IPFire-SCM October 2023

ipfire-scm@lists.ipfire.org

1 participants
19 discussions

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 19614961b6c7b09fe6e0cc91b2d4c3a4df6473a0
by Michael Tremer 30 Oct '23

30 Oct '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 19614961b6c7b09fe6e0cc91b2d4c3a4df6473a0 (commit) via d17d26d7e5a3b23feeb264a2717fb51cc1928db5 (commit) from 775a1055a551200bacc121bb82e1d0d2d733b199 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 19614961b6c7b09fe6e0cc91b2d4c3a4df6473a0 Author: Robin Roevens <robin.roevens(a)disroot.org> Date: Fri Oct 27 21:49:01 2023 +0200 zabbix_agentd: Fix ipfire.net.gateway.ping Fixes custom IPFire Zabbix Agent userparameter ipfire.net.gateway.ping returning 1 (success) when fping failed for other reasons (rc 2,3 or 4) than host unreachable (rc 0). Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit d17d26d7e5a3b23feeb264a2717fb51cc1928db5 Author: Robin Roevens <robin.roevens(a)disroot.org> Date: Fri Oct 27 21:40:55 2023 +0200 zabbix_agentd: Update to 6.0.22 (LTS) - Update from version 6.0.21 to 6.0.22 - Update of rootfile not required Bugs fixed: - ZBX-23417: Fixed possible memory leak when checking modbus.get[] item New Features and Improvements: - ZBXNEXT-6554: Increased remote command execution limits to 16MB Full changelogs since 6.0.21: - https://www.zabbix.com/rn/rn6.0.22 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/zabbix_agentd/userparameter_ipfire.conf | 2 +- lfs/zabbix_agentd | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) Difference in files: diff --git a/config/zabbix_agentd/userparameter_ipfire.conf b/config/zabbix_agentd/userparameter_ipfire.conf index b8b512d82..ba0c6c2ca 100644 --- a/config/zabbix_agentd/userparameter_ipfire.conf +++ b/config/zabbix_agentd/userparameter_ipfire.conf @@ -3,7 +3,7 @@ # Internet Gateway ping timings, can be used to measure "Internet Line Quality" UserParameter=ipfire.net.gateway.pingtime,sudo /usr/sbin/fping -c 3 gateway 2>&1 | tail -n 1 | awk '{print $NF}' | cut -d '/' -f2 # Internet Gateway availability, can be used to check Internet connection -UserParameter=ipfire.net.gateway.ping,sudo /usr/sbin/fping -q -r 3 gateway; [ ! $? ]; echo $? +UserParameter=ipfire.net.gateway.ping,sudo /usr/sbin/fping -q -r 3 gateway; [ ! $? == 0 ]; echo $? # Firewall Filter Forward chain drops in bytes/chain (JSON), can be used for discovery of firewall chains and monitoring of firewall hits on each chain UserParameter=ipfire.net.fw.hits.raw,sudo /usr/local/bin/getipstat -xf | grep "/\* DROP_.* \*/$" | awk 'BEGIN { ORS = ""; print "["} { printf "%s{\"chain\": \"%s\", \"bytes\": \"%s\"}", separator, substr($11, 6), $2; separator = ", "; } END { print"]" }' # Number of currently Active DHCP leases diff --git a/lfs/zabbix_agentd b/lfs/zabbix_agentd index 7c0d01150..0033d9a2c 100644 --- a/lfs/zabbix_agentd +++ b/lfs/zabbix_agentd @@ -26,7 +26,7 @@ include Config SUMMARY = Zabbix Agent -VER = 6.0.21 +VER = 6.0.22 THISAPP = zabbix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = zabbix_agentd -PAK_VER = 10 +PAK_VER = 11 DEPS = fping @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0928695a5f2729765a5b1fa31df410d585b50ef40a9d8379d6243c256c88234ac916bfaf13f62a8e28bb8fb4be48e83c1aecfd01f66dc45d4e25a20761d8ef82 +$(DL_FILE)_BLAKE2 = bba7911a24b00827c58d84938b5786d07f1eb44cbcad94cddf68b484ac9a2f514beb60225d006b8cefc5bbf92e51da27f26d9f6681e10f6322ed0841394e8d9d install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 775a1055a551200bacc121bb82e1d0d2d733b199
by Michael Tremer 30 Oct '23

30 Oct '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 775a1055a551200bacc121bb82e1d0d2d733b199 (commit) via b68136940a27af18695450c2a19dda65e1b7707e (commit) via e174a9594bec95362a94d74e69530962d4e72a9e (commit) via c6b5e0cfe21a4ad20b4126912ea935e6a7c78471 (commit) via e6453de73e46741ed947dea92ff20b8a5aa1f023 (commit) from 4d14892646716f0e5807afe979754105df59e2af (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 775a1055a551200bacc121bb82e1d0d2d733b199 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Oct 30 09:59:19 2023 +0000 core181: Remove old udev files Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit b68136940a27af18695450c2a19dda65e1b7707e Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Sun Oct 29 19:19:30 2023 +0100 make.sh: Adjust build order to proper build udev (systemd) Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit e174a9594bec95362a94d74e69530962d4e72a9e Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Sun Oct 29 19:19:29 2023 +0100 udev: Switch to udev from systemd Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit c6b5e0cfe21a4ad20b4126912ea935e6a7c78471 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Sun Oct 29 19:19:28 2023 +0100 python3-Jinja2: New package This is a build dependency of udev (systemd) Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit e6453de73e46741ed947dea92ff20b8a5aa1f023 Author: Stefan Schantl <stefan.schantl(a)ipfire.org> Date: Sun Oct 29 19:19:27 2023 +0100 python3-MarkupSafe: New package This is a build dependency for udev (systemd) Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/python3-Jinja2 | 36 +++++++++++++++ config/rootfiles/common/python3-MarkupSafe | 16 +++++++ config/rootfiles/common/udev | 47 ++++++++++--------- config/rootfiles/core/181/update.sh | 10 ++++- lfs/{python3-build => python3-Jinja2} | 8 ++-- lfs/{python3-build => python3-MarkupSafe} | 8 ++-- lfs/udev | 72 +++++++++++++++++++++--------- make.sh | 22 ++++----- 8 files changed, 158 insertions(+), 61 deletions(-) create mode 100644 config/rootfiles/common/python3-Jinja2 create mode 100644 config/rootfiles/common/python3-MarkupSafe copy lfs/{python3-build => python3-Jinja2} (92%) copy lfs/{python3-build => python3-MarkupSafe} (92%) Difference in files: diff --git a/config/rootfiles/common/python3-Jinja2 b/config/rootfiles/common/python3-Jinja2 new file mode 100644 index 000000000..755e7bb51 --- /dev/null +++ b/config/rootfiles/common/python3-Jinja2 @@ -0,0 +1,36 @@ +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/EGG-INFO +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/EGG-INFO/PKG-INFO +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/EGG-INFO/SOURCES.txt +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/EGG-INFO/dependency_links.txt +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/EGG-INFO/entry_points.txt +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/EGG-INFO/not-zip-safe +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/EGG-INFO/requires.txt +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/EGG-INFO/top_level.txt +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2 +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/__init__.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/_identifier.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/async_utils.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/bccache.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/compiler.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/constants.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/debug.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/defaults.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/environment.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/exceptions.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/ext.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/filters.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/idtracking.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/lexer.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/loaders.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/meta.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/nativetypes.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/nodes.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/optimizer.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/parser.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/py.typed +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/runtime.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/sandbox.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/tests.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/utils.py +#usr/lib/python3.10/site-packages/Jinja2-3.1.2-py3.10.egg/jinja2/visitor.py diff --git a/config/rootfiles/common/python3-MarkupSafe b/config/rootfiles/common/python3-MarkupSafe new file mode 100644 index 000000000..452ae293b --- /dev/null +++ b/config/rootfiles/common/python3-MarkupSafe @@ -0,0 +1,16 @@ +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/PKG-INFO +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/SOURCES.txt +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/dependency_links.txt +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/native_libs.txt +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/not-zip-safe +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/EGG-INFO/top_level.txt +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/__init__.py +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/_native.py +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/_speedups.c +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/_speedups.cpython-310-xxxMACHINExxx-linux-gnu.so +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/_speedups.py +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/_speedups.pyi +#usr/lib/python3.10/site-packages/MarkupSafe-2.1.3-py3.10-linux-xxxMACHINExxx.egg/markupsafe/py.typed diff --git a/config/rootfiles/common/udev b/config/rootfiles/common/udev index 876ae0c5a..3eea43718 100644 --- a/config/rootfiles/common/udev +++ b/config/rootfiles/common/udev @@ -15,6 +15,7 @@ etc/udev/hwdb.d/20-sdio-vendor-model.hwdb etc/udev/hwdb.d/20-usb-classes.hwdb etc/udev/hwdb.d/20-usb-vendor-model.hwdb etc/udev/hwdb.d/20-vmbus-class.hwdb +etc/udev/hwdb.d/60-autosuspend-chromiumos.hwdb etc/udev/hwdb.d/60-autosuspend-fingerprint-reader.hwdb etc/udev/hwdb.d/60-autosuspend.hwdb etc/udev/hwdb.d/60-evdev.hwdb @@ -29,38 +30,40 @@ etc/udev/hwdb.d/70-joystick.hwdb etc/udev/hwdb.d/70-mouse.hwdb etc/udev/hwdb.d/70-pda.hwdb etc/udev/hwdb.d/70-pointingstick.hwdb +etc/udev/hwdb.d/70-sound-card.hwdb etc/udev/hwdb.d/70-touchpad.hwdb etc/udev/hwdb.d/80-ieee1394-unit-function.hwdb +#etc/udev/hwdb.d/README #etc/udev/rules.d etc/udev/rules.d/55-lfs.rules -etc/udev/rules.d/81-cdrom.rules -etc/udev/rules.d/83-cdrom-symlinks.rules etc/udev/udev.conf +#lib/libudev.so lib/libudev.so.1 -lib/libudev.so.1.6.3 +lib/libudev.so.1.7.7 lib/udev lib/udev/ata_id lib/udev/cdrom_id -lib/udev/collect lib/udev/dmi_memory_id lib/udev/fido_id -lib/udev/init-net-rules.sh +lib/udev/hwdb.d +lib/udev/iocost lib/udev/mtd_probe lib/udev/network-aqm lib/udev/network-hotplug-bridges lib/udev/network-hotplug-rename lib/udev/network-hotplug-vlan lib/udev/network-offloading -lib/udev/rule_generator.functions #lib/udev/rules.d lib/udev/rules.d/25-alsa.rules lib/udev/rules.d/50-udev-default.rules lib/udev/rules.d/60-autosuspend.rules lib/udev/rules.d/60-block.rules lib/udev/rules.d/60-cdrom_id.rules +lib/udev/rules.d/60-dmi-id.rules lib/udev/rules.d/60-drm.rules lib/udev/rules.d/60-evdev.rules lib/udev/rules.d/60-fido-id.rules +lib/udev/rules.d/60-infiniband.rules lib/udev/rules.d/60-input-id.rules lib/udev/rules.d/60-net.rules lib/udev/rules.d/60-persistent-alsa.rules @@ -76,33 +79,37 @@ lib/udev/rules.d/70-camera.rules lib/udev/rules.d/70-joystick.rules lib/udev/rules.d/70-memory.rules lib/udev/rules.d/70-mouse.rules +lib/udev/rules.d/70-power-switch.rules lib/udev/rules.d/70-touchpad.rules +lib/udev/rules.d/70-uaccess.rules +lib/udev/rules.d/71-seat.rules +lib/udev/rules.d/73-seat-late.rules lib/udev/rules.d/75-net-description.rules lib/udev/rules.d/75-probe_mtd.rules lib/udev/rules.d/78-sound-card.rules lib/udev/rules.d/80-drivers.rules +lib/udev/rules.d/80-net-setup-link.rules lib/udev/rules.d/81-net-dhcp.rules +lib/udev/rules.d/90-iocost.rules lib/udev/rules.d/99-aqm.rules lib/udev/rules.d/99-offloading.rules +lib/udev/rules.d/99-systemd.rules +#lib/udev/rules.d/README lib/udev/scsi_id lib/udev/v4l_id -lib/udev/write_cd_rules -lib/udev/write_net_rules sbin/udevadm sbin/udevd +usr/bin/udev-hwdb #usr/include/libudev.h -#usr/include/udev.h -#usr/lib/libudev.la -#usr/lib/libudev.so #usr/lib/pkgconfig/libudev.pc -#usr/share/doc/udev-20171102 -#usr/share/doc/udev-20171102/lfs -#usr/share/doc/udev-20171102/lfs/55-lfs.txt -#usr/share/doc/udev-20171102/lfs/README -#usr/share/man/man5/udev.conf.5 -#usr/share/man/man7/hwdb.7 -#usr/share/man/man7/udev.7 -#usr/share/man/man8/udevadm.8 -#usr/share/man/man8/udevd.8 +usr/lib/udev +usr/lib/udev/init-net-rules.sh +usr/lib/udev/rule_generator.functions +usr/lib/udev/rules.d +usr/lib/udev/write_net_rules +#usr/share/doc/udev-20230818 +#usr/share/doc/udev-20230818/lfs +#usr/share/doc/udev-20230818/lfs/55-lfs.txt +#usr/share/doc/udev-20230818/lfs/README #usr/share/pkgconfig #usr/share/pkgconfig/udev.pc diff --git a/config/rootfiles/core/181/update.sh b/config/rootfiles/core/181/update.sh index ee7cc92bc..0dc22d122 100644 --- a/config/rootfiles/core/181/update.sh +++ b/config/rootfiles/core/181/update.sh @@ -88,7 +88,15 @@ rm -rvf \ extract_files # Remove files -#rm -rvf \ +rm -rvf \ + /etc/udev/rules.d/81-cdrom.rules \ + /etc/udev/rules.d/83-cdrom-symlinks.rules \ + /lib/libudev.so.1.6.3 \ + /lib/udev/collect \ + /lib/udev/init-net-rules.sh \ + /lib/udev/rule_generator.functions \ + /lib/udev/write_cd_rules \ + /lib/udev/write_net_rules # update linker config ldconfig diff --git a/lfs/python3-Jinja2 b/lfs/python3-Jinja2 new file mode 100644 index 000000000..1c020bec3 --- /dev/null +++ b/lfs/python3-Jinja2 @@ -0,0 +1,79 @@ +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see <http://www.gnu.org/licenses/>. # +# # +############################################################################### + +############################################################################### +# Definitions +############################################################################### + +include Config + +VER = 3.1.2 + +THISAPP = Jinja2-$(VER) +DL_FILE = $(THISAPP).tar.gz +DL_FROM = $(URL_IPFIRE) +DIR_APP = $(DIR_SRC)/$(THISAPP) +TARGET = $(DIR_INFO)/$(THISAPP) + +############################################################################### +# Top-level Rules +############################################################################### + +objects = $(DL_FILE) + +$(DL_FILE) = $(DL_FROM)/$(DL_FILE) + +$(DL_FILE)_BLAKE2 = 1b9780cac6e33f4370a5e7d8882d42a640662939c10e355391d9c45119b313e86e37b574551ac44908911feb24b08b537329b98f009c54ad4ed928259fda759f + +install : $(TARGET) + +check : $(patsubst %,$(DIR_CHK)/%,$(objects)) + +download :$(patsubst %,$(DIR_DL)/%,$(objects)) + +b2 : $(subst %,%_BLAKE2,$(objects)) + +dist: + @$(PAK) + +############################################################################### +# Downloading, checking, b2sum +############################################################################### + +$(patsubst %,$(DIR_CHK)/%,$(objects)) : + @$(CHECK) + +$(patsubst %,$(DIR_DL)/%,$(objects)) : + @$(LOAD) + +$(subst %,%_BLAKE2,$(objects)) : + @$(B2SUM) + +############################################################################### +# Installation Details +############################################################################### + +$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) + @$(PREBUILD) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && python3 setup.py build + cd $(DIR_APP) && python3 setup.py install + @rm -rf $(DIR_APP) + @$(POSTBUILD) diff --git a/lfs/python3-MarkupSafe b/lfs/python3-MarkupSafe new file mode 100644 index 000000000..e76d6afca --- /dev/null +++ b/lfs/python3-MarkupSafe @@ -0,0 +1,79 @@ +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see <http://www.gnu.org/licenses/>. # +# # +############################################################################### + +############################################################################### +# Definitions +############################################################################### + +include Config + +VER = 2.1.3 + +THISAPP = MarkupSafe-$(VER) +DL_FILE = $(THISAPP).tar.gz +DL_FROM = $(URL_IPFIRE) +DIR_APP = $(DIR_SRC)/$(THISAPP) +TARGET = $(DIR_INFO)/$(THISAPP) + +############################################################################### +# Top-level Rules +############################################################################### + +objects = $(DL_FILE) + +$(DL_FILE) = $(DL_FROM)/$(DL_FILE) + +$(DL_FILE)_BLAKE2 = 1edca84c47c93fddfd22ee2fef2ba3907921ecb2d807c0e105c403d235e5abacba929be94970ad693f4c7d019653ece8255238d825bfc84d1a4a604fb476a783 + +install : $(TARGET) + +check : $(patsubst %,$(DIR_CHK)/%,$(objects)) + +download :$(patsubst %,$(DIR_DL)/%,$(objects)) + +b2 : $(subst %,%_BLAKE2,$(objects)) + +dist: + @$(PAK) + +############################################################################### +# Downloading, checking, b2sum +############################################################################### + +$(patsubst %,$(DIR_CHK)/%,$(objects)) : + @$(CHECK) + +$(patsubst %,$(DIR_DL)/%,$(objects)) : + @$(LOAD) + +$(subst %,%_BLAKE2,$(objects)) : + @$(B2SUM) + +############################################################################### +# Installation Details +############################################################################### + +$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) + @$(PREBUILD) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && python3 setup.py build + cd $(DIR_APP) && python3 setup.py install + @rm -rf $(DIR_APP) + @$(POSTBUILD) diff --git a/lfs/udev b/lfs/udev index 3a9c416b5..dba2aa05b 100644 --- a/lfs/udev +++ b/lfs/udev @@ -24,10 +24,10 @@ include Config -VER = 3.2.14 -RULES_VER = 20171102 +VER = 254 +RULES_VER = 20230818 -THISAPP = eudev-$(VER) +THISAPP = systemd-$(VER) DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) @@ -37,13 +37,13 @@ TARGET = $(DIR_INFO)/$(THISAPP) # Top-level Rules ############################################################################### -objects = $(DL_FILE) udev-lfs-$(RULES_VER).tar.bz2 +objects = $(DL_FILE) udev-lfs-$(RULES_VER).tar.xz $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -udev-lfs-$(RULES_VER).tar.bz2 = $(DL_FROM)/udev-lfs-$(RULES_VER).tar.bz2 +udev-lfs-$(RULES_VER).tar.xz = $(DL_FROM)/udev-lfs-$(RULES_VER).tar.xz -$(DL_FILE)_BLAKE2 = 7d68e77012288ecfac43be31f724224d371cb1084238fe045df248927eff854dbb391ad501e2a36d9b5ea4eb0a8cba3f9f21ea668908584a24c2a65df93ffdf8 -udev-lfs-$(RULES_VER).tar.bz2_BLAKE2 = b5fb8177a87719e28adc976b83953024dbcfb8739b0c2e61da186cbc4df5e75e62c888da987d15c64db164002bb0a1e66ce0ff206b143dc953d7571b66d5d5c0 +$(DL_FILE)_BLAKE2 = 4703ac102dd0003a2ef59dfd9b6fc6345b57cf1ff6397ebc71b3e9abb35ad5b891d114038a91eddba25b4ec81b8208a36691bc5490173b223ba35842cd1776d4 +udev-lfs-$(RULES_VER).tar.xz_BLAKE2 = e8c20bdddb5191381bad11bf46b0d605ce952afb697e8bf3e80b216c64eacbb327d0d961c5a1f49291576c82452e8472bb62f31f8bacc81eb832aa746a5234d4 install : $(TARGET) @@ -73,24 +73,52 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && tar axf $(DIR_DL)/udev-lfs-$(RULES_VER).tar.bz2 - cd $(DIR_APP) && ./configure \ + cd $(DIR_APP) && tar axf $(DIR_DL)/udev-lfs-$(RULES_VER).tar.xz + + # Remove two unneeded groups (render and sgx) from the default udev rules + cd $(DIR_APP) && sed -i -e 's/GROUP="render"/GROUP="video"/' \ + -e 's/GROUP="sgx", //' rules.d/50-udev-default.rules.in + + # Remve udev rule which requires a full systemd installation + cd $(DIR_APP) && sed '/systemd-sysctl/s/^/#/' -i rules.d/99-systemd.rules.in + + # Prepare udev for build. + cd $(DIR_APP) && mkdir -pv build + cd $(DIR_APP)/build && meson setup \ --prefix=/usr \ - --bindir=/bin \ - --sbindir=/sbin \ - --sysconfdir=/etc \ - --libdir=/usr/lib \ - --libexecdir=/lib \ - --with-rootprefix= \ - --with-rootlibdir=/lib \ - --enable-manpages \ - --disable-static - - cd $(DIR_APP) && make $(MAKETUNING) - cd $(DIR_APP) && make install + --buildtype=release \ + -Dmode=release \ + -Ddev-kvm-mode=0660 \ + -Dlink-udev-shared=false \ + .. + + # Only build udev and required components + cd $(DIR_APP)/build && ninja udevadm systemd-hwdb \ + $$(grep -o -E "^build (src/libudev|src/udev|rules.d|hwdb.d)[^:]*" \ + build.ninja | awk '{ print $$2 }') \ + $$(realpath libudev.so --relative-to .) + + # Drop udev rules which requires a full systemd installation + cd $(DIR_APP)/build && rm -vf rules.d/90-vconsole.rules + + # Install udev + cd $(DIR_APP)/build && install -vm755 -d {/lib,/etc}/udev/{hwdb,rules}.d + cd $(DIR_APP)/build && install -vm755 -d /usr/{lib,share}/pkgconfig + cd $(DIR_APP)/build && install -vm755 udevadm /bin/ + cd $(DIR_APP)/build && install -vm755 systemd-hwdb /usr/bin/udev-hwdb + cd $(DIR_APP)/build && ln -svfn ../bin/udevadm /sbin/udevd + cd $(DIR_APP)/build && ln -svfn ../bin/udevadm /sbin/udevadm + cd $(DIR_APP)/build && cp -av libudev.so{,*[0-9]} /lib/ + cd $(DIR_APP)/build && install -vm644 ../src/libudev/libudev.h /usr/include/ + cd $(DIR_APP)/build && install -vm644 src/libudev/*.pc /usr/lib/pkgconfig/ + cd $(DIR_APP)/build && install -vm644 src/udev/*.pc /usr/share/pkgconfig/ + cd $(DIR_APP)/build && install -vm644 ../src/udev/udev.conf /etc/udev/ + cd $(DIR_APP)/build && install -vm644 rules.d/* ../rules.d/{*.rules,README} /lib/udev/rules.d/ + cd $(DIR_APP)/build && install -vm644 hwdb.d/* ../hwdb.d/{*.hwdb,README} /etc/udev/hwdb.d/ + cd $(DIR_APP)/build && install -vm755 $$(find src/udev -type f | grep -F -v ".") /lib/udev # Generate hardware database - udevadm hwdb --update + udev-hwdb update # Install rules cd $(DIR_APP) && make -f udev-lfs-$(RULES_VER)/Makefile.lfs install diff --git a/make.sh b/make.sh index e8aae4cf0..fce5024a5 100755 --- a/make.sh +++ b/make.sh @@ -1103,11 +1103,11 @@ buildipfire() { lfsmake2 backup lfsmake2 rust lfsmake2 openssl - lfsmake2 kmod - lfsmake2 udev lfsmake2 popt lfsmake2 libedit - lfsmake2 libusb + lfsmake2 pam + lfsmake2 libcap + lfsmake2 libcap-ng lfsmake2 libpcap lfsmake2 ppp lfsmake2 pptp @@ -1116,11 +1116,7 @@ buildipfire() { lfsmake2 bc lfsmake2 u-boot MKIMAGE=1 lfsmake2 cpio - lfsmake2 mdadm - lfsmake2 dracut lfsmake2 libaio - lfsmake2 lvm2 - lfsmake2 multipath-tools lfsmake2 freetype lfsmake2 libmnl lfsmake2 libnfnetlink @@ -1144,8 +1140,17 @@ buildipfire() { lfsmake2 sqlite lfsmake2 python3 lfsmake2 python3-setuptools + lfsmake2 python3-MarkupSafe + lfsmake2 python3-Jinja2 lfsmake2 ninja lfsmake2 meson + lfsmake2 kmod + lfsmake2 udev + lfsmake2 libusb + lfsmake2 mdadm + lfsmake2 dracut + lfsmake2 lvm2 + lfsmake2 multipath-tools lfsmake2 glib lfsmake2 libgudev lfsmake2 libgpg-error @@ -1165,7 +1170,6 @@ buildipfire() { lfsmake2 boost lfsmake2 linux-atm lfsmake2 libqmi - lfsmake2 pam lfsmake2 c-ares lfsmake2 rust-dissimilar lfsmake2 rust-cfg-if @@ -1291,8 +1295,6 @@ buildipfire() { lfsmake2 slang lfsmake2 newt lfsmake2 libsmooth - lfsmake2 libcap - lfsmake2 libcap-ng lfsmake2 pciutils lfsmake2 usbutils lfsmake2 libxml2 hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 4d14892646716f0e5807afe979754105df59e2af
by Peter Müller 30 Oct '23

30 Oct '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 4d14892646716f0e5807afe979754105df59e2af (commit) from 1d1694c7e5f3a088c6aeef74fc51352b7611a008 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 4d14892646716f0e5807afe979754105df59e2af Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Mon Oct 30 06:44:50 2023 +0000 linux: Update x86_64 rootfile My fault to provide this ahead of time, again. :-/ Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/x86_64/linux | 16 ---------------- 1 file changed, 16 deletions(-) Difference in files: diff --git a/config/rootfiles/common/x86_64/linux b/config/rootfiles/common/x86_64/linux index 4ff096b5b..d4fb52284 100644 --- a/config/rootfiles/common/x86_64/linux +++ b/config/rootfiles/common/x86_64/linux @@ -8360,8 +8360,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/IOSF_MBI #lib/modules/KVER-ipfire/build/include/config/IO_DELAY_0X80 #lib/modules/KVER-ipfire/build/include/config/IO_STRICT_DEVMEM -#lib/modules/KVER-ipfire/build/include/config/IO_URING -#lib/modules/KVER-ipfire/build/include/config/IO_WQ #lib/modules/KVER-ipfire/build/include/config/IP5XXX_POWER #lib/modules/KVER-ipfire/build/include/config/IP6_NF_FILTER #lib/modules/KVER-ipfire/build/include/config/IP6_NF_IPTABLES @@ -9138,8 +9136,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/NET_CLS_FW #lib/modules/KVER-ipfire/build/include/config/NET_CLS_MATCHALL #lib/modules/KVER-ipfire/build/include/config/NET_CLS_ROUTE4 -#lib/modules/KVER-ipfire/build/include/config/NET_CLS_RSVP -#lib/modules/KVER-ipfire/build/include/config/NET_CLS_RSVP6 #lib/modules/KVER-ipfire/build/include/config/NET_CLS_U32 #lib/modules/KVER-ipfire/build/include/config/NET_CORE #lib/modules/KVER-ipfire/build/include/config/NET_DEVLINK @@ -11135,11 +11131,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/VIDEO_M52790 #lib/modules/KVER-ipfire/build/include/config/VIDEO_MEM2MEM_DEINTERLACE #lib/modules/KVER-ipfire/build/include/config/VIDEO_MSP3400 -#lib/modules/KVER-ipfire/build/include/config/VIDEO_MT9M111 -#lib/modules/KVER-ipfire/build/include/config/VIDEO_MT9V011 -#lib/modules/KVER-ipfire/build/include/config/VIDEO_OV2640 -#lib/modules/KVER-ipfire/build/include/config/VIDEO_OV7640 -#lib/modules/KVER-ipfire/build/include/config/VIDEO_OV7670 #lib/modules/KVER-ipfire/build/include/config/VIDEO_PVRUSB2 #lib/modules/KVER-ipfire/build/include/config/VIDEO_PVRUSB2_DVB #lib/modules/KVER-ipfire/build/include/config/VIDEO_PVRUSB2_SYSFS @@ -20412,11 +20403,6 @@ lib/modules/KVER-ipfire/kernel #lib/modules/KVER-ipfire/kernel/drivers/media/i2c/ks0127.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/media/i2c/m52790.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/media/i2c/msp3400.ko.xz -#lib/modules/KVER-ipfire/kernel/drivers/media/i2c/mt9m111.ko.xz -#lib/modules/KVER-ipfire/kernel/drivers/media/i2c/mt9v011.ko.xz -#lib/modules/KVER-ipfire/kernel/drivers/media/i2c/ov2640.ko.xz -#lib/modules/KVER-ipfire/kernel/drivers/media/i2c/ov7640.ko.xz -#lib/modules/KVER-ipfire/kernel/drivers/media/i2c/ov7670.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/media/i2c/saa6588.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/media/i2c/saa6752hs.ko.xz #lib/modules/KVER-ipfire/kernel/drivers/media/i2c/saa7110.ko.xz @@ -22768,8 +22754,6 @@ lib/modules/KVER-ipfire/kernel #lib/modules/KVER-ipfire/kernel/net/sched/cls_fw.ko.xz #lib/modules/KVER-ipfire/kernel/net/sched/cls_matchall.ko.xz #lib/modules/KVER-ipfire/kernel/net/sched/cls_route.ko.xz -#lib/modules/KVER-ipfire/kernel/net/sched/cls_rsvp.ko.xz -#lib/modules/KVER-ipfire/kernel/net/sched/cls_rsvp6.ko.xz #lib/modules/KVER-ipfire/kernel/net/sched/cls_u32.ko.xz #lib/modules/KVER-ipfire/kernel/net/sched/em_cmp.ko.xz #lib/modules/KVER-ipfire/kernel/net/sched/em_ipset.ko.xz hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 1d1694c7e5f3a088c6aeef74fc51352b7611a008
by Michael Tremer 27 Oct '23

27 Oct '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 1d1694c7e5f3a088c6aeef74fc51352b7611a008 (commit) via cfe911bab5692864e28675bcbad2a88f1729402e (commit) from 026eafd5860ea9fa3a134003d388be356fb266d0 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 1d1694c7e5f3a088c6aeef74fc51352b7611a008 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Fri Oct 27 07:59:29 2023 +0000 kernel: update aarch64 rootfile Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit cfe911bab5692864e28675bcbad2a88f1729402e Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Fri Oct 27 07:56:20 2023 +0000 kernel: update to 6.1.60 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/kernel/kernel.config.aarch64-ipfire | 2 +- config/kernel/kernel.config.riscv64-ipfire | 2 +- config/kernel/kernel.config.x86_64-ipfire | 2 +- config/rootfiles/common/aarch64/linux | 4 +--- lfs/linux | 4 ++-- 5 files changed, 6 insertions(+), 8 deletions(-) Difference in files: diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire index aeffce154..76655eabf 100644 --- a/config/kernel/kernel.config.aarch64-ipfire +++ b/config/kernel/kernel.config.aarch64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 6.1.59-ipfire Kernel Configuration +# Linux/arm64 6.1.60-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/config/kernel/kernel.config.riscv64-ipfire b/config/kernel/kernel.config.riscv64-ipfire index 6562bbd8f..07c6aa008 100644 --- a/config/kernel/kernel.config.riscv64-ipfire +++ b/config/kernel/kernel.config.riscv64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/riscv 6.1.59-ipfire Kernel Configuration +# Linux/riscv 6.1.60-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index 40f66849c..6d646c618 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.1.59-ipfire Kernel Configuration +# Linux/x86 6.1.60-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/config/rootfiles/common/aarch64/linux b/config/rootfiles/common/aarch64/linux index 7c96e2b8d..40eeb0260 100644 --- a/config/rootfiles/common/aarch64/linux +++ b/config/rootfiles/common/aarch64/linux @@ -8505,7 +8505,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/INTEL_XWAY_PHY #lib/modules/KVER-ipfire/build/include/config/INTERVAL_TREE #lib/modules/KVER-ipfire/build/include/config/IOMMU_API -#lib/modules/KVER-ipfire/build/include/config/IOMMU_DEFAULT_PASSTHROUGH +#lib/modules/KVER-ipfire/build/include/config/IOMMU_DEFAULT_DMA_STRICT #lib/modules/KVER-ipfire/build/include/config/IOMMU_DMA #lib/modules/KVER-ipfire/build/include/config/IOMMU_IOVA #lib/modules/KVER-ipfire/build/include/config/IOMMU_IO_PGTABLE @@ -8514,8 +8514,6 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/IONIC #lib/modules/KVER-ipfire/build/include/config/IOSCHED_BFQ #lib/modules/KVER-ipfire/build/include/config/IO_STRICT_DEVMEM -#lib/modules/KVER-ipfire/build/include/config/IO_URING -#lib/modules/KVER-ipfire/build/include/config/IO_WQ #lib/modules/KVER-ipfire/build/include/config/IP6_NF_FILTER #lib/modules/KVER-ipfire/build/include/config/IP6_NF_IPTABLES #lib/modules/KVER-ipfire/build/include/config/IP6_NF_MANGLE diff --git a/lfs/linux b/lfs/linux index 5743ebf9d..ca82b6522 100644 --- a/lfs/linux +++ b/lfs/linux @@ -24,7 +24,7 @@ include Config -VER = 6.1.59 +VER = 6.1.60 ARM_PATCHES = 6.1.y-ipfire2 THISAPP = linux-$(VER) @@ -75,7 +75,7 @@ objects = \ $(DL_FILE) = $(URL_IPFIRE)/$(DL_FILE) arm-multi-patches-$(ARM_PATCHES).patch.xz = $(URL_IPFIRE)/arm-multi-patches-$(ARM_PATCHES).patch.xz -$(DL_FILE)_BLAKE2 = 8b805f75f745e6fff9d7628fb1702475ad4c94010f764d733e1c1b4d860f6e593a79ccb8aa3a8c6c0de2ffdc2c192aaa661966549a7383ceb026a59e0d949e49 +$(DL_FILE)_BLAKE2 = 6d6723dd839b9003ea2a46be849e36516a97497ba3743860c8081795b372c70536465c46defd6ab4f97e81127b1bf40d78270b1a3a721a7331a935d1ef8417c4 arm-multi-patches-$(ARM_PATCHES).patch.xz_BLAKE2 = 7afc460562fb24bcd75784fc79de768f9b60780aedd88d1a847927169e31920bbb475b1ac1466c4a224a7876d16bd8d465b96202de12b74f6e2ccbfcec731ad3 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 026eafd5860ea9fa3a134003d388be356fb266d0
by Michael Tremer 26 Oct '23

26 Oct '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 026eafd5860ea9fa3a134003d388be356fb266d0 (commit) via 6fa97f2c9726ed2f4ac00b9231ef64aaf8907486 (commit) from cce398bca5a266a5563fa1dcb532fd2481400b21 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 026eafd5860ea9fa3a134003d388be356fb266d0 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Thu Oct 26 08:57:31 2023 +0000 core181: Ship OpenSSL Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 6fa97f2c9726ed2f4ac00b9231ef64aaf8907486 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Thu Oct 26 08:57:20 2023 +0000 openssl: Update to 3.1.4 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/openssl | 1 + config/rootfiles/{oldcore/100 => core/181}/filelists/openssl | 0 lfs/openssl | 4 ++-- 3 files changed, 3 insertions(+), 2 deletions(-) copy config/rootfiles/{oldcore/100 => core/181}/filelists/openssl (100%) Difference in files: diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl index 5ccb17fe1..a928389cc 100644 --- a/config/rootfiles/common/openssl +++ b/config/rootfiles/common/openssl @@ -4659,6 +4659,7 @@ usr/lib/ossl-modules/legacy.so #usr/share/man/man3/SSL_COMP_get_compression_methods.3ossl #usr/share/man/man3/SSL_COMP_get_id.3ossl #usr/share/man/man3/SSL_CONF_CTX_clear_flags.3ossl +#usr/share/man/man3/SSL_CONF_CTX_finish.3ossl #usr/share/man/man3/SSL_CONF_CTX_free.3ossl #usr/share/man/man3/SSL_CONF_CTX_new.3ossl #usr/share/man/man3/SSL_CONF_CTX_set1_prefix.3ossl diff --git a/config/rootfiles/core/181/filelists/openssl b/config/rootfiles/core/181/filelists/openssl new file mode 120000 index 000000000..e011a9266 --- /dev/null +++ b/config/rootfiles/core/181/filelists/openssl @@ -0,0 +1 @@ +../../../common/openssl \ No newline at end of file diff --git a/lfs/openssl b/lfs/openssl index 7ac39cf0e..1a1260d05 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -24,7 +24,7 @@ include Config -VER = 3.1.2 +VER = 3.1.4 THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -70,7 +70,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 7b4ba35df7d5680c5f13a1986e4c6abaf4592690647dcfa84d7f14c196326355e8ad0ea62f81f8269f0605f0d29f18e9def9c2158fcbe00baefabf819f82374d +$(DL_FILE)_BLAKE2 = bd6a3ef458f86dd5173e87b10432bd81c1570e1848da3c4d7a06eb021d2f67e4075421885c402f6ea792e383e756d78757c17ef060094e840ed5df6faf3d7f9e install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. cce398bca5a266a5563fa1dcb532fd2481400b21
by Michael Tremer 25 Oct '23

25 Oct '23

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 7f8b75f8badcfb58710093a4d352cff6fec59b70
by Michael Tremer 20 Oct '23

20 Oct '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 7f8b75f8badcfb58710093a4d352cff6fec59b70 (commit) via 447d0bf51ed17f16880fd5041b3a88dcdec8a648 (commit) via bf85d30b58353bdbf3f375d01f72ca96d0cd030d (commit) via 7a6cf8276d81a2df609a807586e0fb0f95d648c0 (commit) via 5049433d91f564a768be95ae51f3ef0a2fa17c52 (commit) via e1a68c27a091e1165aaa18ed47d763e81e8a8de4 (commit) via 37678a4f824d7368f39531f39b10ed43abc92aa5 (commit) via d03f03e24c1c84618aa9420b0cdc0ccff14f99e8 (commit) via 3f18addedeaa0f917c9a164484dedfaaa2008a69 (commit) from 6c829050c8c758e554e584ecf6de41596fad2a4b (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 7f8b75f8badcfb58710093a4d352cff6fec59b70 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Oct 13 09:04:00 2023 +0000 linux: Set default IOMMU handling to "strict" on 64-bit ARM This has been our default setting on x86_64 for quite some time now, which is why this patch aligns the aarch64 kernel configuration to that value. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 447d0bf51ed17f16880fd5041b3a88dcdec8a648 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Oct 13 09:03:00 2023 +0000 linux: Disable io_uring This subsystem has been a frequent source of security vulnerabilities affecting the Linux kernel; as a result, Google announced on June 14, 2023, that they would disable it in their environment as widely as possible. IPFire does not depend on the availability of io_uring. Therefore, disable this subsystem as well in order to preemptively cut attack surface. See also: https://security.googleblog.com/2023/06/learnings-from-kctf-vrps-42-linux.h… Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit bf85d30b58353bdbf3f375d01f72ca96d0cd030d Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Fri Oct 20 08:36:20 2023 +0200 suricata: Update to 6.0.15 Excerpt from changelog: "6.0.15 -- 2023-10-18 Security #6363: mime: quadratic complexity in MimeDecAddEntity (6.0.x backport) Bug #6407: email: disabled fields in suricata.yaml also get logged (6.0.x backport) Bug #6403: detect: multi-level tunneling inspection fails (6.0.x backport) Bug #6377: byte_jump with negative post_offset before start of buffer failure (6.0.x backport) Task #6364: decode: add drop reason for stream reassembly memcap (6.0.x backport)" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 7a6cf8276d81a2df609a807586e0fb0f95d648c0 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Oct 20 08:43:07 2023 +0000 core181: Ship apache2 Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 5049433d91f564a768be95ae51f3ef0a2fa17c52 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Thu Oct 19 20:52:32 2023 +0200 apache: Update to 2.4.58 For details see: https://dlcdn.apache.org/httpd/CHANGES_2.4.58 Excerpt from changelog: "Changes with Apache 2.4.58 *) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST (cve.mitre.org) When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their own test client. During "normal" HTTP/2 use, the probability to hit this bug is very low. The kept memory would not become noticeable before the connection closes or times out. Users are recommended to upgrade to version 2.4.58, which fixes the issue. Credits: Will Dormann of Vul Labs *) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with initial windows size 0 (cve.mitre.org) An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.57. Users are recommended to upgrade to version 2.4.58, which fixes the issue. Credits: Prof. Sven Dietrich (City University of New York) *) SECURITY: CVE-2023-31122: mod_macro buffer over-read (cve.mitre.org) Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. Credits: David Shoon (github/davidshoon)" Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit e1a68c27a091e1165aaa18ed47d763e81e8a8de4 Author: Matthias Fischer <matthias.fischer(a)ipfire.org> Date: Thu Oct 19 19:03:24 2023 +0200 samba: Update to 4.19.2 For details see: v4.19.1. => https://www.samba.org/samba/history/samba-4.19.1.html " ============================== Release Notes for Samba 4.19.1 October 10, 2023 ============================== This is a security release in order to address the following defects: o CVE-2023-3961: Unsanitized pipe names allow SMB clients to connect as root to existing unix domain sockets on the file system. https://www.samba.org/samba/security/CVE-2023-3961.html o CVE-2023-4091: SMB client can truncate files to 0 bytes by opening files with OVERWRITE disposition when using the acl_xattr Samba VFS module with the smb.conf setting "acl_xattr:ignore system acls = yes" https://www.samba.org/samba/security/CVE-2023-4091.html o CVE-2023-4154: An RODC and a user with the GET_CHANGES right can view all attributes, including secrets and passwords. Additionally, the access check fails open on error conditions. https://www.samba.org/samba/security/CVE-2023-4154.html o CVE-2023-42669: Calls to the rpcecho server on the AD DC can request that the server block for a user-defined amount of time, denying service. https://www.samba.org/samba/security/CVE-2023-42669.html o CVE-2023-42670: Samba can be made to start multiple incompatible RPC listeners, disrupting service on the AD DC. https://www.samba.org/samba/security/CVE-2023-42670.html" v4.19.2 => https://www.samba.org/samba/history/samba-4.19.2.html "Changes since 4.19.1 -------------------- o Jeremy Allison <jra(a)samba.org> * BUG 15423: Use-after-free in aio_del_req_from_fsp during smbd shutdown after failed IPC FSCTL_PIPE_TRANSCEIVE. * BUG 15426: clidfs.c do_connect() missing a "return" after a cli_shutdown() call. o Ralph Boehme <slow(a)samba.org> * BUG 15463: macOS mdfind returns only 50 results. o Volker Lendecke <vl(a)samba.org> * BUG 15481: GETREALFILENAME_CACHE can modify incoming new filename with previous cache entry value. o Stefan Metzmacher <metze(a)samba.org> * BUG 15464: libnss_winbind causes memory corruption since samba-4.18, impacts sendmail, zabbix, potentially more. o Martin Schwenke <mschwenke(a)ddn.com> * BUG 15479: ctdbd: setproctitle not initialized messages flooding logs. o Joseph Sutton <josephsutton(a)catalyst.net.nz> * BUG 15491: CVE-2023-5568 Heap buffer overflow with freshness tokens in the Heimdal KDC in Samba 4.19 * BUG 15477: The heimdal KDC doesn't detect s4u2self correctly when fast is in use." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 37678a4f824d7368f39531f39b10ed43abc92aa5 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Mon Oct 16 13:50:58 2023 +0200 en.pl: Correction of typo - This error means that a section in extrahd.cgi about the mount path being incorrect does not get shown for users with english language selected. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: bbitsch(a)ipfire.org Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit d03f03e24c1c84618aa9420b0cdc0ccff14f99e8 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Fri Oct 20 08:41:35 2023 +0000 core181: Ship backup.pl Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 3f18addedeaa0f917c9a164484dedfaaa2008a69 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sun Oct 15 18:28:22 2023 +0200 backup.pl: Fix for bug#11048 - add script for adding pass/no pass to ovpnconfig from backup - A script was added to the update.sh script to add pass/no pass to the ovpnconfig entries but I forgot that this was also needed in the backup.pl file to add those statuses into any ovpnconfig file restored from a backup before the pass/no pass entries were added. - This patch corrects that oversight. - Confirmed by testing on my vm. Before the script added to backup.pl a restore of older ovpnconfig ended up not showing any icons or status elements. With the script in backup.pl confirmed that the restored ovpnconfig showed up in the WUI page correctly with the right icons and with the status elements correctly displayed. Tested-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/backup/backup.pl | 24 ++++++++++++++++++++++ config/kernel/kernel.config.aarch64-ipfire | 7 +++---- config/kernel/kernel.config.x86_64-ipfire | 3 +-- .../{oldcore/114 => core/181}/filelists/apache2 | 0 config/rootfiles/core/181/filelists/files | 1 + config/rootfiles/core/181/update.sh | 1 + config/rootfiles/packages/x86_64/samba | 1 - doc/language_issues.en | 4 ++-- doc/language_issues.es | 2 +- doc/language_issues.fr | 2 +- doc/language_issues.it | 2 +- doc/language_issues.nl | 3 +-- doc/language_issues.pl | 2 +- doc/language_issues.ru | 2 +- doc/language_issues.tr | 2 +- doc/language_missings | 16 +++++++-------- langs/en/cgi-bin/en.pl | 2 +- lfs/apache2 | 4 ++-- lfs/samba | 6 +++--- lfs/suricata | 4 ++-- 20 files changed, 54 insertions(+), 34 deletions(-) copy config/rootfiles/{oldcore/114 => core/181}/filelists/apache2 (100%) Difference in files: diff --git a/config/backup/backup.pl b/config/backup/backup.pl index 8d990c0f1..75a0e4f60 100644 --- a/config/backup/backup.pl +++ b/config/backup/backup.pl @@ -205,6 +205,30 @@ restore_backup() { done fi + #Update ovpnconfig to include pass or no-pass for old backup versions missing the entry + # Check if ovpnconfig exists and is not empty + if [ -s /var/ipfire/ovpn/ovpnconfig ]; then + # Add blank line at top of ovpnconfig otherwise the first roadwarrior entry is treated like a blank line and missed out from update + awk 'NR==1{print ""}1' /var/ipfire/ovpn/ovpnconfig > /var/ipfire/ovpn/tmp_file && mv /var/ipfire/ovpn/tmp_file /var/ipfire/ovpn/ovpnconfig + # Make all N2N connections 'no-pass' since they do not use encryption + awk '{FS=OFS=","} {if($5=="net") {$43="no-pass"; print $0}}' /var/ipfire/ovpn/ovpnconfig >> /var/ipfire/ovpn/ovpnconfig.new + # Evaluate roadwarrior connection names for *.p12 files + for y in $(awk -F',' '/host/ { print $3 }' /var/ipfire/ovpn/ovpnconfig); do + # Sort all unencrypted roadwarriors out and set 'no-pass' in [43] index + if [[ -n $(openssl pkcs12 -info -in /var/ipfire/ovpn/certs/${y}.p12 -noout -password pass:'' 2>&1 | grep 'Encrypted data') ]]; then + awk -v var="$y" '{FS=OFS=","} {if($3==var) {$43="no-pass"; print $0}}' /var/ipfire/ovpn/ovpnconfig >> /var/ipfire/ovpn/ovpnconfig.new + fi + # Sort all encrypted roadwarriors out and set 'pass' in [43] index + if [[ -n $(openssl pkcs12 -info -in /var/ipfire/ovpn/certs/${y}.p12 -noout -password pass:'' 2>&1 | grep 'verify error') ]]; then + awk -v var="$y" '{FS=OFS=","} {if($3==var) {$43="pass"; print $0}}' /var/ipfire/ovpn/ovpnconfig >> /var/ipfire/ovpn/ovpnconfig.new + fi + done + fi + # Replace existing ovpnconfig with updated index + mv /var/ipfire/ovpn/ovpnconfig.new /var/ipfire/ovpn/ovpnconfig + # Set correct ownership + chown nobody:nobody /var/ipfire/ovpn/ovpnconfig + return 0 } diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire index c69c13e71..6dc9d7d42 100644 --- a/config/kernel/kernel.config.aarch64-ipfire +++ b/config/kernel/kernel.config.aarch64-ipfire @@ -229,7 +229,7 @@ CONFIG_TIMERFD=y CONFIG_EVENTFD=y CONFIG_SHMEM=y CONFIG_AIO=y -CONFIG_IO_URING=y +# CONFIG_IO_URING is not set CONFIG_ADVISE_SYSCALLS=y CONFIG_MEMBARRIER=y CONFIG_KALLSYMS=y @@ -7187,9 +7187,9 @@ CONFIG_IOMMU_IO_PGTABLE_LPAE=y # CONFIG_IOMMU_IO_PGTABLE_DART is not set # end of Generic IOMMU Pagetable Support -# CONFIG_IOMMU_DEFAULT_DMA_STRICT is not set +CONFIG_IOMMU_DEFAULT_DMA_STRICT=y # CONFIG_IOMMU_DEFAULT_DMA_LAZY is not set -CONFIG_IOMMU_DEFAULT_PASSTHROUGH=y +# CONFIG_IOMMU_DEFAULT_PASSTHROUGH is not set CONFIG_OF_IOMMU=y CONFIG_IOMMU_DMA=y CONFIG_ROCKCHIP_IOMMU=y @@ -7821,7 +7821,6 @@ CONFIG_NLS_MAC_TURKISH=m CONFIG_NLS_UTF8=m # CONFIG_DLM is not set # CONFIG_UNICODE is not set -CONFIG_IO_WQ=y # end of File systems # diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index da8dcad00..3195b0c42 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -249,7 +249,7 @@ CONFIG_TIMERFD=y CONFIG_EVENTFD=y CONFIG_SHMEM=y CONFIG_AIO=y -CONFIG_IO_URING=y +# CONFIG_IO_URING is not set CONFIG_ADVISE_SYSCALLS=y CONFIG_MEMBARRIER=y CONFIG_KALLSYMS=y @@ -7041,7 +7041,6 @@ CONFIG_DLM=m # CONFIG_DLM_DEPRECATED_API is not set # CONFIG_DLM_DEBUG is not set # CONFIG_UNICODE is not set -CONFIG_IO_WQ=y # end of File systems # diff --git a/config/rootfiles/core/181/filelists/apache2 b/config/rootfiles/core/181/filelists/apache2 new file mode 120000 index 000000000..eef95efa7 --- /dev/null +++ b/config/rootfiles/core/181/filelists/apache2 @@ -0,0 +1 @@ +../../../common/apache2 \ No newline at end of file diff --git a/config/rootfiles/core/181/filelists/files b/config/rootfiles/core/181/filelists/files index 4e8d58659..4bed8098d 100644 --- a/config/rootfiles/core/181/filelists/files +++ b/config/rootfiles/core/181/filelists/files @@ -3,3 +3,4 @@ srv/web/ipfire/cgi-bin/ovpnmain.cgi srv/web/ipfire/cgi-bin/urlfilter.cgi srv/web/ipfire/html/images/openvpn_encrypted.png usr/local/bin/urlfilterctrl +var/ipfire/backup/bin/backup.pl diff --git a/config/rootfiles/core/181/update.sh b/config/rootfiles/core/181/update.sh index 59cfa650d..ee7cc92bc 100644 --- a/config/rootfiles/core/181/update.sh +++ b/config/rootfiles/core/181/update.sh @@ -102,6 +102,7 @@ ldconfig # Start services telinit u /etc/init.d/udev restart +/etc/init.d/apache restart # Rebuild initial ramdisks dracut --regenerate-all --force diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba index 4e5cee3a8..7a44b9cdb 100644 --- a/config/rootfiles/packages/x86_64/samba +++ b/config/rootfiles/packages/x86_64/samba @@ -923,7 +923,6 @@ usr/libexec/samba/rpcd_epmapper usr/libexec/samba/rpcd_fsrvp usr/libexec/samba/rpcd_lsad usr/libexec/samba/rpcd_mdssvc -usr/libexec/samba/rpcd_rpcecho usr/libexec/samba/rpcd_spoolss usr/libexec/samba/rpcd_winreg usr/libexec/samba/samba-bgqd diff --git a/doc/language_issues.en b/doc/language_issues.en index 70eb9fbe8..c9d1117ef 100644 --- a/doc/language_issues.en +++ b/doc/language_issues.en @@ -617,7 +617,7 @@ WARNING: untranslated string: disk access = Disk Access WARNING: untranslated string: disk usage = Disk usage WARNING: untranslated string: display = Display WARNING: untranslated string: display hostname in window title = Display hostname in window title -WARNING: untranslated string: dl client arch = Download Client Package (zip) +WARNING: untranslated string: dl client arch = Download Encrypted Client Package (zip) WARNING: untranslated string: dl client arch insecure = Download insecure Client Package (zip) WARNING: untranslated string: dmz = DMZ WARNING: untranslated string: dnat address = Firewall Interface @@ -752,7 +752,7 @@ WARNING: untranslated string: exclude logfiles = Exclude logfiles WARNING: untranslated string: expires = Expires WARNING: untranslated string: export = Export WARNING: untranslated string: external aliases configuration = External aliases configuration -WARNING: untranslated string: extrahd because it is outside the allowed mount path = unknown string +WARNING: untranslated string: extrahd because it is outside the allowed mount path = , because it is outside the allowed mount path WARNING: untranslated string: extrahd because there is already a device mounted = , because there is already a device mounted WARNING: untranslated string: extrahd cant umount = Can't umount WARNING: untranslated string: extrahd detected drives = detected drives diff --git a/doc/language_issues.es b/doc/language_issues.es index 45ffdf5d7..8bb0b56fb 100644 --- a/doc/language_issues.es +++ b/doc/language_issues.es @@ -952,7 +952,7 @@ WARNING: untranslated string: downfall gather data sampling = Downfall/Gather Da WARNING: untranslated string: enable disable client = unknown string WARNING: untranslated string: enable disable dyndns = unknown string WARNING: untranslated string: error message = unknown string -WARNING: untranslated string: extrahd because it is outside the allowed mount path = unknown string +WARNING: untranslated string: extrahd because it is outside the allowed mount path = , because it is outside the allowed mount path WARNING: untranslated string: extrahd mounted = Mounted WARNING: untranslated string: extrahd no mount point given = No mount point given WARNING: untranslated string: extrahd not configured = Not configured diff --git a/doc/language_issues.fr b/doc/language_issues.fr index cacfb1ec6..6805c1eb9 100644 --- a/doc/language_issues.fr +++ b/doc/language_issues.fr @@ -911,7 +911,7 @@ WARNING: untranslated string: downfall gather data sampling = Downfall/Gather Da WARNING: untranslated string: enable disable client = unknown string WARNING: untranslated string: enable disable dyndns = unknown string WARNING: untranslated string: error message = unknown string -WARNING: untranslated string: extrahd because it is outside the allowed mount path = unknown string +WARNING: untranslated string: extrahd because it is outside the allowed mount path = , because it is outside the allowed mount path WARNING: untranslated string: extrahd mounted = Mounted WARNING: untranslated string: extrahd no mount point given = No mount point given WARNING: untranslated string: extrahd not configured = Not configured diff --git a/doc/language_issues.it b/doc/language_issues.it index 68ff12c86..bb1d5db96 100644 --- a/doc/language_issues.it +++ b/doc/language_issues.it @@ -1004,7 +1004,7 @@ WARNING: untranslated string: eol architecture warning = You are running an arch WARNING: untranslated string: error = Error WARNING: untranslated string: error message = unknown string WARNING: untranslated string: error the to date has to be later than the from date = The to date has to be later than the from date! -WARNING: untranslated string: extrahd because it is outside the allowed mount path = unknown string +WARNING: untranslated string: extrahd because it is outside the allowed mount path = , because it is outside the allowed mount path WARNING: untranslated string: extrahd mounted = Mounted WARNING: untranslated string: extrahd no mount point given = No mount point given WARNING: untranslated string: extrahd not configured = Not configured diff --git a/doc/language_issues.nl b/doc/language_issues.nl index ea0abc74c..b85619977 100644 --- a/doc/language_issues.nl +++ b/doc/language_issues.nl @@ -953,7 +953,6 @@ WARNING: untranslated string: dhcp fixed ip address in dynamic range = Fixed IP WARNING: untranslated string: dhcp make fixed lease = Add to fix leases WARNING: untranslated string: disable = Disable WARNING: untranslated string: disconnected = Disconnected -WARNING: untranslated string: dl client arch insecure = Download insecure Client Package (zip) WARNING: untranslated string: dns check servers = Check DNS Servers WARNING: untranslated string: dns configuration = DNS Configuration WARNING: untranslated string: dns enable safe-search = Enable Safe Search @@ -1010,7 +1009,7 @@ WARNING: untranslated string: eol architecture warning = You are running an arch WARNING: untranslated string: error = Error WARNING: untranslated string: error message = unknown string WARNING: untranslated string: error the to date has to be later than the from date = The to date has to be later than the from date! -WARNING: untranslated string: extrahd because it is outside the allowed mount path = unknown string +WARNING: untranslated string: extrahd because it is outside the allowed mount path = , because it is outside the allowed mount path WARNING: untranslated string: extrahd mounted = Mounted WARNING: untranslated string: extrahd no mount point given = No mount point given WARNING: untranslated string: extrahd not configured = Not configured diff --git a/doc/language_issues.pl b/doc/language_issues.pl index 893f73211..d88e3fb8e 100644 --- a/doc/language_issues.pl +++ b/doc/language_issues.pl @@ -997,7 +997,7 @@ WARNING: untranslated string: eol architecture warning = You are running an arch WARNING: untranslated string: error = Error WARNING: untranslated string: error message = unknown string WARNING: untranslated string: error the to date has to be later than the from date = The to date has to be later than the from date! -WARNING: untranslated string: extrahd because it is outside the allowed mount path = unknown string +WARNING: untranslated string: extrahd because it is outside the allowed mount path = , because it is outside the allowed mount path WARNING: untranslated string: extrahd because there is already a device mounted = , because there is already a device mounted WARNING: untranslated string: extrahd cant umount = Can't umount WARNING: untranslated string: extrahd install or load driver = If your device isn't listed here, you need to install or load the driver.<br />If you can see your device but no partitions you have to create them first. diff --git a/doc/language_issues.ru b/doc/language_issues.ru index 64c9b5095..22e06460c 100644 --- a/doc/language_issues.ru +++ b/doc/language_issues.ru @@ -994,7 +994,7 @@ WARNING: untranslated string: eol architecture warning = You are running an arch WARNING: untranslated string: error = Error WARNING: untranslated string: error message = unknown string WARNING: untranslated string: error the to date has to be later than the from date = The to date has to be later than the from date! -WARNING: untranslated string: extrahd because it is outside the allowed mount path = unknown string +WARNING: untranslated string: extrahd because it is outside the allowed mount path = , because it is outside the allowed mount path WARNING: untranslated string: extrahd because there is already a device mounted = , because there is already a device mounted WARNING: untranslated string: extrahd cant umount = Can't umount WARNING: untranslated string: extrahd install or load driver = If your device isn't listed here, you need to install or load the driver.<br />If you can see your device but no partitions you have to create them first. diff --git a/doc/language_issues.tr b/doc/language_issues.tr index eadbd33c7..0d9514083 100644 --- a/doc/language_issues.tr +++ b/doc/language_issues.tr @@ -967,7 +967,7 @@ WARNING: untranslated string: eol architecture warning = You are running an arch WARNING: untranslated string: error = Error WARNING: untranslated string: error message = unknown string WARNING: untranslated string: error the to date has to be later than the from date = The to date has to be later than the from date! -WARNING: untranslated string: extrahd because it is outside the allowed mount path = unknown string +WARNING: untranslated string: extrahd because it is outside the allowed mount path = , because it is outside the allowed mount path WARNING: untranslated string: extrahd mounted = Mounted WARNING: untranslated string: extrahd no mount point given = No mount point given WARNING: untranslated string: extrahd not configured = Not configured diff --git a/doc/language_missings b/doc/language_missings index 6eb960f62..4d8f4a2a9 100644 --- a/doc/language_missings +++ b/doc/language_missings @@ -55,7 +55,6 @@ < download apple profile < enable < error the to date has to be later than the from date -< extrahd because it it outside the allowed mount path < g.dtm < g.lite < ids automatic rules update @@ -108,7 +107,7 @@ < dhcp fixed ip address in dynamic range < dns servers < downfall gather data sampling -< extrahd because it it outside the allowed mount path +< extrahd because it is outside the allowed mount path < extrahd mounted < extrahd no mount point given < extrahd not configured @@ -131,7 +130,7 @@ < bewan adsl pci st < bewan adsl usb < downfall gather data sampling -< extrahd because it it outside the allowed mount path +< extrahd because it is outside the allowed mount path < extrahd mounted < extrahd no mount point given < extrahd not configured @@ -327,7 +326,7 @@ < eol architecture warning < error < error the to date has to be later than the from date -< extrahd because it it outside the allowed mount path +< extrahd because it is outside the allowed mount path < extrahd mounted < extrahd no mount point given < extrahd not configured @@ -785,7 +784,6 @@ < disable < Disabled < disconnected -< dl client arch insecure < dns check servers < dns configuration < dns could not add server @@ -847,7 +845,7 @@ < eol architecture warning < error < error the to date has to be later than the from date -< extrahd because it it outside the allowed mount path +< extrahd because it is outside the allowed mount path < extrahd mounted < extrahd no mount point given < extrahd not configured @@ -1474,7 +1472,7 @@ < eol architecture warning < error < error the to date has to be later than the from date -< extrahd because it it outside the allowed mount path +< extrahd because it is outside the allowed mount path < extrahd because there is already a device mounted < extrahd cant umount < extrahd install or load driver @@ -2464,7 +2462,7 @@ < eol architecture warning < error < error the to date has to be later than the from date -< extrahd because it it outside the allowed mount path +< extrahd because it is outside the allowed mount path < extrahd because there is already a device mounted < extrahd cant umount < extrahd install or load driver @@ -3269,7 +3267,7 @@ < eol architecture warning < error < error the to date has to be later than the from date -< extrahd because it it outside the allowed mount path +< extrahd because it is outside the allowed mount path < extrahd mounted < extrahd no mount point given < extrahd not configured diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index 7bbf7cd32..02cf1bf4b 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -1073,7 +1073,7 @@ 'external access rule removed' => ' External access rule removed; restarting access controller', 'external aliases configuration' => 'External aliases configuration', 'extrahd' => 'ExtraHD', -'extrahd because it it outside the allowed mount path' => ', because it is outside the allowed mount path', +'extrahd because it is outside the allowed mount path' => ', because it is outside the allowed mount path', 'extrahd because there is already a device mounted' => ', because there is already a device mounted', 'extrahd cant umount' => 'Can\'t umount', 'extrahd detected drives' => 'detected drives', diff --git a/lfs/apache2 b/lfs/apache2 index 80462969b..9a0ad38a9 100644 --- a/lfs/apache2 +++ b/lfs/apache2 @@ -25,7 +25,7 @@ include Config -VER = 2.4.57 +VER = 2.4.58 THISAPP = httpd-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b33b51a741acd308ef4d4bdd2444d43eca9db68676fa67ec907eeea7384554f3f9a5608fc43dcf5819498264bbe36f176f30be9809474307642b70720036b88c +$(DL_FILE)_BLAKE2 = 2105b8fada99f1dda55201ed89ed5326f0edb078d352cbff44f02cde80d129b65b63e07366a9a744ba474be5687fa8d3d2d8ddc64ac914b47166607f3f4a9de2 install : $(TARGET) diff --git a/lfs/samba b/lfs/samba index 77bb569cd..2f2184ecc 100644 --- a/lfs/samba +++ b/lfs/samba @@ -24,7 +24,7 @@ include Config -VER = 4.19.0 +VER = 4.19.2 SUMMARY = A SMB/CIFS File, Print, and Authentication Server THISAPP = samba-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = samba -PAK_VER = 96 +PAK_VER = 97 DEPS = avahi cups perl-Parse-Yapp perl-JSON @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 4e0db41d7d06e195cee994c5ec02a37892c1a7dd99ea9defb845fe2fbf96446846c469007218b6b0d6077c0886f0d08b2a4376acba1ed455b641daacd9018f12 +$(DL_FILE)_BLAKE2 = cb3747f1be6e712c6e68f3720e68aee7db2e4dcc48a9210d002337d6690ed8b027919f333dc4a7c1e74b716ebceeff1d8071463899513edfe51da967d71d8148 install : $(TARGET) diff --git a/lfs/suricata b/lfs/suricata index 5e16d1ac0..2e71ba49d 100644 --- a/lfs/suricata +++ b/lfs/suricata @@ -24,7 +24,7 @@ include Config -VER = 6.0.14 +VER = 6.0.15 THISAPP = suricata-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 7e14f16f04bdd632d26f4249c328ea918cc4edf96cc07be6a92722d4457353a36662e0041fd2b9669a104deaa010a093cb8195eb2604ed8145ab38f93a8b7124 +$(DL_FILE)_BLAKE2 = cf5c2d5760e52f0b4eb0276feb89e056d74ef5478e3158a047fbdec14022aa6e0ba986b7ee9f9ec49e2ebb3f206c7d71ad8ce8dc4eb9a6b48b4ba38c96c2f1c6 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 6c829050c8c758e554e584ecf6de41596fad2a4b
by Michael Tremer 13 Oct '23

13 Oct '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 6c829050c8c758e554e584ecf6de41596fad2a4b (commit) via 554e339b9e587a21b61bcea2910ee5af3df75d89 (commit) via 41ac2cd531d7d022b9ad3da625799dc573d5258b (commit) from 82551c04d2d054a1a067304faa2286dab1c80d5e (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 6c829050c8c758e554e584ecf6de41596fad2a4b Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Fri Oct 13 04:40:33 2023 +0000 dnsdist: disabled on riscv64 again dnsdist build on my builder fine but it fails on the buildserver via qemu-user. Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 554e339b9e587a21b61bcea2910ee5af3df75d89 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Fri Oct 13 04:37:42 2023 +0000 kernel: update to 6.1.57 Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 41ac2cd531d7d022b9ad3da625799dc573d5258b Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Sun Oct 8 16:26:00 2023 +0000 Tor: Update to 0.4.8.7 Changes in version 0.4.8.7 - 2023-09-25 This version fixes a single major bug in the Conflux subsystem on the client side. See below for more information. The upcoming Tor Browser 13 stable will pick this up. o Major bugfixes (conflux): - Fix an issue that prevented us from pre-building more conflux sets after existing sets had been used. Fixes bug 40862; bugfix on 0.4.8.1-alpha. o Minor features (fallbackdir): - Regenerate fallback directories generated on September 25, 2023. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2023/09/25. Changes in version 0.4.8.6 - 2023-09-18 This version contains an important fix for onion service regarding congestion control and its reliability. Apart from that, uneeded BUG warnings have been suppressed especially about a compression bomb seen on relays. We strongly recommend, in particular onion service operators, to upgrade as soon as possible to this latest stable. o Major bugfixes (onion service): - Fix a reliability issue where services were expiring their introduction points every consensus update. This caused connectivity issues for clients caching the old descriptor and intro points. Bug reported and fixed by gitlab user @hyunsoo.kim676. Fixes bug 40858; bugfix on 0.4.7.5-alpha. o Minor features (debugging, compression): - Log the input and output buffer sizes when we detect a potential compression bomb. Diagnostic for ticket 40739. o Minor features (fallbackdir): - Regenerate fallback directories generated on September 18, 2023. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2023/09/18. o Minor bugfix (defensive programming): - Disable multiple BUG warnings of a missing relay identity key when starting an instance of Tor compiled without relay support. Fixes bug 40848; bugfix on 0.4.3.1-alpha. o Minor bugfixes (bridge authority): - When reporting a pseudo-networkstatus as a bridge authority, or answering "ns/purpose/*" controller requests, include accurate published-on dates from our list of router descriptors. Fixes bug 40855; bugfix on 0.4.8.1-alpha. o Minor bugfixes (compression, zstd): - Use less frightening language and lower the log-level of our run- time ABI compatibility check message in our Zstd compression subsystem. Fixes bug 40815; bugfix on 0.4.3.1-alpha. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/kernel/kernel.config.aarch64-ipfire | 3 ++- config/kernel/kernel.config.riscv64-ipfire | 2 +- config/kernel/kernel.config.x86_64-ipfire | 2 +- config/rootfiles/common/aarch64/linux | 1 + lfs/dnsdist | 4 ++-- lfs/linux | 4 ++-- lfs/tor | 6 +++--- 7 files changed, 12 insertions(+), 10 deletions(-) Difference in files: diff --git a/config/kernel/kernel.config.aarch64-ipfire b/config/kernel/kernel.config.aarch64-ipfire index 278b51e05..c69c13e71 100644 --- a/config/kernel/kernel.config.aarch64-ipfire +++ b/config/kernel/kernel.config.aarch64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/arm64 6.1.56-ipfire Kernel Configuration +# Linux/arm64 6.1.57-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y @@ -368,6 +368,7 @@ CONFIG_ARM64_ERRATUM_2054223=y CONFIG_ARM64_ERRATUM_2067961=y CONFIG_ARM64_ERRATUM_2441009=y CONFIG_ARM64_ERRATUM_2457168=y +CONFIG_ARM64_ERRATUM_2966298=y CONFIG_CAVIUM_ERRATUM_22375=y CONFIG_CAVIUM_ERRATUM_23154=y CONFIG_CAVIUM_ERRATUM_27456=y diff --git a/config/kernel/kernel.config.riscv64-ipfire b/config/kernel/kernel.config.riscv64-ipfire index 26ab45dcd..aafcbba7b 100644 --- a/config/kernel/kernel.config.riscv64-ipfire +++ b/config/kernel/kernel.config.riscv64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/riscv 6.1.56-ipfire Kernel Configuration +# Linux/riscv 6.1.57-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/config/kernel/kernel.config.x86_64-ipfire b/config/kernel/kernel.config.x86_64-ipfire index 893a3d10a..da8dcad00 100644 --- a/config/kernel/kernel.config.x86_64-ipfire +++ b/config/kernel/kernel.config.x86_64-ipfire @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 6.1.56-ipfire Kernel Configuration +# Linux/x86 6.1.57-ipfire Kernel Configuration # CONFIG_CC_VERSION_TEXT="gcc (GCC) 13.2.0" CONFIG_CC_IS_GCC=y diff --git a/config/rootfiles/common/aarch64/linux b/config/rootfiles/common/aarch64/linux index 569f6b834..7c96e2b8d 100644 --- a/config/rootfiles/common/aarch64/linux +++ b/config/rootfiles/common/aarch64/linux @@ -6899,6 +6899,7 @@ etc/modprobe.d/ipv6.conf #lib/modules/KVER-ipfire/build/include/config/ARM64_ERRATUM_2441009 #lib/modules/KVER-ipfire/build/include/config/ARM64_ERRATUM_2457168 #lib/modules/KVER-ipfire/build/include/config/ARM64_ERRATUM_2658417 +#lib/modules/KVER-ipfire/build/include/config/ARM64_ERRATUM_2966298 #lib/modules/KVER-ipfire/build/include/config/ARM64_ERRATUM_819472 #lib/modules/KVER-ipfire/build/include/config/ARM64_ERRATUM_824069 #lib/modules/KVER-ipfire/build/include/config/ARM64_ERRATUM_826319 diff --git a/lfs/dnsdist b/lfs/dnsdist index 3fbdcf505..1608d5673 100644 --- a/lfs/dnsdist +++ b/lfs/dnsdist @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -36,7 +36,7 @@ TARGET = $(DIR_INFO)/$(THISAPP) PROG = dnsdist PAK_VER = 16 -# SUP_ARCH = x86_64 aarch64 +SUP_ARCH = x86_64 aarch64 DEPS = diff --git a/lfs/linux b/lfs/linux index 4dcac1920..18e55f814 100644 --- a/lfs/linux +++ b/lfs/linux @@ -24,7 +24,7 @@ include Config -VER = 6.1.56 +VER = 6.1.57 ARM_PATCHES = 6.1.y-ipfire2 THISAPP = linux-$(VER) @@ -75,7 +75,7 @@ objects = \ $(DL_FILE) = $(URL_IPFIRE)/$(DL_FILE) arm-multi-patches-$(ARM_PATCHES).patch.xz = $(URL_IPFIRE)/arm-multi-patches-$(ARM_PATCHES).patch.xz -$(DL_FILE)_BLAKE2 = c70da3ecb8f849890fe2b5bf2874a2dd4f468508b508aaf1e7e6773c63845e782e2cf5285e0e7e62ce25e7a4485e1cf033122c4d6fbff0e83b92e172423e7a5c +$(DL_FILE)_BLAKE2 = 9fd3b4ffdc392d2bedf1b9366fdd773e006c7148756420ae621285874bb2ec9461199871579ba713ce5df1831ace7392969a97f2d5b90b08695f632b97655f9d arm-multi-patches-$(ARM_PATCHES).patch.xz_BLAKE2 = 7afc460562fb24bcd75784fc79de768f9b60780aedd88d1a847927169e31920bbb475b1ac1466c4a224a7876d16bd8d465b96202de12b74f6e2ccbfcec731ad3 install : $(TARGET) diff --git a/lfs/tor b/lfs/tor index d7be53a1c..7a9ca4128 100644 --- a/lfs/tor +++ b/lfs/tor @@ -26,7 +26,7 @@ include Config SUMMARY = Anonymizing overlay network for TCP (The onion router) -VER = 0.4.8.5 +VER = 0.4.8.7 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 80 +PAK_VER = 81 DEPS = libseccomp @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 71a4807284ecefc4a18d6bc15ce798844304f860338b786590779fb171f851d630e8af3114dbc84fe854561e0085dcb147b4dd87787988a8fb6c3628bfcc8175 +$(DL_FILE)_BLAKE2 = 4d0cde752a729c64e380663e4438398fe768a8657e9aa3246bdf0ec9a4b4e01e277cb594ae0cb44cc66ea8c6080f2e58c6daf1bf01dc51b678d228e8e38fc971 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 82551c04d2d054a1a067304faa2286dab1c80d5e
by Michael Tremer 11 Oct '23

11 Oct '23

1 0

[git.ipfire.org] IPFire 2.x development tree tag, v2.27-core180, created. a85e9d4eb1c5a9d5b9bac3d90f59a321e4151871
by Michael Tremer 11 Oct '23

11 Oct '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The tag, v2.27-core180 has been created at a85e9d4eb1c5a9d5b9bac3d90f59a321e4151871 (commit) - Log ----------------------------------------------------------------- commit a85e9d4eb1c5a9d5b9bac3d90f59a321e4151871 Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Wed Oct 11 07:48:53 2023 +0000 core180: Ship cURL Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- hooks/post-receive -- IPFire 2.x development tree

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM October 2023