[PATCH] bird: Update to version 3.4.0

[PATCH] bird: Update to version 3.4.0

[Adolf Belka]

- Update from version 3.3.3 to 3.4.0
- No change in rootfile
- Changelog
3.4.0
  o Merged 2.20.0
	  o BGP: Allow ignoring OTC
	  o BGP: EVPN ESI attribute support
	  o Direct: Allow generating host routes
	  o RAdv: Add "show radv interfaces" CLI command
	  o Netlink: Improvements in error conditions
	  o Netlink: Learn interface MAC addresses
	  o Lib: Refactoring for later VPN route target merge
	  o Various fixes in code, comments, documentation and tooling

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/bird | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/bird b/lfs/bird
index 84326da88..fc7d4ef60 100644
--- a/lfs/bird
+++ b/lfs/bird
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = The BIRD Internet Routing Daemon
 
-VER        = 3.3.3
+VER        = 3.4.0
 
 THISAPP    = bird-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = bird
-PAK_VER    = 15
+PAK_VER    = 16
 
 DEPS       =
 
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 0e3218b343c55787eec300155c6c96205f6c433e4fb3d8e38a96919b1e2cbb92d80dec43f5548d22d33ad90f05dcd64fe093d09c0aa23c7fd882cbe48e17a0d0
+$(DL_FILE)_BLAKE2 = 09e77eed241b1341bd4c3b69e9df0471f9eb705a356aa0b47d9479e8613e58b611d3d3a31688adf1b4729cccfec23536f58f9b793335051d00f6cfd942098387
 
 install : $(TARGET)
 
-- 
2.56.0

[PATCH] cifs-utils: Update to version 7.9

[Adolf Belka]

- Update from version 7.8 to 7.9
- No change in rootfile
- 2 CVE fixes
- Changelog
7.9
[CVE-2026-104715] mount.cifs: validate username derived from the passwd database
[CVE-2026-104715] mount.cifs: reject option delimiters in username and domain

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/cifs-utils | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/lfs/cifs-utils b/lfs/cifs-utils
index 5d10bd78b..9292ade5d 100644
--- a/lfs/cifs-utils
+++ b/lfs/cifs-utils
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Utilities for doing and managing mounts of the Linux CIFS filesystem
 
-VER        = 7.8
+VER        = 7.9
 
 THISAPP    = cifs-utils-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = cifs-utils
-PAK_VER    = 10
+PAK_VER    = 11
 
 DEPS       = libtalloc
 
@@ -51,7 +51,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 3d87077e862d6106293b207f826bc1266d27fef46a9185d43e7b934b8675f2faacc8ba0b61ec475310edde83654839db4a1bd86bf489ee0b5c78e7de6e12d23f
+$(DL_FILE)_BLAKE2 = 49254d88c555befbac74a42c47bd865e93460e504afd825b36f44b8ddefac5ee174c60631a4772f0a81272c9f9981d412f9c5e9b66a54413b7673e5ae102e69b
 
 install : $(TARGET)
 
-- 
2.56.0

[PATCH] core206: Ship curl

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/206/filelists/curl | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/206/filelists/curl

diff --git a/config/rootfiles/core/206/filelists/curl b/config/rootfiles/core/206/filelists/curl
new file mode 120000
index 000000000..4b84bef53
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/curl
@@ -0,0 +1 @@
+../../../common/curl
\ No newline at end of file
-- 
2.56.0

[PATCH] core206: Ship freetype

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/206/filelists/freetype | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/206/filelists/freetype

diff --git a/config/rootfiles/core/206/filelists/freetype b/config/rootfiles/core/206/filelists/freetype
new file mode 120000
index 000000000..79ec5c42e
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/freetype
@@ -0,0 +1 @@
+../../../common/freetype
\ No newline at end of file
-- 
2.56.0

[PATCH] core206: Ship libarchive

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/206/filelists/libarchive | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/206/filelists/libarchive

diff --git a/config/rootfiles/core/206/filelists/libarchive b/config/rootfiles/core/206/filelists/libarchive
new file mode 120000
index 000000000..551f1f743
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/libarchive
@@ -0,0 +1 @@
+../../../common/libarchive
\ No newline at end of file
-- 
2.56.0

[PATCH] curl: Update to version 8.23.0

[Adolf Belka]

- Update from version 8.22.0 to 8.23.0
- No change in rootfile
- Changelog
8.23.0
 Changes:
    lib: CURL_GLOBAL_WIN32 -> CURL_GLOBAL_WINSOCK
    SMB: drop support
    tool_cb_wrt: inject the no-clobber number before the extension
    tool_cb_wrt: try up to .9999 when no-clobbering
 Bugfixes:
    apple-sectrust: check ocsp copy alloc
    apple: shorten versions in `__builtin_available()` calls
    apple: sync hash init calls, add comments
    apple: sync up version guard macro style
    base64: avoid repeated input loads when encoding
    base64: optimize decode lookup table and quantum loop
    build: convert HAS_TIME_T_UNSIGNED to a compile-time check
    build: drop `HTTP_ONLY` option
    capsule: reject a capsule that can never be buffered
    cf-h1-proxy: reset chunk state on new request
    cf-h1-proxy: stricter status line parsing
    cf-https-connect: re-arm the timer for the hard eyeballs timeout
    cf-ngtcp2-cmn: fix possible `-Wdeclaration-after-statement`
    cf-ngtcp2-proxy: check for stream close on rx win update
    cf-ngtcp2-proxy: fix rx flow control
    cf-socket: adjust NO_SYN_RETRANSMISSIONS for older Windows
    cf-socket: clamp keepalive seconds-to-milliseconds conversions
    cfilters: fail a send that reports more written than requested
    clang-tidy: merge nested `if()`s
    cmake/Find*: drop deprecated compatibility config variables
    cmake: enable C++ library for GCC in AWS-LC/BoringSSL static builds
    cmake: link llvm stdc++ lib to AWS-LC/BoringSSL-specific feature detections only
    config2setopts: always set the security options for SCP/SFTP
    config2setopts: rename define for maximum cookie header length
    conncache: avoid evicting connect-only connections
    conncache: never discard a connection still in use
    conncache: remove bundle dest
    connect: do not busy-loop in blocking connect without a timeout
    connect: keep IP info and connect time when connect fails
    connectdata: use less curltime
    cookie: accept and ignore empty property names in Set-Cookie
    cookie: accept and ignore values for 'secure' and 'httponly'
    cookie: accept slightly longer lines in cookie jars
    cookie: cookies for a PSL domain from jar limits tailmatch
    cookie: ignore individual cookie errors when loading
    cpool: do not use admin handle for conn lookup
    cshutdown: make it smaller
    cshutdown: use ptrarray instead of llist
    curl-openssl.m4: sync LibreSSL detection method with rest of forks
    curl_addrinfo: drop redundant parentheses
    curl_easy_send/recv: check pointer arg
    curl_fopen: restore the uid and gid checks
    curl_formadd.md: mention the strlen() for names as well
    curl_multi_perform: doc update
    curl_setup.h: drop compatibility raw C flag `ENABLE_IPV6`
    CURLINFO_EFFECTIVE_URL.md: mention a short lifetime
    CURLOPT*ISSUERCERT*: not verified cryptographically
    CURLOPT_POSTFIELDSIZE.md: improve wording
    CURLOPT_SHARE.md: remove bad explanation for cookie sharing
    CURLOPT_SSL_CTX_FUNCTION.md: client cert caveats
    curlx_fopen: add macro to cast file mode
    cw-out: avoid O(n^2) work while buffering paused output
    cw-out: recheck callbacks for each call
    cw-pause: fix O(N^2) list traversal in cw_pause_flush
    DEPENDENCIES.md: fix release date for valgrind 3.0.0 to 2005-08-03
    DEPRECATE.md: reflect SMB removal
    DEPRECATE: Common Name support in TLS certificates for OpenSSL
    digest: check peer equality for staleness
    digest: fix maximum length quoted value parsing
    digest: parse without storing 'value' in local buffer
    digest: quote the digest-uri param as well
    dnscache/conncache tweaks
    dnscache: check hostname on lookup
    dnscache: compare full hostnames when lookup keys are truncated
    docs: add the missing .html to the URL encode book link
    docs: document and align the blocking situations
    docs: note CAINFO/SSL_VERIFYPEER/SSL_VERIFYSTATUS effect on LDAP
    docs: SSL session import/file updates
    doh: reject undersized HTTPS RDATA
    dynhds: check size overflows
    dynhds: grow header array geometrically
    easy: change event pollset construction
    easy: duplicating a zero byte memory area needs no malloc
    easy: make ca_cache_timeout standalone
    easy: validate buffer pointer in curl_easy_recv and curl_easy_send
    ECH: rework config, add test cases
    escape: polish encoding and decoding for speed
    escape: use hex-pair lookup in curl_easy_escape
    examples: clean up crawler link parsing resources
    fnmatch: replace recursive matcher with iterative greedy algorithm
    formdata: reject a negative content length in curl_formadd
    ftp: require TLS on the data connection for implicit FTPS
    ftp: tighten use_ssl check for conn reuse
    ftp: URL encode filenames when wildcarding
    ftplistparser: no more overwriting set.write_func
    ftplistparser: when wildcarding, skip files with slashes
    ftpserver.pl: fix warnings when running test 804
    getinfo: make sure CURLINFO_EFFECTIVE_URL does not contain creds
    getinfo: make sure CURLINFO_REDIRECT_URL does not contain creds
    getparam: switch off CONNECT headers when using -J
    glob: reduce the number of allocations for URLs that don't need globbing.
    global_init: tidy up, simplify, fix issues
    gnutls: hardening
    GnuTLS: remove our own OCSP signature verification
    gtls: no early return on verify fail
    h3-proxy: teardown fix
    happy eyeballs: bound work from many duplicate/failing addresses
    hash: change key arguments to const
    hash: vary bucket placement across process runs
    headers: avoid O(n^2) rescans in curl_easy_nextheader()
    hsts: cap max-age to two years
    hsts: on load, only remove exact duplicates
    HTTP-CONNECT: do not react to 401 responses
    http2: changes in error handling
    http2: don't send a CURLE_SEND_ERROR after a valid http2 response
    http2: fix reset after 1xx response
    http2: init some callbacks for HTTP/2 push easy handles
    http2: initialize URL handle for server pushes
    http2: limit trailers and headers count
    http2: update a refused stream's error after GOAWAY
    http2: use stream in userdata
    http: abide to close-rules when transfer-encoding off
    http: ignore Proxy-Authenticate unless the response comes from a proxy
    http: only enable Negotiate/NTLM to allowed origins
    http: reject empty header names
    http: reject resumed uploads
    http_aws_sigv4: fix the s3express service name
    http_chunks: accept exactly 17 characters chunk-size
    http_chunks: limit trailers size
    httpsig-key.md: correct the generating Ed25519 keys commands
    httpsrr+ech: check target and port
    if2ip: check interface name case sensitive
    imap: close the connection on premature done instead of finalizing
    imap: compare selected mailbox names case-sensitively
    imap: do size checks using 64-bit math
    inet_pton: reject a colon that ends an IPv6 address
    IPFS.md: replace sunset link, allowlist another one to avoid `mdlinkcheck` hang
    KNOWN_BUGS: drop the curl-config private details entry
    KNOWN_BUGS: drop the empty error buffer entry, it no longer happens
    ldap: base64-encode a non-SAFE DN and reject a control-byte type name
    ldap: tidy up variable scope, merge nested `#if`s
    lib557: exclude three floating point test cases for VS2013 and earlier
    lib: connection shutdown, cleanup code
    lib: make private functions static and remove unused code
    lib: reject internal handles in the multi/easy public API
    lib: replace `CURLX_FILE_MODE()` with `mode_t` cast
    libssh2: match hashed known_hosts entries by host
    libssh2: skip repeat checkp() for already-absent hashed key types
    libssh: work with empty priv_key
    mbedtls: fix ticket handling
    mbedtls: pass correct length for PEM/DER key blobs
    mbedtls: resend length check
    mdlinkcheck: pass `--retry-max-time` to avoid server-controlled long retry times
    mime: bound Curl_mime_duppart() recursion depth
    mime: bound Curl_mime_prepare_headers() recursion depth
    mime: do curl_mime_free() non-recursively
    mprintf: acknowledge %F
    mprintf: avoid scanning strings twice for unbounded %s
    mprintf: make mprintf() and mfprintf() return -1 on error
    mprintf: stage output and emit it in runs
    mprintf: use size_t width for the bare Windows %I modifier
    mqtt: drain queued output before advancing the state machine
    mqtt: remaininglength check for 32-bit systems
    mqttd: work around bogus VS2019 32-bit compiler warning
    mulit_ev: remove socket references on forget
    multi-event: fix timeout of pending transfers
    multi: adjust the cleanup order in multi_done
    multi: is_finished() fix
    multi: reduce struct size with small cleanups
    multi: remove redundant completion message list
    multi: store timeout epoch as whole seconds
    multi_ntfy: fix handling of more than 128 notifications in a batch
    multi_ntfy: recheck callback on dispatch
    multi_ntfy: replace enabled bitset with inline flags
    multihandle: some easy shrinks
    netrc: empty quoted values now produce a valid empty string
    netrc: survive comment-only .netrc file
    ngtcp2: shrink max sendbuf
    ngtcp2: use stream in userdata
    openldap: hand it a dup'd socket, not curl's own
    openssl/gtls: reject CRLfile with native CA store, matching rustls
    openssl: fix OpenSSL v4.1 no-deprecated build
    openssl: hardening
    openssl: support X509 store caching when CApath is configured
    openssl: use non-deprecated API for MD5/MD4
    os400: document curl_formadd_CCSID multi-chunk peculiarity
    os400: restore HAVE_FCHMOD
    os400: use correct free function
    ossl_verifyhost: remove assumption of null-termination of ASN1_STRING.
    output-dir.md: expand on its behavior
    parsedate: find day names, months and time zones faster
    parsedate: remove the unused leading three letters
    parsedate: validate NULL date pointer in curl_getdate
    peer: compare zoneid case sensitive
    peer: parsing a zoneid as number fix
    peer: preserve ipv6 props from "connect-to"
    perf-tests: output two-digital decimals always
    pingpong: add a max loop counter for Curl_pp_readresp
    pingpong: guard sendleft against a send reporting more than requested
    pingpong: schedule server response timeouts for the socket API
    pytest: adjust threshold in test_20_11_crazy_pings for arm64
    pytest: check server status without ssl verify
    pytest: fixture fixes
    pytest: set `PerSourcePenalties no` when sshd supports it
    pytest: silence pytest warnings
    pytest: start all servers early
    retry.md: clarify that the server can override retry delay time
    Revert "setopt: clear the 'custom' CA booleans when set to NULL"
    rtsp: accept a Content-Length body on methods that expected none
    rtsp: do not send a learned session id to another origin
    runtests: add extra room for minimum number of tests in sliced jobs
    runtests: Added runnernums in order to have O(1) lookup
    runtests: unset `CURL_MEMDEBUG` for curl requests made to the CI API
    rustls: break recv loop on empty plain text
    rustls: consume CURLOPT_SSLCERT_BLOB / CURLOPT_SSLKEY_BLOB
    schannel: auto_client_cert conn matching
    schannel: clear borrowed sslContext on close
    schannel: fix `-Wextra-semi-stmt` with clang and extra debug enabled
    schannel: fix compiler warning `-Wstrict-aliasing` in ALPN code
    schannel: fix guard for old MSVC workaround
    schannel: handle empty tokens during renegotiation
    schannel: retain close_notify records across send retries
    sectrust: add guards for rest of Apple OS flavors
    share link: forget connection
    socketpair: fix accept loop
    socketpair: use `pipe2()` on Apple OSes (requires SDK 27)
    socks: support CURLAUTH_ONLY in CURLOPT_SOCKS5_AUTH
    socks: track SOCKS5 authentication per socket, not per connection
    socksd: count connections per test, widen the method2 sentinel
    ssl: dedup ssl_fsslctx
    ssls: validate input arguments in import, export, and unpack
    strparse: speed up number parsing
    sws: fix connection-monitor for connections closed before a request
    telnet: make it work through proxy tunnels
    test 1605: move from unit to libtest
    test/servers.pm: restrict h2/3 port reuse
    test1119, 1167: disable MSYS2 argument conversion
    test1399: improve reliability
    test1679: unset `SSL_CERT_FILE`, use `TESTNUMBER`
    test2007: bump to use SHA256 public key hash (was: MD5)
    test2007: set `MSYS2_ARG_CONV_EXCL` to avoid flaky failures
    test2072: enable on Cygwin/MSYS2
    test428: skip when running on older MSYS2 versions
    test: restore the old test 1609 as 3271
    testcurl.pl: drop support for building c-ares from embedded source tree
    tests/http: use @classmethod when appropriate
    tests: add SFTP connection reuse tests
    tests: clean up Python test code
    tests: fix typos in a comment
    tests: require valgrind 3+ (2007-08-03)
    tftp: verify direction in a few places
    tool: (re)set SSL verification in --libcurl output
    tool: add Unicode and long-filename support to `--create-dir` (Windows)
    tool: buffer headers before remote filename selection
    tool: handling of "synthetic" errors
    tool_doswin: recognize superscript numbers as reserved
    tool_easysrc: reset the handle between --next operations
    tool_getparam: do not print the value of a redacted argument
    tool_getparam: restore --socks5-gssapi-service
    tool_help: guard category[2] access when category is bare "-"
    tool_ipfs: keep the path percent-encoded when rewriting to the gateway
    tool_operate: clear the retry flag when the output file fails
    tool_util: add Unicode support to `tool_execpath()`
    u8_strset, u32_ptrset: fix boundaries handling
    uint-bset: skip unused slots when counting
    uint-table: add remove-max precaution
    unit1399: check microsecond precision across redirects
    unit1664: add workaround for VS2019 16.3 - VS2022 17.4 x64 miscompile
    url: check syntax before applying default-protocol
    url: CURLOPT_INTERFACE fix connection reuse match
    url: match connections without force reuse and candidates
    url: ntlm/negotiate, prohibit connection reuse on follows
    urlapi: make curl_url_dup() copy the guessed_scheme flag
    urlapi: normalize legacy numeric IPv4 hosts set via CURLUPART_HOST
    urlapi: return NULL from curl_url_dup() when given a NULL handle
    urlapi: run the urlparser perf test faster
    urldata: remove conn->given
    urldata: remove ssl_primary_config from easy handle
    urldata: shrink connectdata negotiate states
    vdns: announce resolver start before the HTTPS RR query is sent
    vquic: fix preprocessor check for old Darwin versions
    vquic: use `CURLX_FILE_MODE()` in `Curl_qlogdir()`
    vssh: do not busy-loop in blocking state machine without a timeout
    vtls: fix Curl_cert_hostcheck when the pattern is not a C string
    vtls_scache: remember lock state locally
    warnless: dedupe Intel compiler warning suppression pragmas
    wcurl: import v2026.10.12
    websocket: auto PONG with client reader fix
    websocket: error on EOS with incomplete frame
    wolfssl: remove BIO destroy callback
    ws: check pointer args in curl_ws_recv
    ws: do not auto-pong in raw mode
    x509: stricter parsing

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/curl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/curl b/lfs/curl
index 2dd3e804d..54317c2f0 100644
--- a/lfs/curl
+++ b/lfs/curl
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 8.22.0
+VER        = 8.23.0
 
 THISAPP    = curl-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 1efe036ae4ba6bc1e2bcf7bae2229e2c3be8e9d72a0f32f6c1f192d277f625f77786cf538593ad59a7873b477ff3566412d3404d6ccd202c0f7055b6d3a45d25
+$(DL_FILE)_BLAKE2 = ecfabdf0327114aff21430e2f4de788fd8fdc36db606ac70b45241225babac374c2f0334430f31dbc366f2d3a0c7e405b30d973da9b11ae84e6a0da396a4cf87
 
 install : $(TARGET)
 
-- 
2.56.0

[PATCH] freetype: Update to version 2.15.0

[Adolf Belka]

- Update from version 2.14.3 to 2.15.0
- Update of rootfile
- At least 1 CVE fix
- Changelog
2.15.0
 IMPORTANT CHANGES
  - Support for the ISO Open Font  Format, Edition 5 (released in July
    2026) has been contributed by  Behdad Esfahbod, using various LLMs
    for deriving  basic code from HarfBuzz  and other implementations,
    followed by manual fine-tuning, mainly for greater speed.
    . The  new  'VARC' table  allows  a  file  size reduction  of  CJK
      Variation fonts by up to 90%.
    . OpenType fonts with  more than 65536 glyphs can  now be handled.
      The  new tables  related to  this feature  are all  written with
      uppercase  letters:  'MAXP',  'GLYF',  'LOCA',  'HHEA',  'VHEA',
      'HMTX', 'VMTX', 'GVAR', 'DMAP'.
    . The new 'GLYF' table also supports outlines with mixed cubic and
      conic segments.
  - The anti-aliased rasterizer now uses dynamic heap memory for large
    glyphs,  which  significantly improves  its performance  at  sizes
    above 40 ppem.
  - An  experimental  HVF  driver   has  been  contributed  by  Apple,
    currently available on macOS only.
  - The  TrueType   version  40  interpreter  got   several  ClearType
    rendering  improvements.   It  now   better  honors  'gasp'  table
    requests  for  symmetric  grid  fitting and  smoothing,  and  more
    closely  emulates  native   ClearType  horizontal  hinting.   This
    includes improved handling of rounded point instructions, `ROUND`,
    CVT cut-in, minimum distance, and composite glyph positioning.
    These changes improve  the rendering of fonts such  as 'Segoe UI',
    'Calibri', 'Corbel', 'Constantia', 'Malgun Gothic', 'SimSun',  and
    'Comic Sans MS'.
 IMPORTANT BUG FIXES
  - Continued efforts to scrutinize FreeType with AI tools resulted in
    more bugs  being fixed, some with  potential security implications
    (e.g., CVE-2026-95512).
 MISCELLANEOUS
  - The PFR driver returned wrong kerning values in some cases.
  - A port to the Plan 9 operating system is now available.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/freetype | 2 +-
 lfs/freetype                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/freetype b/config/rootfiles/common/freetype
index 6557bdd79..7dab0418d 100644
--- a/config/rootfiles/common/freetype
+++ b/config/rootfiles/common/freetype
@@ -60,7 +60,7 @@
 #usr/lib/libfreetype.la
 #usr/lib/libfreetype.so
 usr/lib/libfreetype.so.6
-usr/lib/libfreetype.so.6.20.6
+usr/lib/libfreetype.so.6.20.7
 #usr/lib/pkgconfig/freetype2.pc
 #usr/share/aclocal/freetype2.m4
 #usr/share/man/man1/freetype-config.1
diff --git a/lfs/freetype b/lfs/freetype
index 0d0545058..97749d55d 100644
--- a/lfs/freetype
+++ b/lfs/freetype
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.14.3
+VER        = 2.15.0
 
 THISAPP    = freetype-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 26db1946b099abc73d9d249dc48303e70886e0b1cb7180d5b9538b3934dc677a1572a32573af6adabeeb1c1a2eef81f24399038d3d8e640c29bba77f6c8a3596
+$(DL_FILE)_BLAKE2 = b49bbcf6eae90159b8c3f315a8175d23a0c6a8f8574361aaff1b05d19984b31c000c1d637ba128e6f2f09d984d583f36cc7dd84e196152214f6fc8bed20e810d
 
 install : $(TARGET)
 
-- 
2.56.0

[PATCH] libarchive: Update to version 3.8.10

[Adolf Belka]

- Update from version 3.8.9 to 3.8.10
- Update of rootfile
- Changelog
3.8.10
New features:
    7z: add Delta (#3583), RISCV (#3501), ARMTHUMB (#3525) and IA64 (#3538) filters
	for non-lzma archives
    libarchive: support digest with nettle 4 (#3481) and mbedtls 3 (#3502)
    tar: add --mode option (#3343)
Security and Bug Fixes
    see Changelog - https://github.com/libarchive/libarchive/compare/v3.8.9...v3.8.10

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libarchive | 2 +-
 lfs/libarchive                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/config/rootfiles/common/libarchive b/config/rootfiles/common/libarchive
index f7dc116f0..1589c132e 100644
--- a/config/rootfiles/common/libarchive
+++ b/config/rootfiles/common/libarchive
@@ -7,7 +7,7 @@
 #usr/lib/libarchive.la
 #usr/lib/libarchive.so
 usr/lib/libarchive.so.13
-usr/lib/libarchive.so.13.8.9
+usr/lib/libarchive.so.13.8.10
 #usr/lib/pkgconfig/libarchive.pc
 #usr/share/man/man1/bsdcat.1
 #usr/share/man/man1/bsdcpio.1
diff --git a/lfs/libarchive b/lfs/libarchive
index e807477a5..9fd5bc510 100644
--- a/lfs/libarchive
+++ b/lfs/libarchive
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.8.9
+VER        = 3.8.10
 
 THISAPP    = libarchive-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 4f3df81fa32231471b866a443d77069e74d25c5b806bccf9358b5e7df25e6626c882aafffbd22ff8fa6b78a009efd58827a75ce0169b0ed4a780f65968a799c7
+$(DL_FILE)_BLAKE2 = 70cd55ceb3e7ac39f3f463105e0929b7e160f5a78b8266a22a043300713933be6d63175811d19f997f48a1a0d0c43197df426fe9fb30b40af4a28bc3eb4f41bd
 
 install : $(TARGET)
 
-- 
2.56.0