $(HOST_CPPFLAGS) + override HOST_CPPFLAGS = $(_HOST_CPPFLAGS) \ -- 2.34.1

1 0

[PATCH] samba: Update to version 4.17.5
by Adolf Belka 28 Feb '23

28 Feb '23

- Update from 4.17.4 to 4.17.5 - Update of rootfile not required - Changelog Release Notes for Samba 4.17.5 * BUG 14808: smbc_getxattr() return value is incorrect. * BUG 15172: Compound SMB2 FLUSH+CLOSE requests from MacOSX are not handled correctly. * BUG 15210: synthetic_pathref AFP_AfpInfo failed errors. * BUG 15226: samba-tool gpo listall fails IPv6 only - finddcs() fails to find DC when there is only an AAAA record for the DC in DNS. * BUG 15236: smbd crashes if an FSCTL request is done on a stream handle. * BUG 15277: DFS links don't work anymore on Mac clients since 4.17. * BUG 15283: vfs_virusfilter segfault on access, directory edgecase (accessing NULL value). * BUG 15240: CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5) based SChannel on NETLOGON (additional changes). * BUG 15243: %U for include directive doesn't work for share listing (netshareenum). * BUG 15266: Shares missing from netshareenum response in samba 4.17.4. * BUG 15269: ctdb: use-after-free in run_proc. * BUG 15243: %U for include directive doesn't work for share listing (netshareenum). * BUG 15266: Shares missing from netshareenum response in samba 4.17.4. * BUG 15280: irpc_destructor may crash during shutdown. * BUG 15286: auth3_generate_session_info_pac leaks wbcAuthUserInfo. * BUG 15268: smbclient segfaults with use after free on an optimized build. * BUG 15282: smbstatus leaking files in msg.sock and msg.lock. * BUG 15164: Leak in wbcCtxPingDc2. * BUG 15265: Access based share enum does not work in Samba 4.16+. * BUG 15267: Crash during share enumeration. * BUG 15271: rep_listxattr on FreeBSD does not properly check for reads off end of returned buffer. * BUG 15281: Avoid relying on C89 features in a few places. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/samba | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/samba b/lfs/samba index 12ffccfa7..4eeb06b88 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.17.4 +VER = 4.17.5 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 90 +PAK_VER = 91 DEPS = avahi cups libtirpc perl-Parse-Yapp perl-JSON @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2f95ef07530c11b3b46fd5dec3b44c926bc4c06871a2d9405c86a791d8e28d84649444f8147275fe425923eefc46ec49a903b71d21aaca379618ffbfce1dcd84 +$(DL_FILE)_BLAKE2 = f8d6cf3c0f5333c5a6b1ac16793d8fd443c517068211829f40ca2fbc08d80921de65a4f3e2c08775a5551a4f834f406208c0941a4eb496720cc45ecaeb6c173f install : $(TARGET) -- 2.39.1

1 0

[PATCH] perl-libintl-perl: Update to 1.33
by Stefan Schantl 28 Feb '23

28 Feb '23

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- perl-libintl-perl/perl-libintl-perl.nm | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/perl-libintl-perl/perl-libintl-perl.nm b/perl-libintl-perl/perl-libintl-perl.nm index e1f5b6790..f7cd25eec 100644 --- a/perl-libintl-perl/perl-libintl-perl.nm +++ b/perl-libintl-perl/perl-libintl-perl.nm @@ -4,8 +4,8 @@ ############################################################################### name = perl-libintl-perl -version = 1.23 -release = 2.1 +version = 1.33 +release = 1 thisapp = libintl-perl-%{version} groups = Development/Libraries @@ -24,7 +24,9 @@ source_dl = http://search.cpan.org/CPAN/authors/id/G/GU/GUIDO/ build requires /usr/bin/xsubpp + perl(locale) perl(ExtUtils::MakeMaker) + perl(Test::More) pakfire >= 0.9.26-3.1 end -- 2.30.2

1 0

[PATCH 1/2] log4cplus: New package
by Stefan Schantl 28 Feb '23

28 Feb '23

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- log4cplus/log4cplus.nm | 40 ++++++++++++++++++++++++++++++++++++++++ 1 file changed, 40 insertions(+) create mode 100644 log4cplus/log4cplus.nm diff --git a/log4cplus/log4cplus.nm b/log4cplus/log4cplus.nm new file mode 100644 index 000000000..5bcec4f3f --- /dev/null +++ b/log4cplus/log4cplus.nm @@ -0,0 +1,40 @@ +############################################################################### +# IPFire.org - An Open Source Firewall Solution # +# Copyright (C) - IPFire Development Team <info(a)ipfire.org> # +############################################################################### + +name = log4cplus +version = 2.0.8 +release = 1 + +groups = System/Libraries +url = http://sourceforge.net/projects/log4cplus +license = ASL 2.0 +summary = Logging Framework for C++ + +description + log4cplus is a simple to use C++ logging API providing thread-safe, flexible, + and arbitrarily granular control over log management and configuration. It is + modeled after the Java log4j API. +end + +source_dl = http://downloads.sourceforge.net/%{name}/ +sources = %{thisapp}.tar.xz + +build + requires + gcc-c++ + end +end + +packages + package %{name} + + package %{name}-devel + template DEVEL + end + + package %{name}-debuginfo + template DEBUGINFO + end +end -- 2.30.2

1 1

[PATCHv2] compat-icu: Update to 56.1
by Stefan Schantl 27 Feb '23

27 Feb '23

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- compat-icu/compat-icu.nm | 8 ++++---- compat-icu/patches/icu-test-twodigityear.patch2 | 13 ------------- 2 files changed, 4 insertions(+), 17 deletions(-) delete mode 100644 compat-icu/patches/icu-test-twodigityear.patch2 diff --git a/compat-icu/compat-icu.nm b/compat-icu/compat-icu.nm index 47e24d4f4..8ca0f6ac5 100644 --- a/compat-icu/compat-icu.nm +++ b/compat-icu/compat-icu.nm @@ -5,9 +5,9 @@ name = compat-icu version = %{ver_major}.%{ver_minor}.%{ver_plevel} -ver_major = 50 +ver_major = 56 ver_minor = 1 -ver_plevel = 2 +ver_plevel = release = 1 thisapp = icu-%{version} @@ -20,8 +20,8 @@ description Tools and utilities for developing with icu. end -source_dl = http://download.icu-project.org/files/icu4c/%{version}/ -sources = icu4c-%{ver_major}_%{ver_minor}_%{ver_plevel}-src.tgz +source_dl = https://github.com/unicode-org/icu/releases/download/release-%{ver_major}-%… +sources = icu4c-%{ver_major}_%{ver_minor}-src.tgz build DIR_APP = %{DIR_SRC}/icu/source diff --git a/compat-icu/patches/icu-test-twodigityear.patch2 b/compat-icu/patches/icu-test-twodigityear.patch2 deleted file mode 100644 index fba90b5d3..000000000 --- a/compat-icu/patches/icu-test-twodigityear.patch2 +++ /dev/null @@ -1,13 +0,0 @@ -In the year 2034 ... -http://sourceforge.net/p/icu/mailman/message/32443311/ ---- icu.orig/source/test/intltest/dtfmttst.cpp 2013-10-04 22:48:00.000000000 +0200 -+++ icu/source/test/intltest/dtfmttst.cpp 2014-06-13 19:34:40.611299572 +0200 -@@ -1129,7 +1129,7 @@ - return; - } - parse2DigitYear(fmt, "5/6/17", date(117, UCAL_JUNE, 5)); -- parse2DigitYear(fmt, "4/6/34", date(34, UCAL_JUNE, 4)); -+ parse2DigitYear(fmt, "4/6/34", date(134, UCAL_JUNE, 4)); - } - - // ------------------------------------- -- 2.30.2

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development February 2023