* [PATCH] cifs-utils: Update to version 7.9
2026-10-17 15:36 [PATCH] bird: Update to version 3.4.0 Adolf Belka
@ 2026-10-17 15:36 ` Adolf Belka
2026-10-17 15:36 ` [PATCH] core206: Ship curl Adolf Belka
` (5 subsequent siblings)
6 siblings, 0 replies; 8+ messages in thread
From: Adolf Belka @ 2026-10-17 15:36 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 7.8 to 7.9
- No change in rootfile
- 2 CVE fixes
- Changelog
7.9
[CVE-2026-104715] mount.cifs: validate username derived from the passwd database
[CVE-2026-104715] mount.cifs: reject option delimiters in username and domain
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/cifs-utils | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/lfs/cifs-utils b/lfs/cifs-utils
index 5d10bd78b..9292ade5d 100644
--- a/lfs/cifs-utils
+++ b/lfs/cifs-utils
@@ -26,7 +26,7 @@ include Config
SUMMARY = Utilities for doing and managing mounts of the Linux CIFS filesystem
-VER = 7.8
+VER = 7.9
THISAPP = cifs-utils-$(VER)
DL_FILE = $(THISAPP).tar.bz2
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = cifs-utils
-PAK_VER = 10
+PAK_VER = 11
DEPS = libtalloc
@@ -51,7 +51,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 3d87077e862d6106293b207f826bc1266d27fef46a9185d43e7b934b8675f2faacc8ba0b61ec475310edde83654839db4a1bd86bf489ee0b5c78e7de6e12d23f
+$(DL_FILE)_BLAKE2 = 49254d88c555befbac74a42c47bd865e93460e504afd825b36f44b8ddefac5ee174c60631a4772f0a81272c9f9981d412f9c5e9b66a54413b7673e5ae102e69b
install : $(TARGET)
--
2.56.0
^ permalink raw reply [flat|nested] 8+ messages in thread* [PATCH] core206: Ship curl
2026-10-17 15:36 [PATCH] bird: Update to version 3.4.0 Adolf Belka
2026-10-17 15:36 ` [PATCH] cifs-utils: Update to version 7.9 Adolf Belka
@ 2026-10-17 15:36 ` Adolf Belka
2026-10-17 15:36 ` [PATCH] core206: Ship freetype Adolf Belka
` (4 subsequent siblings)
6 siblings, 0 replies; 8+ messages in thread
From: Adolf Belka @ 2026-10-17 15:36 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/206/filelists/curl | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/206/filelists/curl
diff --git a/config/rootfiles/core/206/filelists/curl b/config/rootfiles/core/206/filelists/curl
new file mode 120000
index 000000000..4b84bef53
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/curl
@@ -0,0 +1 @@
+../../../common/curl
\ No newline at end of file
--
2.56.0
^ permalink raw reply [flat|nested] 8+ messages in thread* [PATCH] core206: Ship freetype
2026-10-17 15:36 [PATCH] bird: Update to version 3.4.0 Adolf Belka
2026-10-17 15:36 ` [PATCH] cifs-utils: Update to version 7.9 Adolf Belka
2026-10-17 15:36 ` [PATCH] core206: Ship curl Adolf Belka
@ 2026-10-17 15:36 ` Adolf Belka
2026-10-17 15:36 ` [PATCH] core206: Ship libarchive Adolf Belka
` (3 subsequent siblings)
6 siblings, 0 replies; 8+ messages in thread
From: Adolf Belka @ 2026-10-17 15:36 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/206/filelists/freetype | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/206/filelists/freetype
diff --git a/config/rootfiles/core/206/filelists/freetype b/config/rootfiles/core/206/filelists/freetype
new file mode 120000
index 000000000..79ec5c42e
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/freetype
@@ -0,0 +1 @@
+../../../common/freetype
\ No newline at end of file
--
2.56.0
^ permalink raw reply [flat|nested] 8+ messages in thread* [PATCH] core206: Ship libarchive
2026-10-17 15:36 [PATCH] bird: Update to version 3.4.0 Adolf Belka
` (2 preceding siblings ...)
2026-10-17 15:36 ` [PATCH] core206: Ship freetype Adolf Belka
@ 2026-10-17 15:36 ` Adolf Belka
2026-10-17 15:36 ` [PATCH] curl: Update to version 8.23.0 Adolf Belka
` (2 subsequent siblings)
6 siblings, 0 replies; 8+ messages in thread
From: Adolf Belka @ 2026-10-17 15:36 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/206/filelists/libarchive | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/206/filelists/libarchive
diff --git a/config/rootfiles/core/206/filelists/libarchive b/config/rootfiles/core/206/filelists/libarchive
new file mode 120000
index 000000000..551f1f743
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/libarchive
@@ -0,0 +1 @@
+../../../common/libarchive
\ No newline at end of file
--
2.56.0
^ permalink raw reply [flat|nested] 8+ messages in thread* [PATCH] curl: Update to version 8.23.0
2026-10-17 15:36 [PATCH] bird: Update to version 3.4.0 Adolf Belka
` (3 preceding siblings ...)
2026-10-17 15:36 ` [PATCH] core206: Ship libarchive Adolf Belka
@ 2026-10-17 15:36 ` Adolf Belka
2026-10-17 15:36 ` [PATCH] freetype: Update to version 2.15.0 Adolf Belka
2026-10-17 15:36 ` [PATCH] libarchive: Update to version 3.8.10 Adolf Belka
6 siblings, 0 replies; 8+ messages in thread
From: Adolf Belka @ 2026-10-17 15:36 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 8.22.0 to 8.23.0
- No change in rootfile
- Changelog
8.23.0
Changes:
lib: CURL_GLOBAL_WIN32 -> CURL_GLOBAL_WINSOCK
SMB: drop support
tool_cb_wrt: inject the no-clobber number before the extension
tool_cb_wrt: try up to .9999 when no-clobbering
Bugfixes:
apple-sectrust: check ocsp copy alloc
apple: shorten versions in `__builtin_available()` calls
apple: sync hash init calls, add comments
apple: sync up version guard macro style
base64: avoid repeated input loads when encoding
base64: optimize decode lookup table and quantum loop
build: convert HAS_TIME_T_UNSIGNED to a compile-time check
build: drop `HTTP_ONLY` option
capsule: reject a capsule that can never be buffered
cf-h1-proxy: reset chunk state on new request
cf-h1-proxy: stricter status line parsing
cf-https-connect: re-arm the timer for the hard eyeballs timeout
cf-ngtcp2-cmn: fix possible `-Wdeclaration-after-statement`
cf-ngtcp2-proxy: check for stream close on rx win update
cf-ngtcp2-proxy: fix rx flow control
cf-socket: adjust NO_SYN_RETRANSMISSIONS for older Windows
cf-socket: clamp keepalive seconds-to-milliseconds conversions
cfilters: fail a send that reports more written than requested
clang-tidy: merge nested `if()`s
cmake/Find*: drop deprecated compatibility config variables
cmake: enable C++ library for GCC in AWS-LC/BoringSSL static builds
cmake: link llvm stdc++ lib to AWS-LC/BoringSSL-specific feature detections only
config2setopts: always set the security options for SCP/SFTP
config2setopts: rename define for maximum cookie header length
conncache: avoid evicting connect-only connections
conncache: never discard a connection still in use
conncache: remove bundle dest
connect: do not busy-loop in blocking connect without a timeout
connect: keep IP info and connect time when connect fails
connectdata: use less curltime
cookie: accept and ignore empty property names in Set-Cookie
cookie: accept and ignore values for 'secure' and 'httponly'
cookie: accept slightly longer lines in cookie jars
cookie: cookies for a PSL domain from jar limits tailmatch
cookie: ignore individual cookie errors when loading
cpool: do not use admin handle for conn lookup
cshutdown: make it smaller
cshutdown: use ptrarray instead of llist
curl-openssl.m4: sync LibreSSL detection method with rest of forks
curl_addrinfo: drop redundant parentheses
curl_easy_send/recv: check pointer arg
curl_fopen: restore the uid and gid checks
curl_formadd.md: mention the strlen() for names as well
curl_multi_perform: doc update
curl_setup.h: drop compatibility raw C flag `ENABLE_IPV6`
CURLINFO_EFFECTIVE_URL.md: mention a short lifetime
CURLOPT*ISSUERCERT*: not verified cryptographically
CURLOPT_POSTFIELDSIZE.md: improve wording
CURLOPT_SHARE.md: remove bad explanation for cookie sharing
CURLOPT_SSL_CTX_FUNCTION.md: client cert caveats
curlx_fopen: add macro to cast file mode
cw-out: avoid O(n^2) work while buffering paused output
cw-out: recheck callbacks for each call
cw-pause: fix O(N^2) list traversal in cw_pause_flush
DEPENDENCIES.md: fix release date for valgrind 3.0.0 to 2005-08-03
DEPRECATE.md: reflect SMB removal
DEPRECATE: Common Name support in TLS certificates for OpenSSL
digest: check peer equality for staleness
digest: fix maximum length quoted value parsing
digest: parse without storing 'value' in local buffer
digest: quote the digest-uri param as well
dnscache/conncache tweaks
dnscache: check hostname on lookup
dnscache: compare full hostnames when lookup keys are truncated
docs: add the missing .html to the URL encode book link
docs: document and align the blocking situations
docs: note CAINFO/SSL_VERIFYPEER/SSL_VERIFYSTATUS effect on LDAP
docs: SSL session import/file updates
doh: reject undersized HTTPS RDATA
dynhds: check size overflows
dynhds: grow header array geometrically
easy: change event pollset construction
easy: duplicating a zero byte memory area needs no malloc
easy: make ca_cache_timeout standalone
easy: validate buffer pointer in curl_easy_recv and curl_easy_send
ECH: rework config, add test cases
escape: polish encoding and decoding for speed
escape: use hex-pair lookup in curl_easy_escape
examples: clean up crawler link parsing resources
fnmatch: replace recursive matcher with iterative greedy algorithm
formdata: reject a negative content length in curl_formadd
ftp: require TLS on the data connection for implicit FTPS
ftp: tighten use_ssl check for conn reuse
ftp: URL encode filenames when wildcarding
ftplistparser: no more overwriting set.write_func
ftplistparser: when wildcarding, skip files with slashes
ftpserver.pl: fix warnings when running test 804
getinfo: make sure CURLINFO_EFFECTIVE_URL does not contain creds
getinfo: make sure CURLINFO_REDIRECT_URL does not contain creds
getparam: switch off CONNECT headers when using -J
glob: reduce the number of allocations for URLs that don't need globbing.
global_init: tidy up, simplify, fix issues
gnutls: hardening
GnuTLS: remove our own OCSP signature verification
gtls: no early return on verify fail
h3-proxy: teardown fix
happy eyeballs: bound work from many duplicate/failing addresses
hash: change key arguments to const
hash: vary bucket placement across process runs
headers: avoid O(n^2) rescans in curl_easy_nextheader()
hsts: cap max-age to two years
hsts: on load, only remove exact duplicates
HTTP-CONNECT: do not react to 401 responses
http2: changes in error handling
http2: don't send a CURLE_SEND_ERROR after a valid http2 response
http2: fix reset after 1xx response
http2: init some callbacks for HTTP/2 push easy handles
http2: initialize URL handle for server pushes
http2: limit trailers and headers count
http2: update a refused stream's error after GOAWAY
http2: use stream in userdata
http: abide to close-rules when transfer-encoding off
http: ignore Proxy-Authenticate unless the response comes from a proxy
http: only enable Negotiate/NTLM to allowed origins
http: reject empty header names
http: reject resumed uploads
http_aws_sigv4: fix the s3express service name
http_chunks: accept exactly 17 characters chunk-size
http_chunks: limit trailers size
httpsig-key.md: correct the generating Ed25519 keys commands
httpsrr+ech: check target and port
if2ip: check interface name case sensitive
imap: close the connection on premature done instead of finalizing
imap: compare selected mailbox names case-sensitively
imap: do size checks using 64-bit math
inet_pton: reject a colon that ends an IPv6 address
IPFS.md: replace sunset link, allowlist another one to avoid `mdlinkcheck` hang
KNOWN_BUGS: drop the curl-config private details entry
KNOWN_BUGS: drop the empty error buffer entry, it no longer happens
ldap: base64-encode a non-SAFE DN and reject a control-byte type name
ldap: tidy up variable scope, merge nested `#if`s
lib557: exclude three floating point test cases for VS2013 and earlier
lib: connection shutdown, cleanup code
lib: make private functions static and remove unused code
lib: reject internal handles in the multi/easy public API
lib: replace `CURLX_FILE_MODE()` with `mode_t` cast
libssh2: match hashed known_hosts entries by host
libssh2: skip repeat checkp() for already-absent hashed key types
libssh: work with empty priv_key
mbedtls: fix ticket handling
mbedtls: pass correct length for PEM/DER key blobs
mbedtls: resend length check
mdlinkcheck: pass `--retry-max-time` to avoid server-controlled long retry times
mime: bound Curl_mime_duppart() recursion depth
mime: bound Curl_mime_prepare_headers() recursion depth
mime: do curl_mime_free() non-recursively
mprintf: acknowledge %F
mprintf: avoid scanning strings twice for unbounded %s
mprintf: make mprintf() and mfprintf() return -1 on error
mprintf: stage output and emit it in runs
mprintf: use size_t width for the bare Windows %I modifier
mqtt: drain queued output before advancing the state machine
mqtt: remaininglength check for 32-bit systems
mqttd: work around bogus VS2019 32-bit compiler warning
mulit_ev: remove socket references on forget
multi-event: fix timeout of pending transfers
multi: adjust the cleanup order in multi_done
multi: is_finished() fix
multi: reduce struct size with small cleanups
multi: remove redundant completion message list
multi: store timeout epoch as whole seconds
multi_ntfy: fix handling of more than 128 notifications in a batch
multi_ntfy: recheck callback on dispatch
multi_ntfy: replace enabled bitset with inline flags
multihandle: some easy shrinks
netrc: empty quoted values now produce a valid empty string
netrc: survive comment-only .netrc file
ngtcp2: shrink max sendbuf
ngtcp2: use stream in userdata
openldap: hand it a dup'd socket, not curl's own
openssl/gtls: reject CRLfile with native CA store, matching rustls
openssl: fix OpenSSL v4.1 no-deprecated build
openssl: hardening
openssl: support X509 store caching when CApath is configured
openssl: use non-deprecated API for MD5/MD4
os400: document curl_formadd_CCSID multi-chunk peculiarity
os400: restore HAVE_FCHMOD
os400: use correct free function
ossl_verifyhost: remove assumption of null-termination of ASN1_STRING.
output-dir.md: expand on its behavior
parsedate: find day names, months and time zones faster
parsedate: remove the unused leading three letters
parsedate: validate NULL date pointer in curl_getdate
peer: compare zoneid case sensitive
peer: parsing a zoneid as number fix
peer: preserve ipv6 props from "connect-to"
perf-tests: output two-digital decimals always
pingpong: add a max loop counter for Curl_pp_readresp
pingpong: guard sendleft against a send reporting more than requested
pingpong: schedule server response timeouts for the socket API
pytest: adjust threshold in test_20_11_crazy_pings for arm64
pytest: check server status without ssl verify
pytest: fixture fixes
pytest: set `PerSourcePenalties no` when sshd supports it
pytest: silence pytest warnings
pytest: start all servers early
retry.md: clarify that the server can override retry delay time
Revert "setopt: clear the 'custom' CA booleans when set to NULL"
rtsp: accept a Content-Length body on methods that expected none
rtsp: do not send a learned session id to another origin
runtests: add extra room for minimum number of tests in sliced jobs
runtests: Added runnernums in order to have O(1) lookup
runtests: unset `CURL_MEMDEBUG` for curl requests made to the CI API
rustls: break recv loop on empty plain text
rustls: consume CURLOPT_SSLCERT_BLOB / CURLOPT_SSLKEY_BLOB
schannel: auto_client_cert conn matching
schannel: clear borrowed sslContext on close
schannel: fix `-Wextra-semi-stmt` with clang and extra debug enabled
schannel: fix compiler warning `-Wstrict-aliasing` in ALPN code
schannel: fix guard for old MSVC workaround
schannel: handle empty tokens during renegotiation
schannel: retain close_notify records across send retries
sectrust: add guards for rest of Apple OS flavors
share link: forget connection
socketpair: fix accept loop
socketpair: use `pipe2()` on Apple OSes (requires SDK 27)
socks: support CURLAUTH_ONLY in CURLOPT_SOCKS5_AUTH
socks: track SOCKS5 authentication per socket, not per connection
socksd: count connections per test, widen the method2 sentinel
ssl: dedup ssl_fsslctx
ssls: validate input arguments in import, export, and unpack
strparse: speed up number parsing
sws: fix connection-monitor for connections closed before a request
telnet: make it work through proxy tunnels
test 1605: move from unit to libtest
test/servers.pm: restrict h2/3 port reuse
test1119, 1167: disable MSYS2 argument conversion
test1399: improve reliability
test1679: unset `SSL_CERT_FILE`, use `TESTNUMBER`
test2007: bump to use SHA256 public key hash (was: MD5)
test2007: set `MSYS2_ARG_CONV_EXCL` to avoid flaky failures
test2072: enable on Cygwin/MSYS2
test428: skip when running on older MSYS2 versions
test: restore the old test 1609 as 3271
testcurl.pl: drop support for building c-ares from embedded source tree
tests/http: use @classmethod when appropriate
tests: add SFTP connection reuse tests
tests: clean up Python test code
tests: fix typos in a comment
tests: require valgrind 3+ (2007-08-03)
tftp: verify direction in a few places
tool: (re)set SSL verification in --libcurl output
tool: add Unicode and long-filename support to `--create-dir` (Windows)
tool: buffer headers before remote filename selection
tool: handling of "synthetic" errors
tool_doswin: recognize superscript numbers as reserved
tool_easysrc: reset the handle between --next operations
tool_getparam: do not print the value of a redacted argument
tool_getparam: restore --socks5-gssapi-service
tool_help: guard category[2] access when category is bare "-"
tool_ipfs: keep the path percent-encoded when rewriting to the gateway
tool_operate: clear the retry flag when the output file fails
tool_util: add Unicode support to `tool_execpath()`
u8_strset, u32_ptrset: fix boundaries handling
uint-bset: skip unused slots when counting
uint-table: add remove-max precaution
unit1399: check microsecond precision across redirects
unit1664: add workaround for VS2019 16.3 - VS2022 17.4 x64 miscompile
url: check syntax before applying default-protocol
url: CURLOPT_INTERFACE fix connection reuse match
url: match connections without force reuse and candidates
url: ntlm/negotiate, prohibit connection reuse on follows
urlapi: make curl_url_dup() copy the guessed_scheme flag
urlapi: normalize legacy numeric IPv4 hosts set via CURLUPART_HOST
urlapi: return NULL from curl_url_dup() when given a NULL handle
urlapi: run the urlparser perf test faster
urldata: remove conn->given
urldata: remove ssl_primary_config from easy handle
urldata: shrink connectdata negotiate states
vdns: announce resolver start before the HTTPS RR query is sent
vquic: fix preprocessor check for old Darwin versions
vquic: use `CURLX_FILE_MODE()` in `Curl_qlogdir()`
vssh: do not busy-loop in blocking state machine without a timeout
vtls: fix Curl_cert_hostcheck when the pattern is not a C string
vtls_scache: remember lock state locally
warnless: dedupe Intel compiler warning suppression pragmas
wcurl: import v2026.10.12
websocket: auto PONG with client reader fix
websocket: error on EOS with incomplete frame
wolfssl: remove BIO destroy callback
ws: check pointer args in curl_ws_recv
ws: do not auto-pong in raw mode
x509: stricter parsing
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/curl | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/curl b/lfs/curl
index 2dd3e804d..54317c2f0 100644
--- a/lfs/curl
+++ b/lfs/curl
@@ -24,7 +24,7 @@
include Config
-VER = 8.22.0
+VER = 8.23.0
THISAPP = curl-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 1efe036ae4ba6bc1e2bcf7bae2229e2c3be8e9d72a0f32f6c1f192d277f625f77786cf538593ad59a7873b477ff3566412d3404d6ccd202c0f7055b6d3a45d25
+$(DL_FILE)_BLAKE2 = ecfabdf0327114aff21430e2f4de788fd8fdc36db606ac70b45241225babac374c2f0334430f31dbc366f2d3a0c7e405b30d973da9b11ae84e6a0da396a4cf87
install : $(TARGET)
--
2.56.0
^ permalink raw reply [flat|nested] 8+ messages in thread* [PATCH] freetype: Update to version 2.15.0
2026-10-17 15:36 [PATCH] bird: Update to version 3.4.0 Adolf Belka
` (4 preceding siblings ...)
2026-10-17 15:36 ` [PATCH] curl: Update to version 8.23.0 Adolf Belka
@ 2026-10-17 15:36 ` Adolf Belka
2026-10-17 15:36 ` [PATCH] libarchive: Update to version 3.8.10 Adolf Belka
6 siblings, 0 replies; 8+ messages in thread
From: Adolf Belka @ 2026-10-17 15:36 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2.14.3 to 2.15.0
- Update of rootfile
- At least 1 CVE fix
- Changelog
2.15.0
IMPORTANT CHANGES
- Support for the ISO Open Font Format, Edition 5 (released in July
2026) has been contributed by Behdad Esfahbod, using various LLMs
for deriving basic code from HarfBuzz and other implementations,
followed by manual fine-tuning, mainly for greater speed.
. The new 'VARC' table allows a file size reduction of CJK
Variation fonts by up to 90%.
. OpenType fonts with more than 65536 glyphs can now be handled.
The new tables related to this feature are all written with
uppercase letters: 'MAXP', 'GLYF', 'LOCA', 'HHEA', 'VHEA',
'HMTX', 'VMTX', 'GVAR', 'DMAP'.
. The new 'GLYF' table also supports outlines with mixed cubic and
conic segments.
- The anti-aliased rasterizer now uses dynamic heap memory for large
glyphs, which significantly improves its performance at sizes
above 40 ppem.
- An experimental HVF driver has been contributed by Apple,
currently available on macOS only.
- The TrueType version 40 interpreter got several ClearType
rendering improvements. It now better honors 'gasp' table
requests for symmetric grid fitting and smoothing, and more
closely emulates native ClearType horizontal hinting. This
includes improved handling of rounded point instructions, `ROUND`,
CVT cut-in, minimum distance, and composite glyph positioning.
These changes improve the rendering of fonts such as 'Segoe UI',
'Calibri', 'Corbel', 'Constantia', 'Malgun Gothic', 'SimSun', and
'Comic Sans MS'.
IMPORTANT BUG FIXES
- Continued efforts to scrutinize FreeType with AI tools resulted in
more bugs being fixed, some with potential security implications
(e.g., CVE-2026-95512).
MISCELLANEOUS
- The PFR driver returned wrong kerning values in some cases.
- A port to the Plan 9 operating system is now available.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/freetype | 2 +-
lfs/freetype | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/freetype b/config/rootfiles/common/freetype
index 6557bdd79..7dab0418d 100644
--- a/config/rootfiles/common/freetype
+++ b/config/rootfiles/common/freetype
@@ -60,7 +60,7 @@
#usr/lib/libfreetype.la
#usr/lib/libfreetype.so
usr/lib/libfreetype.so.6
-usr/lib/libfreetype.so.6.20.6
+usr/lib/libfreetype.so.6.20.7
#usr/lib/pkgconfig/freetype2.pc
#usr/share/aclocal/freetype2.m4
#usr/share/man/man1/freetype-config.1
diff --git a/lfs/freetype b/lfs/freetype
index 0d0545058..97749d55d 100644
--- a/lfs/freetype
+++ b/lfs/freetype
@@ -24,7 +24,7 @@
include Config
-VER = 2.14.3
+VER = 2.15.0
THISAPP = freetype-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 26db1946b099abc73d9d249dc48303e70886e0b1cb7180d5b9538b3934dc677a1572a32573af6adabeeb1c1a2eef81f24399038d3d8e640c29bba77f6c8a3596
+$(DL_FILE)_BLAKE2 = b49bbcf6eae90159b8c3f315a8175d23a0c6a8f8574361aaff1b05d19984b31c000c1d637ba128e6f2f09d984d583f36cc7dd84e196152214f6fc8bed20e810d
install : $(TARGET)
--
2.56.0
^ permalink raw reply [flat|nested] 8+ messages in thread* [PATCH] libarchive: Update to version 3.8.10
2026-10-17 15:36 [PATCH] bird: Update to version 3.4.0 Adolf Belka
` (5 preceding siblings ...)
2026-10-17 15:36 ` [PATCH] freetype: Update to version 2.15.0 Adolf Belka
@ 2026-10-17 15:36 ` Adolf Belka
6 siblings, 0 replies; 8+ messages in thread
From: Adolf Belka @ 2026-10-17 15:36 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 3.8.9 to 3.8.10
- Update of rootfile
- Changelog
3.8.10
New features:
7z: add Delta (#3583), RISCV (#3501), ARMTHUMB (#3525) and IA64 (#3538) filters
for non-lzma archives
libarchive: support digest with nettle 4 (#3481) and mbedtls 3 (#3502)
tar: add --mode option (#3343)
Security and Bug Fixes
see Changelog - https://github.com/libarchive/libarchive/compare/v3.8.9...v3.8.10
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/common/libarchive | 2 +-
lfs/libarchive | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/config/rootfiles/common/libarchive b/config/rootfiles/common/libarchive
index f7dc116f0..1589c132e 100644
--- a/config/rootfiles/common/libarchive
+++ b/config/rootfiles/common/libarchive
@@ -7,7 +7,7 @@
#usr/lib/libarchive.la
#usr/lib/libarchive.so
usr/lib/libarchive.so.13
-usr/lib/libarchive.so.13.8.9
+usr/lib/libarchive.so.13.8.10
#usr/lib/pkgconfig/libarchive.pc
#usr/share/man/man1/bsdcat.1
#usr/share/man/man1/bsdcpio.1
diff --git a/lfs/libarchive b/lfs/libarchive
index e807477a5..9fd5bc510 100644
--- a/lfs/libarchive
+++ b/lfs/libarchive
@@ -24,7 +24,7 @@
include Config
-VER = 3.8.9
+VER = 3.8.10
THISAPP = libarchive-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 4f3df81fa32231471b866a443d77069e74d25c5b806bccf9358b5e7df25e6626c882aafffbd22ff8fa6b78a009efd58827a75ce0169b0ed4a780f65968a799c7
+$(DL_FILE)_BLAKE2 = 70cd55ceb3e7ac39f3f463105e0929b7e160f5a78b8266a22a043300713933be6d63175811d19f997f48a1a0d0c43197df426fe9fb30b40af4a28bc3eb4f41bd
install : $(TARGET)
--
2.56.0
^ permalink raw reply [flat|nested] 8+ messages in thread