Development July 2024

development@lists.ipfire.org

3 participants
5 discussions

Problem during building of samba on arm builder
by Adolf Belka 02 Jul '24

02 Jul '24

Hi Michael and all, I ran the arm builder with the 4.20.2 version of samba to test it out. The build got to building gdb and then failed. Interestingly, the nightly build of arm was successful with the same version of gdb. The build log for gdb is attached. The actual error is at line 618. Another thing I found is that I just tried to go back into the arm builder. I successfully got into people.ipfire.org but then trying to scp into the arm builder failed with the following message. ------------------------------------------ ssh bonnietwin(a)arm64-01.zrh.ipfire.org PTY allocation request failed on channel 0 Linux arm64-01.zrh.ipfire.org 6.1.0-21-cloud-arm64 #1 SMP Debian 6.1.90-1 (2024-05-03) aarch64 The programs included with the Debian GNU/Linux system are free software; the exact distribution terms for each program are described in the individual files in /usr/share/doc/*/copyright. Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. /etc/profile.d/Z99-cloud-locale-test.sh: line 14: /dev/null: Permission denied ------------------------------------------ Regards, Adolf.

1 0

Review of package updates from Adolf for any with CVE's
by Adolf Belka 02 Jul '24

02 Jul '24

Hi All, I went through the list of package updates that I have provided that are not yet merged. There are two that have CVE's. openssh, which we know from yesterday and tshark. Current version of tshark is 4.0.8 and there are 13 updates between that version and the update of 4.2.5. In 7 of those 13 updates there are a total of 21 CVE's, so I think tshark definitely needs to go into CU187. Regards, Adolf. -- Sent from my laptop

2 1

[PATCH] apache: Update to 2.4.60
by Matthias Fischer 02 Jul '24

02 Jul '24

Fixed: CVE-2024-39573, CVE-2024-38477, CVE-2024-38476, CVE-2024-38475, CVE-2024-38474, CVE-2024-38473, CVE-2024-38472, CVE-2024-36387. For details see: https://dlcdn.apache.org/httpd/CHANGES_2.4.60 Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/apache2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/apache2 b/lfs/apache2 index 0851471fe..2736eec8d 100644 --- a/lfs/apache2 +++ b/lfs/apache2 @@ -25,7 +25,7 @@ include Config -VER = 2.4.59 +VER = 2.4.60 THISAPP = httpd-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 836e3538a120d71c016149397a4efd61ae6acd8a8fb9d2ce117c7d86209c4b40c0be3c464007891f28c58182e9d40a8793abe9e94e642354492954af91d9878c +$(DL_FILE)_BLAKE2 = d1b4d2e05edfe8b88f541e6fa8b5db73f37cc349a4037b493e57ae2f2e0bb84f92aad3ad3bc0bdbc454d2677091bbca283ebe752a9335fae6931ec65cc687326 install : $(TARGET) -- 2.34.1

2 1

[PATCH] openssh: Update to version 9.8p1
by Adolf Belka 01 Jul '24

01 Jul '24

- Update from version 9.7p1 to 9.8p1 - Update of rootfile - Changelog 9.8p1 -There is a fix for CVE-2024-6387 -The number of changes is too large to show all here. As well as the CVE fix and another security related fix there are a log of bug fixes as well. The details can seen at https://www.openssh.com/txt/release-9.8 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/openssh | 3 +-- lfs/openssh | 4 ++-- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/openssh b/config/rootfiles/common/openssh index c3666d914..93d51714d 100644 --- a/config/rootfiles/common/openssh +++ b/config/rootfiles/common/openssh @@ -1,8 +1,6 @@ #etc/ssh etc/ssh/moduli etc/ssh/ssh_config -#etc/ssh/ssh_host_dsa_key -#etc/ssh/ssh_host_dsa_key.pub #etc/ssh/ssh_host_ecdsa_key #etc/ssh/ssh_host_ecdsa_key.pub #etc/ssh/ssh_host_ed25519_key @@ -22,6 +20,7 @@ usr/lib/openssh/sftp-server #usr/lib/openssh/ssh-keysign usr/lib/openssh/ssh-pkcs11-helper usr/lib/openssh/ssh-sk-helper +#usr/lib/openssh/sshd-session usr/sbin/sshd #usr/share/man/man1/scp.1 #usr/share/man/man1/sftp.1 diff --git a/lfs/openssh b/lfs/openssh index 315b1a70b..036d0bb8e 100644 --- a/lfs/openssh +++ b/lfs/openssh @@ -24,7 +24,7 @@ include Config -VER = 9.7p1 +VER = 9.8p1 THISAPP = openssh-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 520859fcbdf678808fc8515b64585ab9a90a8055fa869df6fbba3083cb7f73ddb81ed9ea981e131520736a8aed838f85ae68ca63406a410df61039913c5cb48b +$(DL_FILE)_BLAKE2 = 3bf983c4ef5358054ed0104cd51d3e0069fbc2b80d8522d0df644d5508ec1d26a67bf061b1b5698d1cdf0d2cbba16b4cdca12a4ce30da24429094576a075e192 install : $(TARGET) -- 2.45.2

1 0

Update of openssh due to CVE CVE-2024-6387
by Adolf Belka 01 Jul '24

01 Jul '24

Hi All, Openssh has a CVE https://community.ipfire.org/t/cve-2024-6387-openssh-regession/11806 I am building a package update for Openssh to 9.8p1 and will submit to go into CU187. I am not sure that it is super critical for IPFire as so far the exploit has only been demonstrated in 32 bit systems with the attacker having to try and make connections for 6 to 8 hours. On 64 bit systems they expect it will take longer but so far the exploit has not yet been demonstrated. Regards, Adolf.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development July 2024