* [PATCH] clamav: Update to version 1.5.4
@ 2026-08-08 10:34 Adolf Belka
2026-08-08 10:34 ` [PATCH] core205: Ship shadow Adolf Belka
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Adolf Belka @ 2026-08-08 10:34 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 1.5.3 to 1.5.4
- Update of rootfile
- 8 CVE Fixes plus a fix for a rust advisory
- Changelog
1.5.4
- [CVE-2026-20337](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20337):
Fixed ZIP catalogue capacity tracking that could write beyond a heap
allocation while indexing local file headers.
This issue affects ClamAV 1.5.0 through 1.5.3.
The fix is included in 1.5.4.
Thank you to Kevin Stubbings of the GitHub Security Lab team for identifying
this issue.
- [CVE-2026-20345](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20345):
Fixed an indexing error while converting GPT partition names that could
read or write beyond a stack-allocated partition entry.
This issue affects ClamAV 0.98.2 through 1.5.3.
The fix is included in 1.4.6 and 1.5.4.
Thank you to Atuin - Automated Vulnerability Discovery Engine, Tianchu Chen
of Tencent Xuanwu Lab for identifying this issue.
- [CVE-2026-20339](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20339):
Fixed an integer overflow in the PESpin unpacker that could allocate an
undersized buffer and then write beyond it while rebuilding a PE file.
This issue affects ClamAV 0.90 through 1.5.3.
The fix is included in 1.4.6 and 1.5.4.
Thank you to Feng Xue and, independently, Yazdan Soltani for identifying
this issue.
- [CVE-2026-20338](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20338):
Fixed ownership handling while merging ZIP catalogue records that could
cause an invalid free while scanning a malformed archive.
This issue affects ClamAV 1.5.0 through 1.5.3.
The fix is included in 1.5.4.
Thank you to Daggolu Rakesh and, independently, Yazdan Soltani for
identifying this issue.
- [CVE-2026-20346](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20346):
Fixed an integer underflow in the PDF parser that could cause a crash while
reading a malformed hex string.
This issue affects ClamAV 1.4.5 and earlier, and ClamAV 1.5.0 through
1.5.3.
The fix is included in 1.4.6 and 1.5.4.
Thank you to Tristan (@TristanInSec) for identifying this issue.
- [CVE-2026-20347](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20347):
Fixed undefined behavior and integer overflow in the Mach-O parser that
could cause a crash while scanning a malformed Mach-O file.
This issue affects ClamAV 1.4.5 and earlier, and ClamAV 1.5.0 through
1.5.3.
The fix is included in 1.4.6 and 1.5.4.
Thank you to Tristan (@TristanInSec) for identifying this issue.
- [CVE-2026-20348](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20348):
Fixed XAR parser size handling that could request an excessive allocation
or exceed scan limits while decompressing a malformed table of contents.
This issue affects ClamAV 0.98.1 through 1.5.3.
The fix is included in 1.4.6 and 1.5.4.
Thank you to leduckhuong for identifying this issue.
- [CVE-2025-8088](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8088):
Adopted the upstream UnRAR project fix in ClamAV's bundled UnRAR library.
The fix rejects path separators in NTFS alternate data stream names to
prevent extraction outside ClamAV's temporary scan directory on Windows.
This issue affects ClamAV 0.101.0 through 1.5.3.
The fix is included in 1.4.6 and 1.5.4.
Thank you to Yazdan Soltani for identifying that this issue affects ClamAV.
- Fixed thread-safety issues in the `clamd` STATS command that could disclose
process memory or crash the daemon while scans and STATS requests run
concurrently. Also fixed partial socket-write handling used for large STATS
responses.
This issue affects ClamAV 0.95 through 1.5.3.
The fix is included in 1.4.6 and 1.5.4.
- FreeBSD: Restored support for safe quarantine move and remove actions while
preserving protection against source-path replacement races.
This issue affects ClamAV 1.4.5 and 1.5.3.
The fix is included in 1.4.6 and 1.5.4.
- Fixed an OpenSSL library-context leak in legacy hashing helpers when a
requested message digest cannot be fetched, such as when the default
provider is unavailable in a FIPS-enabled environment.
This issue affects ClamAV 1.5.0 through 1.5.3.
The fix is included in 1.5.4.
- Upgraded the Rust `crossbeam-epoch` dependency to resolve the
RUSTSEC-2026-0204 advisory.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/packages/clamav | 2 +-
lfs/clamav | 6 +++---
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/config/rootfiles/packages/clamav b/config/rootfiles/packages/clamav
index f17380c98..088ab0172 100644
--- a/config/rootfiles/packages/clamav
+++ b/config/rootfiles/packages/clamav
@@ -162,7 +162,7 @@ usr/sbin/clamd
#usr/share/doc/ClamAV/html/mode-rust-2c9d5c9a.js
#usr/share/doc/ClamAV/html/print.html
#usr/share/doc/ClamAV/html/searcher-09f2665d.js
-#usr/share/doc/ClamAV/html/searchindex-d348bbbb.js
+#usr/share/doc/ClamAV/html/searchindex-f120d447.js
#usr/share/doc/ClamAV/html/sitemap.xml
#usr/share/doc/ClamAV/html/theme-dawn-4493f9c8.js
#usr/share/doc/ClamAV/html/theme-tomorrow_night-9dbe62a9.js
diff --git a/lfs/clamav b/lfs/clamav
index 5320f6986..4f12ab4f6 100644
--- a/lfs/clamav
+++ b/lfs/clamav
@@ -26,7 +26,7 @@ include Config
SUMMARY = Antivirus Toolkit
-VER = 1.5.3
+VER = 1.5.4
THISAPP = clamav-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = clamav
-PAK_VER = 84
+PAK_VER = 85
DEPS =
@@ -50,7 +50,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 1b2d42bc8c4fed29b71e10be9823da17f861a11e6a818654ae51b2b1fbd16619494572f9aa5e8712433bd65443c33f3e250baa99bb1fea031aa47c6bf6b81c21
+$(DL_FILE)_BLAKE2 = 9cd52cb4b885aae7b26477ed45efdd8cd12b5adae030a17db31cb0aa4489b004977b592e00c6d3121aae4367db842cf03c83f84eda06031537ed09051321be6e
install : $(TARGET)
--
2.55.0
^ permalink raw reply [flat|nested] 4+ messages in thread
* [PATCH] core205: Ship shadow
2026-08-08 10:34 [PATCH] clamav: Update to version 1.5.4 Adolf Belka
@ 2026-08-08 10:34 ` Adolf Belka
2026-08-08 10:34 ` [PATCH] dnsdist: Update to version 2.1.1 Adolf Belka
2026-08-08 10:34 ` [PATCH] shadow: Update to version 4.20.0 Adolf Belka
2 siblings, 0 replies; 4+ messages in thread
From: Adolf Belka @ 2026-08-08 10:34 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/205/filelists/shadow | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/205/filelists/shadow
diff --git a/config/rootfiles/core/205/filelists/shadow b/config/rootfiles/core/205/filelists/shadow
new file mode 120000
index 000000000..c0824b7b9
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/shadow
@@ -0,0 +1 @@
+../../../common/shadow
\ No newline at end of file
--
2.55.0
^ permalink raw reply [flat|nested] 4+ messages in thread
* [PATCH] dnsdist: Update to version 2.1.1
2026-08-08 10:34 [PATCH] clamav: Update to version 1.5.4 Adolf Belka
2026-08-08 10:34 ` [PATCH] core205: Ship shadow Adolf Belka
@ 2026-08-08 10:34 ` Adolf Belka
2026-08-08 10:34 ` [PATCH] shadow: Update to version 4.20.0 Adolf Belka
2 siblings, 0 replies; 4+ messages in thread
From: Adolf Belka @ 2026-08-08 10:34 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2.1.0 to 2.1.1
- No change in rootfile
- Changelog
2.1.1
Bug Fixes
Account for the existing content when parsing labels
References: #17790, #17797, pull request 17858
Do not index past the address for byte-aligned prefixes
References: #17835, pull request 17860
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/dnsdist | 25 ++++++++++++-------------
1 file changed, 12 insertions(+), 13 deletions(-)
diff --git a/lfs/dnsdist b/lfs/dnsdist
index a65772a4a..ed1fb7430 100644
--- a/lfs/dnsdist
+++ b/lfs/dnsdist
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -26,7 +26,7 @@ include Config
SUMMARY = A highly DNS-, DoS- and abuse-aware loadbalancer
-VER = 2.1.0
+VER = 2.1.1
THISAPP = dnsdist-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = dnsdist
-PAK_VER = 36
+PAK_VER = 37
DEPS =
@@ -50,7 +50,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = ae4abaea64f4ae0eb2615e649dd7f39997483d2376d063451d13c4089f6218b6d66dc206a5fae7a2245c6cddf392961047386b54bdbcaf90dd922a8c330e1034
+$(DL_FILE)_BLAKE2 = 88607ab943a22131b9e9f7321a5576ccda2d773637176cf72e04b0007dd4f812a806d6369bdcaf3f2f74e89c05988e7cf5b98886742fb927cd1b877243cc258b
install : $(TARGET)
@@ -84,15 +84,14 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
cd $(DIR_APP) && ./configure \
- --prefix=/usr \
- --sysconfdir=/etc \
- --with-libssl \
- --without-gnutls \
- --enable-dns-over-tls \
- --with-lua \
- --without-net-snmp \
- --disable-systemd
-
+ --prefix=/usr \
+ --sysconfdir=/etc \
+ --with-libssl \
+ --without-gnutls \
+ --enable-dns-over-tls \
+ --with-lua \
+ --without-net-snmp \
+ --disable-systemd
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
--
2.55.0
^ permalink raw reply [flat|nested] 4+ messages in thread
* [PATCH] shadow: Update to version 4.20.0
2026-08-08 10:34 [PATCH] clamav: Update to version 1.5.4 Adolf Belka
2026-08-08 10:34 ` [PATCH] core205: Ship shadow Adolf Belka
2026-08-08 10:34 ` [PATCH] dnsdist: Update to version 2.1.1 Adolf Belka
@ 2026-08-08 10:34 ` Adolf Belka
2 siblings, 0 replies; 4+ messages in thread
From: Adolf Belka @ 2026-08-08 10:34 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 4.18.0 to 4.20.0
- Update of rootfile
- Addition of patch to fix a build error. This patch will be integrated into the next
tarball release.
- Checked the sobump but no dependencies found.
- Changelog
4.20.0
Removals:
The following programs and features were deprecated in 4.19 (Herve)
or earlier, and have been removed in 4.20.
expiry(1) (deprecated in 4.19)
See #1481
and #1432.
login.defs(5): ENCRYPT_METHOD: DES (deprecated in 4.19)
See #1456.
login.defs(5): ENCRYPT_METHOD: MD5 (deprecated in 4.19)
See #1457.
login.defs(5): MD5_CRPYT_ENAB (deprecated since the dinosaurs were around)
See #1455.
shadow(5): .sp_min (deprecated in 4.19)
See #1482.
This also includes the following removals:
chage(1): -m,--mindays (also the interactive version)
passwd(1): -n,--mindays
login.defs(5): PASS_MIN_DAYS
This feature is considered a vulnerability, and was removed
without replacement.
Programs will now fail when any of those flags or variable are
specified. This is intentional, and should help identify any
scripts that rely on these.
groupmems(8) (deprecated in 4.19)
See #1343
and #1601.
Use usermod(8) instead.
logoutd(8) (deprecated in 4.19)
See #999
and #1344.
Defaults:
The following default values were changed.
login.defs(5): Remove defaults for password expiration
(PASS_MAX_DAYS, PASS_WARN_AGE)
See #1428.
login.defs(5): ENCRYPT_METHOD: Default to SHA512 (previously, it was DES)
See #1278
and #1454.
Users should still explicitly specify it, since other programs that read
login.defs(5) may still default to DES.
Features
The following features that were optional in 4.19 are now
unconditionally supported in 4.20.
SHA256, SHA512
See #1278
and #1452.
Regressions
Some regressions have been introduced (as side effects of bug fixes) and they're
here to stay. Users must adapt.
#1704
su(1) as root can be dangerous because of an ioctl (TIOCSTI), and if
that ioctl is not disabled, su(1) will now fail and report an error.
#1706
usermod(8) doesn't produce any effects if it fails to unlock a
password because there was no password. Previously, this was just a
warning, and thus produced effects.
Dependencies:
We've removed an unused dependency (libattr).
See #1473.
Deprecations
No new deprecations since 4.19. However, we maintain the
deprecations from then. Here's a reminder of deprecated features
that have not been removed yet (they will eventually be removed):
Password aging:
chage(1):
-I,--inactive (also the interactive version)
-M,--maxdays (also the interactive version)
-W,--warndays (also the interactive version)
passwd(1):
-k,--keep-tokens
-x,--maxdays
-i,--inactive
-w,--warndays
useradd(8):
-f,--inactive
usermod(8):
-f,--inactive
login.defs(5):
PASS_MAX_DAYS
PASS_WARN_AGE
/etc/default/useradd:
INACTIVE
shadow(5):
.sp_lstchg: Restrict to just the values 0 and empty.
.sp_max
.sp_warn
.sp_inact
4.19.4
Regression fixes:
- Build with GCC 10 and older.
4.19.3
Regression fixes:
- chpasswd(8):
- Don't reject hashes containing backslashes or 'n' characters
(affected SHA-256, SHA-512, MD5).
4.19.2
Regression fixes:
- usermod(8):
- Revert an incorrect commit.
See <https://github.com/shadow-maint/shadow/issues/1509>
and <https://github.com/shadow-maint/shadow/pull/1510>.
4.19.1
Regression fixes:
- chpasswd(8):
- Don't reject leading '!' in password hashes or a hash consisting
of "*". These were accidentally rejected in 4.19.0.
See <https://github.com/shadow-maint/shadow/issues/1483>
and <https://github.com/shadow-maint/shadow/pull/1486>.
- Accept a passwordless account ("" or "!").
See <https://github.com/shadow-maint/shadow/issues/1483#issuecomment-3757398138>
and <https://github.com/shadow-maint/shadow/pull/1505>.
4.19.0
Breaking changes:
Remove support for escaped newlines in configuration files.
It never worked correctly.
b0a7ce5 (2025-12-05; "lib/, po/: Remove fgetsx() and fputsx()")
Some user names and group names are too dangerous and are rejected,
even with --badname.
25aea74 (2025-12-25; "lib/chkname.c, src/: Strictly disallow really bad names")
Future breaking changes:
SHA512 and SHA256 will be supported unconditionally in the next
release. The build-time flag '--with-sha-crypt' will be removed.
See #1452.
Support:
Several years ago, there were talks about deprecating su(1) and
login(1), back when this project was maintained as part of Debian.
However, nothing was clearly stated, and there were doubts about the
status of these programs. Let's clarify them now.
Our implementations of su(1) and login(1) are fully supported, and we
don't have any plans to remove them. They are NOT deprecated.
See #464.
Deprecations:
groupmems(8)
The program will be removed in a future release.
See #1343.
logoutd(8)
The program will be removed in the next release.
See #999,
and #1344.
DES
This hashing algorithm has been deprecated for a long time,
and support for it will be removed in a future release.
See #1456
MD5
This hashing algorithm has been deprecated for a long time,
and support for it will be removed in a future release.
See #1457
login.defs(5): MD_CRYPT_ENAB
This feature had been deprecated for decades. It will be
removed in a future release.
The command-line equivalents (-m, --md5) of this feature in
chpasswd(8) and chgpasswd(8) will also be removed in a future
release.
See #1455.
login.defs(5): PASS_MAX_LEN
This feature is ignored except for DES. Once DES is removed,
it makes no sense keeping it. It may be removed in a future
release.
Password aging
Scientific research shows that periodic password expiration
leads to predictable password patterns, and that even in a
theoretical scenario where that wouldn't happen the gains in
security are mathematically negligible.
https://people.scs.carleton.ca/~paulv/papers/expiration-authorcopy.pdf
Modern security standards, such as NIST SP 800-63B-4 in the USA,
prohibit periodic password expiration.
https://pages.nist.gov/800-63-4/sp800-63b.html#passwordver
https://pages.nist.gov/800-63-FAQ/#q-b05
https://www.ncsc.gov.uk/collection/passwords/updating-your-approach#PasswordGuidance:UpdatingYourApproach-Don'tenforceregularpasswordexpiry
To align with these, we're deprecating the ability to
periodically expire passwords. The specifics and long-term
roadmap are currently being discussed, and we invite feedback
from users, particularly from those in regulated environments.
See #1432.
This deprecation includes the following programs and features:
expiry(1)
chage(1):
-I,--inactive (also the interactive version)
-m,--mindays (also the interactive version)
-M,--maxdays (also the interactive version)
-W,--warndays (also the interactive version)
passwd(1):
-k,--keep-tokens
-n,--mindays
-x,--maxdays
-i,--inactive
-w,--warndays
useradd(8):
-f,--inactive
usermod(8):
-f,--inactive
login.defs(5):
PASS_MIN_DAYS
PASS_MAX_DAYS
PASS_WARN_AGE
/etc/default/useradd:
INACTIVE
shadow(5):
sp_lstchg: Restrict to just the values 0 and empty.
sp_min
sp_max
sp_warn
sp_inact
We recognize that many users operate in environments with
regulatory or contractual requirements that still mandate
password aging. To minimize disruption, these features will
remain functional for a significant period. However, we
encourage administrators to review their internal policies,
talk to their regulators if appropriate, and participate in the
roadmap discussion linked above.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/shadow | 7 ++----
lfs/shadow | 10 +++++----
...ow-4.20.0_Add_stdint.h_for_uintmax_t.patch | 22 +++++++++++++++++++
3 files changed, 30 insertions(+), 9 deletions(-)
create mode 100644 src/patches/shadow-4.20.0_Add_stdint.h_for_uintmax_t.patch
diff --git a/config/rootfiles/common/shadow b/config/rootfiles/common/shadow
index d25da8957..170568306 100644
--- a/config/rootfiles/common/shadow
+++ b/config/rootfiles/common/shadow
@@ -11,13 +11,12 @@ etc/shadow
#etc/shadow-
#lib/libsubid.la
#lib/libsubid.so
-lib/libsubid.so.5
-lib/libsubid.so.5.0.0
+lib/libsubid.so.6
+lib/libsubid.so.6.0.0
sbin/nologin
#usr/bin/chage
#usr/bin/chfn
#usr/bin/chsh
-#usr/bin/expiry
#usr/bin/faillog
#usr/bin/gpasswd
#usr/bin/newgidmap
@@ -31,12 +30,10 @@ sbin/nologin
usr/sbin/chpasswd
usr/sbin/groupadd
usr/sbin/groupdel
-usr/sbin/groupmems
usr/sbin/groupmod
#usr/sbin/grpck
usr/sbin/grpconv
#usr/sbin/grpunconv
-#usr/sbin/logoutd
#usr/sbin/newusers
#usr/sbin/pwck
usr/sbin/pwconv
diff --git a/lfs/shadow b/lfs/shadow
index f0e23408a..f1a021910 100644
--- a/lfs/shadow
+++ b/lfs/shadow
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 4.18.0
+VER = 4.20.0
THISAPP = shadow-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = f165f8cdf017ed5875fbea3ece01d44f988bc85ee039186b5cd8d5cb07d666d501065ad9746abf80c2d31661b0cc687a2bc375e286a5805fa168f6826724e82e
+$(DL_FILE)_BLAKE2 = 8224edc692d6016da26e54aa43405029b4bebcbc7a73a9a56f1ee3bdcf7c7a3af6b90d8fc134182fc26c6b7b8f2afc4f54c2f6e6748760b8928284aa77374a15
install : $(TARGET)
@@ -70,6 +70,7 @@ $(subst %,%_BLAKE2,$(objects)) :
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
+ cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/shadow-4.20.0_Add_stdint.h_for_uintmax_t.patch
cd $(DIR_APP) && find man -name Makefile.in -exec sed -i 's/getspnam\.3 / /' {} \;
cd $(DIR_APP) && find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \;
$(UPDATE_AUTOMAKE)
@@ -84,7 +85,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
--with-group-name-max-length=32 \
--without-libbsd \
--without-bcrypt \
- --without-nscd
+ --without-nscd \
+ --disable-logind
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
diff --git a/src/patches/shadow-4.20.0_Add_stdint.h_for_uintmax_t.patch b/src/patches/shadow-4.20.0_Add_stdint.h_for_uintmax_t.patch
new file mode 100644
index 000000000..e07e7db74
--- /dev/null
+++ b/src/patches/shadow-4.20.0_Add_stdint.h_for_uintmax_t.patch
@@ -0,0 +1,22 @@
+diff -Naur shadow-4.20.0.orig/lib/find_new_sub_gids.c shadow-4.20.0/lib/find_new_sub_gids.c
+--- shadow-4.20.0.orig/lib/find_new_sub_gids.c 2026-08-07 18:55:36.246967805 +0200
++++ shadow-4.20.0/lib/find_new_sub_gids.c 2026-08-07 22:41:35.771731696 +0200
+@@ -8,6 +8,7 @@
+
+ #ifdef ENABLE_SUBIDS
+
++#include <stdint.h>
+ #include <stdio.h>
+ #include <errno.h>
+
+diff -Naur shadow-4.20.0.orig/lib/find_new_sub_uids.c shadow-4.20.0/lib/find_new_sub_uids.c
+--- shadow-4.20.0.orig/lib/find_new_sub_uids.c 2026-08-07 18:56:37.619956630 +0200
++++ shadow-4.20.0/lib/find_new_sub_uids.c 2026-08-07 22:41:52.640184987 +0200
+@@ -8,6 +8,7 @@
+
+ #ifdef ENABLE_SUBIDS
+
++#include <stdint.h>
+ #include <stdio.h>
+ #include <errno.h>
+
--
2.55.0
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2026-08-08 10:34 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-08 10:34 [PATCH] clamav: Update to version 1.5.4 Adolf Belka
2026-08-08 10:34 ` [PATCH] core205: Ship shadow Adolf Belka
2026-08-08 10:34 ` [PATCH] dnsdist: Update to version 2.1.1 Adolf Belka
2026-08-08 10:34 ` [PATCH] shadow: Update to version 4.20.0 Adolf Belka
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox