From aee1bb5a3a79019969fe33457dafb4a6c98fc57fe8313c2a8bf62a51ce45a9ee Mon Sep 17 00:00:00 2001 From: Johannes Weberhofer Date: Thu, 13 Jun 2013 09:13:27 +0000 Subject: [PATCH] Accepting request 178857 from home:weberho:branches:security Update to version 0.8.10 Addresses a possible DoS. Closes gh-248, bnc#824710 OBS-URL: https://build.opensuse.org/request/show/178857 OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=33 --- fail2ban-0.8.10.tar.gz | 3 +++ fail2ban-0.8.9.tar.gz | 3 --- fail2ban.changes | 24 ++++++++++++++++++++++++ fail2ban.spec | 2 +- 4 files changed, 28 insertions(+), 4 deletions(-) create mode 100644 fail2ban-0.8.10.tar.gz delete mode 100644 fail2ban-0.8.9.tar.gz diff --git a/fail2ban-0.8.10.tar.gz b/fail2ban-0.8.10.tar.gz new file mode 100644 index 0000000..7a1375d --- /dev/null +++ b/fail2ban-0.8.10.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:03efc63157e6f11449bf95614906e5dc96622561d2b72f32f155f424563780b3 +size 161914 diff --git a/fail2ban-0.8.9.tar.gz b/fail2ban-0.8.9.tar.gz deleted file mode 100644 index b12c038..0000000 --- a/fail2ban-0.8.9.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a3f9e9e45a3f7ef3fd8bd221d04c696b606e762a3bc1232eca94322f71774343 -size 159941 diff --git a/fail2ban.changes b/fail2ban.changes index 10d41c8..e9980b0 100644 --- a/fail2ban.changes +++ b/fail2ban.changes @@ -1,4 +1,28 @@ ------------------------------------------------------------------- +Thu Jun 13 08:58:53 UTC 2013 - jweberhofer@weberhofer.at + +- Update to version 0.8.10 Primarily bugfix and enhancements release, triggered + by "bugs" in apache- filters. If you are relying on listed below apache- + filters, upgrade asap and seek your distributions to patch their fail2ban + distribution with [6ccd5781]. The bug's decription can be found in + https://vndh.net/note:fail2ban-089-denial-service + +- Fixes + * [6ccd5781] filter.d/apache-{auth,nohome,noscript,overflows} - anchor + failregex at the beginning (and where applicable at the end). + Addresses a possible DoS. Closes gh-248, bnc#824710 + * action.d/{route,shorewall}.conf - blocktype must be defined + within [Init]. Closes gh-232 + +- Enhancements + * jail.conf -- assure all jails have actions and remove unused + ports specifications + * config/filter.d/roundcube-auth.conf -- support roundcube 0.9+ + * files/suse-initd -- update to the copy from stock SUSE + * Updates to asterisk filter. Closes gh-227/gh-230. + * Updates to asterisk to include AUTH_UNKNOWN_DOMAIN. Closes gh-244. + +------------------------------------------------------------------ Tue May 28 06:46:54 UTC 2013 - jweberhofer@weberhofer.at - Included logrotate configuration for fail2ban diff --git a/fail2ban.spec b/fail2ban.spec index 7f6a649..c4526ec 100644 --- a/fail2ban.spec +++ b/fail2ban.spec @@ -31,7 +31,7 @@ Requires: python-gamin BuildRequires: logrotate BuildRequires: python-devel PreReq: %fillup_prereq -Version: 0.8.9 +Version: 0.8.10 Release: 0 Url: http://www.fail2ban.org/ BuildRoot: %{_tmppath}/%{name}-%{version}-build