* [PATCH] core204: Ship ethtool
2026-07-09 15:08 [PATCH] c-ares: Update to version 1.34.8 Adolf Belka
@ 2026-07-09 15:08 ` Adolf Belka
2026-07-09 15:08 ` [PATCH] core204: Ship openssh Adolf Belka
` (6 subsequent siblings)
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2026-07-09 15:08 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/204/filelists/ethtool | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/204/filelists/ethtool
diff --git a/config/rootfiles/core/204/filelists/ethtool b/config/rootfiles/core/204/filelists/ethtool
new file mode 120000
index 000000000..494a53e9d
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/ethtool
@@ -0,0 +1 @@
+../../../common/ethtool
\ No newline at end of file
--
2.55.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] core204: Ship openssh
2026-07-09 15:08 [PATCH] c-ares: Update to version 1.34.8 Adolf Belka
2026-07-09 15:08 ` [PATCH] core204: Ship ethtool Adolf Belka
@ 2026-07-09 15:08 ` Adolf Belka
2026-07-09 15:08 ` [PATCH] core204: Ship tzdata Adolf Belka
` (5 subsequent siblings)
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2026-07-09 15:08 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/204/filelists/openssh | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/204/filelists/openssh
diff --git a/config/rootfiles/core/204/filelists/openssh b/config/rootfiles/core/204/filelists/openssh
new file mode 120000
index 000000000..d8c77fd8e
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/openssh
@@ -0,0 +1 @@
+../../../common/openssh
\ No newline at end of file
--
2.55.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] core204: Ship tzdata
2026-07-09 15:08 [PATCH] c-ares: Update to version 1.34.8 Adolf Belka
2026-07-09 15:08 ` [PATCH] core204: Ship ethtool Adolf Belka
2026-07-09 15:08 ` [PATCH] core204: Ship openssh Adolf Belka
@ 2026-07-09 15:08 ` Adolf Belka
2026-07-09 15:08 ` [PATCH] ethtool: Update to version 7.1 Adolf Belka
` (4 subsequent siblings)
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2026-07-09 15:08 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/204/filelists/tzdata | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/204/filelists/tzdata
diff --git a/config/rootfiles/core/204/filelists/tzdata b/config/rootfiles/core/204/filelists/tzdata
new file mode 120000
index 000000000..5a6e3252f
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/tzdata
@@ -0,0 +1 @@
+../../../common/tzdata
\ No newline at end of file
--
2.55.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] ethtool: Update to version 7.1
2026-07-09 15:08 [PATCH] c-ares: Update to version 1.34.8 Adolf Belka
` (2 preceding siblings ...)
2026-07-09 15:08 ` [PATCH] core204: Ship tzdata Adolf Belka
@ 2026-07-09 15:08 ` Adolf Belka
2026-07-09 15:08 ` [PATCH] hwdata: Update to version 0.409 Adolf Belka
` (3 subsequent siblings)
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2026-07-09 15:08 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 7.0 to 7.1
- No change to the rootfile
- Changelog
7.1
* Feature: track TX pause storm events (-I -a)
* Feature: update doc for ETHTOOL_PFC_PREVENTION_TOUT tunable
* Feature: RX CQE coalescing params (-c, -C)
* Feature: allow hex dump of all pages (-m)
* Feature: qsfp: support newer SFF-8636 compliance codes (-m)
* Feature: sfpid: support newer SFF-8636 compliance codes (-m)
* Fix: document --disable-netlink in help output (-h)
* Fix: add missing newlines in FEC output (--show-fec)
* Fix: sfpid: fix 10G Base-ER module detection (-m)
* Misc: clarify 10000baseCR link mode in man page
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/ethtool | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/ethtool b/lfs/ethtool
index 006c8ad37..62f0cf50e 100644
--- a/lfs/ethtool
+++ b/lfs/ethtool
@@ -24,7 +24,7 @@
include Config
-VER = 7.0
+VER = 7.1
THISAPP = ethtool-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = c2cfdb3256044dd4e331f8663a87e1b5231d45a693501bfd022c823bdbea950c93f0586e5d61e02d28f7ff87df769a68e1126123429f82899603baa69f153006
+$(DL_FILE)_BLAKE2 = 54b3e8764e0c1ff960a09ad2f321d926a0cd7561066747db639d4167124276cea9d9b7b3e10da6df2d17635f392570f8f151d95433f3029e4d522c935796f719
install : $(TARGET)
--
2.55.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] hwdata: Update to version 0.409
2026-07-09 15:08 [PATCH] c-ares: Update to version 1.34.8 Adolf Belka
` (3 preceding siblings ...)
2026-07-09 15:08 ` [PATCH] ethtool: Update to version 7.1 Adolf Belka
@ 2026-07-09 15:08 ` Adolf Belka
2026-07-09 15:08 ` [PATCH] openssh: Update to version 10.4p1 Adolf Belka
` (2 subsequent siblings)
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2026-07-09 15:08 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 0.408 to 0.409
- No change to rootfile
- Changelog
0.409
Update usb and vendor ids
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/hwdata | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/hwdata b/lfs/hwdata
index a53de632b..bf8447f9a 100644
--- a/lfs/hwdata
+++ b/lfs/hwdata
@@ -24,7 +24,7 @@
include Config
-VER = 0.408
+VER = 0.409
THISAPP = hwdata-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = b5e6e5da6b6da4a1961468390cf86e291f2e3ba9db10cf98426c9619ec756f6cfcd80c0ebe42c4abcf55e70cfda73fbfd3b8fb422adb208d2da35999540580f7
+$(DL_FILE)_BLAKE2 = 49f9d31b7c0d16466e85b5af03d6457a4fd0d79769018d5440801efadb8fb55aa0dc978401141adafadc082b795f6da0f791e9b64c2766439b90e799b3ee7c10
install : $(TARGET)
--
2.55.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] openssh: Update to version 10.4p1
2026-07-09 15:08 [PATCH] c-ares: Update to version 1.34.8 Adolf Belka
` (4 preceding siblings ...)
2026-07-09 15:08 ` [PATCH] hwdata: Update to version 0.409 Adolf Belka
@ 2026-07-09 15:08 ` Adolf Belka
2026-07-09 15:08 ` [PATCH] tshark: Update to version 4.6.7 Adolf Belka
2026-07-09 15:08 ` [PATCH] tzdata: Update to version 2026c Adolf Belka
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2026-07-09 15:08 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 10.3p1 to 10.4pi
- Update of rootfile
- Changelog
10.4p1
Potentially-incompatible changes
* sshd(8): configuration dump mode ("sshd -G") now writes directives
in mixed case (e.g. "PubkeyAuthentication") whereas previously it
emitted only lower-case names.
* sshd(8): on Linux systems with the seccomp sandbox enabled,
failures to enable SECCOMP or NO_NEW_PRIVS are now fatal.
Previously sshd(8) would log the error but continue operation,
to support systems that lacked these features. Now systems that
lack these should instead disable the sandbox at configure time.
* ssh(1), sshd(8): make the transport protocol stricter by
disconnecting if the peer sends non-KEX messages during a post-
authentication key re-exchange. Previously a malicious peer could
continue sending non-key exchange messages without penalty. These
would be buffered, causing memory to be wasted up until the
connection terminated or the server/client hit a memory limit.
Implementations that do not restrict messages sent during key
exchange as per RFC4253 section 7.1 may be disconnected.
Reported by Marko Jevtic.
Security
* sftp(1): when downloading files on the command-line using
"sftp host:/path .", a malicious server could cause the file to
be downloaded to an unexpected location. This issue was identified
by the Swival Security Scanner.
* scp(1): when copying files between two remote destinations, do
not allow a malicious server to write files to the parent
directory of the intended target directory. This issue was
identified by the Swival Security Scanner.
* sshd(8): when using the "internal-sftp" SFTP server implementation
(this is not the default), long command lines were previously
truncated silently after the 9th argument. If a security-relevant
option was in the 10th or later position, it would be discarded.
Reported by Steve Caffrey.
* sshd(8): add a documentation note to mention that the
GSSAPIStrictAcceptorCheck option is ineffective when the server
is joined to a Windows Active Directory. Reported by Yarin Aharoni
of Safebreach.
* sshd(8): DisableForwarding=yes didn't override PermitTunnel=yes
as it was documented to do. Note that PermitTunnel is not enabled
by default. Reported independently by Huzaifa Sidhpurwala of
Redhat and Marko Jevtic.
* sshd(8): avoid a potential pre-authentication denial of service
when GSSAPIAuthentication was enabled (this feature is off by
default). This was not mitigated by MaxAuthTries, but would be
penalised by PerSourcePenalties. This was reported by Manfred
Kaiser of the milCERT AT (Austrian Ministry of Defence).
* sshd(8): fix a number of cases where the minimum authentication
delay was not being enforced. Reported by the Orange Cyberdefense
Vulnerability Team.
* ssh(1): fix a possible client-side use-after-free if the server
changes its host key during a key reexchange. This was reported by
Zhenpeng (Leo) Lin of Depthfirst.
New features
* All: add experimental support for a composite post-quantum
signature scheme that combines ML-DSA 44 and Ed25519 as specified
in draft-miller-sshm-mldsa44-ed25519-composite-sigs.
This scheme is not enabled by default. To use it, you'll need
to add it to HostKeyAlgorithms, PubkeyAcceptedAlgorithms, etc.
Keys may be generated using "ssh-keygen -t mldsa44-ed25519".
* ssh(1), sshd(8): replace the wildcard pattern matcher with an
implementation based on an NFA. This avoids exponential worst-case
behaviour for the old implementation.
Bugfixes
* ssh-agent(1): fix incorrect reply to "query" SSH_AGENTC_EXTENSION
requests. bz3967
* sshd(8): avoid sending observably different messages for valid vs
invalid users in GSSAPIAuthentication (disabled by default).
* ssh(1), sshd(8): fix several bugs that incorrectly
classified bulk traffic as interactive. bz3972, bz3958
* ssh-keygen(1), ssh-add(1): skip unsupported key types when
downloading resident keys from a FIDO token. Previously, downloads
would abort when one was encountered. GHPR657
* ssh(1): fix a potential use-after-free on an error path if
cipher_init() fails.
* sshd(8): perform stricter encoding and validation of transport
state passed between sshd privilege separation subprocesses. This
somewhat further hardens the server against attacks on sshd-auth
or sshd-session subprocesses.
* ssh-agent(1): avoid possible runtime denial of service by
enforcing some limits on the length of usernames in key use
constraints.
* sftp(1): fix two separate one-byte out-of-bounds reads, in
SSH2_FXP_REALPATH and batch command processing.
* sftp-server(8): disallow use of the copy-data extension to read
and write to the same inode simultaneously.
* ssh(1), sshd(8): avoid strlen(NULL) crash if an X11 channel was
created before the x11-req SSH_MSG_CHANNEL_REQUEST was sent.
GHPR679
* sftp(1), scp(1): avoid a situation where sftp_download() could get
stuck in a loop if a broken server repeatedly returned zero length
while reading a file.
* ssh(1): avoid leaking DNS0x20 case-randomised names into names
canonicalised using CanonicalizePermittedCNAMEs. bz3966
* sftp-server(8): avoid truncation of pathnames passed to lstat()
during SSH_FXP_REALPATH handling on systems where PATH_MAX is not
the actual max. GHPR688
* ssh(1), sshd(8): correct arming of poll(2) event masks for some
socket-type channels. GHPR660
* sshd(8): major refactor of sshd_config parsing and management
code, to allow for more exact serialisation/deserialisation across
privilege separation boundaries.
* ssh-add(1): open connection to the agent only after getopt()
processing has completed, to give options like "-v" a chance to
display debug information about this operation.
* crypto code: fix bounds checking when signing messages of length
greater than will fit in a size_t. In OpenSSH, message sizes are
bounded by SSHBUF_SIZE_MAX so this was unreachable.
* crypto code: add signature malleability and pubkey validity checks
to ed25519 verification. SSH doesn't depend on these properties
* crypto code: fix ECDSA order check for curves with cofactor != 1.
All supported EC curves have cofactor 1, so this was
unreachable.
* sshd(8): differentiate between execution failures and a subsystem
that was not found when logging why a subsystem failed to start.
GHPR637
* All: use safer idioms for timegm(3) and mktime(3) error detection.
* ssh(1), sshd(8): avoid accepting invalid cipher or MAC lists in
config files or command-line arguments. This could cause runtime
failures later.
* ssh(1): fix NULL deref crash during pubkey auth when using a PEM
style private key with no corresponding .pub key adjacent to it.
* sshd(8): don't print an error message when trying to load a host
private key when PKCS#11 keys are in use, as these don't need the
private half on the filesystem. GHPR664
* All: don't use deprecated ERR_load_crypto_strings(). GHPR650
* ssh(1): properly report errors during configuration default
setting. GHPR649
* ssh(1): use correct directive name (Match instead of Host) in
error message. bz3968
* sftp(1): fix "ls -ln" which was not correctly showing numeric
UID/GIDs but rather user and group names. bz3953
* sshd(8): avoid possible NULL dereference if an allocation fails
during config parsing. bz3948
* All: fix ineffective guards against loading overly large public
keys in several places. bz3969 and bz3970
* sftp(1): ensure file descriptors used by sftp to communicate to
its ssh(1) subprocess don't leak into executed subprocesses (e.g.
via "!"). GHPR693
Portability
* Sync fmt_scaled.c with OpenBSD upstream, picking up an exactness
fix for large exponents (GHPR671)
* sshd(8): remove duplicate sandbox entry for clock_gettime64.
* ssh(1), sshd(8): use correct IPTOS_DSCP_VA value if not provided
by the system headers.
* Sync getrrsetbyname.c with OpenBSD upstream, picking up robustness
fixes.
* Disable replacements in openbsd-compat for strvisx(3) and
stravis(3), as these are unused in OpenSSH
* Avoid fortify warnings on Android bz3954
* Fix a number of memory leaks on error paths in the portability
code. GHPR681
* Revise the README.privsep documentation to reflect sshd's recent
switch to a multi-binary model.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/openssh | 2 ++
lfs/openssh | 4 ++--
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/config/rootfiles/common/openssh b/config/rootfiles/common/openssh
index 85dd5dd2d..8e7364b07 100644
--- a/config/rootfiles/common/openssh
+++ b/config/rootfiles/common/openssh
@@ -5,6 +5,8 @@ etc/ssh/ssh_config
#etc/ssh/ssh_host_ecdsa_key.pub
#etc/ssh/ssh_host_ed25519_key
#etc/ssh/ssh_host_ed25519_key.pub
+#etc/ssh/ssh_host_mldsa44_ed25519_key
+#etc/ssh/ssh_host_mldsa44_ed25519_key.pub
#etc/ssh/ssh_host_rsa_key
#etc/ssh/ssh_host_rsa_key.pub
etc/ssh/sshd_config
diff --git a/lfs/openssh b/lfs/openssh
index fdffce8d4..e7acb2058 100644
--- a/lfs/openssh
+++ b/lfs/openssh
@@ -24,7 +24,7 @@
include Config
-VER = 10.3p1
+VER = 10.4p1
THISAPP = openssh-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 77ff7c3bc943702267d74f6f7cdae44209ab940e42501e8a225761f3c8ab5416f2f0e4e61183e0b4cd79d5a041f4d1600674fcda17d3a2bd172074655cefdcd1
+$(DL_FILE)_BLAKE2 = 3051a345fd24333708277a1de781deca9094dd07cc55e613e93715b1266d80d59043bf5cdb2282d02c797cb9446916020e70fbd4c7a2470da7ab98eb612f6b74
install : $(TARGET)
--
2.55.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] tshark: Update to version 4.6.7
2026-07-09 15:08 [PATCH] c-ares: Update to version 1.34.8 Adolf Belka
` (5 preceding siblings ...)
2026-07-09 15:08 ` [PATCH] openssh: Update to version 10.4p1 Adolf Belka
@ 2026-07-09 15:08 ` Adolf Belka
2026-07-09 15:08 ` [PATCH] tzdata: Update to version 2026c Adolf Belka
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2026-07-09 15:08 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 4.6.6 to 4.6.7
- Update of rootfile
- 12 wnpa-sec security vulnerability fixes implemented
- Changelog
4.6.7
The following vulnerabilities have been fixed:
wnpa-sec-2026-52 Catapult DCT2000 protocol dissector crash. Issue 21270.
wnpa-sec-2026-53 pcapng file parser crash. Issue 21285.
wnpa-sec-2026-54 FMP/NOTIFY protocol dissector large loop. Issue 21347.
wnpa-sec-2026-55 SSH protocol dissector crash. Issue 21378.
wnpa-sec-2026-56 TLS ECH decryption crash. Issue 21390.
wnpa-sec-2026-57 IEEE 802.11 protocol dissector crash. Issue 21391.
wnpa-sec-2026-58 Z39.50 protocol dissector crash. Issue 21397.
wnpa-sec-2026-59 UMTS FP protocol dissector crash. Issue 21398.
wnpa-sec-2026-60 BLF file parser information disclosure. Issue 21361.
wnpa-sec-2026-61 Multiple protocol dissector infinite loops. Issue 21275,
Issue 21277, Issue 21330, Issue 21383.
wnpa-sec-2026-62 DBS Etherwatch file parser crash. Issue 21352.
wnpa-sec-2026-63 Ciscodump extcap crash. Issue 21375.
The following bugs have been fixed:
Wireshark appears in German when the system language is Dutch. Issue 20347.
Qt: Capture filter combo box does not enforce minimum size or expanding size
policy. Issue 21080.
BACapp: Error parsing you-are request. Issue 21260.
Use-After-Free in Ethernet POWERLINK (EPL) Dissector during profile loading error
path. Issue 21267.
Sponsor slides are not properly shown. Issue 21268.
Buffer overlow/segfault in Catapult DCT2000 dissector via not check no_ddi_entries
in header. Issue 21270.
Fuzz job issue: fuzz-2026-05-24-14517548985.pcap. Issue 21272.
Fuzz job UTF-8 encoding issue: fuzz-2026-06-07-14732586286.pcap. Issue 21331.
Memory leak in alp-sample1.pcap. Issue 21343.
Memory leak in nspi.pcap. Issue 21344.
Heap-Buffer-Overflow in Wireshark Logcat Parser. Issue 21346.
IPv6 Ping from Debian (among others) is dissected as "HiPerConTracer" Issue 21349.
HEVC (H.265) dissector: bit_offset not advanced after sub_layer_hrd_parameters()
causes false Malformed Packet. Issue 21362.
dfilter_compile_full: heap-buffer-overflow READ in ws_strptime on a time literal.
Issue 21376.
Wireshark crashes with a HEAP_CORRUPTION error when using the last saved
recent_common file. Issue 21379.
Fuzz job issue: fuzz-2026-06-30-15106674620.pcap. Issue 21381.
New and Updated Features
The Windows installers are now built with Visual Studio 2026.
Updated Protocol Support
ALC, BACapp, C2P, Catapult DCT2000, COTP, CSN.1, DCERPC, DCERPC MAPI, DCERPC NSPI,
DNS, DVB-S2-TABLE, eDonkey, EPL, FC ELS, FMP/NOTIFY, H.265, HiPerConTracer,
IEEE 802.11, LLS, MEGACO, MIH, MPEG DSM-CC, MS-WSP, RELOAD, SGP.32, SSH,
STANAG 4607, UMTS FP, WOWW, and Z39.50
New and Updated Capture File Support
Android Logcat, BLF, DBS Etherwatch, Netlog, and pcapng
Plugin Development Changes
On UN*X systems (excluding macOS when running from an app bundle, as with the
official installer) extcap binaries are now searched for under the libexec
directory by default, e.g., /usr/libexec/wireshark/extcap instead of
/usr/lib64/wireshark/extcap or similar. This is the customary place for helper
binaries, which as opposed to libraries do not need multiarch support. The
location can be overridden via the environment variable WIRESHARK_EXTCAP_DIR.
The extcap binaries shipped with Wireshark are installed in the new location,
but third party extcaps may need packaging changes. This change was effective
in version 4.6.0, but was not explicitly noted in the release notes previously.
Note that some distributions do not use a libexec directory, such as Alpine
Linux, which does not have multilib support. On such systems extcap binaries
should be in the same location as before.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/packages/tshark | 4 ++--
lfs/tshark | 6 +++---
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/config/rootfiles/packages/tshark b/config/rootfiles/packages/tshark
index 9042f6777..3ade5373d 100644
--- a/config/rootfiles/packages/tshark
+++ b/config/rootfiles/packages/tshark
@@ -11,10 +11,10 @@ usr/bin/dumpcap
usr/bin/tshark
#usr/lib/libwireshark.so
usr/lib/libwireshark.so.19
-usr/lib/libwireshark.so.19.0.6
+usr/lib/libwireshark.so.19.0.7
#usr/lib/libwiretap.so
usr/lib/libwiretap.so.16
-usr/lib/libwiretap.so.16.0.6
+usr/lib/libwiretap.so.16.0.7
#usr/lib/libwsutil.so
usr/lib/libwsutil.so.17
usr/lib/libwsutil.so.17.0.0
diff --git a/lfs/tshark b/lfs/tshark
index 84a4ffe23..1965d445e 100644
--- a/lfs/tshark
+++ b/lfs/tshark
@@ -26,7 +26,7 @@ include Config
SUMMARY = A Network Traffic Analyser
-VER = 4.6.6
+VER = 4.6.7
THISAPP = wireshark-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -35,7 +35,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = tshark
DEPS = c-ares libxxhash
-PAK_VER = 36
+PAK_VER = 37
SERVICES =
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 3ba090394930adbd8649df0b93b65ad68f58964fe2a5b8632450f3f3b7d2f26bbc20f95a825d08082b1c2d25ebb420500b3b58b8cb1f6b88b8326c093f56c83f
+$(DL_FILE)_BLAKE2 = 6c9c9201686a80fd855e589b00efa8be0b34771305981206aa58b345c38e1a9094b701e8067fadacf81787d15ebf9839fd9921322c1ab24ac183963094282b89
install : $(TARGET)
--
2.55.0
^ permalink raw reply [flat|nested] 9+ messages in thread* [PATCH] tzdata: Update to version 2026c
2026-07-09 15:08 [PATCH] c-ares: Update to version 1.34.8 Adolf Belka
` (6 preceding siblings ...)
2026-07-09 15:08 ` [PATCH] tshark: Update to version 4.6.7 Adolf Belka
@ 2026-07-09 15:08 ` Adolf Belka
7 siblings, 0 replies; 9+ messages in thread
From: Adolf Belka @ 2026-07-09 15:08 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2026b to 2026c
- No change to rootfile
- Changelog
2026c
Briefly:
Alberta moved to permanent -06 on 2026-06-18.
Morocco moves to permanent +00 on 2026-09-20.
More integer overflow bugs have been fixed in zic.
Changes to future timestamps
Alberta’s 2026-03-08 spring forward was its last foreseeable clock
change, as it moved to permanent -06 thereafter. (Thanks to Roozbeh
Pournader and others.) Model this with its traditional abbreviation
CST. Although the change to permanent -06 legally took place on
2026-06-18, temporarily model the change to occur on 2026-11-01 at
02:00 instead, for the same reason we introduced a similarly
temporary hack for British Columbia in 2026b.
Although another TZDB release will likely be needed soon because
Northwest Territories will likely follow Alberta, the legal
formalities have not yet taken place.
Morocco plans to move back to permanent UTC, without daylight
saving time transitions, on 2026-09-20 at 02:00. This also
affects Western Sahara.
Changes to code
zic no longer overflows integers when processing outlandish input
like ‘Zone Ouch 0 - LMT 9223372036854775807’, ‘Zone Ouch 0
2562047788015215 LMT’, ‘Zone Ouch -2562047788015215:30:08 - LMT’,
and ‘Zone Ouch -2562047788015215:30:08 - %%z’. This avoids
undefined behavior in C. (Problems reported by Naveed Khan.)
On platforms that have EFTYPE, tzalloc now fails with errno set to
EFTYPE, not EINVAL, if it detects that the TZif file has an
invalid format or is not a regular file. Formerly it did this
only on NetBSD, and only when the file was not a regular file.
Unprivileged programs no longer require TZif files to be regular
files or reject relative names containing ".." components. This
reverts to the more-permissive 2025b behavior, as the stricter
behavior did not catch on in FreeBSD.
zic now reports any failure to remove a temporary file when
cleaning up after a previous failure. (Problem reported by Tom
Lane.)
Changes to commentary
Northwest Territories is expected to move to permanent -06 prior to
2026-11-01 02:00, when clocks would otherwise fall back. (Thanks to
Tim Parenti and James Bellaire.) Model this with its traditional
abbreviation CST. Unfortunately the change is not yet official, so
it is currently present only as comments that can be uncommented as
needed.
Changes to build procedure
The undocumented ‘typecheck’ Makefile check rule has been removed.
It stopped working in 2025a and evidently nobody noticed.
The rule was superseded by ‘check_time_t_alternatives’ in 2013d.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/tzdata | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/lfs/tzdata b/lfs/tzdata
index e57625765..42b916af0 100644
--- a/lfs/tzdata
+++ b/lfs/tzdata
@@ -24,7 +24,7 @@
include Config
-VER = 2026b
+VER = 2026c
# https://data.iana.org/time-zones/releases/.tar.gx & .asc
TZDATA_VER = $(VER)
@@ -47,8 +47,8 @@ objects = tzdata$(TZDATA_VER).tar.gz tzcode$(TZCODE_VER).tar.gz
tzdata$(TZDATA_VER).tar.gz = $(DL_FROM)/tzdata$(TZDATA_VER).tar.gz
tzcode$(TZCODE_VER).tar.gz = $(DL_FROM)/tzcode$(TZCODE_VER).tar.gz
-tzdata$(TZDATA_VER).tar.gz_BLAKE2 = 3134d88addaa6a53749a4c87aa5c1b9d4632478152c67a26e5d1cfcf97b4eaafac3b16a41e61840360d4bde5aa05701aeb1caaafcc8a006c7f4708cfa2ac686d
-tzcode$(TZCODE_VER).tar.gz_BLAKE2 = 89ac1ee3b79c596a4903b9c25a794b24fa8e6076e61fbd30c09c690bd002f3759c76afd303abb9d716efa08da216b64362ec06be0e2c60ee89fd6a5e7b397f17
+tzdata$(TZDATA_VER).tar.gz_BLAKE2 = 53a759b9081736b5daba8574b2f6a6852fcd0fbb85237d90e5c589f4126a445a9fbbf338383fc14cee09fa4bb38b546a8285adcbdd944d93eb7e1242cae8feda
+tzcode$(TZCODE_VER).tar.gz_BLAKE2 = 09939593ad33e894d7ad62f8a7e1ee09a4490143a4c744551f81e836eb1b63f96926d362e415d1e254d2fe2d52378017c190b027e1d99a00b94014a413e329dd
install : $(TARGET)
--
2.55.0
^ permalink raw reply [flat|nested] 9+ messages in thread