This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".
The branch, next has been updated via 13b04e6998a4be3ed0c54221b8918b967f0e5395 (commit) via 55f19d7eb166781f2156557ede4949c12f9b97bc (commit) via 636c25c0a7db409de1a5edcf1ae383411df14a8d (commit) via b8769ed95b800c5cde8b1c61bbfff935e6cef6c7 (commit) from 938f048b90621e3c9ad14b6909fc63ff9fcf2a7d (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit 13b04e6998a4be3ed0c54221b8918b967f0e5395 Author: Peter Müller peter.mueller@ipfire.org Date: Thu Sep 14 17:45:12 2023 +0000
Tor: Do not attempt to establish connections via IPv6
To quote from the changelog of Tor 0.4.8.4:
o Minor feature (client, IPv6): - Make client able to pick IPv6 relays by default now meaning ClientUseIPv6 option now defaults to 1. Closes ticket 40785.
In order to avoid any malfunctions on IPFire installations, set this option to "0" explicitly.
Signed-off-by: Peter Müller peter.mueller@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 55f19d7eb166781f2156557ede4949c12f9b97bc Author: Peter Müller peter.mueller@ipfire.org Date: Thu Sep 14 17:45:11 2023 +0000
Tor: Update to 0.4.8.5
Changes in version 0.4.8.5 - 2023-08-30 Quick second release after the first stable few days ago fixing minor annoying bugfixes creating log BUG stacktrace. We also fix BSD compilation failures and PoW unit test.
o Minor features (fallbackdir): - Regenerate fallback directories generated on August 30, 2023.
o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2023/08/30.
o Minor bugfix (NetBSD, compilation): - Fix compilation issue on NetBSD by avoiding an unnecessary dependency on "huge" page mappings in Equi-X. Fixes bug 40843; bugfix on 0.4.8.1-alpha.
o Minor bugfix (NetBSD, testing): - Fix test failures in "crypto/hashx" and "slow/crypto/equix" on x86_64 and aarch64 NetBSD hosts, by adding support for PROT_MPROTECT() flags. Fixes bug 40844; bugfix on 0.4.8.1-alpha.
o Minor bugfixes (conflux): - Demote a relay-side warn about too many legs to ProtocolWarn, as there are conditions that it can briefly happen during set construction. Also add additional set logging details for all error cases. Fixes bug 40841; bugfix on 0.4.8.1-alpha. - Prevent non-fatal assert stacktrace caused by using conflux sets during their teardown process. Fixes bug 40842; bugfix on 0.4.8.1-alpha.
Signed-off-by: Peter Müller peter.mueller@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 636c25c0a7db409de1a5edcf1ae383411df14a8d Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Sep 15 06:54:39 2023 +0000
core180: Ship logrotate.conf
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit b8769ed95b800c5cde8b1c61bbfff935e6cef6c7 Author: Peter Müller peter.mueller@ipfire.org Date: Thu Sep 14 17:15:01 2023 +0000
logrotate: Rotate wtmp files monthly, and keep them for a year
This prevents "last" being rendered unusable, and allows for better and faster auditing of previous logins.
Fixes: #13322 Signed-off-by: Peter Müller peter.mueller@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
-----------------------------------------------------------------------
Summary of changes: config/etc/logrotate.conf | 4 ++-- config/rootfiles/core/180/filelists/files | 1 + html/cgi-bin/tor.cgi | 3 ++- lfs/tor | 6 +++--- 4 files changed, 8 insertions(+), 6 deletions(-)
Difference in files: diff --git a/config/etc/logrotate.conf b/config/etc/logrotate.conf index 0b6b48573..c5f9883c7 100644 --- a/config/etc/logrotate.conf +++ b/config/etc/logrotate.conf @@ -15,9 +15,9 @@ include /etc/logrotate.d
# wtmp /var/log/wtmp { - weekly + monthly create 0664 root utmp - rotate 1 + rotate 12 }
/var/log/httpd/access_log /var/log/httpd/error_log /var/log/httpd/ssl_request_log /var/log/httpd/ssl_engine_log { diff --git a/config/rootfiles/core/180/filelists/files b/config/rootfiles/core/180/filelists/files index 0242d1c79..616b2d24a 100644 --- a/config/rootfiles/core/180/filelists/files +++ b/config/rootfiles/core/180/filelists/files @@ -1,3 +1,4 @@ +etc/logrotate.conf etc/rc.d/init.d/network etc/rc.d/init.d/networking/any etc/rc.d/init.d/networking/functions.network diff --git a/html/cgi-bin/tor.cgi b/html/cgi-bin/tor.cgi index 96be35102..75fdf0d5d 100644 --- a/html/cgi-bin/tor.cgi +++ b/html/cgi-bin/tor.cgi @@ -2,7 +2,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team info@ipfire.org # +# Copyright (C) 2007-2023 IPFire Team info@ipfire.org # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -732,6 +732,7 @@ sub BuildConfiguration() { # Global settings. print FILE "Sandbox 1\n"; print FILE "HardwareAccel 1\n"; + print FILE "ClientUseIPv6 0\n"; print FILE "ControlPort $TOR_CONTROL_PORT\n";
if ($settings{'TOR_ENABLED'} eq 'on') { diff --git a/lfs/tor b/lfs/tor index f735b0ca4..d7be53a1c 100644 --- a/lfs/tor +++ b/lfs/tor @@ -26,7 +26,7 @@ include Config
SUMMARY = Anonymizing overlay network for TCP (The onion router)
-VER = 0.4.8.4 +VER = 0.4.8.5
THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 79 +PAK_VER = 80
DEPS = libseccomp
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = e283d828fede259b1186b45214d466ff7ee79c835d68d0253537cd44b4dfdc4effe97ffb864d788eb0c65e7c09dc79673b1f191662c3641917a36af935cb9e7f +$(DL_FILE)_BLAKE2 = 71a4807284ecefc4a18d6bc15ce798844304f860338b786590779fb171f851d630e8af3114dbc84fe854561e0085dcb147b4dd87787988a8fb6c3628bfcc8175
install : $(TARGET)
hooks/post-receive -- IPFire 2.x development tree