[PATCH] libpng: Update to version 1.6.44

[PATCH] libpng: Update to version 1.6.44

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 4459 bytes --]

- Update from version 1.6.42 to 1.6.44
- Update of rootfile
- Changelog
    1.6.44
	  Hardened calculations in chroma handling to prevent overflows, and
	    relaxed a constraint in cHRM validation to accomodate the standard
	    ACES AP1 set of color primaries.
	    (Contributed by John Bowler)
	  Removed the ASM implementation of ARM Neon optimizations and updated
	    the build accordingly. Only the remaining C implementation shall be
	    used from now on, thus ensuring the support of the PAC/BTI security
	    features on ARM64.
	    (Contributed by Ross Burton and John Bowler)
	  Fixed the pickup of the PNG_HARDWARE_OPTIMIZATIONS option in the
	    CMake build on FreeBSD/amd64. This is an important performance fix
	    on this platform.
	  Applied various fixes and improvements to the CMake build.
	    (Contributed by Eric Riff, Benjamin Buch and Erik Scholz)
	  Added fuzzing targets for the simplified read API.
	    (Contributed by Mikhail Khachayants)
	  Fixed a build error involving pngtest.c under a custom config.
	    This was a regression introduced in a code cleanup in libpng-1.6.43.
	    (Contributed by Ben Wagner)
	  Fixed and improved the config files for AppVeyor CI and Travis CI.
    1.6.43
	  Fixed the row width check in png_check_IHDR().
	    This corrected a bug that was specific to the 16-bit platforms,
	    and removed a spurious compiler warning from the 64-bit builds.
	    (Reported by Jacek Caban; fixed by John Bowler)
	  Added eXIf chunk support to the push-mode reader in pngpread.c.
	    (Contributed by Chris Blume)
	  Added contrib/pngexif for the benefit of the users who would like
	    to inspect the content of eXIf chunks.
	  Added contrib/conftest/basic.dfa, a basic build-time configuration.
	    (Contributed by John Bowler)
	  Fixed a preprocessor condition in pngread.c that broke build-time
	    configurations like contrib/conftest/pngcp.dfa.
	    (Contributed by John Bowler)
	  Added CMake build support for LoongArch LSX.
	    (Contributed by GuXiWei)
	  Fixed a CMake build error that occurred under a peculiar state of the
	    dependency tree. This was a regression introduced in libpng-1.6.41.
	    (Contributed by Dan Rosser)
	  Marked the installed libpng headers as system headers in CMake.
	    (Contributed by Benjamin Buch)
	  Updated the build support for RISCOS.
	    (Contributed by Cameron Cawley)
	  Updated the makefiles to allow cross-platform builds to initialize
	    conventional make variables like AR and ARFLAGS.
	  Added various improvements to the CI scripts in areas like version
	    consistency verification and text linting.
	  Added version consistency verification to pngtest.c also.

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 config/rootfiles/common/libpng | 2 +-
 lfs/libpng                     | 7 ++++---
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/config/rootfiles/common/libpng b/config/rootfiles/common/libpng
index 687aa535c..f41f58151 100644
--- a/config/rootfiles/common/libpng
+++ b/config/rootfiles/common/libpng
@@ -16,7 +16,7 @@ usr/lib/libpng.so
 #usr/lib/libpng16.la
 usr/lib/libpng16.so
 usr/lib/libpng16.so.16
-usr/lib/libpng16.so.16.41.0
+usr/lib/libpng16.so.16.44.0
 #usr/lib/pkgconfig/libpng.pc
 #usr/lib/pkgconfig/libpng16.pc
 #usr/share/man/man3/libpng.3
diff --git a/lfs/libpng b/lfs/libpng
index b22b64b65..563991327 100644
--- a/lfs/libpng
+++ b/lfs/libpng
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.6.42
+VER        = 1.6.44
 
 THISAPP    = libpng-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 8a8895b673ff90416a00c9ff775d7bdc38ab1ab0d83fd6e70cfffea2ed78bd42896950a64bf48ad9a00ea50d8c5d5702975b0bae7bb3300d4de4c82b334e513e
+$(DL_FILE)_BLAKE2 = 61064dd83f40a7e2e60ff723a568b7d0cda95aa80621a211aee7127b9783fbfc20cd82a2fe2d03584cbf9ab77c5444e3e008ac5ccc7f64af6e858ebcbcb78822
 
 install : $(TARGET)
 
@@ -70,7 +70,8 @@ $(subst %,%_BLAKE2,$(objects)) :
 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
-	cd $(DIR_APP) && ./configure --prefix=/usr
+	cd $(DIR_APP) && ./configure \
+				--prefix=/usr
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	@rm -rf $(DIR_APP)
-- 
2.46.0

[PATCH] lmdb: Update to version 0.9.33

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 2052 bytes --]

- Update from 0.9.31 to 0.9.33
- Update of rootfile not required
- Changelog
    0.9.33
	ITS#9037 mdb_page_search: fix error code when DBI record is missing
	ITS#10198 For win32, stop passing ignored parameter
	ITS#10212 Fix meta page usage by read only tools
    0.9.32
	ITS#9378 - Add ability to replay log and replay log tool
	ITS#10095 - partial revert of ITS#9278. The patch was incorrect and introduced numerous race conditions.
	ITS#10125 - mdb_load: fix cursor reinit in Append mode
	ITS#10137 - Allow users to define MDB_IDL_LOGN

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/lmdb | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/lmdb b/lfs/lmdb
index 87f19833b..2da8f1fe2 100644
--- a/lfs/lmdb
+++ b/lfs/lmdb
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.9.31
+VER        = 0.9.33
 
 THISAPP    = openldap-LMDB_$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = c1f8ebc7fdaa0b337e093cc6e20cdb824b2154eb09b070e93a802e2115c8b865a4960558ffcf1681714fe049b264b2fcdf23b592a4f91e9735634309d98012c2
+$(DL_FILE)_BLAKE2 = d5f3df15b0b2b036121cf6c82d6ef5a7298d6a9e7476fa8f94f02bf39812684b3463de4971b782e52883e1b354d6833017cf95aebd99c1761990504bd63b2eb3
 
 install : $(TARGET)
 
-- 
2.46.0

[PATCH] logrotate: Update to version 3.22.0

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 3410 bytes --]

- Update from version 3.21.0 to 3.22.0
- Update for rootfile not required
- autogen.sh step not required as configure file has been available in source tarball
   since version 3.10.0 in 2016
- xz version of logrotate available so changed to that.
- Changelog
   3.22.0
	 - fix calculations for time differences (#516)
	 - fix extension for zip compression (#545)
	 - fix omitted copy for logs with `mail` and `rotate 0` (#553)
	 - fix wrongly skipping copy with `copytruncate` and `compress` (#553)
	 - fix ambiguities between `mode`, `UID` and `GID` parsing when not specifying all options (#575)
	 - fix hang when encountering a named pipe (#607)
	 - on prerotate failure logs are preserved instead of rotated (#506)
	 - in case a configuration file was skipped due to unsafe permissions the
	   exit status after rotattion will be `1` (#508)
	 - the state is no longer written to non-regular files (#529)
	 - the systemd timer now correctly utilizes load distribution (#574)
	 - add dateformat specifier `%z` for timezone offsets (#594)
	 - change default mode for created `olddir` directories to `0755` (#560)
	 - support quoted user and group names in `su`, `create`, and `createolddir` (#575)

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/logrotate | 16 +++++++---------
 1 file changed, 7 insertions(+), 9 deletions(-)

diff --git a/lfs/logrotate b/lfs/logrotate
index eb0f2de3f..7cbba67fe 100644
--- a/lfs/logrotate
+++ b/lfs/logrotate
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2022  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,10 +24,10 @@
 
 include Config
 
-VER        = 3.21.0
+VER        = 3.22.0
 
 THISAPP    = logrotate-$(VER)
-DL_FILE    = logrotate-$(VER).tar.gz
+DL_FILE    = logrotate-$(VER).tar.xz
 DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = bd801aa8daed19213720ef36af8070277c3b36df2b866ab921bc5ff85afe97871638f4a690061ba752f16b2df53acc76373097bf95b6a7fd2821c20574a444d8
+$(DL_FILE)_BLAKE2 = c1c9f1ff792905d2917e9ba3cee360c50259e1520e04073cb69abe475499adcf01aeb3cb4c6933af61255fbb5978577c4fdf9d6ab6ebf9568358d2446791c7f3
 
 install : $(TARGET)
 
@@ -71,11 +71,9 @@ $(subst %,%_BLAKE2,$(objects)) :
 
 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
-	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
-
-	cd $(DIR_APP) && ./autogen.sh
-	cd $(DIR_APP) && ./configure --prefix=/usr
-
+	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
+	cd $(DIR_APP) && ./configure \
+				--prefix=/usr
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	mkdir -pv /etc/logrotate.d
-- 
2.46.0

[PATCH] lvm2: Update to version 2.03.26

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 3517 bytes --]

- Update from version 2.03.23 to 2.03.26
- Update of rootfile not required
- Changelog
    2.03.26
	  Fix internal error reported by pvmove on a VG with single PV.
	  Also accept --mknodes --refresh for vgscan.
	  Fix vgmknodes --refresh to wait for udev before checking /dev content.
	  Use log/report_command_log=1 config setting by default for JSON output format.
	  Fix unreleased memory pools on RAID lvextend.
	  Add --integritysettings option to manipuilate dm-integrity settings.
    2.03.25
	  Utilize more radix_tree instead of dm_hash and btree.
	  Refactor DM uuid caching from device_mapper directory.
	  Enhance checking for DM uuid device.
	  Fix lvm shell command completion on tab key (2.03.24).
	  Avoid lockd_vg call to lvmlockd for local VGs.
	  Allow forced change of locktype from none.
	  Handle OPTIONS defined in /etc/sysconfig/lvmlockd.
    2.03.24
	  Lvconvert supports VDO options for thin-pool with vdo conversion.
	  Improve placement to .data.rel.ro and .rodata sections.
	  Fix support for -y and -W when creating thinpool with vdo.
	  Bettter support for runtime valgrind detection.
	  Allow command interruption when communicating with dmeventd.
	  Fix resize of VDO volume used for thin pool data volume.
	  Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
	  Require 3.7 as minimal version for sanlock.
	  Share code for closing opened desriptors on program startup.
	  Fix memleak in lvmcache.
	  Add configure --with-default-event-activation=ON setting.
	  Fix return value from reporter function when hitting internal error.
	  Skip checking of pools for lvremove and vgremove commands.
	  VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
	  Fix lvs reporting for VDO volumes with new upstream kernel driver.
	  Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
	  Fix table line generation for cache snapshots using cachevol.
	  Enhance lvconvert support for external origins stacking.
	  When swapping LV names also swap properties like hostname, time and data.
	  Fix removal of stacked external origins.
	  Lock filesystem when converting volume to read-only external origin.
	  Support external origin between different thin-pool.
	  Improve validation of acceptable volumes for external origins.
	  Reduce amount of preloaded devices for complex device trees.
	  Avoid logging problems from monitoring snapshots with inactive origins.
	  Check for cache policy module presence in kernel's builtin modules file.
	  Add configure --with-modulesdir to select kernel modules directory.
	  Support creation of thin-pool with VDO use for its data volume.

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/lvm2 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/lvm2 b/lfs/lvm2
index 4e8cf6614..a3570bfd0 100644
--- a/lfs/lvm2
+++ b/lfs/lvm2
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.03.23
+VER        = 2.03.26
 
 THISAPP    = LVM2.$(VER)
 DL_FILE    = $(THISAPP).tgz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 00d215d395d92fa23743fc77d91a6bd14df29bc4fb334e1e8c4deb8d34007bfdb4e188821ec1789b5f0bca39fe944923050e401ddae0d25e4932cffb109a0dda
+$(DL_FILE)_BLAKE2 = bf7abb8cea32336d8e4c695111fa73fffb242925b2276ddbffcc74c5547a6338a8c7e0dab6a6f77efa31fb9a3f4fad59792b36dedd5c03baeef4dfff5fbf545d
 
 install : $(TARGET)
 
-- 
2.46.0

[PATCH] netatalk: Update to version 3.2.8

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 3725 bytes --]

- Update from version 3.2.5 to 3.2.8
- Update of rootfile not required
- Changelog
    3.2.8
	* UPD: Bump bundled WolfSSL library to stable version 5.7.2, GitHub #1433
	       Resolves CVE-2024-1544, CVE-2024-5288, CVE-2024-5991, CVE-2024-5814
	* UPD: Revert local modifications to the bundled WolfSSL library, GitHub #1432
	* FIX: Enable building against a shared WolfSSL 5.7.2 library, GitHub #1421
	* FIX: meson: Do not define rpath with a linker argument, GitHub #1443
    3.2.7
	* NEW: meson: Ability to control the run-time linker path config file,
	       GitHub #1396
	       New boolean Meson option: `-Dwith-ldsoconf'
	       When set to false, do not create /etc/ld.so.conf.d/libatalk.conf
	* BREAKING: meson: Enable rpath by default, while disabling ldsoconf
	       by default, GitHub #1417
	* FIX: meson: Allow ldconfig to run unprivileged during setup, GitHub #1407
	* FIX: docker: Add entry script step to clean up any residual lock file,
	       GitHub #1412
	* NEW: docker: Ship a docker-compose.yml sample file, GitHub #1414
	* NEW: docker: Check for AFP_USER and AFP_PASS when launching container,
	       GitHub #1415
    3.2.6
	* BREAKING: meson: Refresh the dynamic linker cache when installing on Linux,
	       GitHub #1386
	       This fixes the issue of the libatalk.so shared library not being found
	       when configuring with a non-standard library path, e.g. /usr/local/lib .
	       New Meson option `-Dwith-install-hooks' controls this behavior,
	       allowing you to disable the install hook in non-privileged environments.
	       On Linux systems with glibc, we now install the following config file:
	       /etc/ld.so.conf.d/libatalk.conf
	* BREAKING: meson: Introduce option to control which manual l10n to build,
	       GitHub #1390
	       New Meson option `-Dwith-manual-l10n' default to empty, can be set to
	       `ja' to build the Japanese localization of the html manual.
	       This changes the default behavior of the build system
	       to not build the Japanese html manual by default.
	* BREAKING: meson: Install htmldocs into htmldocs subdir, GitHub #1391
	       Previously, the html manual files were installed into the root
	       of the netatalk doc directory. Now they are put under netatalk/htmldocs .
	* BREAKING: meson: Use modern linker flag for rpath, remove dtags override,
	       GitHub #1384
	       When configuring with `-Dwith-rpath=true' the linker flags
	       `-Wl,-rpath,' will be prepended instead of the old `-R' flag.
	       On Linux platforms, we no longer prepend `-Wl,--enable-new-dtags',
	       either.

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/netatalk | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/netatalk b/lfs/netatalk
index 35858b430..00d804eaf 100644
--- a/lfs/netatalk
+++ b/lfs/netatalk
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = AppleShare file server
 
-VER        = 3.2.5
+VER        = 3.2.8
 
 THISAPP    = netatalk-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = netatalk
-PAK_VER    = 9
+PAK_VER    = 10
 
 DEPS       = avahi dbus
 
@@ -50,7 +50,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 017c8390f4d6e7f81fcc9ddde459af48a47acd9e3fdf3b230887d36ebf96518a96e3483ac063ee734b20e9bca39c7cc2c9c1720265fb05d49358447bedc2976d
+$(DL_FILE)_BLAKE2 = fa7706a87d446c06fb94f20a17e0894c3c1ed6e8dcb75fd6232f049dc12fb57eb0587b433fa3ccc9be2ccb4d4969a893bb79c065729660142f68862e79f53eba
 
 install : $(TARGET)
 
-- 
2.46.0

[PATCH] nettle: Update to version 3.10

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 5319 bytes --]

- Update from version 3.9 to 3.10
- Update of rootfile
- Changelog
    3.10
	This is a maintenance release, including a few each of bug
	 fixes, new features and optimizations.
	The new version is intended to be fully source and binary
	 compatible with Nettle-3.6. The shared library names are
	 libnettle.so.8.9 and libhogweed.so.6.9, with sonames
	 libnettle.so.8 and libhogweed.so.6.
	Bug fixes:
		* Add missing hash functions sha512_224 and sha512_256 to the
		  nettle_get_hashes() list. The name values in the
		  corresponding nettle_hash structs also changed to use
		  underscore instead of dash, for consistency.
		* Fix a few cases of formally undefined calls to memcpy(dst,
		  NULL, 0), resulting from valid calls to, e.g.,
		  sha256_update(ctx, 0, NULL).
	New features:
		* Support RSA-OAEP encryption. Contributed by Nicolas Mora and
		  Daiki Ueno.
		* New function sha3_256_shake_output, new functions
		  sha3_128_init, sha3_128_update, sha3_128_shake,
		  sha3_128_shake_output. Contributed by Daiki Ueno.
		* Added DRBG-CTR with AES256, contributed by Simon Josefsson.
	Optimizations:
		* New combined gcm-aes assembly for powerpc64, contributed by
		  Danny Tsen.
		* New sha256 assembly for powerpc64, contributed by Eric
	          Richter.
		* Improved performance for powerpc64 AES decrypt, by skipping
		  subkey transformations that don't suit the vncipher
		  instructions.
		* Add arm64 CPU feature detection for Android and for Apple systems,
		  contributed by Foolbar and Tim Kosse, prespectively.
	Miscellaneous:
		* New tests for side-channel silence, based on valgrind.
		* Delete all md5 assembly code. Delete all sparc32 assembly code.
    3.9.1
	This is a bugfix release, fixing a few bugs reported for
	 Nettle-3.9. The bug in the new OCB code may be exploitable for
	 denial of service or worse, since triggering it leads to
	 memory corruption. Upgrading from Nettle-3.9 to the new
	 version is strongly recommended.
	The new version is intended to be fully source and binary
	 compatible with Nettle-3.6. The shared library names are
	 libnettle.so.8.8 and libhogweed.so.6.8, with sonames
	 libnettle.so.8 and libhogweed.so.6.
	Bug fixes:
		* Fix OCB loop for processing messages of size 272 bytes or
		  larger. Reported and fixed by Jussi Kivilinna.
		* Fix alignment bug in the new x86_64 non-pclmul assembly
		  implementation of ghash. Reported by Henrik Grubbström.
		* Fix build-time memory leak in eccdata. Reported by Noah
		  Watkins.

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 config/rootfiles/common/nettle |  5 +++--
 lfs/nettle                     | 12 ++++++------
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/config/rootfiles/common/nettle b/config/rootfiles/common/nettle
index 3c0331406..26ac7bd29 100644
--- a/config/rootfiles/common/nettle
+++ b/config/rootfiles/common/nettle
@@ -26,6 +26,7 @@
 #usr/include/nettle/curve25519.h
 #usr/include/nettle/curve448.h
 #usr/include/nettle/des.h
+#usr/include/nettle/drbg-ctr.h
 #usr/include/nettle/dsa-compat.h
 #usr/include/nettle/dsa.h
 #usr/include/nettle/eax.h
@@ -78,9 +79,9 @@
 #usr/include/nettle/yarrow.h
 usr/lib/libhogweed.so
 usr/lib/libhogweed.so.6
-usr/lib/libhogweed.so.6.7
+usr/lib/libhogweed.so.6.9
 #usr/lib/libnettle.so
 usr/lib/libnettle.so.8
-usr/lib/libnettle.so.8.7
+usr/lib/libnettle.so.8.9
 #usr/lib/pkgconfig/hogweed.pc
 #usr/lib/pkgconfig/nettle.pc
diff --git a/lfs/nettle b/lfs/nettle
index 2d01f9557..cd902b8d5 100644
--- a/lfs/nettle
+++ b/lfs/nettle
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.9
+VER        = 3.10
 
 THISAPP    = nettle-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 80885fa380de58765155a5d4b209e524f4bd0336156ba6f5189702007438998094df0e4e801370fd0a74251b8cf91f46638b0c0139388c2c2098b1207ed3415c
+$(DL_FILE)_BLAKE2 = edf0ba6375f06e2dd4b1e3ed4bab5f592ac04a36f748ce0461bbec32622eb3d5f96f89350926c24b5bbbf37dbe14a1ad64bba5df7cb7ad5987ec634573aabbb5
 
 install : $(TARGET)
 
@@ -71,9 +71,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
 	cd $(DIR_APP) && ./configure \
-	--prefix=/usr \
-	--disable-documentation \
-	--disable-static
+				--prefix=/usr \
+				--disable-documentation \
+				--disable-static
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 	chmod -v 755 /usr/lib/lib{hogweed,nettle}.so
-- 
2.46.0

[PATCH] nfs: Update to version 2.7.1

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 2910 bytes --]

- Update from version 2.6.4 to 2.7.1
- Update of rootfile
- Changelog is a list of all the commits and it is made available in the file
   2.7.1-Changelog in the sourceforge site
    https://sourceforge.net/projects/nfs/files/nfs-utils/2.7.1/

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 config/rootfiles/packages/nfs | 2 ++
 lfs/nfs                       | 9 ++++-----
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/config/rootfiles/packages/nfs b/config/rootfiles/packages/nfs
index e4c3c5219..2090e30e5 100644
--- a/config/rootfiles/packages/nfs
+++ b/config/rootfiles/packages/nfs
@@ -37,6 +37,7 @@ usr/sbin/nfsdclddb
 usr/sbin/nfsdclnts
 usr/sbin/nfsidmap
 usr/sbin/nfsiostat
+usr/sbin/nfsref
 usr/sbin/nfsstat
 usr/sbin/rpc.idmapd
 usr/sbin/rpc.mountd
@@ -70,6 +71,7 @@ usr/sbin/start-statd
 #usr/share/man/man8/nfsdcltrack.8
 #usr/share/man/man8/nfsidmap.8
 #usr/share/man/man8/nfsiostat.8
+#usr/share/man/man8/nfsref.8
 #usr/share/man/man8/nfsstat.8
 #usr/share/man/man8/rpc.idmapd.8
 #usr/share/man/man8/rpc.mountd.8
diff --git a/lfs/nfs b/lfs/nfs
index 713dbeacd..3c7766645 100644
--- a/lfs/nfs
+++ b/lfs/nfs
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Support Utilities for Kernel nfsd
 
-VER        = 2.6.4
+VER        = 2.7.1
 
 THISAPP    = nfs-utils-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = nfs
-PAK_VER    = 22
+PAK_VER    = 24
 
 DEPS       = rpcbind
 
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = eaec88d872e2b4cf8cd588e8770af44b7f7636685a229c9a70c10e6fab1344651c5e9a73ab9f520e7c92c2de455998bf14bba070b463db1e17e9e7042851b38f
+$(DL_FILE)_BLAKE2 = 0b62f9e86c687c5608947b667526b23cb480c1c526a4303db4d3e551383e5d482ea5b088e26d7f70240abcac405db3668f71377679294bd80796b42717d05f3b
 
 install : $(TARGET)
 
@@ -87,7 +87,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 		--disable-gss \
 		--without-tcp-wrappers \
 		--disable-ipv6
-
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 
-- 
2.46.0

[PATCH] nginx: Update to version 1.26.2

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 1386 bytes --]

- Update from version 1.26.1 to 1.26.2
- Update of rootfile not required
- CVE Fix in this version
- Changelog
    1.26.2
	    *) Security: processing of a specially crafted mp4 file by the
	       ngx_http_mp4_module might cause a worker process crash
	       (CVE-2024-7347).
	       Thanks to Nils Bars.

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/nginx | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/nginx b/lfs/nginx
index c344b2955..0468fed11 100644
--- a/lfs/nginx
+++ b/lfs/nginx
@@ -25,7 +25,7 @@
 include Config
 
 SUMMARY    = A HTTP server and IMAP/POP3 proxy server
-VER        = 1.26.1
+VER        = 1.26.2
 
 THISAPP    = nginx-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG	    = nginx
-PAK_VER    = 16
+PAK_VER    = 17
 
 DEPS       =
 
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 5df95f6771a93009f5bd1a4038857c29af580d18af841e8cffe073339578b3ae0492d3a4cc797cac03a1039096ac5206ed1fa01da11c98591bce2cc4b2d18679
+$(DL_FILE)_BLAKE2 = f054deb47bf21bf963fedc8f980d29c92325bbfcb39c5a2cc67cce15add32036f0b771c7abac018ded6354a0df0850ed5843d26e0cf5d9577b70ca3fa89a206c
 
 install : $(TARGET)
 
-- 
2.46.0

[PATCH] ninja: Update to version 1.12.1

[Adolf Belka]

[-- Attachment #1: Type: text/plain, Size: 2258 bytes --]

- Update from version 1.11.1 to 1.12.1
- Update of rootfile not required
- Changelog
    1.12.1
	Bugfixes:
	    Screen updates extremely slow on Windows #2435
	    Dry run error if the build directory does not exist #2431
	    New critical path scheduler performance improvements #2443
    1.12.0
	    Critical path scheduler which orders the jobs by their runtime history #2177
	     This may break your build if you haven't specified your dependencies
	     correctly.
	    Resiliency against inputs changing during the build #1943
	    Reliable ETA and progress percentage in status #1963
	    Support for path lengths over 260 characters on Windows #1900
	    ARM binaries are now available for Windows and Linux, too
	    Several bugfixes

Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
---
 lfs/ninja | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/ninja b/lfs/ninja
index 1386a3046..50e97f69f 100644
--- a/lfs/ninja
+++ b/lfs/ninja
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.11.1
+VER        = 1.12.1
 
 THISAPP    = ninja-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = c96cf7c319b7abd65f644465688d256f8b3a576c4616d0c63852e25dd0dc5f63c66708d429d8dddb6228502eb147211a86a5dd369b80ec2228902b370d2343e5
+$(DL_FILE)_BLAKE2 = 915545888cbd7d9e6e7e4fb0bad42f6c36ecef2de93356966541de0f8f4315e59e47cf20f189de5de11ba2a038488c7964ec709bad8868488cc03524a88483f4
 
 install : $(TARGET)
 
-- 
2.46.0