Development June 2023

development@lists.ipfire.org

10 participants
37 discussions

Fwd: [intel/Intel-Linux-Processor-Microcode-Data-Files] Release microcode-20230512-rev2 - microcode-20230512-rev2
by Michael Tremer 15 Jun '23

15 Jun '23

Who would like this one? > Begin forwarded message: > > From: MCU Administrator <notifications(a)github.com> > Subject: [intel/Intel-Linux-Processor-Microcode-Data-Files] Release microcode-20230512-rev2 - microcode-20230512-rev2 > Date: 13 June 2023 at 22:11:15 BST > To: intel/Intel-Linux-Processor-Microcode-Data-Files <Intel-Linux-Processor-Microcode-Data-Files(a)noreply.github.com> > Cc: Subscribed <subscribed(a)noreply.github.com> > Reply-To: intel/Intel-Linux-Processor-Microcode-Data-Files <noreply(a)github.com> > > > microcode-20230512-rev2 <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/release…> > Repository: intel/Intel-Linux-Processor-Microcode-Data-Files <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files> · Tag: microcode-20230512-rev2 <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/tree/mi…> · Commit: 390edfb <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/commit/…> · Released by: mcu-administrator <https://github.com/mcu-administrator> > Release Notes > > microcode-20230512-rev2 <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/release…> > Purpose > > • Update for functional issues. Refer to 13th Generation Intel® Core™ Processor Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/740518> for details. > • Update for functional issues. Refer to 12th Generation Intel® Core™ Processor Family <https://cdrdv2.intel.com/v1/dl/getContent/682436> for details. > • Update for functional issues. Refer to 11th Gen Intel® Core™ Processor Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/631123> for details. > • Update for functional issues. Refer to 10th Generation Intel® Core™ Processor Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/615213> for details. > • Update for functional issues. Refer to 10th Gen Intel® Core™ Processor Families Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/341079> for details. > • Update for functional issues. Refer to 8th and 9th Generation Intel® Core™ Processor Family Spec Update <https://cdrdv2.intel.com/v1/dl/getContent/337346> for details. > • Update for functional issues. Refer to 8th Generation Intel® Core™ Processor Families Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/338025> for details. > • Update for functional issues. Refer to 7th and 8th Generation Intel® Core™ Processor Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/334663> for details. > • Update for functional issues. Refer to Intel® Processors and Intel® Core™ i3 N-Series <https://cdrdv2.intel.com/v1/dl/getContent/764616> for details. > • Update for functional issues. Refer to 4th Gen Intel® Xeon® Scalable Processors Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/772415> for details. > • Update for functional issues. Refer to 3rd Generation Intel® Xeon® Scalable Processors Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/634897> for details. > • Update for functional issues. Refer to 2nd Generation Intel® Xeon® Processor Scalable Family Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/338848> for details. > • Update for functional issues. Refer to Intel® Xeon® Processor Scalable Family Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/613537> for details. > • Update for functional issues. Refer to 3rd Generation Intel® Xeon® Processor Scalable Family Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/637780> for details. > • Update for functional issues. Refer to Intel® Xeon® E-2300 Processor Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/709192> for details. > • Update for functional issues. Refer to Intel® Xeon® D-2700 Processor Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/714071> for details. > • Update for functional issues. Refer to Intel® Xeon® D-2100 Processor Specification Update <https://cdrdv2.intel.com/v1/dl/getContent/338854> for details. > > New Platforms > > Processor Stepping F-M-S/PI Old Ver New Ver Products > ADL-N A0 06-be-00/01 00000010 Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E > AZB A0 06-9a-04/40 00000004 Intel(R) Atom(R) C1100 > AZB R0 06-9a-04/40 00000004 Intel(R) Atom(R) C1100 > Updated Platforms > > Processor Stepping F-M-S/PI Old Ver New Ver Products > ADL L0 06-9a-03/80 00000429 0000042a Core Gen12 > ADL L0 06-9a-04/80 00000429 0000042a Core Gen12 > AML-Y22 H0 06-8e-09/10 000000f0 000000f2 Core Gen8 Mobile > AML-Y42 V0 06-8e-0c/94 000000f4 000000f6 Core Gen10 Mobile > CFL-H R0 06-9e-0d/22 000000f4 000000f8 Core Gen9 Mobile > CFL-H/S P0 06-9e-0c/22 000000f0 000000f2 Core Gen9 > CFL-H/S/E3 U0 06-9e-0a/22 000000f0 000000f2 Core Gen8 Desktop, Mobile, Xeon E > CFL-S B0 06-9e-0b/02 000000f0 000000f2 Core Gen8 > CFL-U43e D0 06-8e-0a/c0 000000f0 000000f2 Core Gen8 Mobile > CLX-SP B0 06-55-06/bf 04003303 04003501 Xeon Scalable Gen2 > CLX-SP B1 06-55-07/bf 05003303 05003501 Xeon Scalable Gen2 > CML-H R1 06-a5-02/20 000000f4 000000f6 Core Gen10 Mobile > CML-S102 Q0 06-a5-05/22 000000f4 000000f6 Core Gen10 > CML-S62 G1 06-a5-03/22 000000f4 000000f6 Core Gen10 > CML-U62 V1 A0 06-a6-00/80 000000f4 000000f6 Core Gen10 Mobile > CML-U62 V2 K1 06-a6-01/80 000000f4 000000f6 Core Gen10 Mobile > CML-Y42 V0 06-8e-0c/94 000000f4 000000f6 Core Gen10 Mobile > CPX-SP A1 06-55-0b/bf 07002503 07002601 Xeon Scalable Gen3 > ICL-D B0 06-6c-01/10 01000211 01000230 Xeon D-17xx, D-27xx > ICL-U/Y D1 06-7e-05/80 000000b8 000000ba Core Gen10 Mobile > ICX-SP D0 06-6a-06/87 0d000389 0d000390 Xeon Scalable Gen3 > KBL-G/H/S/E3 B0 06-9e-09/2a 000000f0 000000f2 Core Gen7; Xeon E3 v6 > KBL-U/Y H0 06-8e-09/c0 000000f0 000000f2 Core Gen7 Mobile > LKF B2/B3 06-8a-01/10 00000032 00000033 Core w/Hybrid Technology > RKL-S B0 06-a7-01/02 00000057 00000058 Core Gen11 > RPL-H 6+8 J0 06-ba-02/07 0000410e 00004112 Core Gen13 > RPL-P 6+8 J0 06-ba-02/07 0000410e 00004112 Core Gen13 > RPL-S S0 06-b7-01/32 00000112 00000113 Core Gen13 > RPL-U 2+8 Q0 06-ba-03/07 0000410e 00004112 Core Gen13 > SKX-D H0 06-55-04/b7 02006e05 02006f05 Xeon D-21xx > SKX-SP B1 06-55-03/97 01000161 01000171 Xeon Scalable > SKX-SP H0/M0/U0 06-55-04/b7 02006e05 02006f05 Xeon Scalable > SPR-HBM B3 06-8f-08/10 2c000170 2c0001d1 Xeon Max > SPR-SP E0 06-8f-04/87 2b000181 2b000461 Xeon Scalable Gen4 > SPR-SP E2 06-8f-05/87 2b000181 2b000461 Xeon Scalable Gen4 > SPR-SP E3 06-8f-06/87 2b000181 2b000461 Xeon Scalable Gen4 > SPR-SP E4 06-8f-07/87 2b000181 2b000461 Xeon Scalable Gen4 > SPR-SP E5 06-8f-08/87 2b000181 2b000461 Xeon Scalable Gen4 > SPR-SP S2 06-8f-07/87 2b000181 2b000461 Xeon Scalable Gen4 > SPR-SP S3 06-8f-08/87 2b000181 2b000461 Xeon Scalable Gen4 > TGL B1 06-8c-01/80 000000a6 000000aa Core Gen11 Mobile > TGL-H R0 06-8d-01/c2 00000042 00000044 Core Gen11 Mobile > TGL-R C0 06-8c-02/c2 00000028 0000002a Core Gen11 Mobile > WHL-U V0 06-8e-0c/94 000000f4 000000f6 Core Gen8 Mobile > WHL-U W0 06-8e-0b/d0 000000f0 000000f2 Core Gen8 Mobile > — > This release has 2 assets: > > Source code (zip) > Source code (tar.gz) > Visit the release page <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/release…> to download them. > > — > You are receiving this because you are watching this repository. > View it on GitHub <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/release…> or unsubscribe <https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/unsubsc…> from all notifications for this repository. >

2 2

URGENT - Re: IPFire 2.27 - Core Update 175 released
by Adolf Belka 14 Jun '23

14 Jun '23

Hi Michael, I am afraid somehow I made an error with the last patch I provided. I was sure I transferred the ovpnmain.cgi file from my virtual testbed system and created the patch for bug#13137 from that. However after upgrading the virtual machines I am finding that the legacy bits are not being applied to legacy certs but to openssl-3.x certs. It looks like I submitted the subroutine iscertlegacy from ovpnmain.cgi with the return values the wrong way round. The sub routine was issued like sub iscertlegacy { my $file=$_[0]; my @certinfo = &General::system_output("/usr/bin/openssl", "pkcs12", "-info", "-nodes", "-in", "$file.p12", "-noout", "-passin", "pass:''"); if (index ($certinfo[0], "MAC: sha1") != -1) { return 0; } return 1; } but it should have been sub iscertlegacy { my $file=$_[0]; my @certinfo = &General::system_output("/usr/bin/openssl", "pkcs12", "-info", "-nodes", "-in", "$file.p12", "-noout", "-passin", "pass:''"); if (index ($certinfo[0], "MAC: sha1") != -1) { return 1; } return 0; } I don't know how I managed to do that error but I did. How can we deal with that now? Sorry, Adolf. On 12/06/2023 12:45, IPFire Project wrote: > IPFire Logo > > there is a new post from Michael Tremer on the IPFire Blog: > > *IPFire 2.27 - Core Update 175 released* > > Finally, the next update, IPFire 2.27 - Core Update 175, has been released! It updates OpenSSL to the 3.1 branch, features a kernel update as well as a large number of package updates and a variety of bug fixes. > > Click Here To Read More <https://blog.ipfire.org/post/ipfire-2-27-core-update-175-released> > > The IPFire Project > Don't like these emails? Unsubscribe <https://people.ipfire.org/unsubscribe>. >

3 3

/boot space low after upgrade to 175
by Gerd Hoerst 12 Jun '23

12 Jun '23

Hi ! after upgrading from last core to actual (175) ipfire croaks about low diskspace in /boot. at the beginning (years ago) i made a standart installation on an APU 2C3 and the size of /boot is around 50 MB /dev/sda1 58298 51414 3812 94% /boot Is there a way to get rid of this problem w/o disassembling the device (as you might know this APU does not have a vga) ? Ciao Gerd

2 2

[PATCH 1/3] ovpnmain.cgi: Updated fix for Bug#13137
by Adolf Belka 11 Jun '23

11 Jun '23

- This now only adds "providers legacy default" to the config files of connections that have legacy certificates, both for n2n and roadwarrior. - This new approach also removes the requirement to have code in the update.sh script or in backup.pl so those earlier modifications are removed in two additional patches combined with this one in a set. - The -legacy option has been removed from the pkcs12 creation part of the code as otherwise this creates a certificate in legacy format, which is not wanted. All new connection certificates being created will be based on openssl-3.x Fixes: Bug#13137 Suggested-by: Michael Tremer <michael.tremer(a)ipfire.org> Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- html/cgi-bin/ovpnmain.cgi | 70 ++++++++++++++++++++++++++++++--------- 1 file changed, 55 insertions(+), 15 deletions(-) diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index 88106251e..a210e0509 100755 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -138,6 +138,17 @@ unless (-e "$local_clientconf") { ### ### Useful functions ### +sub iscertlegacy +{ + my $file=$_[0]; + my @certinfo = &General::system_output("/usr/bin/openssl", "pkcs12", "-info", "-nodes", + "-in", "$file.p12", "-noout", "-passin", "pass:''"); + if (index ($certinfo[0], "MAC: sha1") != -1) { + return 0; + } + return 1; +} + sub haveOrangeNet { if ($netsettings{'CONFIG_TYPE'} == 2) {return 1;} @@ -1115,7 +1126,9 @@ unless(-d "${General::swroot}/ovpn/n2nconf/$cgiparams{'NAME'}"){mkdir "${General print CLIENTCONF "# Activate Management Interface and Port\n"; if ($cgiparams{'OVPN_MGMT'} eq '') {print CLIENTCONF "management localhost $cgiparams{'DEST_PORT'}\n"} else {print CLIENTCONF "management localhost $cgiparams{'OVPN_MGMT'}\n"}; - print CLIENTCONF "providers legacy default\n"; + if (&iscertlegacy("${General::swroot}/ovpn/certs/$cgiparams{'NAME'}")) { + print CLIENTCONF "providers legacy default\n"; + } close(CLIENTCONF); } @@ -1649,7 +1662,7 @@ END goto ROOTCERT_ERROR; } } else { # child - unless (exec ('/usr/bin/openssl', 'pkcs12', '-legacy', '-cacerts', '-nokeys', + unless (exec ('/usr/bin/openssl', 'pkcs12', '-cacerts', '-nokeys', '-in', $filename, '-out', "$tempdir/cacert.pem")) { $errormessage = "$Lang::tr{'cant start openssl'}: $!"; @@ -1672,7 +1685,7 @@ END goto ROOTCERT_ERROR; } } else { # child - unless (exec ('/usr/bin/openssl', 'pkcs12', '-legacy', '-clcerts', '-nokeys', + unless (exec ('/usr/bin/openssl', 'pkcs12', '-clcerts', '-nokeys', '-in', $filename, '-out', "$tempdir/hostcert.pem")) { $errormessage = "$Lang::tr{'cant start openssl'}: $!"; @@ -1695,7 +1708,7 @@ END goto ROOTCERT_ERROR; } } else { # child - unless (exec ('/usr/bin/openssl', 'pkcs12', '-legacy', '-nocerts', + unless (exec ('/usr/bin/openssl', 'pkcs12', '-nocerts', '-nodes', '-in', $filename, '-out', "$tempdir/serverkey.pem")) { @@ -2157,7 +2170,10 @@ if ($confighash{$cgiparams{'KEY'}}[3] eq 'net'){ if ($confighash{$cgiparams{'KEY'}}[22] eq '') {print CLIENTCONF "management localhost $confighash{$cgiparams{'KEY'}}[29]\n"} else {print CLIENTCONF "management localhost $confighash{$cgiparams{'KEY'}}[22]\n"}; print CLIENTCONF "# remsub $confighash{$cgiparams{'KEY'}}[11]\n"; - print CLIENTCONF "providers legacy default\n"; + if (&iscertlegacy("${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1]")) { + print CLIENTCONF "providers legacy default\n"; + } + close(CLIENTCONF); @@ -2229,10 +2245,18 @@ else # Extract the certificate # This system call is safe, because all arguments are passed as an array. - system('/usr/bin/openssl', 'pkcs12', '-legacy', '-in', "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1].p12", - '-clcerts', '-nokeys', '-nodes', '-out', "$file_crt" , '-passin', 'pass:'); - if ($?) { - die "openssl error: $?"; + if (&iscertlegacy("${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1]")) { + system('/usr/bin/openssl', 'pkcs12', '-legacy', '-in', "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1].p12", + '-clcerts', '-nokeys', '-nodes', '-out', "$file_crt" , '-passin', 'pass:'); + if ($?) { + die "openssl error: $?"; + } + } else { + system('/usr/bin/openssl', 'pkcs12', '-in', "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1].p12", + '-clcerts', '-nokeys', '-nodes', '-out', "$file_crt" , '-passin', 'pass:'); + if ($?) { + die "openssl error: $?"; + } } $zip->addFile("$file_crt", "$confighash{$cgiparams{'KEY'}}[1].pem") or die; @@ -2240,10 +2264,18 @@ else # Extract the key # This system call is safe, because all arguments are passed as an array. - system('/usr/bin/openssl', 'pkcs12', '-legacy', '-in', "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1].p12", - '-nocerts', '-nodes', '-out', "$file_key", '-passin', 'pass:'); - if ($?) { - die "openssl error: $?"; + if (&iscertlegacy("${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1]")) { + system('/usr/bin/openssl', 'pkcs12', '-legacy', '-in', "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1].p12", + '-nocerts', '-nodes', '-out', "$file_key", '-passin', 'pass:'); + if ($?) { + die "openssl error: $?"; + } + } else { + system('/usr/bin/openssl', 'pkcs12', '-in', "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1].p12", + '-nocerts', '-nodes', '-out', "$file_key", '-passin', 'pass:'); + if ($?) { + die "openssl error: $?"; + } } $zip->addFile("$file_key", "$confighash{$cgiparams{'KEY'}}[1].key") or die; @@ -2302,6 +2334,11 @@ else # If the server is asking for TOTP this needs to happen interactively print CLIENTCONF "auth-retry interact\r\n"; + # Add provider line if certificate is legacy type + if (&iscertlegacy("${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1]")) { + print CLIENTCONF "providers legacy default\r\n"; + } + if ($include_certs) { print CLIENTCONF "\r\n"; @@ -3298,7 +3335,10 @@ END print FILE "# Logfile\n"; print FILE "status-version 1\n"; print FILE "status /var/run/openvpn/$n2nname[0]-n2n 10\n"; - print FILE "providers legacy default\n"; + if (&iscertlegacy("${General::swroot}/ovpn/certs/$cgiparams{'n2nname'}")) { + print CLIENTCONF "providers legacy default\n"; + } + close FILE; unless(move("$tempdir/$uplconffilename", "${General::swroot}/ovpn/n2nconf/$n2nname[0]/$uplconffilename2")) { @@ -4245,7 +4285,7 @@ if ($cgiparams{'TYPE'} eq 'net') { # Create the pkcs12 file # The system call is safe, because all arguments are passed as an array. - system('/usr/bin/openssl', 'pkcs12', '-legacy', '-export', + system('/usr/bin/openssl', 'pkcs12', '-export', '-inkey', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}key.pem", '-in', "${General::swroot}/ovpn/certs/$cgiparams{'NAME'}cert.pem", '-name', $cgiparams{'NAME'}, -- 2.40.1

2 8

Re: [PATCH] transmission: Update to version 4.0.3
by Adolf Belka 09 Jun '23

09 Jun '23

Hi Arne, On 09/06/2023 18:53, Arne Fitzenreiter wrote: > Am 2023-05-30 12:00, schrieb Adolf Belka: >> Hi Arne, >> >> On 30/05/2023 08:06, Arne Fitzenreiter wrote: >>> The files of the webgui are now commented out. Please check: >>> #usr/share/transmission >> >> The files were commented out in the version 3.00 rootfile. > > No. The files where commented out but the whole usr/share/transmission was included > and you have commented it out. > Include usr/share/transmission/public_html at least and it works. Sorry Arne. had planned to submit a corrected version but I got involved in the CU175 OpenSSL-3.x issues. Have just submitted a v2 patch version for the transmission update which has the corrected rootfile as you indicated. Regards, Adolf. > > Arne > >> >> In the version 4.0.3 rootfile the webgui items are not even present. >> >> I didn't worry too much about that as my understanding is that >> transmission is a client only, not a server so it should not need a >> webgui anyway. >> >> However if the torrent client requires a webgui then I can look and >> see if the cmake build can have the webgui enabled. Probably the >> webgui is no longer enabled by default with cmake as compared with the >> configure approach. >> >> >> Regards, >> Adolf. >>> >>> Arne >>> >>> >>> Am 2023-05-20 14:10, schrieb Adolf Belka: >>>> - Update from version 3.00 to 4.0.3 >>>> - Update of rootfile >>>> - Build changed from autotools configure to cmake >>>> - Changelog is very large. For details see >>>> https://github.com/transmission/transmission/releases/ >>>> >>>> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> >>>> --- >>>> config/rootfiles/packages/transmission | 94 +++----------------------- >>>> lfs/transmission | 15 ++-- >>>> 2 files changed, 18 insertions(+), 91 deletions(-) >>>> >>>> diff --git a/config/rootfiles/packages/transmission >>>> b/config/rootfiles/packages/transmission >>>> index d831ecde9..69bc9a1d7 100644 >>>> --- a/config/rootfiles/packages/transmission >>>> +++ b/config/rootfiles/packages/transmission >>>> @@ -1,3 +1,4 @@ >>>> +etc/rc.d/init.d/transmission >>>> #etc/transmission >>>> etc/transmission/settings.json >>>> usr/bin/transmission-create >>>> @@ -5,88 +6,13 @@ usr/bin/transmission-daemon >>>> usr/bin/transmission-edit >>>> usr/bin/transmission-remote >>>> usr/bin/transmission-show >>>> -#usr/share/man/man1/transmission-create.1 >>>> -#usr/share/man/man1/transmission-daemon.1 >>>> -#usr/share/man/man1/transmission-edit.1 >>>> -#usr/share/man/man1/transmission-remote.1 >>>> -#usr/share/man/man1/transmission-show.1 >>>> -usr/share/transmission >>>> -#usr/share/transmission/web >>>> -#usr/share/transmission/web/LICENSE >>>> -#usr/share/transmission/web/images >>>> -#usr/share/transmission/web/images/favicon.ico >>>> -#usr/share/transmission/web/images/favicon.png >>>> -#usr/share/transmission/web/images/webclip-icon.png >>>> -#usr/share/transmission/web/index.html >>>> -#usr/share/transmission/web/javascript >>>> -#usr/share/transmission/web/javascript/common.js >>>> -#usr/share/transmission/web/javascript/dialog.js >>>> -#usr/share/transmission/web/javascript/file-row.js >>>> -#usr/share/transmission/web/javascript/formatter.js >>>> -#usr/share/transmission/web/javascript/inspector.js >>>> -#usr/share/transmission/web/javascript/jquery >>>> -#usr/share/transmission/web/javascript/jquery/jquery-migrate.min.js >>>> -#usr/share/transmission/web/javascript/jquery/jquery-ui.min.js >>>> -#usr/share/transmission/web/javascript/jquery/jquery.min.js >>>> -#usr/share/transmission/web/javascript/jquery/jquery.transmenu.min.js >>>> -#usr/share/transmission/web/javascript/jquery/jquery.ui-contextmenu.min.js >>>> -#usr/share/transmission/web/javascript/jquery/json2.min.js >>>> -#usr/share/transmission/web/javascript/main.js >>>> -#usr/share/transmission/web/javascript/notifications.js >>>> -#usr/share/transmission/web/javascript/polyfill.js >>>> -#usr/share/transmission/web/javascript/prefs-dialog.js >>>> -#usr/share/transmission/web/javascript/remote.js >>>> -#usr/share/transmission/web/javascript/torrent-row.js >>>> -#usr/share/transmission/web/javascript/torrent.js >>>> -#usr/share/transmission/web/javascript/transmission.js >>>> -#usr/share/transmission/web/style >>>> -#usr/share/transmission/web/style/jqueryui >>>> -#usr/share/transmission/web/style/jqueryui/images >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-bg_flat_0_aaaaaa_40x100.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-bg_flat_75_ffffff_40x100.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-bg_glass_55_fbf9ee_1x400.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-bg_glass_65_ffffff_1x400.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-bg_glass_75_dadada_1x400.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-bg_glass_75_e6e6e6_1x400.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-bg_glass_95_fef1ec_1x400.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-bg_highlight-soft_75_cccccc_1x100.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-icons_222222_256x240.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-icons_2e83ff_256x240.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-icons_454545_256x240.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-icons_888888_256x240.png >>>> -#usr/share/transmission/web/style/jqueryui/images/ui-icons_cd0a0a_256x240.png >>>> -#usr/share/transmission/web/style/jqueryui/jquery-ui.min.css >>>> -#usr/share/transmission/web/style/transmission >>>> -#usr/share/transmission/web/style/transmission/common.css >>>> -#usr/share/transmission/web/style/transmission/images >>>> -#usr/share/transmission/web/style/transmission/images/arrow-down.png >>>> -#usr/share/transmission/web/style/transmission/images/arrow-up.png >>>> -#usr/share/transmission/web/style/transmission/images/blue-turtle.png >>>> -#usr/share/transmission/web/style/transmission/images/buttons >>>> -#usr/share/transmission/web/style/transmission/images/buttons/torrent_buttons.png >>>> -#usr/share/transmission/web/style/transmission/images/compact.png >>>> -#usr/share/transmission/web/style/transmission/images/file-priority-high.png >>>> -#usr/share/transmission/web/style/transmission/images/file-priority-low.png >>>> -#usr/share/transmission/web/style/transmission/images/file-priority-normal.png >>>> -#usr/share/transmission/web/style/transmission/images/filter_bar.png >>>> -#usr/share/transmission/web/style/transmission/images/filter_icon.png >>>> -#usr/share/transmission/web/style/transmission/images/inspector-files.png >>>> -#usr/share/transmission/web/style/transmission/images/inspector-info.png >>>> -#usr/share/transmission/web/style/transmission/images/inspector-peers.png >>>> -#usr/share/transmission/web/style/transmission/images/inspector-trackers.png >>>> -#usr/share/transmission/web/style/transmission/images/lock_icon.png >>>> -#usr/share/transmission/web/style/transmission/images/logo.png >>>> -#usr/share/transmission/web/style/transmission/images/progress.png >>>> -#usr/share/transmission/web/style/transmission/images/settings.png >>>> -#usr/share/transmission/web/style/transmission/images/toolbar-close.png >>>> -#usr/share/transmission/web/style/transmission/images/toolbar-folder.png >>>> -#usr/share/transmission/web/style/transmission/images/toolbar-info.png >>>> -#usr/share/transmission/web/style/transmission/images/toolbar-pause-all.png >>>> -#usr/share/transmission/web/style/transmission/images/toolbar-pause.png >>>> -#usr/share/transmission/web/style/transmission/images/toolbar-start-all.png >>>> -#usr/share/transmission/web/style/transmission/images/toolbar-start.png >>>> -#usr/share/transmission/web/style/transmission/images/turtle.png >>>> -#usr/share/transmission/web/style/transmission/images/wrench.png >>>> -#usr/share/transmission/web/style/transmission/mobile.css >>>> +#usr/share/transmission >>>> +#usr/share/transmission/public_html >>>> +#usr/share/transmission/public_html/images >>>> +#usr/share/transmission/public_html/images/favicon.ico >>>> +#usr/share/transmission/public_html/images/favicon.png >>>> +#usr/share/transmission/public_html/images/webclip-icon.png >>>> +#usr/share/transmission/public_html/index.html >>>> +#usr/share/transmission/public_html/transmission-app.js >>>> +#usr/share/transmission/public_html/transmission-app.js.LICENSE.txt >>>> var/ipfire/backup/addons/includes/transmission >>>> -etc/rc.d/init.d/transmission >>>> diff --git a/lfs/transmission b/lfs/transmission >>>> index ea1167da4..4e0667353 100644 >>>> --- a/lfs/transmission >>>> +++ b/lfs/transmission >>>> @@ -1,7 +1,7 @@ >>>> >>>> ############################################################################### >>>> # # >>>> # IPFire.org - A linux based firewall # >>>> -# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # >>>> +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # >>>> # # >>>> # This program is free software: you can redistribute it and/or modify # >>>> # it under the terms of the GNU General Public License as published by # >>>> @@ -26,7 +26,7 @@ include Config >>>> >>>> SUMMARY = A BitTorrent client with multiple UIs >>>> >>>> -VER = 3.00 >>>> +VER = 4.0.3 >>>> >>>> THISAPP = transmission-$(VER) >>>> DL_FILE = $(THISAPP).tar.xz >>>> @@ -34,14 +34,12 @@ DL_FROM = $(URL_IPFIRE) >>>> DIR_APP = $(DIR_SRC)/$(THISAPP) >>>> TARGET = $(DIR_INFO)/$(THISAPP) >>>> PROG = transmission >>>> -PAK_VER = 18 >>>> +PAK_VER = 19 >>>> >>>> DEPS = >>>> >>>> SERVICES = transmission >>>> >>>> -CXXFLAGS += -fno-exceptions >>>> - >>>> >>>> ############################################################################### >>>> # Top-level Rules >>>> >>>> ############################################################################### >>>> @@ -50,7 +48,7 @@ objects = $(DL_FILE) >>>> >>>> $(DL_FILE) = $(DL_FROM)/$(DL_FILE) >>>> >>>> -$(DL_FILE)_BLAKE2 = >>>> 108c9acb8e8cb9c037ea96ca25f32c8421a6981b613399c73e2cd597dd1b529409329fa3c327630c164db05d8b3da81e634941bca08c7e258bb2d283782b9906 >>>> +$(DL_FILE)_BLAKE2 = >>>> 3d58f002d57458869e143e4a3617c8992e51a01f15f0e17031bc2913f404a455cde3397bde404f84a2234d12411e99b2902e4213ca6811b95288bb68f9b98553 >>>> >>>> install : $(TARGET) >>>> >>>> @@ -83,7 +81,10 @@ $(subst %,%_BLAKE2,$(objects)) : >>>> $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) >>>> @$(PREBUILD) >>>> @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) >>>> - cd $(DIR_APP) && ./configure --prefix=/usr --disable-static >>>> + cd $(DIR_APP) && cmake . \ >>>> + -DCMAKE_INSTALL_PREFIX=/usr \ >>>> + -DCMAKE_BUILD_TYPE=Release \ >>>> + -DINSTALL_DOC=OFF >>>> cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) >>>> cd $(DIR_APP) && make install

1 0

[PATCH v2] transmission: Update to version 4.0.3
by Adolf Belka 09 Jun '23

09 Jun '23

- Update from version 3.00 to 4.0.3 - This v2 version has usr/share/transmission directory uncommented. - Update of rootfile - Build changed from autotools configure to cmake - Changelog is very large. For details see https://github.com/transmission/transmission/releases/ Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/transmission | 92 +++----------------------- lfs/transmission | 15 +++-- 2 files changed, 17 insertions(+), 90 deletions(-) diff --git a/config/rootfiles/packages/transmission b/config/rootfiles/packages/transmission index d831ecde9..8efd4a95b 100644 --- a/config/rootfiles/packages/transmission +++ b/config/rootfiles/packages/transmission @@ -1,3 +1,4 @@ +etc/rc.d/init.d/transmission #etc/transmission etc/transmission/settings.json usr/bin/transmission-create @@ -5,88 +6,13 @@ usr/bin/transmission-daemon usr/bin/transmission-edit usr/bin/transmission-remote usr/bin/transmission-show -#usr/share/man/man1/transmission-create.1 -#usr/share/man/man1/transmission-daemon.1 -#usr/share/man/man1/transmission-edit.1 -#usr/share/man/man1/transmission-remote.1 -#usr/share/man/man1/transmission-show.1 usr/share/transmission -#usr/share/transmission/web -#usr/share/transmission/web/LICENSE -#usr/share/transmission/web/images -#usr/share/transmission/web/images/favicon.ico -#usr/share/transmission/web/images/favicon.png -#usr/share/transmission/web/images/webclip-icon.png -#usr/share/transmission/web/index.html -#usr/share/transmission/web/javascript -#usr/share/transmission/web/javascript/common.js -#usr/share/transmission/web/javascript/dialog.js -#usr/share/transmission/web/javascript/file-row.js -#usr/share/transmission/web/javascript/formatter.js -#usr/share/transmission/web/javascript/inspector.js -#usr/share/transmission/web/javascript/jquery -#usr/share/transmission/web/javascript/jquery/jquery-migrate.min.js -#usr/share/transmission/web/javascript/jquery/jquery-ui.min.js -#usr/share/transmission/web/javascript/jquery/jquery.min.js -#usr/share/transmission/web/javascript/jquery/jquery.transmenu.min.js -#usr/share/transmission/web/javascript/jquery/jquery.ui-contextmenu.min.js -#usr/share/transmission/web/javascript/jquery/json2.min.js -#usr/share/transmission/web/javascript/main.js -#usr/share/transmission/web/javascript/notifications.js -#usr/share/transmission/web/javascript/polyfill.js -#usr/share/transmission/web/javascript/prefs-dialog.js -#usr/share/transmission/web/javascript/remote.js -#usr/share/transmission/web/javascript/torrent-row.js -#usr/share/transmission/web/javascript/torrent.js -#usr/share/transmission/web/javascript/transmission.js -#usr/share/transmission/web/style -#usr/share/transmission/web/style/jqueryui -#usr/share/transmission/web/style/jqueryui/images -#usr/share/transmission/web/style/jqueryui/images/ui-bg_flat_0_aaaaaa_40x100.png -#usr/share/transmission/web/style/jqueryui/images/ui-bg_flat_75_ffffff_40x100.png -#usr/share/transmission/web/style/jqueryui/images/ui-bg_glass_55_fbf9ee_1x400.png -#usr/share/transmission/web/style/jqueryui/images/ui-bg_glass_65_ffffff_1x400.png -#usr/share/transmission/web/style/jqueryui/images/ui-bg_glass_75_dadada_1x400.png -#usr/share/transmission/web/style/jqueryui/images/ui-bg_glass_75_e6e6e6_1x400.png -#usr/share/transmission/web/style/jqueryui/images/ui-bg_glass_95_fef1ec_1x400.png -#usr/share/transmission/web/style/jqueryui/images/ui-bg_highlight-soft_75_cccccc_1x100.png -#usr/share/transmission/web/style/jqueryui/images/ui-icons_222222_256x240.png -#usr/share/transmission/web/style/jqueryui/images/ui-icons_2e83ff_256x240.png -#usr/share/transmission/web/style/jqueryui/images/ui-icons_454545_256x240.png -#usr/share/transmission/web/style/jqueryui/images/ui-icons_888888_256x240.png -#usr/share/transmission/web/style/jqueryui/images/ui-icons_cd0a0a_256x240.png -#usr/share/transmission/web/style/jqueryui/jquery-ui.min.css -#usr/share/transmission/web/style/transmission -#usr/share/transmission/web/style/transmission/common.css -#usr/share/transmission/web/style/transmission/images -#usr/share/transmission/web/style/transmission/images/arrow-down.png -#usr/share/transmission/web/style/transmission/images/arrow-up.png -#usr/share/transmission/web/style/transmission/images/blue-turtle.png -#usr/share/transmission/web/style/transmission/images/buttons -#usr/share/transmission/web/style/transmission/images/buttons/torrent_buttons.png -#usr/share/transmission/web/style/transmission/images/compact.png -#usr/share/transmission/web/style/transmission/images/file-priority-high.png -#usr/share/transmission/web/style/transmission/images/file-priority-low.png -#usr/share/transmission/web/style/transmission/images/file-priority-normal.png -#usr/share/transmission/web/style/transmission/images/filter_bar.png -#usr/share/transmission/web/style/transmission/images/filter_icon.png -#usr/share/transmission/web/style/transmission/images/inspector-files.png -#usr/share/transmission/web/style/transmission/images/inspector-info.png -#usr/share/transmission/web/style/transmission/images/inspector-peers.png -#usr/share/transmission/web/style/transmission/images/inspector-trackers.png -#usr/share/transmission/web/style/transmission/images/lock_icon.png -#usr/share/transmission/web/style/transmission/images/logo.png -#usr/share/transmission/web/style/transmission/images/progress.png -#usr/share/transmission/web/style/transmission/images/settings.png -#usr/share/transmission/web/style/transmission/images/toolbar-close.png -#usr/share/transmission/web/style/transmission/images/toolbar-folder.png -#usr/share/transmission/web/style/transmission/images/toolbar-info.png -#usr/share/transmission/web/style/transmission/images/toolbar-pause-all.png -#usr/share/transmission/web/style/transmission/images/toolbar-pause.png -#usr/share/transmission/web/style/transmission/images/toolbar-start-all.png -#usr/share/transmission/web/style/transmission/images/toolbar-start.png -#usr/share/transmission/web/style/transmission/images/turtle.png -#usr/share/transmission/web/style/transmission/images/wrench.png -#usr/share/transmission/web/style/transmission/mobile.css +#usr/share/transmission/public_html +#usr/share/transmission/public_html/images +#usr/share/transmission/public_html/images/favicon.ico +#usr/share/transmission/public_html/images/favicon.png +#usr/share/transmission/public_html/images/webclip-icon.png +#usr/share/transmission/public_html/index.html +#usr/share/transmission/public_html/transmission-app.js +#usr/share/transmission/public_html/transmission-app.js.LICENSE.txt var/ipfire/backup/addons/includes/transmission -etc/rc.d/init.d/transmission diff --git a/lfs/transmission b/lfs/transmission index ea1167da4..4e0667353 100644 --- a/lfs/transmission +++ b/lfs/transmission @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = A BitTorrent client with multiple UIs -VER = 3.00 +VER = 4.0.3 THISAPP = transmission-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -34,14 +34,12 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = transmission -PAK_VER = 18 +PAK_VER = 19 DEPS = SERVICES = transmission -CXXFLAGS += -fno-exceptions - ############################################################################### # Top-level Rules ############################################################################### @@ -50,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 108c9acb8e8cb9c037ea96ca25f32c8421a6981b613399c73e2cd597dd1b529409329fa3c327630c164db05d8b3da81e634941bca08c7e258bb2d283782b9906 +$(DL_FILE)_BLAKE2 = 3d58f002d57458869e143e4a3617c8992e51a01f15f0e17031bc2913f404a455cde3397bde404f84a2234d12411e99b2902e4213ca6811b95288bb68f9b98553 install : $(TARGET) @@ -83,7 +81,10 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && ./configure --prefix=/usr --disable-static + cd $(DIR_APP) && cmake . \ + -DCMAKE_INSTALL_PREFIX=/usr \ + -DCMAKE_BUILD_TYPE=Release \ + -DINSTALL_DOC=OFF cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) cd $(DIR_APP) && make install -- 2.40.1

1 0

[PATCH] extrahd.cgi: Fix for Bug #12863
by Jon Murphy 07 Jun '23

07 Jun '23

-Fixes remove entries in 'extrahd' via the webinterface for extrahd.cgi file. Suggested-by: Bernhard Bitsch <bbitsch(a)ipfire.org> Signed-off-by: Jon Murphy <jon.murphy(a)ipfire.org> --- html/cgi-bin/extrahd.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/extrahd.cgi b/html/cgi-bin/extrahd.cgi index 36c0efc2e..9dd3a0eee 100644 --- a/html/cgi-bin/extrahd.cgi +++ b/html/cgi-bin/extrahd.cgi @@ -103,7 +103,7 @@ END } elsif ($extrahdsettings{'ACTION'} eq $Lang::tr{'delete'}) { - if ( &General::system("/usr/local/bin/extrahdctrl", "umount", "$extrahdsettings{'PATH'}")) { + if ( ! &General::system("/usr/local/bin/extrahdctrl", "umount", "$extrahdsettings{'PATH'}")) { open( FILE, "< $devicefile" ) or die "Unable to read $devicefile"; @tmp = <FILE>; close FILE; -- 2.30.2

4 4

Fwd: Forthcoming OpenSSL Releases
by Michael Tremer 07 Jun '23

07 Jun '23

It looks like we might not want to release the forthcoming Core Update before this. I did not hear any rumours about what might be the issue, but I would say that it wouldn’t hurt us to wait. What other outstanding issues do we have that are currently blocking the update? -Michael > Begin forwarded message: > > From: Tomas Mraz <tomas(a)openssl.org> > Subject: Forthcoming OpenSSL Releases > Date: 24 May 2023 at 05:06:12 BST > To: "openssl-project(a)openssl.org" <openssl-project(a)openssl.org>, "openssl-users(a)openssl.org" <openssl-users(a)openssl.org>, openssl-announce(a)openssl.org > Reply-To: openssl-users(a)openssl.org > > The OpenSSL project team would like to announce the forthcoming release > of OpenSSL versions 3.0.9, 1.1.1u and 1.0.2zh. Note that OpenSSL 1.0.2 > is End Of Life and so 1.0.2zh will be available to premium support > customers only. > > These releases will be made available on Tuesday 30th May 2023 > between 1300-1700 UTC. > > These are security-fix releases. The highest severity issue fixed in > each of these three releases is Moderate: > > https://www.openssl.org/policies/secpolicy.html > > Yours > The OpenSSL Project Team >

5 27

[PATCH] update.sh: Fixes bug#13138 - root/host certificate set fails to be created
by Adolf Belka 06 Jun '23

06 Jun '23

- The fix applied in vpnmain.cgi only adds the unique_subject = yes to the index.txt.attr file after the first time that the root/host certificates are attempted to be created. - Without this line in update.sh, the first attempt to create the root/host certificate set will still have the original error code. If the creation is attempted again then it will work because the unique_subject = yes will have then been added into the file. - This patch ensures that the first attempt to create a root/host certificate set in CU175 will work. - Confirmed on vm testbed with freshly updated CU175. Fixes: Bug#13138 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/core/175/update.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/rootfiles/core/175/update.sh b/config/rootfiles/core/175/update.sh index 82676bc72..f1c6873c1 100644 --- a/config/rootfiles/core/175/update.sh +++ b/config/rootfiles/core/175/update.sh @@ -191,6 +191,9 @@ if [ -s /var/ipfire/ovpn/ovpnconfig ]; then done fi +## Add unique_subject = yes to vpn index.txt.attr file +echo "unique_subject = yes" > /var/ipfire/certs/index.txt.attr + # This update needs a reboot... touch /var/run/need_reboot -- 2.40.1

1 1

[PATCH] backup.pl: Fixes Bug#13137 - Existing n2n client connection created with openssl-1.1.1x fails to start with openssl-3.x
by Adolf Belka 05 Jun '23

05 Jun '23

- This code adds the "providers legacy default" line into OpenVPN N2N Client config files when restoring them in case it is missing from a backup earlier than CU175. Only adds the line if it is not already present. - Tested out on my vm testbed system Fixes: Bug#13137 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/backup/backup.pl | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/config/backup/backup.pl b/config/backup/backup.pl index 96e794439..8d990c0f1 100644 --- a/config/backup/backup.pl +++ b/config/backup/backup.pl @@ -189,6 +189,21 @@ restore_backup() { # Update OpenVPN CRL /etc/fcron.daily/openvpn-crl-updater + + # Update OpenVPN N2N Client Configs + ## Add providers legacy default line to n2n client config files + # Check if ovpnconfig exists and is not empty + if [ -s /var/ipfire/ovpn/ovpnconfig ]; then + # Identify all n2n connections + for y in $(awk -F',' '/net/ { print $3 }' /var/ipfire/ovpn/ovpnconfig); do + # Add the legacy option to all N2N client conf files if it does not already exist + if [ $(grep -c "Open VPN Client Config" /var/ipfire/ovpn/n2nconf/${y}/${y}.conf) -eq 1 ] ; then + if [ $(grep -c "providers legacy default" /var/ipfire/ovpn/n2nconf/${y}/${y}.conf) -eq 0 ] ; then + echo "providers legacy default" >> /var/ipfire/ovpn/n2nconf/${y}/${y}.conf + fi + fi + done + fi return 0 } -- 2.40.1

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development June 2023