rpm/fail2ban
SHA256
1
0
Fork 0
forked from pool/fail2ban
Code Pull Requests Activity
91 Commits 2 Branches 0 Tags 453 KiB
671fbd787d
Commit Graph

49 Commits

Author SHA256 Message Date
Johannes Weberhofer
68abb5fa88 OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=88 2018-02-20 13:50:34 +00:00
Johannes Weberhofer
552f213926 Accepting request 578297 from home:weberho:branches:security 
- Updated to version 0.10.2. Changelog:
  https://github.com/fail2ban/fail2ban/blob/0.10.2/ChangeLog
- rebased patch

OBS-URL: https://build.opensuse.org/request/show/578297
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=87
 2018-02-20 09:42:27 +00:00
Johannes Weberhofer
fe795d997c Accepting request 544725 from home:RBrownSUSE:branches:security 
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)

OBS-URL: https://build.opensuse.org/request/show/544725
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=85
 2017-11-23 15:46:03 +00:00
Johannes Weberhofer
346c68ba29 Accepting request 536273 from home:weberho:branches:security 
- Updated to version 0.10.1. Changelog:
  https://github.com/fail2ban/fail2ban/blob/0.10/ChangeLog
- Removed 607568f.patch and 1783.patch
- New features: 
  * IPv6 support
    - IP addresses are now handled as objects rather than strings capable for 
      handling both address types IPv4 and IPv6
    - iptables related actions have been amended to support IPv6 specific actions
      additionally
    - hostsdeny and route actions have been tested to be aware of v4 and v6 already
    - pf action for *BSD systems has been improved and supports now also v4 and v6
    - name resolution is now working for either address type
    - new conditional section functionality used in config resp. includes:
      - [Init?family=inet4] - IPv4 qualified hosts only
      - [Init?family=inet6] - IPv6 qualified hosts only
  * Reporting via abuseipdb.com
    - Bans can now be reported to abuseipdb
    - Catagories must be set in the config
    - Relevant log lines included in report
  * Several commands extended and new commands introduced
  * Implemented execution of `actionstart` on demand
  * nftables actions are IPv6-capable now
  * Introduced new filter option `prefregex` for pre-filtering using single regular expression
  * Many times faster because of several optimizations
  * Several filters optimized
  * Introduced new jail option "ignoreself"
- Lots of fixes and internal improvements
- Incompatibitilities:
  * Filter (or `failregex`) internal capture-groups:
  - If you've your own `failregex` or custom filters using conditional match `(?P=host)`, you should
    rewrite the regex like in example below resp. using `(?:(?P=ip4)|(?P=ip6)` instead of `(?P=host)`
    (or `(?:(?P=ip4)|(?P=ip6)|(?P=dns))` corresponding your `usedns` and `raw` settings).
    Of course you can always your own capture-group (like below `_cond_ip_`) to do this.
    ```
    testln="1500000000 failure from 192.0.2.1: bad host 192.0.2.1"
    fail2ban-regex "$testln" "^\s*failure from (?P<_cond_ip_><HOST>): bad host (?P=_cond_ip_)$"
    ```
  - New internal groups (currently reserved for internal usage):
    `ip4`, `ip6`, `dns`, `fid`, `fport`, additionally `user` and another captures in lower case if
    mapping from tag `<F-*>` used in failregex (e. g. `user` by `<F-USER>`).
  * v.0.10 uses more precise date template handling, that can be theoretically incompatible to some
  user configurations resp. `datepattern`.
  * Since v0.10 fail2ban supports the matching of the IPv6 addresses, but not all ban actions are
  IPv6-capable now.

OBS-URL: https://build.opensuse.org/request/show/536273
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=83
 2017-10-24 10:04:00 +00:00
Johannes Weberhofer
7b7f0beacb Accepting request 506341 from home:weberho:branches:security 
- added 1783.patch from upstream: "Updated roundcube authentication filter"
- use tmpfiles_create macro

OBS-URL: https://build.opensuse.org/request/show/506341
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=81
 2017-06-27 04:04:17 +00:00
Johannes Weberhofer
2109aac4ea Accepting request 495373 from home:weberho:branches:security 
- Update to 0.9.7
- fixes for bnc#1036928

OBS-URL: https://build.opensuse.org/request/show/495373
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=79
 2017-05-16 14:44:12 +00:00
Johannes Weberhofer
7b81f19e35 Accepting request 478626 from home:Aikhjarto:branches:security 
Recently all nagios-plugin-* packages have been renamed to the more general monitoring-plugin-*.
This submit request does this transition for fail2ban and includes Provides/Obsoletes for backwards compatibily its old name.

OBS-URL: https://build.opensuse.org/request/show/478626
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=77
 2017-03-11 09:49:32 +00:00
Johannes Weberhofer
499398214d Accepting request 452855 from home:computersalat:devel:security 
update to 0.9.6

OBS-URL: https://build.opensuse.org/request/show/452855
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=75
 2017-01-27 17:09:05 +00:00
Johannes Weberhofer
ef72158bf2 Accepting request 415421 from home:weberho:branches:security 
Update to version 0.9.5

OBS-URL: https://build.opensuse.org/request/show/415421
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=73
 2016-07-27 18:00:37 +00:00
Johannes Weberhofer
9ffc83a177 Mark /etc/fail2ban/fail2ban.conf as noreplace. 
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=70
 2016-03-10 14:10:34 +00:00
Johannes Weberhofer
7ac30d5336 Accepting request 369600 from home:weberho:branches:security 
- Update to version 0.9.4
- Defined services which per default uses systemd logger
- The update to this versions allow to close boo#917818, as the logger-backends for several services are now centrally set in /etc/fail2ban/paths-opensuse.conf

OBS-URL: https://build.opensuse.org/request/show/369600
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=69
 2016-03-10 12:14:45 +00:00
Johannes Weberhofer
db67cbee5d - Require python-systemd for openSUSE 12.3+ 
- Cleaned up the spec file
- Added /run/fail2ban for openSUSE 13.2+
- Don't fail on test-errors

OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=67
 2016-02-04 15:51:02 +00:00
Johannes Weberhofer
c876389bbe Accepting request 333138 from home:weberho:branches:security 
- Added fail2ban-upstream-fix-ExecuteTimeoutWithNastyChildren-test.patch
  to fix the former failing test and removed
  fail2ban-exclude-ExecuteTimeoutWithNastyChildren-test.patch
- Do not longer create test-package. Developers should not use the packaged
  version of fail2ban.

OBS-URL: https://build.opensuse.org/request/show/333138
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=65
 2015-09-23 10:21:57 +00:00
Johannes Weberhofer
de2609fc73 Accepting request 329471 from home:weberho:branches:security 
patches are no longer included conditionally

OBS-URL: https://build.opensuse.org/request/show/329471
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=63
 2015-09-07 09:49:02 +00:00
Johannes Weberhofer
abaf2faf24 Accepting request 329445 from home:weberho:branches:security 
Update to 0.9.3

OBS-URL: https://build.opensuse.org/request/show/329445
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=62
 2015-09-07 08:44:02 +00:00
Johannes Weberhofer
352f50543f Accepting request 314805 from home:weberho:branches:security 
Updated changelog to allow build in factory

OBS-URL: https://build.opensuse.org/request/show/314805
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=60
 2015-07-02 06:44:14 +00:00
Johannes Weberhofer
1b961970e4 Accepting request 314731 from home:weberho:branches:security 
Major update to version 0.9.2

OBS-URL: https://build.opensuse.org/request/show/314731
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=59
 2015-07-01 19:56:17 +00:00
Johannes Weberhofer
4f21385d62 Accepting request 296076 from home:pluskalm:branches:security 
- Add missing dependency on ed (boo#926943)

OBS-URL: https://build.opensuse.org/request/show/296076
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=57
 2015-04-14 08:03:38 +00:00
Johannes Weberhofer
136706961e Accepting request 283866 from home:weberho:branches:security 
Noted patch-name in changelog

OBS-URL: https://build.opensuse.org/request/show/283866
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=55
 2015-02-03 12:15:48 +00:00
Johannes Weberhofer
ecab052fcb Accepting request 282526 from home:weberho:branches:security 
Fixed strptime thread safety issue; bnc#914075 gh#fail2ban/fail2ban#906

OBS-URL: https://build.opensuse.org/request/show/282526
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=54
 2015-01-23 10:27:14 +00:00
Johannes Weberhofer
cdb1df21c3 Accepting request 262998 from home:weberho:branches:security 
Added syslog to requirements, as this version of fail2ban does not work with systemd-logging: bnc#905733

OBS-URL: https://build.opensuse.org/request/show/262998
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=52
 2014-11-25 14:53:42 +00:00
Johannes Weberhofer
d934d4f3e0 Accepting request 262008 from home:jengelh:branches:security 
- Recommend installation of the ordering package when all
  constituing parts are installed

OBS-URL: https://build.opensuse.org/request/show/262008
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=50
 2014-11-17 11:33:06 +00:00
Johannes Weberhofer
baf2add4d9 Accepting request 245651 from home:weberho:branches:security 
- Fixed check for %_unitdir to make fail2ban build under older systems, too.
- Changed /usr to %{_prefix} in the spec file

OBS-URL: https://build.opensuse.org/request/show/245651
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=48
 2014-08-21 16:58:13 +00:00
Johannes Weberhofer
6be289add4 Accepting request 245601 from home:weberho:BACKPORTS:webserver 
Updated patch information in the .changes and the spec file

OBS-URL: https://build.opensuse.org/request/show/245601
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=47
 2014-08-21 13:18:17 +00:00
Lars Vogdt
3030fbe27f - update to 0.8.13: 
+ Fixes:
  - action firewallcmd-ipset had non-working actioncheck. Removed.
    redhat bug #1046816.
  - filter pureftpd - added _daemon which got removed. Added
  + New Features:
  - filter nagios - detects unauthorized access to the nrpe daemon (Ivo Truxa)
  - filter sendmail-{auth,reject} (jserrachinha and cepheid666 and fab23).
  + Enhancements:
  - filter asterisk now supports syslog format
  - filter pureftpd - added all translations of "Authentication failed for
    user"
  - filter dovecot - lip= was optional and extended TLS errors can occur.
    Thanks Noel Butler.
- removed fix-for-upstream-firewallcmd-ipset.conf.patch : fixed 
  upstream
- split out nagios-plugins-fail2ban package

OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=46
 2014-06-25 15:39:26 +00:00
Marcus Meissner
833b3f3a02 Accepting request 230864 from home:jengelh:branches:security 
- Add a new subpackage to install systemd drop-ins that couple SuSEfirewall2 and fail2ban.

OBS-URL: https://build.opensuse.org/request/show/230864
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=44
 2014-04-28 09:16:08 +00:00
Johannes Weberhofer
0b23663b01 Accepting request 215523 from home:weberho:branches:security 
Security note: The update to version 0.8.11 has fixed two additional security
issues: A remote unauthenticated attacker may cause arbitrary IP addresses to
be blocked by Fail2ban causing legitimate users to be blocked from accessing
services protected by Fail2ban. CVE-2013-7177 (cyrus-imap) and CVE-2013-7176
(postfix)

OBS-URL: https://build.opensuse.org/request/show/215523
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=42
 2014-01-29 13:58:23 +00:00
Johannes Weberhofer
0156e67ee6 Accepting request 214983 from home:weberho:branches:security 
- action firewallcmd-ipset had non-working actioncheck. Removed. rh#1046816

- lsof was required for fail2ban's SysVinit scripts only. Not longer used for newer versions of openSUSE

OBS-URL: https://build.opensuse.org/request/show/214983
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=41
 2014-01-23 21:59:39 +00:00
Johannes Weberhofer
1c64f0f9db Accepting request 214757 from home:weberho:branches:security 
- Reviewed and fixed one github references in the changelog following http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines#Current_set_of_abbreviations
- Use new flushlogs syntax after logrotate

OBS-URL: https://build.opensuse.org/request/show/214757
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=40
 2014-01-23 08:49:19 +00:00
Johannes Weberhofer
a3b7f0e995 Accepting request 214671 from home:weberho:branches:security 
Update to version 0.8.12

OBS-URL: https://build.opensuse.org/request/show/214671
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=39
 2014-01-22 09:26:34 +00:00
Johannes Weberhofer
28eccb4d5e Accepting request 207466 from home:weberho:branches:security 
Update to version 0.8.11

OBS-URL: https://build.opensuse.org/request/show/207466
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=37
 2013-11-18 13:43:25 +00:00
Johannes Weberhofer
afdd4dcfb1 Accepting request 199913 from home:marc_schuetz:branches:security 
I've added a systemd service file for openSUSE >= 12.3.

Previous systemd based versions would require an additional variant of the service file, because SuSEfirewall2.service (which is an ordering dependency) used to be named SuSEfirewall2_setup.service in these versions. I don't think it would be worth the trouble of adding yet another switch, but I can of course do so if desired.

OBS-URL: https://build.opensuse.org/request/show/199913
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=35
 2013-09-23 09:42:53 +00:00
Johannes Weberhofer
aee1bb5a3a Accepting request 178857 from home:weberho:branches:security 
Update to version 0.8.10
Addresses a possible DoS. Closes gh-248, bnc#824710

OBS-URL: https://build.opensuse.org/request/show/178857
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=33
 2013-06-13 09:13:27 +00:00
Johannes Weberhofer
50e6c9be87 Accepting request 176913 from home:weberho:branches:security 
Included logrotate configuration for fail2ban

OBS-URL: https://build.opensuse.org/request/show/176913
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=31
 2013-05-29 07:26:03 +00:00
Johannes Weberhofer
e9789d8f70 Accepting request 175692 from home:weberho:branches:security 
* Upgrade to version 0.8.9

* Init-Script does no longer require $syslog to be started as file-base logging is the default. Synced with Debian script.

OBS-URL: https://build.opensuse.org/request/show/175692
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=29
 2013-05-15 07:27:16 +00:00
Johannes Weberhofer
3394de9dad Accepting request 144432 from home:weberho:branches:security 
Upgraded to version 0.8.8

OBS-URL: https://build.opensuse.org/request/show/144432
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=27
 2012-12-06 16:46:44 +00:00
Johannes Weberhofer
f7cf149e29 Accepting request 144021 from home:weberho:branches:security 
Fixed initscript as discussed in bnc#790557

OBS-URL: https://build.opensuse.org/request/show/144021
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=25
 2012-12-04 09:00:14 +00:00
Marcus Meissner
e782a939d9 - use Source URL pointing to github 
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=23
 2012-10-03 09:53:53 +00:00
Marcus Meissner
d6f97817b2 Accepting request 136597 from home:weberho:UNSTABLE:tools 
* Update to version 0.8.7.1
* Added dependencies to python-pyinotifyi, python-gamin and iptables
* Do not longer replace main config-files
* Use variables for directories in spec file

You might add me as maintainer

OBS-URL: https://build.opensuse.org/request/show/136597
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=21
 2012-10-03 09:45:50 +00:00
Marcus Meissner
5f47f96283 Accepting request 129475 from home:asemen:branches:security 
this fixes the start and restart problems (a start restart fail) if fail2ban was not stopped nice and if the sock and pid file were not removed.

OBS-URL: https://build.opensuse.org/request/show/129475
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=19
 2012-08-07 07:33:36 +00:00
Dr. Werner Fink
5f8ef27b27 Accepting request 123375 from home:weberho:server 
Upgraded to latest version; seems to work :-)

OBS-URL: https://build.opensuse.org/request/show/123375
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=17
 2012-06-03 17:51:16 +00:00
Pavol Rusnak
94105fc43a Accepting request 92454 from home:leonardocf:branches:security 
Update to version 0.8.5. Fix bnc#537239 and bnc#730044.

OBS-URL: https://build.opensuse.org/request/show/92454
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=15
 2011-11-23 16:46:37 +00:00
Marcus Meissner
134faee190 Accepting request 83496 from home:jengelh:bl-f 
- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)

OBS-URL: https://build.opensuse.org/request/show/83496
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=13
 2011-09-21 15:41:41 +00:00
Stephan Kulow
f2a704eb1b - Use /var/run/fail2ban instead of /tmp for temp files in 
actions: see bugs.debian.org/544232, bnc#690853,
  CVE-2009-5023

OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=11
 2011-09-01 14:09:21 +00:00
Pavol Rusnak
c313144d04 Accepting request 57266 from home:leonardocf:branches:security 
OBS-URL: https://build.opensuse.org/request/show/57266
OBS-URL: https://build.opensuse.org/package/show/security/fail2ban?expand=0&rev=9
 2011-01-07 13:28:41 +00:00
OBS User autobuild
389d5cd01c Accepting request 44089 from security 
Copy from security/fail2ban based on submit request 44089 from user elvigia

OBS-URL: https://build.opensuse.org/request/show/44089
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=8
 2010-08-02 09:47:24 +00:00
OBS User autobuild
e98ef5911e Accepting request 39531 from security 
Copy from security/fail2ban based on submit request 39531 from user coolo

OBS-URL: https://build.opensuse.org/request/show/39531
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=5
 2010-05-07 14:09:42 +00:00
OBS User autobuild
ac48672721 Accepting request 29110 from security 
Copy from security/fail2ban based on submit request 29110 from user msmeissn

OBS-URL: https://build.opensuse.org/request/show/29110
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=3
 2010-01-12 14:46:47 +00:00
OBS User unknown
92c75f7af0 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/fail2ban?expand=0&rev=1 2009-02-11 03:32:18 +00:00