From caef75c52974b8fed718ad8b8992442378495e78 Mon Sep 17 00:00:00 2001 From: Stefan Schantl Date: Mon, 20 Feb 2023 12:42:35 +0100 Subject: [PATCH 1/4] QMI: Disable raw_ip mode before assigning the new MAC. To assign a MAC address, the device must not be in the raw_ip mode. Signed-off-by: Stefan Schantl Signed-off-by: Michael Tremer --- src/initscripts/networking/functions.network | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/initscripts/networking/functions.network b/src/initscripts/networking/functions.network index 36541eb13..0e2e5009e 100644 --- a/src/initscripts/networking/functions.network +++ b/src/initscripts/networking/functions.network @@ -273,6 +273,10 @@ qmi_assign_address() { # Find the device local device="$(qmi_find_device "${intf}")" + # Switch off the raw_ip mode to be able to proper + # assign the generated MAC address. + echo "N" > "/sys/class/net/${intf}/qmi/raw_ip" + local address # Generate a "random" MAC address using the device number From cb8ff50d41d82cfcb0680376f50f3a118c63809b Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Mon, 20 Feb 2023 12:30:19 +0000 Subject: [PATCH 2/4] core173: Ship /lib/udev/network-aqm Signed-off-by: Michael Tremer --- config/rootfiles/core/173/filelists/files | 1 + 1 file changed, 1 insertion(+) diff --git a/config/rootfiles/core/173/filelists/files b/config/rootfiles/core/173/filelists/files index 880562a59..3c2e6fd5a 100644 --- a/config/rootfiles/core/173/filelists/files +++ b/config/rootfiles/core/173/filelists/files @@ -148,6 +148,7 @@ lib/firmware/mediatek/WIFI_MT7961_patch_mcu_1_2_hdr.bin lib/firmware/mediatek/WIFI_RAM_CODE_MT7961_1.bin lib/firmware/qca/nvm_usb_00190200.bin lib/firmware/qca/rampatch_usb_00190200.bin +lib/udev/network-aqm lib/udev/network-hotplug-rename srv/web/ipfire/cgi-bin/ovpnmain.cgi srv/web/ipfire/cgi-bin/pppsetup.cgi From 341415bc38c2123a274c7474a382c85fb2b15b35 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Mon, 20 Feb 2023 15:46:50 +0000 Subject: [PATCH 3/4] core173: Ensure all files are being shipped for x86_64, too Signed-off-by: Michael Tremer --- config/rootfiles/core/173/filelists/x86_64/{files => arch-files} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename config/rootfiles/core/173/filelists/x86_64/{files => arch-files} (100%) diff --git a/config/rootfiles/core/173/filelists/x86_64/files b/config/rootfiles/core/173/filelists/x86_64/arch-files similarity index 100% rename from config/rootfiles/core/173/filelists/x86_64/files rename to config/rootfiles/core/173/filelists/x86_64/arch-files From d08fb579282307f4db936996c6e6110d442d79f4 Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Fri, 17 Feb 2023 19:00:48 +0100 Subject: [PATCH 4/4] clamav: Update to 1.0.1 For details see: https://blog.clamav.net/2023/02/clamav-01038-01052-and-101-patch.html "ClamAV 1.0.1 is a critical patch release with the following fixes: CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser. The issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. Thank you to Simon Scannell for reporting this issue. CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser. The issue affects versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. Thank you to Simon Scannell for reporting this issue. Fix an allmatch detection issue with the preclass bytecode hook." Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- lfs/clamav | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/clamav b/lfs/clamav index 24c13f00b..426321c05 100644 --- a/lfs/clamav +++ b/lfs/clamav @@ -26,7 +26,7 @@ include Config SUMMARY = Antivirus Toolkit -VER = 1.0.0 +VER = 1.0.1 THISAPP = clamav-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = clamav -PAK_VER = 64 +PAK_VER = 65 DEPS = @@ -50,7 +50,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 62d00a9ceb1849d1517f34194daaa3bb8bbc904e81e3a20791cf0b5f557587cc497e23feb38cdfbb8b152446821eb20d9a4bce18a0c83d1c31474bfed9944c69 +$(DL_FILE)_BLAKE2 = 8f216051eeb94a9196849c9edff2fe0c73e4aa3ca242cf72d91c1692eb2a4688f8e525f638b6870a2f934976435a4272a1f116c1cf3a7cfd194efa91f11fd135 install : $(TARGET)