git-annex in dani@germaine.lapiole.org:~/big/e-smith/files/users/dani/src/ufdbGuard

ufdbGuard-1.33.5.tar.gz

@@ -0,0 +1 @@
+.git/annex/objects/7m/K5/SHA256E-s2643211--ea62c23db133d0e3d5fb683910481aeace88348a8ddb5a4053642ab402a8aa59.tar.gz/SHA256E-s2643211--ea62c23db133d0e3d5fb683910481aeace88348a8ddb5a4053642ab402a8aa59.tar.gz

ufdbGuard.spec

@@ -1,7 +1,7 @@
 # ufdbGuard.spec.CentOS7
 
 %global _hardened_build 1
-%global version 1.33.4
+%global version 1.33.5
 
 # no stripping of the binaries
 %global __os_install_post      %{nil}
@@ -55,17 +55,15 @@ Requires: wget >= 1.14
 Requires: tar, gzip
 # require packages for ufdb-pstack
 Requires: gdb >= 7.6.1
-Requires: yum-utils >= 1.1.31
+# Requires: yum-utils >= 1.1.31
 # required packages for installation
-Requires: at
+# Requires: at
 # required packages for analysis scripts
 Requires: perl
 %global __requires_exclude %{?__requires_exclude}|perl\\(CGI::|perl\\(FCGI::
 # squid is required but may be installed from source and not using an RPM,
 # or ufdbguard is used on a system where squid is not installed.
 # Requires: squid
-# gdb is highly recommended but not a requirement
-# Requires: gdb
 
 Buildrequires: openssl-devel >= 1.0.1e
 Buildrequires: bzip2-devel >= 1.0.6
@@ -119,7 +117,8 @@ fi
 # echo "Execute /tmp/ufdb.postinstall to update debuginfo for glibc, zlib, bzip2 and openssl.  *****" >&2
 # echo >&2
 
-at now + 3min <<EOF
+/usr/bin/sh >/tmp/ufdbguardd.postinstall.log 2>&1 <<EOF &
+sleep 180
 debuginfo-install -y -q glibc   >/dev/null 2>&1
 debuginfo-install -y -q zlib    >/dev/null 2>&1
 debuginfo-install -y -q bzip2   >/dev/null 2>&1
@@ -311,8 +310,12 @@ exit 0
 # TODO
 
 %changelog
-* Tue Feb 20 2018 Daniel Berteaud <daniel@firewall-services.com> 1.33.4-CentOS7
+* Thu Apr 19 2018 Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.5
-- new package built with tito
+Fix: ufdbguardd may crash during a database refresh
+Fix: empty pass statements in acls may cause a crash.
+Fix: SSH tunnels were detected but access was not blocked
+Fix: sometimes the SSL/TLS certificate was not checked to be signed by a CA
+Fix: skip acls with "pass any" if the source has the continue flag set
 
 * Thu Sep 21 2017 Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.4
 Fix: URLs with very long domainnames may cause a crash if the URL is not in the URL database
@@ -332,7 +335,7 @@ Fix: when evaluate-and IPv4/6 is used in a source definition, the source may not
 Fix: ufdbguardd did not accept the IPv6 address '::'
 Enhancement: several warnings for IPv4 and IPv6 addresses inside a source were implemented
 
-* Wed May 23 2017 Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.2
+* Tue May 23 2017 Marcus Kool <marcus-dot-kool@urlfilterdb.com> - 1.33.2
 Fix: ufdbguardd may incorrectly abort with a fatal error cannot-get-rwlock-for-database-refresh-after-many-attempts
 Fix: safesearch did not work in 2 out of 3 cases
 Fix: ufdbguard did not compile on FreeBSD.