IPFire-SCM March 2022

ipfire-scm@lists.ipfire.org

1 participants
63 discussions

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 1af1ea5585f524040ec064434e268dddbfe7dfbc
by Peter Müller 21 Mar '22

21 Mar '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 1af1ea5585f524040ec064434e268dddbfe7dfbc (commit) from 5e5ee282345935a84de3cf63402a6d345f156b15 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 1af1ea5585f524040ec064434e268dddbfe7dfbc Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Mar 2 21:14:53 2022 +0000 Postfix: Update to 3.7.0 See https://www.postfix.org/announcements/postfix-3.7.0.html for this version's release announcement. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/postfix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) Difference in files: diff --git a/lfs/postfix b/lfs/postfix index 29b0a3af0..e63daa8ba 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = A fast, secure, and flexible mailer -VER = 3.6.3 +VER = 3.7.0 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 33 +PAK_VER = 34 DEPS = @@ -70,7 +70,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 793f9f4abf74d07a2557bd97a903b98d +$(DL_FILE)_MD5 = 4ab110024af1837f6c4098a7f8500b05 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 38f5bc99125e41140d893baf327a9ac454ea0fa4
by Michael Tremer 21 Mar '22

21 Mar '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via 38f5bc99125e41140d893baf327a9ac454ea0fa4 (commit) from 6b10e08aec961c14732271b17a03db1ba43c3f9e (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 38f5bc99125e41140d893baf327a9ac454ea0fa4 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Mar 20 10:41:28 2022 +0000 libseccomp: Bump package version Fixes: #12807 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/libseccomp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) Difference in files: diff --git a/lfs/libseccomp b/lfs/libseccomp index 17930291d..180f995cb 100644 --- a/lfs/libseccomp +++ b/lfs/libseccomp @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = libseccomp -PAK_VER = 6 +PAK_VER = 7 DEPS = hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 5e5ee282345935a84de3cf63402a6d345f156b15
by Michael Tremer 21 Mar '22

21 Mar '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 5e5ee282345935a84de3cf63402a6d345f156b15 (commit) via a1e9afcbaffbb8ca594db1da783c5926b14ea982 (commit) via bfde1c5af3add95ef1d54ae4f0a4616a08ac6589 (commit) via 0b6d12adae7f41bb31f6b361b2d6a90057de7867 (commit) via 0ad14f4d83ef8a3f18e8cbc2db48367a0b6ec3b5 (commit) via 2c76a055663b581a86f9e74c1603b520fe005c81 (commit) via 16fa9ed5e581140dd9f1a718d0160a3b803f726a (commit) via e90c62b2e3d99c3d4d244962e114f7c1924c4640 (commit) via 3815512d05948b95bc6dc3b76351f4e08e019709 (commit) from da4ff2f6a971ceedeacfd0c929ed1eaf4ecef34f (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 5e5ee282345935a84de3cf63402a6d345f156b15 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Mar 21 08:51:51 2022 +0000 core166: Ship /etc/inittab.d Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit a1e9afcbaffbb8ca594db1da783c5926b14ea982 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Thu Mar 17 22:27:15 2022 +0100 sysvinit: Update rootfile to fix bug 12797 - In sysvinit-2.97 (Dec2020) a patch was added which allows init to load configuration data from files stored in /etc/inittab.d/ This modification would have come in with Core Update 155. - When sysvinit was updated from 2.88dsf to 2.98 the /etc/inittab.d/ directory in the rootfile was commented out. Sysvinit looks to see if there are any files in inittab.d but as that directory does not exist then the message "No inittab.d directory found" is written during the boot and is also shown in the log summary. - This patch uncomments the directory so that it will be present. No files will be placed in it but its prescence will stop the error message being shown during boot. Fixes: Bug #12797 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit bfde1c5af3add95ef1d54ae4f0a4616a08ac6589 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Mar 21 08:50:56 2022 +0000 core166: Drop openvpn-ccd-convert script from all installations Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 0b6d12adae7f41bb31f6b361b2d6a90057de7867 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Mar 19 16:35:35 2022 +0000 Drop orphaned ovpn-ccd-convert script This script appeared in the rootfiles for Core Updates 65 and 66, being released in late 2012 and early 2013. It is not used elsewhere, and there is no sense in keeping it around on IPFire installations. Should this patch be accepted, a corresponding 'rm' statement is necessary in the update.sh script of the Core Update it will go into. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 0ad14f4d83ef8a3f18e8cbc2db48367a0b6ec3b5 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Sun Mar 20 15:21:25 2022 +0000 core166: Ship psmisc Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 2c76a055663b581a86f9e74c1603b520fe005c81 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Mar 20 13:46:47 2022 +0000 psmisc: Update to 23.4 Please refer to https://gitlab.com/psmisc/psmisc/-/tags for an overview of the changes happened since version 22.2 . Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 16fa9ed5e581140dd9f1a718d0160a3b803f726a Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Sun Mar 20 15:20:13 2022 +0000 core166: Ship connections.cgi Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit e90c62b2e3d99c3d4d244962e114f7c1924c4640 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Mar 20 10:48:46 2022 +0000 connections.cgi: Update links to SANS ISC Fixes: #12783 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 3815512d05948b95bc6dc3b76351f4e08e019709 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Mar 20 10:41:28 2022 +0000 libseccomp: Bump package version Fixes: #12807 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/aarch64/stage2 | 1 - config/rootfiles/common/armv6l/stage2 | 1 - config/rootfiles/common/psmisc | 51 +++++++++++++++++++-- config/rootfiles/common/sysvinit | 2 +- config/rootfiles/common/x86_64/stage2 | 1 - config/rootfiles/core/166/filelists/files | 2 + config/rootfiles/core/166/filelists/psmisc | 1 + config/rootfiles/core/166/update.sh | 1 + html/cgi-bin/connections.cgi | 8 ++-- lfs/libseccomp | 4 +- lfs/psmisc | 10 ++--- lfs/stage2 | 1 - src/scripts/ovpn-ccd-convert | 71 ------------------------------ 13 files changed, 63 insertions(+), 91 deletions(-) create mode 120000 config/rootfiles/core/166/filelists/psmisc delete mode 100644 src/scripts/ovpn-ccd-convert Difference in files: diff --git a/config/rootfiles/common/aarch64/stage2 b/config/rootfiles/common/aarch64/stage2 index d8dc12a7f..e7eae625c 100644 --- a/config/rootfiles/common/aarch64/stage2 +++ b/config/rootfiles/common/aarch64/stage2 @@ -131,7 +131,6 @@ usr/local/bin/update-location-database #usr/local/src #usr/sbin usr/sbin/openvpn-metrics -usr/sbin/ovpn-ccd-convert #usr/share #usr/share/doc #usr/share/doc/licenses diff --git a/config/rootfiles/common/armv6l/stage2 b/config/rootfiles/common/armv6l/stage2 index 42ce447d1..670a99927 100644 --- a/config/rootfiles/common/armv6l/stage2 +++ b/config/rootfiles/common/armv6l/stage2 @@ -129,7 +129,6 @@ usr/local/bin/update-location-database #usr/local/src #usr/sbin usr/sbin/openvpn-metrics -usr/sbin/ovpn-ccd-convert #usr/share #usr/share/doc #usr/share/doc/licenses diff --git a/config/rootfiles/common/psmisc b/config/rootfiles/common/psmisc index f7337b7a1..759e7f0ab 100644 --- a/config/rootfiles/common/psmisc +++ b/config/rootfiles/common/psmisc @@ -1,8 +1,51 @@ #bin/fuser bin/killall -#bin/oldfuser +#bin/peekfd +#bin/prtstat +#bin/pslog usr/bin/pstree #usr/bin/pstree.x11 -#usr/man/man1/fuser.1 -#usr/man/man1/killall.1 -#usr/man/man1/pstree.1 +#usr/share/man/de/man1/fuser.1 +#usr/share/man/de/man1/killall.1 +#usr/share/man/de/man1/peekfd.1 +#usr/share/man/de/man1/prtstat.1 +#usr/share/man/de/man1/pslog.1 +#usr/share/man/de/man1/pstree.1 +#usr/share/man/fr +#usr/share/man/fr/man1 +#usr/share/man/fr/man1/fuser.1 +#usr/share/man/fr/man1/killall.1 +#usr/share/man/fr/man1/peekfd.1 +#usr/share/man/fr/man1/prtstat.1 +#usr/share/man/fr/man1/pslog.1 +#usr/share/man/fr/man1/pstree.1 +#usr/share/man/man1/fuser.1 +#usr/share/man/man1/killall.1 +#usr/share/man/man1/peekfd.1 +#usr/share/man/man1/prtstat.1 +#usr/share/man/man1/pslog.1 +#usr/share/man/man1/pstree.1 +#usr/share/man/pt_BR +#usr/share/man/pt_BR/man1 +#usr/share/man/pt_BR/man1/fuser.1 +#usr/share/man/pt_BR/man1/killall.1 +#usr/share/man/pt_BR/man1/peekfd.1 +#usr/share/man/pt_BR/man1/prtstat.1 +#usr/share/man/pt_BR/man1/pslog.1 +#usr/share/man/pt_BR/man1/pstree.1 +#usr/share/man/ru +#usr/share/man/ru/man1 +#usr/share/man/ru/man1/fuser.1 +#usr/share/man/ru/man1/killall.1 +#usr/share/man/ru/man1/peekfd.1 +#usr/share/man/ru/man1/prtstat.1 +#usr/share/man/ru/man1/pslog.1 +#usr/share/man/ru/man1/pstree.1 +#usr/share/man/uk +#usr/share/man/uk/man1 +#usr/share/man/uk/man1/fuser.1 +#usr/share/man/uk/man1/killall.1 +#usr/share/man/uk/man1/peekfd.1 +#usr/share/man/uk/man1/prtstat.1 +#usr/share/man/uk/man1/pslog.1 +#usr/share/man/uk/man1/pstree.1 diff --git a/config/rootfiles/common/sysvinit b/config/rootfiles/common/sysvinit index d06a31872..f97745760 100644 --- a/config/rootfiles/common/sysvinit +++ b/config/rootfiles/common/sysvinit @@ -1,6 +1,6 @@ bin/mountpoint bin/pidof -#etc/inittab.d +etc/inittab.d #sbin/bootlogd #sbin/fstab-decode sbin/halt diff --git a/config/rootfiles/common/x86_64/stage2 b/config/rootfiles/common/x86_64/stage2 index 70e6c6e75..d07c264b4 100644 --- a/config/rootfiles/common/x86_64/stage2 +++ b/config/rootfiles/common/x86_64/stage2 @@ -131,7 +131,6 @@ usr/local/bin/update-location-database #usr/local/src #usr/sbin usr/sbin/openvpn-metrics -usr/sbin/ovpn-ccd-convert #usr/share #usr/share/doc #usr/share/doc/licenses diff --git a/config/rootfiles/core/166/filelists/files b/config/rootfiles/core/166/filelists/files index 1ba79d4bb..b77c7fa07 100644 --- a/config/rootfiles/core/166/filelists/files +++ b/config/rootfiles/core/166/filelists/files @@ -1,4 +1,6 @@ +etc/inittab.d etc/rc.d/init.d/firewall +srv/web/ipfire/cgi-bin/connections.cgi srv/web/ipfire/cgi-bin/ids.cgi usr/lib/firewall/rules.pl var/ipfire/ids-functions.pl diff --git a/config/rootfiles/core/166/filelists/psmisc b/config/rootfiles/core/166/filelists/psmisc new file mode 120000 index 000000000..0b07b1bf5 --- /dev/null +++ b/config/rootfiles/core/166/filelists/psmisc @@ -0,0 +1 @@ +../../../common/psmisc \ No newline at end of file diff --git a/config/rootfiles/core/166/update.sh b/config/rootfiles/core/166/update.sh index d94b20338..3924039c6 100644 --- a/config/rootfiles/core/166/update.sh +++ b/config/rootfiles/core/166/update.sh @@ -36,6 +36,7 @@ rm -vf \ /etc/dracut.conf \ /usr/bin/mkinitrd \ /usr/lib/dracut \ + /usr/local/bin/ovpn-ccd-convert \ /usr/local/bin/rebuild-initrd # Stop services diff --git a/html/cgi-bin/connections.cgi b/html/cgi-bin/connections.cgi index 7f06a5594..771728d88 100644 --- a/html/cgi-bin/connections.cgi +++ b/html/cgi-bin/connections.cgi @@ -589,7 +589,7 @@ foreach my $line (@conntrack) { } $sport_extra = "> "; - $sport_extra .= "<a href='http://isc.sans.org/port_details.php?port=$sport_ret' target='top' title='$sserv_ret'>"; + $sport_extra .= "<a href='https://isc.sans.edu/port.html?port=$sport_ret' target='top' title='$sserv_ret'>"; $sport_extra .= " $sport_ret"; $sport_extra .= "</a>"; } @@ -602,7 +602,7 @@ foreach my $line (@conntrack) { } $dport_extra = "> "; - $dport_extra .= "<a href='http://isc.sans.org/port_details.php?port=$dport_ret' target='top' title='$dserv_ret'>"; + $dport_extra .= "<a href='https://isc.sans.edu/port.html?port=$dport_ret' target='top' title='$dserv_ret'>"; $dport_extra .= " $dport_ret"; $dport_extra .= "</a>"; } @@ -617,7 +617,7 @@ foreach my $line (@conntrack) { $sip_extra </td> <td style='text-align:center; background-color:$sip_colour;'> - <a href='http://isc.sans.org/port_details.php?port=$sport' target='top' title='$sserv'> + <a href='https://isc.sans.edu/port.html?port=$sport' target='top' title='$sserv'> $sport </a> $sport_extra @@ -632,7 +632,7 @@ foreach my $line (@conntrack) { $dip_extra </td> <td style='text-align:center; background-color:$dip_colour;'> - <a href='http://isc.sans.org/port_details.php?port=$dport' target='top' title='$dserv'> + <a href='https://isc.sans.edu/port.html?port=$dport' target='top' title='$dserv'> $dport </a> $dport_extra diff --git a/lfs/libseccomp b/lfs/libseccomp index 17930291d..180f995cb 100644 --- a/lfs/libseccomp +++ b/lfs/libseccomp @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = libseccomp -PAK_VER = 6 +PAK_VER = 7 DEPS = diff --git a/lfs/psmisc b/lfs/psmisc index 1f0c7d893..d03ba09ff 100644 --- a/lfs/psmisc +++ b/lfs/psmisc @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,10 +24,10 @@ include Config -VER = 22.2 +VER = 23.4 THISAPP = psmisc-$(VER) -DL_FILE = $(THISAPP).tar.gz +DL_FILE = $(THISAPP).tar.xz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 77737c817a40ef2c160a7194b5b64337 +$(DL_FILE)_MD5 = 8114cd4489b95308efe2509c3a406bbf install : $(TARGET) @@ -69,7 +69,7 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) - @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) $(UPDATE_AUTOMAKE) cd $(DIR_APP) && ./configure --prefix=/usr --exec-prefix="" --disable-nls cd $(DIR_APP) && make $(MAKETUNING) diff --git a/lfs/stage2 b/lfs/stage2 index 356060a1f..6582a0c1a 100644 --- a/lfs/stage2 +++ b/lfs/stage2 @@ -113,7 +113,6 @@ endif # Move script to correct place. mv -vf /usr/local/bin/openvpn-metrics /usr/sbin/ - mv -vf /usr/local/bin/ovpn-ccd-convert /usr/sbin/ mv -vf /usr/local/bin/captive-cleanup /usr/bin/ # Install firewall scripts. diff --git a/src/scripts/ovpn-ccd-convert b/src/scripts/ovpn-ccd-convert deleted file mode 100644 index 05339af78..000000000 --- a/src/scripts/ovpn-ccd-convert +++ /dev/null @@ -1,71 +0,0 @@ -#!/usr/bin/perl -############################################################################### -# # -# IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # -# # -# This program is free software: you can redistribute it and/or modify # -# it under the terms of the GNU General Public License as published by # -# the Free Software Foundation, either version 3 of the License, or # -# (at your option) any later version. # -# # -# This program is distributed in the hope that it will be useful, # -# but WITHOUT ANY WARRANTY; without even the implied warranty of # -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # -# GNU General Public License for more details. # -# # -# You should have received a copy of the GNU General Public License # -# along with this program. If not, see <http://www.gnu.org/licenses/>. # -# # -############################################################################### - -my %net=(); -my %ovpnconfig=(); -my @serverconf=(); -my $greennet; -my $greensubnet; -my $running='off'; - -require '/var/ipfire/general-functions.pl'; -unless (-d "${General::swroot}/ovpn/ccd") { system("mkdir ${General::swroot}/ovpn/ccd"); } -system ("chown nobody.nobody ${General::swroot}/ovpn/ccd"); -if ( -e "/var/run/openvpn.pid"){ - $running='on'; - system('/usr/local/bin/openvpnctrl', '-k'); -} - -&General::readhash("/var/ipfire/ethernet/settings", \%net); - $greennet=$net{'GREEN_NETADDRESS'}; - $greensubnet=$net{'GREEN_NETMASK'}; -open(FILE,"/var/ipfire/ovpn/server.conf"); - while (<FILE>) { - $_=~s/\s*$//g; - if ($_ ne "route $greennet $greensubnet"){ - push (@serverconf,$_."\n"); - }else{ - print"\nFound ROUTE >>route $greennet $greensubnet<< in server.conf.. Deleted!"; - } - } - -&General::readhasharray("/var/ipfire/ovpn/ovpnconfig", \%ovpnconfig); -foreach my $key (keys %ovpnconfig){ - if($ovpnconfig{$key}[32] eq '' && $ovpnconfig{$key}[3] eq 'host'){ - $ovpnconfig{$key}[2] =~ s/ /_/gi; - open ( CCDRWCONF,'>',"/var/ipfire/ovpn/ccd/$ovpnconfig{$key}[2]") or die "Unable to create clientconfigfile $!"; - print CCDRWCONF "# OpenVPN Clientconfig from CCD extension by Copymaster#\n\n"; - print CCDRWCONF "#This client uses the dynamic pool\n\n"; - print CCDRWCONF "\n#Client gets routes to these Networks (behind IPFIRE)\n"; - print CCDRWCONF "push \"route $greennet $greensubnet\"\n"; - close CCDRWCONF; - print"Client $ovpnconfig{$key}[2] converted! \n"; - }else{ - print "Client $ovpnconfig{$key}[2] NOT converted!\n"; - } - $ovpnconfig{$key}[32] = 'dynamic' if ($ovpnconfig{$key}[32] eq ''); -} -&General::writehasharray("/var/ipfire/ovpn/ovpnconfig", \%ovpnconfig); -if ($running eq 'on') -{ - system('/usr/local/bin/openvpnctrl', '-s'); -} -system ("chown nobody:nobody /var/ipfire/ovpn/ccd/*"); hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. da4ff2f6a971ceedeacfd0c929ed1eaf4ecef34f
by Michael Tremer 17 Mar '22

17 Mar '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via da4ff2f6a971ceedeacfd0c929ed1eaf4ecef34f (commit) via bfb19ad7401353ab2ac807ff1c7a0ab6d6a8e9c9 (commit) via 1ad5c1bd26fc6aa2d37ec1a35107f528c344b121 (commit) from b1b1cb344bd5430ec9c9f1eaa5b54d90aa5b6ba8 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit da4ff2f6a971ceedeacfd0c929ed1eaf4ecef34f Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Thu Mar 17 16:45:00 2022 +0000 core166: Ship apache2 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit bfb19ad7401353ab2ac807ff1c7a0ab6d6a8e9c9 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Wed Mar 16 17:09:12 2022 +0100 apache: Update to 2.4.53 For details see: https://dlcdn.apache.org/httpd/CHANGES_2.4.53 Short summary of the most important SECURITY changes: "Changes with Apache 2.4.53 *) SECURITY: CVE-2022-23943: mod_sed: Read/write beyond bounds (cve.mitre.org) Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions. Credits: Ronald Crane (Zippenhop LLC) *) SECURITY: CVE-2022-22721: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (cve.mitre.org) If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier. Credits: Anonymous working with Trend Micro Zero Day Initiative *) SECURITY: CVE-2022-22720: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier (cve.mitre.org) Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling Credits: James Kettle <james.kettle portswigger.net> *) SECURITY: CVE-2022-22719: mod_lua Use of uninitialized value of in r:parsebody (cve.mitre.org) A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier. Credits: Chamal De Silva ..." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 1ad5c1bd26fc6aa2d37ec1a35107f528c344b121 Author: Stéphane Pautrel <steph78630(a)gmail.com> Date: Thu Mar 17 15:50:16 2022 +0000 fr: Update French translation Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: .../{oldcore/114 => core/166}/filelists/apache2 | 0 config/rootfiles/core/166/update.sh | 1 + doc/language_issues.fr | 25 --------------- doc/language_missings | 22 ------------- langs/fr/cgi-bin/fr.pl | 37 ++++++++++++++++------ lfs/apache2 | 6 ++-- 6 files changed, 32 insertions(+), 59 deletions(-) copy config/rootfiles/{oldcore/114 => core/166}/filelists/apache2 (100%) Difference in files: diff --git a/config/rootfiles/core/166/filelists/apache2 b/config/rootfiles/core/166/filelists/apache2 new file mode 120000 index 000000000..eef95efa7 --- /dev/null +++ b/config/rootfiles/core/166/filelists/apache2 @@ -0,0 +1 @@ +../../../common/apache2 \ No newline at end of file diff --git a/config/rootfiles/core/166/update.sh b/config/rootfiles/core/166/update.sh index 164f97b8e..d94b20338 100644 --- a/config/rootfiles/core/166/update.sh +++ b/config/rootfiles/core/166/update.sh @@ -60,6 +60,7 @@ perl -e "require '/var/ipfire/ids-functions.pl'; &IDS::oinkmaster();" /etc/init.d/suricata reload # Start services +/etc/init.d/apache restart /etc/init.d/sshd restart # This update needs a reboot... diff --git a/doc/language_issues.fr b/doc/language_issues.fr index 63d233018..aff9deb18 100644 --- a/doc/language_issues.fr +++ b/doc/language_issues.fr @@ -327,8 +327,6 @@ WARNING: translation string unused: external access rule removed WARNING: translation string unused: extrahd WARNING: translation string unused: extrahd unable to read WARNING: translation string unused: extrahd unable to write -WARNING: translation string unused: false max bandwith -WARNING: translation string unused: false min bandwith WARNING: translation string unused: filename WARNING: translation string unused: firmware WARNING: translation string unused: firmware upload @@ -500,7 +498,6 @@ WARNING: translation string unused: manage printers WARNING: translation string unused: manual WARNING: translation string unused: manual control and status WARNING: translation string unused: marked -WARNING: translation string unused: max bandwith WARNING: translation string unused: max incoming size WARNING: translation string unused: max outgoing size WARNING: translation string unused: max size @@ -913,24 +910,6 @@ WARNING: translation string unused: zoneconf val vlan amount assignment error WARNING: translation string unused: zoneconf val vlan tag assignment error WARNING: translation string unused: zoneconf val vlan tag range error WARNING: translation string unused: zoneconf val zoneslave amount error -WARNING: untranslated string: cake profile bridged-llcsnap 32 = Bridged LLC SNAP (32 bytes) -WARNING: untranslated string: cake profile bridged-ptm 19 = Bridged PTM (19 bytes) -WARNING: untranslated string: cake profile bridged-vcmux 24 = Bridged VC-MUX (24 bytes) -WARNING: untranslated string: cake profile conservative 48 = Conservative (should work on all connections, 48 bytes) -WARNING: untranslated string: cake profile docsis 18 = DOCSIS (18 bytes) -WARNING: untranslated string: cake profile ethernet 38 = Ethernet (38 bytes) -WARNING: untranslated string: cake profile ethernet vlan 42 = Ethernet with VLAN (42 bytes) -WARNING: untranslated string: cake profile ipoa-llcsnap 16 = IP over ATM LLC SNAP (16 bytes) -WARNING: untranslated string: cake profile ipoa-vcmux 8 = IP over ATM VC-MUX (8 bytes) -WARNING: untranslated string: cake profile pppoa-llc 14 = PPPoA LLC (14 bytes) -WARNING: untranslated string: cake profile pppoa-vcmux 10 = PPPoA VC-MUX (10 bytes) -WARNING: untranslated string: cake profile pppoe-llcsnap 40 = PPPoE LLC SNAP (40 bytes) -WARNING: untranslated string: cake profile pppoe-ptm 27 = PPPoE PTM (27 bytes) -WARNING: untranslated string: cake profile pppoe-vcmux 32 = PPPoE VC-MUX (32 bytes) -WARNING: untranslated string: cake profile raw 0 = Raw (no overhead compensation) -WARNING: untranslated string: eol architecture warning = You are running an architecture of IPFire which reached its end of life. You will not receive updates anymore. This is a security risk. -WARNING: untranslated string: false max bandwidth = Maximum bandwidth is false. -WARNING: untranslated string: false min bandwidth = Minimum bandwidth is false. WARNING: untranslated string: fwhost cust locationgrp = unknown string WARNING: untranslated string: fwhost err hostip = unknown string WARNING: untranslated string: guaranteed bandwidth = Guaranteed bandwidth @@ -963,10 +942,6 @@ WARNING: untranslated string: guardian logtarget_file = unknown string WARNING: untranslated string: guardian logtarget_syslog = unknown string WARNING: untranslated string: guardian no entries = unknown string WARNING: untranslated string: guardian service = unknown string -WARNING: untranslated string: invalid input for subscription code = Invalid input for subscription code -WARNING: untranslated string: link-layer encapsulation = Link-Layer Encapsulation -WARNING: untranslated string: log dropped conntrack invalids = Log dropped packets classified as INVALID by connection tracking -WARNING: untranslated string: max bandwidth = Maximum bandwidth WARNING: untranslated string: pakfire ago = ago. WARNING: untranslated string: route config changed = unknown string WARNING: untranslated string: routing config added = unknown string diff --git a/doc/language_missings b/doc/language_missings index 0019fb227..895800ea0 100644 --- a/doc/language_missings +++ b/doc/language_missings @@ -996,31 +996,9 @@ < ansi t1.483 < bewan adsl pci st < bewan adsl usb -< cake profile bridged-llcsnap 32 -< cake profile bridged-ptm 19 -< cake profile bridged-vcmux 24 -< cake profile conservative 48 -< cake profile docsis 18 -< cake profile ethernet 38 -< cake profile ethernet vlan 42 -< cake profile ipoa-llcsnap 16 -< cake profile ipoa-vcmux 8 -< cake profile pppoa-llc 14 -< cake profile pppoa-vcmux 10 -< cake profile pppoe-llcsnap 40 -< cake profile pppoe-ptm 27 -< cake profile pppoe-vcmux 32 -< cake profile raw 0 -< eol architecture warning -< false max bandwidth -< false min bandwidth < g.dtm < g.lite < guaranteed bandwidth -< invalid input for subscription code -< link-layer encapsulation -< log dropped conntrack invalids -< max bandwidth < upload fcdsl.o ############################################################################ # Checking cgi-bin translations for language: it # diff --git a/langs/fr/cgi-bin/fr.pl b/langs/fr/cgi-bin/fr.pl index 1b3da02ab..60ea0dcc5 100644 --- a/langs/fr/cgi-bin/fr.pl +++ b/langs/fr/cgi-bin/fr.pl @@ -331,8 +331,8 @@ 'advproxy errmsg wpad invalid ip or mask' => 'WPAD : IP ou sous-réseau invalide pour le sous-réseau IP exclu', 'advproxy error design' => 'Construction messages erronés ', 'advproxy error language' => 'Langage des messages erronés ', -'advproxy fastflux detection' => 'Refuser l\'accès aux destinations hébergées sur les configurations de flux rapide', -'advproxy fastflux detection threshold' => 'Seuil', +'advproxy fastflux detection' => 'Refuser l\'accès aux destinations hébergées sur les configurations de flux rapide ', +'advproxy fastflux detection threshold' => 'Seuil ', 'advproxy fastflux no threshold given' => 'Aucun seuil n\'a été fourni pour la détection de flux rapide', 'advproxy fastflux threshold invalid' => 'Le seuil de détection de flux rapide fourni n\'est pas valide', 'advproxy fastflux threshold out of bounds' => 'Le seuil de détection de flux rapide fourni est hors limites', @@ -372,7 +372,7 @@ 'advproxy reset' => 'Relancer', 'advproxy saturday' => 'Sam', 'advproxy save and restart' => 'Sauvegarder et redémarrer', -'advproxy selectively announcements detection' => 'Refuser l\'accès aux destinations hébergées sur des réseaux annoncés de manière sélective', +'advproxy selectively announcements detection' => 'Refuser l\'accès aux destinations hébergées sur des réseaux annoncés de manière sélective ', 'advproxy squid version' => 'Version Squid Cache ', 'advproxy squidclamav' => 'SquidClamav', 'advproxy ssadvanced proxy' => 'Proxy avancé', @@ -503,7 +503,7 @@ 'bad destination range' => 'La plage des ports de destination à une première valeur supérieure ou égale à la deuxième valeur.', 'bad ignore filter' => 'Mauvais filtre ignoré :', 'bad return code' => 'Le programme d\'aide retourne un code d\'erreur', -'bad source range' => 'La plage des ports source à une première valeur supérieure ou égale à la deuxième valeur.', +'bad source range' => 'La plage des ports source contient une première valeur supérieure ou égale à la deuxième valeur.', 'bandwidth usage' => 'utilisation de la bande passante (externe)', 'bandwidtherror' => 'Vous ne pouvez pas changer les réglages de la bande passante tant que la Qos est démarrée. Arrêtez d\'abord la Qos.', 'bandwidthsettings' => 'Réglages de la bande passante', @@ -534,6 +534,21 @@ 'cached' => 'en cache', 'cached memory' => 'Mémoire tampon ', 'cached swap' => 'Swap tampon', +'cake profile bridged-llcsnap 32' => 'Bridged LLC SNAP (32 octets)', +'cake profile bridged-ptm 19' => 'Bridged PTM (19 octets)', +'cake profile bridged-vcmux 24' => 'Bridged VC-MUX (24 octets)', +'cake profile conservative 48' => 'Conservateur (devrait fonctionner sur toutes les connexions, 48 octets)', +'cake profile docsis 18' => 'DOCSIS (18 octets)', +'cake profile ethernet 38' => 'Ethernet (38 octets)', +'cake profile ethernet vlan 42' => 'Ethernet avec VLAN (42 octets)', +'cake profile ipoa-llcsnap 16' => 'IP over ATM LLC SNAP (16 octets)', +'cake profile ipoa-vcmux 8' => 'IP over ATM VC-MUX (8 octets)', +'cake profile pppoa-llc 14' => 'PPPoA LLC (14 octets)', +'cake profile pppoa-vcmux 10' => 'PPPoA VC-MUX (10 octets)', +'cake profile pppoe-llcsnap 40' => 'PPPoE LLC SNAP (40 octets)', +'cake profile pppoe-ptm 27' => 'PPPoE PTM (27 octets)', +'cake profile pppoe-vcmux 32' => 'PPPoE VC-MUX (32 octets)', +'cake profile raw 0' => 'Brut (no overhead compensation)', 'calamaris available reports' => 'Rapports disponibles ', 'calamaris byte unit' => 'Unité (octets) ', 'calamaris create report' => 'Créer un rapport', @@ -1023,6 +1038,7 @@ 'enter data' => 'Saisissez vos réglages et cliquez sur Sauvegarder.', 'entropy' => 'Courbe d\'efficacité (entropie)', 'entropy graphs' => 'Graphs entropie', +'eol architecture warning' => 'Vous exécutez une architecture d\'IPFire qui a atteint sa fin de vie. Vous ne recevrez plus de mises à jour. Il s\'agit d\'un risque de sécurité.', 'err bk 1' => 'Erreur lors de la création de l\'archive', 'err bk 10 password' => 'Erreur avec le mot de passe de sauvegarde', 'err bk 2 key' => 'Erreur lors de la création du fichier clef', @@ -1070,8 +1086,8 @@ 'extrahd you cant mount' => 'Vous ne pouvez pas monter', 'fallout zombieload ridl' => 'Fallout / ZombieLoad / RIDL', 'false classnumber' => 'Le numéro de classe ne correspond pas à l\'interface.', -'false max bandwith' => 'La bande passante maximum est fausse.', -'false min bandwith' => 'La bande passante minimum est fausse.', +'false max bandwidth' => 'La bande passante maximum est fausse.', +'false min bandwidth' => 'La bande passante minimum est fausse.', 'february' => 'Février', 'fetch ip from' => 'Deviner la véritable IP publique à l\'aide d\'un serveur externe', 'fifteen minutes' => '15 minutes', @@ -1522,6 +1538,7 @@ 'invalid input for organization' => 'Organisation non valide', 'invalid input for remote host/ip' => 'hôte/IP distant(e) non valide.', 'invalid input for state or province' => 'Région ou département non valide.', +'invalid input for subscription code' => 'Entrée invalide pour le code d\'abonnement', 'invalid input for valid till days' => 'Entrée invalide pour Valide jusqu\à (jours).', 'invalid ip' => 'IP Adresse non valide', 'invalid ip or hostname' => 'Adresse IP ou nom d\'hôte invalide', @@ -1599,7 +1616,7 @@ 'july' => 'Juillet', 'june' => 'Juin', 'kernel' => 'Noyau', -'kernel logging server' => 'Serveur de logs du noyau', +'kernel logging server' => 'Serveur de journaux du noyau', 'kernel version' => 'Version du noyau :', 'key stuff' => '2. Clefs et certificats', 'keyreset' => 'Rétablir les clefs', @@ -1610,13 +1627,14 @@ 'last' => 'Dernier', 'last activity' => 'Dernière activité', 'lateprompting' => 'Dernière action', -'lease expires' => 'Bail expiré', +'lease expires' => 'Expiration bail', 'least preferred' => 'le moins souhaité', 'legacy architecture warning' => 'Vous exécutez IPFire sur une architecture héritée et il est recommandé de mettre à niveau', 'legend' => 'Légende ', 'length' => 'Longueur', 'lifetime' => 'Durée de vie :', 'line' => 'Ligne', +'link-layer encapsulation' => 'Encapsulation de la couche de liaison', 'linkq' => 'Qualité du lien', 'load printer' => 'Charger imprimante', 'loaded modules' => 'Modules chargés :', @@ -1640,6 +1658,7 @@ 'locationblock enable feature' => 'Activer le blocage par localisation :', 'locationblock flag' => 'Drap.', 'log' => 'Rapport :', +'log dropped conntrack invalids' => 'Journaliser les paquets abandonnés classés comme INVALIDES par le suivi de connexion', 'log enabled' => 'Journal activé', 'log level' => 'Niveau de rapport', 'log lines per page' => 'Nb de lignes par page ', @@ -1707,7 +1726,7 @@ 'masquerading' => 'Masquage (une seule IP pour plusieurs machines en sortie du réseau interne)', 'masquerading disabled' => 'Masquage désactivé', 'masquerading enabled' => 'Masquage activé', -'max bandwith' => 'Bande passante maximum', +'max bandwidth' => 'Bande passante maximum', 'max incoming size' => 'Taille maximum des téléchargement (Ko) :', 'max lease time' => 'Durée maximum du bail (minutes) :', 'max outgoing size' => 'Taille maximum des envois (Ko) :', diff --git a/lfs/apache2 b/lfs/apache2 index 226058a22..6771ff903 100644 --- a/lfs/apache2 +++ b/lfs/apache2 @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -25,7 +25,7 @@ include Config -VER = 2.4.52 +VER = 2.4.53 THISAPP = httpd-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = a94ae42b84309d5ef6e613ae825b92fa +$(DL_FILE)_MD5 = f594f137137b5bdff3998dc17e3e9526 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 6b10e08aec961c14732271b17a03db1ba43c3f9e
by Michael Tremer 16 Mar '22

16 Mar '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via 6b10e08aec961c14732271b17a03db1ba43c3f9e (commit) via 4c5aba14f273c8ce1879518a52fd8dee0b13ae28 (commit) from 24e7c426de292e00fb482e1db2b8eb77e82a45ee (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 6b10e08aec961c14732271b17a03db1ba43c3f9e Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 16 16:01:50 2022 +0000 core165: Ship u-boot Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 4c5aba14f273c8ce1879518a52fd8dee0b13ae28 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Sun Feb 27 09:07:39 2022 +0000 u-boot: add OrangePi Zero Plus (Allwinner H5) this u-boot should also work with NanoPi R1S H5 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/aarch64/u-boot | 2 ++ .../{oldcore/159 => core/165}/filelists/aarch64/u-boot | 0 lfs/u-boot | 17 +++++++++++++++-- 3 files changed, 17 insertions(+), 2 deletions(-) copy config/rootfiles/{oldcore/159 => core/165}/filelists/aarch64/u-boot (100%) Difference in files: diff --git a/config/rootfiles/common/aarch64/u-boot b/config/rootfiles/common/aarch64/u-boot index ab22769e3..2b60c7802 100644 --- a/config/rootfiles/common/aarch64/u-boot +++ b/config/rootfiles/common/aarch64/u-boot @@ -10,6 +10,8 @@ boot/uboot.env usr/share/u-boot/nanopi_r2s/u-boot-rockchip.bin #usr/share/u-boot/nanopi_r4s usr/share/u-boot/nanopi_r4s/u-boot-rockchip.bin +#usr/share/u-boot/orangepi_zero_plus +usr/share/u-boot/orangepi_zero_plus/u-boot-sunxi-with-spl.bin #usr/share/u-boot/rpi usr/share/u-boot/rpi/u-boot-rpi3.bin usr/share/u-boot/rpi/u-boot-rpi4.bin diff --git a/config/rootfiles/core/165/filelists/aarch64/u-boot b/config/rootfiles/core/165/filelists/aarch64/u-boot new file mode 120000 index 000000000..2a16bdbfe --- /dev/null +++ b/config/rootfiles/core/165/filelists/aarch64/u-boot @@ -0,0 +1 @@ +../../../../common/aarch64/u-boot \ No newline at end of file diff --git a/lfs/u-boot b/lfs/u-boot index d081061fa..019927f1f 100644 --- a/lfs/u-boot +++ b/lfs/u-boot @@ -186,8 +186,22 @@ else cd $(DIR_APP) && install u-boot.bin /boot/u-boot-rpi4.bin cd $(DIR_APP) && make distclean + # OrangePi Zero Plus + cd $(DIR_APP) && rm -rf arm-trusted-firmware-$(ATF_VER) + cd $(DIR_APP) && tar axf $(DIR_DL)/arm-trusted-firmware-$(ATF_VER).tar.gz + cd $(DIR_APP)/arm-trusted-firmware-$(ATF_VER) && make PLAT=sun50i_a64 DEBUG=0 bl31 + cd $(DIR_APP) && cp arm-trusted-firmware-$(ATF_VER)/build/sun50i_a64/release/bl31.bin bl31.bin + cd $(DIR_APP) && rm -rf arm-trusted-firmware-$(ATF_VER) + -mkdir -pv /usr/share/u-boot/orangepi_zero_plus + cd $(DIR_APP) && make CROSS_COMPILE="" orangepi_zero_plus_config + cd $(DIR_APP) && sed -i -e 's!^CONFIG_IDENT_STRING=.*!CONFIG_IDENT_STRING=" OrangePi Zero+ - IPFire.org"!' .config + cd $(DIR_APP) && make CROSS_COMPILE="" HOSTCC="gcc $(CFLAGS)" + cd $(DIR_APP) && install -v -m 644 u-boot-sunxi-with-spl.bin \ + /usr/share/u-boot/orangepi_zero_plus + cd $(DIR_APP) && make distclean + cd $(DIR_APP) && rm -f bl31.bin + # Nanopi R2S -# cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/u-boot/rockchip/generate-2-ethaddr.diff cd $(DIR_APP) && rm -rf arm-trusted-firmware-$(ATF_VER) cd $(DIR_APP) && tar axf $(DIR_DL)/arm-trusted-firmware-$(ATF_VER).tar.gz cd $(DIR_APP)/arm-trusted-firmware-$(ATF_VER) && make PLAT=rk3328 ARCH=aarch64 DEBUG=0 bl31 @@ -212,7 +226,6 @@ else cd $(DIR_APP) && sed -i -e 's!^CONFIG_IDENT_STRING=.*!CONFIG_IDENT_STRING=" Nanopi R4S - IPFire.org"!' .config cd $(DIR_APP) && sed -i -e 's!^CONFIG_BOOTCOMMAND=.*!CONFIG_BOOTCOMMAND="console=ttyS2,115200n8;run distro_bootcmd"!' .config cd $(DIR_APP) && sed -i -e 's!^CONFIG_BAUDRATE=.*!CONFIG_BAUDRATE=115200!' .config -# cd $(DIR_APP) && sed -i -e 's!.*CONFIG_MISC_INIT_R.*!CONFIG_MISC_INIT_R=y!' .config cd $(DIR_APP) && make CROSS_COMPILE="" HOSTCC="gcc $(CFLAGS)" cd $(DIR_APP) && install -v -m 644 u-boot-rockchip.bin \ /usr/share/u-boot/nanopi_r4s/u-boot-rockchip.bin hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 24e7c426de292e00fb482e1db2b8eb77e82a45ee
by Michael Tremer 16 Mar '22

16 Mar '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via 24e7c426de292e00fb482e1db2b8eb77e82a45ee (commit) via 5e9cb98252313e91e3ca22816e61c3924672c98d (commit) from 5f3dc2ca06d31bc73006d93abc969b42876fb0e0 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 24e7c426de292e00fb482e1db2b8eb77e82a45ee Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Mar 11 16:05:28 2022 +0000 samba: Update rootfile on aarch64 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 5e9cb98252313e91e3ca22816e61c3924672c98d Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Mar 11 16:04:09 2022 +0000 stage2: Update rootfiles Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/aarch64/stage2 | 2 ++ config/rootfiles/common/armv6l/stage2 | 8 +++++--- config/rootfiles/common/x86_64/stage2 | 2 ++ config/rootfiles/packages/aarch64/samba | 3 ++- 4 files changed, 11 insertions(+), 4 deletions(-) Difference in files: diff --git a/config/rootfiles/common/aarch64/stage2 b/config/rootfiles/common/aarch64/stage2 index 801c964cd..e34013d42 100644 --- a/config/rootfiles/common/aarch64/stage2 +++ b/config/rootfiles/common/aarch64/stage2 @@ -154,6 +154,8 @@ usr/share/doc/licenses/GPLv3 #usr/share/zoneinfo #var #var/cache +var/cache/ldconfig +var/cache/ldconfig/aux-cache var/empty #var/lib #var/lib/misc diff --git a/config/rootfiles/common/armv6l/stage2 b/config/rootfiles/common/armv6l/stage2 index df7c3d0f6..82f028ad3 100644 --- a/config/rootfiles/common/armv6l/stage2 +++ b/config/rootfiles/common/armv6l/stage2 @@ -42,8 +42,8 @@ etc/profile.d/term256.sh etc/profile.d/umask.sh etc/resolv.conf etc/securetty -etc/sysctl.conf etc/sysctl-armv6l.conf +etc/sysctl.conf etc/syslog.conf etc/system-release #home @@ -67,7 +67,6 @@ root/.bash_logout root/.bash_profile root/.bashrc root/ipfire -run #sbin #srv #usr/bin @@ -105,8 +104,8 @@ usr/local/bin/scanhd usr/local/bin/settime usr/local/bin/timecheck usr/local/bin/timezone-transition -usr/local/bin/update-lang-cache usr/local/bin/update-ids-ruleset +usr/local/bin/update-lang-cache usr/local/bin/update-location-database #usr/local/include #usr/local/lib @@ -153,6 +152,8 @@ usr/share/doc/licenses/GPLv3 #usr/share/zoneinfo #var #var/cache +var/cache/ldconfig +var/cache/ldconfig/aux-cache var/empty #var/lib #var/lib/misc @@ -169,6 +170,7 @@ var/mail var/run #var/spool var/tmp +run dev/console dev/null tmp diff --git a/config/rootfiles/common/x86_64/stage2 b/config/rootfiles/common/x86_64/stage2 index ffdd0ce51..3aa15bf91 100644 --- a/config/rootfiles/common/x86_64/stage2 +++ b/config/rootfiles/common/x86_64/stage2 @@ -154,6 +154,8 @@ usr/share/doc/licenses/GPLv3 #usr/share/zoneinfo #var #var/cache +var/cache/ldconfig +var/cache/ldconfig/aux-cache var/empty #var/lib #var/lib/misc diff --git a/config/rootfiles/packages/aarch64/samba b/config/rootfiles/packages/aarch64/samba index 52425b8f5..4ed0807ef 100644 --- a/config/rootfiles/packages/aarch64/samba +++ b/config/rootfiles/packages/aarch64/samba @@ -319,6 +319,7 @@ usr/lib/python3.10/site-packages/samba/ms_schema.py usr/lib/python3.10/site-packages/samba/ms_schema_markdown.py usr/lib/python3.10/site-packages/samba/ndr.py usr/lib/python3.10/site-packages/samba/net.cpython-310-aarch64-linux-gnu.so +usr/lib/python3.10/site-packages/samba/net_s3.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/netbios.cpython-310-aarch64-linux-gnu.so #usr/lib/python3.10/site-packages/samba/netcmd usr/lib/python3.10/site-packages/samba/netcmd/__init__.py @@ -623,8 +624,8 @@ usr/lib/python3.10/site-packages/samba/vgp_motd_ext.py usr/lib/python3.10/site-packages/samba/vgp_openssh_ext.py usr/lib/python3.10/site-packages/samba/vgp_startup_scripts_ext.py usr/lib/python3.10/site-packages/samba/vgp_sudoers_ext.py -usr/lib/python3.10/site-packages/samba/werror.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/vgp_symlink_ext.py +usr/lib/python3.10/site-packages/samba/werror.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/xattr.py usr/lib/python3.10/site-packages/samba/xattr_native.cpython-310-aarch64-linux-gnu.so usr/lib/python3.10/site-packages/samba/xattr_tdb.cpython-310-aarch64-linux-gnu.so hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. b1b1cb344bd5430ec9c9f1eaa5b54d90aa5b6ba8
by Michael Tremer 16 Mar '22

16 Mar '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via b1b1cb344bd5430ec9c9f1eaa5b54d90aa5b6ba8 (commit) from e1d3e8566359c1c0ed6f3089fde5b9fca6cda923 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit b1b1cb344bd5430ec9c9f1eaa5b54d90aa5b6ba8 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 16 15:42:16 2022 +0000 reiserfsprogs: Drop redundant rootfile for aarch64 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/aarch64/reiserfsprogs | 31 --------------------------- 1 file changed, 31 deletions(-) delete mode 100644 config/rootfiles/common/aarch64/reiserfsprogs Difference in files: diff --git a/config/rootfiles/common/aarch64/reiserfsprogs b/config/rootfiles/common/aarch64/reiserfsprogs deleted file mode 100644 index ac375e941..000000000 --- a/config/rootfiles/common/aarch64/reiserfsprogs +++ /dev/null @@ -1,31 +0,0 @@ -#sbin/debugfs.reiserfs -#sbin/debugreiserfs -sbin/fsck.reiserfs -sbin/mkfs.reiserfs -sbin/mkreiserfs -sbin/reiserfsck -sbin/reiserfstune -sbin/resize_reiserfs -sbin/tunefs.reiserfs -#usr/include/reiserfs -#usr/include/reiserfs/io.h -#usr/include/reiserfs/misc.h -#usr/include/reiserfs/reiserfs_err.h -#usr/include/reiserfs/reiserfs_fs.h -#usr/include/reiserfs/reiserfs_lib.h -#usr/include/reiserfs/swab.h -#usr/lib/libreiserfscore.a -#usr/lib/libreiserfscore.la -#usr/lib/libreiserfscore.so -usr/lib/libreiserfscore.so.0 -usr/lib/libreiserfscore.so.0.0.0 -#usr/lib/pkgconfig/reiserfscore.pc -#usr/share/man/man8/debugfs.reiserfs.8 -#usr/share/man/man8/debugreiserfs.8 -#usr/share/man/man8/fsck.reiserfs.8 -#usr/share/man/man8/mkfs.reiserfs.8 -#usr/share/man/man8/mkreiserfs.8 -#usr/share/man/man8/reiserfsck.8 -#usr/share/man/man8/reiserfstune.8 -#usr/share/man/man8/resize_reiserfs.8 -#usr/share/man/man8/tunefs.reiserfs.8 hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. e1d3e8566359c1c0ed6f3089fde5b9fca6cda923
by Michael Tremer 16 Mar '22

16 Mar '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via e1d3e8566359c1c0ed6f3089fde5b9fca6cda923 (commit) from 10beae64bf0d8a381ae7b2aa2cb8a1b9463999da (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit e1d3e8566359c1c0ed6f3089fde5b9fca6cda923 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Mar 16 15:36:38 2022 +0000 make.sh: Bump CORE Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: make.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Difference in files: diff --git a/make.sh b/make.sh index 85f0b274b..46a6dc8fd 100755 --- a/make.sh +++ b/make.sh @@ -26,7 +26,7 @@ NAME="IPFire" # Software name SNAME="ipfire" # Short name # If you update the version don't forget to update backupiso and add it to core update VERSION="2.27" # Version number -CORE="165" # Core Level (Filename) +CORE="166" # Core Level (Filename) SLOGAN="www.ipfire.org" # Software slogan CONFIG_ROOT=/var/ipfire # Configuration rootdir MAX_RETRIES=1 # prefetch/check loop hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. 5f3dc2ca06d31bc73006d93abc969b42876fb0e0
by Michael Tremer 16 Mar '22

16 Mar '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via 5f3dc2ca06d31bc73006d93abc969b42876fb0e0 (commit) from e41bb76cc34e17e165cecfbfcd8f974faed23bb7 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 5f3dc2ca06d31bc73006d93abc969b42876fb0e0 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Tue Mar 15 19:24:02 2022 +0100 C165: Fix ownership of suricata classification.config file. The file has to be write-able for the WUI and update script, which both are executed as nobody. Fixes #12803. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/165/update.sh | 3 +++ 1 file changed, 3 insertions(+) Difference in files: diff --git a/config/rootfiles/core/165/update.sh b/config/rootfiles/core/165/update.sh index 00974de73..ffb552c80 100644 --- a/config/rootfiles/core/165/update.sh +++ b/config/rootfiles/core/165/update.sh @@ -129,6 +129,9 @@ ldconfig telinit u /etc/rc.d/init.d/firewall restart +# Fix ownership of classification file. +chown nobody:nobody /usr/share/suricata/classification.config + # Rebuild IPS rules rm -vf /tmp/ids_page_locked perl -e "require '/var/ipfire/ids-functions.pl'; &IDS::oinkmaster();" hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, master, updated. e41bb76cc34e17e165cecfbfcd8f974faed23bb7
by Michael Tremer 15 Mar '22

15 Mar '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via e41bb76cc34e17e165cecfbfcd8f974faed23bb7 (commit) via 0dc98b19ee29348a869b74965e8eb7c15d6415ba (commit) from ebe404ef020fc5091f5b9cee6e2617fc2e45d279 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit e41bb76cc34e17e165cecfbfcd8f974faed23bb7 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Tue Mar 15 18:25:57 2022 +0100 ids-functions.pl: Skip deleted.rules files These rulefiles are used by various providers as a kind of reference and to store rules which have been taken out for correctness, performance reasons or because of other reasons. Fixes #12794. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 0dc98b19ee29348a869b74965e8eb7c15d6415ba Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Mar 15 17:51:13 2022 +0000 openssl: Update to 1.1.1n OpenSSL Security Advisory [15 March 2022] ============================================ Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778) ================================================================================== Severity: High The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters. Thus vulnerable situations include: - TLS clients consuming server certificates - TLS servers consuming client certificates - Hosting providers taking certificates or private keys from customers - Certificate authorities parsing certification requests from subscribers - Anything else which parses ASN.1 elliptic curve parameters Also any other applications that use the BN_mod_sqrt() where the attacker can control the parameter values are vulnerable to this DoS issue. In the OpenSSL 1.0.2 version the public key is not parsed during initial parsing of the certificate which makes it slightly harder to trigger the infinite loop. However any operation which requires the public key from the certificate will trigger the infinite loop. In particular the attacker can use a self-signed certificate to trigger the loop during verification of the certificate signature. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022. OpenSSL 1.0.2 users should upgrade to 1.0.2zd (premium support customers only) OpenSSL 1.1.1 users should upgrade to 1.1.1n OpenSSL 3.0 users should upgrade to 3.0.2 This issue was reported to OpenSSL on the 24th February 2022 by Tavis Ormandy from Google. The fix was developed by David Benjamin from Google and Tomáš Mráz from OpenSSL. Note ==== OpenSSL 1.0.2 is out of support and no longer receiving public updates. Extended support is available for premium support customers: https://www.openssl.org/support/contracts.html OpenSSL 1.1.0 is out of support and no longer receiving updates of any kind. It is affected by the issue. Users of these versions should upgrade to OpenSSL 3.0 or 1.1.1. References ========== URL for this Security Advisory: https://www.openssl.org/news/secadv/20220315.txt Note: the online version of the advisory may be updated with additional details over time. For details of OpenSSL severity classifications please see: https://www.openssl.org/policies/secpolicy.html Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/cfgroot/ids-functions.pl | 6 ++++++ config/rootfiles/common/openssl | 8 ++++++++ lfs/openssl | 4 ++-- 3 files changed, 16 insertions(+), 2 deletions(-) Difference in files: diff --git a/config/cfgroot/ids-functions.pl b/config/cfgroot/ids-functions.pl index c4edd968d..94dccc8ae 100644 --- a/config/cfgroot/ids-functions.pl +++ b/config/cfgroot/ids-functions.pl @@ -547,6 +547,12 @@ sub extractruleset ($) { # Skip rule files which are not located in the rules directory or archive root. next unless(($packed_file =~ /^rules\//) || ($packed_file !~ /\//)); + # Skip deleted.rules. + # + # Mostly they have been taken out for correctness or performance reasons and therfore + # it is not a great idea to enable any of them. + next if($file =~ m/deleted.rules$/); + my $rulesfilename; # Splitt the filename into chunks. diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl index d690f5be0..a83eb4c47 100644 --- a/config/rootfiles/common/openssl +++ b/config/rootfiles/common/openssl @@ -661,6 +661,7 @@ usr/lib/libssl.so.1.1 #usr/share/doc/openssl/html/man3/BN_mod_mul_montgomery.html #usr/share/doc/openssl/html/man3/BN_mod_mul_reciprocal.html #usr/share/doc/openssl/html/man3/BN_mod_sqr.html +#usr/share/doc/openssl/html/man3/BN_mod_sqrt.html #usr/share/doc/openssl/html/man3/BN_mod_sub.html #usr/share/doc/openssl/html/man3/BN_mod_word.html #usr/share/doc/openssl/html/man3/BN_mpi2bn.html @@ -3481,6 +3482,7 @@ usr/lib/libssl.so.1.1 #usr/share/doc/openssl/html/man3/X509_STORE_CTX_lookup_certs_fn.html #usr/share/doc/openssl/html/man3/X509_STORE_CTX_lookup_crls_fn.html #usr/share/doc/openssl/html/man3/X509_STORE_CTX_new.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_purpose_inherit.html #usr/share/doc/openssl/html/man3/X509_STORE_CTX_set0_crls.html #usr/share/doc/openssl/html/man3/X509_STORE_CTX_set0_param.html #usr/share/doc/openssl/html/man3/X509_STORE_CTX_set0_trusted_stack.html @@ -3492,6 +3494,8 @@ usr/lib/libssl.so.1.1 #usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_error.html #usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_error_depth.html #usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_ex_data.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_purpose.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_trust.html #usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_verify.html #usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_verify_cb.html #usr/share/doc/openssl/html/man3/X509_STORE_CTX_verify_cb.html @@ -4638,6 +4642,7 @@ usr/lib/libssl.so.1.1 #usr/share/man/man3/BN_mod_mul_montgomery.3 #usr/share/man/man3/BN_mod_mul_reciprocal.3 #usr/share/man/man3/BN_mod_sqr.3 +#usr/share/man/man3/BN_mod_sqrt.3 #usr/share/man/man3/BN_mod_sub.3 #usr/share/man/man3/BN_mod_word.3 #usr/share/man/man3/BN_mpi2bn.3 @@ -7458,6 +7463,7 @@ usr/lib/libssl.so.1.1 #usr/share/man/man3/X509_STORE_CTX_lookup_certs_fn.3 #usr/share/man/man3/X509_STORE_CTX_lookup_crls_fn.3 #usr/share/man/man3/X509_STORE_CTX_new.3 +#usr/share/man/man3/X509_STORE_CTX_purpose_inherit.3 #usr/share/man/man3/X509_STORE_CTX_set0_crls.3 #usr/share/man/man3/X509_STORE_CTX_set0_param.3 #usr/share/man/man3/X509_STORE_CTX_set0_trusted_stack.3 @@ -7469,6 +7475,8 @@ usr/lib/libssl.so.1.1 #usr/share/man/man3/X509_STORE_CTX_set_error.3 #usr/share/man/man3/X509_STORE_CTX_set_error_depth.3 #usr/share/man/man3/X509_STORE_CTX_set_ex_data.3 +#usr/share/man/man3/X509_STORE_CTX_set_purpose.3 +#usr/share/man/man3/X509_STORE_CTX_set_trust.3 #usr/share/man/man3/X509_STORE_CTX_set_verify.3 #usr/share/man/man3/X509_STORE_CTX_set_verify_cb.3 #usr/share/man/man3/X509_STORE_CTX_verify_cb.3 diff --git a/lfs/openssl b/lfs/openssl index ababd7635..868288560 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -24,7 +24,7 @@ include Config -VER = 1.1.1m +VER = 1.1.1n THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -74,7 +74,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 8ec70f665c145c3103f6e330f538a9db +$(DL_FILE)_MD5 = 2aad5635f9bb338bc2c6b7d19cbc9676 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM March 2022