From mboxrd@z Thu Jan 1 00:00:00 1970 From: Arne Fitzenreiter To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 816b0e08c68a63d61bb98adf0b6236b6578115d2 Date: Thu, 10 Feb 2022 08:56:39 +0000 Message-ID: <4JvVwl5hPxz2xjs@people01.haj.ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============6912303712571811687==" List-Id: --===============6912303712571811687== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 816b0e08c68a63d61bb98adf0b6236b6578115d2 (commit) via 0c0784f4b553d440a714648d3059b11709c7317f (commit) via 7f0449f25319f65b043efefcdca335ce03af743c (commit) from 304cf04fe0c1d08e2d9ecca94830e143671795f0 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 816b0e08c68a63d61bb98adf0b6236b6578115d2 Author: Peter M=C3=BCller Date: Sun Jan 30 17:08:21 2022 +0000 firewall: Ensure the xt_geoip module is always loaded =20 For some reason, this module is not present after the very first boot of an IPFire installation. =20 Fixes: #12767 =20 Reported-by: Arne Fitzenreiter Signed-off-by: Peter M=C3=BCller Signed-off-by: Arne Fitzenreiter commit 0c0784f4b553d440a714648d3059b11709c7317f Author: Arne Fitzenreiter Date: Thu Feb 10 06:58:28 2022 +0000 core164: ship intel-microcode =20 Signed-off-by: Arne Fitzenreiter commit 7f0449f25319f65b043efefcdca335ce03af743c Author: Adolf Belka Date: Wed Feb 9 22:28:27 2022 +0100 intel-microcode: Update to version 20220207 =20 - Update from 20210608 to 20220207 - Update of rootfile - Changelog # Release Notes 20220207 - Security updates for [INTEL-SA-00528](https://www.intel.com/conten= t/www/us/en/security-center/advisory/intel-sa-00528.html) - Security updates for [INTEL-SA-00532](https://www.intel.com/conten= t/www/us/en/security-center/advisory/intel-sa-00532.html) - Update for functional issues. Refer to [Third Generation Intel=C2= =AE Xeon=C2=AE Processor Scalable Family Specification Update](https://cdrdv2= .intel.com/v1/dl/getContent/637780) for details. - Update for functional issues. Refer to [Second Generation Intel=C2= =AE Xeon=C2=AE Processor Scalable Family Specification Update](https://cdrdv2= .intel.com/v1/dl/getContent/338848) for details. - Update for functional issues. Refer to [Intel=C2=AE Xeon=C2=AE Pro= cessor Scalable Family Specification Update](https://www.intel.com/content/ww= w/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=3Dproce= ssor+specification+update) for details. - Update for functional issues. Refer to [11th Generation Intel=C2= =AE Core=E2=84=A2 Processor Family Specification Update](https://cdrdv2.intel= .com/v1/dl/getContent/631123) for details. - Update for functional issues. Refer to [11th Generation Intel=C2= =AE Core=E2=84=A2 Processor Specification Update](https://cdrdv2.intel.com/v1= /dl/getContent/634808) for details. - Update for functional issues. Refer to [10th Gen Intel=C2=AE Core= =E2=84=A2 Processor Families Specification Update](https://cdrdv2.intel.com/v= 1/dl/getContent/341079) for details. - Update for functional issues. Refer to [10th Generation Intel=C2= =AE Core=E2=84=A2 Processor Specification Update](https://cdrdv2.intel.com/v1= /dl/getContent/615213) for details. - Update for functional issues. Refer to [8th Generation Intel=C2=AE= Core=E2=84=A2 Processor Families Specification Update](https://cdrdv2.intel.= com/v1/dl/getContent/338025) for details. - Update for functional issues. Refer to [8th Gen Intel=C2=AE Core= =E2=84=A2 Processor Family Spec Update](https://www.intel.com/content/www/us/= en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw= =3Dprocessor+specification+update) for details. - Update for functional issues. Refer to [7th and 8th Generation Int= el=C2=AE Core=E2=84=A2 Processor Family Specification Update](https://cdrdv2.= intel.com/v1/dl/getContent/334663) for details. - Update for functional issues. Refer to [6th Generation Intel=C2=AE= Processor Family Specification Update](https://www.intel.com/content/www/us/= en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details. - Update for functional issues. Refer to [Intel=C2=AE Pentium=C2=AE = Silver and Intel=C2=AE Celeron=C2=AE Processors](https://www.intel.com/conten= t/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?= wapkw=3Dprocessor+specification+update) for details. ### New Platforms None ### Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Pr= oducts |:---------------|:---------|:------------|:---------|:---------|:--= ------- | HSX-E/EP | Cx/M1 | 06-3f-02/6f | 00000046 | 00000049 | Co= re Gen4 X series; Xeon E5 v3 | HSX-EX | E0 | 06-3f-04/80 | 00000019 | 0000001a | Xe= on E7 v3 | SKL-U/Y | D0 | 06-4e-03/c0 | 000000ea | 000000ec | Co= re Gen6 Mobile | BDX-ML | B0/M0/R0 | 06-4f-01/ef | 0b00003e | 0b000040 | Xe= on E5/E7 v4; Core i7-69xx/68xx | SKX-SP | B1 | 06-55-03/97 | 0100015b | 0100015c | Xe= on Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | 02006b06 | 02006c0a | Xe= on Scalable | SKX-D | M1 | 06-55-04/b7 | 02006b06 | 02006c0a | Xe= on D-21xx | CLX-SP | B0 | 06-55-06/bf | 04003102 | 0400320a | Xe= on Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05003102 | 0500320a | Xe= on Scalable Gen2 | CPX-SP | A1 | 06-55-0b/bf | 07002302 | 07002402 | Xe= on Scalable Gen3 | BDX-DE | V2/V3 | 06-56-03/10 | 0700001b | 0700001c | Xe= on D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19 | BDX-DE | Y0 | 06-56-04/10 | 0f000019 | 0f00001a | Xe= on D-1557/59/67/71/77/81/87 | BDX-NS | A1 | 06-56-05/10 | 0e000012 | 0e000014 | Xe= on D-1513N/23/33/43/53 | APL | D0 | 06-5c-09/03 | 00000044 | 00000046 | Pe= ntium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx | APL | E0 | 06-5c-0a/03 | 00000020 | 00000024 | At= om x5-E39xx | SKL-H/S | R0/N0 | 06-5e-03/36 | 000000ea | 000000ec | Co= re Gen6; Xeon E3 v5 | DNV | B0 | 06-5f-01/01 | 00000034 | 00000036 | At= om C Series | ICX-SP | D0 | 06-6a-06/87 | 0d0002a0 | 0d000331 | Xe= on Scalable Gen3 | GLK | B0 | 06-7a-01/01 | 00000036 | 00000038 | Pe= ntium Silver N/J5xxx, Celeron N/J4xxx | GKL-R | R0 | 06-7a-08/01 | 0000001a | 0000001c | Pe= ntium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-U/Y | D1 | 06-7e-05/80 | 000000a6 | 000000a8 | Co= re Gen10 Mobile | LKF | B2/B3 | 06-8a-01/10 | 0000002a | 0000002d | Co= re w/Hybrid Technology | TGL | B1 | 06-8c-01/80 | 00000088 | 0000009a | Co= re Gen11 Mobile | TGL-R | C0 | 06-8c-02/c2 | 00000016 | 00000022 | Co= re Gen11 Mobile | TGL-H | R0 | 06-8d-01/c2 | 0000002c | 0000003c | Co= re Gen11 Mobile | AML-Y22 | H0 | 06-8e-09/10 | 000000ea | 000000ec | Co= re Gen8 Mobile | KBL-U/Y | H0 | 06-8e-09/c0 | 000000ea | 000000ec | Co= re Gen7 Mobile | CFL-U43e | D0 | 06-8e-0a/c0 | 000000ea | 000000ec | Co= re Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | 000000ea | 000000ec | Co= re Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000ea | 000000ec | Co= re Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000ea | 000000ec | Co= re Gen10 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000ea | 000000ec | Co= re Gen8 Mobile | EHL | B1 | 06-96-01/01 | 00000011 | 00000015 | Pe= ntium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E | JSL | A0/A1 | 06-9c-00/01 | 0000001d | 2400001f | Pe= ntium N6000/N6005, Celeron N4500/N4505/N5100/N5105 | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000ea | 000000ec | Co= re Gen7; Xeon E3 v6 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000ea | 000000ec | Co= re Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000ea | 000000ec | Co= re Gen8 | CFL-H/S | P0 | 06-9e-0c/22 | 000000ea | 000000ec | Co= re Gen9 | CFL-H | R0 | 06-9e-0d/22 | 000000ea | 000000ec | Co= re Gen9 Mobile | CML-H | R1 | 06-a5-02/20 | 000000ea | 000000ec | Co= re Gen10 Mobile | CML-S62 | G1 | 06-a5-03/22 | 000000ea | 000000ec | Co= re Gen10 | CML-S102 | Q0 | 06-a5-05/22 | 000000ec | 000000ee | Co= re Gen10 | CML-U62 V1 | A0 | 06-a6-00/80 | 000000e8 | 000000ea | Co= re Gen10 Mobile | CML-U62 V2 | K1 | 06-a6-01/80 | 000000ea | 000000ec | Co= re Gen10 Mobile | RKL-S | B0 | 06-a7-01/02 | 00000040 | 00000050 | Co= re Gen11 ### Removed Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Pr= oducts |:---------------|:---------|:------------|:---------|:---------|:--= ------- | SNR | B0 | 06-86-04/01 | 0b00000f | | At= om P59xxB | SNR | B1 | 06-86-05/01 | 0b00000f | | At= om P59xxB =20 Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/x86_64/intel-microcode | 2 -- .../{oldcore/121 =3D> core/164}/filelists/x86_64/intel-microcode | 0 lfs/intel-microcode | 4 ++= -- src/initscripts/system/firewall | 3 +++ 4 files changed, 5 insertions(+), 4 deletions(-) copy config/rootfiles/{oldcore/121 =3D> core/164}/filelists/x86_64/intel-mic= rocode (100%) Difference in files: diff --git a/config/rootfiles/common/x86_64/intel-microcode b/config/rootfile= s/common/x86_64/intel-microcode index 962590af5..068cc36d3 100644 --- a/config/rootfiles/common/x86_64/intel-microcode +++ b/config/rootfiles/common/x86_64/intel-microcode @@ -86,8 +86,6 @@ lib/firmware/intel-ucode/06-6a-06 lib/firmware/intel-ucode/06-7a-01 lib/firmware/intel-ucode/06-7a-08 lib/firmware/intel-ucode/06-7e-05 -lib/firmware/intel-ucode/06-86-04 -lib/firmware/intel-ucode/06-86-05 lib/firmware/intel-ucode/06-8a-01 lib/firmware/intel-ucode/06-8c-01 lib/firmware/intel-ucode/06-8c-02 diff --git a/config/rootfiles/core/164/filelists/x86_64/intel-microcode b/con= fig/rootfiles/core/164/filelists/x86_64/intel-microcode new file mode 120000 index 000000000..d5ac074e2 --- /dev/null +++ b/config/rootfiles/core/164/filelists/x86_64/intel-microcode @@ -0,0 +1 @@ +../../../../common/x86_64/intel-microcode \ No newline at end of file diff --git a/lfs/intel-microcode b/lfs/intel-microcode index d0a235947..db720b511 100644 --- a/lfs/intel-microcode +++ b/lfs/intel-microcode @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 20210608 +VER =3D 20220207 =20 THISAPP =3D Intel-Linux-Processor-Microcode-Data-Files-microcode-$(VER) DL_FILE =3D $(THISAPP).tar.gz @@ -41,7 +41,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D 769cab71e957b83121a1f4a07f1c4409 +$(DL_FILE)_MD5 =3D 7ac3ef4212c41b8b1f555f87e07d6c66 =20 install : $(TARGET) =20 diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index 7d081bbc3..f35b6b6e1 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -39,6 +39,9 @@ iptables_init() { iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT =20 + # Ensure the xt_geoip module is always loaded (#12767) + modprobe xt_geoip + # Enable TRACE logging to syslog modprobe nf_log_ipv4 sysctl -q -w net.netfilter.nf_log.2=3Dnf_log_ipv4 hooks/post-receive -- IPFire 2.x development tree --===============6912303712571811687==--