From: Arne Fitzenreiter <git@ipfire.org>
To: ipfire-scm@lists.ipfire.org
Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 816b0e08c68a63d61bb98adf0b6236b6578115d2
Date: Thu, 10 Feb 2022 08:56:39 +0000 [thread overview]
Message-ID: <4JvVwl5hPxz2xjs@people01.haj.ipfire.org> (raw)
[-- Attachment #1: Type: text/plain, Size: 12408 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via 816b0e08c68a63d61bb98adf0b6236b6578115d2 (commit)
via 0c0784f4b553d440a714648d3059b11709c7317f (commit)
via 7f0449f25319f65b043efefcdca335ce03af743c (commit)
from 304cf04fe0c1d08e2d9ecca94830e143671795f0 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 816b0e08c68a63d61bb98adf0b6236b6578115d2
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date: Sun Jan 30 17:08:21 2022 +0000
firewall: Ensure the xt_geoip module is always loaded
For some reason, this module is not present after the very first boot of
an IPFire installation.
Fixes: #12767
Reported-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 0c0784f4b553d440a714648d3059b11709c7317f
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date: Thu Feb 10 06:58:28 2022 +0000
core164: ship intel-microcode
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
commit 7f0449f25319f65b043efefcdca335ce03af743c
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date: Wed Feb 9 22:28:27 2022 +0100
intel-microcode: Update to version 20220207
- Update from 20210608 to 20220207
- Update of rootfile
- Changelog
# Release Notes 20220207
- Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
- Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
- Update for functional issues. Refer to [Third Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
- Update for functional issues. Refer to [Second Generation Intel® Xeon® Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel® Xeon® Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
- Update for functional issues. Refer to [11th Generation Intel® Core™ Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
- Update for functional issues. Refer to [11th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634808) for details.
- Update for functional issues. Refer to [10th Gen Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
- Update for functional issues. Refer to [10th Generation Intel® Core™ Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
- Update for functional issues. Refer to [8th Generation Intel® Core™ Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
- Update for functional issues. Refer to [8th Gen Intel® Core™ Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw=processor+specification+update) for details.
- Update for functional issues. Refer to [7th and 8th Generation Intel® Core™ Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
- Update for functional issues. Refer to [6th Generation Intel® Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [Intel® Pentium® Silver and Intel® Celeron® Processors](https://www.intel.com/content/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?wapkw=processor+specification+update) for details.
### New Platforms
None
### Updated Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000046 | 00000049 | Core Gen4 X series; Xeon E5 v3
| HSX-EX | E0 | 06-3f-04/80 | 00000019 | 0000001a | Xeon E7 v3
| SKL-U/Y | D0 | 06-4e-03/c0 | 000000ea | 000000ec | Core Gen6 Mobile
| BDX-ML | B0/M0/R0 | 06-4f-01/ef | 0b00003e | 0b000040 | Xeon E5/E7 v4; Core i7-69xx/68xx
| SKX-SP | B1 | 06-55-03/97 | 0100015b | 0100015c | Xeon Scalable
| SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006b06 | 02006c0a | Xeon Scalable
| SKX-D | M1 | 06-55-04/b7 | 02006b06 | 02006c0a | Xeon D-21xx
| CLX-SP | B0 | 06-55-06/bf | 04003102 | 0400320a | Xeon Scalable Gen2
| CLX-SP | B1 | 06-55-07/bf | 05003102 | 0500320a | Xeon Scalable Gen2
| CPX-SP | A1 | 06-55-0b/bf | 07002302 | 07002402 | Xeon Scalable Gen3
| BDX-DE | V2/V3 | 06-56-03/10 | 0700001b | 0700001c | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
| BDX-DE | Y0 | 06-56-04/10 | 0f000019 | 0f00001a | Xeon D-1557/59/67/71/77/81/87
| BDX-NS | A1 | 06-56-05/10 | 0e000012 | 0e000014 | Xeon D-1513N/23/33/43/53
| APL | D0 | 06-5c-09/03 | 00000044 | 00000046 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
| APL | E0 | 06-5c-0a/03 | 00000020 | 00000024 | Atom x5-E39xx
| SKL-H/S | R0/N0 | 06-5e-03/36 | 000000ea | 000000ec | Core Gen6; Xeon E3 v5
| DNV | B0 | 06-5f-01/01 | 00000034 | 00000036 | Atom C Series
| ICX-SP | D0 | 06-6a-06/87 | 0d0002a0 | 0d000331 | Xeon Scalable Gen3
| GLK | B0 | 06-7a-01/01 | 00000036 | 00000038 | Pentium Silver N/J5xxx, Celeron N/J4xxx
| GKL-R | R0 | 06-7a-08/01 | 0000001a | 0000001c | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
| ICL-U/Y | D1 | 06-7e-05/80 | 000000a6 | 000000a8 | Core Gen10 Mobile
| LKF | B2/B3 | 06-8a-01/10 | 0000002a | 0000002d | Core w/Hybrid Technology
| TGL | B1 | 06-8c-01/80 | 00000088 | 0000009a | Core Gen11 Mobile
| TGL-R | C0 | 06-8c-02/c2 | 00000016 | 00000022 | Core Gen11 Mobile
| TGL-H | R0 | 06-8d-01/c2 | 0000002c | 0000003c | Core Gen11 Mobile
| AML-Y22 | H0 | 06-8e-09/10 | 000000ea | 000000ec | Core Gen8 Mobile
| KBL-U/Y | H0 | 06-8e-09/c0 | 000000ea | 000000ec | Core Gen7 Mobile
| CFL-U43e | D0 | 06-8e-0a/c0 | 000000ea | 000000ec | Core Gen8 Mobile
| WHL-U | W0 | 06-8e-0b/d0 | 000000ea | 000000ec | Core Gen8 Mobile
| AML-Y42 | V0 | 06-8e-0c/94 | 000000ea | 000000ec | Core Gen10 Mobile
| CML-Y42 | V0 | 06-8e-0c/94 | 000000ea | 000000ec | Core Gen10 Mobile
| WHL-U | V0 | 06-8e-0c/94 | 000000ea | 000000ec | Core Gen8 Mobile
| EHL | B1 | 06-96-01/01 | 00000011 | 00000015 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
| JSL | A0/A1 | 06-9c-00/01 | 0000001d | 2400001f | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
| KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000ea | 000000ec | Core Gen7; Xeon E3 v6
| CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000ea | 000000ec | Core Gen8 Desktop, Mobile, Xeon E
| CFL-S | B0 | 06-9e-0b/02 | 000000ea | 000000ec | Core Gen8
| CFL-H/S | P0 | 06-9e-0c/22 | 000000ea | 000000ec | Core Gen9
| CFL-H | R0 | 06-9e-0d/22 | 000000ea | 000000ec | Core Gen9 Mobile
| CML-H | R1 | 06-a5-02/20 | 000000ea | 000000ec | Core Gen10 Mobile
| CML-S62 | G1 | 06-a5-03/22 | 000000ea | 000000ec | Core Gen10
| CML-S102 | Q0 | 06-a5-05/22 | 000000ec | 000000ee | Core Gen10
| CML-U62 V1 | A0 | 06-a6-00/80 | 000000e8 | 000000ea | Core Gen10 Mobile
| CML-U62 V2 | K1 | 06-a6-01/80 | 000000ea | 000000ec | Core Gen10 Mobile
| RKL-S | B0 | 06-a7-01/02 | 00000040 | 00000050 | Core Gen11
### Removed Platforms
| Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products
|:---------------|:---------|:------------|:---------|:---------|:---------
| SNR | B0 | 06-86-04/01 | 0b00000f | | Atom P59xxB
| SNR | B1 | 06-86-05/01 | 0b00000f | | Atom P59xxB
Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/common/x86_64/intel-microcode | 2 --
.../{oldcore/121 => core/164}/filelists/x86_64/intel-microcode | 0
lfs/intel-microcode | 4 ++--
src/initscripts/system/firewall | 3 +++
4 files changed, 5 insertions(+), 4 deletions(-)
copy config/rootfiles/{oldcore/121 => core/164}/filelists/x86_64/intel-microcode (100%)
Difference in files:
diff --git a/config/rootfiles/common/x86_64/intel-microcode b/config/rootfiles/common/x86_64/intel-microcode
index 962590af5..068cc36d3 100644
--- a/config/rootfiles/common/x86_64/intel-microcode
+++ b/config/rootfiles/common/x86_64/intel-microcode
@@ -86,8 +86,6 @@ lib/firmware/intel-ucode/06-6a-06
lib/firmware/intel-ucode/06-7a-01
lib/firmware/intel-ucode/06-7a-08
lib/firmware/intel-ucode/06-7e-05
-lib/firmware/intel-ucode/06-86-04
-lib/firmware/intel-ucode/06-86-05
lib/firmware/intel-ucode/06-8a-01
lib/firmware/intel-ucode/06-8c-01
lib/firmware/intel-ucode/06-8c-02
diff --git a/config/rootfiles/core/164/filelists/x86_64/intel-microcode b/config/rootfiles/core/164/filelists/x86_64/intel-microcode
new file mode 120000
index 000000000..d5ac074e2
--- /dev/null
+++ b/config/rootfiles/core/164/filelists/x86_64/intel-microcode
@@ -0,0 +1 @@
+../../../../common/x86_64/intel-microcode
\ No newline at end of file
diff --git a/lfs/intel-microcode b/lfs/intel-microcode
index d0a235947..db720b511 100644
--- a/lfs/intel-microcode
+++ b/lfs/intel-microcode
@@ -24,7 +24,7 @@
include Config
-VER = 20210608
+VER = 20220207
THISAPP = Intel-Linux-Processor-Microcode-Data-Files-microcode-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = 769cab71e957b83121a1f4a07f1c4409
+$(DL_FILE)_MD5 = 7ac3ef4212c41b8b1f555f87e07d6c66
install : $(TARGET)
diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 7d081bbc3..f35b6b6e1 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -39,6 +39,9 @@ iptables_init() {
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT
+ # Ensure the xt_geoip module is always loaded (#12767)
+ modprobe xt_geoip
+
# Enable TRACE logging to syslog
modprobe nf_log_ipv4
sysctl -q -w net.netfilter.nf_log.2=nf_log_ipv4
hooks/post-receive
--
IPFire 2.x development tree
reply other threads:[~2022-02-10 8:56 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4JvVwl5hPxz2xjs@people01.haj.ipfire.org \
--to=git@ipfire.org \
--cc=ipfire-scm@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox