* [PATCH] core 197: Ship automake
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
@ 2025-07-21 21:25 ` Adolf Belka
2025-07-21 21:25 ` [PATCH] core 197: Ship curl Adolf Belka
` (10 subsequent siblings)
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:25 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/197/filelists/automake | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/197/filelists/automake
diff --git a/config/rootfiles/core/197/filelists/automake b/config/rootfiles/core/197/filelists/automake
new file mode 120000
index 000000000..df3ee421c
--- /dev/null
+++ b/config/rootfiles/core/197/filelists/automake
@@ -0,0 +1 @@
+../../../common/automake
\ No newline at end of file
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] core 197: Ship curl
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
2025-07-21 21:25 ` [PATCH] core 197: Ship automake Adolf Belka
@ 2025-07-21 21:25 ` Adolf Belka
2025-07-21 21:25 ` [PATCH] core 197: Ship e2fsprogs Adolf Belka
` (9 subsequent siblings)
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:25 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/197/filelists/curl | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/197/filelists/curl
diff --git a/config/rootfiles/core/197/filelists/curl b/config/rootfiles/core/197/filelists/curl
new file mode 120000
index 000000000..4b84bef53
--- /dev/null
+++ b/config/rootfiles/core/197/filelists/curl
@@ -0,0 +1 @@
+../../../common/curl
\ No newline at end of file
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] core 197: Ship e2fsprogs
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
2025-07-21 21:25 ` [PATCH] core 197: Ship automake Adolf Belka
2025-07-21 21:25 ` [PATCH] core 197: Ship curl Adolf Belka
@ 2025-07-21 21:25 ` Adolf Belka
2025-07-21 21:25 ` [PATCH] core 197: Ship gettext Adolf Belka
` (8 subsequent siblings)
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:25 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/197/filelists/e2fsprogs | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/197/filelists/e2fsprogs
diff --git a/config/rootfiles/core/197/filelists/e2fsprogs b/config/rootfiles/core/197/filelists/e2fsprogs
new file mode 120000
index 000000000..37b55de69
--- /dev/null
+++ b/config/rootfiles/core/197/filelists/e2fsprogs
@@ -0,0 +1 @@
+../../../common/e2fsprogs
\ No newline at end of file
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] core 197: Ship gettext
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
` (2 preceding siblings ...)
2025-07-21 21:25 ` [PATCH] core 197: Ship e2fsprogs Adolf Belka
@ 2025-07-21 21:25 ` Adolf Belka
2025-07-21 21:25 ` [PATCH] core 197: Ship strongswan Adolf Belka
` (7 subsequent siblings)
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:25 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/197/filelists/gettext | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/197/filelists/gettext
diff --git a/config/rootfiles/core/197/filelists/gettext b/config/rootfiles/core/197/filelists/gettext
new file mode 120000
index 000000000..b6c6c6f4f
--- /dev/null
+++ b/config/rootfiles/core/197/filelists/gettext
@@ -0,0 +1 @@
+../../../common/gettext
\ No newline at end of file
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] core 197: Ship strongswan
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
` (3 preceding siblings ...)
2025-07-21 21:25 ` [PATCH] core 197: Ship gettext Adolf Belka
@ 2025-07-21 21:25 ` Adolf Belka
2025-07-21 21:25 ` [PATCH] curl: Update to version 8.15.0 Adolf Belka
` (6 subsequent siblings)
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:25 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/197/filelists/strongswan | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/197/filelists/strongswan
diff --git a/config/rootfiles/core/197/filelists/strongswan b/config/rootfiles/core/197/filelists/strongswan
new file mode 120000
index 000000000..90c727e26
--- /dev/null
+++ b/config/rootfiles/core/197/filelists/strongswan
@@ -0,0 +1 @@
+../../../common/strongswan
\ No newline at end of file
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] curl: Update to version 8.15.0
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
` (4 preceding siblings ...)
2025-07-21 21:25 ` [PATCH] core 197: Ship strongswan Adolf Belka
@ 2025-07-21 21:25 ` Adolf Belka
2025-07-21 21:25 ` [PATCH] e2fsprogs: Update to version 1.47.3 Adolf Belka
` (5 subsequent siblings)
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:25 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 8.14.1 to 8.15.0
- Update of rootfile not required
- Changelog
8.15.0
changes:
o TLS: remove support for Secure Transport and BearSSL [19]
bugfixes:
o altsvc: accept 'clear' without semicolon as well [190]
o asyn-ares: remove redundant NULL check [152]
o asyn-thrdd: free the previous name before strdup'ing the new [84]
o autotools: detect and link `brotlicommon` library for brotli [130]
o autotools: drop `$top_builddir/src` from src header path [23]
o autotools: drop headers from src mk-unity rules (fixup) [136]
o autotools: drop no longer necessary `--srcdir` unity options [66]
o autotools: drop redundant `Makefile.inc` from `EXTRA_DIST` in src [127]
o autotools: simplify configuration in tests, examples [47]
o bufq: change read/write signatures [120]
o bufq: remove the unused Curl_bufq_unwrite function [143]
o build: assume `sys/socket.h`, `sys/time.h` on non-Windows (as in
`curl/curl.h`) [21]
o build: drop `HAVE_SYS_SOCKET_H` and `HAVE_SYS_TIME_H` macros [69]
o build: drop explicit curlx from hdr paths, refer headers with `curlx/`
prefix [150]
o build: drop unused variables in tests
o build: fix libcurltool with cmake and tunits, related tidy-ups [138]
o build: split `.c` and `.h` file lists in tests [128]
o build: stop checking for `sys/stat.h` [146]
o build: stubgss tidy-ups (in tests) [137]
o build: sync build scripts between client/libtest [49]
o build: tidy up `Makefile.inc` use in lib and src [116]
o build: tidy up header paths, use srcdir where possible [42]
o cf-socket: make socket data_pending a nop [175]
o checksrc-all: rewrite in Perl, remove `checksrc.bat` [217]
o checksrc: reduce exceptions, apply again to curlx [114]
o cmake/FindGSS: fix processing C header path options [160]
o cmake/FindGSS: initialize result variables [159]
o cmake: `curl_add_clang_tidy_test_target` tidy-ups [185]
o cmake: build `stubgss` library for libtests to match autotools [34]
o cmake: check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS [144]
o cmake: configure c-ares header directory in project root (was: lib) [106]
o cmake: document OpenSSL and ngtcp2 crypto lib custom variables [29]
o cmake: drop never propagated C macros [22]
o cmake: drop passing redundant `CURL_STATICLIB` in examples and clients [52]
o cmake: drop redundant macro from test clients [51]
o cmake: drop reference to future variable
o cmake: enable soversion by default for OpenHarmony OS [131]
o cmake: fix `curl_add_clang_tidy_test_target` when no `-D` option [155]
o cmake: fix generator expression in docs/examples [109]
o cmake: gather options recursively in `curl_add_clang_tidy_test_target` [156]
o cmake: make docs depend on support files [80]
o cmake: move `OUTPUT` argument in the `add_custom_command()` line [50]
o cmake: omit clang-tidy on internal libs curlu and curltool [64]
o cmake: replace `cmakelint` with `cmake-lint` from `cmakelang`, fix issues [20]
o cmake: replace the way clang-tidy verifies tests, fix issues found [101]
o cmake: simplify handling generated `lib1521.c` in libtests [24]
o cmake: sync `target_link_libraries()` order in tests more [44]
o cmake: sync tests scripts by using the variable `BUNDLE` [46]
o cmake: sync tests scripts with each other and autotools (more) [100]
o cmake: use `target_link_options()` when available [43]
o config-win32: fix default targets, shorten macro logic [227]
o configure: order LDAP after the SSL libraries
o connect: drop unused struct member [209]
o connection: clarify `transport` [197]
o connection: eliminate member `remote_addr` [10]
o curl-config: fix whitespace in usage text [122]
o curl.h: make CURL_IPRESOLVE_* symbols defined as longs [206]
o curl.h: make CURLSSLOPT_* symbols defined as longs [3]
o curl.h: remove the "RESERVED" error codes [2]
o curl: implement non-blocking STDIN read on Windows [28]
o curl: improve non-blocking STDIN performance [129]
o curl: remove the global argument from many functions [218]
o curl: unify pointer names to global config [219]
o curl_get_line: make sure lines end with newline [110]
o curl_memory.h: fix to undefine `accept4` [180]
o curl_path: make SFTP handle a path like /~ properly. [11]
o curlinfo: provide the 'digest' feature [168]
o CURLSHOPT_SHARE.md: mention multi-threading requires callbacks [161]
o DEPRECATE.md: add VS2005 removal to the list [214]
o digest: fix build with disabled digest auth [72]
o DISTROS: update NixOS link
o docs,tests: fix english grammar "allow to" -> "allow <something> to" [158]
o docs/CONTRIBUTE: fix broken link [173]
o docs/examples: add ftp-delete.c [5]
o docs: beef up examples/websocket.c [189]
o docs: fix broken link in CODE_REVIEW.md [67]
o docs: fix broken link in INSTALL.md [68]
o docs: fix docs for CURLOPT_PREQUOTE after #17616 [70]
o docs: fix documentation of connect_only 2 [78]
o docs: fix two typos [163]
o docs: mention that the netrc file works without port numbers [112]
o docs: mention the as-is concept generically [225]
o docs: note SSLS-EXPORT feature in -ssl-sessions doc [199]
o docs: reflect that delimiter-separated capath is only OpenSSL [135]
o docs: sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS [198]
o docs: warn about lifetime in CURLOPT_CLOSESOCKET* [54]
o easy: fix comment-documentation [36]
o easygetopt: fix curl logo in header comment [167]
o firefox-db2pem: avoid use of eval in script [103]
o ftp: fix prequotes for a directory in URL [83]
o ftplistparser: split parse_unix into sub functions [77]
o h2_serverpush: fix file handle leaks reported by clang-tidy [105]
o h3: fix query of concurrent streams [220]
o http/3: report handshake with version and cipher as for TCP connections [212]
o http2: do not delay RST send on aborted transfer [57]
o http2: fix var types in is_alive() implementations [222]
o http: explicitly ignore parsing errors for Retry-After [98]
o http: fix build with cookies and HSTS disabled [124]
o http_ntlm: protect against null deref [95]
o http_ntlm: remove unreachable code [88]
o INSTALL.md: cygwin details and add source code link [4]
o ldap: avoid automake caching issues with LDAP library names
o ldap: if ldap-lib is sufficient, add it to LIBS.
o ldap: initial support for --with-ldap option
o lib2082: drop `typedef struct` [118]
o lib: address singleuse issues [132]
o lib: avoid reusing unclean connection [73]
o lib: drop two interim macros in favor of native libcurl API calls [172]
o lib: fix unused parameter/function compiler warnings [186]
o lib: make `CURLX_SET_BINMODE()` and use it [39]
o lib: make `curlx_wait_ms()` and use it [40]
o lib: replace scache no-op macros with `#ifdef` [117]
o lib: stop `time()` debug overrides at the end of source in altsvc, hsts [211]
o lib: unify recv/send function signatures [92]
o libcurl-env.md: drop LOGNAME, USER and NTLMUSER [99]
o libcurl.m4: fix indentation [194]
o libssh2: remove use of 'initialised' for cleanup [208]
o libssh: de-complex myssh_statemach_act() [18]
o libssh: fix readdir issues [191]
o libtests: make test 1503,1504,1505 use the 1502 binary [90]
o libtests: more header tidy-ups [224]
o libtests: stop building the sames source multiple times [89]
o memdebug.h: #undef `fclose` before defining it
o memdebug.h: eliminate global macro `CURL_MT_LOGFNAME_BUFSIZE` [178]
o memdebug: include in unity batch [63]
o memory: stop overriding unused `wcsdup()`/`_wcsdup()` system functions [204]
o memory: tidy up `_tcsdup()` override [202]
o misc: fix typos [207]
o mk-lib1521: replace `printf` with `curl_mprintf` [141]
o multi: add dirty bitset [115]
o multi: do no expire a blocked transfer [56]
o multi: fix polling with pending input [60]
o multi: remove careful bounds check as coverity says it is not needed [174]
o multi: xfer table/bitset, handle limits [142]
o ngtcp2: fix coverity warning about result handling [166]
o openssl: enable readahead [91]
o openssl: error on SSL_ERROR_SYSCALL [94]
o openssl: fix handling of buffered data [82]
o openssl: fix openssl engine use [74]
o openssl: fix pkcs11 provider available check [154]
o os400: upgrade ILE/RPG bindings with latest definitions. [184]
o pingpong: on disconnect, check for unflushed pingpong state [12]
o projects/build-openssl.bat: remove [223]
o pytest test_07_70, weaken early data check [96]
o pytest: adapt for runs with openssl-1.1.1
o pytest: disable test_07_37 and test_07_36 with openssl's quic [1]
o quic: implement CURLINFO_TLS_SSL_PTR [176]
o RELEASE-PROCEDURE.md: update docs/VERSIONS [7]
o runtests.pl: fix sprintf() using one too many %s [134]
o runtests: fix `LD_PRELOAD` detection for cmake-built curl binaries [123]
o runtests: support memory-limits per test [193]
o rustls: apply memory function overrides, fixing an ECH buffer free [181]
o rustls: don't try printing the not provided file [104]
o schannel: allow partial chains for manual peer verification [79]
o schannel: drop Windows 2000 compatibility logic [26]
o scorecard: flame graphs and documentation [165]
o SCP/SFTP: avoid busy loop after EAGAIN [8]
o scripts: fix to quote the copyright email address [210]
o socks: fix query when filter context is null [221]
o system.h: remove some macros [6]
o test1117: reduce write delays [9]
o test1175: fix to run, and fix documentation issues detected [216]
o test1222: fix for out-of-tree and no-libcurl-manual builds [215]
o test1499, 1599: use `%LOGDIR` [226]
o test1499: verify two chunked responses on reused connection [145]
o test1596: let test pass after year 2036 [35]
o test1706: pass include directory to `managen` for out-of-tree builds [187]
o tests/client: drop autotools logic no longer necessary [45]
o tests/client: use `curl_mfprintf()` [48]
o tests/dnsd: read config from file [85]
o tests/http/clients: drop hack and use `curl_setup.h` again [58]
o tests/http/clients: move to tests/client [53]
o tests/http/requirements: remove multipart [183]
o tests/libtest: call `curlx_now_init()` for unit 1399, 2600 (Windows) [76]
o tests/libtest: drop `TEST_HANG_TIMEOUT` redefinition hack [108]
o tests/libtest: drop a checksrc exception [119]
o tests/libtest: use `curltime` from curlx [71]
o tests/server/util.c: include netinet/in6.h [113]
o tests/server: de-dupe/merge three `sockdaemon()` clones into one [149]
o tests/server: drop `memdebug.h` [111]
o tests/server: make all global vars/funcs static [41]
o tests/server: move memory init to `memptr.c` [140]
o tests/servers.pm: add more ways to figure out current user [17]
o tests: always make bundles, adapt build and tests [81]
o tests: bundle http clients, de-dupe, enable for MSVC [61]
o tests: constify, make consts static [139]
o tests: drop `BUNDLE_SRC` variable [59]
o tests: drop mk-bundle exceptions [25]
o tests: drop unused or redundant includes [153]
o tests: drop useless "nodist_SOURCES" assignments [93]
o tests: fail torture if !valgrind&threaded resolver [31]
o tests: fix 1301, 1308 to fail on error [177]
o tests: fix `BUNDLE` variable references in `Makefile.am` [125]
o tests: make all names < 75 characters long [182]
o tests: make individual test sources compile cleanly [107]
o tests: make sshserver less verbose [55]
o tests: move `curlcheck.h` to libtest as `unitcheck.h` [171]
o tests: move GSS-API dynamic stub into debug-mode libcurl [169]
o tests: torture: don't duplicate valgrind command [32]
o tests: use %b64[] to base64 data [151]
o tests: use %b64[] to base64 data in 2056, 2057 [126]
o tftpd: use `CURLMIN()` macro [38]
o tidy-up: replace `<memdebug.h>` with `"memdebug.h"` (src, units) [147]
o tls: remove Curl_ssl false_start [86]
o tool1621: drop unused internal libcurl headers [157]
o tool_getparam: fix --ftp-pasv [15]
o tool_operate: fix return code when --retry is used but not triggered [13]
o tool_paramhelp: fix language in comments [196]
o top-complexity: lower max allowed complexity threshold to 90 [33]
o unit tests: extract "private" prototypes at build time [170]
o unit1302: expand the base64 encode/decode tests [148]
o url: fix connection lifetime checks [14]
o url: fix NULL deref with bad password when no user is provided [87]
o urlapi: simplify and split into sub functions [16]
o urlapi: use uppercase hex encoding [133]
o vauth: move auth structs to conn meta data [30]
o vtls: change send/recv signatures of tls backends [65]
o vtls: fix a copy-pasted early data comment typo [200]
o vtls: log rustls negotiated KEX group name [201]
o vtls: prefer ciphersuite to cipher in msgs [203]
o vtls: prefer rustls-ffi ciphersuite name API [205]
o VULN-DISCLOSURE-POLICY.md: fix typos [164]
o VULN-DISCLOSURE-POLICY: all reports should be disclosed [102]
o VULN-DISCLOSURE-POLICY: exclude not installed software [121]
o VULN-DISCLOSURE-POLICY: minor language polish [162]
o warnless: drop parts of the `read`/`write` preprocessor hack (Windows) [37]
o warnless: replace `read()`/`write()` wrapper functions with macros
(Windows) [75]
o windows: drop redundant `curl_wcsdup_callback` callback [188]
o windows: fixup `fopen()` in `CURLDEBUG` builds [62]
o windows: reduce/stop loading DLLs at runtime [27]
o wolfssl: add support for ML_KEM hybrids [195]
o ws: drop redundant `CURL_EXTERN` from function definitions [179]
o xfer: manage pause bits [97]
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/curl | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/curl b/lfs/curl
index 2ca1123b2..9671a0cf4 100644
--- a/lfs/curl
+++ b/lfs/curl
@@ -24,7 +24,7 @@
include Config
-VER = 8.14.1
+VER = 8.15.0
THISAPP = curl-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 4ce2277d143084823855b714e86047a94d4c52a686b8d16d9ab76c31168f1a74d63dfa7608cff36706a8a0b9bf9cc611a9b99860b176a227bca580cd95e9cff2
+$(DL_FILE)_BLAKE2 = ae809be87f34d079413129c27e618a6d15c2bf9087fd7e679cefe9b6d8645f0dd092e8c3e1f62b7bd0dffdd0b77e0bc5ac031ffce4e50060ec20b280618c8e68
install : $(TARGET)
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] e2fsprogs: Update to version 1.47.3
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
` (5 preceding siblings ...)
2025-07-21 21:25 ` [PATCH] curl: Update to version 8.15.0 Adolf Belka
@ 2025-07-21 21:25 ` Adolf Belka
2025-07-21 21:25 ` [PATCH] gettext: Update to version 0.26 Adolf Belka
` (4 subsequent siblings)
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:25 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 1.47.2 to 1.47.3
- Update of rootfile not required
- Changelog
1.47.3
UI and Features
Mke2fs -d can now copy the fs-verity metadata and chattr flags into
newly created file system.
Add fuse2fs's support for the XATTR_CREATE and XATTR_REPLACE flags in
setxattr.
Add support for FALLOC_FL_ZERO_RANGE in fuse2fs.
Add support to fuse2fs for the setting file attributes via fsxattr,
including support for nanosecond timestamps.
Add support to fuse2fs to set newer chattr flags.
Add a lockfile command-line option to fuse2fs which is useful for
scripts that need to know when fuse2fs is done modifying the file system
after it is unmounted.
Add mke2fs.conf knobs to control whether the RAID stripe or stride sizes
from the storage device information depending on whether the storage
device is a rotational or non-rotational device. By default don't set
the RAID stripe size for non-rotational devices.
E2scrub no longer runs fstrim by default, since util-linux ships with a
fstrim.timer systemd file which will run fstrim on all mounted file
systems. This can be re-enabled in /etc/e2scrub.conf if for some reason
it is desireable to run the fstrim out of e2scrub.
Fixes
Fix "e2fsck -E unshare_blocks" to clear the shared_blocks flag when
there are no shared blocks to clear
Fix "e2fsck -n" to not abort when it trips across an EA inode which
is not referenced by any inodes in the file system.
Fix debugfs's dump and rdump commands to avoid looping forever when
it runs across an I/O error or corupt filesystem metadata.
Fix debugfs's dirsearch command on big-endian systems.
Fix many fuse2fs bugs found by running fstests, including fixing
support for O_APPEND, O_TRUNC, POSIX ACLs, and the immutable flag. Also
fix fuse2fs to correctly remove ea_inodes if the last reference to an
ea_inode is removed when an inode is removed, and to update timestmps
correctly after the mkdir(2) and symlink(2) operations.
Fix fuse2fs's error code handling for fallocate(), truncate() and
removexattr().
Fix an integer overflow bug which resulted in fuse2fs failing to delete
very large files. (Addresses Debian Bug: #1106241)
Fix a (hard to reproduce) extent tree corruption bug which could be
triggered by resize2fs or fuse2fs if the extent tree was especially
complex
Improve fuse2fs's handling of corrupted file systems.
Fuse2fs doesn't support renameat2()'s RENAME_EXCHANGE or RENAME_WHITEOUT
flags, so return ENOSYS instead of incorrectly handling the renameat2()
request.
Fuse2fs will avoid clearning the setgid bit in op_chmod if the file's
group ownership is one of the calling process's group list (instead of
just the primary group id).
Change fuse2fs to align with kernel's behaviors by (a) clearing
post-EOF on truncation, (b) validating FITRIM's parameters consistently
with how the kernel does things, (c) how the "ro" mount option will
replay the journal, (d) only supporting the xattr namespaces supported
by the kernel, (e) clamping timestamps to the minimum and maximum value
supported by the on-disk format, and (e) optionally delegating access
control decisions to the kernel.
Prevent fuse2fs from mounting file systems which have features that
fuse2fs can't deal with.
Fix error path handling in fuse2fs when servicing an op_create request.
Fix spurious warnings from fuse2fs while servicing an op_fallocate request.
Fix fuse2fs to correctly translate system errors from libext2fs to the
negative error codes expected by the FUSE kernel driver. There aren't
many; but in some cases, when the file system is corrupted, libext2fs
will return EOVERFLOW and we sent a nonsense error to the kernel.
Optimize ext2fs_extent_set_bmap() to avoid fragmenting the extent tree.
This fixes a problem where resize2fs is trying to relocate all of the
blocks in a file leading to the extent tree doubling in size, and
potentially leading to a corrupted extent tree.
Fix a bounding error in ext2fs_fallocate() which could cause it to
allocate far more blocks than was requested. This caused a failure in
fuse2fs while formatting a loopback file system stored in a large sparse
file.
Fix potential livelock bug in the unix_io manager.
Fix invaidation support in the unix_io manager.
Various man page cleanups.
Performance, Internal Implementation, Development Support etc.
Improve performance in e2fsck when replaying a journal with a large
number of revoke blocks (which can be the case on Lustre servers).
Improve tune2fs's performance by avoiding scanning the file system to
update quota inodes in cases when it's not necessary.
Improve fuse2fs's performance by returning inode and type information in
readdir() and to use the actal inode numbers instead of asking fuse
to make up inode numbers.
Fix various Coverity and compiler warnings.
Add two new flags for ext2fs_link(). The EXT2FS_LINK_APPEND flag
causes ext2fs_link() to only search the last block in the directory,
which imrpoves the scalability of creating a large number of files in a
directory. The EXT2FS_LINK_EXPAND() causes ext2fs_link() to
automatically expand the directory if there is no free space found to
create the requested directory entry.
Add a new function, ext2fs_mkdir2() which allows the flags parameter
to be passed to ext2fs_link(), allows the chattr flags to be set in the
newly created directory, and return the inode number for the newly
created directory.
Add new functions ext2fs_log2_u{32,64}() and ext2fs_log10_u{32,64}() so
we don't have multiple copies of these functions in various e2fsprogs
programs.
Improve debugging and logging in fuse2fs.
General code cleaups in fuse2fs.
Improve fuse2fs's performance by allowing a larger cache in unix_io and
using O_DIRECT to read and write the block device.
Fixed Windows portability problems intrduced in 1.47.2.
Fix various FreeBSD compile warnings and test issues.
Fix MacOS build issues when compiling with libarchive and FUSE support.
To avoid warning messages on newer versions of GNU grep, use "grep -E"
instead of "egrep" when possible.
Fix test failure for m_rootdir_acl when the build tree is hosted on
btrfs. (This was caused by btrfs returning extended attributes relating
to Posix ACL's in a different order than ext4 or xfs.)
Fixed potention races in the Makefiles which could show up when using
"make -j install".
Fixed build failures when libarchive is not available.
Fixed various Debian packaging issues. (Addresses Debian Bugs:
#1106799, #1107595)
Update Czech, Chinese, Dutch, French, Malay, Portuguese, Polish,
Romainian, Serbian, Spanish, Swedish, and Ukrainian translations.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/e2fsprogs | 17 ++++++++---------
1 file changed, 8 insertions(+), 9 deletions(-)
diff --git a/lfs/e2fsprogs b/lfs/e2fsprogs
index ebf1995a1..6792723db 100644
--- a/lfs/e2fsprogs
+++ b/lfs/e2fsprogs
@@ -24,7 +24,7 @@
include Config
-VER = 1.47.2
+VER = 1.47.3
THISAPP = e2fsprogs-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 20f93b53c18396dbbf8a9564fd80181e391120554bd63a76c90c88d32616596fb7cf8e1252417b835ef3918ecf3211aebdd7a75daebee11bcb6e7b0f9bd88053
+$(DL_FILE)_BLAKE2 = 5d83a47d24f28fb4e0a6e8a145b146e6ff0de4463a16720790041f6fe750e595d749e730016bc3a9255c9ed3172b15e37f0fa8af4e8463f724f6bd221a9fa161
install : $(TARGET)
@@ -73,13 +73,12 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
-mkdir -pv $(DIR_APP)/build
cd $(DIR_APP)/build && \
$(DIR_APP)/configure \
- --prefix=/usr \
- --with-root-prefix="" \
- --enable-elf-shlibs \
- --disable-libblkid \
- --disable-libuuid \
- --disable-nls
-
+ --prefix=/usr \
+ --with-root-prefix="" \
+ --enable-elf-shlibs \
+ --disable-libblkid \
+ --disable-libuuid \
+ --disable-nls
cd $(DIR_APP)/build && make $(MAKETUNING)
cd $(DIR_APP)/build && make install
cd $(DIR_APP)/build && make install-libs
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] gettext: Update to version 0.26
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
` (6 preceding siblings ...)
2025-07-21 21:25 ` [PATCH] e2fsprogs: Update to version 1.47.3 Adolf Belka
@ 2025-07-21 21:25 ` Adolf Belka
2025-07-21 21:25 ` [PATCH] git: Update to version 2.50.1 Adolf Belka
` (3 subsequent siblings)
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:25 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 0.25 to 0.26
- Update of rootfile
- Changelog
0.26
Programming languages support:
* JavaScript:
- xgettext now parses regular expressions with character classes
correctly.
* C, C++, Python, JavaScript, EmacsLisp, librep, Go, Ruby, awk, D, Tcl,
Perl, PHP:
- xgettext's heuristic recognition of format strings has been improved:
strings like "100% complete" (with a space flag in a format directive)
are no longer flagged as format strings by default, unless they occur
in a context that requires a format string. You can override this
heuristic by using a comment of the form /* xgettext: c-format */.
* Shell:
- The documentation now mentions two other approaches for
internationalizing messages with parameters in shell scripts.
- xgettext now recognizes format strings in the 'printf' command syntax.
They are marked as 'sh-printf-format' in POT and PO files.
- Two new programs 'printf_gettext' and 'printf_ngettext' are provided,
that do formatted output with a localized format string in a more
efficient way (without spawning a subshell).
- xgettext now recognizes the \c, \u, and \U escape sequences in dollar-
single-quoted strings $'...'.
Improvements for maintainers:
* xgettext:
- When extracting a message with plural that is some format string,
xgettext now verifies that the msgid and msgid_plural are compatible
as format strings. For most format string types, this still allows
omitting from msgid a placeholder that is used in msgid_plural. But
when a placeholder is used in both msgid and msgid_plural, its type
must be the same in both.
- xgettext now suggests a refactoring when a translatable string
contains an URL or email address.
Improvements for translators:
* msggrep:
- msggrep accepts two new options -W/--workflow-flags and -S/--sticky-flags
that allow to select only messages that have a specified flag.
Bug fixes:
- The AM_GNU_GETTEXT macro now rejects the dysfunctional gettext() function
in libc of Solaris 11.[0-3], Solaris OpenIndiana, and Solaris OmniOS.
- The AM_GNU_GETTEXT macro now recognizes, on MSVC, the GNU libintl built
as a shared library.
0.25.1
Bug fixes:
- autopoint no longer fails if configure.ac contains no
AM_GNU_GETTEXT_VERSION or AM_GNU_GETTEXT_REQUIRE_VERSION invocation.
- nls.m4 is installed again under $PREFIX/share/aclocal/.
Portability:
- Building on native Windows with MSVC and --enable-shared is now supported.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/gettext | 46 ++++++++++++++++++++-------------
lfs/gettext | 4 +--
2 files changed, 30 insertions(+), 20 deletions(-)
diff --git a/config/rootfiles/common/gettext b/config/rootfiles/common/gettext
index 21a74295e..6e9a05841 100644
--- a/config/rootfiles/common/gettext
+++ b/config/rootfiles/common/gettext
@@ -18,6 +18,8 @@ usr/bin/gettext.sh
#usr/bin/msgunfmt
#usr/bin/msguniq
#usr/bin/ngettext
+#usr/bin/printf_gettext
+#usr/bin/printf_ngettext
#usr/bin/recode-sr-latin
#usr/bin/xgettext
#usr/include/autosprintf.h
@@ -32,20 +34,20 @@ usr/bin/gettext.sh
#usr/lib/libasprintf.so
usr/lib/libasprintf.so.0
usr/lib/libasprintf.so.0.0.0
-usr/lib/libgettextlib-0.25.so
+usr/lib/libgettextlib-0.26.so
#usr/lib/libgettextlib.la
#usr/lib/libgettextlib.so
#usr/lib/libgettextpo.la
#usr/lib/libgettextpo.so
usr/lib/libgettextpo.so.0
-usr/lib/libgettextpo.so.0.5.14
-usr/lib/libgettextsrc-0.25.so
+usr/lib/libgettextpo.so.0.5.15
+usr/lib/libgettextsrc-0.26.so
#usr/lib/libgettextsrc.la
usr/lib/libgettextsrc.so
#usr/lib/libtextstyle.la
#usr/lib/libtextstyle.so
usr/lib/libtextstyle.so.0
-usr/lib/libtextstyle.so.0.2.5
+usr/lib/libtextstyle.so.0.2.6
usr/lib/preloadable_libintl.so
#usr/libexec/gettext
#usr/libexec/gettext/cldr-plurals
@@ -53,6 +55,7 @@ usr/lib/preloadable_libintl.so
#usr/libexec/gettext/project-id
#usr/libexec/gettext/urlget
#usr/libexec/gettext/user-email
+#usr/share/aclocal/nls.m4
#usr/share/doc/gettext
#usr/share/doc/gettext/FAQ.html
#usr/share/doc/gettext/autopoint.1.html
@@ -2092,7 +2095,9 @@ usr/lib/preloadable_libintl.so
#usr/share/doc/gettext/examples/hello-sh/autoclean.sh
#usr/share/doc/gettext/examples/hello-sh/autogen.sh
#usr/share/doc/gettext/examples/hello-sh/configure.ac
-#usr/share/doc/gettext/examples/hello-sh/hello.sh
+#usr/share/doc/gettext/examples/hello-sh/hello-1.sh
+#usr/share/doc/gettext/examples/hello-sh/hello-2.sh
+#usr/share/doc/gettext/examples/hello-sh/hello-3.sh
#usr/share/doc/gettext/examples/hello-sh/m4
#usr/share/doc/gettext/examples/hello-sh/m4/Makefile.am
#usr/share/doc/gettext/examples/hello-sh/po
@@ -2393,6 +2398,7 @@ usr/lib/preloadable_libintl.so
#usr/share/doc/gettext/gettext_29.html
#usr/share/doc/gettext/gettext_3.html
#usr/share/doc/gettext/gettext_30.html
+#usr/share/doc/gettext/gettext_31.html
#usr/share/doc/gettext/gettext_4.html
#usr/share/doc/gettext/gettext_5.html
#usr/share/doc/gettext/gettext_6.html
@@ -2436,6 +2442,8 @@ usr/lib/preloadable_libintl.so
#usr/share/doc/gettext/msguniq.1.html
#usr/share/doc/gettext/ngettext.1.html
#usr/share/doc/gettext/ngettext.3.html
+#usr/share/doc/gettext/printf_gettext.1.html
+#usr/share/doc/gettext/printf_ngettext.1.html
#usr/share/doc/gettext/recode-sr-latin.1.html
#usr/share/doc/gettext/textdomain.3.html
#usr/share/doc/gettext/tutorial.html
@@ -2453,19 +2461,19 @@ usr/lib/preloadable_libintl.so
#usr/share/doc/libtextstyle/libtextstyle_abt.html
#usr/share/doc/libtextstyle/libtextstyle_toc.html
#usr/share/gettext
-#usr/share/gettext-0.25
-#usr/share/gettext-0.25/its
-#usr/share/gettext-0.25/its/docbook.loc
-#usr/share/gettext-0.25/its/docbook4.its
-#usr/share/gettext-0.25/its/docbook5.its
-#usr/share/gettext-0.25/its/glade.loc
-#usr/share/gettext-0.25/its/glade1.its
-#usr/share/gettext-0.25/its/glade2.its
-#usr/share/gettext-0.25/its/gsettings.its
-#usr/share/gettext-0.25/its/gsettings.loc
-#usr/share/gettext-0.25/its/gtkbuilder.its
-#usr/share/gettext-0.25/its/metainfo.its
-#usr/share/gettext-0.25/its/metainfo.loc
+#usr/share/gettext-0.26
+#usr/share/gettext-0.26/its
+#usr/share/gettext-0.26/its/docbook.loc
+#usr/share/gettext-0.26/its/docbook4.its
+#usr/share/gettext-0.26/its/docbook5.its
+#usr/share/gettext-0.26/its/glade.loc
+#usr/share/gettext-0.26/its/glade1.its
+#usr/share/gettext-0.26/its/glade2.its
+#usr/share/gettext-0.26/its/gsettings.its
+#usr/share/gettext-0.26/its/gsettings.loc
+#usr/share/gettext-0.26/its/gtkbuilder.its
+#usr/share/gettext-0.26/its/metainfo.its
+#usr/share/gettext-0.26/its/metainfo.loc
#usr/share/gettext/ABOUT-NLS
#usr/share/gettext/archive.dir.tar.xz
#usr/share/gettext/config.rpath
@@ -2548,6 +2556,8 @@ usr/lib/preloadable_libintl.so
#usr/share/man/man1/msgunfmt.1
#usr/share/man/man1/msguniq.1
#usr/share/man/man1/ngettext.1
+#usr/share/man/man1/printf_gettext.1
+#usr/share/man/man1/printf_ngettext.1
#usr/share/man/man1/recode-sr-latin.1
#usr/share/man/man1/xgettext.1
#usr/share/man/man3/bind_textdomain_codeset.3
diff --git a/lfs/gettext b/lfs/gettext
index fcca1901b..7260af9a0 100644
--- a/lfs/gettext
+++ b/lfs/gettext
@@ -24,7 +24,7 @@
include Config
-VER = 0.25
+VER = 0.26
THISAPP = gettext-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -56,7 +56,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = cec5dd43f64ea676b112d53374452852ad25b2d31833a805bb2f92cd0b172536b47f916ad630fd4acd11208d408ff302eac2a5cd6a78ec653b7d5a3b447f5584
+$(DL_FILE)_BLAKE2 = b182e5fdb9fc46868dc39b512ef300c54c8e77a766f2d2de69289f84966d4205f494b3ecedfb30c6df581947172411ae7eb4ccc0bb1f180b67dd8a83803832a8
install : $(TARGET)
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] git: Update to version 2.50.1
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
` (7 preceding siblings ...)
2025-07-21 21:25 ` [PATCH] gettext: Update to version 0.26 Adolf Belka
@ 2025-07-21 21:25 ` Adolf Belka
2025-07-21 21:25 ` [PATCH] gnutls: Update to version 3.8.10 Adolf Belka
` (2 subsequent siblings)
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:25 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2.50.0 to 2.50.1
- Update of rootfile not required
- Changelog
2.50.1
This release merges up the fixes that appear in v2.43.7, v2.44.4,
v2.45.4, v2.46.4, v2.47.3, v2.48.2, and v2.49.1 to address the
following CVEs: CVE-2025-27613, CVE-2025-27614, CVE-2025-46334,
CVE-2025-46835, CVE-2025-48384, CVE-2025-48385, and
CVE-2025-48386. See the release notes for v2.43.7 for details.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/git | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/lfs/git b/lfs/git
index d84c92892..abdfe1a38 100644
--- a/lfs/git
+++ b/lfs/git
@@ -24,7 +24,7 @@
include Config
-VER = 2.50.0
+VER = 2.50.1
SUMMARY = Fast, scalable, distributed revision control system
THISAPP = git-$(VER)
@@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = git
-PAK_VER = 38
+PAK_VER = 39
DEPS = perl-Authen-SASL perl-Net-SMTP-SSL
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 2ee60be2d0e749e898016f44107473d6e4dc30f70c73a94b3433f5a479a5a8989d000ca4084fabd32a7d0ace0914136c5c023bd72946ef7003affd535a98b5ee
+$(DL_FILE)_BLAKE2 = 4e5e3168d7dd88cc508920dd773df2ec6b568c70e8068a18010f01241ebc9e9140ca13a9820e14f0d4695e966c436aef305a81e61cc66007b756b75f48dd5d16
install : $(TARGET)
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] gnutls: Update to version 3.8.10
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
` (8 preceding siblings ...)
2025-07-21 21:25 ` [PATCH] git: Update to version 2.50.1 Adolf Belka
@ 2025-07-21 21:25 ` Adolf Belka
2025-07-21 21:26 ` [PATCH] strongswan: Update to version 6.0.2 Adolf Belka
2025-07-21 21:26 ` [PATCH] tshark: Update to version 4.4.8 Adolf Belka
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:25 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 3.8.9 to 3.8.10
- Update of rootfile
- 4 CVE fixes in this version
- Changelog
3.8.10
** libgnutls: Fix NULL pointer dereference when 2nd Client Hello omits PSK
Reported by Stefan Bühler. [GNUTLS-SA-2025-07-07-4, CVSS: medium]
[CVE-2025-6395]
** libgnutls: Fix heap read buffer overrun in parsing X.509 SCTS timestamps
Spotted by oss-fuzz and reported by OpenAI Security Research Team,
and fix developed by Andrew Hamilton. [GNUTLS-SA-2025-07-07-1,
CVSS: medium] [CVE-2025-32989]
** libgnutls: Fix double-free upon error when exporting otherName in SAN
Reported by OpenAI Security Research Team. [GNUTLS-SA-2025-07-07-2,
CVSS: low] [CVE-2025-32988]
** certtool: Fix 1-byte write buffer overrun when parsing template
Reported by David Aitel. [GNUTLS-SA-2025-07-07-3,
CVSS: low] [CVE-2025-32990]
** libgnutls: PKCS#11 modules can now be used to override the default
cryptographic backend. Use the [provider] section in the system-wide config
to specify path and pin to the module (see system-wide config Documentation).
** libgnutls: Linux kernel version 6.14 brings a Kernel TLS (kTLS) key update
support. The library running on the aforementioned version now utilizes the
kernel’s key update mechanism when kTLS is enabled, allowing uninterrupted
TLS session. The --enable-ktls configure option as well as the system-wide
kTLS configuration(see GnuTLS Documentation) are still required to enable
this feature.
** libgnutls: liboqs support for PQC has been removed
For maintenance purposes, support for post-quantum cryptography
(PQC) is now only provided through leancrypto. The experimental key
exchange algorithm, X25519Kyber768Draft00, which is based on the
round 3 candidate of Kyber and only supported through liboqs has
also been removed altogether.
** libgnutls: TLS certificate compression methods can now be set with
cert-compression-alg configuration option in the gnutls priority file.
** libgnutls: All variants of ML-DSA private key formats are supported
While the previous implementation of ML-DSA was based on
draft-ietf-lamps-dilithium-certificates-04, this updates it to
draft-ietf-lamps-dilithium-certificates-12 with support for all 3
variants of private key formats: "seed", "expandedKey", and "both".
** libgnutls: ML-DSA signatures can now be used in TLS
The ML-DSA signature algorithms, ML-DSA-44, ML-DSA-65, and
ML-DSA-87, can now be used to digitally sign TLS handshake
messages.
** API and ABI modifications:
GNUTLS_PKCS_MLDSA_SEED: New enum member of gnutls_pkcs_encrypt_flags_t
GNUTLS_PKCS_MLDSA_EXPANDED: New enum member of gnutls_pkcs_encrypt_flags_t
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/gnutls | 2 +-
lfs/gnutls | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/gnutls b/config/rootfiles/common/gnutls
index 824631734..e86384325 100644
--- a/config/rootfiles/common/gnutls
+++ b/config/rootfiles/common/gnutls
@@ -32,7 +32,7 @@ usr/lib/libgnutls-dane.so.0.4.1
#usr/lib/libgnutls.la
#usr/lib/libgnutls.so
usr/lib/libgnutls.so.30
-usr/lib/libgnutls.so.30.40.3
+usr/lib/libgnutls.so.30.40.4
#usr/lib/libgnutlsxx.la
#usr/lib/libgnutlsxx.so
usr/lib/libgnutlsxx.so.30
diff --git a/lfs/gnutls b/lfs/gnutls
index cc5b255fb..25920dfe7 100644
--- a/lfs/gnutls
+++ b/lfs/gnutls
@@ -24,7 +24,7 @@
include Config
-VER = 3.8.9
+VER = 3.8.10
THISAPP = gnutls-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 0fd4751e24649a9c4b8ee7616350a4b6a504ec10b3ef39b450af25abc4935f30df9e8f732435166516f89c692ac7cb7a0aafb76c4c86c1faff53119840d26ae7
+$(DL_FILE)_BLAKE2 = 0b62e93b2818d2265ca11e561724547fa3c24d08986eb77ea743b4af52773db975c1859164c7d405d9a9bedfa981af58f10f85100b6c0e3542a38c49af407a4d
install : $(TARGET)
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] strongswan: Update to version 6.0.2
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
` (9 preceding siblings ...)
2025-07-21 21:25 ` [PATCH] gnutls: Update to version 3.8.10 Adolf Belka
@ 2025-07-21 21:26 ` Adolf Belka
2025-07-21 21:26 ` [PATCH] tshark: Update to version 4.4.8 Adolf Belka
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:26 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 6.0.1 to 6.0.2
- Update of rootfile
- Changelog
6.0.2
- Support for per-CPU SAs (RFC 9611) has been added (Linux 6.13+).
- Basic support for AGGFRAG mode (RFC 9347) has been added (Linux 6.14+).
- POSIX regular expressions can be used to match remote identities.
- Switching configs based on EAP-Identities is supported. Setting
`remote.eap_id` now always initiates an EAP-Identity exchange.
- On Linux, sequence numbers from acquires are used when installing SAs. This
allows handling narrowing properly.
- During rekeying, the narrowed traffic selectors are now proposed instead of
the configured ones.
- The default AH/ESP proposals contain all supported key exchange methods plus
`none` to make PFS optional and accept proposals of older peers.
- GRO for ESP in enabled for NAT-T UDP sockets, which can improve performance
if the esp4|6_offload modules are loaded.
- charon-nm sets the VPN connection as persistent, preventing NetworkManager
from tearing down the connection if the network connectivity changes.
- ML-KEM is supported via OpenSSL 3.5+.
- The wolfssl plugin is now compatible to wolfSSL's FIPS module.
- The libsoup plugin has been migrated to libsoup 3, libsoup 2 is not supported
anymore.
- The long defunct uci plugin has been removed.
- Log messages by watcher_t are now logged in a separate log group (`wch`).
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/strongswan | 2 ++
lfs/strongswan | 4 ++--
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/config/rootfiles/common/strongswan b/config/rootfiles/common/strongswan
index cd446d1e9..48f4fdf43 100644
--- a/config/rootfiles/common/strongswan
+++ b/config/rootfiles/common/strongswan
@@ -62,6 +62,7 @@ etc/strongswan.d/charon/xauth-eap.conf
etc/strongswan.d/charon/xauth-generic.conf
etc/strongswan.d/charon/xauth-noauth.conf
etc/strongswan.d/charon/xcbc.conf
+etc/strongswan.d/iptfs.conf
etc/strongswan.d/pki.conf
etc/strongswan.d/starter.conf
etc/strongswan.d/swanctl.conf
@@ -241,6 +242,7 @@ usr/sbin/swanctl
#usr/share/strongswan/templates/config/strongswan.d
#usr/share/strongswan/templates/config/strongswan.d/charon-logging.conf
#usr/share/strongswan/templates/config/strongswan.d/charon.conf
+#usr/share/strongswan/templates/config/strongswan.d/iptfs.conf
#usr/share/strongswan/templates/config/strongswan.d/pki.conf
#usr/share/strongswan/templates/config/strongswan.d/starter.conf
#usr/share/strongswan/templates/config/strongswan.d/swanctl.conf
diff --git a/lfs/strongswan b/lfs/strongswan
index 921dbe5e0..7075ab7ef 100644
--- a/lfs/strongswan
+++ b/lfs/strongswan
@@ -24,7 +24,7 @@
include Config
-VER = 6.0.1
+VER = 6.0.2
THISAPP = strongswan-$(VER)
DL_FILE = $(THISAPP).tar.bz2
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 5c751073412ce25dd06400043b8daaa9751052b7f686c46ef7b6fc8e8e4f622dd58e30b1eed634a75174a8032a1ece2c24bf5809689152927539c12e2d25edbf
+$(DL_FILE)_BLAKE2 = 3cfc248831832a9b75da549fcaf490a4a0c33e2f680e04a02d04a035c05215ae0236f1fdcdb4a00b71b5a08d07626e8028959045aff1b77827c21fe7e1fb13ad
install : $(TARGET)
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread* [PATCH] tshark: Update to version 4.4.8
2025-07-21 21:25 [PATCH] automake: Update to version 1.18.1 Adolf Belka
` (10 preceding siblings ...)
2025-07-21 21:26 ` [PATCH] strongswan: Update to version 6.0.2 Adolf Belka
@ 2025-07-21 21:26 ` Adolf Belka
11 siblings, 0 replies; 13+ messages in thread
From: Adolf Belka @ 2025-07-21 21:26 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 4.4.7 to 4.4.8
- Update of rootfile
- Changelog
4.4.8
Bug Fixes
Renegotiated DTLS session is not being decrypted. Issue 20362.
Wireshark is completely stuck in initialization because androiddump recv()
is blocked. Issue 20526.
Fuzz job UTF-8 encoding issue: fuzz-2025-06-20-7318.pcap. Issue 20585.
Crash when showing packet in new window after reloading Lua plugins with a
certain gui.column.format preference. Issue 20588.
Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response.
Issue 20589.
Packet diagram doesn’t show non-standard field value representations.
Issue 20590.
Packet diagram shows representation twice when field type is FT_NONE.
Issue 20601.
application/x-www-form-urlencoded key parsed incorrectly following a
name-value byte sequence with no '=' Issue 20615.
DNP3 time stamp was unable to work after epoch time(year 2038) Issue 20618.
Updated Protocol Support
ASTERIX, DLT, DNP 3.0, DOF, DTLS, ETSI CAT, Gryphon, IPsec, ISObus VT,
KRB5, MBIM, RTCP, SLL, STCSIG, TETRA, UDS, and URL Encoded Form Data
New and Updated Capture File Support
pcapng
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/packages/tshark | 4 ++--
lfs/tshark | 6 +++---
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/config/rootfiles/packages/tshark b/config/rootfiles/packages/tshark
index 45ccfc7eb..1f0a44458 100644
--- a/config/rootfiles/packages/tshark
+++ b/config/rootfiles/packages/tshark
@@ -12,10 +12,10 @@ usr/bin/dumpcap
usr/bin/tshark
#usr/lib/libwireshark.so
usr/lib/libwireshark.so.18
-usr/lib/libwireshark.so.18.0.7
+usr/lib/libwireshark.so.18.0.8
#usr/lib/libwiretap.so
usr/lib/libwiretap.so.15
-usr/lib/libwiretap.so.15.0.7
+usr/lib/libwiretap.so.15.0.8
#usr/lib/libwsutil.so
usr/lib/libwsutil.so.16
usr/lib/libwsutil.so.16.0.0
diff --git a/lfs/tshark b/lfs/tshark
index ad3bfba9b..6d04ca601 100644
--- a/lfs/tshark
+++ b/lfs/tshark
@@ -26,7 +26,7 @@ include Config
SUMMARY = A Network Traffic Analyser
-VER = 4.4.7
+VER = 4.4.8
THISAPP = wireshark-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -35,7 +35,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = tshark
DEPS = c-ares
-PAK_VER = 26
+PAK_VER = 27
SERVICES =
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 9813d67e8e8fb7a8c4fb2bbb7d4a541a0f5a80ef3ea47c097b5488798dcb518bdd6db644438348b1110f15126761fa8fbe3c3f8e0f8fea781cdfa918a84c057d
+$(DL_FILE)_BLAKE2 = d749d39e9aaaefce7fb55a6e8d2bc5122920a3d5b306fe414cf3b8519c094ac896a3684a2d50f2ec6678ffa129c3a8a537ff9d1234e63dc3d4cd055b8dea4618
install : $(TARGET)
--
2.50.1
^ permalink raw reply [flat|nested] 13+ messages in thread