rpm/fail2ban
SHA256
1
0
Fork 0
forked from pool/fail2ban
Code Pull Requests Activity
86 Commits 2 Branches 0 Tags 453 KiB
34326b1e39
Commit Graph

86 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Dominique Leuenberger
34326b1e39 Accepting request 537301 from security 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/537301
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=50
 2017-10-29 19:24:39 +00:00
Johannes Weberhofer
346c68ba29 Accepting request 536273 from home:weberho:branches:security 
- Updated to version 0.10.1. Changelog:
  https://github.com/fail2ban/fail2ban/blob/0.10/ChangeLog
- Removed 607568f.patch and 1783.patch
- New features: 
  * IPv6 support
    - IP addresses are now handled as objects rather than strings capable for 
      handling both address types IPv4 and IPv6
    - iptables related actions have been amended to support IPv6 specific actions
      additionally
    - hostsdeny and route actions have been tested to be aware of v4 and v6 already
    - pf action for *BSD systems has been improved and supports now also v4 and v6
    - name resolution is now working for either address type
    - new conditional section functionality used in config resp. includes:
      - [Init?family=inet4] - IPv4 qualified hosts only
      - [Init?family=inet6] - IPv6 qualified hosts only
  * Reporting via abuseipdb.com
    - Bans can now be reported to abuseipdb
    - Catagories must be set in the config
    - Relevant log lines included in report
  * Several commands extended and new commands introduced
  * Implemented execution of `actionstart` on demand
  * nftables actions are IPv6-capable now
  * Introduced new filter option `prefregex` for pre-filtering using single regular expression
  * Many times faster because of several optimizations
  * Several filters optimized
  * Introduced new jail option "ignoreself"
- Lots of fixes and internal improvements
- Incompatibitilities:
  * Filter (or `failregex`) internal capture-groups:
  - If you've your own `failregex` or custom filters using conditional match `(?P=host)`, you should
    rewrite the regex like in example below resp. using `(?:(?P=ip4)|(?P=ip6)` instead of `(?P=host)`
    (or `(?:(?P=ip4)|(?P=ip6)|(?P=dns))` corresponding your `usedns` and `raw` settings).
    Of course you can always your own capture-group (like below `_cond_ip_`) to do this.
    ```
    testln="1500000000 failure from 192.0.2.1: bad host 192.0.2.1"
    fail2ban-regex "$testln" "^\s*failure from (?P<_cond_ip_><HOST>): bad host (?P=_cond_ip_)$"
    ```
  - New internal groups (currently reserved for internal usage):
    `ip4`, `ip6`, `dns`, `fid`, `fport`, additionally `user` and another captures in lower case if
    mapping from tag `<F-*>` used in failregex (e. g. `user` by `<F-USER>`).
  * v.0.10 uses more precise date template handling, that can be theoretically incompatible to some
  user configurations resp. `datepattern`.
  * Since v0.10 fail2ban supports the matching of the IPv6 addresses, but not all ban actions are
  IPv6-capable now.

OBS-URL: https://build.opensuse.org/request/show/536273
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=83
 2017-10-24 10:04:00 +00:00
Dominique Leuenberger
a7deeb333c Accepting request 506342 from security 
1

OBS-URL: https://build.opensuse.org/request/show/506342
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=49
 2017-06-27 08:21:50 +00:00
Johannes Weberhofer
7b7f0beacb Accepting request 506341 from home:weberho:branches:security 
- added 1783.patch from upstream: "Updated roundcube authentication filter"
- use tmpfiles_create macro

OBS-URL: https://build.opensuse.org/request/show/506341
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=81
 2017-06-27 04:04:17 +00:00
Dominique Leuenberger
e8fc4a600a Accepting request 495374 from security 
1

OBS-URL: https://build.opensuse.org/request/show/495374
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=48
 2017-05-17 08:54:57 +00:00
Johannes Weberhofer
2109aac4ea Accepting request 495373 from home:weberho:branches:security 
- Update to 0.9.7
- fixes for bnc#1036928

OBS-URL: https://build.opensuse.org/request/show/495373
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=79
 2017-05-16 14:44:12 +00:00
Dominique Leuenberger
7c32fa4bdb Accepting request 478640 from security 
1

OBS-URL: https://build.opensuse.org/request/show/478640
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=47
 2017-03-12 19:05:25 +00:00
Johannes Weberhofer
7b81f19e35 Accepting request 478626 from home:Aikhjarto:branches:security 
Recently all nagios-plugin-* packages have been renamed to the more general monitoring-plugin-*.
This submit request does this transition for fail2ban and includes Provides/Obsoletes for backwards compatibily its old name.

OBS-URL: https://build.opensuse.org/request/show/478626
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=77
 2017-03-11 09:49:32 +00:00
Dominique Leuenberger
873cbbfa82 Accepting request 453007 from security 
1

OBS-URL: https://build.opensuse.org/request/show/453007
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=46
 2017-01-31 11:42:01 +00:00
Johannes Weberhofer
499398214d Accepting request 452855 from home:computersalat:devel:security 
update to 0.9.6

OBS-URL: https://build.opensuse.org/request/show/452855
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=75
 2017-01-27 17:09:05 +00:00
Dominique Leuenberger
fff3d95b42 Accepting request 415433 from security 
1

OBS-URL: https://build.opensuse.org/request/show/415433
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=45
 2016-07-28 21:47:34 +00:00
Johannes Weberhofer
ef72158bf2 Accepting request 415421 from home:weberho:branches:security 
Update to version 0.9.5

OBS-URL: https://build.opensuse.org/request/show/415421
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=73
 2016-07-27 18:00:37 +00:00
Dominique Leuenberger
7bc1f847c3 Accepting request 378462 from security 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/378462
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=44
 2016-03-26 14:27:23 +00:00
Dominique Leuenberger
4d405b4e35 Accepting request 369615 from security 
1

OBS-URL: https://build.opensuse.org/request/show/369615
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=43
 2016-03-16 09:35:11 +00:00
Johannes Weberhofer
9ffc83a177 Mark /etc/fail2ban/fail2ban.conf as noreplace. 
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=70
 2016-03-10 14:10:34 +00:00
Johannes Weberhofer
7ac30d5336 Accepting request 369600 from home:weberho:branches:security 
- Update to version 0.9.4
- Defined services which per default uses systemd logger
- The update to this versions allow to close boo#917818, as the logger-backends for several services are now centrally set in /etc/fail2ban/paths-opensuse.conf

OBS-URL: https://build.opensuse.org/request/show/369600
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=69
 2016-03-10 12:14:45 +00:00
Dominique Leuenberger
30699dddae Accepting request 358896 from security 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/358896
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=42
 2016-02-17 09:24:34 +00:00
Johannes Weberhofer
db67cbee5d - Require python-systemd for openSUSE 12.3+ 
- Cleaned up the spec file
- Added /run/fail2ban for openSUSE 13.2+
- Don't fail on test-errors

OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=67
 2016-02-04 15:51:02 +00:00
Stephan Kulow
ca370fae5a Accepting request 333139 from security 
1

OBS-URL: https://build.opensuse.org/request/show/333139
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=41
 2015-09-24 04:16:01 +00:00
Johannes Weberhofer
c876389bbe Accepting request 333138 from home:weberho:branches:security 
- Added fail2ban-upstream-fix-ExecuteTimeoutWithNastyChildren-test.patch
  to fix the former failing test and removed
  fail2ban-exclude-ExecuteTimeoutWithNastyChildren-test.patch
- Do not longer create test-package. Developers should not use the packaged
  version of fail2ban.

OBS-URL: https://build.opensuse.org/request/show/333138
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=65
 2015-09-23 10:21:57 +00:00
Dominique Leuenberger
fbd912c6a2 Accepting request 329472 from security 
1

OBS-URL: https://build.opensuse.org/request/show/329472
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=40
 2015-09-08 15:44:47 +00:00
Johannes Weberhofer
de2609fc73 Accepting request 329471 from home:weberho:branches:security 
patches are no longer included conditionally

OBS-URL: https://build.opensuse.org/request/show/329471
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=63
 2015-09-07 09:49:02 +00:00
Johannes Weberhofer
abaf2faf24 Accepting request 329445 from home:weberho:branches:security 
Update to 0.9.3

OBS-URL: https://build.opensuse.org/request/show/329445
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=62
 2015-09-07 08:44:02 +00:00
Dominique Leuenberger
2f86815bf5 Accepting request 314806 from security 
1

OBS-URL: https://build.opensuse.org/request/show/314806
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=39
 2015-07-02 20:51:05 +00:00
Johannes Weberhofer
352f50543f Accepting request 314805 from home:weberho:branches:security 
Updated changelog to allow build in factory

OBS-URL: https://build.opensuse.org/request/show/314805
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=60
 2015-07-02 06:44:14 +00:00
Johannes Weberhofer
1b961970e4 Accepting request 314731 from home:weberho:branches:security 
Major update to version 0.9.2

OBS-URL: https://build.opensuse.org/request/show/314731
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=59
 2015-07-01 19:56:17 +00:00
Dominique Leuenberger
d638e55b46 Accepting request 296083 from security 
1

OBS-URL: https://build.opensuse.org/request/show/296083
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=38
 2015-04-15 14:24:13 +00:00
Johannes Weberhofer
4f21385d62 Accepting request 296076 from home:pluskalm:branches:security 
- Add missing dependency on ed (boo#926943)

OBS-URL: https://build.opensuse.org/request/show/296076
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=57
 2015-04-14 08:03:38 +00:00
Dominique Leuenberger
1fca029359 Accepting request 283868 from security 
1

OBS-URL: https://build.opensuse.org/request/show/283868
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=37
 2015-02-04 08:31:49 +00:00
Johannes Weberhofer
136706961e Accepting request 283866 from home:weberho:branches:security 
Noted patch-name in changelog

OBS-URL: https://build.opensuse.org/request/show/283866
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=55
 2015-02-03 12:15:48 +00:00
Johannes Weberhofer
ecab052fcb Accepting request 282526 from home:weberho:branches:security 
Fixed strptime thread safety issue; bnc#914075 gh#fail2ban/fail2ban#906

OBS-URL: https://build.opensuse.org/request/show/282526
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=54
 2015-01-23 10:27:14 +00:00
Dominique Leuenberger
3c0779a775 Accepting request 262999 from security 
1

OBS-URL: https://build.opensuse.org/request/show/262999
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=36
 2014-11-26 09:34:00 +00:00
Johannes Weberhofer
cdb1df21c3 Accepting request 262998 from home:weberho:branches:security 
Added syslog to requirements, as this version of fail2ban does not work with systemd-logging: bnc#905733

OBS-URL: https://build.opensuse.org/request/show/262998
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=52
 2014-11-25 14:53:42 +00:00
Dominique Leuenberger
4ca0dcc781 Accepting request 262031 from security 
1

OBS-URL: https://build.opensuse.org/request/show/262031
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=35
 2014-11-24 10:08:12 +00:00
Johannes Weberhofer
d934d4f3e0 Accepting request 262008 from home:jengelh:branches:security 
- Recommend installation of the ordering package when all
  constituing parts are installed

OBS-URL: https://build.opensuse.org/request/show/262008
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=50
 2014-11-17 11:33:06 +00:00
Stephan Kulow
2edba31972 Accepting request 245652 from security 
1

OBS-URL: https://build.opensuse.org/request/show/245652
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=33
 2014-08-25 09:03:47 +00:00
Johannes Weberhofer
baf2add4d9 Accepting request 245651 from home:weberho:branches:security 
- Fixed check for %_unitdir to make fail2ban build under older systems, too.
- Changed /usr to %{_prefix} in the spec file

OBS-URL: https://build.opensuse.org/request/show/245651
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=48
 2014-08-21 16:58:13 +00:00
Johannes Weberhofer
6be289add4 Accepting request 245601 from home:weberho:BACKPORTS:webserver 
Updated patch information in the .changes and the spec file

OBS-URL: https://build.opensuse.org/request/show/245601
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=47
 2014-08-21 13:18:17 +00:00
Lars Vogdt
3030fbe27f - update to 0.8.13: 
+ Fixes:
  - action firewallcmd-ipset had non-working actioncheck. Removed.
    redhat bug #1046816.
  - filter pureftpd - added _daemon which got removed. Added
  + New Features:
  - filter nagios - detects unauthorized access to the nrpe daemon (Ivo Truxa)
  - filter sendmail-{auth,reject} (jserrachinha and cepheid666 and fab23).
  + Enhancements:
  - filter asterisk now supports syslog format
  - filter pureftpd - added all translations of "Authentication failed for
    user"
  - filter dovecot - lip= was optional and extended TLS errors can occur.
    Thanks Noel Butler.
- removed fix-for-upstream-firewallcmd-ipset.conf.patch : fixed 
  upstream
- split out nagios-plugins-fail2ban package

OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=46
 2014-06-25 15:39:26 +00:00
Stephan Kulow
210a71f8fb Accepting request 231797 from security 
- Add a new subpackage to install systemd drop-ins that couple SuSEfirewall2 and fail2ban. (forwarded request 230864 from jengelh)

OBS-URL: https://build.opensuse.org/request/show/231797
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=32
 2014-05-02 11:55:17 +00:00
Marcus Meissner
833b3f3a02 Accepting request 230864 from home:jengelh:branches:security 
- Add a new subpackage to install systemd drop-ins that couple SuSEfirewall2 and fail2ban.

OBS-URL: https://build.opensuse.org/request/show/230864
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=44
 2014-04-28 09:16:08 +00:00
Stephan Kulow
b17e75956e Accepting request 215524 from security 
Security note: The update to version 0.8.11 has fixed two additional security
issues: A remote unauthenticated attacker may cause arbitrary IP addresses to
be blocked by Fail2ban causing legitimate users to be blocked from accessing
services protected by Fail2ban. CVE-2013-7177 (cyrus-imap) and CVE-2013-7176
(postfix) (forwarded request 215523 from weberho)

OBS-URL: https://build.opensuse.org/request/show/215524
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=31
 2014-01-30 13:54:36 +00:00
Johannes Weberhofer
0b23663b01 Accepting request 215523 from home:weberho:branches:security 
Security note: The update to version 0.8.11 has fixed two additional security
issues: A remote unauthenticated attacker may cause arbitrary IP addresses to
be blocked by Fail2ban causing legitimate users to be blocked from accessing
services protected by Fail2ban. CVE-2013-7177 (cyrus-imap) and CVE-2013-7176
(postfix)

OBS-URL: https://build.opensuse.org/request/show/215523
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=42
 2014-01-29 13:58:23 +00:00
Johannes Weberhofer
0156e67ee6 Accepting request 214983 from home:weberho:branches:security 
- action firewallcmd-ipset had non-working actioncheck. Removed. rh#1046816

- lsof was required for fail2ban's SysVinit scripts only. Not longer used for newer versions of openSUSE

OBS-URL: https://build.opensuse.org/request/show/214983
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=41
 2014-01-23 21:59:39 +00:00
Johannes Weberhofer
1c64f0f9db Accepting request 214757 from home:weberho:branches:security 
- Reviewed and fixed one github references in the changelog following http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines#Current_set_of_abbreviations
- Use new flushlogs syntax after logrotate

OBS-URL: https://build.opensuse.org/request/show/214757
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=40
 2014-01-23 08:49:19 +00:00
Johannes Weberhofer
a3b7f0e995 Accepting request 214671 from home:weberho:branches:security 
Update to version 0.8.12

OBS-URL: https://build.opensuse.org/request/show/214671
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=39
 2014-01-22 09:26:34 +00:00
Tomáš Chvátal
21d5b13653 Accepting request 207467 from security 
Update to version 0.8.11 (forwarded request 207466 from weberho)

OBS-URL: https://build.opensuse.org/request/show/207467
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=30
 2013-11-19 09:45:03 +00:00
Johannes Weberhofer
28eccb4d5e Accepting request 207466 from home:weberho:branches:security 
Update to version 0.8.11

OBS-URL: https://build.opensuse.org/request/show/207466
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=37
 2013-11-18 13:43:25 +00:00
Stephan Kulow
7831ea0a7a Accepting request 200162 from security 
I've added a systemd service file for openSUSE >= 12.3.

Previous systemd based versions would require an additional variant of the service file, because SuSEfirewall2.service (which is an ordering dependency) used to be named SuSEfirewall2_setup.service in these versions. I don't think it would be worth the trouble of adding yet another switch, but I can of course do so if desired. (forwarded request 199913 from marc_schuetz)

OBS-URL: https://build.opensuse.org/request/show/200162
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=29
 2013-09-23 14:04:07 +00:00
Johannes Weberhofer
afdd4dcfb1 Accepting request 199913 from home:marc_schuetz:branches:security 
I've added a systemd service file for openSUSE >= 12.3.

Previous systemd based versions would require an additional variant of the service file, because SuSEfirewall2.service (which is an ordering dependency) used to be named SuSEfirewall2_setup.service in these versions. I don't think it would be worth the trouble of adding yet another switch, but I can of course do so if desired.

OBS-URL: https://build.opensuse.org/request/show/199913
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=35
 2013-09-23 09:42:53 +00:00