IPFire-SCM November 2023

ipfire-scm@lists.ipfire.org

1 participants
28 discussions

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. e59bd86204af2ec28f543ad7b2f0894db67e4b99
by Peter Müller 24 Nov '23

24 Nov '23

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 5868715e47a4b9a444ee8833d0c698e1486f8046
by Peter Müller 24 Nov '23

24 Nov '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 5868715e47a4b9a444ee8833d0c698e1486f8046 (commit) from 35406f0101abb63be458a7ae85334a7e03b71c31 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 5868715e47a4b9a444ee8833d0c698e1486f8046 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Thu Nov 23 13:19:22 2023 +0100 sqlite: Update to version 3440100 - Update from version 340000 to 340100 - Update of rootfile not required - Changelog 3.44.1 Change the CLI so that it uses UTF-16 for console I/O on Windows. This enables proper display of unicode text on old Windows7 machines. Other obscure bug fixes. - more details on these can be found from the list of commits https://www.sqlite.org/src/timeline?n=100&y=ci Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/sqlite | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) Difference in files: diff --git a/lfs/sqlite b/lfs/sqlite index 4d44d6fda..a03731a10 100644 --- a/lfs/sqlite +++ b/lfs/sqlite @@ -24,7 +24,7 @@ include Config -VER = 3440000 +VER = 3440100 THISAPP = sqlite-autoconf-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = adadcf5b17aec2d6727536d9c388b76ceacfb73d51c905ed906cc09a48806091624f9bb688de8b995e09b7cad97a21deb1ac91a17c4e60f658870d4ae85d5358 +$(DL_FILE)_BLAKE2 = 8b0aa4b2fd36099e68502705d0187cf30b8755f61577942e9b8709d3ca3e56dfd64cf256d0b70a75e987f2894076cb32c170dd52cd278579a646b06b90140e9d install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 35406f0101abb63be458a7ae85334a7e03b71c31
by Peter Müller 24 Nov '23

24 Nov '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 35406f0101abb63be458a7ae85334a7e03b71c31 (commit) via 166b3cf2284a0480e7cdf86e005bb9b56ec137b6 (commit) from 4bc2da437cc3900338c926fea0d9cb28d52aefb0 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 35406f0101abb63be458a7ae85334a7e03b71c31 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Fri Nov 24 12:37:24 2023 +0000 Core Update 182: Ship intel-microcode The initial ramdisks are already rebuilt during the update at this stage. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 166b3cf2284a0480e7cdf86e005bb9b56ec137b6 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Fri Nov 24 12:44:03 2023 +0100 intel-microcode: Update to version 20231114 - Update from version 20230808 to 20231114 - Update of rootfile - Changelog details can be found in the releasenote.md file from the source tarball Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/x86_64/intel-microcode | 3 --- .../{oldcore/121 => core/182}/filelists/x86_64/intel-microcode | 0 lfs/intel-microcode | 4 ++-- 3 files changed, 2 insertions(+), 5 deletions(-) copy config/rootfiles/{oldcore/121 => core/182}/filelists/x86_64/intel-microcode (100%) Difference in files: diff --git a/config/rootfiles/common/x86_64/intel-microcode b/config/rootfiles/common/x86_64/intel-microcode index 3241092f3..7f9632973 100644 --- a/config/rootfiles/common/x86_64/intel-microcode +++ b/config/rootfiles/common/x86_64/intel-microcode @@ -119,11 +119,8 @@ lib/firmware/intel-ucode/06-a6-01 lib/firmware/intel-ucode/06-a7-01 lib/firmware/intel-ucode/06-b7-01 lib/firmware/intel-ucode/06-ba-02 -lib/firmware/intel-ucode/06-ba-02_DUPLICATE lib/firmware/intel-ucode/06-ba-03 -lib/firmware/intel-ucode/06-ba-03_DUPLICATE lib/firmware/intel-ucode/06-be-00 -lib/firmware/intel-ucode/06-be-00_DUPLICATE lib/firmware/intel-ucode/06-bf-02 lib/firmware/intel-ucode/06-bf-05 lib/firmware/intel-ucode/0f-00-07 diff --git a/config/rootfiles/core/182/filelists/x86_64/intel-microcode b/config/rootfiles/core/182/filelists/x86_64/intel-microcode new file mode 120000 index 000000000..d5ac074e2 --- /dev/null +++ b/config/rootfiles/core/182/filelists/x86_64/intel-microcode @@ -0,0 +1 @@ +../../../../common/x86_64/intel-microcode \ No newline at end of file diff --git a/lfs/intel-microcode b/lfs/intel-microcode index 4bb322ac5..5e262dda3 100644 --- a/lfs/intel-microcode +++ b/lfs/intel-microcode @@ -24,7 +24,7 @@ include Config -VER = 20230808 +VER = 20231114 THISAPP = Intel-Linux-Processor-Microcode-Data-Files-microcode-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -41,7 +41,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 400ba9b91a7048c780377d49ff6cb00458c60a9d53c2e5cef1eb99170ca8f0cad66336841d14869bd42d182f7d8df27a2fa9cb982b0df0c5fc9f62325b6acb69 +$(DL_FILE)_BLAKE2 = e6084c92e9c3cc627af25a7f2f7fb26230b6ed117ddc197d19991df2816334132af92925f23af829bad005c32d0bd3afc362055ef223a599799d846216cf7612 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 4bc2da437cc3900338c926fea0d9cb28d52aefb0
by Arne Fitzenreiter 23 Nov '23

23 Nov '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 4bc2da437cc3900338c926fea0d9cb28d52aefb0 (commit) from bef1bf4526e15379b2c308c938e05f83181d54e3 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 4bc2da437cc3900338c926fea0d9cb28d52aefb0 Author: Arne Fitzenreiter <arne_f(a)ipfire.org> Date: Thu Nov 23 07:06:36 2023 +0100 Revert "update.sh: Remove superflous KVER variable" the "xxxKVERxxx" placeholder is replaced by the buildsystem with the current build kernel version. KVER is used a few lines later to build the arm initrd so this is needed. This reverts commit bef1bf4526e15379b2c308c938e05f83181d54e3. ----------------------------------------------------------------------- Summary of changes: config/rootfiles/core/182/update.sh | 2 ++ 1 file changed, 2 insertions(+) Difference in files: diff --git a/config/rootfiles/core/182/update.sh b/config/rootfiles/core/182/update.sh index 4114c5f0f..db70446c3 100644 --- a/config/rootfiles/core/182/update.sh +++ b/config/rootfiles/core/182/update.sh @@ -37,6 +37,8 @@ done /etc/rc.d/init.d/unbound stop /etc/rc.d/init.d/sshd stop +KVER="xxxKVERxxx" + # Backup uEnv.txt if exist if [ -e /boot/uEnv.txt ]; then cp -vf /boot/uEnv.txt /boot/uEnv.txt.org hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. bef1bf4526e15379b2c308c938e05f83181d54e3
by Peter Müller 22 Nov '23

22 Nov '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via bef1bf4526e15379b2c308c938e05f83181d54e3 (commit) via 62f2f2ab9da638756d0a13ffe1605d6ef414c438 (commit) from 215a640e6f72bdaa5c07d3bbff8079015e70fba6 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit bef1bf4526e15379b2c308c938e05f83181d54e3 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 21:52:59 2023 +0000 update.sh: Remove superflous KVER variable Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 62f2f2ab9da638756d0a13ffe1605d6ef414c438 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 21:50:15 2023 +0000 Core Update 172: Ship u-boot and regenerate all initrds This ensures the newly compiled mkimage is executed on the system. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: .../159 => core/182}/filelists/aarch64/u-boot | 0 config/rootfiles/core/182/update.sh | 20 ++++++++++++++++++++ 2 files changed, 20 insertions(+) copy config/rootfiles/{oldcore/159 => core/182}/filelists/aarch64/u-boot (100%) Difference in files: diff --git a/config/rootfiles/core/182/filelists/aarch64/u-boot b/config/rootfiles/core/182/filelists/aarch64/u-boot new file mode 120000 index 000000000..2a16bdbfe --- /dev/null +++ b/config/rootfiles/core/182/filelists/aarch64/u-boot @@ -0,0 +1 @@ +../../../../common/aarch64/u-boot \ No newline at end of file diff --git a/config/rootfiles/core/182/update.sh b/config/rootfiles/core/182/update.sh index b03183e9c..4114c5f0f 100644 --- a/config/rootfiles/core/182/update.sh +++ b/config/rootfiles/core/182/update.sh @@ -37,6 +37,11 @@ done /etc/rc.d/init.d/unbound stop /etc/rc.d/init.d/sshd stop +# Backup uEnv.txt if exist +if [ -e /boot/uEnv.txt ]; then + cp -vf /boot/uEnv.txt /boot/uEnv.txt.org +fi + # Extract files extract_files @@ -83,6 +88,21 @@ if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then /etc/rc.d/init.d/ipsec start fi +# Rebuild initial ramdisks +dracut --regenerate-all --force +KVER="xxxKVERxxx" +case "$(uname -m)" in + aarch64) + mkimage -A arm64 -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire + # dont remove initramfs because grub need this to boot. + ;; +esac + +# Call user update script (needed for some ARM boards) +if [ -e /boot/pakfire-kernel-update ]; then + /boot/pakfire-kernel-update ${KVER} +fi + # This update needs a reboot... touch /var/run/need_reboot hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 9446956679a1875597a4d437bbb024afc3010970
by Peter Müller 22 Nov '23

22 Nov '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 9446956679a1875597a4d437bbb024afc3010970 (commit) via 2087214036033f96fcde31c2a6d52530b01160d8 (commit) via fc1ee4e1e2fa23cf22f17ecf9fa305053d7267e2 (commit) via 9052b9f42f67e709176d435bfd8db2e6a0669cf2 (commit) via 3bad7e44dca092b2da902fab9491b87340cafaec (commit) via ad86d8070e2020e5c7d977d8dc0686e3719a7f0b (commit) via 08b61fd75eef5d3e468e88baddf88ac04f2ce801 (commit) via f56b49219369bea92d77ac51cd93521bf4b8ed19 (commit) from 7301d0ca4bcb24011dd7b7350c268e9b7e12635e (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 9446956679a1875597a4d437bbb024afc3010970 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 15:00:00 2023 +0000 Tor: Update to 0.4.8.9 Changes in version 0.4.8.9 - 2023-11-09 This is another security release fixing a high severity bug affecting onion services which is tracked by TROVE-2023-006. We are also releasing a guard major bugfix as well. If you are an onion service operator, we strongly recommend to update as soon as possible. o Major bugfixes (guard usage): - When Tor excluded a guard due to temporary circuit restrictions, it considered *additional* primary guards for potential usage by that circuit. This could result in more than the specified number of guards (currently 2) being used, long-term, by the tor client. This could happen when a Guard was also selected as an Exit node, but it was exacerbated by the Conflux guard restrictions. Both instances have been fixed. Fixes bug 40876; bugfix on 0.3.0.1-alpha. o Major bugfixes (onion service, TROVE-2023-006): - Fix a possible hard assert on a NULL pointer when recording a failed rendezvous circuit on the service side for the MetricsPort. Fixes bug 40883; bugfix on 0.4.8.1-alpha o Minor features (fallbackdir): - Regenerate fallback directories generated on November 09, 2023. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2023/11/09. Changes in version 0.4.8.8 - 2023-11-03 We are releasing today a fix for a high security issue, TROVE-2023-004, that is affecting relays. Also a few minor bugfixes detailed below. Please upgrade as soon as posssible. o Major bugfixes (TROVE-2023-004, relay): - Mitigate an issue when Tor compiled with OpenSSL can crash during handshake with a remote relay. Fixes bug 40874; bugfix on 0.2.7.2-alpha. o Minor features (fallbackdir): - Regenerate fallback directories generated on November 03, 2023. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2023/11/03. o Minor bugfixes (directory authority): - Look at the network parameter "maxunmeasuredbw" with the correct spelling. Fixes bug 40869; bugfix on 0.4.6.1-alpha. o Minor bugfixes (vanguards addon support): - Count the conflux linked cell as valid when it is successfully processed. This will quiet a spurious warn in the vanguards addon. Fixes bug 40878; bugfix on 0.4.8.1-alpha. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 2087214036033f96fcde31c2a6d52530b01160d8 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 16:14:26 2023 +0000 Core Update 182: Ship and restart OpenSSH Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit fc1ee4e1e2fa23cf22f17ecf9fa305053d7267e2 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 15:04:00 2023 +0000 OpenSSH: Update to 9.5p1 Please refer to https://www.openssh.com/releasenotes.html#9.5p1 for the changelog of this version. The patch for fixing zlib version check has now been amended upstream and can therefore be deleted from IPFire 2.x's codebase. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> commit 9052b9f42f67e709176d435bfd8db2e6a0669cf2 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 16:11:32 2023 +0000 Core Update 182: Remove acidentially shipped firmware files Introduced in ee0ee298435ada541e4cfed95cfd38b328a41eca . Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 3bad7e44dca092b2da902fab9491b87340cafaec Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 16:06:55 2023 +0000 Core Update 182: Require a reboot Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit ad86d8070e2020e5c7d977d8dc0686e3719a7f0b Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 16:06:00 2023 +0000 Core Update 182: Ship relevant changes of linux-firmware Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 08b61fd75eef5d3e468e88baddf88ac04f2ce801 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 15:26:28 2023 +0000 linux-firmware: Fix rootfile Cc: Adolf Belka <adolf.belka(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit f56b49219369bea92d77ac51cd93521bf4b8ed19 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Wed Nov 8 22:58:05 2023 +0100 linux-firmware: Updat6e to version 20231030 - Update from version 20230804 to 20231030 - Update of rootfile - process defined by Peter Mueller used on rootfile to identify changes and check if the entries were commented out in previous rootfile. This is second time that I have used this approach so probably still worthwhile for Peter to confirm I got it correct. - Patch for amd family 19h removed as it is now included in the source tarball. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/linux-firmware | 113 ++++- config/rootfiles/core/182/filelists/files | 249 +++++++++++ .../{oldcore/100 => core/182}/filelists/openssh | 0 config/rootfiles/core/182/update.sh | 21 +- lfs/linux-firmware | 5 +- lfs/openssh | 5 +- lfs/tor | 6 +- src/patches/linux-firmware-amd-family-19h.patch | 486 --------------------- ..._version_check_for_1.3_and_future_version.patch | 25 -- 9 files changed, 371 insertions(+), 539 deletions(-) copy config/rootfiles/{oldcore/100 => core/182}/filelists/openssh (100%) delete mode 100644 src/patches/linux-firmware-amd-family-19h.patch delete mode 100644 src/patches/openssh-9.4p1_Fix_zlib_version_check_for_1.3_and_future_version.patch Difference in files: diff --git a/config/rootfiles/common/linux-firmware b/config/rootfiles/common/linux-firmware index ef305ae77..be72f11d2 100644 --- a/config/rootfiles/common/linux-firmware +++ b/config/rootfiles/common/linux-firmware @@ -30,6 +30,7 @@ lib/firmware/amd-ucode/microcode_amd_fam19h.bin lib/firmware/amd/amd_sev_fam17h_model0xh.sbin lib/firmware/amd/amd_sev_fam17h_model3xh.sbin lib/firmware/amd/amd_sev_fam19h_model0xh.sbin +lib/firmware/amd/amd_sev_fam19h_model1xh.sbin #lib/firmware/amdgpu lib/firmware/amdgpu/aldebaran_mec.bin lib/firmware/amdgpu/aldebaran_mec2.bin @@ -585,6 +586,12 @@ lib/firmware/amdgpu/yellow_carp_sdma.bin lib/firmware/amdgpu/yellow_carp_ta.bin lib/firmware/amdgpu/yellow_carp_toc.bin lib/firmware/amdgpu/yellow_carp_vcn.bin +#lib/firmware/amdtee +lib/firmware/amdtee/773bd96f-b83f-4d52-b12dc529b13d8543.bin +lib/firmware/amdtee/amd_pmf_v3.bin +#lib/firmware/amlogic +#lib/firmware/amlogic/bluetooth +#lib/firmware/amlogic/bluetooth/w2_bt_fw_uart.bin #lib/firmware/amphion #lib/firmware/amphion/vpu lib/firmware/amphion/vpu/vpu_fw_imx8_dec.bin @@ -701,7 +708,6 @@ lib/firmware/ath10k/QCA99X0/hw2.0/firmware-5.bin lib/firmware/ath10k/WCN3990/hw1.0 lib/firmware/ath10k/WCN3990/hw1.0/board-2.bin lib/firmware/ath10k/WCN3990/hw1.0/firmware-5.bin -#lib/firmware/ath10k/WCN3990/hw1.0/notice.txt_wlanmdsp lib/firmware/ath10k/WCN3990/hw1.0/wlanmdsp.mbn lib/firmware/ath11k lib/firmware/ath11k/IPQ5018 @@ -930,6 +936,7 @@ lib/firmware/brcm/brcmfmac43430-sdio.friendlyarm,nanopi-r1.txt lib/firmware/brcm/brcmfmac43430-sdio.raspberrypi,3-model-b.txt lib/firmware/brcm/brcmfmac43430-sdio.raspberrypi,model-zero-2-w.txt lib/firmware/brcm/brcmfmac43430-sdio.raspberrypi,model-zero-w.txt +lib/firmware/brcm/brcmfmac43430-sdio.sinovoip,bananapi-m64.txt lib/firmware/brcm/brcmfmac43430-sdio.sinovoip,bpi-m2-plus.txt lib/firmware/brcm/brcmfmac43430-sdio.sinovoip,bpi-m2-ultra.txt lib/firmware/brcm/brcmfmac43430-sdio.sinovoip,bpi-m2-zero.txt @@ -1091,6 +1098,20 @@ lib/firmware/cbfw-3.2.5.1.bin #lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8b92.bin #lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c26.bin #lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c26.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c46.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c46.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c47.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c47.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c48.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c48.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c49.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c49.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c70.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c70.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c71.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c71.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c72.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-cali-103c8c72.wmfw #lib/firmware/cirrus/cs35l41-dsp1-spk-cali-104312af-spkid0-l0.bin #lib/firmware/cirrus/cs35l41-dsp1-spk-cali-104312af-spkid0-r0.bin #lib/firmware/cirrus/cs35l41-dsp1-spk-cali-104312af-spkid1-l0.bin @@ -1358,6 +1379,20 @@ lib/firmware/cbfw-3.2.5.1.bin #lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8b92.wmfw #lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c26.bin #lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c26.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c46.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c46.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c47.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c47.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c48.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c48.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c49.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c49.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c70.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c70.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c71.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c71.wmfw +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c72.bin +#lib/firmware/cirrus/cs35l41-dsp1-spk-prot-103c8c72.wmfw #lib/firmware/cirrus/cs35l41-dsp1-spk-prot-104312af-spkid0-l0.bin #lib/firmware/cirrus/cs35l41-dsp1-spk-prot-104312af-spkid0-r0.bin #lib/firmware/cirrus/cs35l41-dsp1-spk-prot-104312af-spkid1-l0.bin @@ -1547,6 +1582,8 @@ lib/firmware/cbfw-3.2.5.1.bin #lib/firmware/cirrus/cs35l41/v6.63.0/halo_cspl_RAM_revB2_29.65.0.wmfw #lib/firmware/cirrus/cs35l41/v6.78.0 #lib/firmware/cirrus/cs35l41/v6.78.0/halo_cspl_RAM_revB2_29.80.0.wmfw +#lib/firmware/cirrus/cs35l41/v6.83.0 +#lib/firmware/cirrus/cs35l41/v6.83.0/halo_cspl_RAM_revB2_29.85.0.wmfw #lib/firmware/cis lib/firmware/cis/3CCFEM556.cis lib/firmware/cis/3CXEM556.cis @@ -1595,15 +1632,15 @@ lib/firmware/cxgb4/configs/t6-config-hashfilter.txt lib/firmware/cxgb4/t4-config.txt lib/firmware/cxgb4/t4fw-1.14.4.0.bin lib/firmware/cxgb4/t4fw-1.15.37.0.bin -lib/firmware/cxgb4/t4fw-1.27.3.0.bin +lib/firmware/cxgb4/t4fw-1.27.4.0.bin lib/firmware/cxgb4/t4fw.bin lib/firmware/cxgb4/t5-config.txt lib/firmware/cxgb4/t5fw-1.14.4.0.bin lib/firmware/cxgb4/t5fw-1.15.37.0.bin -lib/firmware/cxgb4/t5fw-1.27.3.0.bin +lib/firmware/cxgb4/t5fw-1.27.4.0.bin lib/firmware/cxgb4/t5fw.bin lib/firmware/cxgb4/t6-config.txt -lib/firmware/cxgb4/t6fw-1.27.3.0.bin +lib/firmware/cxgb4/t6fw-1.27.4.0.bin lib/firmware/cxgb4/t6fw.bin lib/firmware/cypress lib/firmware/cypress/cyfmac43012-sdio.bin @@ -1789,6 +1826,7 @@ lib/firmware/i915/kbl_huc_4.0.0.bin lib/firmware/i915/kbl_huc_ver02_00_1810.bin lib/firmware/i915/mtl_dmc.bin lib/firmware/i915/mtl_dmc_ver2_10.bin +lib/firmware/i915/mtl_gsc_1.bin lib/firmware/i915/mtl_guc_70.bin lib/firmware/i915/mtl_huc_gsc.bin lib/firmware/i915/rkl_dmc_ver2_02.bin @@ -1882,6 +1920,14 @@ lib/firmware/intel/fw_sst_22a8.bin #lib/firmware/intel/ibt-0040-4150.sfi #lib/firmware/intel/ibt-0041-0041.ddc #lib/firmware/intel/ibt-0041-0041.sfi +#lib/firmware/intel/ibt-0180-0041.ddc +#lib/firmware/intel/ibt-0180-0041.sfi +#lib/firmware/intel/ibt-0180-1050.ddc +#lib/firmware/intel/ibt-0180-1050.sfi +#lib/firmware/intel/ibt-0180-4150.ddc +#lib/firmware/intel/ibt-0180-4150.sfi +#lib/firmware/intel/ibt-0291-0291.ddc +#lib/firmware/intel/ibt-0291-0291.sfi #lib/firmware/intel/ibt-1040-0041.ddc #lib/firmware/intel/ibt-1040-0041.sfi #lib/firmware/intel/ibt-1040-1020.ddc @@ -2040,6 +2086,13 @@ lib/firmware/iwlwifi-cc-a0-72.ucode lib/firmware/iwlwifi-cc-a0-73.ucode lib/firmware/iwlwifi-cc-a0-74.ucode lib/firmware/iwlwifi-cc-a0-77.ucode +lib/firmware/iwlwifi-gl-c0-fm-c0-83.ucode +lib/firmware/iwlwifi-gl-c0-fm-c0.pnvm +lib/firmware/iwlwifi-ma-b0-gf-a0-83.ucode +lib/firmware/iwlwifi-ma-b0-gf-a0.pnvm +lib/firmware/iwlwifi-ma-b0-gf4-a0-83.ucode +lib/firmware/iwlwifi-ma-b0-gf4-a0.pnvm +lib/firmware/iwlwifi-ma-b0-hr-b0-83.ucode lib/firmware/iwlwifi-so-a0-gf-a0-72.ucode lib/firmware/iwlwifi-so-a0-gf-a0-73.ucode lib/firmware/iwlwifi-so-a0-gf-a0-74.ucode @@ -2048,6 +2101,7 @@ lib/firmware/iwlwifi-so-a0-gf-a0-78.ucode lib/firmware/iwlwifi-so-a0-gf-a0-79.ucode lib/firmware/iwlwifi-so-a0-gf-a0-81.ucode lib/firmware/iwlwifi-so-a0-gf-a0-83.ucode +lib/firmware/iwlwifi-so-a0-gf-a0-84.ucode lib/firmware/iwlwifi-so-a0-gf-a0.pnvm lib/firmware/iwlwifi-so-a0-gf4-a0-72.ucode lib/firmware/iwlwifi-so-a0-gf4-a0-73.ucode @@ -2057,6 +2111,7 @@ lib/firmware/iwlwifi-so-a0-gf4-a0-78.ucode lib/firmware/iwlwifi-so-a0-gf4-a0-79.ucode lib/firmware/iwlwifi-so-a0-gf4-a0-81.ucode lib/firmware/iwlwifi-so-a0-gf4-a0-83.ucode +lib/firmware/iwlwifi-so-a0-gf4-a0-84.ucode lib/firmware/iwlwifi-so-a0-gf4-a0.pnvm lib/firmware/iwlwifi-so-a0-hr-b0-72.ucode lib/firmware/iwlwifi-so-a0-hr-b0-73.ucode @@ -2064,6 +2119,8 @@ lib/firmware/iwlwifi-so-a0-hr-b0-74.ucode lib/firmware/iwlwifi-so-a0-hr-b0-77.ucode lib/firmware/iwlwifi-so-a0-hr-b0-79.ucode lib/firmware/iwlwifi-so-a0-hr-b0-81.ucode +lib/firmware/iwlwifi-so-a0-hr-b0-83.ucode +lib/firmware/iwlwifi-so-a0-hr-b0-84.ucode lib/firmware/iwlwifi-so-a0-jf-b0-72.ucode lib/firmware/iwlwifi-so-a0-jf-b0-73.ucode lib/firmware/iwlwifi-so-a0-jf-b0-74.ucode @@ -2078,6 +2135,7 @@ lib/firmware/iwlwifi-ty-a0-gf-a0-78.ucode lib/firmware/iwlwifi-ty-a0-gf-a0-79.ucode lib/firmware/iwlwifi-ty-a0-gf-a0-81.ucode lib/firmware/iwlwifi-ty-a0-gf-a0-83.ucode +lib/firmware/iwlwifi-ty-a0-gf-a0-84.ucode lib/firmware/iwlwifi-ty-a0-gf-a0.pnvm #lib/firmware/kaweth lib/firmware/kaweth/new_code.bin @@ -3091,6 +3149,7 @@ lib/firmware/qcom/a650_gmu.bin lib/firmware/qcom/a650_sqe.fw lib/firmware/qcom/a660_gmu.bin lib/firmware/qcom/a660_sqe.fw +lib/firmware/qcom/a702_sqe.fw #lib/firmware/qcom/apq8016 lib/firmware/qcom/apq8016/WCNSS_qcom_wlan_nv_sbc.bin lib/firmware/qcom/apq8016/mba.mbn @@ -3106,6 +3165,28 @@ lib/firmware/qcom/apq8096/modem.mbn lib/firmware/qcom/apq8096/modemr.jsn lib/firmware/qcom/leia_pfp_470.fw lib/firmware/qcom/leia_pm4_470.fw +#lib/firmware/qcom/qcm2290 +lib/firmware/qcom/qcm2290/a702_zap.mbn +lib/firmware/qcom/qcm2290/adsp.mbn +lib/firmware/qcom/qcm2290/adspr.jsn +lib/firmware/qcom/qcm2290/adsps.jsn +lib/firmware/qcom/qcm2290/adspua.jsn +lib/firmware/qcom/qcm2290/modem.mbn +lib/firmware/qcom/qcm2290/modemr.jsn +lib/firmware/qcom/qcm2290/modemuw.jsn +lib/firmware/qcom/qcm2290/wlanmdsp.mbn +#lib/firmware/qcom/qrb4210 +lib/firmware/qcom/qrb4210/a610_zap.mbn +lib/firmware/qcom/qrb4210/adsp.mbn +lib/firmware/qcom/qrb4210/adspr.jsn +lib/firmware/qcom/qrb4210/adsps.jsn +lib/firmware/qcom/qrb4210/adspua.jsn +lib/firmware/qcom/qrb4210/cdsp.mbn +lib/firmware/qcom/qrb4210/cdspr.jsn +lib/firmware/qcom/qrb4210/modem.mbn +lib/firmware/qcom/qrb4210/modemr.jsn +lib/firmware/qcom/qrb4210/modemuw.jsn +lib/firmware/qcom/qrb4210/wlanmdsp.mbn #lib/firmware/qcom/sc8280xp #lib/firmware/qcom/sc8280xp/LENOVO #lib/firmware/qcom/sc8280xp/LENOVO/21BX @@ -3118,6 +3199,7 @@ lib/firmware/qcom/leia_pm4_470.fw #lib/firmware/qcom/sc8280xp/LENOVO/21BX/qccdsp8280.mbn #lib/firmware/qcom/sc8280xp/LENOVO/21BX/qcdxkmsuc8280.mbn #lib/firmware/qcom/sc8280xp/LENOVO/21BX/qcslpi8280.mbn +#lib/firmware/qcom/sc8280xp/SC8280XP-LENOVO-X13S-tplg.bin #lib/firmware/qcom/sdm845 #lib/firmware/qcom/sdm845/Thundercomm #lib/firmware/qcom/sdm845/Thundercomm/db845c @@ -3134,8 +3216,14 @@ lib/firmware/qcom/leia_pm4_470.fw #lib/firmware/qcom/sdm845/modem.mbn #lib/firmware/qcom/sdm845/modem_nm.mbn #lib/firmware/qcom/sdm845/modemuw.jsn +#lib/firmware/qcom/sdm845/notice.txt_wlanmdsp #lib/firmware/qcom/sdm845/wlanmdsp.mbn #lib/firmware/qcom/sm8250 +#lib/firmware/qcom/sm8250/Thundercomm +#lib/firmware/qcom/sm8250/Thundercomm/RB5 +#lib/firmware/qcom/sm8250/Thundercomm/RB5/slpi.mbn +#lib/firmware/qcom/sm8250/Thundercomm/RB5/slpir.jsn +#lib/firmware/qcom/sm8250/Thundercomm/RB5/slpius.jsn #lib/firmware/qcom/sm8250/a650_zap.mbn #lib/firmware/qcom/sm8250/adsp.mbn #lib/firmware/qcom/sm8250/adspr.jsn @@ -3154,6 +3242,8 @@ lib/firmware/qcom/venus-5.2/venus.mdt #lib/firmware/qcom/venus-5.4 lib/firmware/qcom/venus-5.4/venus.mbn lib/firmware/qcom/venus-5.4/venus.mdt +#lib/firmware/qcom/venus-6.0 +lib/firmware/qcom/venus-6.0/venus.mbn lib/firmware/qcom/vpu-1.0 lib/firmware/qcom/vpu-1.0/venus.mbn lib/firmware/qcom/vpu-1.0/venus.mdt @@ -3503,6 +3593,7 @@ lib/firmware/rt73.bin #lib/firmware/rtl_bt/rtl8852bu_fw.bin #lib/firmware/rtl_bt/rtl8852cu_config.bin #lib/firmware/rtl_bt/rtl8852cu_fw.bin +#lib/firmware/rtl_bt/rtl8852cu_fw_v2.bin #lib/firmware/rtl_nic lib/firmware/rtl_nic/rtl8105e-1.fw lib/firmware/rtl_nic/rtl8106e-1.fw @@ -3721,17 +3812,3 @@ lib/firmware/wsm_22.bin #lib/firmware/yam lib/firmware/yam/1200.bin lib/firmware/yam/9600.bin -lib/firmware/ctefx.bin -lib/firmware/ctspeq.bin -lib/firmware/ess/maestro3_assp_kernel.fw -lib/firmware/ess/maestro3_assp_minisrc.fw -lib/firmware/korg/k1212.dsp -lib/firmware/sb16/alaw_main.csp -lib/firmware/sb16/ima_adpcm_capture.csp -lib/firmware/sb16/ima_adpcm_init.csp -lib/firmware/sb16/ima_adpcm_playback.csp -lib/firmware/sb16/mulaw_main.csp -lib/firmware/yamaha/ds1_ctrl.fw -lib/firmware/yamaha/ds1_dsp.fw -lib/firmware/yamaha/ds1e_ctrl.fw -lib/firmware/yamaha/yss225_registers.bin diff --git a/config/rootfiles/core/182/filelists/files b/config/rootfiles/core/182/filelists/files index e69de29bb..722b58f68 100644 --- a/config/rootfiles/core/182/filelists/files +++ b/config/rootfiles/core/182/filelists/files @@ -0,0 +1,249 @@ +lib/firmware/amd/amd_sev_fam19h_model0xh.sbin +lib/firmware/amd/amd_sev_fam19h_model1xh.sbin +lib/firmware/amdgpu/aldebaran_mec2.bin +lib/firmware/amdgpu/aldebaran_mec.bin +lib/firmware/amdgpu/aldebaran_sjt_mec2.bin +lib/firmware/amdgpu/aldebaran_sjt_mec.bin +lib/firmware/amdgpu/aldebaran_sos.bin +lib/firmware/amdgpu/beige_goby_ce.bin +lib/firmware/amdgpu/beige_goby_dmcub.bin +lib/firmware/amdgpu/beige_goby_me.bin +lib/firmware/amdgpu/beige_goby_mec2.bin +lib/firmware/amdgpu/beige_goby_mec.bin +lib/firmware/amdgpu/beige_goby_pfp.bin +lib/firmware/amdgpu/beige_goby_smc.bin +lib/firmware/amdgpu/beige_goby_sos.bin +lib/firmware/amdgpu/beige_goby_ta.bin +lib/firmware/amdgpu/beige_goby_vcn.bin +lib/firmware/amdgpu/dcn_3_1_4_dmcub.bin +lib/firmware/amdgpu/dcn_3_1_6_dmcub.bin +lib/firmware/amdgpu/dcn_3_2_0_dmcub.bin +lib/firmware/amdgpu/dcn_3_2_1_dmcub.bin +lib/firmware/amdgpu/dimgrey_cavefish_ce.bin +lib/firmware/amdgpu/dimgrey_cavefish_dmcub.bin +lib/firmware/amdgpu/dimgrey_cavefish_me.bin +lib/firmware/amdgpu/dimgrey_cavefish_mec2.bin +lib/firmware/amdgpu/dimgrey_cavefish_mec.bin +lib/firmware/amdgpu/dimgrey_cavefish_pfp.bin +lib/firmware/amdgpu/dimgrey_cavefish_smc.bin +lib/firmware/amdgpu/dimgrey_cavefish_sos.bin +lib/firmware/amdgpu/dimgrey_cavefish_ta.bin +lib/firmware/amdgpu/dimgrey_cavefish_vcn.bin +lib/firmware/amdgpu/gc_10_3_6_rlc.bin +lib/firmware/amdgpu/gc_10_3_7_rlc.bin +lib/firmware/amdgpu/gc_11_0_0_imu.bin +lib/firmware/amdgpu/gc_11_0_0_me.bin +lib/firmware/amdgpu/gc_11_0_0_mec.bin +lib/firmware/amdgpu/gc_11_0_0_mes_2.bin +lib/firmware/amdgpu/gc_11_0_0_pfp.bin +lib/firmware/amdgpu/gc_11_0_0_rlc.bin +lib/firmware/amdgpu/gc_11_0_1_me.bin +lib/firmware/amdgpu/gc_11_0_1_mec.bin +lib/firmware/amdgpu/gc_11_0_1_mes_2.bin +lib/firmware/amdgpu/gc_11_0_1_pfp.bin +lib/firmware/amdgpu/gc_11_0_1_rlc.bin +lib/firmware/amdgpu/gc_11_0_2_me.bin +lib/firmware/amdgpu/gc_11_0_2_mec.bin +lib/firmware/amdgpu/gc_11_0_2_mes_2.bin +lib/firmware/amdgpu/gc_11_0_2_pfp.bin +lib/firmware/amdgpu/gc_11_0_3_imu.bin +lib/firmware/amdgpu/gc_11_0_3_me.bin +lib/firmware/amdgpu/gc_11_0_3_mec.bin +lib/firmware/amdgpu/gc_11_0_3_mes1.bin +lib/firmware/amdgpu/gc_11_0_3_mes_2.bin +lib/firmware/amdgpu/gc_11_0_3_pfp.bin +lib/firmware/amdgpu/gc_11_0_3_rlc.bin +lib/firmware/amdgpu/gc_11_0_4_me.bin +lib/firmware/amdgpu/gc_11_0_4_mec.bin +lib/firmware/amdgpu/gc_11_0_4_mes_2.bin +lib/firmware/amdgpu/gc_11_0_4_pfp.bin +lib/firmware/amdgpu/gc_11_0_4_rlc.bin +lib/firmware/amdgpu/green_sardine_asd.bin +lib/firmware/amdgpu/green_sardine_ce.bin +lib/firmware/amdgpu/green_sardine_dmcub.bin +lib/firmware/amdgpu/green_sardine_me.bin +lib/firmware/amdgpu/green_sardine_mec2.bin +lib/firmware/amdgpu/green_sardine_mec.bin +lib/firmware/amdgpu/green_sardine_pfp.bin +lib/firmware/amdgpu/green_sardine_ta.bin +lib/firmware/amdgpu/green_sardine_vcn.bin +lib/firmware/amdgpu/navi10_asd.bin +lib/firmware/amdgpu/navi10_ta.bin +lib/firmware/amdgpu/navi10_vcn.bin +lib/firmware/amdgpu/navi12_asd.bin +lib/firmware/amdgpu/navi12_ce.bin +lib/firmware/amdgpu/navi12_me.bin +lib/firmware/amdgpu/navi12_mec2.bin +lib/firmware/amdgpu/navi12_mec.bin +lib/firmware/amdgpu/navi12_pfp.bin +lib/firmware/amdgpu/navi12_ta.bin +lib/firmware/amdgpu/navi12_vcn.bin +lib/firmware/amdgpu/navi14_asd.bin +lib/firmware/amdgpu/navi14_ta.bin +lib/firmware/amdgpu/navi14_vcn.bin +lib/firmware/amdgpu/navy_flounder_ce.bin +lib/firmware/amdgpu/navy_flounder_dmcub.bin +lib/firmware/amdgpu/navy_flounder_me.bin +lib/firmware/amdgpu/navy_flounder_mec2.bin +lib/firmware/amdgpu/navy_flounder_mec.bin +lib/firmware/amdgpu/navy_flounder_pfp.bin +lib/firmware/amdgpu/navy_flounder_smc.bin +lib/firmware/amdgpu/navy_flounder_ta.bin +lib/firmware/amdgpu/navy_flounder_vcn.bin +lib/firmware/amdgpu/picasso_asd.bin +lib/firmware/amdgpu/picasso_ce.bin +lib/firmware/amdgpu/picasso_me.bin +lib/firmware/amdgpu/picasso_mec2.bin +lib/firmware/amdgpu/picasso_mec.bin +lib/firmware/amdgpu/picasso_pfp.bin +lib/firmware/amdgpu/picasso_ta.bin +lib/firmware/amdgpu/psp_13_0_0_sos.bin +lib/firmware/amdgpu/psp_13_0_0_ta.bin +lib/firmware/amdgpu/psp_13_0_10_sos.bin +lib/firmware/amdgpu/psp_13_0_11_ta.bin +lib/firmware/amdgpu/psp_13_0_4_ta.bin +lib/firmware/amdgpu/psp_13_0_5_asd.bin +lib/firmware/amdgpu/psp_13_0_5_ta.bin +lib/firmware/amdgpu/psp_13_0_7_sos.bin +lib/firmware/amdgpu/psp_13_0_7_ta.bin +lib/firmware/amdgpu/psp_13_0_8_ta.bin +lib/firmware/amdgpu/raven2_asd.bin +lib/firmware/amdgpu/raven2_ce.bin +lib/firmware/amdgpu/raven2_me.bin +lib/firmware/amdgpu/raven2_mec2.bin +lib/firmware/amdgpu/raven2_mec.bin +lib/firmware/amdgpu/raven2_pfp.bin +lib/firmware/amdgpu/raven2_ta.bin +lib/firmware/amdgpu/raven_asd.bin +lib/firmware/amdgpu/raven_ce.bin +lib/firmware/amdgpu/raven_me.bin +lib/firmware/amdgpu/raven_mec2.bin +lib/firmware/amdgpu/raven_mec.bin +lib/firmware/amdgpu/raven_pfp.bin +lib/firmware/amdgpu/raven_ta.bin +lib/firmware/amdgpu/renoir_asd.bin +lib/firmware/amdgpu/renoir_ce.bin +lib/firmware/amdgpu/renoir_dmcub.bin +lib/firmware/amdgpu/renoir_me.bin +lib/firmware/amdgpu/renoir_mec2.bin +lib/firmware/amdgpu/renoir_mec.bin +lib/firmware/amdgpu/renoir_pfp.bin +lib/firmware/amdgpu/renoir_ta.bin +lib/firmware/amdgpu/renoir_vcn.bin +lib/firmware/amdgpu/sdma_5_2_6.bin +lib/firmware/amdgpu/sdma_5_2_7.bin +lib/firmware/amdgpu/sdma_6_0_0.bin +lib/firmware/amdgpu/sdma_6_0_1.bin +lib/firmware/amdgpu/sdma_6_0_2.bin +lib/firmware/amdgpu/sienna_cichlid_ce.bin +lib/firmware/amdgpu/sienna_cichlid_dmcub.bin +lib/firmware/amdgpu/sienna_cichlid_me.bin +lib/firmware/amdgpu/sienna_cichlid_mec2.bin +lib/firmware/amdgpu/sienna_cichlid_mec.bin +lib/firmware/amdgpu/sienna_cichlid_pfp.bin +lib/firmware/amdgpu/sienna_cichlid_rlc.bin +lib/firmware/amdgpu/sienna_cichlid_sos.bin +lib/firmware/amdgpu/sienna_cichlid_ta.bin +lib/firmware/amdgpu/sienna_cichlid_vcn.bin +lib/firmware/amdgpu/smu_13_0_0.bin +lib/firmware/amdgpu/smu_13_0_10.bin +lib/firmware/amdgpu/smu_13_0_7.bin +lib/firmware/amdgpu/vangogh_asd.bin +lib/firmware/amdgpu/vangogh_ce.bin +lib/firmware/amdgpu/vangogh_me.bin +lib/firmware/amdgpu/vangogh_mec2.bin +lib/firmware/amdgpu/vangogh_mec.bin +lib/firmware/amdgpu/vangogh_pfp.bin +lib/firmware/amdgpu/vcn_4_0_0.bin +lib/firmware/amdgpu/vcn_4_0_4.bin +lib/firmware/amdgpu/vega10_asd.bin +lib/firmware/amdgpu/vega10_ce.bin +lib/firmware/amdgpu/vega10_me.bin +lib/firmware/amdgpu/vega10_mec2.bin +lib/firmware/amdgpu/vega10_mec.bin +lib/firmware/amdgpu/vega10_pfp.bin +lib/firmware/amdgpu/vega12_asd.bin +lib/firmware/amdgpu/vega12_ce.bin +lib/firmware/amdgpu/vega12_me.bin +lib/firmware/amdgpu/vega12_mec2.bin +lib/firmware/amdgpu/vega12_mec.bin +lib/firmware/amdgpu/vega12_pfp.bin +lib/firmware/amdgpu/vega20_asd.bin +lib/firmware/amdgpu/vega20_ce.bin +lib/firmware/amdgpu/vega20_me.bin +lib/firmware/amdgpu/vega20_mec2.bin +lib/firmware/amdgpu/vega20_mec.bin +lib/firmware/amdgpu/vega20_pfp.bin +lib/firmware/amdgpu/yellow_carp_ce.bin +lib/firmware/amdgpu/yellow_carp_dmcub.bin +lib/firmware/amdgpu/yellow_carp_me.bin +lib/firmware/amdgpu/yellow_carp_mec2.bin +lib/firmware/amdgpu/yellow_carp_mec.bin +lib/firmware/amdgpu/yellow_carp_pfp.bin +lib/firmware/amdgpu/yellow_carp_sdma.bin +lib/firmware/amdgpu/yellow_carp_ta.bin +lib/firmware/amdtee/773bd96f-b83f-4d52-b12dc529b13d8543.bin +lib/firmware/amdtee/amd_pmf_v3.bin +lib/firmware/amd-ucode/microcode_amd_fam19h.bin +lib/firmware/brcm/brcmfmac43430-sdio.sinovoip,bananapi-m64.txt +lib/firmware/cxgb4/t4fw-1.27.4.0.bin +lib/firmware/cxgb4/t5fw-1.27.4.0.bin +lib/firmware/cxgb4/t6fw-1.27.4.0.bin +lib/firmware/i915/adlp_guc_70.bin +lib/firmware/i915/dg2_guc_70.bin +lib/firmware/i915/mtl_dmc.bin +lib/firmware/i915/mtl_gsc_1.bin +lib/firmware/i915/mtl_guc_70.bin +lib/firmware/i915/mtl_huc_gsc.bin +lib/firmware/i915/tgl_guc_70.bin +lib/firmware/iwlwifi-cc-a0-77.ucode +lib/firmware/iwlwifi-gl-c0-fm-c0-83.ucode +lib/firmware/iwlwifi-gl-c0-fm-c0.pnvm +lib/firmware/iwlwifi-ma-b0-gf4-a0-83.ucode +lib/firmware/iwlwifi-ma-b0-gf4-a0.pnvm +lib/firmware/iwlwifi-ma-b0-gf-a0-83.ucode +lib/firmware/iwlwifi-ma-b0-gf-a0.pnvm +lib/firmware/iwlwifi-ma-b0-hr-b0-83.ucode +lib/firmware/iwlwifi-Qu-b0-hr-b0-77.ucode +lib/firmware/iwlwifi-Qu-b0-jf-b0-77.ucode +lib/firmware/iwlwifi-Qu-c0-hr-b0-77.ucode +lib/firmware/iwlwifi-Qu-c0-jf-b0-77.ucode +lib/firmware/iwlwifi-QuZ-a0-hr-b0-77.ucode +lib/firmware/iwlwifi-so-a0-gf4-a0-84.ucode +lib/firmware/iwlwifi-so-a0-gf4-a0.pnvm +lib/firmware/iwlwifi-so-a0-gf-a0.pnvm +lib/firmware/iwlwifi-so-a0-hr-b0-83.ucode +lib/firmware/iwlwifi-so-a0-hr-b0-84.ucode +lib/firmware/iwlwifi-ty-a0-gf-a0-84.ucode +lib/firmware/iwlwifi-ty-a0-gf-a0.pnvm +lib/firmware/mrvl/pcie8997_wlan_v4.bin +lib/firmware/mrvl/pcieusb8997_combo_v4.bin +lib/firmware/qat_4xxx.bin +lib/firmware/qcom/a702_sqe.fw +lib/firmware/qcom/qcm2290/a702_zap.mbn +lib/firmware/qcom/qcm2290/adsp.mbn +lib/firmware/qcom/qcm2290/adspr.jsn +lib/firmware/qcom/qcm2290/adsps.jsn +lib/firmware/qcom/qcm2290/adspua.jsn +lib/firmware/qcom/qcm2290/modem.mbn +lib/firmware/qcom/qcm2290/modemr.jsn +lib/firmware/qcom/qcm2290/modemuw.jsn +lib/firmware/qcom/qcm2290/wlanmdsp.mbn +lib/firmware/qcom/qrb4210/a610_zap.mbn +lib/firmware/qcom/qrb4210/adsp.mbn +lib/firmware/qcom/qrb4210/adspr.jsn +lib/firmware/qcom/qrb4210/adsps.jsn +lib/firmware/qcom/qrb4210/adspua.jsn +lib/firmware/qcom/qrb4210/cdsp.mbn +lib/firmware/qcom/qrb4210/cdspr.jsn +lib/firmware/qcom/qrb4210/modem.mbn +lib/firmware/qcom/qrb4210/modemr.jsn +lib/firmware/qcom/qrb4210/modemuw.jsn +lib/firmware/qcom/qrb4210/wlanmdsp.mbn +lib/firmware/qcom/sm8250/adsp.mbn +lib/firmware/qcom/sm8250/cdsp.mbn +lib/firmware/qcom/venus-6.0/venus.mbn +lib/firmware/qcom/vpu-1.0/venus.mbn +lib/firmware/rtl_nic/rtl8156b-2.fw +lib/firmware/rtw89/rtw8851b_fw.bin +lib/firmware/rtw89/rtw8852b_fw-1.bin diff --git a/config/rootfiles/core/182/filelists/openssh b/config/rootfiles/core/182/filelists/openssh new file mode 120000 index 000000000..d8c77fd8e --- /dev/null +++ b/config/rootfiles/core/182/filelists/openssh @@ -0,0 +1 @@ +../../../common/openssh \ No newline at end of file diff --git a/config/rootfiles/core/182/update.sh b/config/rootfiles/core/182/update.sh index b481f7400..b00218f51 100644 --- a/config/rootfiles/core/182/update.sh +++ b/config/rootfiles/core/182/update.sh @@ -35,12 +35,25 @@ done /etc/rc.d/init.d/ipsec stop /etc/rc.d/init.d/squid stop /etc/rc.d/init.d/unbound stop +/etc/rc.d/init.d/sshd stop # Extract files extract_files # Remove files rm -rvf \ + /lib/firmware/cxgb4/t4fw-1.27.3* \ + /lib/firmware/cxgb4/t5fw-1.27.3* \ + /lib/firmware/cxgb4/t6fw-1.27.3* \ + /lib/firmware/ctefx.bin \ + /lib/firmware/ctspeq.bin \ + /lib/firmware/ess \ + /lib/firmware/intel/ibt-* \ + /lib/firmware/korg \ + /lib/firmware/mediatek/BT_RAM_CODE_* \ + /lib/firmware/nxp \ + /lib/firmware/sb16 \ + /lib/firmware/yamaha \ /usr/bin/gawk-5.2* \ /usr/lib/liblzma.so.5.4* \ /usr/lib/libqpdf.so.29.5* @@ -54,8 +67,14 @@ ldconfig # Filesytem cleanup /usr/local/bin/filesystem-cleanup +# Apply local configuration to sshd_config +/usr/local/bin/sshctrl + # Start services /etc/init.d/unbound start +if grep -q "ENABLE_SSH=on" /var/ipfire/remote/settings; then + /etc/init.d/sshd start +fi if [ -f /var/ipfire/proxy/enable ]; then /etc/init.d/squid start fi @@ -64,7 +83,7 @@ if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then fi # This update needs a reboot... -#touch /var/run/need_reboot +touch /var/run/need_reboot # Finish /etc/init.d/fireinfo start diff --git a/lfs/linux-firmware b/lfs/linux-firmware index bd292a694..7c53f2816 100644 --- a/lfs/linux-firmware +++ b/lfs/linux-firmware @@ -24,7 +24,7 @@ include Config -VER = 20230804 +VER = 20231030 THISAPP = linux-firmware-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 9ecedb8bc155fbd192d8cd42d06c9b37d6c7a52c013ec997331865c06f12251c3f223eb9d2e6d0830e29276bd588a352e8ff8bae276e63157df5d6a433c3e20d +$(DL_FILE)_BLAKE2 = cf9430012c1e9007da633aba7440918b0aeb6a2845ebe39adad2a5e02e4b83df1014733a9797f81084b5179cb239b11b5fc020f582993a7badd0a22cdb289d7f install : $(TARGET) @@ -70,7 +70,6 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && git apply -p1 < $(DIR_SRC)/src/patches/linux-firmware-amd-family-19h.patch mkdir -p /lib/firmware cd $(DIR_APP) && make install diff --git a/lfs/openssh b/lfs/openssh index d5d67dd0e..b81c2c3b1 100644 --- a/lfs/openssh +++ b/lfs/openssh @@ -24,7 +24,7 @@ include Config -VER = 9.4p1 +VER = 9.5p1 THISAPP = openssh-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = d13d758129cce947d3f12edb6e88406aad10de6887b19ffa3ebd8e382b742a05f2a692a8824aec99939f6c7e13fbccc3bb14e5ee112f9a9255d4882eb87dcf53 +$(DL_FILE)_BLAKE2 = 55dbb0a2792b0046c943a19ca0966660e6e378e77856e94823a1bbbafaa0da94357403765c4c028aebf6543049a0f9bbe0019629be3f92cdadfac1be56def796 install : $(TARGET) @@ -70,7 +70,6 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssh-9.4p1_Fix_zlib_version_check_for_1.3_and_future_version.patch cd $(DIR_APP) && autoconf cd $(DIR_APP) && sed -i "s/lkrb5 -ldes/lkrb5/" configure cd $(DIR_APP) && ./configure \ diff --git a/lfs/tor b/lfs/tor index 7a9ca4128..cf0ccaf9e 100644 --- a/lfs/tor +++ b/lfs/tor @@ -26,7 +26,7 @@ include Config SUMMARY = Anonymizing overlay network for TCP (The onion router) -VER = 0.4.8.7 +VER = 0.4.8.9 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 81 +PAK_VER = 82 DEPS = libseccomp @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 4d0cde752a729c64e380663e4438398fe768a8657e9aa3246bdf0ec9a4b4e01e277cb594ae0cb44cc66ea8c6080f2e58c6daf1bf01dc51b678d228e8e38fc971 +$(DL_FILE)_BLAKE2 = a2d8cc8e60f162930d64d191af1893cb4060a8d98c16560c9ba30e0a9a0fd9cce2132573ca4db7b8b6e002f127f06b53fc5aea5fb6e8795c10f73671d14d9190 install : $(TARGET) diff --git a/src/patches/linux-firmware-amd-family-19h.patch b/src/patches/linux-firmware-amd-family-19h.patch deleted file mode 100644 index 371a8bfbb..000000000 --- a/src/patches/linux-firmware-amd-family-19h.patch +++ /dev/null @@ -1,486 +0,0 @@ -From f2eb058afc57348cde66852272d6bf11da1eef8f Mon Sep 17 00:00:00 2001 -From: John Allen <john.allen(a)amd.com> -Date: Tue, 8 Aug 2023 19:02:39 +0000 -Subject: [PATCH 1/1] linux-firmware: Update AMD cpu microcode - -* Update AMD cpu microcode for processor family 19h - -Key Name = AMD Microcode Signing Key (for signing microcode container files only) -Key ID = F328AE73 -Key Fingerprint = FC7C 6C50 5DAF CC14 7183 57CA E4BE 5339 F328 AE73 - -Signed-off-by: John Allen <john.allen(a)amd.com> -Signed-off-by: Josh Boyer <jwboyer(a)kernel.org> ---- - WHENCE | 2 +- - amd-ucode/README | 13 +++++++++++++ - amd-ucode/microcode_amd_fam19h.bin | Bin 16804 -> 39172 bytes - amd-ucode/microcode_amd_fam19h.bin.asc | 16 ++++++++-------- - 4 files changed, 22 insertions(+), 9 deletions(-) - -diff --git a/WHENCE b/WHENCE -index 99cee970..54aadb0c 100644 ---- a/WHENCE -+++ b/WHENCE -@@ -3924,7 +3924,7 @@ Raw: amd-ucode/microcode_amd_fam17h.bin - Version: 2023-07-19 - File: amd-ucode/microcode_amd_fam19h.bin - Raw: amd-ucode/microcode_amd_fam19h.bin --Version: 2023-07-18 -+Version: 2023-08-08 - File: amd-ucode/README - - License: Redistributable. See LICENSE.amd-ucode for details -diff --git a/amd-ucode/README b/amd-ucode/README -index 1d39da3b..fac11524 100644 ---- a/amd-ucode/README -+++ b/amd-ucode/README -@@ -37,6 +37,19 @@ Microcode patches in microcode_amd_fam17h.bin: - Family=0x17 Model=0x01 Stepping=0x02: Patch=0x0800126e Length=3200 bytes - - Microcode patches in microcode_amd_fam19h.bin: -+ Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a10113e Length=5568 bytes -+ Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a10123e Length=5568 bytes -+ Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00212 Length=5568 bytes - Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d1 Length=5568 bytes - Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a001079 Length=5568 bytes - Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001234 Length=5568 bytes -+ Family=0x19 Model=0xa0 Stepping=0x01: Patch=0x0aa00116 Length=5568 bytes -+ -+NOTE: For Genoa (Family=0x19 Model=0x11) and Bergamo (Family=0x19 Model=0xa0), -+either AGESA version >= 1.0.0.8 OR a kernel with the following commit is -+required: -+a32b0f0db3f3 ("x86/microcode/AMD: Load late on both threads too") -+ -+When late loading the patches for Genoa or Bergamo, there may be one spurious -+NMI observed per physical core. These NMIs are benign and don't cause any -+functional issue but will result in kernel messages being logged. -diff --git a/amd-ucode/microcode_amd_fam19h.bin b/amd-ucode/microcode_amd_fam19h.bin -index 50470c3f461a068e832a1ebe33683a041d4515fe..02a5d051d58b8028275ee6a0b091f11f8d1b6e27 100644 -GIT binary patch -delta 20542 -zcmZ^~b8z56_wE_n&cqW;Y)@?4$;7sud}B^*+nU(6ZQHi*`|jS|{Z-xCr>d*Y>F(<4 -zdj9JAoYRGYph0zD+#<4qApe!$e+DXY-hadYOQ`<|(f&t{_MaRKx%~fG1_3LNgJVVl -z{U0-+<#F8j05KFFDheE=pAP8%yY)Z8e^2|ba?!lG*_H})h9c;<wav1sTPsas&+C~? -zt+w>ajFKQ+n`rnHq2st{7<r==N^`j$`e+|Bdj&BczbEn>`Xymh9xn(55h{1PelZ4( -z8)Cd2J()0bW4j{$oYD|O%1JLSP6mi8dD@uqn+Nk4Ni+EdNRK_hB4=x$;+<&Mo+g{& -z*KXyM!$#1!qASd{&9SB02gb{<sLSVOpOXkBO;hSaCG>Wk>5TSb+4Id$e=iKOW#2M> -z50LG^X$0N~_F-(Rr6<It&fK4ws3Xs~<D>Da*9EC=6h$n7EYmWMyr4wGa})a(=Jk9V -zwIwD<`_dsUurwAYS;82Il!+DiDt+=zEwb11U_*cb|Me&$(i2a816XMfU9IWl(u?Jp -zY`(;-_)v85_Y16@$F{@bkS&gXmDI?HTK8L8XYeeBWzf#@Jc|quRbU2%jC<$A=U#+? -z_2ZOt`PhKYu>rN`KbDs#C|}#Hx&o6vyvxk^H}J55Il(V6w#>o_OTAehMkYV`=U@R6 -z7X$bj5vX<)>iP|q1QoZa4Ie}Kpg78Q<63ABGe8AN(6d6DMh&giP_mo#p{L|)ZfQ9R -zR-gR5JiUHf?4qi)HS(^WLgR9Og<7g{lda}@ZH;STPW$X=M=)sb@;B;?(3p9mi#;H@ -z8MBIc-}rXWi7sVTH5WB@HE4}W<if0RW*2D2+ld4(U#!Y!m;H97AzZiZ!m%rcaNVc( -z$@W{1^Rf>oEd{G^zO-r!E&t+S`tB?GaDTxXjS_=WwLsLII{?drAYw~FF;OqM*BAHf -znwA@Y9-qk=K#Yvk_{5*dO9Ue2$V^uZ1C^8e;M7(sId7r<#QZ6)UShs0yXv_cBmfe7 -zCu22d9X*v~1D|ICM2=A4$zel%rTd^2##O<uK^qF~qRaUYsmlr!+Q;-GkwV_MM@TD@ -z+;Njq=n_1}!Lk{U8_#dLU4Su!=M|$d_91$3It!iILH!>8`S(ZNhz+TS74M}ZWNrUz -zF56-OcG@Px00YtGO)|MbTX*aXG=Lb;C%~*zC)*-QlBEct__EWii+AUjlSK$tpYs8e -zzX%dk4Y2hQoZKm#fq$g%-*OcZjUat_nLm~hT;59{Z`!wT&2iUT!N7ePfnsyN%l}Gq -zix(BBJDj_u2p83=?enFz%HHe)QT@5{T&{2H5`Bb-?J2*6Ai3T--T`@34X|B0m0n`? -z^v+7O)QD6KyNT2MkVkYc5iFwW!FBEXexZENvaPAwazdm*(n3(PA5a65b?&sw8Yh1A -zzcoZ!B=*`WYzT#Xlf$nIidpcZhqxVTt(IzLmci}vIqn{MI2Gk<G?E+6K?xsHwpyIs -z3C^Q9-!!bmk04Z`23yN90nN~KwO?Y$VJ|--qh5}(%CXc1&LLgbYS$v4Fw^+Se?JFd -ze&-JVFqe>G)@I?p3A-r_RK(S1t7ff}cHKwZ{;0UbFahDD=zPAYar|ZTypdzX_A|zF -z*5akl>`DQIf?M23a?#r9m~~GAv&zv%@)qOE@&Pd;-ep2LFWVQ11F+xiHV@>ecUpa7 -z8QavpLww2=q%!#yJ%dwZX0pN;FZB?Z?XcnX*Gq977Lvks$^Rws686S<OqGt=50^i9 -z%x+k_PgmP5EP<#s`Y!K)w)9rky)MH&Yk&_}xN(4EhMRhr><}lr7#EWalB)=PJ)BDn -zLCKC0t2OzmZ}&)e0jx}S56QSn{Hp36IUcukTw|^wT7=W9`W1F1+#^BVMqCBRUSYCp -zy}ySZ3zVaT`{2QQ08gR89x(~<l@~|M&t5@<OK@5LY?ythy@h4J<8E66XkU?=cjRLY -z&c*s~D<=f9)p)0X;j7H9nok@92P6o6*uDE^Y351aX?jXcKt%xdJ6@yqu4wGT@)ya3 -zGt%A=sACR-YvZANI5fh&)@$L%z0E`t5qjZ503MA3y$aH$<S?`v15<{-3qNPdwRWR0 -zNUn%{5+ymtb)D#~J4O;#C(1wk+=QBrkNumC_OY?lPRgc@Q$IO$DYBCI<@OWR7Uu^G -z`Vk)FbPB#lAg~2CS*D{={#MDN8Sg3t#PBZQjeVp9V_k)c13m41z``j|7QdIHTjW_W -zQ$YwuY+&WbQ<S43wkBM4uJ|$9qp@819(qTpb#-`M9^;P^h-+aG%2zHVn}k0TOcqkR -z*5{O&m7wvn5G~NBFS}m<a2lda$y-6R1;YvFC1ef$0);u!R(EJAlQjH64;xtRf*+;Y -zQR;(4&IF}LWFkQZa~bL5uNUeZS|m_<XK>99I;lA%vy#o7iStT-*LFQyA6?h-zYQnP -zkXlrU0I&-+SAk&I*)MwIlQv9G!t<4j#ri#EMaah$E2rB2+_N-&7b}olR<gc^;@$Rd -z>XU09K;IXs8<pEDA^l3KQYbd$TM&*An`l+Zi(>Cj0xt&z+M0Aj#o?e31`cUIfqC(( -zCX^V18{Iz;CncA&5K-lFT=Eiia$$+vdc-J}ChXWM8B&Gg__bJ3FPeyO|9Cwas&tL- -zYM;5g4n(TQ-zTfBY(OZ97@=h|pJPEeenE>Ake9iZkM^3nJlBF-W?^DRAA$!rr=7^R -zo&-4(qbHDh%dE+2?kQBhFyF;Fdz9P2C3Rmd`C~Rf<1)hIVQYHb0r#gc!M~btXc3Cu -zSGA*GA-Ynt#pGUW*@j@2pxohIllJ!ht7UEa=t^=e-|rNZ>l)2raWc)X+bN?c@_(a> -z0mfer3(%~RLMJeoV@gIR5FUp+c8^5tHm6Jt+IWhf9wEf$gYp{G!+0k8XtB+$X?cms -z8BbsC&)6N^-O6w~202`>b(;dPfre%oH`<jPZ>V<Hn{N-&4y}W}Un9Ts(?K!g>9j<Q -z_*)<HlIxk4oqdUN2VyaeS_)A&98tSr0aLZ#zt%KUsvp`xFe78QxZjfKnj+(cu36Zu -zAJ)pKb=k^V*gh{0Q`O6D*f;(7o(7R{uFg%4&PZPx*_c`gF}AB29|MIJiZhNxrz+ZT -zgFLW|e+<-0>Mx$q8=*}!V&k0rIL0q9FGq^C4PVH2@`Nr9vXg6<COx3U+RF0Z0{8-{ -zB;q(vqx{=B3FKbA#NRL{QI>7xO0c^<=|_%E0_<1l$Y<|x5{(;R;(eJAtYEcoI<IE~ -zojcG%)aW;}7wqo!?+<ydbAzOAC2owVQ?IKk1iysPY{8$TNH_!j1Q0Wdkab%p%MoHs -zJc57{T{Uk{V1}4f+gAIZ(xnuN0tUseb{)K(zSu&|=3V`@VWpM(EsJujOox7kiT6jV -z<*#X$kXF^+i4a8}t-Rc%%1}7x3_E8PJ?nCFjP}-3PEIBQWEZZ1d@f;fzcU#dT4>d_ -zgYOQTst;WL38@Ce_gl!5M{`(MFWc7nR~0=Ee|kfC`FL_O@C{taZQmoo0*6)lmUpyC -zRiSZytHqsSv&imuw%Yrg#k1!gA}d3Bmkn22`Uh-fk@y^qlN_1$;TOC@^-9u+1}<z$ -z>s1EC>$6MSdCR)bFlb@$Ak*MQ>Rr7&Zslb&w{$)EgQ@4qW~W;WzyDD<@dl8@|CHcg -zY~U(0Bsar9zJBrOD0*aj1_qrN(x66s)16!FCBP}CeeW|?R5k1wd9>U>`R{~RGT;~p -zdtYb?;GpLwc@&w+Mg_DDU^zGTzwj&?^hQ7dv!p4>0_}S*Yw5FY0Z9h9%%bz2Ki@mQ -z^(2Hg7DvkI?t>Owr92Hq=}Y@`c-$(TG73h2m>!TKD)^R57j?750K^QgOgPXe5TG`- -zn!`-=sBoMoA(j1JU1vr49uXyQR<tLto#o6GZX*}44{SF~mslykXr3`J`S%^8A^T0V -z4pq+`kt6=n!=-l`#j<wXNCSV3r+6Tn{~pzM_@*SKzbBv@PkJ!PWCgGVc%;M)6o7%- -ztkyp+FE_yEe;<XL0vsKqqS&LizT+>=S#K{7vq?$1+I1r#63nF_P<#!6hcw$&tKO=C -zG!Qr&s?|4DtT7rjFC3{Q5fp6u4Lpnu7b%QEJl`e319IOspTSns%dfW)7$c*$l|}&# -z^5p2NIHLGk$dj*`>OaEJP@^&)pLYzu!;_JaCVys%;J4s(0$yynQibtt1ap_APB&G# -zNOp!YF)hi6(d@9Hj>^sKjTQ)skP=(5>qxaXFuZs*AP-N*&Xel4xaS?PUD>C+U%mSW -z{a(|Xhb+uRVE4!hN)6S&9Z0wBE-L7k^{|`7DQO!x-4bvM%cSxnsec34y|cuKwDAco -zdJ}~q>#3wafPr3m$W<#CPm4;Q*^#cGB`&yvuQwb`bK8%<YeRhe3|U-8$bM`8EVP6- -z#uDJ2&BYsc>GRyN@rHY1cDlH<i8i9gsHN94#&g@|G^A8*ib=^4>OOl!UZ;E8#GjWp -zCSAS}4=T*_Qj9$r8eHpnd?&FpMlr&`+%qxK>hYme0QC$ni9f~R2<LYe)O|L#nq`W< -zcD2Y^Vu*g8QE|RU$Ugpj4r5=M*S0O4McuDvu6Q9a%0W)XJ>08gV)>(+IvVal%8CLE -z6f(Gu?R7|>kV64>7-gc%yUe~Cl5KYkGx-LY3Nz+o>@ox#p=o#N4U|T%J^bI)(Ht;a -zEtpkQK)^KyxZbyP1~bNK7+=nHw_XOKWVpdUDl<r5p-;|bn%g!s#c!2HFX>)NNNp2s -zZY%Vj57cK@WeL%07M&?M{9b&6A;x0$a+FGSrWS>0oaU)FpBB1)R8IrUqU5aXvKo4g -zcx#A}{<2hZu+v!;7-oRSd+z(98)*okUd@pgXk~UJ?uK(`eK!r!($%3%PwROc7OmLT -zGSz~`9ac&HqWu#oWa44lPd>1BW%8@DoJzN8oFFGdU%}`J;gDGH`i_9<-MsjYhMyUY -zEC5d|-gOCF{haW+Mq#3TejGZtFpDJz;>92E81|Kc>#FXSN>z4z>gTml-!80Ueit<c -z+9tq-QhX}nzj!l60};s#AM~e%lMKWSTkU6q{C_srgj7O{z2l#=eDw_?Rzj1uwb4Hq -z4hfr9{N=^t>QHTA@~8J7F|P;r%!O|4&!rr7Nlu$IXA+PbVClv8)Qh)caDLKL2&l;) -z$6ktRlkp{$QGrwJ@M!gc45P)WKjIVv&bOEtP>o#QJ2_UPajjg-<#2kARov}byiD!_ -zn8m?1*T68@rgwW=8CT%Kd(A1r7O_8TjSPquFG=1b_@fp|IG++)Bo2!EgwBGJjT^>a -zFD1e)y>kB^Q~S@g4nju6SxI&(xRL9oE*ly?U$20>j*v2>;@TD}PF1VeM!RSN<^RG8 -zy-V0GAW&``;uxZJ8Tj1Rt|l0p%kteqw6~2hV^w@CkGGoeNBh=c>iWW@`|zQRmRg-N -zp+NY?qpXgUey^UJDI#!5EFrA!{BHDz|Ld(Zwochpx>@eEVQz7ES3(Q$r?@R*gY=TK -z?zX6P;yC_nm&{sa|3-q(3?R(}!Wbl*{H(ZD#-bftA$<QCZD;DxKfj}V4k30ilw!n! -z1=vG`V7Ah6N~Tw(D(qM5qJ{t3b(;+*75`%*z9dpf$(-YA$S($Oe2Se6ttjax;n6>o -zE>Py-xSN;}sZ14V%VVfXT}ZurEXQnw;)Rk@sx{G7!alz1$<$RO(H`;}m<?DNAM8oy -z^+St{@>#nRUc-YVDor-<Y!VR&u0w%5$R<J?PY>^rEr1ec>cLA443R3G`5`o;1NGd2 -z*+<N{6^BA#OL_2X*Z0|_yXRne!elAInTs$GJNv+uvr_OLgV;mB^AZAg-F)UzbyELu -zDezs%wKns^U_Qx_l!4?QfZ?2b`>5?o0(DGDmWE0ZSNHV`i<x}CB4kV8W*6KnTYq`# -z@{{OfgmU|s+OI8nkt$5hq=KaJ8h5r)#T}u;nSbQCktQoDq>>o>wnW=;fuWcPE%6hZ -zkVR_)?;nMxMa=UKYD3y@E;Zb}rk@Mvo}_Ta<eOPghkhDcf88n@03~H7FBQfN;nQ&R -z4StvGn4C@Ogld@T@d_v3=MIzX&gaKu9CMBj;*H*j!RGA%Qv5G&#l#WOjN7Aq@4Z6Y -z!>+S+e!X1IR9#d~EqH5r+XD}~qT{X})Pds$P6J&YQAE=}yS7$Q^Vxd{P+B(#G^h=a -zz5^o*FKB*Cmv?_f0h}_cFOVnSp=K5w;fTOOajvO`uD$4CZFKs$S1c*#vYu-V{(AYm -z7v%5`&R@}g$6a+Oy@PzFQ#4n|Rl;a>u#Xs<8}6{OI$h=u@}m?vz^{1LVu`p$N;;69 -zCljHT$JTC${QNV$L6+KMiS>7?_i47|uTSa8Y-kyqa@sDK0S+%Vh|;$<s~m0Bat)hk -z4d|L`8H(_`DL<OzY!+K9pn?X%$jVxU$+^hifDwts3?{Z4-`u!qGwmna?c%Q*5RewO -z-nDvL3Dk&cc<I!!2sAm<9*L<Uwk;M;>3<iD4F@I{_w`0A5|t~8*W~DuJlv8EbC_yG -zm4tnrHCzcVz>$uGAb$%I^jmW54SDR=NDjB>AEAJrl0T`+%c9N8{@D)(S5TE)oB>{p -zOvq3EsbmGjcFFGoT>C@v@D`Hbu(~v2`%|*bsAS;lk6lGIIgk5Uem;n_h;J-N3pW<6 -zJB-n$F1S5)UXz|=?^}C?ZfJq44%IvFN)+Ga%wf|IK$1+`D&&u?Ii7l^TzyUc9~xEG -zf3A_=Urh=G1{>DE0n^05cQ%DNWNW9v)whS@ASaY*?IevXX)1?3Tm)s|3F-gRy&g;u -z5K`j*06(<<6ZriX7yehFvoP5mZ9-Jlu=|?@sl24HsH)Db+kgmIaWTnTJ#QJUH)E9d -zimS=8_q)vIT1w0z0%2;2oTmpX7x!$SlsyB3_?*e#QS>_I=OBG|Z<Uu*9~O53q)+nO -z^5ZwgYfJnVUac<r*(^>BM}cp2-^pMW4By6a>V(|J!fUu^o%hrr5mJg~onFsGKCn2E -z3RD}je<P@-)PUce;YT)3tyLL%qK2I=ixCWc;49!V2bJ|%V(~3yLp8hM{?CXad+0@i -z3%(w%`byL<$Q}VPppKxJ5`74%yo!nl)AfqO0EVJ|YS$X16H;MaG970a`|*qzf{AN= -zFpilA$Lz*PKOujLa5yuReCu&O)I)5$i884uEn_{1x?TbM1{C<OZ=|)@^wQG?<n9tn -z`r624La?eWEkfsXEX>b0d3pgeU{WZ8wiI}TAU8|CPiI`S*q$n@-sW__Q2sphb2mHr -zmb{SUrtl~C|Eqp2t+ZhA8(P)V=YM#|f-BRuqOJRbYr+`trZUzVJI!+Pa<7hc17fy2 -zTi=#m(IWWF1EfC8mmMhr<w*)yo;}%W4l=q^r9lhqA`&-KTF6i!m{B#qo1aq+Vndv^ -zpP6q{Y2!;GU73FL9)7Vz5FZw7GTbJ95Y32<pJ9FA!lm#g$rSLvyW@H=Mlu}Mhc>4y -zFI6L6u|r5syTv|R-bixMKyjZAQG~K{JwN?ny!v`b0yLyp^#}b{oA|ls7kV`1L6X20 -z)m=K&$!<8eob^B%kAUfL`zhUP3)qovXxNiENOjAWu#~<`7(&D_lpv{zX{!C;q`sF5 -zjUAgP@a4}}F;m?2>`)QBQc?zi3Kwzjl=3j`Qw=DEztGZ;AR3uB@3j1LSup6jGk7v& -zI|21G00{4AHprbVY>PD@EF?+SZ}+-IO~<ka^;e!TrifD_OrpCAZ=NjtP&GRkRgQ?W -z5Jn?zx228?b%JebtH`zHGRoF5?VMtK^S8pWfv#H86f_cQJm~?W-TG35$vr`%d)aE$ -z-tl$J4;6O5y?f^q#&7wEd;x(1$SOt#g(K8PAY8#o;{Dr`3)35>UWjL;)T#00D*-WG -z--Ex}yK4zviU2D9%3vy+>#nY@x|(vfu4(t;kGJly6A>-1)Y$}YR*pKJ>5s)am)Xpn -z%uJn+!!&xLO+--@d<x!OAGpv;V?R=J8UOo)ZicT`PCu2?*>mA;<tZQg5a%T|%r(w6 -zfJ+}TStam!&5vkM+z<~=_W*0gx<naazBw$f1NQ)fLlcH?rD9g7ZtTWipDj@@#u3K} -z>h7PeD>--A&<v{I`(i^gDj^cY$xrwpNk2*)sz=k=qVq>g-JScL6)mm1SFYb3?0(S+ -zUzuucW^9-Wpo&~*BfJq7s%bp_tyk_IKsmv3+6izbCc}1kQs9WEa`x>MDAr4op_ev% -zWyWk!fuhT=EK%k91Ev^`G&8U!@f$Da2Z#1o<rL3oc*>0AY1qx@9$RF{Kh(``na(xe -zdz_0+^@e_=h;KD}`?$D9ee`g~87rfBcLLBZg5Y1a4~<XUvmA{r>dwtV32HcOfNE&j -zccl^PxFmuSnA0y_5m#B)-k&UVTUfE-V$sZdHy^>+c)^ECXyh|bTlayLSDqjBB%N*r -zE*Z@ZVvP=Ib(EP}%rn9b`0}J4dN+$LN9WdNo$Y4*kexwk;HfB%FVPCRiablCCGrL< -zlSJw1aFO-P;nGBHJ`d^0{|F9-0NWo#Uih6W0KBHGxel;{KUXMNXqb46T}h<Wo;?0@ -z{E7N&Kw^$}Taj7-Y3MK3i5B)R5y8!>sf@krrmd<cv3iR?r@Cfgc2C`Q`(yYX$>{{Q -z>v8rQ<)puSuXTt2=yK<oc8Y97=&I=#7c-RZ82teW@<SCEx$MoIN8}z<1pt4E8!cWl -z-|XBEB2x0MxFTG+esRg_dO@7LV4=e>T^<fKrXJLmXX{ZbvW)8)LIlkcV@jSWMiZfn -zF5)o3m6ZvN_={z;!_nd^@g!ILuXT1u$T+8}MTS<S=`LW6j;76)x&%zHJXIE{naszA -z%5hqNqQelHqzJ4Dsn50rARUFQFN%a9BD6Cjo~M{y(UL`DZpL+8<Shde#*%(SrfJfr -zR>*A5pepvR%s{LS#L(h%UH&G=({VOF&PYGm&&lNOsMZ?7dVZ_DE;M-8&RuC7e{Hjk -z`aW%(y-=*(Qt4)_weFnS8atidBQ{lJ$yI^iRPZU|f>_!rz4Z0~1{mShMd4G#zsu)7 -z7fq&U$+3+x16!>s&NNh|#70N5=5XldFTRNNU1#!kR@|r|F|#|%e}ke~>{?b1?i@fv -zB`{3L)jbaRFP|OP<`LAg1`Id;<#+@?hAXXdx~5{YrORlAhfL4Zu?+h){udEyzKJ&d -zb_6Q9#M3wb^E164c+TxF!Rf`2+TY{uf-%+|K4H>*zL*HzXLh!FA6bTg40{m<_o}j) -z5vhwT#S?@tS;k%!6P-;;XN4WW4o|wXuU+d6&nDHCKSVTKw?esXZkxcU`RTnYmG1xV -z9wIWTH!Gmw!*!G;$=1A$la+_ErXJo43u{Z(#RlwrYA~`JQ1|R7=!f#PS905j_)$02 -z&m*f#NewC5Dh->ZZoT*d>oO>XFP<3Vq<lNoG-0f{w3BL?tZGR9(&m>J2F5!rBD~V3 -zqcg2X2ghvCjYTyz=;m}W@HZcw%NFm@(<;P<B(O=9d**{-MbR0Zvfah))YH)fJ_lNN -zzN;|N5y$5kP|%kbeRc@x6TvVH=U+ecX@*u;rPzCJUNTfaZw0?gl<jOar;7RE_C*0@ -z$brJRq2490E6_~nK%O|S0~yas&6|26nE1(cUkmpc&=+kC5hAvzZyX<go<sPP5woEa -zTAX&Pc-D1qJ{N_9v#~kFh#D==$YDFdN5u8v_{3fxz|e&vGe^RiW%wN(rx11pDrO(A -zQB6w3G`=c@?kvm%Q=0Kj0xSkkd)&WPYfYsrMTOJn$~!Xc87e(Fv@s$D4_y<jx!tXx -zMfur|2AUUeQ5MM0vJe`C7M{y5orW;If%h=4rifI3@yM2r_-t=rDuZL}BDvsLr1HnK -z+niVdAyqFmzYvnN-8PvaPxa5jDx0H8n>ypo=bM5mmVW0qm{zj~?w}{*jt-@BMtLhO -zFkDn`GKTm}rT%69%qy{J_|GG5IL^g?&T94?3stN#H*^jBl`eX9Jy6}FmfsSvZwuh_ -z<&UQ>l7pH_y_xxH<q$Zy2Y<D+*4!=>AOZ6Pwrk;S^Hf$x|3)stJkECe)X;h+hOT%q -z<^BX{unqhMo-vE~!scL%6LZuzLJ$3#o3JWz{~p3)K0;2XedfDkvz->oc1OW{=V8#O -z>QXjr#sA1u3)n3fOgLL=HQ$n+%=$3_5vhQ|bkDQg{wu1<KIpeI?H>vbj|{;XO)7Oh -zpjo!3h%~xW@Y~T_r@{)SPM;~Sc-_)uR&0J=g9mvYY&UzFCM{w)A!Q1F%ZiG>2ExZ+ -zm1jqg@|!jPc+|&wPGL0SO}8c@26C1Vl%9|82HN+|E%#T~=IVEiTy?CoTze)9H#uHD -zE(|6Ny5+4-(7SCPy0P0y`=i5;E9t==zz&Ulvy4uaM(YBplZ_zJn1~P`@6e9JEvWls -zauEY-e6>4;Ta*OyE*q;(vJ?T=*dbPLLVhWN0%Bt|@Xus^hY}~=!k-uLs9UASN8`b- -zDpqLEBeLRy>x9FFGR*)HcJCJ5#TBX0=s_P`d74*h!5Ne9q4it-&F?ii++6)=VDi3j -z3904AXSr}0oMA%aB_miCiJn^G76*P|5aOj6fs`plsT95caqp%qnn$0I^*R(5Y0%en -z5mVmi&m;9O8T|Jzt4F5wWSls2tO8GSut#*NFn1iztp#+m1)0xZ97TkAfggL~NMCZc -zm?N3Y>er_<>=A!Ph9Y$t@#dCs0rVlv2fYdl+Ea6<yP<7eReNt@UafV$VHKsSYs0pM -zz;%#tjeez9&TFm}qcq2O<72pGJfE1%6WR%w>zbr7a~|l%(mNlTmn`t_@W&#5wWi<{ -zrasf3C!lwY;A(~1X?r-P9e>#)-zm4tQUsp1kN?ShtCapy^*nw;5^C3B0Nj8`h><uW -zjl(Ot892k6gy0pA*2LyTd|di!o07kOrC;CZ+gJ#`(%Px`T~qUoiagtRAkZ#4h`#H5 -z^Dzu`IA3kBFrpj&gt76sh~hB9Q=;3>A}fd_J#XNiD{iovTtTh<A$pN}{Js~~&~!k~ -z0M__(oHPHPA<~jDz1R!B0p%Uy%(Axn^7$rHY)`5`BNRxolJ*8fD=6eqWK`w%Cs2FJ -z{>|AG!~aYR!;0WFcbW@SATN^wod;b&%@TKg2`F^`Sik*vs52DV%CW7S?`K%Q;Qter -z0ms?8Px5pp*-gix7XCTY{Yi{rf>W_PPdxiX04Z?hG)z6ku?D+34OHMza+>D}qm#Zj -z2YH(#KrmP;mBk7hG*(aai0F1di1-#1PTj0>?c7#_L8s36w_}~<3gvKl*+fhcIMeg7 -z7Buf3R8`sW>T?*y@c>MPJqN0~_U8GTbFx>;+fcr-S5bkIY+FBK5cQyeA2VidjgFA% -zbXY3`T_uGv7F}etz!LFc=}EC1obh3jpNah}t92qB-*k%>v7pz8hScXm?WJj|U1rAO -z+?vMULZu7`w0U@tLifpOHHFF69Xk6Y=Gm9ID4|hh?<l}3@l2&u`?@z6vyoT>?{sy6 -z%&NZva=nwQfk3lnvzy#u`obKF4MWdCq+5Z7=-y0+WAn-dxSWpufEFyq?}t+xl$5t+ -zNc{=^W&Vw9M8wv0_!k!Te1A3YHl0kq7ObaEkF@CS_K*4kjae8+tPx+pNcgR{KC)wO -z(BoY7x^8m=Hov{Plg;D2oxBd@Ue&AwsApr{3?#9qxMYGj<G;=?k_9=PPf9YujnQX+ -zaRVvB9vnA8V6d`jT-j+@_^QkQ?RNj{2V^LKkYGy_U(Es)q@7?BvA0E=z20*@gF=Q` -zm0X~mrr-OV1x{-?1~DOt6c5r^+}h6m8*khB!)Z%UnytQ0nx!@dt0QMWNO2HwAlsY7 -z@x5hvE9j(VjJoR>wT@5qpN5y7cIF3X-D7Cc#!46kAW~!@dz91Sh&n@S#R$9OH`OeJ -z{K~l3Pvo|IRY=*XGCfC$yP`Q}f;g1cc@_NJj<pJ5xLIULWcj|khzbaCYD%+yA3IkZ -zhp``YjJR-xT=aF$qDAyFQmH`1{Sh4ZB>B}q81ZU$*#jLYT;I<|QnIA?l45!xNDUB- -zwNdB;u#!@_t*l$2JFdH)!ZAospjEcEhO)98W~tzC)1dy^av_CTt#vl4?HZp7=m-SJ -zdHdrtb4gF2{_(<tSs8YkW+kPwl_v3^sHX^|>N@8y;*kbj+VeE#b=eS+R>ZyC{vNz; -zGdFqCj#dJX<-5WGuO=jzT}`PKNDsQXVXqIspduM^qO~mkOR<iOV$FZ5IarJ5ltU^+ -ze_^zA1w%vN%v~%%7ngPxI0Ka&)sys>T>Li(h^tT=P9Xm>1=Pu3_e!y*P-k;0;~w)C -zBOH%Zz^-tO`rGlbwyoGnj0V0y=&2VU`CayTcLy*X_3Kka9oz+IG|dm+rn$hCf1c|A -zv;oymCC$s%q+9ePt?tra3Cr1+Acdg^WL$HCw<QMP+06KHUgr1kOliX|*_^tEvaNS5 -zvv0UtT<_V^n1`Ob=?f8Jd2}Lj^2?a8a&pywuh4+jYY^kTb4W{B_4^!jq9}$|jby1j -zmvEizMe!{1?@Qxd6Ut6im6P9pT-Nr1zNkk5)K9v;n+0<Nv8A4V_w$Y2atl9%%eXz_ -z5yekS)`12KJgL`f=TJxLUu104=$GTKKbptFI;iQ&+(p%OLkv(Io4F!Y5fdm^BMECa -zqi?r^a1_6N9t0FexWFc+xej^{wAM3)`ARggi_K5uLkI%P{CXtmo0D3V{}n6&a>3<x -z;qtpjSW+{ozX=Qkh?Qbrij*rfsW6~o7r2{hVudN;K1~XR1X{jgR<kOfeQsXL3^$ok -zhs-N>eh!hB3nq77Y8ueG()1WPrQwyRBXuyU85Sy$VLb(!FB}<wbeR~`%dr?v;WbT# -zp;kN#3>-uZ-{>9Z^+1cKQFuWBl)Vy0xO%t)>DyB6d3+r{H!a=Qx9sjY-&G^oC`su_ -zIx{?wq~I^ZxlqY@3bYc36V0-=U9nw+v6OPc(}|1F2to*Q0GKKHg|a)>Mcvrv{ESc6 -zdGcRKtjMK;a(}`_Ls#v28O-u#RFXIy%Mp(S6eE6HZ|Vh#^*lNPI9qw3x++N7weihf -zkx<zNNGSuI->}Nlw@c!Ps<~|Q_77}L#=?4s8OfzMS>D}dGarn?)mGU+D!W8idT3k; -zu|~ov%xLg4Wr*oEDY~J7b9*}tTU%)xb7nSC)0!*05a^OU055i@G_>G0q&F#sl9C^M -zv|4DIQWYJxwukdC+WZOpLvQ#lX>c{RF{wKl$9s2$S`2p3zwy%j5MMxIz^LO}g6P$9 -zV(^}ljOm%i0V$XFrHDJz+|0d%PK-pZ&W}%Jafa5CNj1UwIY&R{+6v#{*Fh7c%w2TD -ziL@Xp+JY{Je!Vr&$cP@{O)A0GK<@CE+6W&d{%#+A-FbsStEdPx?*7XyE}%6}c_v2~ -z&I#Q#Fq-fh5bPV&wSQC?Fd~DwV|8L@H%7qBmfR<K%)5ml__7(p5%a8Ld_(6_Px_U` -z{r^EgTqrcK-2bEN5A1)p3wEKK|3G_Ls?%oh9_OcaM9}=+kI#Vvk{>muLzh=e*M346 -z$|H&JKT_ZYLcpLNX0f=gWGVaDJwm5LciRYn;2AQ5$K06`QRVl7Y|MJ<L49D<fA-oC -z$>a{X*ds+;)nVB!Hq;#1CGfKa$mnQ^Xh)rIKB8L}dkz((l``OFDyg#=&rmGOUQjX9 -zmjy>G*<-;%(R{oBScIf2cEoHk0^67)0=htWN^i%%i|)P%0nqTBThb!Gk0eislIST! -zFiL4(p(8#jb1m|_MWnN`YLs-Tijvi1a^Gres#vHGPzH1)y_JKJaiyF^bc#{AFohEc -zZCX~vjV40dF^XYlBch@Ie+c+r->7#9Slg(R9(?m9{RXtBn#>)BZ3Nn0@e$9Ls2dsq -zy2P3h8$((CJIens-=bsj)8zE?C-QOiNE;Zv(9)tvKBH<C5bz-3^Stv)BW>@9@xj@v -z_2N_*0aD)hpV9fPlkq(MmScS-|GC&omu%$&UI`!6i|1GhqC;CT;Asuw5UA&|d3>n2 -z)A_}(b9-qpenNJew;M7}|3M>L!~|NH7I(~E&Q%)}W)bup3zv!!F|mYz=?Yns&$?Ti -zZQx9nbcJeOSx~2!jA-RRkbrG!5WHha{cWD0Xm}lPW3$~ZC$(~Y{z>c=s;uOS)N&RK -z4cUoL(iiYYRNmbiz`K_3+AIZom{+$Tr=Z>Zu{fr`C4WI~L=rLXCrjF=LF>7<DXYuT -ze<-dayem|})Jcf8R%f2GAQ1Qomb#AD<}*h@JR!3?>}|IZ^r;J}Q@$2Yd|`JvG@W&m -zpHoq?(niOKHXr~~_x4vez?J}dZI)4yTG1c!ZrbVJ9R`jzAc0nO5HZfV3?j@ux-Ue? -z1ql`(o?x-A+$YmY=TY<cvtaT<*B_A<wO{O@%rbLV9hV(rV8%-hM71k>aS{px*PbKQ -zHj8CME77zO%$wfk(<z4T24?3ncrh8_Qzxb^_<<+y+Q~5B;3JAT@7^(Fgw?5bE6tH{ -zpSJ{0E`!-0zz{i-<Hh+=S<`<@w`p*BAlvZ9pkQboA)U7M8M$B2;-4DKhX(Ps7ciyA -zKsoqS+azr+D+qPB$Brr`Cz!IY?ikunjb-=Y?)R^!E$AR8mT2~3;|uRg0d5c4{sK0& -zETehq>eRf(Bgm|`>{bFb@k(M+N8|k8FJ#&9eO1;%;1X7PbI>i!=Bx=0wy*W3WjC>> -z$<a?7)dz(5qUi)GFHJi7@HAIf<a(!t(~pz{cZ=6_ExB2H>=DPlLwm3tO`w7{ldJVR -zKFz;}tZ8WFY*jjZ+Y`l){AaT_nWBOj!iep>N_CCeT2gBGC!&GDrWus3_4_?X=!fB6 -zCPJb-@O-tJza#wqX`vd&m4_kI;NK$ZY}1&CTLu>1sED8~EVNVp4Knt`cNo(r%2qL; -z(BzYa-j&N;7x-k^{<6gT$2F3Q0^YV;@GKE0`ozBtL<vfxI+P!HG+eh1on<fG^qIpS -zZx^_k=Xlj(av03+EW{7(Eij{mMc2GTZ$JzNB<ss{b+C4-|5Kmb7ND9n?MI_x2}F43 -zN9W;ZQ)^f0-<McdZ7K*$SB#3B1eZC)Y4$R7!>M9f&<)<+!&Pq--1mR2nE3N9^>QwE -zJCSGoS4(&-19?l~rZm)Q>I7NX-Gj4il6{2MI4XwXEJfC!;fyKviF5Pb7bIF~DUyl~ -z@WaE+p^Aeuj`);fw3F~&#*4;j5tjFe9bA{8J=i%I6ATeLzP%N#V;BZP$&ZrbJnIIZ -zR7;T#N12YEkykfq#;|K<J-AL-MvB6(WHWmtI*t_my5t@a0b7h?fJL^Hx7*Y)3$2@( -z$748uxpepl)&MUvho1wLZl|8aT^|nc{D#U%4siPFT9xQruwjI}>C9KGI}Q2~0eR9r -zuqOeM>UBuzLLr00`bi=4mzAqS9e87wyPoc+JFlKqD`R7Qsj2cfatdmK(p8hk<v6?! -z2jjQrTd6cVdbpW6i)L|qJ5EUTviZmElX%qCnL&F;IP-SIv`FPxOj*?Xdkqr+L6Wy< -zHPb|>mWZ`N12d4nr`qodZ?>n@2$3*H|8zj*wF7CQyCntXeIQ&jORXE>F-~hK#!GVt -z*-tWZD<)Gv(gxoc`IRn9SNtFNUd+pC_=a<E-xL*pNg+6RJ7<c7dav$G+i7bN{kUFH -ziq?Oepv!KwLtEYAST!GG1UU)hSUt0K68w(-%n4qG`qkV=OU5@p)RXprc&Tgmw#TVh -zk^B)Wq(OS@0!<w^$1Ht^B3I+MWG*Hf;HJSJwL^`{E=evtmU=-vRVraKA_`I|z}kvr -zZ#<rV#JEPQFDgky9D4ZkQe&(5?X8niYPFjV9{ZjK<f;r5j~HKCaL@+$wWTVWH<2CJ -zbC+ZuD;i|lEXU=3kIrcsqs5M4<YmCMH=R?3+H71GhCM)C7wzp_#z-#bP`o0wio;ZR -zl8P)A=PxgCRR`<&1`mpEqiD>9SU<+q5uvS{mK<O#MYVXP;n@I=q+;EU@go&GC&!(Y -zt0K<4>Z8nU+RYy4K8znw&Ty4eH1&j$s1x{dz!J^N+s0@kpE|Z--~YCg%-p5u&{#4v -zRZK`}Hm2>M@I5SY)sEU`jg%HcS@}}SvxHIOfvQydWgX;xwR39|T&X@QoQb8XTYXzs -zQYrHcTtF@<`M3Aqx0rjEdcCy9P*sY_z1!M|#-|VoQ5UWY=}7`!sO&-*k&>i45D=|_ -zGScD{AQ!Y4XA|+cE;vjz?WK`W7Hj8X_)HDV20e=Mt5C7SAY`EeJ_Fisq~*cZSN32@ -zCT~a_4#|W7UwGz^l*I5}Q8R<jRO_PyroAuM)GpqhHBc0VPmbq4>{<V|5hQX1XQYUc -zHn%MD<+!vK=S+aY4!BMxuvZUbELvU*|61(p2<YAnQct&?^t7a*DQ&s^oqKoxvd<oh -zRxjw7csE%o%E~xdP8g9D*D<zv3;#QQTPq=GJLMUF1Z8>uG0?9X+(kD|!UR8oS4vSp -zpzS9sz`eQ!K=_kwS0phCA&WR#{iqsf42cjmB_q_)I{_{WYaaR&4|QptVGW}~s-eq~ -zv7lUDIX7SATfxLV4T;0b(Y!n|@^$ZR$wfytt*xYHxQ0ed#Fr0(32hGqykYsR3f&%P -zb77TS^|^VLHjW;1Pw9^)=mkX<$K71{f4cP3OfMzbG4f+nY-#3<an;wZVg77qpWWl| -z_*0>@3<I=VB~ivS9ZhYUvm9v~R~z>02a8=kE;a6F%z0Hz2f^2;#6RZ$q(H^f9t1;z -zwKwGSD)B$7hBLmQWjJHC1f~{Uu7a03-$o?-S+dO4!YvJ-*+i6a6(6*Tf^H^@52q4? -zuD#XeqWDX`|1SDgC)fIxLYb)NZg}==xW`fI!T?dI+5lF0wEwL5DfjlR2}9w!cS!&% -zLgUG2B+r5|wswrtnnMwx!<RzlM^Vihiu3{Ed0}{DjGqLi!&%He25~|`S(yV@M@Y4Y -z3M?Ns-Pe8e=54{&URcL111U!cR6Na;<s8SF5eu2N-fH>plzWir17Y=jvRvnolMOm6 -zY~V^6iASwSC}mY3Q@xxbG_P5oh^VWX-=_Bp=>eCP6}B_qP0qVNF1!EfNZf{ued)b| -zRR`bA!D&>-qJPCIi=e>SlCciJ(oPY}<`ro)?6B*8de+((6nR9C4}U%Tb9AGZ+>9g? -zwK#5)+Hk-m^`auv6LmaQNw!MrtFD;t3FPaVXv+Wx4^vcSf6;V3p;U&CKVmI>Cx@(i -z&&hv4l}Qnaf<$Xh*Z4c*N^4uYxm8|NJFTY?x}@JxA=^r)@?U+{VW35;6RF^4cSiP4 -zW1-)4)jsPsUp^FPB<#SyFPV+aV^=q9Ou~SgB7pxS#&Zq{+Q?PfqAS#HgV+Pt1v+$9 -zF+bZL@~OWPi9RG9JEIs{j9Ms%q`7l$-C}6-!^L*sc!ve=aT12i9K}F!#j&P!Qv6fu -zjC0YXXWb*lM8zxviK&XdjjsUi`D4_1yNt|~P3$Fwmfz&5^d_y{B6~3}Q)mTxHuzuo -zf(-v2hXh-}rsGG{XM>Uo=&Ag~0kem!5PSyxQtAr1tYe!^MX@ZBxADo47(@OHuAOuc -z5M0gR7}K_k>j=#!=8?60EeLqy$S7Rm)uH=_!W5<<9i9F>Q^Pz=^a?dMxZ${AA=j&d -zjO$=fc%vFrCaVqTRgUH_j;BExZTE-B61ENkSv2sQAs_2ciiV79r~|Jipc2wu+2o%d -z!=AesN4zEw^%GGml>Je611urQwhg$UC!XTyTz#ptk!fj_dDyVcziRR8uS%jf5UMjg -zJVRPDwL$olI2H=Zv(_vftJV3nn9QzL5-3P*!I*wyI*$1}(192a@n1c)Qej)Y3<XQ4 -zTZG6sWt?27FDl$>xYMBv5CTTrQUOKm0*=`qYocx@-fP&BpY%|DVU4A4*#K`;FXozC -zLrH`X$c0`txEkcuDtCk^53#L^n$@L8N;=z`2ZS$BbWb&$h-i$nMAeD#MZ`Qs)2>TP -zV$GyO%~P<uolx2$_)>bGc7*V~i(?B?J|laVIxvsEo)d71l1dB%UkEmr$JyNZ>Nc}h -z?T-F)?w}xBf0Tj=oBBZZ5wf$!Dtp199mG<M-}*HC4-7DeY9{%<wXJ@jvGT9ubEPu6 -zO5!iO+Ywlh#^7ZNx&7qcDdQR6^p@gr5Ut^w`t@Nw)a`vT2fdrP-2fx|y5bC152-l( -z2X+)i3XeReDMoSzu&DK~<mj-~fH3!LmwII{?E1XRI<nHWc}<o^D?%>#SK!hS8RB7~ -z{)1Q$Ls5F^ygnlF@o_yKU1168ces5_0C}D=Tah9K*O*i`oFkZ*Yg?LS`_>Z5o5krX -z*eygoR^Lvpleh%Kyuv)<Px}+fq86M#4Zlx<Zfo;fpENI|fT`0PMH`w85FdpWSDSWq -ze`|dhwGWX(>mQPs!IR7%(`1tiTx3|`ncX43xx1N+x%yL}+<U$*5z3<aX>*GYRWAd# -zFCJnhx>zG{Mr9~TzI0IhUX4GNV#gMh-g&2uO=TMGG#-3P`AvKZZ@FvM7#gmNA|Id+ -zs#!6Qn;00KfZa1A@Qhsl`~z5-IE`>J|Mu7ZMz!x;F=n1gBqyF5X+kIz!43KEUlFQj -z$H_;?fxKIxS5HEBlNHLYzD3;Kns!D<2a1UP*iEh(U4pc3Ozz96dl~_*O+NdRehUto -ztbvM2zh)4s801nG19LF3s|+^Ex3#8h3myOdd!pPG2F98cc_m^44X(2K?=NzR7<I}0 -zt`3G*wTyalc1z^v<GFC{-^0C|CD-vr1}nI4+C+1iYuPuE4F75t;!ZibR;^;3r<*7G -zgtMBUB#e&{mu)X8-7eQxUKxBgfUOPAS;(zlZThns&$Z&@m3|T$mJ7B*bP(fMLy&vD -zeR;B60{SyW@Lix*5h4)Qsj$d9vr)}SGH(MB3sS3aB2c-*@s6tQ-4l(rSI%zq?tzjN -z*~o5Q$WUh*W$*}X)I}l$v?Ncq;A}A1{BN~KJ?fVN0V+SWB<4s?h;%3Ka5{eO$G%yU -zq(QXFWga2P2ieT29X)7tibz9zB%n@Ct1m650)9HtoEBg%=0O|<ep8xJtrFz?=7Q|{ -zv&QMf8C1AM?}~y~`y8AI>i3Q+=}49~N)uGg#lN*L`3l51K?F>6PyZU0ex!(w-|>=$ -z*UX^WJNyIhwV5g_U(eW1>N*Jv;(op8ApKCP*iz;;nF$p#|MGR&6-A_>%x^KTs*aI7 -z0*u`emL76Ln_SsQ%8VaK5j+$8iA9Vq=ck&O1aiVm>mv)a8KubScehrdWeJD1I*D<p -z6=x2qKUQ}${14+t@wSvRs7s%skd|scqI0LeilGm;_tWNQCjSVJ>rww=MrnvD5Mk}X -zhE=K-H;s>w6p#I9R2i<i@G`xMeSGS<3e-fZ5<oq}O}Z;h--5hF(T@%uALD-@lE_w# -zMY7lsn`I{vu1QDV22unJBcEL*tCw<W5q*VSnU%Imnyim{vQLmMQ(db5q(!uOEX&sx -zH&Aki0nckCjba4D=Y=~<!Krnv+C-_aoa+Is#Q(h*9bYE$mWG_+uO`40yejZB0bHGm -z|FYp0h$B85K|7v3U`tlleCBYnRMfgjQY4*~wUENNaNG($G2}~!e^UnC6aE&-Se{6r -zDJ;oWttFGETDxDZKO3g1jWzo4bu>o7J-Nq$LE$)DHdMOhgV-%)80(alWYiv=?jmtS -ztqNI3j7<WL=Uh~wcBUr?B8z=ffw}y0;rj4UR4Pl6K0*1s6&{MFjjEyqg?|N9N<Y0B -z6CWu*i?(yYt#GQKY<>Xrf-aGQyaRjAUxs0ibvC0*bUo*sM&R@^m&8f!e_P^6S>sz? -z9rcz@kmBr^=LT00P)ek+r3OH;7Jx|a3>I!+M9L%WZngQ80JEH!{*5IGNKw9GT0*hR -z`6m3%{+<|j9N{Jk5wPAMe7GaJCQecuuVY`$AJRQBqCe}AxDSy6lD5TrFXu!D5*F3- -zD#|j)a||~URbqL2RGXz$jnnj$$J(UpCNKINoxd24;n}tchATsV`LHDr2KsOP`_I=C -zB<(E=#Od!X(zS&p2n)Oj!5xc7yn=`ATa7;q%8-Li@c-n8n9{wy7csejVX4*Y+#aGE -zQ|vJ8A0}h7!3Tk=OZgD4aS;*7Lc#~@zRe4D#ZI*{8iK(8B!O6<|0f9q{of>zo0FTk -zSWpbiO$#i3;Gx{FvJt<%O(vV~6Ju@tfc2oQ1w~D!o9eh9cfm-L1caA)^0fSj;mR{; -z!cv;@5nYV!;^vl%`iFw5x)0|HI(k2zm7xqKC!-gjlw3;Pgc}PnL$wX+djm?WX%bq< -zoJh*xB8?cFxuBoKrHRH9(clyQ*!&yf!QnziP4GlE*?DFoNVr)ZC+UYPK7k_1N+(Qx -zDBM0Ks6z8I96t9Si;;UfC2Os4qaq%<%*sK6iuYLLIxDVXyeT^`QW*0bXzU(p|NIII -zy*obYMz6p7G_%?Dr<GvIyIGue4W9oXIz)@UATY?lzDqGcX9|cJdAeRVo4Ee(|G)qB -zs7k1aNaLt2h?avRtZ|ws?OTmdqJb7t{?{bgyu!*lXm8u*Rr9YXYHr0KlQlY)32Bs^ -zrCQg5BY`ZCnDfCFI$1VGC!FEOknhc2)9E~P_@agm`RW{gHWuBo;gRIDlEDBpNra5j -zh*N`{N1{th4W|wH9_`g6;>*uopw(;G8U*b-I4#<b|E~qM-$gt4FSDx-HW$VMnOqAk -z{ag%6-g6_FEEYIGE>)H%LE~Q_$sKI6EoVFI9GcLJ!OO}W^Mn|8`deIOl&%_mZxY$o -z%wFEyYX<uoGQBuf^74%8xo?A&f=%v)5ZK4Tm}=e+KN<sLL*z}sl2SPiP-U8fw}TOT -zW$fGK!}MySSKQ7moVsh|+J329h~c;G!82dg%$;L<46qk+W#`{|K`5y+)zKQ#|Kn+I -zTGmN4EnP}4dy^`DE3+H7#aTd5^(@<m0XIR*ffQqeK5|gRX8f&9r^n{A@MwCUEkYT1 -zmS!3XpDm2Un~Mws&e@LyoG@bSL9etEQnu*!SLW-goFxQBhYc5uEnb#?=0$}!JY#F& -z2qw#F)WxTA50Wu7+N`QHE8-h|RGhi6jTvEj`ht){cBNyu*bv@Z=2I%hkm3*2KPObb -zj-W)-{Em6JGP@x8nIyFE$p3}Eyd>y6S~MNBq%QZ;8rn101ILgJ(0e9elIfU)j;>Mv -z$-6wi>H)v7Q7-3}Ka_nI_C6@EYMFRi8+cXvyOfBas{jE(l33G7Br3T(QaRt_spYIr -z?N}2nePS3#T^N9|VMim2y|yn9KlJOHx*Vq(Mi21>K_nQ8VcqU~_eNHam<n>wa>q`$ -zQu){BOY<poSgIC35S*C>#e8aoE2i^~^wfS%ynwiue5A5(dz4-GBU0CajuYED<#-P( -z8{Ejix~AKgw|#W|#crO0wpSt99(mI35g$F+b|#@OID-1!>@4|ulUbMJw21_Ce(1~O -z=X>%WJ#5XN-Ybe5DQqt`Ymxf}As+pa=ppG%NqaQk7gp1&z#k<lh45ytj_e{H1dwZe -z{Z?qS0SU1nwz4DW47ouuSEW|oHofM8`toS~pL+x&ho762sw2NAZ5!4@9Y+c37>d`F -z!Td2Coc%%+DjV3_e~WniuK;fkknlvN`q{PgR|r{d<`CedIIuKXGi^pt7c^~fW7>cW -zl#G#)XsRm1#-MWoYQblJD5~y6rL16hOAFP^007X5_ldassfF*{!`MsZ62k8hps|WM -zPgaJ1eF4lQS+&G~`DAp10khqki&j)C!noDeUffPVwA&+E&L>!bi^R!T%@)jB5i396 -z{qU#dJo4`A7I%3zm}Wh)sOEXq)Y>Q3x!J6At$u#?=dEqxfiVPs-|j2WNaNsB-w_8? -z{mJsb53jKnGoH&ib1|Qn&~d=U%?zl#D7j@8e1Y4V<KYYAVtCxB(Z@^-&$&c;G>9*~ -ziG&uZN~Z)>hGK+^%U|$E&NU-eJ8xpn?Pbwx<Y0;R>Q?S{;HnTT&1aDg^Aj|WqKRIJ -z>KKY@irSpt?G9Cc<Fu$IJkm6eFTK<`5?H%&|9=gt7A^1U78Pna%9LNL!9jo<oaA(^ -z{5@gj68d`94^8duDF=UPij9k1BSpec2&#FT;P(3dZxN*lylb)g{}n^ETj-iaUyZYy -z;{ih~aQTv!suS_|;BG#8UYQzzH6hw{);BM<o<LQr*+a5_$v9HMK*s!fzdRKt+j_1N -z{xxNx$p8~<CH*r$xwsItg5v(<=wFL!Ke$ZL?bT5MO};0`P-VIalLUGCu``DPq}Y(- -z#F9fsE{#_C>r!{Ua@CDHcfdB<855x+uh39Tu%?GGE`?g~3@X^FQ1D(?X-0(&JfIXX -zq9Dx3L8)ecMIKHhxg$>m2j6H1Y9h1mvtRd5cBqTPvD2kd$t5nXfxvjCy0g`4{)Ums -zMoM5w>`eq<<%dU#nj|Y0(yF5TU<G?=OY(J$J*z61C0lgB88M}HGW;_SycW7WW*h%3 -z$(g88&OAOG97<d3{C8od-&Qnc3vD+(ZrERg3maj76?TOlOH$$LBD=WDE9{+V>t?7P -zRz5{LRW+tmYy-h#TOCa3$Xf!xD1cPHI(={Y#dJu#Jb3jYv%dv<EfoN;C}Ve6260)R -zFw;ZW=L?t`19Ejyq>bCX{LnS@wrkV2$O+-^DP@!!Qa=eI)>vJ`vXKGgQwD#3Hu%7a -z!hzp^O0|!Od=IT^mt|S<CN|Z8`W(r1qv^{c==Fj;xlV1ywQ(ThFU211zI>H>=fvhU -zk2A%u0+$Xu^9K?@J&J-pI~%+nse6Xu0)%YlqBl3sO1o1g+GIjQoUV;>_7!t%ec-O- -z_xIv$E{Zpx%!IUQ-dxTJ_M`hVL}pe6O$_sY$|({WSAIJXVPX+fg>kw?Gr9&`q~<iW -ze)?&@wL}+DxzvWgrPBjbB8TGF>ymo!S0fIq%s;N!frOLX1f6@T{SZ(m?pFy|-DWXJ -zYWF2YiLAxU;xryc-RT6(6y2-aB<O^|eoo6P(K0z_o>u@1{wRL)06O=5<dy7zX6XWd -zTX&$bKFXljSwN;%Yk*>AkOldP^a;AE7E>yi;&VdqgH8E?A#}ije2K&;t1coh;-K>H -zf)`B;a(lu;rI5V-HrG#}rDyhaqj);{09EcD;n6LoJfphTmX$jvhmV`CvQ~$~n~Iyq -zaKkcL(Z5rb;!<-L|4$FBoPJxIxtG{~P*7ktk3O67&-f<(39kph7^B=0JwMFFLyC~@ -zH6T%$8Deq>=vZ3##O3)3%&Y{*VxBwZf@CkhgPLii^T}8jXUf`IrgPJsVE5XC(od4T -z_J>l`_Kg!);6fZeY@AT5KM(FlG^&W&oO8>iqN}Z05I#?lv(?*e*I{?Eh6HwhBnGQt -z`b{3u$g~G;A+iHfa}IzUzSU8WX)62-K-)eG*eNCmdlIuSLZ_ZrDX|Wfokcy*XQ=5m -z3Yz#TusjRRCCVEFoDrh^H<R&?BXV#{MfwEDf{Wm4S-mQ=^eU@AE~yP+hocsw3>@jH -zCgKjiR1&F|N3~5aJm}#iLm?@Ds_f|gfBV=klmV7q%?xF2CYg+V;K@`9O%9X6ivxL0 -zj<2&-xz}$;=9Ov<yQF-8kj)~v|J1}chPQ*5yflLr>*??j4EEXp>3Q9e*p>I&X#nM& -z9kvMaEvD=4{e(EnJ-ie5&=L9Q;c&I!#GofsE&1f*n37S3!y^Nblq+z5O{<7><E7C- -zXT;Yf%DSt-bP1W0t6!xP0Sz~pq*k*no8_F;n|1YC*d|I)TsRXOe!<ckx}nrBr5>!w -zW&W0ct0arZh4}EagdsF5p-E_>rGsX+=^BxkN<~Ad6fHg^PfVwT22)w(C6+&K>0Rcx -zph7@KUA^_?$8pZrf&9IHWfU;<Fd%BT+s}`4g5MAOF$v*zxt9lL2`<D$eI4`oiZImW -zZWAfSx5sR)%e28km`hD-MtgdWk|QUA^w^4Dhh<ly5Wk^K3^W9ULOd#6wq2L7IBLPq -zM-0l>@=o?8fFwEp53ZjuDRO-fJXbz~)j@4IolVZA?wQYmyTcQI?Xa%*^d9+5A?s_f -z8y?|I=KI4SR;30E;mh~8OAVPf$$jEX^0UfN&-n^0^rS-x63P)2+TNuU2_n?d=XBiy -zoDoQrMyjsP&QlNNV9*4Q+8~I=?jv(LfmGr&iSw91hj83D)V(l5BP950BHQ+(>`pP* -zbk8iSOS$qo+stl%Mp`Omzahi{I4BdHgS5Ntwsl_iJMn>wUA}$UY^)lTy~@hh?$FXT -z-s+m*-0;yel5w>=`_!@#Xl%IT9*q(&{$kfACS(b(T|Siw=B7G(>J~a>Po}G~-2BbQ -z0;-5yACeoSPnkp<G43~jsvyZdaWp4Ws6)`3WSkA3OSe{ko}^_t5Q%}Q%K6mC{*%Bm -zzUm?$*j(6F8ugtN+FpNs+T#37dU(;tS5A<P{>BgmoOpdji~H!fwq6=>zfP~~6Z$p* -zH-^O3ahaL#g2$l4+C)GaG7Y;cLSf4s^xA5*I`#ya+6}i>b)}r^You*3rH8vfwW(=U -zNz=<|-&;3-_=$WT>6Z{%NLT!_)K8+9p}J-LdZt7h(%l0eucNt<1(mf>P+Op|J0dtE -z;6TL+$Ph|bIl?}oj#WYBzfYE5A%s7t@BP<sz`Wttw@%~c7(^>mNFmQEw7vb_*hGbq -zRKr{MUQz*ya%RXNdxd>bFfx)@GsME|7HZyTES=hahGThA@nduW5W)sGh$1x<1Ybf) -z3g}6Uv-D^I$NZ}k?;Kgvz{MWwm0rx>z+B`&vO;`1?vgKUV$qfbrJGvh4V5eUBZV5) -zP^$KN8AGwUJ<kOBS^znQh2IUv+!3shWMGRWTejVpz#O=p*qg)bBY95uvK>ca>;2Wo -z;u!OP?vpE-3alwVtU{>ZecpkFR5Tt*Zi%H!Fy>#4AGehQulOa;Two+Pd$<Atcw1-d -z)9<>TU=;LROi{aq%J(B(`|mfpnq3rO^_)rdAuc@aatZXXb?t>t#P&wt9(!AFesoJf -z?^+VNm6r$lMI$koHXZ|4h7+rBEy;b>ij3`lERk;?rG)u`)>zZWDi5RPJUv4+jH81< -zGuu#Fn5Y;AjHB8uFsrZ-%CAqW$h;m@j?|n`5kZZ>*&uF9JkQADMkd$YqY?4~m;F4B -zMy;fbp5kvB&^06%FU+3UXujbOOZ^7}mjS^O_XQ#;8OifQd-&PLEL#&tVbJExuB^X* -z@n|MOjt;wm+RC;*QH7fv`Apt$hAL9UIwajtWLujJP%TmQXiNjFEYqXA%cY#&-)B(B -zrk#@ZMLANg%omz}Ov=CLC5TxqGpB3@Tp#TaqRXUgtZ-ROtSDg1$)ZEvO!3%Yg7SGa -zUl<W9E}b?t4qkrgAc5h8(c|}JX=F=(pm-T}K$|*d-LB`V!F_b-PKO7HxfER|>y@SK -zO6>DqWadm%eRncLZ=>^KBt18Rc4*k0kRnR>Jfd8SIFt(sCf-TaGKHi|(Ab1V8rq9j -z*=-aZM-jx5ia>JC8Cy@0Wr}KDaGvZ>CgTGmn#lCW@IZ(!vM}2?#+9qd{cV4L(YyW& -zJBhn$xqiBrhLKv|4G%}<i{wH+r3m7~t%}yP^J(53Z0YL|Tlg5M*20Q4kKNsRfP&Ff -ztdA)<Wlx$qT4ep5ccA6+Pti;5YCXn+(<cp-{w)u69f-d<N8y4wN|_7u^Q^z6bSR6z -zvr7NpQ%+|GF@a{EPBT4uuL#e7GnpGW%U4)DxVFaas1Vq1Inc)@#ewrEykHg*x?(w0 -zZ<<QEl+Rp-GiO5~L^V^7ge}GTi(R@r)G<TvZ@$AkUce`|O&q$e04K|BM;#FR3dpwb -zYI-3>EyL39MiDxOa4BwhJ7GC;hj(=|^RO|Rs~T~lu)$~)&LvZnQC{eOiLbkBO%8Y0 -zNci&?(za1apd49%2jsHn)9mOe1KFW)<VwonKvF)#Q<`BWn|7{MpE0nY?p<jW8ymY5 -zGx|1~>*tT|NvGa!ehE`_^R0j0m!F{4+t>ySyn57LNwv8(dz{k8OqjfOD!p=3fO&$k -zIO-r~6gzf4Heao$nuX?n`;h)UAg27ph0rt>tG?wCjB}2*qs2;6;98|`dPa~o#tcDn -zDiA1z3+WepBR};M%vb3QHH-LvzuRUP(Car>z`s`}oD|&yqSucR<G^cg%)g0Ex>&U% -z=hcRpAc4j?E=i^OJpaH6sp^uA9BI3=eAyz@X9m(ZoolEF_D0r!JebH%F-`6_`h?2< -zR9yoRD)!W)q}vjuOhA*Z_UgROyx~(bW#Iq1N%tSA_Vsewl0AUjo_5FVwg$yokkaM% -z<OL@@%PKCv(U~?N^m-PE0th6kpL%LiBtI8MaAOXRHL&Ph!4{^I0jvn1QZOIsnGzhu -z2p#98OKZ8`5=cjX>>o0;XzIdUmi(;zd7p#X_}{=4LSCp=4SSs7UNz#H45dU4lexOn -z3je`hZa-yr<)(a1&)RmhE0aw`Klqv4EE=vpeMMx8%H6L<VMOV?JoC>zc+pQdO^5v5 -zEmS=jE4^Oz*j?%5rHPRW+Yp+!eZ!kPKXWXSh8><lM4u6VP?zi<StiqSo)3J?o%h2I -zsty?KU2SPHd-NDVT2>ky4i?-c)7`#FMSXC#=lFdG-C}$;h7_1s%9wgVi+gMATta03 -zry)_qnStosRd0OiOqebT=_K3-MEZF9IA01VVVFCTA-p|~3#JD|nlGnNx&iY|dVf?j -z#@MhHaxLjWr3fgvl9Rr<8mNU(H@=9+4Zc!AOBivp_Z^@B2FjMb_9tuwYC0{dMJnK2 -YVQu*TZ8nl?f%`zS*L1OeLEkX&JxSZWhyVZp - -delta 28 -hcmZqK#I&TDk;}!`kpTo87$#a7O{|gH{LazO5ddxw2oeAQ - -diff --git a/amd-ucode/microcode_amd_fam19h.bin.asc b/amd-ucode/microcode_amd_fam19h.bin.asc -index a32b4d61..8cff9013 100644 ---- a/amd-ucode/microcode_amd_fam19h.bin.asc -+++ b/amd-ucode/microcode_amd_fam19h.bin.asc -@@ -1,11 +1,11 @@ - -----BEGIN PGP SIGNATURE----- - --iQEzBAABCgAdFiEE/HxsUF2vzBRxg1fK5L5TOfMornMFAmS3F00ACgkQ5L5TOfMo --rnNEhQgAizSV8IFpvaYNytaJKLA4uevrZneGPV4czjCXnnj1yHpfQmCTyZQnoLnx --7gyzf7K5271zO51FBQ5z2Nm48a3XPUhMbQLNP4BZdekLiA3bRpMtSyHct6zD0ULm --xaFaOQ7MR1tGADhlon1bDvtnOuixUhwrZhEIlR9MzQAzERKDMOAVTbxn9ZhMfYiT --LhA791Blyyi+6Z9uh7BpaA8l8uvoxt+uuvlBTjQMR3ER/TEjgcsoy+XhhK4QKS0V --wJCtcDle/3pF+N6SAFWiXbNZ+P8p19afhcYddDl97xtpzA6/8b20a2eHkrqnu/Ds --jTozF9kmhiifYMYpXtXgSOwI3GRZbQ== --=t+j1 -+iQEzBAABCgAdFiEE/HxsUF2vzBRxg1fK5L5TOfMornMFAmTEYrcACgkQ5L5TOfMo -+rnN4IQf/QKbOezXZ4OYzaPANvsZQEAzLNfuylC/aQMwrPaO7daz5/zmCN4HU5XkH -+dDT8DYfPg+fQHIgxAw0/L24xPOm5Op/QuLVDyDqVr4qvL8+65eeI+JqxD/wXMXYN -+V34kkLM2p8iuyY1Nc8IDLXu4X75KGNPbKZlMRKMU3Pr7ai5O4ihmiAM+N6qv1KEJ -+YToNN6vrg0qt1cv0SLM8sa4e7L1+oblUrg/o0FViYE8pxsU3ZRRVSJMUg+lKjvl/ -+1ZPGKOdD80fcNJ+ItYGHNNs3eCc3WgW7Kc/E668eH75Yu9Zt7ewWZX8Sg/mygleY -+OzMwhbPJg4bF4zm7C/Pku7i1T2Omcg== -+=km2X - -----END PGP SIGNATURE----- --- -2.39.2 - diff --git a/src/patches/openssh-9.4p1_Fix_zlib_version_check_for_1.3_and_future_version.patch b/src/patches/openssh-9.4p1_Fix_zlib_version_check_for_1.3_and_future_version.patch deleted file mode 100644 index ef3ff4dca..000000000 --- a/src/patches/openssh-9.4p1_Fix_zlib_version_check_for_1.3_and_future_version.patch +++ /dev/null @@ -1,25 +0,0 @@ -From cb4ed12ffc332d1f72d054ed92655b5f1c38f621 Mon Sep 17 00:00:00 2001 -From: Darren Tucker <dtucker(a)dtucker.net> -Date: Sat, 19 Aug 2023 07:39:08 +1000 -Subject: [PATCH] Fix zlib version check for 1.3 and future version. - -bz#3604. ---- - configure.ac | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/configure.ac b/configure.ac -index 07893e87065..e3128dfcbb4 100644 ---- a/configure.ac -+++ b/configure.ac -@@ -1464,7 +1464,7 @@ else - [[ - int a=0, b=0, c=0, d=0, n, v; - n = sscanf(ZLIB_VERSION, "%d.%d.%d.%d", &a, &b, &c, &d); -- if (n != 3 && n != 4) -+ if (n < 1) - exit(1); - v = a*1000000 + b*10000 + c*100 + d; - fprintf(stderr, "found zlib version %s (%d)\n", ZLIB_VERSION, v); - - hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 7301d0ca4bcb24011dd7b7350c268e9b7e12635e
by Peter Müller 22 Nov '23

22 Nov '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 7301d0ca4bcb24011dd7b7350c268e9b7e12635e (commit) via 54dbdf552c673dd3b06c51dde022e1083a9b42e7 (commit) from 15e864ff1a4f791fecfa7f2c38980c043ff5c6b9 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 7301d0ca4bcb24011dd7b7350c268e9b7e12635e Merge: 54dbdf552 15e864ff1 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 14:57:37 2023 +0000 Merge branch 'next' of ssh://people.ipfire.org/pub/git/ipfire-2.x into next commit 54dbdf552c673dd3b06c51dde022e1083a9b42e7 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 14:56:09 2023 +0000 Core Update 182: Ship and restart strongSwan Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/{oldcore/106 => core/182}/filelists/strongswan | 0 1 file changed, 0 insertions(+), 0 deletions(-) copy config/rootfiles/{oldcore/106 => core/182}/filelists/strongswan (100%) Difference in files: diff --git a/config/rootfiles/core/182/filelists/strongswan b/config/rootfiles/core/182/filelists/strongswan new file mode 120000 index 000000000..90c727e26 --- /dev/null +++ b/config/rootfiles/core/182/filelists/strongswan @@ -0,0 +1 @@ +../../../common/strongswan \ No newline at end of file hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 15e864ff1a4f791fecfa7f2c38980c043ff5c6b9
by Peter Müller 22 Nov '23

22 Nov '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 15e864ff1a4f791fecfa7f2c38980c043ff5c6b9 (commit) via 7c3540fa9312552e93cf748dbdf5084e38de621e (commit) from c9a249995bf0297dfd4bc0013bd0eb8294785eb6 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 15e864ff1a4f791fecfa7f2c38980c043ff5c6b9 Author: Peter Müller <peter.mueller(a)ipfire.org> Date: Wed Nov 22 14:51:29 2023 +0000 Core Update 182: Ship and restart StrongSwan Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> commit 7c3540fa9312552e93cf748dbdf5084e38de621e Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Tue Nov 21 23:37:44 2023 +0100 strongswan: Update to version 5.9.12 - Update from version 5.9.11 to 5.9.12 - Update of rootfile - Changelog 5.9.12 Vulnerabilities Fixed a vulnerability in charon-tkm (the TKM-backed version of the charon IKE daemon) related to processing DH public values that can lead to a buffer overflow and potentially remote code execution. This vulnerability has been registered as CVE-2023-41913. Please refer to our blog for details. New Feature Additions The new pki --ocsp command produces OCSP responses based on certificate status information provided by implementations of the new ocsp_responder_t interface (#1958). Two sources are currently available, the openxpki plugin that directly accesses the OpenXPKI database and the command's --index argument, which reads certificate status information from OpenSSL-style index.txt files (multiple CAs are supported concurrently). The new cert-enroll script handles the initial enrollment of an X.509 host certificate with a PKI server via the EST or SCEP protocols. Run as a systemd timer or via a crontab entry, the script checks the expiration date of the host certificate daily. When a given deadline is reached, the host certificate is automatically renewed via EST or SCEP re-enrollment based on the possession of the old private key and the matching certificate. Added a global option (charon.reject_trusted_end_entity) to prevent peers from authenticating with certificates that are locally trusted, in particular, our own local certificate, which safeguards against accidental reuse of certificates on multiple peers. As the name suggests, all trusted end-entity certificates are rejected if enabled, so peer certificates can't be configured explicitly anymore (e.g. via remote.certs in swanctl.conf). The --priv argument for charon-cmd allows the use of any type of private key (previously, only RSA keys were supported). The openssl plugin now supports the nameConstraints extension in X.509 certificates (#1990). Support for nameConstraints of type iPAddress are now supported by the x509, openssl and constraints plugins (#1991). Support for encoding subjectAlternativeName extensions of type uniformResourceIdentifier in X.509 certificates has been added via the uri: prefix (e.g. for URNs, #1983). Support for password-less PKCS#12 and PKCS#8 files has been added (#1955). Enhancements and Optimizations Because of a relatively recent NIAP requirement (TD0527, Test 8b), loading of certificates with ECDSA keys that explicitly encode the curve parameters is rejected if possible. Explicit encoding is pretty rare to begin with and e.g. wolfSSL already rejects such keys, by default. All crypto plugins that support ECDSA enforce this by rejecting such public keys, except when using older versions of OpenSSL (< 1.1.1h) or Botan (< 3.2.0) (#1949). Make the NetworkManager plugin (charon-nm) actually use the XFRM interface it creates since 5.9.10. This involves setting interface IDs on SAs and policies, and installing routes via the interface. To avoid routing loops if the remote traffic selectors include the VPN server, IKE and ESP packets are marked to bypass the routing table that contains the routes via XFRM interface (69e0c11). If available, the plugin now also adopts the interface name configured in connection.interface-name in a *.nmconnection file as name for the XFRM interface instead of generating one randomly (e8f8d32). The resolve plugin tries to maintain the order of DNS servers it installs via resolvconf or resolv.conf (6440975, 8238ad4). The kernel-libipsec plugin now always installs routes to remote networks even if no address is found in the local traffic selectors, which allows forwarding traffic from networks the VPN host is not part of (190d8cb). Increased the default receive buffer size for Netlink sockets to 8 MiB (doubled by the kernel to account for overhead) and simplified the configuration (no need for a separate option to force overriding rmem_max). It's now also set for event sockets, which previously could cause issues on hosts with e.g. lots of route changes (#1757). When issuing certificates, the subjectKeyIdentifier of the issuing certificate, if available, is now copied as authorityKeyIdentifier, instead of always generating a SHA-1 hash of the issuer's subjectPublicKey (#1992, 6941dcb). Explicitly request permission to display notifications on Android 13+ (ddf84c1), also enabled hardware acceleration for the Android-specific OpenSSL build. Fixes Fixed issues while reestablishing multiple CHILD_SAs (e.g. after a DPD timeout) that could cause a reqid to get assigned to multiple CHILD_SAs with unrelated traffic selectors (#1855). Fixed an issue in watcher_t with handling errors on sockets (e.g. if the receive buffer is full), which caused an infinite loop if poll() only signaled POLLERR as event (#1757). Fixed an issue in the IKE_SA_INIT tracking code that was added with 5.9.6, which did not correctly untrack invalid messages with non-zero message IDs or SPIs (0b47357). Fixed a regression introduced with 5.9.8 when handling IKE redirects during IKE_AUTH (595fa07). Fixed adding the XFRMA_REPLAY_ESN_VAL attribute twice when updating SAs in the kernel-netlink plugin, which prevented MOBIKE updates if a large anti-replay window was used (#1967). Fixed a race condition in the kernel-pfroute plugin when adding virtual IPs if the TUN device is activated after the address was already added internally, which caused the installed route not to go via TUN device in order to force the virtual IP as source address (#1807). Fixed an issue in libtls that could cause the wrong ECDH group to get instantiated (b5e4bf4). Fixed the encoding of the CHILD_SA_NOT_FOUND notify if a CHILD_SA is not found during rekeying. It was previously empty, now contains the SPI and sets the protocol to the values received in the REKEY_SA notify (849c2c9). Fixed a possible issue with MOBIKE in the Android client on certain devices (#1691). For Developers The new ocsp_responder_t interface can be implemented to provide certificate status information to the pki --ocsp command. Responders can be (un-)registered via the ocsp_responders_t instance at lib->ocsp. For the watcher_t component, WATCHER_EXCEPT has been removed as there is no way to explicitly listen for errors on sockets and poll() actually can return POLLERR for any FD and it might even be the only signaled event (which caused an infinite loop previously). Now we simply notify the registered callbacks. The error is then reported by e.g. recvfrom(), which was already the case before if POLLERR was returned together with e.g. POLLIN. The reqids allocated for CHILD_SAs (including trap policies) via kernel_interface_t::alloc_reqid() are now refcounted. When recreating a CHILD_SA, a reference to the reqid can be requested via child_sa_t::get_reqid_ref(). If another reference is required afterwards, one can be acquired directly via kernel_interface_t::ref_reqid(). Each reference has to be released via kernel_interface_t::release_reqid(), whose interface was simplified. The testing environment is now based on Debian 12 (bookworm), by default. Also, when copying files to guests, the guest-specific files are now copied after the default files, which allows overriding files per guest (fixes an issue with winnetou's /etc/fstab and mounting the test results). Refer to the 5.9.12 milestone for a list of all closed issues and pull requests. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/strongswan | 1 + config/rootfiles/core/182/update.sh | 4 ++++ lfs/strongswan | 4 ++-- 3 files changed, 7 insertions(+), 2 deletions(-) Difference in files: diff --git a/config/rootfiles/common/strongswan b/config/rootfiles/common/strongswan index 22adf24b4..a5f256e02 100644 --- a/config/rootfiles/common/strongswan +++ b/config/rootfiles/common/strongswan @@ -181,6 +181,7 @@ usr/sbin/swanctl #usr/share/man/man1/pki---gen.1 #usr/share/man/man1/pki---issue.1 #usr/share/man/man1/pki---keyid.1 +#usr/share/man/man1/pki---ocsp.1 #usr/share/man/man1/pki---pkcs7.1 #usr/share/man/man1/pki---print.1 #usr/share/man/man1/pki---pub.1 diff --git a/config/rootfiles/core/182/update.sh b/config/rootfiles/core/182/update.sh index 0bcb91105..b481f7400 100644 --- a/config/rootfiles/core/182/update.sh +++ b/config/rootfiles/core/182/update.sh @@ -32,6 +32,7 @@ for (( i=1; i<=$core; i++ )); do done # Stop services +/etc/rc.d/init.d/ipsec stop /etc/rc.d/init.d/squid stop /etc/rc.d/init.d/unbound stop @@ -58,6 +59,9 @@ ldconfig if [ -f /var/ipfire/proxy/enable ]; then /etc/init.d/squid start fi +if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then + /etc/rc.d/init.d/ipsec start +fi # This update needs a reboot... #touch /var/run/need_reboot diff --git a/lfs/strongswan b/lfs/strongswan index 357283b15..9496d05dd 100644 --- a/lfs/strongswan +++ b/lfs/strongswan @@ -24,7 +24,7 @@ include Config -VER = 5.9.11 +VER = 5.9.12 THISAPP = strongswan-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = e8e84d79d1530b9a968ce8429fec0e7b3fcf19b75fdbd4371a38763d8564d5b37d012769006330b5c94cff3e914acb1b1a3e2829749effb8c35f9e5d775be491 +$(DL_FILE)_BLAKE2 = 40f80162970152bca028a9af6b37c4c6e2ef38e75f88b92bf03f18641dadacbc574441e74cd0c7abb49ce4c15d9b82301aa90cb07c4fd223bf83163ebfbc2381 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. c9a249995bf0297dfd4bc0013bd0eb8294785eb6
by Peter Müller 21 Nov '23

21 Nov '23

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via c9a249995bf0297dfd4bc0013bd0eb8294785eb6 (commit) via 62bbb4e87675997b2109d05e0f1bafd1a28d9876 (commit) via 2b56891d7ad1f2d8e9ae1a94bd4b3ea3fd2451b8 (commit) via 93d9052216863349f71226d958a00e754e9b9f51 (commit) via 3f1b19c18b6d7eb7976276aede289a3e77a51b92 (commit) via e979680572c5349b38200131ffba5022d5372023 (commit) from c4a96583466e091828207c8f361010a0b016e7a3 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit c9a249995bf0297dfd4bc0013bd0eb8294785eb6 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sat Nov 11 11:58:50 2023 +0100 mpd: Update to version 0.23.14 - Update from version 0.24.13 to 0.24.14 - Update of rootfile not required - Changelog 0.23.14 (2023/10/08) * decoder - flac: fix scanning files with non-ASCII names on Windows - mad: fix calculation of LAME peak values * mixer - wasapi: fix problem setting volume * more libfmt 10 fixes * fix auto-detected systemd unit directory * Android - require Android 7 or newer Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 62bbb4e87675997b2109d05e0f1bafd1a28d9876 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sat Nov 11 11:58:49 2023 +0100 minicom: Update to version 2.9 - Update from version 2.8 to 2.9 - Update of rootfile - Changelog This file (NEWS) lists the most important changes to the previous released version. For a full list of changes please refer to the ChangeLog file. New for version 2.9: - Change Hardware Flow Control Default to No. - Timestamping mode is now saved and restored. - Split "Screen and Keyboard" menu into two menus. - Update to gettext-0.21. - Change return values of --help and --version to success. - Support higher baud rates on MacOS - Save character send delay to config file - Save newline send delay to config file - Update translations: Romanian, German, French, Norwegian/Bookmal, Polish, Serbian, Swedish - New translation: Georgian, Korean Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 2b56891d7ad1f2d8e9ae1a94bd4b3ea3fd2451b8 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sat Nov 11 11:58:48 2023 +0100 mindlna: Update to version 1.3.3 - Update from version 1.3.2 to 1.3.3 - Update of rootfile not required - Changelog 1.3.3 - Released 1-Jun-2023 - Fixed HTTP chunk length parsing. - Improved Dutch and Swedish translations. - Fixed directory symlink deletion handling. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 93d9052216863349f71226d958a00e754e9b9f51 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sat Nov 11 11:58:47 2023 +0100 meson: Update to version 1.2.3 - Update from version 1.2.0 to 1.2.3 - Update of rootfile - Changelog The meson changelog is defined only at the 1.2 level. So what changes are related in going from 1.2.0 to 1.2.3 can not be determined. The changes have to be reviewed from the 1.2 branch of commits https://github.com/mesonbuild/meson/commits/1.2 Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit 3f1b19c18b6d7eb7976276aede289a3e77a51b92 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sat Nov 11 11:58:46 2023 +0100 mdns-repeater: Update to version 1.11 - Update from version 1.10 to 1.11 - Update of rootfile not required - Previous versions of this package used to be on bitbucket but that link no longer exists. The new git repo https://github.com/geekman/mdns-repeater was started by someone else as a fork but the original developer then moved to it. However all the history was not moved to the new repo so that repo starts now with version 1.11. It is being worked on as the last commit was Aug 2023 however version 1.11 was released in 2016. There are 11 commits between version 1.11 and present time. - Changelog 1.11 Blacklist feature added (16 blacklisted subnets allowed). Socket limit increased to 16 sockets, moved to #define. The first is most interesting. Say you have two networks bound together with site-to-site tunnels, repeating mDNS over the tunnel... And there are Chromecasts, or Apple TV's at both ends. Even if you had firewall rules to block traffic, the devices would still show up (albeit be defective) on the opposite network. The new blacklist flag allows you to filter such devices out by specifying their subnet (or individual addresses, although having such "private" devices on their own subnet might be a good idea). Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> commit e979680572c5349b38200131ffba5022d5372023 Author: Adolf Belka <adolf.belka(a)ipfire.org> Date: Sat Nov 11 11:58:45 2023 +0100 mcelog: Update to version 196 - Update from version 181 to 196 - Update of rootfile not required - Fix python call patch removed as correct python call now in the source tarball - Changelog file is no longer used. Review of changes has to be done via the git repo. https://git.kernel.org/pub/scm/utils/cpu/mce/mcelog.git/log/ Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/meson | 14 +++++++------- config/rootfiles/packages/minicom | 2 ++ lfs/mcelog | 12 ++++-------- lfs/mdns-repeater | 8 ++++---- lfs/meson | 4 ++-- lfs/minicom | 8 ++++---- lfs/minidlna | 6 +++--- lfs/mpd | 6 +++--- src/patches/mcelog-181-fix-Python-call.patch | 8 -------- 9 files changed, 29 insertions(+), 39 deletions(-) delete mode 100644 src/patches/mcelog-181-fix-Python-call.patch Difference in files: diff --git a/config/rootfiles/common/meson b/config/rootfiles/common/meson index 59541f9bc..c8e29f313 100644 --- a/config/rootfiles/common/meson +++ b/config/rootfiles/common/meson @@ -1,11 +1,11 @@ #usr/bin/meson -#usr/lib/python3.10/site-packages/meson-1.2.0-py3.10.egg-info -#usr/lib/python3.10/site-packages/meson-1.2.0-py3.10.egg-info/PKG-INFO -#usr/lib/python3.10/site-packages/meson-1.2.0-py3.10.egg-info/SOURCES.txt -#usr/lib/python3.10/site-packages/meson-1.2.0-py3.10.egg-info/dependency_links.txt -#usr/lib/python3.10/site-packages/meson-1.2.0-py3.10.egg-info/entry_points.txt -#usr/lib/python3.10/site-packages/meson-1.2.0-py3.10.egg-info/requires.txt -#usr/lib/python3.10/site-packages/meson-1.2.0-py3.10.egg-info/top_level.txt +#usr/lib/python3.10/site-packages/meson-1.2.3-py3.10.egg-info +#usr/lib/python3.10/site-packages/meson-1.2.3-py3.10.egg-info/PKG-INFO +#usr/lib/python3.10/site-packages/meson-1.2.3-py3.10.egg-info/SOURCES.txt +#usr/lib/python3.10/site-packages/meson-1.2.3-py3.10.egg-info/dependency_links.txt +#usr/lib/python3.10/site-packages/meson-1.2.3-py3.10.egg-info/entry_points.txt +#usr/lib/python3.10/site-packages/meson-1.2.3-py3.10.egg-info/requires.txt +#usr/lib/python3.10/site-packages/meson-1.2.3-py3.10.egg-info/top_level.txt #usr/lib/python3.10/site-packages/mesonbuild #usr/lib/python3.10/site-packages/mesonbuild/__init__.py #usr/lib/python3.10/site-packages/mesonbuild/_pathlib.py diff --git a/config/rootfiles/packages/minicom b/config/rootfiles/packages/minicom index 38d7e524a..d100edae3 100644 --- a/config/rootfiles/packages/minicom +++ b/config/rootfiles/packages/minicom @@ -11,6 +11,8 @@ usr/bin/xminicom #usr/share/locale/hu/LC_MESSAGES/minicom.mo #usr/share/locale/id/LC_MESSAGES/minicom.mo #usr/share/locale/ja/LC_MESSAGES/minicom.mo +#usr/share/locale/ka/LC_MESSAGES/minicom.mo +#usr/share/locale/ko/LC_MESSAGES/minicom.mo #usr/share/locale/nb/LC_MESSAGES/minicom.mo #usr/share/locale/pl/LC_MESSAGES/minicom.mo #usr/share/locale/pt_BR/LC_MESSAGES/minicom.mo diff --git a/lfs/mcelog b/lfs/mcelog index 0f4694f2b..619cf025a 100644 --- a/lfs/mcelog +++ b/lfs/mcelog @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Log Machine Check Events -VER = 181 +VER = 196 THISAPP = mcelog-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = mcelog -PAK_VER = 3 +PAK_VER = 4 SUP_ARCH = x86_64 DEPS = @@ -49,7 +49,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 4e182c84ae15abf3673e0210940830c66377b275e05c0bf88ff2199ef1b87bf1e9bcff12ebd9c07e5af00d763369c96aae37c274174563fb3ae0db7bbd7306de +$(DL_FILE)_BLAKE2 = 50871cd7a3c4dd6f4c4d613c7db4528d972ca37ba17b0a5aa4876d8fc92d4478c2247ea65748310ad6d4b950d1abc9bd0ea40193e72b36d38334547382477849 install : $(TARGET) @@ -82,10 +82,6 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) - - # Fix Python interpreter call in genconfig.py script - cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/mcelog-181-fix-Python-call.patch - cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install diff --git a/lfs/mdns-repeater b/lfs/mdns-repeater index bcd393f9c..615008f56 100644 --- a/lfs/mdns-repeater +++ b/lfs/mdns-repeater @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = A mDNS repeater -VER = 1.10 +VER = 1.11 THISAPP = mdns-repeater-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = mdns-repeater -PAK_VER = 2 +PAK_VER = 3 DEPS = @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 7fb9278808deff0f62ce1e0ada3e1c367fafa0e27b12714b6df4fe25f2d2eefb6401390fdd74bf5ee98e361b969c7422a01053cf3181993a99ad05ae1605d795 +$(DL_FILE)_BLAKE2 = 88e6b68635be152c2fcd7eb0e5be038d694bae590edde283dec83b896c2380d83cc84d5e4cfb02b6ae957d75dd7525975e31c418d05f5732b5f41382fb130c31 install : $(TARGET) diff --git a/lfs/meson b/lfs/meson index 6a8b10143..42222c522 100644 --- a/lfs/meson +++ b/lfs/meson @@ -24,7 +24,7 @@ include Config -VER = 1.2.0 +VER = 1.2.3 THISAPP = meson-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = a8239c41ab5d20c26c057293dc85e5577eb9e6eef7a39acc67a0b5b1e82b1afae341936431d96571ff83e96b7648a80a16cfd8eb581ff29b2ca88615657d5ca3 +$(DL_FILE)_BLAKE2 = 7d76c54bddba249ab97ebd5dd0afc448177ff9fa70812a8ca0cc9fe308c9b145b3fbc3ee068acae0fdc73edff42134b7a0b618cd80a05347a424aca7bc8bbef8 install : $(TARGET) diff --git a/lfs/minicom b/lfs/minicom index 1799e103f..c2d379b13 100644 --- a/lfs/minicom +++ b/lfs/minicom @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# Copyright (C) 2007-2023 IPFire Team <info(a)ipfire.org> # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = A Terminal Program -VER = 2.8 +VER = 2.9 THISAPP = minicom-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = minicom -PAK_VER = 2 +PAK_VER = 3 DEPS = @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 007a2975a996e2dd2390b1cf20e1a70c4bb1b57d224211d30e8d83a9d02a45c147df34bf409961a20ad3746cb6b5551c1e0702a05bb0a0a3f7f042d251b553be +$(DL_FILE)_BLAKE2 = 4c17f235d770ff9b4719c0ce9d3dfdb01603986d08cec245b1bfba5addbea597032bb06fc73c585886e035915dec990f37e9690b58d0a80a3e6faf8675485f96 install : $(TARGET) diff --git a/lfs/minidlna b/lfs/minidlna index d0422c08a..55941bea8 100644 --- a/lfs/minidlna +++ b/lfs/minidlna @@ -26,7 +26,7 @@ include Config SUMMARY = DLNA compatible server -VER = 1.3.2 +VER = 1.3.3 THISAPP = minidlna-$(VER) DL_FILE = minidlna-$(VER).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = minidlna -PAK_VER = 13 +PAK_VER = 14 DEPS = ffmpeg flac libexif libid3tag libogg @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = e35266be94e4585f399c80a6909318ce973d443506f6becdacdb00802ed0ce060ebf8401ff1b5dfef0b451f609d98f805c80b9a0c87e23d14084338047418620 +$(DL_FILE)_BLAKE2 = 489b7ecb54a20f6111a65388ad2c52d477164046131af490cbcef7cd3ff2b841644f549bcad708ea6d4548f4111d5b2b63bafc0f079edf160467b85c682cbc5b install : $(TARGET) diff --git a/lfs/mpd b/lfs/mpd index cd9702f9a..a9807b3cd 100644 --- a/lfs/mpd +++ b/lfs/mpd @@ -26,7 +26,7 @@ include Config SUMMARY = Music Player Daemon -VER = 0.23.13 +VER = 0.23.14 THISAPP = mpd-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/${THISAPP} TARGET = $(DIR_INFO)/$(THISAPP) PROG = mpd -PAK_VER = 32 +PAK_VER = 33 # SUP_ARCH = aarch64 x86_64 DEPS = alsa avahi faad2 ffmpeg flac lame libmad libshout libogg libid3tag libvorbis opus soxr fmt @@ -49,7 +49,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 02907f08cc504d0fbf703179b333b301c7ad8fc8535d85305faa7962dd7faa164f4492286902cb48eaf3db2a1445b541b1261c18a89ca8a73e80016af9581e26 +$(DL_FILE)_BLAKE2 = c048f128111d1d65775c317182b91d113339a5b09d3005c320cc3b14a79b7c1da0d1ba3d53f6bf348a3a404ceea33c1ad2427225f4a1f3d1cde4a921e71d6e1c install : $(TARGET) diff --git a/src/patches/mcelog-181-fix-Python-call.patch b/src/patches/mcelog-181-fix-Python-call.patch deleted file mode 100644 index b0781f828..000000000 --- a/src/patches/mcelog-181-fix-Python-call.patch +++ /dev/null @@ -1,8 +0,0 @@ ---- mcelog-181.orig/genconfig.py 2022-04-23 14:54:26.721031777 +0000 -+++ mcelog-181/genconfig.py 2022-04-23 14:54:35.577658935 +0000 -@@ -1,4 +1,4 @@ --#!/usr/bin/python -+#!/usr/bin/python3 - # generate man config documentation from mcelog.conf example - # genconfig.py mcelog.conf intro.html - from __future__ import print_function hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. c4a96583466e091828207c8f361010a0b016e7a3
by Peter Müller 21 Nov '23

21 Nov '23

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM November 2023