Hello,
could somebody please have a look at these patches:
Hardening Unbound default values: - https://patchwork.ipfire.org/patch/1907/ - https://patchwork.ipfire.org/patch/1908/ - https://patchwork.ipfire.org/patch/1909/
Hide kernel address space from privileged users: - https://patchwork.ipfire.org/patch/1889/
Fix background image on URL filter blockpages: - https://patchwork.ipfire.org/patch/1904/
In the past, I made much noise on the list, which I want to apologise for here (and hopefully become better in future). If there is nothing against it, I would like to see this changes in Core Update 124.
SSH (client and server) hardening is another topic, which I will provide final patches within the next days.
Thanks for the patience, and best regards, Peter Müller