IPFire-SCM June 2022

ipfire-scm@lists.ipfire.org

1 participants
54 discussions

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. e84497de672c38d17bace334ef6c67dde54c49ff
by Peter Müller 22 Jun '22

22 Jun '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via e84497de672c38d17bace334ef6c67dde54c49ff (commit) from 2f52d27a829a891b3cff549f2b0a0763915f8311 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit e84497de672c38d17bace334ef6c67dde54c49ff Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Jun 22 14:32:39 2022 +0000 Crap, OpenSSL download server returned a corrputed file :-/ Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/openssl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Difference in files: diff --git a/lfs/openssl b/lfs/openssl index 43401237a..88f533323 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -74,7 +74,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 723c7784f39d7a475c190f0399b3721a6f315e1ea6f92617e12bfed3701609398b52d7881a6111c9260337cf369a85cc66f3d368043ab31a19ca5c8eb2237214 +$(DL_FILE)_BLAKE2 = 4354753a5e52393c9cc4569954c2cac6d89a1e204fa4f9ca00a60492782d29f8952fb92664cdbb3576c6443d3cb2eacebea51db584738589f3598b40df579b12 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 2f52d27a829a891b3cff549f2b0a0763915f8311
by Peter Müller 22 Jun '22

22 Jun '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 2f52d27a829a891b3cff549f2b0a0763915f8311 (commit) from 54bd60b67b477e5d5814293a74086dff1c21ac69 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 2f52d27a829a891b3cff549f2b0a0763915f8311 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Jun 22 12:27:02 2022 +0000 Core Update 169: Ship changed initscripts Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/169/filelists/files | 2 ++ 1 file changed, 2 insertions(+) Difference in files: diff --git a/config/rootfiles/core/169/filelists/files b/config/rootfiles/core/169/filelists/files index 44a68f28e..e4ae9beb5 100644 --- a/config/rootfiles/core/169/filelists/files +++ b/config/rootfiles/core/169/filelists/files @@ -7,7 +7,9 @@ etc/rc.d/helper/exoscale-setup etc/rc.d/helper/gcp-setup etc/rc.d/helper/oci-setup etc/rc.d/init.d/localnet +etc/rc.d/init.d/mountkernfs etc/rc.d/init.d/ntp +etc/rc.d/init.d/udev etc/sysctl.conf lib/firmware/amdgpu/aldebaran_mec2.bin lib/firmware/amdgpu/aldebaran_mec.bin hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 54bd60b67b477e5d5814293a74086dff1c21ac69
by Peter Müller 22 Jun '22

22 Jun '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 54bd60b67b477e5d5814293a74086dff1c21ac69 (commit) from 29cf82e6fcdc4019901f9fb170abe44c131764be (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 54bd60b67b477e5d5814293a74086dff1c21ac69 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Jun 22 12:23:10 2022 +0000 Explicitly harden mount options of sensitive file systems These were found to got lost after upgrading to Core Update 169, so we set them explicitly to avoid accidential security downgrades. https://lists.ipfire.org/pipermail/development/2022-June/013714.html Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: src/initscripts/system/mountkernfs | 6 +++--- src/initscripts/system/udev | 5 ++--- 2 files changed, 5 insertions(+), 6 deletions(-) Difference in files: diff --git a/src/initscripts/system/mountkernfs b/src/initscripts/system/mountkernfs index d97b745be..b660083ec 100644 --- a/src/initscripts/system/mountkernfs +++ b/src/initscripts/system/mountkernfs @@ -28,17 +28,17 @@ case "${1}" in if ! mountpoint /proc &> /dev/null; then boot_mesg -n " /proc" ${NORMAL} - mount -n -t proc /proc /proc || failed=1 + mount -n -t proc -o nosuid,nodev,noexec /proc /proc || failed=1 fi if ! mountpoint /sys &> /dev/null; then boot_mesg -n " /sys" ${NORMAL} - mount -n -t sysfs /sys /sys || failed=1 + mount -n -t sysfs -o nosuid,nodev,noexec /sys /sys || failed=1 fi if ! mountpoint /run &> /dev/null; then boot_mesg -n " /run" ${NORMAL} - mount -n -t tmpfs -o nosuid,nodev,mode=755,size=8M /run /run || failed=1 + mount -n -t tmpfs -o nosuid,nodev,noexec,mode=755,size=8M /run /run || failed=1 fi if ! mountpoint /sys/fs/cgroup &> /dev/null; then diff --git a/src/initscripts/system/udev b/src/initscripts/system/udev index 2f6146e5d..b46ead196 100644 --- a/src/initscripts/system/udev +++ b/src/initscripts/system/udev @@ -50,12 +50,12 @@ case "${1}" in if ! grep -q '[[:space:]]/dev/shm' /proc/mounts; then mkdir -p /dev/shm - mount -t tmpfs tmpfs /dev/shm + mount -t tmpfs tmpfs -o nosuid,nodev,noexec /dev/shm fi if ! grep -q '[[:space:]]/dev/pts' /proc/mounts; then mkdir -p /dev/pts - mount -t devpts devpts -o gid=5,mode=620 /dev/pts + mount -t devpts devpts -o nosuid,noexec,gid=5,mode=620 /dev/pts fi # Start the udev daemon to continually watch for, and act on, @@ -70,7 +70,6 @@ case "${1}" in # Now wait for udevd to process the uevents we triggered /bin/udevadm settle evaluate_retval - ;; restart) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 29cf82e6fcdc4019901f9fb170abe44c131764be
by Peter Müller 22 Jun '22

22 Jun '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 29cf82e6fcdc4019901f9fb170abe44c131764be (commit) via 70c969e94188247bcf3979be248e51806013d242 (commit) via 2bebb556dc068952a657eba389f5ac8c6a8f5253 (commit) from 95530b3edb1e42eb1a68988272916c033fc2cd57 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 29cf82e6fcdc4019901f9fb170abe44c131764be Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Jun 22 12:17:48 2022 +0000 Core Update 169: Ship OpenSSL Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 70c969e94188247bcf3979be248e51806013d242 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Jun 22 12:16:37 2022 +0000 OpenSSL: Update to 1.1.1p Please refer to https://www.openssl.org/news/openssl-1.1.1-notes.html for the release notes regarding this version. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 2bebb556dc068952a657eba389f5ac8c6a8f5253 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Jun 22 12:12:52 2022 +0000 Update French translation Signed-off-by: Stéphane Pautrel <stephane.pautrel(a)acb78.com> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: .../{oldcore/100 => core/169}/filelists/openssl | 0 langs/fr/cgi-bin/fr.pl | 25 ++++++++++++++++------ lfs/openssl | 4 ++-- 3 files changed, 20 insertions(+), 9 deletions(-) copy config/rootfiles/{oldcore/100 => core/169}/filelists/openssl (100%) Difference in files: diff --git a/config/rootfiles/core/169/filelists/openssl b/config/rootfiles/core/169/filelists/openssl new file mode 120000 index 000000000..e011a9266 --- /dev/null +++ b/config/rootfiles/core/169/filelists/openssl @@ -0,0 +1 @@ +../../../common/openssl \ No newline at end of file diff --git a/langs/fr/cgi-bin/fr.pl b/langs/fr/cgi-bin/fr.pl index 6dbeebc16..4d62a9f7f 100644 --- a/langs/fr/cgi-bin/fr.pl +++ b/langs/fr/cgi-bin/fr.pl @@ -833,6 +833,7 @@ 'dhcp dns update secret' => 'Secret ', 'dhcp fixed lease err1' => 'Pour un bail fixe, vous devez saisir l\'adresse MAC et/ou le nom d\'hôte.', 'dhcp fixed lease help1' => 'L\'adresse IP doit être saisie comme FQDN', +'dhcp make fixed lease' => 'Ajouter pour fixer les baux', 'dhcp mode' => 'DHCP', 'dhcp server' => 'Serveur DHCP', 'dhcp server disabled' => 'Serveur DHCP eteint. Arrete.', @@ -1094,8 +1095,8 @@ 'filename' => 'Nom de fichier', 'filesystem full' => 'Système de fichier saturé ', 'fireinfo ipfire version' => 'Version IPFire ', -'fireinfo is disabled' => 'Fireinfo est désactivé', -'fireinfo is enabled' => 'Fireinfo est activé', +'fireinfo is disabled' => 'Fireinfo est desactive', +'fireinfo is enabled' => 'Fireinfo est active', 'fireinfo is submitted' => 'Votre profil est soumis au service Fireinfo.', 'fireinfo is submitted button' => 'Ne plus envoyer mes infos de profil à Fireinfo', 'fireinfo kernel version' => 'Version du noyau ', @@ -1425,21 +1426,27 @@ 'idle timeout' => 'Délai d\'inactivité (en minutes ; 0 pour désactiver) :', 'idle timeout not set' => 'Délai d\'inactivité non défini.', 'ids add provider' => 'Ajouter un fournisseur', +'ids adjust ruleset' => 'Ajustage des règles et ajout des personnalisations définies par l\'utilisateur...', 'ids apply' => 'Appliquer', 'ids apply ruleset changes' => 'Les modifications du jeu de règles sont appliquées. Veuillez patienter jusqu\'à ce que toutes les opérations soient terminées avec succès...', 'ids automatic rules update' => 'Mise à jour automatique des règles', 'ids autoupdates' => 'Mises à jour automatiques', +'ids cleanup tmp dir' => 'Nettoyage du répertoire temporaire...', 'ids could not add provider' => 'Impossible d\'ajouter le fournisseur', 'ids customize ruleset' => 'Personnaliser le jeu de règles', 'ids download new ruleset' => 'Téléchargement et décompression d\'un nouveau jeu de règles. Veuillez patienter jusqu\'à ce que toutes les opérations soient terminées avec succès...', 'ids enable' => 'Activer le système de prévention d\'intrusion', 'ids enable automatic updates' => 'Activer les mises à jour automatiques', +'ids extract ruleset' => 'Extraction de l\'ensemble de règles pour le fournisseur :', +'ids finished' => 'Terminé...', 'ids force ruleset update' => 'Forcer la mise à jour du jeu de règles', 'ids hide' => 'Cacher', 'ids ignored hosts' => 'Hôtes de liste blanche', 'ids log hits' => 'Total du nombre de règles activées pour', 'ids log viewer' => 'Rapport IDs', 'ids logs' => 'Rapports IDs', +'ids merge classifications' => 'Fusion des classements...', +'ids merge sid files' => 'Fusion des sid aux fichiers de messages...', 'ids monitor traffic only' => 'Surveiller seulement le trafic', 'ids monitored interfaces' => 'Interfaces surveillées', 'ids no enabled ruleset provider' => 'Aucun jeu de règles activé n\'est disponible. Veuillez d\'abord en activer ou en ajouter un.', @@ -1447,9 +1454,11 @@ 'ids oinkcode required' => 'Le jeu de règles choisi nécessite un abonnement ou un Oinkcode', 'ids provider' => 'Fournisseur', 'ids provider settings' => 'Paramètres du fournisseur', +'ids remove rule structures' => 'Suppression des anciennes structures de règles...', 'ids reset provider' => 'Réinitialiser le fournisseur', 'ids rules update' => 'Jeux de règles', 'ids ruleset autoupdate in progress' => 'Mise à jour du jeu de règles en cours. Veuillez patienter jusqu\'à ce que toutes les opérations soient terminées avec succès...', +'ids ruleset is up to date' => 'Aucune mise à jour requise - L\'ensemble de règles est à jour.', 'ids ruleset settings' => 'Paramètres du jeu de règles', 'ids show' => 'Afficher', 'ids subscription code required' => 'Le jeu de règles sélectionné nécessite un code d\'abonnement', @@ -1480,6 +1489,7 @@ 'info' => 'Info', 'info messages' => 'Info', 'init string' => 'Init :', +'inodes' => 'Nœuds-Index', 'insert floppy' => 'Pour sauvegarder sur disquette, insérez une disquette formatée dans le lecteur d\'un PC IPFire et cliquez sur <i>Sauvegardez sur disquette</i> pour sauvegarder la configuration système. Veuillez examiner attentivement le résultat afin de vous assurez que la sauvegarde s\'est correctement effectuée. Cela peut prendre un certain temps, veuillez patienter.<p>', 'insert removable device' => 'Insérez un périphérique externe', 'install' => 'Installer', @@ -2040,6 +2050,7 @@ 'pagerefresh' => 'La page est en cours d\'actualisation, veuillez patienter.', 'pakfire accept all' => 'Voulez-vous installer ce(s) paquet(s) ?', 'pakfire ago' => '', +'pakfire already busy' => 'Pakfire est déjà en train d\'effectuer une tâche. Veuillez réessayer plus tard.', 'pakfire available addons' => 'Modules disponibles :', 'pakfire configuration' => 'Configuration Pakfire', 'pakfire core update auto' => 'Installer automatiquement les mises à jour du noyau et des modules :', @@ -3037,10 +3048,10 @@ 'wlanap client isolation' => 'Isolation du client', 'wlanap configuration' => 'Configuration du point d\'accès', 'wlanap country' => 'Code pays', -'wlanap debugging' => 'Débogage', +'wlanap debugging' => 'débogage', 'wlanap del interface' => 'Supprimer cette interface choisie ?', 'wlanap encryption' => 'Chiffrement', -'wlanap informations' => 'Informations', +'wlanap informations' => 'informations', 'wlanap interface' => 'Choisir interface', 'wlanap invalid wpa' => 'Longueur non valide dans la Passphrase WPA. Doit comporter entre 8 et 63 caractères.', 'wlanap link dhcp' => 'Configuration DHCP du réseau local sans fil', @@ -3050,11 +3061,11 @@ 'wlanap neighbor scan warning' => 'Attention ! La désactivation peut enfreindre les règles réglementaires !', 'wlanap no interface' => 'L\'interface choisie n\'est pas une carte LAN sans fil !', 'wlanap none' => 'aucun', -'wlanap notifications' => 'Notifications', +'wlanap notifications' => 'notifications', 'wlanap select interface' => 'Veuillez choisir l\'interface réseau sans fil.', 'wlanap ssid' => 'SSID', -'wlanap verbose' => 'Détaillé', -'wlanap warnings' => 'Alertes', +'wlanap verbose' => 'détaillé', +'wlanap warnings' => 'alertes', 'wlanap wlan card' => 'Carte WLan', 'wlanap wlan services' => 'Services WLan', 'wlanap wlan settings' => 'Paramètres WLan', diff --git a/lfs/openssl b/lfs/openssl index a1328fcd0..43401237a 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -24,7 +24,7 @@ include Config -VER = 1.1.1o +VER = 1.1.1p THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -74,7 +74,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 5bd355fd17adf43ba4e3bf1a8036ceb724edd4f4ab80dc25aecc3d2647372e9db2bc12e2b89791fc4b6f7fd95a7b68e00490d09ca6518d25ab990ee27798e641 +$(DL_FILE)_BLAKE2 = 723c7784f39d7a475c190f0399b3721a6f315e1ea6f92617e12bfed3701609398b52d7881a6111c9260337cf369a85cc66f3d368043ab31a19ca5c8eb2237214 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 95530b3edb1e42eb1a68988272916c033fc2cd57
by Peter Müller 20 Jun '22

20 Jun '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 95530b3edb1e42eb1a68988272916c033fc2cd57 (commit) via 2234e8aacac2e0d0b06dac4513585c15c2b3b440 (commit) from f62b488f82b5eb6bbbc1b57d90a919d61346ef5f (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 95530b3edb1e42eb1a68988272916c033fc2cd57 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Jun 20 20:44:58 2022 +0000 Core Update 169: Ship NTP configuration changes Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 2234e8aacac2e0d0b06dac4513585c15c2b3b440 Author: Jon Murphy <jon.murphy(a)ipfire.org> Date: Thu May 26 19:40:31 2022 -0500 Ship NTP changes - Device time more accurate. (e.g., +/- 10 seconds per day to < 100 ms on some devices) ( I know we don't need the perfect time server ) - NTP and time will be accurate in manual mode (setting on Time Server > NTP Configuration WebGUI) - Change NTP "prefer" server: - The current preferred NTP server in an Undisciplined Local Clock. - This is intended when no outside source of synchronized time is available. - Change the "prefer" server from 127.127.1.0 to the Primary NTP server specified on the Time Server > NTP Configuration WebGUI page. - Change allows the drift file (located at /etc/ntp/drift) to be populated by ntpd. - The drift file is updated about once per hour which helps correct the device time. Signed-off-by: Jon Murphy <jon.murphy(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/ntp/ntp.conf | 3 ++- config/rootfiles/core/169/filelists/files | 2 ++ src/initscripts/system/ntp | 2 ++ 3 files changed, 6 insertions(+), 1 deletion(-) Difference in files: diff --git a/config/ntp/ntp.conf b/config/ntp/ntp.conf index 9e393ca8e..bcaf2ee9e 100644 --- a/config/ntp/ntp.conf +++ b/config/ntp/ntp.conf @@ -1,6 +1,7 @@ disable monitor restrict default nomodify noquery restrict 127.0.0.1 -server 127.127.1.0 prefer +server 127.127.1.0 fudge 127.127.1.0 stratum 10 driftfile /etc/ntp/drift +includefile /etc/ntp/ntpInclude.conf diff --git a/config/rootfiles/core/169/filelists/files b/config/rootfiles/core/169/filelists/files index 3b80f1385..44a68f28e 100644 --- a/config/rootfiles/core/169/filelists/files +++ b/config/rootfiles/core/169/filelists/files @@ -1,11 +1,13 @@ etc/httpd/conf/vhosts.d/ipfire-interface.conf etc/httpd/conf/vhosts.d/ipfire-interface-ssl.conf +etc/ntp.conf etc/rc.d/helper/aws-setup etc/rc.d/helper/azure-setup etc/rc.d/helper/exoscale-setup etc/rc.d/helper/gcp-setup etc/rc.d/helper/oci-setup etc/rc.d/init.d/localnet +etc/rc.d/init.d/ntp etc/sysctl.conf lib/firmware/amdgpu/aldebaran_mec2.bin lib/firmware/amdgpu/aldebaran_mec.bin diff --git a/src/initscripts/system/ntp b/src/initscripts/system/ntp index 74b8bc86a..6c8174d25 100644 --- a/src/initscripts/system/ntp +++ b/src/initscripts/system/ntp @@ -52,6 +52,8 @@ case "$1" in fi fi + echo -e "server ${NTP_ADDR_1} prefer\nserver ${NTP_ADDR_2}" > /etc/ntp/ntpInclude.conf + boot_mesg "Starting ntpd..." loadproc /usr/bin/ntpd -Ap /var/run/ntpd.pid ;; hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. f62b488f82b5eb6bbbc1b57d90a919d61346ef5f
by Peter Müller 20 Jun '22

20 Jun '22

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 1452738c2e22562d84a7c6af683a2f9bce88fd55
by Peter Müller 19 Jun '22

19 Jun '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 1452738c2e22562d84a7c6af683a2f9bce88fd55 (commit) via 43b9482a26e7bb265f464180d20cb3beee91b8f4 (commit) from 480202725b872018667ce0cdc337c25c94cef72b (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 1452738c2e22562d84a7c6af683a2f9bce88fd55 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Jun 19 09:41:05 2022 +0000 Tor: Update to 0.4.7.8 Changes in version 0.4.7.8 - 2022-06-17 This version fixes several bugfixes including a High severity security issue categorized as a Denial of Service. Everyone running an earlier version should upgrade to this version. o Major bugfixes (congestion control, TROVE-2022-001): - Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious endpoint. Tracked as CVE-2022-33903. Fixes bug 40626; bugfix on 0.4.7.5-alpha. o Minor features (fallbackdir): - Regenerate fallback directories generated on June 17, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/06/17. o Minor bugfixes (linux seccomp2 sandbox): - Allow the rseq system call in the sandbox. This solves a crash issue with glibc 2.35 on Linux. Patch from pmu-ipf. Fixes bug 40601; bugfix on 0.3.5.11. o Minor bugfixes (logging): - Demote a harmless warn log message about finding a second hop to from warn level to info level, if we do not have enough descriptors yet. Leave it at notice level for other cases. Fixes bug 40603; bugfix on 0.4.7.1-alpha. - Demote a notice log message about "Unexpected path length" to info level. These cases seem to happen arbitrarily, and we likely will never find all of them before the switch to arti. Fixes bug 40612; bugfix on 0.4.7.5-alpha. o Minor bugfixes (relay, logging): - Demote a harmless XOFF log message to from notice level to info level. Fixes bug 40620; bugfix on 0.4.7.5-alpha. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 43b9482a26e7bb265f464180d20cb3beee91b8f4 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Jun 19 09:42:20 2022 +0000 Postfix: Update to 3.7.2 Please refer to https://www.postfix.org/announcements/postfix-3.7.2.html for this versions' release announcement. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/postfix | 6 +++--- lfs/tor | 9 +++------ .../Tor-Sandbox-permit-the-clone3-system-call.patch | 14 -------------- 3 files changed, 6 insertions(+), 23 deletions(-) delete mode 100644 src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch Difference in files: diff --git a/lfs/postfix b/lfs/postfix index 6fe12c9c8..d5fdadbbe 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -26,7 +26,7 @@ include Config SUMMARY = A fast, secure, and flexible mailer -VER = 3.7.1 +VER = 3.7.2 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 35 +PAK_VER = 36 DEPS = @@ -70,7 +70,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = d0bfdbc5105407e5143823e8e14b49e60d5c248eac435279a5fe803b370b46a56de9aff39fdf94398758863f753e43e889e2dffbb393ab63cf486d4fd3f5cf99 +$(DL_FILE)_BLAKE2 = 3f7aaba222b64274f756ea37b8ac06c29469d9183879deb4942a709d75783f4a8ca81204971b6658aba4b5bea46ed9c21b14e1f8fc6b613f257acd3aad16c170 install : $(TARGET) diff --git a/lfs/tor b/lfs/tor index e6751fb84..628ed63a2 100644 --- a/lfs/tor +++ b/lfs/tor @@ -26,7 +26,7 @@ include Config SUMMARY = Anonymizing overlay network for TCP (The onion router) -VER = 0.4.7.7 +VER = 0.4.7.8 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 69 +PAK_VER = 70 DEPS = libseccomp @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 18acfbe017b2ad456184f6031881149717f6fecad0d3e6daf90241a5a8ef296c32a36ace266d38b703f34b66d71e282c803f03f2059502c6ff6f4fdfb6641a97 +$(DL_FILE)_BLAKE2 = 40f6eab453d95a09e4531ce7cdb59715a21b84e1d0b1045d107add6a443fb7563a5747734b23e0e1dfda6490a5a7659f912e38c11cdb5fa635535dcff6169eeb install : $(TARGET) @@ -89,9 +89,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) --with-tor-user=tor \ --with-tor-group=tor - # https://bugzilla.ipfire.org/show_bug.cgi?id=12807 - cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch - cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install diff --git a/src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch b/src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch deleted file mode 100644 index 7e819ce73..000000000 --- a/src/patches/Tor-Sandbox-permit-the-clone3-system-call.patch +++ /dev/null @@ -1,14 +0,0 @@ -diff -Naur tor-0.4.6.10.orig/src/lib/sandbox/sandbox.c tor-0.4.6.10/src/lib/sandbox/sandbox.c ---- tor-0.4.6.10.orig/src/lib/sandbox/sandbox.c 2022-04-09 07:58:00.281189564 +0000 -+++ tor-0.4.6.10/src/lib/sandbox/sandbox.c 2022-04-09 08:00:55.861698856 +0000 -@@ -151,6 +151,10 @@ - SCMP_SYS(clock_gettime), - SCMP_SYS(close), - SCMP_SYS(clone), -+#ifdef __NR_clone3 -+ SCMP_SYS(clone3), -+#endif -+ SCMP_SYS(rseq), - SCMP_SYS(dup), - SCMP_SYS(epoll_create), - SCMP_SYS(epoll_wait), hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 480202725b872018667ce0cdc337c25c94cef72b
by Peter Müller 18 Jun '22

18 Jun '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 480202725b872018667ce0cdc337c25c94cef72b (commit) from 9f94dc123ae84d9d839ada0808c91c9eb0704650 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 480202725b872018667ce0cdc337c25c94cef72b Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Jun 18 14:42:10 2022 +0000 u-boot: Sigh, fix another .xz != .gz Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/u-boot | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Difference in files: diff --git a/lfs/u-boot b/lfs/u-boot index b1240f04c..7b1ad4a0a 100644 --- a/lfs/u-boot +++ b/lfs/u-boot @@ -223,7 +223,7 @@ else # Nanopi R4S # arm trusted firmware for rk3399 cannot build without cortex m0 gcc crosscompiler - cd $(DIR_APP) && tar axf $(DIR_DL)/arm-trusted-firmware-$(ATF_VER)-rk3399-binary.tar.xz + cd $(DIR_APP) && tar axf $(DIR_DL)/arm-trusted-firmware-$(ATF_VER)-rk3399-binary.tar.gz -mkdir -pv /usr/share/u-boot/nanopi_r4s cd $(DIR_APP) && make CROSS_COMPILE="" nanopi-r4s-rk3399_config cd $(DIR_APP) && sed -i -e 's!^CONFIG_IDENT_STRING=.*!CONFIG_IDENT_STRING=" Nanopi R4S - IPFire.org"!' .config hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 9f94dc123ae84d9d839ada0808c91c9eb0704650
by Peter Müller 18 Jun '22

18 Jun '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 9f94dc123ae84d9d839ada0808c91c9eb0704650 (commit) from 01b3a62a35a38db9d67121e66f983c0e0a38ca46 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 9f94dc123ae84d9d839ada0808c91c9eb0704650 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Jun 18 14:40:29 2022 +0000 Update rootfiles to reflect OpenVPN 2FA changes Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/openvpn | 1 + config/rootfiles/common/web-user-interface | 2 ++ 2 files changed, 3 insertions(+) Difference in files: diff --git a/config/rootfiles/common/openvpn b/config/rootfiles/common/openvpn index 1784651b4..d9848a579 100644 --- a/config/rootfiles/common/openvpn +++ b/config/rootfiles/common/openvpn @@ -36,6 +36,7 @@ var/ipfire/ovpn/crls var/ipfire/ovpn/n2nconf #var/ipfire/ovpn/openssl var/ipfire/ovpn/openssl/ovpn.cnf +var/ipfire/ovpn/openvpn-authenticator var/ipfire/ovpn/ovpn-leases.db var/ipfire/ovpn/ovpnconfig var/ipfire/ovpn/scripts diff --git a/config/rootfiles/common/web-user-interface b/config/rootfiles/common/web-user-interface index a5973f9e4..3c47dcdba 100644 --- a/config/rootfiles/common/web-user-interface +++ b/config/rootfiles/common/web-user-interface @@ -236,6 +236,8 @@ srv/web/ipfire/html/images/printer-error.png srv/web/ipfire/html/images/printer.png srv/web/ipfire/html/images/process-stop.png srv/web/ipfire/html/images/process-working.png +srv/web/ipfire/html/images/qr-code.png +srv/web/ipfire/html/images/qr-code.svg srv/web/ipfire/html/images/reload.gif srv/web/ipfire/html/images/start-here.png srv/web/ipfire/html/images/stock_down-16.png hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 01b3a62a35a38db9d67121e66f983c0e0a38ca46
by Peter Müller 18 Jun '22

18 Jun '22

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 01b3a62a35a38db9d67121e66f983c0e0a38ca46 (commit) from be5703ef78b6244dcf06b72e6f34ab72b2e7fc55 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 01b3a62a35a38db9d67121e66f983c0e0a38ca46 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sat Jun 18 10:38:40 2022 +0000 u-boot: .xz != .gz Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/u-boot | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Difference in files: diff --git a/lfs/u-boot b/lfs/u-boot index 327548936..b1240f04c 100644 --- a/lfs/u-boot +++ b/lfs/u-boot @@ -41,7 +41,7 @@ ATF_VER = 2.7 # Top-level Rules ############################################################################### -objects = $(DL_FILE) arm-trusted-firmware-$(ATF_VER).tar.gz arm-trusted-firmware-$(ATF_VER)-rk3399-binary.tar.xz +objects = $(DL_FILE) arm-trusted-firmware-$(ATF_VER).tar.gz arm-trusted-firmware-$(ATF_VER)-rk3399-binary.tar.gz $(DL_FILE) = $(DL_FROM)/$(DL_FILE) arm-trusted-firmware-$(ATF_VER).tar.gz = $(DL_FROM)/arm-trusted-firmware-$(ATF_VER).tar.gz hooks/post-receive -- IPFire 2.x development tree

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM June 2022