public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
* [PATCH] core205: Ship libtirpc
@ 2026-09-20 12:51 Adolf Belka
  2026-09-20 12:51 ` [PATCH] core205: Ship openldap Adolf Belka
                   ` (4 more replies)
  0 siblings, 5 replies; 6+ messages in thread
From: Adolf Belka @ 2026-09-20 12:51 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/205/filelists/libtirpc | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/205/filelists/libtirpc

diff --git a/config/rootfiles/core/205/filelists/libtirpc b/config/rootfiles/core/205/filelists/libtirpc
new file mode 120000
index 000000000..7ff318291
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/libtirpc
@@ -0,0 +1 @@
+../../../common/libtirpc
\ No newline at end of file
-- 
2.55.0



^ permalink raw reply	[flat|nested] 6+ messages in thread

* [PATCH] core205: Ship openldap
  2026-09-20 12:51 [PATCH] core205: Ship libtirpc Adolf Belka
@ 2026-09-20 12:51 ` Adolf Belka
  2026-09-20 12:51 ` [PATCH] libgcrypt: Update to version 1.12.4 Adolf Belka
                   ` (3 subsequent siblings)
  4 siblings, 0 replies; 6+ messages in thread
From: Adolf Belka @ 2026-09-20 12:51 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/205/filelists/openldap | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/205/filelists/openldap

diff --git a/config/rootfiles/core/205/filelists/openldap b/config/rootfiles/core/205/filelists/openldap
new file mode 120000
index 000000000..80c324f76
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/openldap
@@ -0,0 +1 @@
+../../../common/openldap
\ No newline at end of file
-- 
2.55.0



^ permalink raw reply	[flat|nested] 6+ messages in thread

* [PATCH] libgcrypt: Update to version 1.12.4
  2026-09-20 12:51 [PATCH] core205: Ship libtirpc Adolf Belka
  2026-09-20 12:51 ` [PATCH] core205: Ship openldap Adolf Belka
@ 2026-09-20 12:51 ` Adolf Belka
  2026-09-20 12:51 ` [PATCH] libpcap: Update to version 1.11.0 Adolf Belka
                   ` (2 subsequent siblings)
  4 siblings, 0 replies; 6+ messages in thread
From: Adolf Belka @ 2026-09-20 12:51 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

- Update from version 1.12.3 to 1.12.4
- Update of rootfile
- Changelog
1.12.4
 * Bug fixes:
   * Fix build problem with some compiler versions related to SM4
     instructions.  [rCf0bc379e0f]
   * Fix padding in cSHAKE found by NIST ACVP conformance vectors.
     [rCf54ce47180]
   * Fix RSA PSS handling of huge salt lengths.  [T8377]
   * Validate the length of hashed input for RSA PSS.  [T8391]
   * Improve RSA OAEP decoder correctnes by validating an all-zero
     padding.  [T8390]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libgcrypt | 2 +-
 lfs/libgcrypt                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt
index 1825a29bf..01ff197b8 100644
--- a/config/rootfiles/common/libgcrypt
+++ b/config/rootfiles/common/libgcrypt
@@ -5,7 +5,7 @@
 #usr/lib/libgcrypt.la
 #usr/lib/libgcrypt.so
 usr/lib/libgcrypt.so.20
-usr/lib/libgcrypt.so.20.8.8
+usr/lib/libgcrypt.so.20.8.9
 #usr/lib/pkgconfig/libgcrypt.pc
 #usr/share/aclocal/libgcrypt.m4
 #usr/share/info/gcrypt.info
diff --git a/lfs/libgcrypt b/lfs/libgcrypt
index f574c63db..074e338e4 100644
--- a/lfs/libgcrypt
+++ b/lfs/libgcrypt
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.12.3
+VER        = 1.12.4
 
 THISAPP    = libgcrypt-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 52043c1defdbaf3ed0618bfbac13f4186dd28a4b2507a93bc24f08a7b2e66bb77014ff875801a3e39fcfbc905224f6ff1bcee43dcd53c555c32940305cfa92fe
+$(DL_FILE)_BLAKE2 = c30aed945b7050c38094258f5d4cad480e9b1fdf018378f07058542e129275d7be41cc7b512cda474d96c12c9920e0256e89242b2c2ee5dd4243e1f4bd178cb9
 
 install : $(TARGET)
 
-- 
2.55.0



^ permalink raw reply	[flat|nested] 6+ messages in thread

* [PATCH] libpcap: Update to version 1.11.0
  2026-09-20 12:51 [PATCH] core205: Ship libtirpc Adolf Belka
  2026-09-20 12:51 ` [PATCH] core205: Ship openldap Adolf Belka
  2026-09-20 12:51 ` [PATCH] libgcrypt: Update to version 1.12.4 Adolf Belka
@ 2026-09-20 12:51 ` Adolf Belka
  2026-09-20 12:51 ` [PATCH] libtirpc: Update to version 1.3.8 Adolf Belka
  2026-09-20 12:51 ` [PATCH] openldap: Update to version 2.7.1 Adolf Belka
  4 siblings, 0 replies; 6+ messages in thread
From: Adolf Belka @ 2026-09-20 12:51 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

- Update from version 1.10.7 to 1.11.0
- Update of rootfile
- Changelog
1.11.0
    Source code:
      Use C99 fixed-width integer types, rather than self-defined
        fixed-width integer types, in rpcap code.
      Clean up DECnet address handling.
      struct pcap: Update buffer type from "void *" to "u_char *".
      Remove dead code that supported SITA ACN devices.
      Remove the TODO file.
      Merge four header files into gencode.c.
      Remove DAG card support on Windows as Linux is the only
        platform currently supported.
      Remove code related to Riverbed TurboCap card.
        Riverbed TurboCap hardware has reached EOA as of Jun 30 2014.
      Remove dead code that supported Septel devices.
      Remove outdated code related to AirPcap HW.
        The Riverbed AirPcap Product has reached End of Availability
        (EOA) as of December 31, 2017
      Make pcap_compile() error messages more uniform and consistent.
      Deprecate pcap_compile_nopcap().
      Remove unmaintained DPDK capture backend (was disabled by default).
      Return more useful strings from pcap_statustostr().
      Rename SWAPSHORT(), SWAPLONG(), SWAPLL() to PCAP_BSWAP_({16,32,64}).
      Replace EXTRACT_SHORT by EXTRACT_BE_U_2, EXTRACT_LONG by EXTRACT_BE_U_4.
      Add a comment to pcap-npf.c describing what pcap_stats() returns
          as ps_recv and ps_drop.
    Link-layer types:
      Add LINKTYPE_DECT_NR_TAP/DLT_DECT_NR_TAP.
    Packet filtering:
      Add support for Block Ack Req and Block Ack frame types (pull
        request #1039).
      Add support for filtering packets encapsulated with VXLAN (pull
        request #1273).
      Eliminate trailing space in bpf_image() result.
      Fix DECnet packet filtering on big-endian hosts.
      Fix various failures to reject invalid DECnet primitives.
      Require "vpi" and "vci" argument to be within valid ranges.
      Require "[wlan] dir" integer argument to be within range.
      Fix the != comparison for ATM and MTP field values.
      Require a live capture for all Linux BPF extensions.
      Have "outbound" mean Tx only for DLT_SLIP.
      Filter Linux SocketCAN frames in userland if necessary.
      Enable "[wlan] dir/type/subtype" for DLT_PPI.
      Require "(iso|isis) proto" argument to be within valid ranges.
      Use the correct IS-IS PDU type offset for DLT_C_HDLC.
      Use the correct bit mask for IS-IS PDU type value.
      Fix the "|" and "&" operators of the "byte" primitive.
      Require "byte" argument to be within range.
      Require "link proto" argument to be within range.
      Require "(ip|ip6) proto" argument to be within range.
      Require "protochain" argument to be within range.
      Always enable the "gateway" primitive.
      Properly reject "link proto" for DLT_BACNET_MS_TP.
      Extend "link (host|broadcast)" support onto DLT_BACNET_MS_TP.
      Do not try matching RFC 1051 system codes for ARCnet.
      Enable various primitives for DLT_DSA_TAG_BRCM and DLT_DSA_TAG_DSA.
      Test link protocol once per AF, not per address.
      Sort resolved IPv4 and IPv6 addresses.
      In "gateway" negate the host(s), but not the protocol.
      Reject "gateway" within MPLS, VXLAN or Geneve.
      Match both byte orders for the AF_ value when filtering DLT_NULL
        and DLT_ENC savefiles. (issue #74)
      Match all AF_INET6 values when filtering DLT_PFLOG savefiles.
      Fix optimization of "jset #0xffffffff".
      Produce cleaner DOT in the optimizer debugging code.
    Capture file reading:
      Fix misaligned accesses in processing Linux USB captures (issue
        #1634, reported by FuzzAnything Organization
        (https://github.com/FuzzAnything-ORG) (fuzzanything@gmail.com).
    rpcap:
      Add a -t flag to rpcapd to specify the data channel port; from
        another incorporate-remote-capture project. (issue #1120)
      rpcapd: Refine SSL options in printusage().
      Fix parameter name validation in the configuration file.
    Documentation:
      Add a README.hurd.md file.
      Cross-reference some man pages better.
      Actualize README.dag and make it Markdown.
      Add a README.snf.md file.
      pcap-filter(7): Make a number of assorted improvements.
      pcap_lib_version(3PCAP): Add details and examples.
      Discuss Linux BPF extensions in the man pages.
      Note endianness in pcap_compile(3PCAP) and pcap_lookupnet(3PCAP).
      man: Document devices, interfaces and "any" better.
      Add a README.qnx.md file.
      Improve documentation of TLS support in rpcapd man page.
      man: Use "null pointer" rather than "NULL" and fix some other
        issues.
    Building and testing:
      Apply GNU Hurd support patch from the Debian package.
      CI: Introduce and use LIBPCAP_CMAKE_TAINTED.
      Remove all remaining support for AOS (4.3BSD Unix), BSD/OS, DOS,
        HP-UX before 10.20, IRIX, {OSF/1, Digital Unix, Tru64 Unix}, SINIX,
        SunOS 3.x, 4.x and 5.x before 5.3.2, and Ultrix.
      Add a new test program for pcap_activate().
      Make FreeBSD, Linux, macOS, NetBSD, QNX and Sun C builds warning-free.
      Print MAC addresses in findalldevstest.
      Parameterize the interface name in reactivatetest.
      When necessary, trust the OS to implement ffs().
      At build time require a proof of suitable snprintf(3) implementation in
        libc (and document Solaris 9 and MinGW as unsupported because of that).
      Makefile.in: Update the .c.o build rule (Remove hacks for old SunOS 4).
      CMake: Skip snprintf(3) tests when cross-compiling; test whether
        check_c_source_runs() with a trivial program and, if it doesn't
        work, don't run tests that use it.
      Autoconf: Add support for libnl-tiny with pkg-config.
      Autoconf: Fix building of something-only libpcap.
      CI: Implement "make check".
      Fix autotools and CMake issues with snprintf test and sanitizers.
        Fixes issue #1396.
      filtertest: Add "-l" flag to use Linux BPF extensions.
      filtertest: Use ntohl() on the netmask to fix the -m option.
      filtertest: Add support for stdin as "-" to the -F option.
      Rename CMake option to ENABLE_PROTOCHAIN to match Autoconf.
      Remove the "disable IPv6" build option.
      translatetest: Add a test program for various translation functions.
      Autoconf: Fix detection of crypt() on QNX.
      Autoconf: Update config.{guess,sub}, timestamps 2025-07-10.
      CMake: Fix getaddrinfo() detection on QNX.
      enumeratetest: Add a new test program.
      Fix building libpcap with CMake without libnl-genl-3-dev.
    Hurd:
      Support network capture devices too.
      Fix a few device activation bugs.
      Count and timestamp packets better.
      Add kernel filtering, fix userland filtering.
    FreeBSD:
      Handle USB devices correctly on FreeBSD-CURRENT as of 2025-12.
    OpenBSD:
      Use getprotobyname_r() correctly on OpenBSD.
    Linux:
      Do not use ether_hostton() from musl libc.
      Fix propagation of getprotobyname_r() errors.
      Don't treat permission failures trying to fetch connection status
        as errors, just indicate connection status unknown.
    Linux Bluetooth monitor:
      Report permission failures as PCAP_ERROR_PERM_DENIED and indicate
        what privileges may be required.
    Linux nflog:
      Report permission failures as PCAP_ERROR_PERM_DENIED and indicate
        what privileges may be required.
    Haiku:
      Look for ethers(5) in /boot/system/settings/network/.
    DAG:
      Always set PCAP_IF_CONNECTION_STATUS_NOT_APPLICABLE.
      In dag_findalldevs() handle known errors better.
      Trust dag_get_stream_erf_types() to be available.
      Require the API to have 64-bit streams support.
      Make device descriptions more useful, make dagN conditional.
      Use PCAP_ERROR_NO_SUCH_DEVICE more in dag_activate().
      Validate capture device names better.
      Enumerate streams without trying to lock them.
      If the environment variable ERF_FCS_BITS is set, require it to be either
        0 or 16 or 32.  Likewise for ERF_DONT_STRIP_FCS (either 0 or 1).
      Remove FCS quirks specific to 4.2S and 4.23S.
      Fix ps_drop for stream drop counters.
      Add experimental packet transmit support.
    SNF:
      Require SNF_VERSION_API >= 0x0003.
      Improve device descriptions and flags.
      Fill pcap_if_t in more consistently.
    QNX:
      Use "unix.h" instead of the missing <sysexits.h>.
      Fix promiscuous mode for netmap.
    RDMA:
      Fix some resource freeing issues. (issues #1532 and #1300)
      Improve error messages for activate and findalldevs failures.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libpcap | 2 +-
 lfs/libpcap                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/libpcap b/config/rootfiles/common/libpcap
index e76e8bc3a..7102fedfc 100644
--- a/config/rootfiles/common/libpcap
+++ b/config/rootfiles/common/libpcap
@@ -21,7 +21,7 @@
 #usr/lib/libpcap.a
 usr/lib/libpcap.so
 usr/lib/libpcap.so.1
-usr/lib/libpcap.so.1.10.7
+usr/lib/libpcap.so.1.11.0
 #usr/lib/pkgconfig/libpcap.pc
 #usr/share/man/man1/pcap-config.1
 #usr/share/man/man3/pcap.3pcap
diff --git a/lfs/libpcap b/lfs/libpcap
index 259c66eb2..7374be840 100644
--- a/lfs/libpcap
+++ b/lfs/libpcap
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.10.7
+VER        = 1.11.0
 
 THISAPP    = libpcap-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 5cec38e048446c7837e95a4c51fb3b5cc3a7d8e459f7599d918e9304d6c39725c3e22a9563fdbb0e2bd318f484872b2516856a43928884834403411391859e20
+$(DL_FILE)_BLAKE2 = cd97ad50afc3cbc51e4d4f593183470b571a1023124d4f3bb8c7c20ace97f60ce3a6b54f2d992a386530679aba93c5e6a292e9a0d27f24dfdff1fe150b31d446
 
 install : $(TARGET)
 
-- 
2.55.0



^ permalink raw reply	[flat|nested] 6+ messages in thread

* [PATCH] libtirpc: Update to version 1.3.8
  2026-09-20 12:51 [PATCH] core205: Ship libtirpc Adolf Belka
                   ` (2 preceding siblings ...)
  2026-09-20 12:51 ` [PATCH] libpcap: Update to version 1.11.0 Adolf Belka
@ 2026-09-20 12:51 ` Adolf Belka
  2026-09-20 12:51 ` [PATCH] openldap: Update to version 2.7.1 Adolf Belka
  4 siblings, 0 replies; 6+ messages in thread
From: Adolf Belka @ 2026-09-20 12:51 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

- Update from version 1.3.7 to 1.3.8
- No change in rootfile
- Changelog
1.3.8
    libtirpc: Bound maxsize in xdr_rpc_gss_unwrap_data() decode calls
    libtirpc: limit XDR decode node count
    libtirpc: Fix use-after-free in xdr_pmaplist() XDR_FREE path
    libtirpc: fix rpc_gss_get_principal_name to allocate memory correctly
    Add missing exports for rpc_gss_getcred + authdes_getucred

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/libtirpc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/libtirpc b/lfs/libtirpc
index abb1509b0..0c5dc2de1 100644
--- a/lfs/libtirpc
+++ b/lfs/libtirpc
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Transport Independent RPC Library
 
-VER        = 1.3.7
+VER        = 1.3.8
 
 THISAPP    = libtirpc-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -45,7 +45,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = b6a42add32c1a8bef4d974bb6c527131c0215179a303360d902110b03ce2217280efcb8dcad3a4da00f7ab971a1376e0bc30d6e3ecf6f98f1d4c2161a9276f86
+$(DL_FILE)_BLAKE2 = a0065a0f381de98c250a3e892d4d8909ace54fc9bfeee1f19aaa2973234e85452abf460b0ccffc9e343a50d6f48e93dad81658756f6a5efaf9ba3f27dff94bb9
 
 install : $(TARGET)
 
-- 
2.55.0



^ permalink raw reply	[flat|nested] 6+ messages in thread

* [PATCH] openldap: Update to version 2.7.1
  2026-09-20 12:51 [PATCH] core205: Ship libtirpc Adolf Belka
                   ` (3 preceding siblings ...)
  2026-09-20 12:51 ` [PATCH] libtirpc: Update to version 1.3.8 Adolf Belka
@ 2026-09-20 12:51 ` Adolf Belka
  4 siblings, 0 replies; 6+ messages in thread
From: Adolf Belka @ 2026-09-20 12:51 UTC (permalink / raw)
  To: development; +Cc: Adolf Belka

- Update from version 2.6.10 to 2.7.1
- Update of rootfile
- Changelog
2.7.1
	Fixed libldap BER leak on notice of disconnection (ITS#10584)
	Fixed libldap request leak on malformed BER response (ITS#10577)
	Fixed libldap error stack handling with OpenSSL < 4.0 (ITS#10578)
	Fixed lload non-blocking BIO handling in SSL renegotiations (ITS#10579)
	Fixed slapo-ppolicy handling of old passwords (ITS#10565)
	Documentation
		slapo-pcache added note about referral chasing (ITS#10560)
	Minor Cleanup
		ITS#10561
		ITS#10564
		ITS#10566
		ITS#10568
		ITS#10574
		ITS#10576
		ITS#10582
2.7.0
The following new components and capabilities are highlighted for this release:
Featured Enhancements
  * libldap enhancements:
	DNS SRV record support now also supports ldaps
	    Support for TPM chips, smartcards, or hardware security modules
	    Support for the mbedTLS library
  * back-mdb enhancements:
	Now using LMDB 1.0 which adds page-level database encryption and/or checksums
	New OpenLDAP Server Capabilities
General
  * New Access Control Features
	There is now an explicit "increment" permission for ACLs
	    ACLs can now be applied to operations and controls
  * New lloadd Configuration support
	The listen feature can now be modified at runtime
  * Index keys use 64 bit hashes by default now instead of 32 bit
Details
Updates to Existing Backends
  * back-asyncmeta has improved target connection management
Updates to Existing Overlays
The following updates have been made to existing overlays:
  * ppolicy: Added support for dynamic policy selection, per-policy default password
	hashes, rehashing of passwords on simple bind
  * otp: Added support for the LDAP Compare operation
Deprecated Features
  * GnuTLS is no longer recommended and scheduled for removal in OpenLDAP 2.8
Obsolete Features that have been removed
  * back-perl and back-sql have been removed
2.6.15
	Fixed libldap BER leak on notice of disconnection (ITS#10584)
	Fixed libldap request leak on malformed BER response (ITS#10577)
	Fixed libldap error stack handling with OpenSSL < 4.0 (ITS#10578)
	Fixed lload non-blocking BIO handling in SSL renegotiations (ITS#10579)
	Fixed slapo-ppolicy handling of old passwords (ITS#10565)
	Documentation
		slapo-pcache added note about referral chasing (ITS#10560)
	Minor Cleanup
		ITS#10561
		ITS#10564
		ITS#10566
		ITS#10574
		ITS#10582
2.6.14
	Added libldap support for OpenSSL 4.0 series (ITS#10498)
	Fixed lloadd to report errors from bindconf_parse (ITS#10525)
	Fixed lloadd incoming message id validation (ITS#10505)
	Fixed slapd to report errors from bindconf_parse (ITS#10525)
	Fixed slapd-mdb IDL code to optimize the intersection of a list and a range (ITS#10526)
	Fixed slapo-constraint count constraint with more than one attribute (ITS#10491)
	Fixed slapadd to ignore dynamic attributes in input LDIF (ITS#10501)
	Minor Cleanup
		ITS#8064
		ITS#9909
		ITS#10026
		ITS#10467
		ITS#10469
		ITS#10470
		ITS#10471
		ITS#10473
		ITS#10476
		ITS#10479
		ITS#10480
		ITS#10481
		ITS#10482
		ITS#10483
		ITS#10484
		ITS#10485
		ITS#10489
		ITS#10492
		ITS#10493
		ITS#10478
		ITS#10495
		ITS#10496
		ITS#10500
		ITS#10503
		ITS#10510
		ITS#10514
		ITS#10516
		ITS#10524
		ITS#10530
		ITS#10532
		ITS#10533
		ITS#10535
		ITS#10541
		ITS#10543
		ITS#10548
		ITS#10550
		ITS#10554
		ITS#10556
		ITS#10559
2.6.13
	Fixed liblber ber_bvreplace_x potential NULL dereference (ITS#10438)
	Fixed libldap heap buffer overflow in parse_whsp (ITS#10430)
	Fixed slap(add|modify) to not recreate config frontend (ITS#10414)
	Fixed slapd authzPrettyNormal function memory leak (ITS#10446)
	Fixed slapd memory leak in get_mra function (ITS#10445)
	Fixed slapd memory leak in parseAssert and parseReturnFilter functions (ITS#10450)
	Fixed slapd memory leak in parseReadAttrs function (ITS#10449)
	Fixed slapd slapd_sasl_mechs race condition (ITS#10443)
	Fixed slapd syncrepl to be more efficient with refresh task (ITS#10413)
	Fixed slapd unbind/close race condition (ITS#10258)
	Fixed slapd-ldap memory leak in ldap_chain_parse_ctrl function (ITS#10447)
	Fixed slapd-mdb always initialize pausepoll (ITS#10191)
	Fixed slapo-constraint to not propagate request controls to internal ops (ITS#10440)
	Fixed slapo-dds minttl incorrectly set in certain scenarios (ITS#10442)
	Fixed slapo-memberof to not propagate request controls to internal ops (ITS#10440)
	Fixed slapo-nestgroup to not propagate request controls to internal ops (ITS#10440)
	Fixed slapo-retcode to not propagate request controls to internal ops (ITS#10440)
	Fixed slapo-syncprov to not propagate request controls to internal ops (ITS#10440)
	Fixed slapo-syncprov memory leak in syncprov_parseCtrl (ITS#10448)
	Fixed slapo-translucent to not propagate request controls to internal ops (ITS#10440)
	Contrib
		Fixed slapo-autogroup to not propagate request controls to internal ops (ITS#10440)
	Minor Cleanup
		ITS#10427
		ITS#10425
		ITS#10451
2.6.12
	Fixed libldap to reject empty types in LDIF (ITS#10429)
	Fixed libldap to not scroll past nul bytes (ITS#10430)
	Fixed libldap to enforce stop when encountering nul-leading line (ITS#10431)
2.6.11
	Fixed slapd to use fresh timestamp for lastbind (ITS#10379)
	Fixed slapd delta-syncrepl to always use logDB rootdn (ITS#10360)
	Fixed slapd reverse lookup of proxied IPv6 addresses (ITS#10387)
	Fixed slapd logging buffer overflow (ITS#10410)
	Fixed slapd-ldap response when invalid secprops is configured (ITS#10392)
	Fixed slapd-mdb error when deleting last child of a branch (ITS#10304)
	Fixed slapd-mdb check for pool pause in search (ITS#10191)
	Fixed slapo-memberof clash with refint on subtree rename (ITS#10398)
	Fixed slapo-syncprov use correct rootDN for accesslog replay (ITS#10385)
	Minor Cleanup
		ITS#7901
		ITS#10329
		ITS#10335
		ITS#10339
		ITS#10343
		ITS#10344
		ITS#10345
		ITS#10347
		ITS#10348
		ITS#10349
		ITS#10353
		ITS#10358
		ITS#10359
		ITS#10366
		ITS#10367
		ITS#10369
		ITS#10370
		ITS#10371
		ITS#10372
		ITS#10374
		ITS#10375
		ITS#10376
		ITS#10377
		ITS#10379
		ITS#10380
		ITS#10381
		ITS#10384
		ITS#10388
		ITS#10390
		ITS#10391
		ITS#10400
		ITS#10401
		ITS#10408

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/openldap | 7 ++-----
 lfs/openldap                     | 6 +++---
 2 files changed, 5 insertions(+), 8 deletions(-)

diff --git a/config/rootfiles/common/openldap b/config/rootfiles/common/openldap
index eb9961c0b..624073da6 100644
--- a/config/rootfiles/common/openldap
+++ b/config/rootfiles/common/openldap
@@ -21,15 +21,14 @@
 #usr/include/ldap_utf8.h
 #usr/include/ldif.h
 #usr/include/openldap.h
-#usr/include/slapi-plugin.h
 #usr/lib/liblber.la
 #usr/lib/liblber.so
 usr/lib/liblber.so.2
-usr/lib/liblber.so.2.0.200
+usr/lib/liblber.so.2.0.201
 #usr/lib/libldap.la
 #usr/lib/libldap.so
 usr/lib/libldap.so.2
-usr/lib/libldap.so.2.0.200
+usr/lib/libldap.so.2.0.201
 #usr/lib/pkgconfig/lber.pc
 #usr/lib/pkgconfig/ldap.pc
 #usr/share/man/man1/ldapadd.1
@@ -240,10 +239,8 @@ usr/lib/libldap.so.2.0.200
 #usr/share/man/man5/slapd-monitor.5
 #usr/share/man/man5/slapd-null.5
 #usr/share/man/man5/slapd-passwd.5
-#usr/share/man/man5/slapd-perl.5
 #usr/share/man/man5/slapd-relay.5
 #usr/share/man/man5/slapd-sock.5
-#usr/share/man/man5/slapd-sql.5
 #usr/share/man/man5/slapd-wt.5
 #usr/share/man/man5/slapd.access.5
 #usr/share/man/man5/slapd.backends.5
diff --git a/lfs/openldap b/lfs/openldap
index fe7069a39..9da734d98 100644
--- a/lfs/openldap
+++ b/lfs/openldap
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.6.10
+VER        = 2.7.1
 
 THISAPP    = openldap-$(VER)
 DL_FILE    = $(THISAPP).tgz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = e3fce31795ed9eda3443b824c245951d655af0660f316d8b6e15264999a1ee3eaf7e4b7e901ad007361027ade9bcb7b102212d42939dc98d4229dc6983c381dc
+$(DL_FILE)_BLAKE2 = cad365ea14819b4e78c0104c687a3b6c6aa67de2b48a2bdf6a31c0e39a9e5e49f8d0e61e80ee43ba5c84b0a986a4bc683b404b6ac6f391667aec3f16333244ff
 
 install : $(TARGET)
 
-- 
2.55.0



^ permalink raw reply	[flat|nested] 6+ messages in thread

end of thread, other threads:[~2026-09-20 12:51 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-20 12:51 [PATCH] core205: Ship libtirpc Adolf Belka
2026-09-20 12:51 ` [PATCH] core205: Ship openldap Adolf Belka
2026-09-20 12:51 ` [PATCH] libgcrypt: Update to version 1.12.4 Adolf Belka
2026-09-20 12:51 ` [PATCH] libpcap: Update to version 1.11.0 Adolf Belka
2026-09-20 12:51 ` [PATCH] libtirpc: Update to version 1.3.8 Adolf Belka
2026-09-20 12:51 ` [PATCH] openldap: Update to version 2.7.1 Adolf Belka

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox