[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 12c71a758b6ecb1cf0652e42bfd7dd41e4481595

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 12c71a758b6ecb1cf0652e42bfd7dd41e4481595

[Michael Tremer]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  12c71a758b6ecb1cf0652e42bfd7dd41e4481595 (commit)
       via  59adebd7c81af939a4e4a63a781de62c145d8307 (commit)
      from  8f09f86eb23cd6aa4462cccf1cbeba86f4d3305a (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 12c71a758b6ecb1cf0652e42bfd7dd41e4481595
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Mon Oct 20 12:48:29 2025 +0200

    proxy.cgi: Mitigation for CVE-2025-62168 on squid
    
    - The full fix for CVE-2025-62168 is in version squid-7.2
    - However there are a lot of changes in squid from version 6 to 7 with all the error
       language files no longer provided directly, they have to be obtained from separate
       langauage packs now. Also several tools like cachmgr.cgi have been removed as the
       options can be obtained via different approaches.
    - I have had a look at squid-7.2 and I believe I can do the upgrade but it will take some
       time to be sure it is working properly.
    - In the interim, this patch adds the mitigation "email_err_data off" into squid.conf
       that is referenced in the CVE report.
    - If someone else has already worked on squid-7.2 and has it ready to go now or soon,
       then this patch can be dropped.
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 59adebd7c81af939a4e4a63a781de62c145d8307
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Wed Oct 22 09:59:18 2025 +0000

    installer: Let dracut initialize the console
    
    This won't fix the outstanding issue with broken locales and encoding,
    but rather tidies up some code.
    
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 html/cgi-bin/proxy.cgi                       | 1 +
 src/installer/dracut-module/module-setup.sh  | 2 +-
 src/installer/dracut-module/run-installer.sh | 6 ------
 3 files changed, 2 insertions(+), 7 deletions(-)

Difference in files:
diff --git a/html/cgi-bin/proxy.cgi b/html/cgi-bin/proxy.cgi
index fdb7c6a77..f0547e249 100644
--- a/html/cgi-bin/proxy.cgi
+++ b/html/cgi-bin/proxy.cgi
@@ -3109,6 +3109,7 @@ sub writeconfig
 shutdown_lifetime 5 seconds
 icp_port 0
 httpd_suppress_version_string on
+email_err_data off
 
 END
 	;
diff --git a/src/installer/dracut-module/module-setup.sh b/src/installer/dracut-module/module-setup.sh
index 6c665eb83..e63053eaf 100755
--- a/src/installer/dracut-module/module-setup.sh
+++ b/src/installer/dracut-module/module-setup.sh
@@ -9,7 +9,7 @@ check() {
 
 # called by dracut
 depends() {
-    echo base bash drm mdraid shutdown
+    echo base bash drm i18n mdraid shutdown
     return 0
 }
 
diff --git a/src/installer/dracut-module/run-installer.sh b/src/installer/dracut-module/run-installer.sh
index 7a50920e7..d0eebc61a 100644
--- a/src/installer/dracut-module/run-installer.sh
+++ b/src/installer/dracut-module/run-installer.sh
@@ -16,12 +16,6 @@ if [ -d "/sys/firmware/efi" ]; then
 	mount -t efivarfs efivarfs /sys/firmware/efi/efivars
 fi
 
-# Enable Unicode
-echo -en '\033%G' && kbd_mode -u
-
-# Load default console font
-setfont latarcyrheb-sun16
-
 # Silence the kernel
 echo >/proc/sys/kernel/printk "1 4 1 7"
 echo -n -e "\033[9;0]"


hooks/post-receive
--
IPFire 2.x development tree