* [PATCH] core198: Ship freetype
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] core198: Ship libffi Adolf Belka
` (12 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/198/filelists/freetype | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/198/filelists/freetype
diff --git a/config/rootfiles/core/198/filelists/freetype b/config/rootfiles/core/198/filelists/freetype
new file mode 120000
index 000000000..79ec5c42e
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/freetype
@@ -0,0 +1 @@
+../../../common/freetype
\ No newline at end of file
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] core198: Ship libffi
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
2025-09-15 17:46 ` [PATCH] core198: Ship freetype Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] core198: Ship libssh Adolf Belka
` (11 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/198/filelists/libffi | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/198/filelists/libffi
diff --git a/config/rootfiles/core/198/filelists/libffi b/config/rootfiles/core/198/filelists/libffi
new file mode 120000
index 000000000..c391acd0c
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/libffi
@@ -0,0 +1 @@
+../../../common/libffi
\ No newline at end of file
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] core198: Ship libssh
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
2025-09-15 17:46 ` [PATCH] core198: Ship freetype Adolf Belka
2025-09-15 17:46 ` [PATCH] core198: Ship libffi Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] core198: Ship libxml2 Adolf Belka
` (10 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/198/filelists/libssh | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/198/filelists/libssh
diff --git a/config/rootfiles/core/198/filelists/libssh b/config/rootfiles/core/198/filelists/libssh
new file mode 120000
index 000000000..ecbb67053
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/libssh
@@ -0,0 +1 @@
+../../../common/libssh
\ No newline at end of file
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] core198: Ship libxml2
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (2 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] core198: Ship libssh Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] core198: Ship lvm2 Adolf Belka
` (9 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/198/filelists/libxml2 | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/198/filelists/libxml2
diff --git a/config/rootfiles/core/198/filelists/libxml2 b/config/rootfiles/core/198/filelists/libxml2
new file mode 120000
index 000000000..242e69fa3
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/libxml2
@@ -0,0 +1 @@
+../../../common/libxml2
\ No newline at end of file
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] core198: Ship lvm2
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (3 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] core198: Ship libxml2 Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] core198: Ship p11-kit Adolf Belka
` (8 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/198/filelists/lvm2 | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/198/filelists/lvm2
diff --git a/config/rootfiles/core/198/filelists/lvm2 b/config/rootfiles/core/198/filelists/lvm2
new file mode 120000
index 000000000..d640870b7
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/lvm2
@@ -0,0 +1 @@
+../../../common/lvm2
\ No newline at end of file
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] core198: Ship p11-kit
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (4 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] core198: Ship lvm2 Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] ethtool: Update to version 6.15 Adolf Belka
` (7 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/198/filelists/p11-kit | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/198/filelists/p11-kit
diff --git a/config/rootfiles/core/198/filelists/p11-kit b/config/rootfiles/core/198/filelists/p11-kit
new file mode 120000
index 000000000..e652deb67
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/p11-kit
@@ -0,0 +1 @@
+../../../common/p11-kit
\ No newline at end of file
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] ethtool: Update to version 6.15
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (5 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] core198: Ship p11-kit Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] freetype: Update to version 2.14.1 Adolf Belka
` (6 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 6.9 to 6.15
- Update of rootfile
- Changelog
6.15
* Feature: support OR-XOR symmetric RSS hash type (-x/-X)
* Feature: dump registers for hibmcge driver (-d)
* Feature: configure header-data split threshold (-g/-G)
* Feature: dump registers for fbnic driver (-d)
* Feature: JSON output for channels info (-l)
* Fix: incorrect data in appstream metainfo XML
* Fix: prevent potential null pointer dereferences
* Fix: more consistent and better parseable per lane signal info (-d)
6.14
* Feature: list PHYs (--show-phys)
* Feature: target a specific PHY with some commands (--phy)
* Feature: more attributes for C33 PSE (--show-pse, --set-pse)
* Feature: source information for cable tests (--cable-test[-tdr])
* Feature: JSON output for module info (-m)
* Feature: misc RSS hash info improvements (-x)
* Feature: tsinfo hwtstamp provider (--{get,set}-hwtimestamp-cfg)
* Fix: fix wrong auto-negotiation state (no option)
* Fix: more explicit RSS context action (-n)
* Fix: print PHY address as decimal (no option)
* Fix: fix return value on flow hashing error (-N)
* Fix: fix JSON output for IRQ coalescing
* Fix: fix MDI-X info output (no option)
* Misc: code cleanup in module parsers
* Misc: provide module_info JSON schema
* Misc: add '-j' alias for --json
* Misc: provide AppStream metainfo XML
* Misc: update message descriptions for debugging output
6.11
* Feature: cmis: print active and inactive firmware versions
* Feature: flash transceiver module firmware (--flash-module-firmware)
* Feature: add T1BRR 10Mb/s mode to link mode tables
* Feature: support for disabling netlink from command line
* Fix: fix lanes parameter format specifier
* Fix: add missing clause 33 PSE manual description
* Fix: qsf: Better handling of Page A2h netlink read failure
* Fix: rss: retrieve ring count using ETHTOOL_GRXRINGS ioctl (-x)
* Misc: man page formatting fix
6.10
* Feature: suport for PoE in PSE (--show-pse and --set-pse)
* Feature: add statistics support to tsinfo (-T)
* Feature: add JSON output to base command (no option)
* Feature: add JSON output to EEE info (--show-eee)
* Fix: qsfp: better handling on page 03h read failure (-m)
* Fix: handle zero arguments for module eeprom dump (-m)
* Fix: check for missing arguments in do_srxfh() (-X)
* Misc: compiler warnings in "make check"
* Misc: more descriptive error when JSON output is not available
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/ethtool | 2 ++
lfs/ethtool | 9 +++++----
2 files changed, 7 insertions(+), 4 deletions(-)
diff --git a/config/rootfiles/common/ethtool b/config/rootfiles/common/ethtool
index 1ffc4025d..28879aae3 100644
--- a/config/rootfiles/common/ethtool
+++ b/config/rootfiles/common/ethtool
@@ -1,3 +1,5 @@
usr/sbin/ethtool
#usr/share/bash-completion/completions/ethtool
#usr/share/man/man8/ethtool.8
+#usr/share/metainfo
+#usr/share/metainfo/org.kernel.software.network.ethtool.metainfo.xml
diff --git a/lfs/ethtool b/lfs/ethtool
index 9cdede460..cd5d25150 100644
--- a/lfs/ethtool
+++ b/lfs/ethtool
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 6.9
+VER = 6.15
THISAPP = ethtool-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = e04fa530084ad14abfea8c3802f272eb61eae9ee07aa2a12d16eeb77708b5ab021f1cdee10c24f83f77d65f2740ba5aceda99c21c47ef6cbcd65834af8334b00
+$(DL_FILE)_BLAKE2 = 2a4a71c7ea6ac047d23fa9c8265a2dce8432f4417f6006f71dc91e365b9a841b5bfd44683e3179806f38285f199ed0cb84d1ca7a3f02979b8f4045274736f9eb
install : $(TARGET)
@@ -70,7 +70,8 @@ $(subst %,%_BLAKE2,$(objects)) :
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar Jxf $(DIR_DL)/$(DL_FILE)
- cd $(DIR_APP) && ./configure --prefix=/usr
+ cd $(DIR_APP) && ./configure \
+ --prefix=/usr
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
@rm -rf $(DIR_APP)
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] freetype: Update to version 2.14.1
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (6 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] ethtool: Update to version 6.15 Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] haproxy: Update to version 3.2.4 Adolf Belka
` (5 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2.13.3 to 2.14.1
- Update of rootfile
- Changelog
2.14.1
This is an emergency release that fixes a couple of severe bugs introduced in
version 2.14.0 and discovered right after the release;
see issues #1349, #1353, #1354, #1355, and #1356.
2.14.0
IMPORTANT CHANGES
- A new configuration macro `FT_CONFIG_OPTION_USE_HARFBUZZ_DYNAMIC`
is available to load the HarfBuzz library dynamically (in addition
to the standard static and dynamic linking modes); cmake, meson,
and autotools support have been updated accordingly. Using this
new feature makes it possible to avoid the circular dependency
between HarfBuzz and FreeType.
A side effect of this change is that FreeType no longer uses
HarfBuzz header files (if HarfBuzz support is activated).
This code was contributed by Behdad Esfahbod.
- The auto-hinter got new abilities.
. It can now better separate diacritic glyphs from base glyphs at
small sizes by artificially moving diacritics up (or down) if
necessary.
. Tilde accent glyphs get vertically stretched at small sizes so
that they don't degenerate to horizontal lines.
. Diacritics directly attached to a base glyph (like the ogonek in
character 'ę') no longer distort the shape of the base glyph.
These features use a database (which currently has entries for
Unicode characters up to U+FFFF, based on Unicode 17.0), handling
scripts like Latin, Cyrillic, or Greek, but not Arabic or Indic
scripts. FreeType needs to access a proper Unicode character map
(or must be able to construct such a cmap) of a given font to make
this work.
The central algorithm and the foundation of this feature was Craig
White's GSoC 2023 project.
- Bitmap-only TrueType fonts now ignore the `FT_LOAD_NO_BITMAP` flag
and proceed loading bitmaps instead of giving an error. This
behavior is documented and implemented for other bitmap-only
fonts. The flag was always meant to suppress the bitmap strikes
in favor of outlines, not to ban them completely.
IMPORTANT BUG FIXES
- Users of the `TT_CONFIG_OPTION_GPOS_KERNING` configuration option
should update; the 'GPOS' table wasn't correctly validated before
access, which could lead to crashes with malformed font files.
MISCELLANEOUS
- `FT_Set_Var_Design_Coordinates` and `FT_Set_MM_Blend_Coordinates`
now set the `FT_FACE_FLAG_VARIATION` bit in the `face_flag` field
of `FT_Face` (i.e., the macro `FT_IS_VARIATION` returns true) also
if any of the provided coordinates is different from the face's
default value for the corresponding axis, that is, the set up face
is not at its default position.
- `FT_Load_Sfnt_Table` can now also load a font's table directory.
- The TrueType instruction interpreter was optimized to produce a
15% gain in the glyph loading speed.
- Handling of Variation Fonts is now considerably faster, thanks to
contributions by Behdad Esfahbod.
- TrueType and CFF glyph loading speed has been improved by 5-10% on
modern 64-bit platforms as a result of better handling of fixed-
point multiplication.
- The BDF driver now loads fonts 75% faster.
- 'GPOS' kern table handling (if the `TT_CONFIG_OPTION_GPOS_KERNING`
configuration option is active) is now about 3.5 times faster than
before.
- Support for the (currently undocumented) 'flip' graphic type in
the 'sbix' SFNT table as used in the `Apple Color Emoji.ttc` font
(code provided by Andrew Murray).
- `ftmulti` can now scroll through named instances and gracefully
show static fonts.
- The build file on OpenVMS now also creates a 32-bit version of the
library.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/freetype | 2 +-
lfs/freetype | 14 +++++++-------
2 files changed, 8 insertions(+), 8 deletions(-)
diff --git a/config/rootfiles/common/freetype b/config/rootfiles/common/freetype
index 81adc2503..0781a0f17 100644
--- a/config/rootfiles/common/freetype
+++ b/config/rootfiles/common/freetype
@@ -60,7 +60,7 @@
#usr/lib/libfreetype.la
#usr/lib/libfreetype.so
usr/lib/libfreetype.so.6
-usr/lib/libfreetype.so.6.20.2
+usr/lib/libfreetype.so.6.20.4
#usr/lib/pkgconfig/freetype2.pc
#usr/share/aclocal/freetype2.m4
#usr/share/man/man1/freetype-config.1
diff --git a/lfs/freetype b/lfs/freetype
index fa69e4e31..2a1d90aeb 100644
--- a/lfs/freetype
+++ b/lfs/freetype
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 2.13.3
+VER = 2.14.1
THISAPP = freetype-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = f9591c6998df02b072adaf38a968e91deae8ed4d53ea0cb74d08982c4f0e48b1a98c1378a698164e4f730f07a3b0bea308a94fcc2e2b8ce9967dbf9478b599bd
+$(DL_FILE)_BLAKE2 = 1dc62d337a93ca94f93496e60bdf9cbabed5867d66bb2f07669f1b5f81ef16f6cc57c401f51bb62d919680316f73902fafb6a167c45183872faaf984840b5ec7
install : $(TARGET)
@@ -72,11 +72,11 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
cd $(DIR_APP) && sed -ri "s:.*(AUX_MODULES.*valid):\1:" modules.cfg
cd $(DIR_APP) && sed -r "s:.*(#.*SUBPIXEL_RENDERING) .*:\1:" \
- -i include/freetype/config/ftoption.h
+ -i include/freetype/config/ftoption.h
cd $(DIR_APP) && ./configure \
- --prefix=/usr \
- --enable-freetype-config \
- --disable-static
+ --prefix=/usr \
+ --enable-freetype-config \
+ --disable-static
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
@rm -rf $(DIR_APP)
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] haproxy: Update to version 3.2.4
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (7 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] freetype: Update to version 2.14.1 Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] libffi: Update to version 3.5.2 Adolf Belka
` (4 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 3.2.2 to 3.2.4
- Update of rootfile not required
- Changelog
3.2.4
- DOC: deviceatlas build clarifications
- BUG/MEDIUM: ssl/clienthello: ECDSA with ssl-max-ver TLSv1.2 and no
ECDSA ciphers
- BUG/MEDIUM: acme: use POST-as-GET instead of GET for resources
- MINOR: acme: remove acme_req_auth() and use acme_post_as_get() instead
- BUG/MINOR: acme: allow "processing" in challenge requests
- CLEANUP: acme: fix wrong spelling of "resources"
- MINOR: acme: add ACME to the haproxy -vv feature list
- MINOR: acme: implement traces
- BUG/MINOR: hlua: Skip headers when a receive is performed on an HTTP applet
- BUG/MEDIUM: hlua: Report to SC when data were consumed on a lua socket
- BUG/MEDIUM: hlua: Report to SC when output data are blocked on a lua socket
- BUG/MEDIUM: dns: Reset reconnect tempo when connection is finally
established
- BUG/MEDIUM: logs: fix sess_build_logline_orig() recursion with options
- BUG/MINOR: hlua: take default-path into account with lua-load-per-thread
- BUG/MEDIUM: mux-quic: ensure Early-data header is set
- CLEANUP: ssl: Rename ssl_trace-t.h to ssl_trace.h
- BUILD: acme: avoid declaring TRACE_SOURCE in acme-t.h
- BUG/MEDIUM: hlua_fcn: ensure systematic watcher cleanup for server list
iterator
- MINOR: acme: emit a log for DNS-01 challenge response
- MINOR: acme: emit the DNS-01 challenge details on the dpapi sink
- MEDIUM: acme: allow to wait and restart the task for DNS-01
- MINOR: acme: update the log for DNS-01
- BUG/MINOR: acme: possible integer underflow in acme_txt_record()
- MEDIUM: acme: use lowercase for challenge names in configuration
- DOC: management: clarify usage of -V with -c
- MEDIUM: ssl/cli: relax crt insertion in crt-list of type directory
- BUG/MINOR: listener: really assign distinct IDs to shards
- MINOR: quic: Prevent QUIC build with OpenSSL 3.5 new QUIC API version
< 3.5.1
- BUG/MEDIUM: quic: Crash after QUIC server callbacks restoration
(OpenSSL 3.5)
- BUG/MEDIUM: http-client: Don't wake http-client applet if nothing was
xferred
- BUG/MEDIUM: http-client: Properly inc input data when HTX blocks are
xferred
- BUG/MEDIUM: http-client: Ask for more room when request data cannot be
xferred
- BUG/MINOR: http-client: Ignore 1XX interim responses in non-HTX mode
- BUG/MINOR: http-client: Reject any 101-switching-protocols response
- BUG/MEDIUM: http-client: Drain the request if an early response is received
- BUG/MEDIUM: http-client: Notify applet has more data to deliver until
the EOM
- MINOR: h1-htx: Add function to format an HTX message in its H1
representation
- BUG/MINOR: mux-h1: Use configured error files if possible for early H1
errors
- BUG/MINOR: h1-htx: Don't forget to init flags in h1_format_htx_msg function
- BUG/MEDIUM: h3: do not overwrite interim with final response
- BUG/MINOR: h3: properly realloc buffer after interim response encoding
- BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side)
- MINOR: qmux: change API for snd_buf FIN transmission
- BUG/MEDIUM: h3: handle interim response properly on FE side
- BUG/MINOR: quic: Wrong source address use on FreeBSD
- MINOR: h3: remove unused outbuf in h3_resp_headers_send()
- BUG/MINOR: applet: Don't trigger BUG_ON if the tid is not on appctx init
- BUG/MINOR: halog: exit with error when some output filters are set
simultaneosly
- BUG/MEDIUM: threads: Disable the workaround to load libgcc_s on macOS
- BUG/MINOR: logs: fix log-steps extra log origins selection
- BUG/MINOR: hq-interop: fix FIN transmission
- BUG/MINOR mux-quic: apply correctly timeout on output pending data
- BUG/MINOR: mux-quic: ensure close-spread-time is properly applied
- CLEANUP: http-client: Remove useless indentation when sending request body
- DOC: list missing global QUIC settings
- BUILD: compat: provide relaxed versions of the MIN/MAX macros
- BUILD: compat: always set _POSIX_VERSION to ease comparisons
- BUG/MINOR: stick-table: cap sticky counter idx with tune.nb_stk_ctr
instead of MAX_SESS_STKCTR
- MINOR: sock: update broken accept4 detection for older hardwares.
- BUG/MEDIUM: ssl: Fix 0rtt to the server
- BUG/MEDIUM: ssl: fix build with AWS-LC
- BUG/MINOR: init: Initialize random seed earlier in the init process
- DOC: management: fix typo in commit f4f93c56
- DOC: config: recommend single quoting passwords
- BUG/MEDIUM: mux-quic: adjust wakeup behavior
- BUG/MEDIUM: http-client: Test HTX_FL_EOM flag before commiting the HTX
buffer
3.2.3
- CI: enable USE_QUIC=1 for OpenSSL versions >= 3.5.0
- CI: github: add an OpenSSL 3.5.0 job
- CI: github: update the stable CI to ubuntu-24.04
- BUILD: quic: QUIC build against OpenSSL 3.5 broken
- BUG/MEDIUM: quic: SSL/TCP handshake failures with OpenSSL 3.5
- CI: github: update to OpenSSL 3.5.1
- BUG/MINOR: quic: Missing TLS 1.3 QUIC cipher suites and groups inits
(OpenSSL 3.5 QUIC API)
- BUG/MINOR: ssl/ocsp: fix definition discrepancies with ocsp_update_init()
- BUG/MINOR: ssl: crash in ssl_sock_io_cb() with SSL traces and idle
connections
- BUG/MINOR: http-act: Fix parsing of the expression argument for pause
action
- BUILD/MEDIUM: deviceatlas: fix when installed in custom locations.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/haproxy | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/lfs/haproxy b/lfs/haproxy
index 005754e55..633d11f50 100644
--- a/lfs/haproxy
+++ b/lfs/haproxy
@@ -26,7 +26,7 @@ include Config
SUMMARY = The Reliable, High Performance TCP/HTTP Load Balancer
-VER = 3.2.2
+VER = 3.2.4
# From: https://www.haproxy.org/download/
@@ -36,7 +36,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = haproxy
-PAK_VER = 32
+PAK_VER = 33
DEPS =
@@ -54,7 +54,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 8dc203c6ff0d366cba482c55bb8fc03d0b8ed7f6fee96a311efebc8a00abb5f50f087fa4b1045322ee831f3f7da0bee6eea67200083b0af5d40e8dd3f252644c
+$(DL_FILE)_BLAKE2 = b08c8637623a81f0e39ef897db032e43a5129cdff8440e6d77c8c19e3700b6f67bf4ac75084a465e100a7fb16c25a4c15830cda15baa4af927a919bff1c977bf
install : $(TARGET)
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] libffi: Update to version 3.5.2
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (8 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] haproxy: Update to version 3.2.4 Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] libssh: Update to version 0.11.3 Adolf Belka
` (3 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 3.5.1 to 3.5.2
- Update of rootfile not required
- Changelog
3.5.2
fix: enable FFI_MMAP_EXEC_WRIT for DragonFly BSD by @liweitianux in #930
Emscripten: Add wasm64 target by @ktock in #927
fix: Ensure trampoline file descriptors are closed on exec.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/libffi | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)
diff --git a/lfs/libffi b/lfs/libffi
index 545d45c9d..2217a8ea7 100644
--- a/lfs/libffi
+++ b/lfs/libffi
@@ -24,7 +24,7 @@
include Config
-VER = 3.5.1
+VER = 3.5.2
THISAPP = libffi-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = eaeb04beeb4ab6e0ef5652175d5c9d29a18b6f1edbf05db819a3a6ac9c8ed47de32c54fca4c3a9a476283c0771650d5a577e7868f16c671ee46e25db27369066
+$(DL_FILE)_BLAKE2 = 35ce590926bcdd2556c30c94bb0fef3f0cfe8f32e809ffad00eb0bc7a8ba1ba40da844b108069c87e86bff278221cc42dc7c7aacd02a7b7bc408ea054085398c
install : $(TARGET)
@@ -74,7 +74,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
$(UPDATE_AUTOMAKE)
- cd $(DIR_APP) && ./configure --prefix=/usr
+ cd $(DIR_APP) && ./configure \
+ --prefix=/usr
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
@rm -rf $(DIR_APP)
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] libssh: Update to version 0.11.3
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (9 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] libffi: Update to version 3.5.2 Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] libxml2: Update to version 2.14.6 Adolf Belka
` (2 subsequent siblings)
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 0.11.2 to 0.11.3
- Update of rootfile
- Changelog
0.11.3
* Security:
* CVE-2025-8114: Fix NULL pointer dereference after allocation failure
* CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated
wrong KEX
* Potential UAF when send() fails during key exchange
* Fix possible timeout during KEX if client sends authentication too early (#311)
* Cleanup OpenSSL PKCS#11 provider when loaded
* Zeroize buffers containing private key blobs during export
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/libssh | 2 +-
lfs/libssh | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/libssh b/config/rootfiles/common/libssh
index 77dfc71cf..d0b55519f 100644
--- a/config/rootfiles/common/libssh
+++ b/config/rootfiles/common/libssh
@@ -14,5 +14,5 @@
#usr/lib/cmake/libssh/libssh-config.cmake
#usr/lib/libssh.so
usr/lib/libssh.so.4
-usr/lib/libssh.so.4.10.2
+usr/lib/libssh.so.4.10.3
#usr/lib/pkgconfig/libssh.pc
diff --git a/lfs/libssh b/lfs/libssh
index 80eaa0219..26d41dd38 100644
--- a/lfs/libssh
+++ b/lfs/libssh
@@ -24,7 +24,7 @@
include Config
-VER = 0.11.2
+VER = 0.11.3
THISAPP = libssh-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 7f4a97b2027e386f5bfd308b1aac1938484722d4d1bb55ce0fa2de8358bedea47955df1cb4e68679033d1a5538058422770872f2f6513a82199ff506eccfad0e
+$(DL_FILE)_BLAKE2 = 859e4af9bf6305e54175e456d153a85e678a6fc49ac184dbe09d94ab01dde42f0321f5a2ac35cf4ca9df188daab6c4bf3171dcd8a3776419a3a1a20474ccf89a
install : $(TARGET)
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] libxml2: Update to version 2.14.6
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (10 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] libssh: Update to version 0.11.3 Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] lvm2: Update to version 2.03.35 Adolf Belka
2025-09-15 17:46 ` [PATCH] p11-kit: Update to version 0.25.8 Adolf Belka
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2.14.4 to 2.14.6
- Update of rootfile
- 5 CVE fixes in version 2.14.5
- Changelog
2.14.6
Regressions
valid: Don't add ids when validating entity content
Fix initGenericErrorDefaultFunc(NULL) (Samuel Thibault)
valid: Undeprecate xmlAdd*Decl
globals: Include HTMLparser.h, fixing Windows build
io: Fix reading from pipes like stdin on Windows
Security
regexp: Avoid integer overflow and OOB array access
tree: Guard against atype corruption
Improvements
parser: Fix xmlSaturatedAddSizeT argument type
2.14.5
Regressions
valid: Don't add ids when validating entity content
io: Fix reading from pipes like stdin on Windows
parser: Fix handling of invalid char refs in recovery mode
Security
regexp: Avoid integer overflow and OOB array access
tree: Guard against atype corruption
[CVE-2025-49794] [CVE-2025-49796] schematron: Fix xmlSchematronReportOutput
[CVE-2025-49795] schematron: Fix null pointer dereference leading to DoS
(Michael Mann)
[CVE-2025-6170] Fix potential buffer overflows of interactive shell
(Michael Mann)
[CVE-2025-6021] tree: Fix integer overflow in xmlBuildQName
Bug fixes
save: Fix serialization of attribute defaults containing <
Improvements
parser: Fix xmlSaturatedAddSizeT argument type
Build systems and portability
meson: Add libxml2 part of include dir to pc file (Heiko Becker)
cmake: Fix installation directories in libxml2-config.cmake
io: Fix linkage of __xml*BufferCreateFilename functions
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/libxml2 | 2 +-
lfs/libxml2 | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/libxml2 b/config/rootfiles/common/libxml2
index 009e1fb06..995a268bd 100644
--- a/config/rootfiles/common/libxml2
+++ b/config/rootfiles/common/libxml2
@@ -54,7 +54,7 @@
#usr/lib/libxml2.la
#usr/lib/libxml2.so
usr/lib/libxml2.so.16
-usr/lib/libxml2.so.16.0.4
+usr/lib/libxml2.so.16.0.6
#usr/lib/pkgconfig/libxml-2.0.pc
#usr/share/doc/libxml2
#usr/share/doc/libxml2/xmlcatalog.html
diff --git a/lfs/libxml2 b/lfs/libxml2
index 7e3be5f8d..0509b9b98 100644
--- a/lfs/libxml2
+++ b/lfs/libxml2
@@ -24,7 +24,7 @@
include Config
-VER = 2.14.4
+VER = 2.14.6
THISAPP = libxml2-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 6ee7e4f35e6f15124fe1ceb55758236229f87e05344c55e82c419f8e8dba763adbd25746c038d13189dfadc3bb023fd8891251e78e9c9046d42961829d93b885
+$(DL_FILE)_BLAKE2 = ad5d7cb64f8081559a671e9d79b3ebcd7313dada39d7f0c2854994153a9dff2ef85bc81336437f5881abe637bae51b62e9104b3a099113f4ee2252b604325291
install : $(TARGET)
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] lvm2: Update to version 2.03.35
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (11 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] libxml2: Update to version 2.14.6 Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
2025-09-15 17:46 ` [PATCH] p11-kit: Update to version 0.25.8 Adolf Belka
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2.03.33 to 2.03.35
- Update of rootfile
- Changelog
2.03.35
Fix unlocking devices file only after all PVs are processed.
Avoid creating system.devices when deleting entries.
Fix existing issues with persistent reservations.
Fix possible report output format inconsistencies while processing PVs.
Allow report options for pv/vg/lvdisplay only if used with -C|--columns.
Fix vgsplit failing to split a VG with RAID+integrity or cache with cachevol.
Fix --lockopt handling in lvmlockd when --nolocking is used.
Optimize dmeventd when remonitoring active devices.
2.03.34
Support dmeventd restart when there are no monitored devices.
Dmeventd no longer calls 'action commands' on removed devices.
Fix reader of VDO metadata on 32bit architecture.
Fix lvmdevices --deldev/--delpvid to error out if devices file not writeable.
Fix lvresize corruption in LV->crypt->FS stack if near crypt min size limit.
Enhanced lvresize -r support for btrfs.
Use glibc standard functions htoX, Xtoh functions for endian conversion.
Fix structure copying within sanlock's release_rename().
Fix autoactivation on top of loop dev PVs to trigger once for change uevents.
Add lvmlockd --lockopt repair to reinitialize corrupted sanlock leases.
Fix support for lvcreate -T --setautoactivation.
Add lvm.conf global/lvresize_fs_helper_executable.
Enable lvm to use persistent reservations on a VG.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/lvm2 | 2 ++
lfs/lvm2 | 4 ++--
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/config/rootfiles/common/lvm2 b/config/rootfiles/common/lvm2
index bd1329e54..a71ac8be8 100644
--- a/config/rootfiles/common/lvm2
+++ b/config/rootfiles/common/lvm2
@@ -35,6 +35,7 @@ usr/sbin/lvmconfig
usr/sbin/lvmdevices
usr/sbin/lvmdiskscan
usr/sbin/lvmdump
+usr/sbin/lvmpersist
usr/sbin/lvmsadc
usr/sbin/lvmsar
usr/sbin/lvreduce
@@ -99,6 +100,7 @@ usr/sbin/vgsplit
#usr/share/man/man8/lvmdevices.8
#usr/share/man/man8/lvmdiskscan.8
#usr/share/man/man8/lvmdump.8
+#usr/share/man/man8/lvmpersist.8
#usr/share/man/man8/lvmsadc.8
#usr/share/man/man8/lvmsar.8
#usr/share/man/man8/lvreduce.8
diff --git a/lfs/lvm2 b/lfs/lvm2
index fd67dd59e..8fa0dc1b6 100644
--- a/lfs/lvm2
+++ b/lfs/lvm2
@@ -24,7 +24,7 @@
include Config
-VER = 2.03.33
+VER = 2.03.35
THISAPP = LVM2.$(VER)
DL_FILE = $(THISAPP).tgz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 89a5f4c338cae4196edf815820819e71a6d4211bdaa447ba6e71100469261d9f0d4071a70502b53e6734a8f857771a73efc9de62644b09363a807c2fa9562829
+$(DL_FILE)_BLAKE2 = f1612a98de3bc9080a514acefc1c9c057e9b2e6915ee6b6755c809eaec960e87f35f67d48ef7e5ef2ccd8f79203af7ef41a43e5318f024159bbef91906097730
install : $(TARGET)
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread* [PATCH] p11-kit: Update to version 0.25.8
2025-09-15 17:46 [PATCH] core198: Ship ethtool Adolf Belka
` (12 preceding siblings ...)
2025-09-15 17:46 ` [PATCH] lvm2: Update to version 2.03.35 Adolf Belka
@ 2025-09-15 17:46 ` Adolf Belka
13 siblings, 0 replies; 15+ messages in thread
From: Adolf Belka @ 2025-09-15 17:46 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 0.25.5 to 0.25.8
- Update of rootfile
- Changelog
0.25.8
* rpc: Unbreak protocol compatibility by reverting "rpc: Correctly map Mozilla
certificate distrust attributes" [PR#716]
0.25.7
* Build fixes from tarball with Meson [PR#714]
0.25.6
* rpc: Add module configuration option to specify server address [PR#707]
* rpc: Correctly map Mozilla certificate distrust attributes [PR#705]
* rpc: Fix empty array attribute handling [PR#704]
* server: Remove libsystemd dependency for socket activation [PR#685]
* Avoid segfault if p11_library_init_impl/p11_library_uninit are called
multiple times [PR#682]
* Add zsh completions [PR#674]
* pkcs11: Update pkcs11.h to version 3.1 [PR#671]
* pkcs11: Add IBM specific mechanisms [PR#669]
* server: check SHELL if (and only if) neither --sh nor --csh is specified
[PR#661]
* trust: don't create file names longer then 255 [PR#659]
* trust: sort paths for reproducible extract [PR#656]
* Build and test fixes [PR#647, PR#653, PR#654, PR#657, PR#660, PR#667, PR#673,
PR#681, PR#683, PR#688, PR#694]
* Update translations [PR#663, PR#701]
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/p11-kit | 3 ++-
lfs/p11-kit | 6 +++---
2 files changed, 5 insertions(+), 4 deletions(-)
diff --git a/config/rootfiles/common/p11-kit b/config/rootfiles/common/p11-kit
index c0ea3ac58..2d3fbf246 100644
--- a/config/rootfiles/common/p11-kit
+++ b/config/rootfiles/common/p11-kit
@@ -15,7 +15,7 @@ usr/bin/trust
#usr/lib/libp11-kit.la
#usr/lib/libp11-kit.so
usr/lib/libp11-kit.so.0
-usr/lib/libp11-kit.so.0.4.1
+usr/lib/libp11-kit.so.0.4.3
usr/lib/p11-kit-proxy.so
#usr/lib/pkcs11
#usr/lib/pkcs11/p11-kit-client.la
@@ -54,6 +54,7 @@ usr/lib/pkcs11/p11-kit-trust.so
#usr/share/gtk-doc/html/p11-kit/p11-kit.devhelp2
#usr/share/gtk-doc/html/p11-kit/p11-kit.html
#usr/share/gtk-doc/html/p11-kit/pkcs11-conf.html
+#usr/share/gtk-doc/html/p11-kit/proxy.html
#usr/share/gtk-doc/html/p11-kit/reference.html
#usr/share/gtk-doc/html/p11-kit/remoting.html
#usr/share/gtk-doc/html/p11-kit/right-insensitive.png
diff --git a/lfs/p11-kit b/lfs/p11-kit
index fcc4ce2c2..0676023c7 100644
--- a/lfs/p11-kit
+++ b/lfs/p11-kit
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 0.25.5
+VER = 0.25.8
THISAPP = p11-kit-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 96d6a9c2807586abafae4da4df89f566672733963997d6a83e00aaf83a7a0c0e2995638f505e98fb87a90c60bde28814f1e8b7d5071bf0af96bb0467105a1ddc
+$(DL_FILE)_BLAKE2 = d351b7b015920d7ecf1b9d3b4f1f3fc62c7ef46c1dc9ed3475b9ac7f5dbf5a47b2d2a19049e7eef81e35d0f993a860ee5df1864f0341596dca143140ae14e5c4
install : $(TARGET)
--
2.51.0
^ permalink raw reply [flat|nested] 15+ messages in thread