[PATCH 01/10] libxml2: Update to version 2.14.0

[PATCH 01/10] libxml2: Update to version 2.14.0

[Adolf Belka]

- Update from version 2.13.5 to 2.14.0
- Update of rootfile
- sobump so ran find-dependencies. apache2, clamav, collectd, libvirt, libxslt, nfs,
   rng-tools, rrdtool and tshark are all linked against the lib bump. So additional
   patches are in this set to bump the PAK_VER and ship the addons and to ship the
   linkied core packages. Hope it is done correctly. Let me know if not.
- 2 CVE fixes added into version 2.13.6
- Changelog
    2.14.0
      Major changes
	The HTML tokenizer now conforms fully to HTML5. Several non-standard
	 syntax warnings were removed. Note that HTML5 tree construction isn't
	 implemented yet.
	Binary compatibility is restricted to versions 2.14 or newer. On ELF
	 systems, the soname was bumped from libxml2.so.2 to libxml2.so.16.
	The serialization API will now take user-provided or default encodings
	 into account when serializing attribute values, matching the
	 serialization of text and avoiding unnecessary escaping.
	The XML parser won't try to merge consecutive CDATA sections as before
	 to align with web standards. Each CDATA section will create exactly one
	 node or SAX callback.
	Support for RELAX NG can now be disabled with a new configuration
	 option independently of XML Schemas support. It is still enabled by
	 default.
	The "legacy" configuration option won't enable support for HTTP and
	 LZMA anymore. These features will be removed in the next release.
	Parts of the xmllint executable were refactored, allowing the
	 combination of more options. OOM errors should be reported reliably now.
	Several improvements were made to the build systems. Meson is fully
	 supported now.
	Parts of the buffering code were reworked and simplified.
	Overflow checks before reallocations were hardenend.
	Some unprefixed symbols were renamed to avoid namespace pollution.
      New features
	Input callbacks can now be set on a parser context and an improved API
	 to create parser input is available. The following new functions,
	 taking a parser input object, were added:
		- xmlCtxtParseDocument
		- xmlCtxtParseContent as replacement for xmlParseBalancedChunkMemory
		  and xmlParseInNodeContext
		- xmlCtxtParseDtd
	The xmlSave API now has additional options to replace global settings.
	Parser options XML_PARSE_UNZIP, XML_PARSE_NO_SYS_CATALOG and
	 XML_PARSE_CATALOG_PI were added.
	An API function to install a custom character encoding converter is
	 now available. This makes it possible to use ICU for encoding conversion
	 even if libxml2 was compiled without ICU support, see example/icu.c.
      Deprecations
	Access to many public struct members is now deprecated. Several accessor
	 functions were added to use instead.
	More internal functions were deprecated.
      Removals
	Metadata about the HTML4 content model was removed from the htmlElemDesc
	 struct and related functions were deprecated.
	The FTP module and related functions were removed.
	Support for the range and point extensions of the xpointer() scheme
	 was removed. The rest of the XPointer implementation isn't affected.
	 The xpointer() scheme now behaves like the xpath1() scheme.
	Several legacy symbols and the functions in xmlunicode.h were removed.
	ELF version information was removed.
	The shell was moved from libxml2 to xmllint. Several related functions
	 are no longer available.
	The libxml.m4 file containing autoconf macros was removed.
	The --with-tree configuration option was removed.
	The hack to detect single-threaded programs under glibc was removed.
      Planned removals
	Support for HTTP and LZMA compression is planned to be removed in the
	 2.15 release.
	The following features are considered for removal:
		- Modules API (xmlmodule.h)
		- Schematron support
		- Support for zlib compressed file I/O
		- Legacy Windows build system in win32
	RELAX NG support is still in a bad state and a long-term removal
	 candidate.
    2.13.7
      Regressions
	- tree: Fix xmlTextMerge with NULL args
	- io: Fix `compressed` flag for uncompressed stdin
	- parser: Fix parsing of DTD content
    2.13.6
      Security
	- [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
	- [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
	- pattern: Fix compilation of explicit child axis
      Regressions
	- xmllint: Support compressed input from stdin
	- uri: Fix handling of Windows drive letters
	- reader: Fix return value of xmlTextReaderReadString again
	- SAX2: Fix xmlSAX2ResolveEntity if systemId is NULL
      Portability
	- dict: Handle ENOSYS from getentropy gracefully
	- Fix compilation with uclibc (Dario Binacchi)
	- python: Declare init func with PyMODINIT_FUNC
	- tests: Fix sanitizer version check on old Apple clang
	- cmake: Work around broken sys/random.h in old macOS SDKs
      Build
	- autotools: Set AC_CONFIG_AUX_DIR
	- cmake: Always build Python module as shared library
	- cmake: add missing `Bcrypt` link on Windows (Saleem Abdulrasool)
	- cmake: Fix compatibility in package version file

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libxml2 | 5 ++---
 lfs/libxml2                     | 6 +++---
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/config/rootfiles/common/libxml2 b/config/rootfiles/common/libxml2
index 7fa288199..589b5b752 100644
--- a/config/rootfiles/common/libxml2
+++ b/config/rootfiles/common/libxml2
@@ -53,10 +53,9 @@
 #usr/lib/cmake/libxml2/libxml2-config.cmake
 #usr/lib/libxml2.la
 #usr/lib/libxml2.so
-usr/lib/libxml2.so.2
-usr/lib/libxml2.so.2.13.5
+usr/lib/libxml2.so.16
+usr/lib/libxml2.so.16.0.0
 #usr/lib/pkgconfig/libxml-2.0.pc
-#usr/share/aclocal/libxml.m4
 #usr/share/doc/libxml2
 #usr/share/doc/libxml2/xmlcatalog.html
 #usr/share/doc/libxml2/xmllint.html
diff --git a/lfs/libxml2 b/lfs/libxml2
index 5ecea8db7..c1014f56f 100644
--- a/lfs/libxml2
+++ b/lfs/libxml2
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.13.5
+VER        = 2.14.0
 
 THISAPP    = libxml2-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 46c280630638e2c8009c593bbbcf90ccbfffe9ddcc99987c4d91c2223043759f2b4d6511b31b2357c5250ac3b40d96ef05c17b4d2adc61972665f8a0d899dfe8
+$(DL_FILE)_BLAKE2 = 4e210661b10b846cf80c2ba393209fd2bde1e7f8e4a024eff2e6a90369969e7a7696e2cb77197fe63f63fae959bcaed052d5c5107603f0c64a16d6ceeab6b43c
 
 install : $(TARGET)
 
-- 
2.49.0

[PATCH 02/10] core194: Ship apache2

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/194/filelists/apache2 | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/194/filelists/apache2

diff --git a/config/rootfiles/core/194/filelists/apache2 b/config/rootfiles/core/194/filelists/apache2
new file mode 120000
index 000000000..eef95efa7
--- /dev/null
+++ b/config/rootfiles/core/194/filelists/apache2
@@ -0,0 +1 @@
+../../../common/apache2
\ No newline at end of file
-- 
2.49.0

[PATCH 03/10] core194: Ship collectd

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/194/filelists/collectd | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/194/filelists/collectd

diff --git a/config/rootfiles/core/194/filelists/collectd b/config/rootfiles/core/194/filelists/collectd
new file mode 120000
index 000000000..871b32f14
--- /dev/null
+++ b/config/rootfiles/core/194/filelists/collectd
@@ -0,0 +1 @@
+../../../common/collectd
\ No newline at end of file
-- 
2.49.0

[PATCH 04/10] core194: Ship libxslt

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/194/filelists/libxslt | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/194/filelists/libxslt

diff --git a/config/rootfiles/core/194/filelists/libxslt b/config/rootfiles/core/194/filelists/libxslt
new file mode 120000
index 000000000..bf9d76609
--- /dev/null
+++ b/config/rootfiles/core/194/filelists/libxslt
@@ -0,0 +1 @@
+../../../common/libxslt
\ No newline at end of file
-- 
2.49.0

[PATCH 05/10] core194: Ship rrdtool

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/194/filelists/rrdtool | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/194/filelists/rrdtool

diff --git a/config/rootfiles/core/194/filelists/rrdtool b/config/rootfiles/core/194/filelists/rrdtool
new file mode 120000
index 000000000..7a82e414b
--- /dev/null
+++ b/config/rootfiles/core/194/filelists/rrdtool
@@ -0,0 +1 @@
+../../../common/rrdtool
\ No newline at end of file
-- 
2.49.0

[PATCH 06/10] clamav: Ship due to libxml sobump

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/clamav | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/clamav b/lfs/clamav
index ba87dac3a..e6bb32355 100644
--- a/lfs/clamav
+++ b/lfs/clamav
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = clamav
-PAK_VER    = 75
+PAK_VER    = 76
 
 DEPS       =
 
-- 
2.49.0

[PATCH 07/10] libvirt: Ship due to libxml sobump

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/libvirt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/libvirt b/lfs/libvirt
index df8d2b224..1bd9844be 100644
--- a/lfs/libvirt
+++ b/lfs/libvirt
@@ -35,7 +35,7 @@ DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 SUP_ARCH   = x86_64 aarch64
 PROG       = libvirt
-PAK_VER    = 38
+PAK_VER    = 39
 
 DEPS       = ebtables libpciaccess ovmf qemu
 
-- 
2.49.0

[PATCH 08/10] nfs: Ship due to libxml sobump

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/nfs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/nfs b/lfs/nfs
index a81586514..645aca302 100644
--- a/lfs/nfs
+++ b/lfs/nfs
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = nfs
-PAK_VER    = 25
+PAK_VER    = 26
 
 DEPS       = rpcbind
 
-- 
2.49.0

[PATCH 09/10] rng-tools: Ship due to libxml sobump

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/rng-tools | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/rng-tools b/lfs/rng-tools
index 3b9d3c9f3..42c4cf6a2 100644
--- a/lfs/rng-tools
+++ b/lfs/rng-tools
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = rng-tools
-PAK_VER    = 5
+PAK_VER    = 6
 
 DEPS       =
 
-- 
2.49.0

[PATCH 10/10] tshark: Ship due to libxml sobump

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/tshark | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lfs/tshark b/lfs/tshark
index b47e12d99..2ae6ddf21 100644
--- a/lfs/tshark
+++ b/lfs/tshark
@@ -35,7 +35,7 @@ DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = tshark
 DEPS       = c-ares
-PAK_VER    = 23
+PAK_VER    = 24
 
 SERVICES   =
 
-- 
2.49.0

Re: [PATCH 02/10] core194: Ship apache2

[Michael Tremer]

Hello,

I like this, so I cannot get it wrong any more :)

-Michael

> On 31 Mar 2025, at 14:45, Adolf Belka <adolf.belka@ipfire.org> wrote:
> 
> Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
> ---
> config/rootfiles/core/194/filelists/apache2 | 1 +
> 1 file changed, 1 insertion(+)
> create mode 120000 config/rootfiles/core/194/filelists/apache2
> 
> diff --git a/config/rootfiles/core/194/filelists/apache2 b/config/rootfiles/core/194/filelists/apache2
> new file mode 120000
> index 000000000..eef95efa7
> --- /dev/null
> +++ b/config/rootfiles/core/194/filelists/apache2
> @@ -0,0 +1 @@
> +../../../common/apache2
> \ No newline at end of file
> -- 
> 2.49.0
> 
> 

Re: [PATCH 02/10] core194: Ship apache2

[Adolf Belka]

Hallo,

On 31/03/2025 17:25, Michael Tremer wrote:
> Hello,
> 
> I like this, so I cannot get it wrong any more :)

I thought I should try and have a go to make it easier but I noted that I managed to miss some myself :)

Will keep on trying to improve :)

Adolf.

> 
> -Michael
> 
>> On 31 Mar 2025, at 14:45, Adolf Belka <adolf.belka@ipfire.org> wrote:
>>
>> Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
>> ---
>> config/rootfiles/core/194/filelists/apache2 | 1 +
>> 1 file changed, 1 insertion(+)
>> create mode 120000 config/rootfiles/core/194/filelists/apache2
>>
>> diff --git a/config/rootfiles/core/194/filelists/apache2 b/config/rootfiles/core/194/filelists/apache2
>> new file mode 120000
>> index 000000000..eef95efa7
>> --- /dev/null
>> +++ b/config/rootfiles/core/194/filelists/apache2
>> @@ -0,0 +1 @@
>> +../../../common/apache2
>> \ No newline at end of file
>> -- 
>> 2.49.0
>>
>>
>