* [PATCH] core200: Ship libpng
2025-12-02 11:57 [PATCH] core200: Ship iana-etc Adolf Belka
@ 2025-12-02 11:57 ` Adolf Belka
2025-12-02 11:57 ` [PATCH] core200: Ship lvm2 Adolf Belka
` (6 subsequent siblings)
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2025-12-02 11:57 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/200/filelists/libpng | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/200/filelists/libpng
diff --git a/config/rootfiles/core/200/filelists/libpng b/config/rootfiles/core/200/filelists/libpng
new file mode 120000
index 000000000..8ef96e2c1
--- /dev/null
+++ b/config/rootfiles/core/200/filelists/libpng
@@ -0,0 +1 @@
+../../../common/libpng
\ No newline at end of file
--
2.52.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] core200: Ship lvm2
2025-12-02 11:57 [PATCH] core200: Ship iana-etc Adolf Belka
2025-12-02 11:57 ` [PATCH] core200: Ship libpng Adolf Belka
@ 2025-12-02 11:57 ` Adolf Belka
2025-12-02 11:57 ` [PATCH] core200: Ship sqlite Adolf Belka
` (5 subsequent siblings)
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2025-12-02 11:57 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/200/filelists/lvm2 | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/200/filelists/lvm2
diff --git a/config/rootfiles/core/200/filelists/lvm2 b/config/rootfiles/core/200/filelists/lvm2
new file mode 120000
index 000000000..d640870b7
--- /dev/null
+++ b/config/rootfiles/core/200/filelists/lvm2
@@ -0,0 +1 @@
+../../../common/lvm2
\ No newline at end of file
--
2.52.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] core200: Ship sqlite
2025-12-02 11:57 [PATCH] core200: Ship iana-etc Adolf Belka
2025-12-02 11:57 ` [PATCH] core200: Ship libpng Adolf Belka
2025-12-02 11:57 ` [PATCH] core200: Ship lvm2 Adolf Belka
@ 2025-12-02 11:57 ` Adolf Belka
2025-12-02 11:57 ` [PATCH] iana-etc: Update to version 20251120 Adolf Belka
` (4 subsequent siblings)
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2025-12-02 11:57 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/200/filelists/sqlite | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/200/filelists/sqlite
diff --git a/config/rootfiles/core/200/filelists/sqlite b/config/rootfiles/core/200/filelists/sqlite
new file mode 120000
index 000000000..4ea569766
--- /dev/null
+++ b/config/rootfiles/core/200/filelists/sqlite
@@ -0,0 +1 @@
+../../../common/sqlite
\ No newline at end of file
--
2.52.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] iana-etc: Update to version 20251120
2025-12-02 11:57 [PATCH] core200: Ship iana-etc Adolf Belka
` (2 preceding siblings ...)
2025-12-02 11:57 ` [PATCH] core200: Ship sqlite Adolf Belka
@ 2025-12-02 11:57 ` Adolf Belka
2025-12-02 11:57 ` [PATCH] libpng: Update to version 1.6.51 Adolf Belka
` (3 subsequent siblings)
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2025-12-02 11:57 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 20251030 to 20251120
- No change to rootfile
- No changelog provided
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/iana-etc | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/iana-etc b/lfs/iana-etc
index 23d8fc22a..9c0e5c9f8 100644
--- a/lfs/iana-etc
+++ b/lfs/iana-etc
@@ -24,7 +24,7 @@
include Config
-VER = 20251030
+VER = 20251120
# https://github.com/Mic92/iana-etc
THISAPP = iana-etc-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = f2775fff5517d4195e54aa4290738c32eae1cabfd7ddb824692ad41c1e77080bc3bcafa9afa8915da094c537cd67bccc175c6771d28fca22fffc8a2240209f32
+$(DL_FILE)_BLAKE2 = fd85f0494f65774607c43b9f76fb1f9052b7d6782c893997984b791cbb449723d329f3dab99339e1e52a174ab0374ee9bc57166bb39e1a1833be2e0f3e076e5e
install : $(TARGET)
--
2.52.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] libpng: Update to version 1.6.51
2025-12-02 11:57 [PATCH] core200: Ship iana-etc Adolf Belka
` (3 preceding siblings ...)
2025-12-02 11:57 ` [PATCH] iana-etc: Update to version 20251120 Adolf Belka
@ 2025-12-02 11:57 ` Adolf Belka
2025-12-02 11:57 ` [PATCH] lvm2: Update to version 2.03.37 Adolf Belka
` (2 subsequent siblings)
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2025-12-02 11:57 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 1.6.50 to 1.6.51
- Update of rootfile
- Four CVE fixes
- Changelog
1.6.51
Fixed CVE-2025-64505 (moderate severity):
Heap buffer overflow in `png_do_quantize` via malformed palette index.
(Reported by Samsung; analyzed by Fabio Gritti.)
Fixed CVE-2025-64506 (moderate severity):
Heap buffer over-read in `png_write_image_8bit` with 8-bit input and
`convert_to_8bit` enabled.
(Reported by Samsung and <weijinjinnihao@users.noreply.github.com>;
analyzed by Fabio Gritti.)
Fixed CVE-2025-64720 (high severity):
Buffer overflow in `png_image_read_composite` via incorrect palette
premultiplication.
(Reported by Samsung; analyzed by John Bowler.)
Fixed CVE-2025-65018 (high severity):
Heap buffer overflow in `png_combine_row` triggered via
`png_image_finish_read`.
(Reported by <yosiimich@users.noreply.github.com>.)
Fixed a memory leak in `png_set_quantize`.
(Reported by Samsung; analyzed by Fabio Gritti.)
Removed the experimental and incomplete ERROR_NUMBERS code.
(Contributed by Tobias Stoeckmann.)
Improved the RISC-V vector extension support; required RVV 1.0 or newer.
(Contributed by Filip Wasil.)
Added GitHub Actions workflows for automated testing.
Performed various refactorings and cleanups.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/libpng | 2 +-
lfs/libpng | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/libpng b/config/rootfiles/common/libpng
index 5f3f801d5..9dfdef5c6 100644
--- a/config/rootfiles/common/libpng
+++ b/config/rootfiles/common/libpng
@@ -16,7 +16,7 @@ usr/lib/libpng.so
#usr/lib/libpng16.la
usr/lib/libpng16.so
usr/lib/libpng16.so.16
-usr/lib/libpng16.so.16.50.0
+usr/lib/libpng16.so.16.51.0
#usr/lib/pkgconfig/libpng.pc
#usr/lib/pkgconfig/libpng16.pc
#usr/share/man/man3/libpng.3
diff --git a/lfs/libpng b/lfs/libpng
index e181be4e3..545b3efef 100644
--- a/lfs/libpng
+++ b/lfs/libpng
@@ -24,7 +24,7 @@
include Config
-VER = 1.6.50
+VER = 1.6.51
THISAPP = libpng-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 2191536b4448d3a058b9dbb31f3d780959c9daf7b104550cc89e8ae984a3c9f01b86bf6c6708983989b4bfbe7232e3716b8a3b8cd3313a12c31e0623b6241d11
+$(DL_FILE)_BLAKE2 = 2d1ee36f9796e90a533abf26597df82c39cfab42f8d4044d35e0fdbab65612b9fc0234780677e2ea758450db9815b9d30870e8024bcebc0170c87361b7c4cc0a
install : $(TARGET)
--
2.52.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] lvm2: Update to version 2.03.37
2025-12-02 11:57 [PATCH] core200: Ship iana-etc Adolf Belka
` (4 preceding siblings ...)
2025-12-02 11:57 ` [PATCH] libpng: Update to version 1.6.51 Adolf Belka
@ 2025-12-02 11:57 ` Adolf Belka
2025-12-02 11:57 ` [PATCH] postfix: Update to version 3.10.6 Adolf Belka
2025-12-02 11:57 ` [PATCH] sqlite: Update to version 3510100 Adolf Belka
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2025-12-02 11:57 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2.03.36 to 2.03.37
- No change to rootfile
- Changelog
2.03.37
Remove unsupported --blockdevice option from lvscan.
Support output in list mode for all lvmconfig --typeconfig types with --list.
Enhance shutdown performance of daemons using libdaemon.
Update lvmdevices(8).
Add --force option for lvmdevices --update.
Add --listids, --delid, --addid options for manipulation by device_id to
lvmdevices.
Add missing synchronization for vdopool.
Fix deadlock in lvmdbusd on SIGINT in lvm shell mode.
Add VG attr character and pr field for persistent reservation status to vgs.
Fix persistent reservations setting handling in vgmerge, vgsplit and
vgimportclone.
Add missing synchronization while converting cachevols.
Warn on classic snapshot on raid creation and error on activation if missing.
Translate udev device paths in lvmdbusd for test environments.
Use source='udev' in lvmdbusd to monitor processed udev events.
Symlink to /dev nodes when using alternative dev dir to trigger udev.
Avoid passing uninitilized buffer in dmeventd to fix valgrind report.
Improve lvmdbusd matching of udevd reported device paths.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/lvm2 | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/lvm2 b/lfs/lvm2
index 39573f05f..df508d11a 100644
--- a/lfs/lvm2
+++ b/lfs/lvm2
@@ -24,7 +24,7 @@
include Config
-VER = 2.03.36
+VER = 2.03.37
THISAPP = LVM2.$(VER)
DL_FILE = $(THISAPP).tgz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 487acd55d640d9f8265f62165485f6e3d94f3a4378f10e7086aa3bcc1adf0e82b2ae04f9f6a055d26d92554f219143013dc233ee45296437d5b73fd9e96fc150
+$(DL_FILE)_BLAKE2 = 4762ebe827b886c0e72a91c545c8c4fa9c9d1629e987f13d0c52ee41b80444c3c5c8a81a90566ed9bd7b68d67684749a7ad2cc066b20a3fa44eb8466ae0cc82e
install : $(TARGET)
--
2.52.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] postfix: Update to version 3.10.6
2025-12-02 11:57 [PATCH] core200: Ship iana-etc Adolf Belka
` (5 preceding siblings ...)
2025-12-02 11:57 ` [PATCH] lvm2: Update to version 2.03.37 Adolf Belka
@ 2025-12-02 11:57 ` Adolf Belka
2025-12-02 11:57 ` [PATCH] sqlite: Update to version 3510100 Adolf Belka
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2025-12-02 11:57 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 3.10.4 to 3.10.6
- No change to rootfile
- Changelog
3.10.6
Bugfix (defect introduced: Postfix 3.10, date: 20250117). Symptom: warning messages
that smtp_tls_wrappermode requires "smtp_tls_security_level = encrypt".
Root cause: Support for "TLS-Required: no" broke client-side TLS wrappermode
support, by downgrading a connection to TLS security level 'may'.
The fix changes the downgrade level for wrappermode connections to 'encrypt'.
Rationale: by design, TLS can be optional only for connections that use
STARTTLS. The downgrade to unauthenticated 'encrypt' allows a sender to avoid
an email delivery problem. Problem reported by Joshua Tyler Cochran.
New logging: the Postfix SMTP client will log a warning when an MX hostname does
not match STS policy MX patterns, with "smtp_tls_enforce_sts_mx_patterns = yes"
in Postfix, and with TLSRPT support enabled in a TLS policy plugin. It will log
a successful match only when verbose logging is enabled.
Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP client null pointer
crash when an STS policy plugin sends no policy_string or no mx_pattern
attributes. This can happen only during tests with a fake STS plugin.
Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault when a duplicate
parameter name is given to "postconf -X" or "postconf -#'.
Documentation: removed incorrect text from the parameter description for
smtp_cname_overrides_servername. File: proto/postconf.proto.
3.10.5
Workaround for an interface mis-match between the Postfix SMTP client and MTA-STS
policy plugins.
The existing behavior is to connect to any MX host listed in DNS, and
to match the server certificate against any STS policy MX host pattern.
The corrected behavior is to connect to an MX host only if its name
matches any STS policy MX host pattern, and to match the server
certificate against the MX hostname.
The corrected behavior must be enabled in two places: in Postfix with a new
parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes") and in an
MTA-STS plugin by enabling TLSRPT support, so that the plugin forwards STS
policy attributes to Postfix. This works even if Postfix TLSRPT support is
disabled at build time or at runtime.
TLSRPT Workaround: when a TLSRPT policy-type value is "no-policy-found", pretend
that the TLSRPT policy domain value is equal to the recipient domain. This
ignores that different policy types (TLSA, STS) use different policy domains.
But this is what Microsoft does, and therefore, what other tools expect.
Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP client's connection
reuse logic did not distinguish between sessions that require SMTPUTF8
support, and sessions that do not. The solution is 1) to store sessions with
different SMTPUTF8 requirements under distinct connection cache storage keys,
and 2) to not cache a connection when SMTPUTF8 is required but the server does
not support that feature.
Bugfix (defect introduced: Postfix 3.0, date 20140731): the smtpd 'disconnect'
command statistics did not count commands with "bad syntax" and
"bad UTF-8 syntax" errors.
Bugfix: the August 2025 patch broke DBM library support which is still needed on
Solaris; and the same change could result in warnings with
"database X is older than source file Y".
Postfix 3.11 forward compatibility: to avoid ugly warnings when Postfix 3.11 is
rolled back to an older version, allow a preliminary 'size' record in maildrop
queue files created with Postfix 3.11 or later.
Bugfix (defect introduced: Postfix 3.8, date 20220128): non-reproducible build,
because the 'postconf -e' output order for new main.cf entries was no longer
deterministic. Problem reported by Oleksandr Natalenko, diagnosis by Eray Aslan.
To make builds predictable, add missing meta_directory and shlib_directory
settings to the stock main.cf file. Problem diagnosed by Eray Aslan.
Bugfix (defect introduced: Postfix 3.9, date 20230517): posttls-finger(1) logged
an incorrectly-formatted port number. Viktor Dukhovni.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/postfix | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/lfs/postfix b/lfs/postfix
index 2bc0174d1..a7ff99c4f 100644
--- a/lfs/postfix
+++ b/lfs/postfix
@@ -26,7 +26,7 @@ include Config
SUMMARY = A fast, secure, and flexible mailer
-VER = 3.10.4
+VER = 3.10.6
THISAPP = postfix-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = postfix
-PAK_VER = 49
+PAK_VER = 50
DEPS =
@@ -72,7 +72,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = e0a9b3dbd858e9b2bacb137b886ef35a89220caf91da5bcb90de5fd3df7285645deaff6e58f571cdc75966098cf13190b0315690c270b9f3ed69a21e63d2d3ab
+$(DL_FILE)_BLAKE2 = ca9f371f15af45c72ee97830d5bfb08b4ef2020409e55b1a99ef20681dfaec86fa7f7f799caa7b6e5757da0ea9ccbd5ac51104244b2e315f3cedb414b3e46451
install : $(TARGET)
--
2.52.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] sqlite: Update to version 3510100
2025-12-02 11:57 [PATCH] core200: Ship iana-etc Adolf Belka
` (6 preceding siblings ...)
2025-12-02 11:57 ` [PATCH] postfix: Update to version 3.10.6 Adolf Belka
@ 2025-12-02 11:57 ` Adolf Belka
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2025-12-02 11:57 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 3510000 to 3510100
- Update of rootfile
- Changelog
3510100
Fix incorrect results from nested EXISTS queries caused by the optimization in
item 6b in the 3.51.0 release.
Fix a latent bug in fts5vocab virtual table, exposed by new optimizations in
the 3.51.0 release
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/sqlite | 2 +-
lfs/sqlite | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/sqlite b/config/rootfiles/common/sqlite
index e4fa7c19f..0d18c64c1 100644
--- a/config/rootfiles/common/sqlite
+++ b/config/rootfiles/common/sqlite
@@ -3,6 +3,6 @@ usr/bin/sqlite3
#usr/include/sqlite3ext.h
usr/lib/libsqlite3.so
usr/lib/libsqlite3.so.0
-usr/lib/libsqlite3.so.3.51.0
+usr/lib/libsqlite3.so.3.51.1
#usr/lib/pkgconfig/sqlite3.pc
#usr/share/man/man1/sqlite3.1
diff --git a/lfs/sqlite b/lfs/sqlite
index 3a4d49c2d..45dcfea34 100644
--- a/lfs/sqlite
+++ b/lfs/sqlite
@@ -24,7 +24,7 @@
include Config
-VER = 3510000
+VER = 3510100
THISAPP = sqlite-autoconf-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 1e4f1589fa546a11bc505a0ed8c2960ba96a907854daedd116586412597855d9e454637ce9ccf8671ad1943bfdcf23c8913057f79c8baea886ce883be584dea1
+$(DL_FILE)_BLAKE2 = c946652f07cf743f425aa8182e29bb4fff9f929ee56202235f6e6dfd9d06c4fcda06a3f0b0a41a1d52401f067dfb6e4c0871851ce402c1f7cfc358aac72855aa
install : $(TARGET)
--
2.52.0
^ permalink raw reply [flat|nested] 9+ messages in thread