From patchwork Tue Aug 15 16:18:00 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 7094 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature ECDSA (secp384r1)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4RQGfC2C1yz3wlH for ; Tue, 15 Aug 2023 16:18:27 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature ECDSA (secp384r1)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4RQGf96kfyz2WR; Tue, 15 Aug 2023 16:18:25 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4RQGf94yWNz2xfc; Tue, 15 Aug 2023 16:18:25 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4RQGf81mBwz2xfc for ; Tue, 15 Aug 2023 16:18:24 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4RQGf62q0qz2WR for ; Tue, 15 Aug 2023 16:18:22 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1692116303; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=siqvDX1+GJYreBCzJWFdWwC4uZNjw5SbC5heYdIroXo=; b=kYgXTfBHbZXI/Wcr/GhFBJshEoiXbs8NZ7cTyFxCv+lelHEAoA2oQJimMTAULrSoSZJ/sp oL35Z8nk1I2n80CA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1692116303; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=siqvDX1+GJYreBCzJWFdWwC4uZNjw5SbC5heYdIroXo=; b=AoQe8wPwyjv3Ro4lsbMHrlHd4gcgLsiD0pWAIPEq8RDOiOHVqODfZ7mXqSlXSRr/3Md5Tp vLFe0+wcOgBcsmX14hJnaE1f7/qjImg/04PNKHelPl1KXcdesJmEwYtzsHu7X9yEcj00d4 Cd7sSxRzB44h6Z/RI4QkZXsvauAO9/0a/oyNXMGHon6wjaN+NKlvWc31Orme3JDoNuZZRq viDh7yE7qMwDLi/3gD3dVlfeHRvU8o1dGeE1OJFRqAWhzAC5ZHMOYU5qoezBMZUz72kFrN 98Bxc5obST80bwmabA7bW4EfHmgeuF0v/qF5S45VeCooQAjmpiJ+xIsVZbFg3w== Message-ID: <09cd3cb3-9340-4424-a71d-219fb3b1f969@ipfire.org> Date: Tue, 15 Aug 2023 16:18:00 +0000 MIME-Version: 1.0 To: "IPFire: Development" From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH 1/2] vulnerabilities.cgi: Add English and German translations for new flaws X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" Signed-off-by: Peter Müller --- html/cgi-bin/vulnerabilities.cgi | 6 +++--- langs/de/cgi-bin/de.pl | 4 +++- langs/en/cgi-bin/en.pl | 4 +++- langs/fr/cgi-bin/fr.pl | 2 +- 4 files changed, 10 insertions(+), 6 deletions(-) diff --git a/html/cgi-bin/vulnerabilities.cgi b/html/cgi-bin/vulnerabilities.cgi index 77223c4fa..1fb57220e 100644 --- a/html/cgi-bin/vulnerabilities.cgi +++ b/html/cgi-bin/vulnerabilities.cgi @@ -2,7 +2,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2022 IPFire Team # +# Copyright (C) 2007-2023 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -30,14 +30,14 @@ require "${General::swroot}/lang.pl"; require "${General::swroot}/header.pl"; my %VULNERABILITIES = ( - "gather_data_sampling" => "gather data sampling", + "gather_data_sampling" => "$Lang::tr{'downfall gather data sampling'} (CVE-2022-40982)", "itlb_multihit" => "$Lang::tr{'itlb multihit'} (CVE-2018-12207)", "l1tf" => "$Lang::tr{'foreshadow'} (CVE-2018-3620)", "mds" => "$Lang::tr{'fallout zombieload ridl'} (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127, CVE-2019-11091)", "meltdown" => "$Lang::tr{'meltdown'} (CVE-2017-5754)", "mmio_stale_data" => "$Lang::tr{'mmio stale data'} (CVE-2022-21123, CVE-2022-21125, CVE-2022-21127, CVE-2022-21166)", "retbleed" => "$Lang::tr{'retbleed'} (CVE-2022-29900, CVE-2022-29901)", - "spec_rstack_overflow" => "spec rstack overflow", + "spec_rstack_overflow" => "$Lang::tr{'spec rstack overflow'} (CVE-2023-20569)", "spec_store_bypass" => "$Lang::tr{'spectre variant 4'} (CVE-2018-3639)", "spectre_v1" => "$Lang::tr{'spectre variant 1'} (CVE-2017-5753)", "spectre_v2" => "$Lang::tr{'spectre variant 2'} (CVE-2017-5715)", diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index 89382e3b4..495fe2ae3 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -888,6 +888,7 @@ 'donation-text' => 'IPFire wird von Freiwilligen in ihrer Freizeit betreut und weiterentwickelt. Um dieses Projekt am Leben zu erhalten, entstehen uns natürlich auch Kosten. Wenn Sie uns unterstützen wollen, würden wir uns über eine kleine Spende sehr freuen.', 'dos charset' => 'DOS-Zeichensatz', 'down and up speed' => 'Geben Sie bitte hier ihre Download- bzw. Upload-Geschwindigkeit ein
und klicken Sie danach auf Speichern.', +'downfall gather data sampling' => 'Downfall/Gather Data Sampling', 'downlink' => 'Downlink', 'downlink speed' => 'Downlink-Geschwindigkeit (kBit/Sek.)', 'downlink std class' => 'Downloadstandardklasse', @@ -2310,6 +2311,7 @@ 'source port overlaps' => 'Quellportbereich überlappt mit einem bereits definierten Portbereich.', 'speaker off' => 'Lautsprecher aus:', 'speaker on' => 'Lautsprecher ein:', +'spec rstack overflow' => 'Speculative Return Stack Overflow', 'spectre variant 1' => 'Spectre-Variante 1', 'spectre variant 2' => 'Spectre-Variante 2', 'spectre variant 4' => 'Spectre-Variante 4', @@ -2390,7 +2392,7 @@ 'system logs' => 'Systemprotokolldateien', 'system status information' => 'System-Statusinformationen', 'ta key' => 'TLS-Authentifizierungsschlüssel', -'taa zombieload2' => 'TSX Async Abort / ZombieLoad v2', +'taa zombieload2' => 'TSX Async Abort/ZombieLoad v2', 'tcp more reliable' => 'TCP (zuverlässiger)', 'telephone not set' => 'Telefonnummer nicht angegeben.', 'template' => 'Vorlage', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index b00ecc5eb..039f52ea2 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -931,6 +931,7 @@ 'done' => 'Do it', 'dos charset' => 'DOS Charset', 'down and up speed' => 'Enter your Down- and Uplink-Speed
and then press Save.', +'downfall gather data sampling' => 'Downfall/Gather Data Sampling', 'downlink' => 'Downlink', 'downlink speed' => 'Downlink speed (kbit/sec)', 'downlink std class' => 'downlink standard class', @@ -2373,6 +2374,7 @@ 'source port overlaps' => 'Source port range overlaps an existing port range.', 'speaker off' => 'Speaker off:', 'speaker on' => 'Speaker on:', +'spec rstack overflow' => 'Speculative Return Stack Overflow', 'spectre variant 1' => 'Spectre Variant 1', 'spectre variant 2' => 'Spectre Variant 2', 'spectre variant 4' => 'Spectre Variant 4', @@ -2454,7 +2456,7 @@ 'system logs' => 'System Logs', 'system status information' => 'System Status Information', 'ta key' => 'TLS-Authentification-Key', -'taa zombieload2' => 'TSX Async Abort / ZombieLoad v2', +'taa zombieload2' => 'TSX Async Abort/ZombieLoad v2', 'tcp more reliable' => 'TCP (more reliable)', 'telephone not set' => 'Telephone not set.', 'template' => 'Preset', diff --git a/langs/fr/cgi-bin/fr.pl b/langs/fr/cgi-bin/fr.pl index 5ae085c72..0e746736e 100644 --- a/langs/fr/cgi-bin/fr.pl +++ b/langs/fr/cgi-bin/fr.pl @@ -2460,7 +2460,7 @@ 'system logs' => 'Rapports système', 'system status information' => 'Informations sur le statut du système', 'ta key' => 'Clé d\'authentification TLS', -'taa zombieload2' => 'TSX Async Abort / ZombieLoad v2', +'taa zombieload2' => 'TSX Async Abort/ZombieLoad v2', 'tcp more reliable' => 'TCP (plus fiable)', 'telephone not set' => 'Numéro de téléphone non défini.', 'template' => 'Préétabli', From patchwork Tue Aug 15 16:18:00 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 7095 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature ECDSA (secp384r1)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4RQGfd0dKqz3wlH for ; Tue, 15 Aug 2023 16:18:49 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature ECDSA (secp384r1)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4RQGfb667rz2Yp; Tue, 15 Aug 2023 16:18:47 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4RQGfb5cfkz2xhD; Tue, 15 Aug 2023 16:18:47 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4RQGfZ0ccYz2xY1 for ; Tue, 15 Aug 2023 16:18:46 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4RQGfY2Rf4z2WY for ; Tue, 15 Aug 2023 16:18:45 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1692116325; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=gjmHmiaw2Ea5i9ros8rE6cbUYZ1p0mNQTT7UHtqGbGY=; b=k3CzcGMAU+tnTSpKHZKrQTRny81yhyFnJ8LNgfc/sB0FeK8hTDIJgJC5gGwqkVePjyZtyj kit9FPQBKiUeMVFi5t46K/icIeMJgnU+v37ZJkoR/yRjj5qF6j1/JX42giHdYQ8fT+ABTG GR6/ok3XMDsSF8miFsAsb/UJUjT64xHtEISkHflc0Rk69EV0NeODkelSW50AyA5WnrI/UK RwxQrGagIP9cP95c6OdP+NzKvSnjJqrceCjTuXhDyIEg0Ed/uX7GM28/BekFK76sKW6b+x jlpPedvwCPcENW3zE72GhIraOm4/ddcBE/oPLhiFGJhWCNvvlB1qbds5EyiXXQ== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1692116325; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=gjmHmiaw2Ea5i9ros8rE6cbUYZ1p0mNQTT7UHtqGbGY=; b=kr5ft3gELCPdUbdBCxa+2Y/Rskq14d2rsS7orQ2STEytBaNcu0FF4CqbWRowydU1K7Otbt /Pn8FM/V/gAA+oBg== Message-ID: Date: Tue, 15 Aug 2023 16:18:00 +0000 MIME-Version: 1.0 Subject: [PATCH 2/2] vulnerabilities.cgi: Avoid superfluous line breaks by widening SMT configuration table To: development@lists.ipfire.org References: <09cd3cb3-9340-4424-a71d-219fb3b1f969@ipfire.org> From: =?utf-8?q?Peter_M=C3=BCller?= In-Reply-To: <09cd3cb3-9340-4424-a71d-219fb3b1f969@ipfire.org> X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" Signed-off-by: Peter Müller --- html/cgi-bin/vulnerabilities.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/vulnerabilities.cgi b/html/cgi-bin/vulnerabilities.cgi index 1fb57220e..1946cf171 100644 --- a/html/cgi-bin/vulnerabilities.cgi +++ b/html/cgi-bin/vulnerabilities.cgi @@ -183,7 +183,7 @@ print "
\n"; my $smt_status = &smt_status(); print < +