Development December 2024

development@lists.ipfire.org

8 participants
40 discussions

Fwd: Advance Notification of Suricata 7.0.8
by Michael Tremer 12 Dec '24

12 Dec '24

It is out, would anyone like to grab this? Looking at the security fixes, we might want to rebuild c190 for this: https://github.com/OISF/suricata/blob/97e69ffb1bc2b7358115ee59f460a92489366… -Michael > Begin forwarded message: > > From: Jason Ish <jish(a)oisf.net> > Subject: Advance Notification of Suricata 7.0.8 > Date: 11 December 2024 at 19:08:13 GMT > To: Victor Julien <vjulien(a)oisf.net>, Jason Ish <jish(a)oisf.net> > > Hello everyone, > > On Thursday, December, 12 we plan to release Suricata 7.0.8. This is a bug-fix and security release addressing several issues. > > For other issues addressed in this release please see: https://redmine.openinfosecfoundation.org/versions/214 > > Please note that Suricata 6.0.x went end of life on August 1st, 2024 and there will be no more security or bug fix releases. > > Regards, > The OISF Team > > > > To unsubscribe from this group and stop receiving emails from it, send an email to oss-advisories+unsubscribe(a)openinfosecfoundation.org <mailto:oss-advisories+unsubscribe@openinfosecfoundation.org>.

2 2

[PATCH 1/2] vpnmain.cgi: Fix for 2nd part of bug10595
by Adolf Belka 11 Dec '24

11 Dec '24

- Bug10595 had two parts in it and was closed after the first part was fixed. The second part was still unfixed at that time. I cam across it when checking out an open bug on a similar issue with OpenVPN. - I found the section that checks on the CA Name and modified it to also allow spaces. - Having modified that then the subroutines getsubjectfromcert and getCNfromcert required to have quotation marks put around the parameter that had the CA Name with spaces in it otherwise the openssl statement only got a filename with the first portion of the ca name until the first space was encountered. - Tested this change out on my vm and it worked fine. I was able to upload a ca certificate into IPSec and use spaces in the CA Name. Fixes: Bug10595 part 2 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- html/cgi-bin/vpnmain.cgi | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) mode change 100755 => 100644 html/cgi-bin/vpnmain.cgi diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi old mode 100755 new mode 100644 index 3541aaa29..694eeed76 --- a/html/cgi-bin/vpnmain.cgi +++ b/html/cgi-bin/vpnmain.cgi @@ -245,7 +245,7 @@ sub callssl ($) { ### sub getCNfromcert ($) { #&General::log("ipsec", "Extracting name from $_[0]..."); - my $temp = `/usr/bin/openssl x509 -text -in $_[0]`; + my $temp = `/usr/bin/openssl x509 -text -in '$_[0]'`; $temp =~ /Subject:.*CN\s*=\s*(.*)[\n]/; $temp = $1; $temp =~ s+/Email+, E+; @@ -259,7 +259,7 @@ sub getCNfromcert ($) { ### sub getsubjectfromcert ($) { #&General::log("ipsec", "Extracting subject from $_[0]..."); - my $temp = `/usr/bin/openssl x509 -text -in $_[0]`; + my $temp = `/usr/bin/openssl x509 -text -in '$_[0]'`; $temp =~ /Subject: (.*)[\n]/; $temp = $1; $temp =~ s+/Email+, E+; @@ -644,8 +644,8 @@ END } elsif ($cgiparams{'ACTION'} eq $Lang::tr{'upload ca certificate'}) { &General::readhasharray("${General::swroot}/vpn/caconfig", \%cahash); - if ($cgiparams{'CA_NAME'} !~ /^[a-zA-Z0-9]+$/) { - $errormessage = $Lang::tr{'name must only contain characters'}; + if ($cgiparams{'CA_NAME'} !~ /^[a-zA-Z0-9 ]*$/) { + $errormessage = $Lang::tr{'ca name must only contain characters or spaces'}; goto UPLOADCA_ERROR; } -- 2.47.1

2 3

[PATCH] suricata.yaml: Fix bug13646 - Adjust the include syntax to use array format
by Adolf Belka 10 Dec '24

10 Dec '24

- Suricata-8.x will only accept include statements in array format and not in multiple single lines. Suricata-7.x still accepts the multiple single lines but flags up that the format is deprecated and will be removed in suricata-8.x - This patch adjusts the address-groups include into the array format. - This change has been tested out on my vm and the IPS started up and from the logs you can see that all the include files were taken on board and the derprecation message is no longer shown. - This change can be implemented with Suricata-7.x and will make sure that IPFire has the include syntax that Suricata-8.x will require. Fixes: Bug13646 Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/suricata/suricata.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/config/suricata/suricata.yaml b/config/suricata/suricata.yaml index faa1aa71d..443b8e19e 100644 --- a/config/suricata/suricata.yaml +++ b/config/suricata/suricata.yaml @@ -8,11 +8,11 @@ vars: address-groups: - # Include HOME_NET declaration from external file. - include: /var/ipfire/suricata/suricata-homenet.yaml - - # Include DNS_SERVERS declaration from external file. - include: /var/ipfire/suricata/suricata-dns-servers.yaml + include: + # Include HOME_NET declaration from external file. + - /var/ipfire/suricata/suricata-homenet.yaml + # Include DNS_SERVERS declaration from external file. + - /var/ipfire/suricata/suricata-dns-servers.yaml EXTERNAL_NET: "any" -- 2.47.1

2 1

[PATCH] samba: Update to version 4.21.2
by Adolf Belka 10 Dec '24

10 Dec '24

- Update from version 4.21.0 to 4.21.2 - Update of the rootfiles for x86_64, aarch64 & riscv64 - Version 4.21.0 mentioned that LDB is no longer available to build as a distinct tarball. However version 4.21.0 previously built without any problem so it looks like it was still available. Now with version 4.21.2 the lmdb package needs to be available or you have to disable all ldb options. As these options were uncommented in the previous versions of samba, it looks like they are intended to be present. To make this version support in the same way the lmdb package had to be moved so it was built before samba is built. Hence the shift of lmdb in make.sh - Changelog 4.21.2 * BUG 15732: smbd fails to correctly check sharemode against OVERWRITE dispositions. * BUG 15754: Panic in close_directory. * BUG 15752: winexe no longer works with samba 4.21. * BUG 14356: protocol error - Unclear debug message "pad length mismatch" for invalid bind packet. * BUG 15425: NetrGetLogonCapabilities QueryLevel 2 needs to be implemented. * BUG 15740: gss_accept_sec_context() from Heimdal does not imply GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE. * BUG 15749: winbindd should call process_set_title() for locator child. * BUG 15320: Update CTDB to track all TCP connections to public IP addresses. 4.21.1 * BUG 15624: DH reconnect error handling can lead to stale sharemode entries. * BUG 15695: "inherit permissions = yes" triggers assert() in vfs_default when creating a stream. * BUG 15715: Samba 4.21.0 broke FreeIPA domain member integration. * BUG 15692: Missing conversion for msDS-UserTGTLifetime, msDS- ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-tool domain auth policy modify". * BUG 15280: irpc_destructor may crash during shutdown. * BUG 15624: DH reconnect error handling can lead to stale sharemode entries. * BUG 15649: Durable handle is not granted when a previous OPEN exists with NoOplock. * BUG 15651: Durable handle is granted but reconnect fails. * BUG 15708: Disconnected durable handles with RH lease should not be purged by a new non conflicting open. * BUG 15714: net ads testjoin and other commands use the wrong secrets.tdb in a cluster. * BUG 15726: 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as rfc 8009 etypes are used. * BUG 15730: VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2. * BUG 15643: Samba 4.20.0 DLZ module crashes BIND on startup. * BUG 15721: Cannot build libldb lmdb backend on a build without AD DC. * BUG 15706: Consistent log level for sighup handler. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/aarch64/samba | 3 +++ config/rootfiles/packages/riscv64/samba | 5 ++++- config/rootfiles/packages/x86_64/samba | 3 +++ lfs/samba | 6 +++--- make.sh | 2 +- 5 files changed, 14 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/aarch64/samba b/config/rootfiles/packages/aarch64/samba index cb7407504..c4e585d1d 100644 --- a/config/rootfiles/packages/aarch64/samba +++ b/config/rootfiles/packages/aarch64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-aarch64-linux usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-aarch64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-aarch64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so diff --git a/config/rootfiles/packages/riscv64/samba b/config/rootfiles/packages/riscv64/samba index b530ea2b2..3979501e4 100644 --- a/config/rootfiles/packages/riscv64/samba +++ b/config/rootfiles/packages/riscv64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-riscv64-linux usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-riscv64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-riscv64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-riscv64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so @@ -1024,4 +1027,4 @@ var/log/samba var/spool/samba srv/web/ipfire/cgi-bin/samba.cgi var/ipfire/menu.d/EX-samba.menu -usr/local/bin/sambactrl \ No newline at end of file +usr/local/bin/sambactrl diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index e720457a3..dc169322e 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -229,6 +229,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/netlogon.cpython-310-x86_64-linux- usr/lib/python3.10/site-packages/samba/dcerpc/ntlmssp.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-x86_64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/dcerpc/schannel.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-x86_64-linux-gnu.so usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-x86_64-linux-gnu.so @@ -808,6 +809,7 @@ usr/lib/samba/ldb/ildap.so usr/lib/samba/ldb/ldap.so usr/lib/samba/ldb/ldb.so usr/lib/samba/ldb/ldbsamba_extensions.so +usr/lib/samba/ldb/mdb.so usr/lib/samba/ldb/paged_searches.so usr/lib/samba/ldb/rdn_name.so usr/lib/samba/ldb/sample.so @@ -874,6 +876,7 @@ usr/lib/samba/libkrb5-private-samba.so usr/lib/samba/libkrb5samba-private-samba.so usr/lib/samba/libldb-cmdline-private-samba.so usr/lib/samba/libldb-key-value-private-samba.so +usr/lib/samba/libldb-mdb-int-private-samba.so usr/lib/samba/libldb-private-samba.so usr/lib/samba/libldb-tdb-err-map-private-samba.so usr/lib/samba/libldb-tdb-int-private-samba.so diff --git a/lfs/samba b/lfs/samba index 8358264a3..1d5789c5e 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.21.0 +VER = 4.21.2 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 105 +PAK_VER = 106 DEPS = avahi cups perl-Parse-Yapp perl-JSON wsdd @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0889f2be3b78affee88250114397de87a77da77d9674815ec5605780a6bb3e2e28dbbae53b66695196408f4aef550acce793e6397045fbea4bb236fdd095ce1a +$(DL_FILE)_BLAKE2 = f9c297f4ed0c00b7887e637beb6ab7f4e17882e0ed5a3d1f1faf1ae1c2d6b064ada53cf65a86f11237813197c043961735e8aad641630baa48ec259482bdab2a install : $(TARGET) diff --git a/make.sh b/make.sh index 35a602f62..031bca80f 100755 --- a/make.sh +++ b/make.sh @@ -1804,6 +1804,7 @@ build_system() { lfsmake2 cifs-utils lfsmake2 krb5 lfsmake2 rpcsvc-proto + lfsmake2 lmdb lfsmake2 samba lfsmake2 netatalk lfsmake2 sudo @@ -2049,7 +2050,6 @@ build_system() { lfsmake2 shairport-sync lfsmake2 libxxhash lfsmake2 borgbackup - lfsmake2 lmdb lfsmake2 knot lfsmake2 spectre-meltdown-checker lfsmake2 zabbix_agentd -- 2.47.1

1 0

Problem with ipfire build system
by Adolf Belka 09 Dec '24

09 Dec '24

Hi Michael, I have experienced a problem yesterday and today with the IPFire build system. Not a major problem but it only seems to have started recently. Today when I tried to run the build command with the standard IPFire-2.x git clone I got the following error message. ./make.sh build ERROR: Not enough temporary space available, need at least 8192MiB, but only have 491 [ FAIL ] Check /home/ahb/sandbox/ipfire-2.x/log_x86_64/_build.preparation.log for errors if applicable [ FAIL ] I was able to overcome it by running the ./make.sh clean command on the openvpn-2.6-meetup-rebased branch git repo that I also have on my system. After running the clean command the normal ipfire-2.x git repo build command is working fine and no longer gives the above message. Yesterday it was the other way around. I tried to run the build command on the openvpn-2.6-meetup-rebased branch and got the same sort of message as above just the amount available was a bit different. Something like 670 instead of 491 today. Yesterday, when I ran the clean command on my normal ipfire-2.x git repo then the openvpn-2.6-meetup-rebased git repo had no problem with the build. Just doing a reboot on my desktop machine that has the git repo's on it made no difference. I have not had this problem in the past. Although not a major problem, I have definitely run a build on one repo when the other still had its build results in place so something has changed. Maybe something in Arch Linux with one of the recent updates I ran. Regards, Adolf.

2 3

[PATCH 1/2] sources: Replacement of Feodo Recommended Tracker list to ipblocklist sources file
by Adolf Belka 09 Dec '24

09 Dec '24

- FEODO_RECOMMENDED list is still being updated but the number of events can be very low. However as it is still active then it has been added back in as discussed in the Dev Conf Call on Nov 4th. - FEODO_IP list covers any IP that has been detected as a botnet in the last 30 days. This could lead to false positives if the botnet has been fixed within one day of being detected. So it was agreed that this list would stay removed. - FEODO_AGGRESSIVE list contains all IP's that havce ever been detected as botnets since the list was started. It is not intended to be used for blocking as it would have a huge false positive effect. This list will also stay removed as it should not have been included originally. - This patch set adds back in the FEODO_RECOMMENDED list into the sources file and in the associated patch for the update.sh file removes the lines that removed the files related to FEODO_RECOMMENDED. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/ipblocklist/sources | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources index c2fc40d5b..158c8bc20 100644 --- a/config/ipblocklist/sources +++ b/config/ipblocklist/sources @@ -61,6 +61,12 @@ our %sources = ( 'EMERGING_FWRULE' => { 'name' => 'Emerging Threats Blocklis 'parser' => 'dshield', 'rate' => '1h', 'category' => 'attacker' }, + 'FEODO_RECOMMENDED'=> {'name' => 'Feodo Trojan IP Blocklist (Recommended)', + 'url' => 'https://feodotracker.abuse.ch/downloads/ipblocklist_recommended.txt', + 'info' => 'https://feodotracker.abuse.ch/blocklist', + 'parser' => 'ip-or-net-list', + 'rate' => '5m', + 'category' => 'c and c' }, 'CIARMY' => { 'name' => 'The CINS Army List', 'url' => 'https://cinsscore.com/list/ci-badguys.txt', 'info' => 'https://cinsscore.com/#list', -- 2.47.1

1 1

[PATCH 1/2] OpenSSH: No longer try to load the RSA key
by Michael Tremer 09 Dec '24

09 Dec '24

This key has been removed on new installations. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/ssh/sshd_config | 1 - 1 file changed, 1 deletion(-) diff --git a/config/ssh/sshd_config b/config/ssh/sshd_config index e338f8cef..09d771b9a 100644 --- a/config/ssh/sshd_config +++ b/config/ssh/sshd_config @@ -27,7 +27,6 @@ MACs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@op # Only allow cryptographically safe SSH host keys (adjust paths if needed) HostKey /etc/ssh/ssh_host_ed25519_key HostKey /etc/ssh/ssh_host_ecdsa_key -HostKey /etc/ssh/ssh_host_rsa_key # Only allow login via public key by default PubkeyAuthentication yes -- 2.39.5

1 1

[PATCH 1/2] openssh: Introduce include directory for additional sshd config files
by Stefan Schantl 09 Dec '24

09 Dec '24

This patch adds the prosibility to place additional *.config files in /etc/ssh/sshd_config.d/ which will be included and loaded during the daemon startup process. Because this files will not be overwritten by any update, they can be used to place custom or other persistent settings. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/common/openssh | 1 + config/ssh/sshd_config | 3 +++ lfs/openssh | 4 ++++ 3 files changed, 8 insertions(+) diff --git a/config/rootfiles/common/openssh b/config/rootfiles/common/openssh index f7b479f55..d25651348 100644 --- a/config/rootfiles/common/openssh +++ b/config/rootfiles/common/openssh @@ -8,6 +8,7 @@ etc/ssh/ssh_config #etc/ssh/ssh_host_rsa_key #etc/ssh/ssh_host_rsa_key.pub etc/ssh/sshd_config +etc/ssh/sshd_config.d usr/bin/scp usr/bin/sftp usr/bin/ssh diff --git a/config/ssh/sshd_config b/config/ssh/sshd_config index e338f8cef..ce74cb851 100644 --- a/config/ssh/sshd_config +++ b/config/ssh/sshd_config @@ -57,4 +57,7 @@ TCPKeepAlive no # Add support for SFTP Subsystem sftp /usr/lib/openssh/sftp-server +# Include additional sshd config files. +Include /etc/ssh/sshd_config.d/*.conf + # EOF diff --git a/lfs/openssh b/lfs/openssh index c14c8267c..b1c9a1635 100644 --- a/lfs/openssh +++ b/lfs/openssh @@ -91,5 +91,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) install -v -m 644 $(DIR_SRC)/config/ssh/ssh_config \ /etc/ssh/ssh_config + # Create directory for additional config + # config files. + mkdir -pv /etc/ssh/sshd_config.d/ + @rm -rf $(DIR_APP) @$(POSTBUILD) -- 2.45.2

2 2

[PATCH 1/4] connections.cgi: Fix colour of destination country
by Michael Tremer 09 Dec '24

09 Dec '24

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- html/cgi-bin/connections.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/connections.cgi b/html/cgi-bin/connections.cgi index badc1f395..af375effe 100644 --- a/html/cgi-bin/connections.cgi +++ b/html/cgi-bin/connections.cgi @@ -439,7 +439,7 @@ foreach my $line (<CONNTRACK>) { </a> $dport_extra </td> - <td style='text-align:center; background-color:$sip_colour;'> + <td style='text-align:center; background-color:$dip_colour;'> <a href='country.cgi#$dstccode'><img src='$dst_flag_icon' border='0' align='absmiddle' alt='$dstccode' title='$dstccode' /></a> </td> <td class="text-right"> -- 2.39.5

2 6

[DEV PATCH] openvpn: Update to version 2.6.12
by Adolf Belka 09 Dec '24

09 Dec '24

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/openvpn | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/openvpn b/lfs/openvpn index b791f83a2..a5a77d02e 100644 --- a/lfs/openvpn +++ b/lfs/openvpn @@ -24,7 +24,7 @@ include Config -VER = 2.6.9 +VER = 2.6.12 THISAPP = openvpn-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 22289b32f2b9afc2aed59f6fc66dc25b3043b8c82858b7857e4f904a25c6cf0f21a41551ed4f8d8869c0e7248e4e060779f760dd606e99cdc02203fbff886536 +$(DL_FILE)_BLAKE2 = 5e40c61cb4aea3db27eff8ae7f49dafaa6e47c8a19fee5fa8802956fc976be490e9b558397741bc2e4447129f174176f9fbbfce16478d96b27a39ecb08a9da86 install : $(TARGET) -- 2.47.1

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development December 2024