[PATCH] bind: Update to version 9.20.30

[PATCH] bind: Update to version 9.20.30

[Adolf Belka]

- Update from version 9.20.29 to 9.20.30
- Update of rootfile
4 CVE fixes
- Changelog
9.20.30
Security Fixes
- [CVE-2026-19630] Crafted DNS messages could exhaust CPU while being
  parsed. ``5e8a2e1c76a``
  A crafted message could make named spend a disproportionate amount of
  time expanding compressed names in it, letting a client saturate all
  worker threads with very little traffic and time out legitimate
  queries. named now bounds how much name expansion a single message can
  require and answers FORMERR when that bound is exceeded; ordinary
  traffic, including zone transfers and dynamic updates, stays well
  inside it. :gl:`#5932`
- [CVE-2026-94300] Fix remote termination of named under concurrent
  GSS-TSIG traffic. ``fe9cc14af0d``
  A GSS-TSIG session negotiated through TKEY is shared by every message
  signed or verified with that key, and named did not serialize access
  to it, so concurrent signed messages could corrupt Kerberos-owned
  state and terminate named unexpectedly. :gl:`#6320`
- [CVE-2026-96888] Possible crash with redirect and qname-minimization
  strict. ``1e1d0d42b59``
  Processing an NXDOMAIN response with a redirect zone could cause
  `named` to crash if `qname-minimization` was set to `strict`.
  :gl:`#6386`
- [CVE-2026-97313] Fix a bug when resuming from a query initiated by
  RPZ. ``3e4fe14392e``
  The :iscman:`named` process could terminate unexpectedly when resuming
  from a query initiated by RPZ processing. This has been fixed.
  ISC would like to thank `whisperer` for reporting the issue.
  :gl:`#6408`
Bug Fixes
- Remove spurious named/named-checkconf warning. ``b066dde7047``
  "static entry for the root zone WILL FAIL after key rollover - use
  trust-anchors with initial-key or initial-ds instead" only makes sense
  when you are using ICANN root keys as they use RFC 5011 for DNSKEY
  management.  Don't log it in other circumstances. :gl:`#5572`
  :gl:`!12788`
- Fix a data race in the RPZ summary database. ``f892fe7857b``
  Reloading a response policy zone could modify entries of the summary
  database in place while queries were reading them without a lock,
  which ThreadSanitizer reported as a data race. Entries are now
  replaced with a fresh copy instead, so queries keep reading a
  consistent entry and the query path stays lock-free. :gl:`#5594`
  :gl:`!12696`
- Fix private-type RRset handling during apex delete updates.
  ``f0aa2a0fab3``
  When DNS UPDATE processing manipulates `diff.tuples` (e.g. during
  delete-all-at-name or delete-RRset operations at a zone apex with
  TYPE65534 private signing state), tuples were being unlinked from the
  list using `ISC_LIST_UNLINK()` directly. This bypassed the `diff.size`
  counter, causing it to drift out of sync with the actual list
  contents.
  This commit introduces `dns_diff_unlink()`, which keeps `diff.size`
  accurate when removing a tuple, and updates all call sites in
  `lib/dns/` and `lib/ns/` that previously manipulated the list
  directly.
  ISC thanks Mcsky23 and Qifan Zhang of Palo Alto Networks for reporting
  the issue. :gl:`#5802` :gl:`!12703`
- Revert "Prevent overwriting an existing iptable node when merging"
  ``12dda38637f``
  This reverts commit ebd86076bc30322d2955599bbc36ecfcbf8c0664.
  The above change had unintended side effects.  The issue it attempted
  to address will be fixed properly in due course. :gl:`#6049`
  :gl:`!12740`
- Don't accept HMAC-based keys and signatures for SIG(0) or DNSSEC.
  ``52326a3fd05``
  Due to an oversight HMAC keys could be accepted for SIG(0) and DNSSEC
  purposes.  This has been fixed. :gl:`#6086` :gl:`!12700`
- Fix DNSSEC tool dates read one hour late during daylight saving time.
  ``78be42b3fdd``
  When a key timing value was passed to the DNSSEC tools in the format
  that dnssec-settime -p prints (for example Wed Jul  1 12:00:00 2026),
  it was read as standard time. While daylight saving time was in
  effect, the resulting time was one hour late. These values are now
  read in the correct local time. :gl:`#6089` :gl:`!12889`
- "libisccc flat S-expression free can exhaust stack" ``bcb45f4c696``
  It was possible to exceed the stack in rndc if it had to free really
  deep answer chains from a hostile server.  Flatten the freeing of
  answer chains.  Printing the sexpr tree for debugging also suffers
  from the same stack exhaustion problem due to excessive recursion.
  Flatten sexpr tree printing. :gl:`#6090` :gl:`!12786`
- Fix RRL qps-scale TCP credit age check uses the response bucket age.
  ``0f047525d94``
  There was a cut-and-paste bug in `debit_rrl_entry` where the age from
  the wrong entry was used to set scale.  Use `credit_e` instead of `e`.
  :gl:`#6106` :gl:`!12850`
- Enforce non empty URI target field in URI record. ``409b4c82e19``
  RFC 7553 requires that the URI target field MUST NOT be an empty URI
  ("").  This is now enforced by the from text and from wire methods.
  :gl:`#6134` :gl:`!12699`
- Fix a space calculation bug when loading a zone in "RAW" format.
  ``f6a08c7f34e``
  When loading a specially crafted zone file in "RAW" format, the
  :iscman:`named` process could terminate unexpectedly. This has been
  fixed. :gl:`#6141` :gl:`!12782`
- Dst_key_fromdns should fail on unsupported algorithms. ``ce7c7704f30``
  dst_key_fromdns could succeed on unsupported algorithms causing
  failures later in code which assumed that a dst_key_t always had a
  supported algorithms.   :gl:`#6192` :gl:`!12707`
- Dynamic update prerequisites could probe zones that refuse queries.
  ``0421a637880``
  Dynamic update prerequisites did not honor `allow-query-on`, nor
  `allow-query` for inline-signed zones, so clients that were refused
  queries could use them to learn whether records exist in the zone.
  These ACLs are now enforced for dynamic updates. :gl:`#6216`
  :gl:`#6217` :gl:`!12905`
- Fix delv +ns view reference counting. ``109c80c74e9``
  Delv's matchview doesn't attach to the view as named does when called
  with +ns. This can result in a view reference underflow if an
  unexpected request is received by delv.  This has been fixed.
  :gl:`#6236` :gl:`!12737`
- Named-journalprint -x could dereference a NULL pointer.
  ``26f87b37a26``
  When a journal is built without an index table, named-journalprint
  could dereference a NULL pointer when printing extended diagnostics
  (-x). This has been fixed. :gl:`#6238` :gl:`!12721`
- Initialise dstip in notify_send_toaddr and checkds_send_toaddr.
  ``3260bf7b513``
  The dstip structure was not initialised on all paths before it was
  used in notify_send_toaddr and checkds_send_toaddr.  This could cause
  server clauses to be ineffective. This has been fixed. :gl:`#6239`
  :gl:`!12722`
- Fix a catalog zone update bug. ``a694601fafe``
  During a catalog zone update with an unusual case when a new member
  zone appeared in the new version of the catalog zone under the same
  label as used for another member in the old version of the catalog
  zone, the old member zone could remain in the view and be
  authoritatively served until :iscman:`named` was reloaded or
  restarted. This has been fixed. :gl:`#6305` :gl:`!12751`
- Fix empty SSLKEYLOGFILE environment variable handling. ``da53d3097d3``
  If named is started with an empty SSLKEYLOGFILE environment variable
  it could trigger a REQUIRE failure.  Treat an empty SSLKEYLOGFILE
  environment variable as if it doesn't exist. :gl:`#6306` :gl:`!12873`
- Dig +dns64prefix could process non-IN AAAA records. ``8a05bd1db04``
  dig +dns64prefix could process non-IN AAAA records if there was a
  hostile resolver resulting in an out of bounds read. This has been
  fixed. :gl:`#6312` :gl:`!12793`
- Save_command_line mishandles byte with high bit set. ``fe35e694536``
  save_command_line fails to handle char with high bit set correctly
  when char is treated as signed.  This has been fixed. :gl:`#6316`
  :gl:`!12720`
- Account for null terminator when using NAME_MAX. ``2230c781761``
  The `NAME_MAX` value in `limits.h` is not guaranteed to include space
  for the terminating null character in a string. This can cause
  unexpected behavior on some platforms, such as a directory scan
  stopping too soon if a 255-character filename is encountered.
  Buffers intended to hold filenames are now allocated with `NAME_MAX +
  1` bytes. :gl:`#6324` :gl:`!12903`
- Prevent excessive RRL table scans under load. ``76afd2b2b65``
  Bound RRL entry recycling to prevent large tables from delaying other
  responses. :gl:`#6351` :gl:`!12794`
- Named-checkconf exits without returning a error with a bad command
  line. ``f187d92dde7``
  Named-checkconf was exiting with a 0 exit status when there was a bad
  command line argument.  This meant that `named-checkconf $ARGS &&
  reload` could call reload when $ARGS was bad.  This has been fixed.
  :gl:`#6400` :gl:`!12727`
- Unlink the temporary file on rename failure in
  masterdump.c:closeandrename. ``9fd230d7e06``
  If the rename fails in masterdump.c:closeandrename there is no useful
  purpose keeping the temporary file. We already remove it on other
  error conditions in that function. :gl:`#6405` :gl:`!12741`
- Statistics channel serves data on unregistered URL prefixes.
  ``89ad99d551d``
  The code to match the requested URL with the URLs named serves wasn't
  correct.  Truncated request URLs where being matched when they
  shouldn't have been.  This has been fixed.  :gl:`#6415` :gl:`!12789`
- Fix a crash on OpenBSD when a signal reaches an idle worker thread.
  ``2e7855b1577``
  On OpenBSD, a signal delivered to named while one of its worker
  threads was idle could make the server abort with a fatal "Operation
  canceled" error, because OpenBSD reports such an interrupted wait
  differently from Linux and the other supported systems. The wait is
  now resumed after the signal, as it already was elsewhere. :gl:`#6427`
  :gl:`!12771`
- Resolve names in insecure zones whose apex answers with a CNAME.
  ``ffa1efabddb``
  A validating resolver returned SERVFAIL for names in an unsigned zone
  whose apex answers with a CNAME, because the validator refused to look
  up the DS proof that shows the zone is insecure. That lookup is now
  allowed, and the cache keeps a CNAME next to other records at the same
  name (including the parent's delegation data) instead of deleting one
  for the other, choosing the fresher record at lookup time; this
  supersedes the earlier fix for stale answers after a record changes to
  or from a CNAME. :gl:`#6435` :gl:`!12890`
- Add sign delay to offline KSK ZRRSIG state timing. ``6a4acfe5a43``
  With offline KSK, the ZRRSIG state of a ZSK was derived from the key
  timing without the sign delay, and retire-safety only counted towards
  the next rekey time, so during a ZSK rollover the signatures were
  reported omnipresent (or hidden) days too early. Signing itself is not
  affected. :gl:`!12863`
- Fix TSIG session loss across a reload. ``5b63fff3efc``
  Dynamic TSIG sessions negotiated through TKEY were saved to disk by
  whichever view released the key ring first, which during a reload was
  the outgoing view — consuming sessions the incoming view was still
  using and forcing clients to renegotiate. Sessions are now saved only
  when the last view releases them, and a failed save no longer replaces
  the stored sessions with a truncated file. :gl:`!12802`
- GSS-TSIG keys now last as long as the negotiated context.
  ``c9af511a867``
  When GSS-TSIG is in use, the TSIG key that named derives from a
  completed TKEY negotiation always expired after at most one hour, even
  when the negotiated security context was valid for far longer, so
  clients had to repeat the TKEY exchange every hour to keep sending
  dynamic updates. named now keeps such a key for as long as that
  context remains valid, and applies the one-hour limit only when its
  lifetime cannot be determined. :gl:`!12783`
- Keep the zone table read section open until the zone is attached.
  ``5f35fd6c5c5``
  dns_zt_find() ended its qp-trie read transaction before checking the
  zone type and attaching to the zone, which is only safe as long as the
  callers in view.c happen to hold an RCU read lock of their own. The
  read section is now closed after the reference has been taken, so the
  zone can no longer be reclaimed out from under the lookup.
  :gl:`!12780`
- Pass the message pools to destroypools() in the declared order.
  ``23aef824bfb``
  The arguments were swapped, so the emptiness assertion named the wrong
  pool. :gl:`!12814`
- Support program suffixes of tsig-keygen and ddns-confgen.
  ``b2cd0c5d0a7``
  Suffixes different than .exe are used on Fedora. But those commands
  require exact names only. Allow switching between two variants only
  from prefix. That should work on all platforms. It should support also
  names like tsig-keygen-9.18 or tsig-keygen-9.21.
  The same case applies to named-checkzone and named-compilezone.
  :gl:`!12901`

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/bind | 13 +++++--------
 lfs/bind                     |  4 ++--
 2 files changed, 7 insertions(+), 10 deletions(-)

diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index 571294134..6959e4233 100644
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -127,7 +127,6 @@ usr/bin/nsupdate
 #usr/include/isc/dir.h
 #usr/include/isc/dnsstream.h
 #usr/include/isc/endian.h
-#usr/include/isc/entropy.h
 #usr/include/isc/errno.h
 #usr/include/isc/error.h
 #usr/include/isc/file.h
@@ -138,7 +137,6 @@ usr/bin/nsupdate
 #usr/include/isc/hash.h
 #usr/include/isc/hashmap.h
 #usr/include/isc/heap.h
-#usr/include/isc/helper.h
 #usr/include/isc/hex.h
 #usr/include/isc/histo.h
 #usr/include/isc/hmac.h
@@ -199,7 +197,6 @@ usr/bin/nsupdate
 #usr/include/isc/time.h
 #usr/include/isc/timer.h
 #usr/include/isc/tls.h
-#usr/include/isc/tm.h
 #usr/include/isc/types.h
 #usr/include/isc/urcu.h
 #usr/include/isc/url.h
@@ -241,18 +238,18 @@ usr/bin/nsupdate
 #usr/include/ns/types.h
 #usr/include/ns/update.h
 #usr/include/ns/xfrout.h
-usr/lib/libdns-9.20.29.so
+usr/lib/libdns-9.20.30.so
 #usr/lib/libdns.la
 #usr/lib/libdns.so
-usr/lib/libisc-9.20.29.so
+usr/lib/libisc-9.20.30.so
 #usr/lib/libisc.la
 #usr/lib/libisc.so
-usr/lib/libisccc-9.20.29.so
+usr/lib/libisccc-9.20.30.so
 #usr/lib/libisccc.la
 #usr/lib/libisccc.so
-usr/lib/libisccfg-9.20.29.so
+usr/lib/libisccfg-9.20.30.so
 #usr/lib/libisccfg.la
 #usr/lib/libisccfg.so
-usr/lib/libns-9.20.29.so
+usr/lib/libns-9.20.30.so
 #usr/lib/libns.la
 #usr/lib/libns.so
diff --git a/lfs/bind b/lfs/bind
index ae684c364..08fd4e3cd 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@
 
 include Config
 
-VER        = 9.20.29
+VER        = 9.20.30
 
 THISAPP    = bind-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 0707c48f2d8eb898578bf1d6c2e626e17f93b50394855dd697ccd7e8b98c0926366112cc7dab9f6becd3d01210958e365bcc60142558cdf4ce28002dcc2906de
+$(DL_FILE)_BLAKE2 = 5ab0bba53c631817984d03a630f2f71a52a06a5a17bae34229af723e9acddcd13d12c4f40a90ecdb1967ce2fa8406977a84590985a143b38dc93c5894839424a
 
 install : $(TARGET)
 
-- 
2.56.0

[PATCH] c-ares: Update to version 1.34.9

[Adolf Belka]

- Update from version 1.34.8 to 1.34.9
- Update of rootfile
- 11 GHSA security fixes
- Changelog
1.34.9
Security:
	* Memory corruption when an application cancels its lookups after a
	  connection failure. Please see
	  https://github.com/c-ares/c-ares/security/advisories/GHSA-wpr3-8q3r-4q8c
	* A DNS reply that arrived from a different server than the one queried could
	  be accepted. Please see
	  https://github.com/c-ares/c-ares/security/advisories/GHSA-fqh5-3x7m-wp44
	* Use-after-free of a lookup after shutting down a failed connection. Please
	  see https://github.com/c-ares/c-ares/security/advisories/GHSA-97vq-4mxv-7vhm
	* Use-after-free when an application cancels lookups from a callback, or shuts
	  a channel down. Please see
	  https://github.com/c-ares/c-ares/security/advisories/GHSA-rf6g-ww74-97qh
	* Use-after-free of a connection after the socket-state callback returns.
	  Please see
	  https://github.com/c-ares/c-ares/security/advisories/GHSA-mw23-pfg6-2x9r
	* Use-after-free when an application cancels lookups from a server-state
	  callback. Please see
	  https://github.com/c-ares/c-ares/security/advisories/GHSA-v33j-65h4-4ch8
	* Use-after-free of a server record when an application changes its DNS
	  servers from a callback. Please see
	  https://github.com/c-ares/c-ares/security/advisories/GHSA-pj7p-v3cw-hq66
	* Use-after-free of a cached DNS answer while the application is still reading
	  it. Please see
	  https://github.com/c-ares/c-ares/security/advisories/GHSA-grv7-fq5q-9vfc
	* Buffer overflow when `ares_dup()` or `ares_save_options()` runs while
	  another thread changes the servers. Please see
	  https://github.com/c-ares/c-ares/security/advisories/GHSA-ph6c-3cvx-mq6v
	* Uninitialized memory returned for a numeric IPv6 name with a prefix length.
	  Please see
	  https://github.com/c-ares/c-ares/security/advisories/GHSA-cfcv-8v2j-qj6r
	* The query cache could return an answer obtained using different EDNS
	  options. Please see
	  https://github.com/c-ares/c-ares/security/advisories/GHSA-wrgc-prmw-27xh
Changes:
	* Answers served from the query cache now report their remaining TTL rather
	  than the TTL originally received.
	* `ares_inet_pton()` rejects a "/bits" prefix length and returns 0, rather
	  than -1, for any input it cannot parse.
	* UDP replies must now come from the server's port as well as its address.
	  Custom `arecvfrom` socket functions (`ares_set_socket_functions_ex()` or
	  `ares_set_socket_functions()`) must fill in the full source address,
	  including the port. For compatibility, a reported port of 0 checks only the
	  address, but such implementations are insecure and should be fixed.
	  [PR #1370](https://github.com/c-ares/c-ares/pull/1370)
	* Document that socket functions and socket, configure and pending-write
	  callbacks must not call c-ares functions on the same channel.
	  [PR #1360](https://github.com/c-ares/c-ares/pull/1360)
Bugfixes:
	* `ares_dup()`: don't leave the new channel bound to the source channel.
	  [PR #1333](https://github.com/c-ares/c-ares/pull/1333)
	* `ares_init_options()`: don't report the default query cache as a caller-set
	  option. [PR #1354](https://github.com/c-ares/c-ares/pull/1354)
	* Clamp DNS record TTLs to the signed int range used by public APIs.
	  [PR #1313](https://github.com/c-ares/c-ares/pull/1313)
	* `ares_dns_write()`: reject messages larger than 64KB.
	  [PR #1314](https://github.com/c-ares/c-ares/pull/1314)
	* `ares_dns_parse()`: accept legacy compressed RDATA names.
	  [PR #1326](https://github.com/c-ares/c-ares/pull/1326)
	* `ares_parse_a_reply()`/`ares_parse_aaaa_reply()`: ignore a negative
	  `*naddrttls`. [PR #1302](https://github.com/c-ares/c-ares/pull/1302)
	* select event backend: refuse descriptors >= `FD_SETSIZE` instead of
	  overflowing `fd_set`. [PR #1312](https://github.com/c-ares/c-ares/pull/1312)
	* Strip inline comments from resolv.conf values.
	  [PR #1276](https://github.com/c-ares/c-ares/pull/1276)
	* Ignore absurd resolv.conf retry/attempts values.
	  [PR #1315](https://github.com/c-ares/c-ares/pull/1315)
	* Zero-initialize the server config when parsing nameserver URIs.
	  [PR #1325](https://github.com/c-ares/c-ares/pull/1325)
	* URI parsing: roll back the ':' probe when it lands past the '@'.
	  [PR #1265](https://github.com/c-ares/c-ares/pull/1265)
	* Do not assume `gethostname()` NUL-terminates its buffer.
	  [PR #1269](https://github.com/c-ares/c-ares/pull/1269)
	* Combine the hash table seed with XOR instead of OR.
	  [PR #1330](https://github.com/c-ares/c-ares/pull/1330)
	* Turn off stdio buffering when loading a file.
	  [PR #939](https://github.com/c-ares/c-ares/pull/939)
	* Guard `pipe2()` on Apple platforms to prevent unguarded availability
	  warnings. [PR #1328](https://github.com/c-ares/c-ares/pull/1328)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/packages/c-ares | 2 +-
 lfs/c-ares                       | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/config/rootfiles/packages/c-ares b/config/rootfiles/packages/c-ares
index 12a246147..cc09b90c1 100644
--- a/config/rootfiles/packages/c-ares
+++ b/config/rootfiles/packages/c-ares
@@ -7,7 +7,7 @@
 #usr/lib/libcares.la
 #usr/lib/libcares.so
 usr/lib/libcares.so.2
-usr/lib/libcares.so.2.19.7
+usr/lib/libcares.so.2.19.8
 #usr/lib/pkgconfig/libcares.pc
 #usr/share/man/man3/ares_cancel.3
 #usr/share/man/man3/ares_create_query.3
diff --git a/lfs/c-ares b/lfs/c-ares
index db68a8787..8efdb434a 100644
--- a/lfs/c-ares
+++ b/lfs/c-ares
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Tools for asynchronous name resolves
 
-VER        = 1.34.8
+VER        = 1.34.9
 
 THISAPP    = c-ares-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = c-ares
-PAK_VER    = 6
+PAK_VER    = 7
 
 DEPS       =
 
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = b5a88811d8ee6a0c06737746a356bc1fc7c13416b11a0af3a2e6cab092d97adebb93234cf73b97a12b06b764f8562272a793961dc3367024c4322d923ac43f9f
+$(DL_FILE)_BLAKE2 = b708d8e302f7b2b8dcd9a30b9faa0864506990ced276ad4718b2cc3bbabbd548dcf3493033e777787089ba58c60e65f84d6ff47097a93cf1f3367490a3b00ee8
 
 install : $(TARGET)
 
-- 
2.56.0

[PATCH] core206: Ship bind

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/206/filelists/bind | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/206/filelists/bind

diff --git a/config/rootfiles/core/206/filelists/bind b/config/rootfiles/core/206/filelists/bind
new file mode 120000
index 000000000..48a0ebaef
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/bind
@@ -0,0 +1 @@
+../../../common/bind
\ No newline at end of file
-- 
2.56.0

[PATCH] core206: Ship elfutils

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/206/filelists/elfutils | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/206/filelists/elfutils

diff --git a/config/rootfiles/core/206/filelists/elfutils b/config/rootfiles/core/206/filelists/elfutils
new file mode 120000
index 000000000..8367974bb
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/elfutils
@@ -0,0 +1 @@
+../../../common/elfutils
\ No newline at end of file
-- 
2.56.0

[PATCH] core206: Ship ethtool

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/206/filelists/ethtool | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/206/filelists/ethtool

diff --git a/config/rootfiles/core/206/filelists/ethtool b/config/rootfiles/core/206/filelists/ethtool
new file mode 120000
index 000000000..494a53e9d
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/ethtool
@@ -0,0 +1 @@
+../../../common/ethtool
\ No newline at end of file
-- 
2.56.0

[PATCH] core206: Ship iproute2

[Adolf Belka]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/core/206/filelists/iproute2 | 1 +
 1 file changed, 1 insertion(+)
 create mode 120000 config/rootfiles/core/206/filelists/iproute2

diff --git a/config/rootfiles/core/206/filelists/iproute2 b/config/rootfiles/core/206/filelists/iproute2
new file mode 120000
index 000000000..05f0f71fb
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/iproute2
@@ -0,0 +1 @@
+../../../common/iproute2
\ No newline at end of file
-- 
2.56.0

[PATCH] elfutils: Update to version 0.197

[Adolf Belka]

- Update from version 0.196 to 0.197
- Update of rootfile
- Changelog
0.197
THREAD-SAFETY: New document describing the thread safety model for elfutils
	       libraries when built with --enable-thread-safety.  Thread
	       safety support remains experimental.
backends: Add unwinding support for alpha core files and processes.
libdebuginfod: The progress callback function is now also invoked when
	       waiting for a server's initial response.
libdw: dwarf_begin_elf_type is now exported from libdw.so.  Previously
       this function was missing from the exported symbols.
libelf: Improved handling of corrupt ZSTD compression headers.
readelf: Improved handling of corrupt .gdb_index and .debug_cu_index
	 sections.
translations: New Swedish translation.
unstrip: Improved handling of corrupt symbol tables.  When -m is given,
	 the -d output path is now built from the module basename to avoid
	 writing the reconstructed module image outside the intended
	 output directory.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/elfutils | 7 ++++---
 lfs/elfutils                     | 4 ++--
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/config/rootfiles/common/elfutils b/config/rootfiles/common/elfutils
index 7db569486..aa6e9388a 100644
--- a/config/rootfiles/common/elfutils
+++ b/config/rootfiles/common/elfutils
@@ -29,15 +29,15 @@ usr/include/elfutils/libdwfl_stacktrace.h
 #usr/include/gelf.h
 #usr/include/libelf.h
 #usr/include/nlist.h
-usr/lib/libasm-0.196.so
+usr/lib/libasm-0.197.so
 #usr/lib/libasm.a
 #usr/lib/libasm.so
 usr/lib/libasm.so.1
-usr/lib/libdw-0.196.so
+usr/lib/libdw-0.197.so
 #usr/lib/libdw.a
 #usr/lib/libdw.so
 usr/lib/libdw.so.1
-usr/lib/libelf-0.196.so
+usr/lib/libelf-0.197.so
 #usr/lib/libelf.a
 #usr/lib/libelf.so
 usr/lib/libelf.so.1
@@ -50,6 +50,7 @@ usr/lib/libelf.so.1
 #usr/share/locale/ja/LC_MESSAGES/elfutils.mo
 #usr/share/locale/ka/LC_MESSAGES/elfutils.mo
 #usr/share/locale/pl/LC_MESSAGES/elfutils.mo
+#usr/share/locale/sv/LC_MESSAGES/elfutils.mo
 #usr/share/locale/uk/LC_MESSAGES/elfutils.mo
 #usr/share/man/man1/debuginfod-find.1
 #usr/share/man/man1/eu-elfclassify.1
diff --git a/lfs/elfutils b/lfs/elfutils
index 25038fad8..ab44d16c1 100644
--- a/lfs/elfutils
+++ b/lfs/elfutils
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Higher-level library to access ELF files
 
-VER        = 0.196
+VER        = 0.197
 
 THISAPP    = elfutils-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 13e5aa27b839b02962a45cae1b9b603e7e95d428a16f9bdf15d04201529a9c714a53701cacc65c65fa32082d121a7e196bd242739d4cfd1f40a69efd0f1252f6
+$(DL_FILE)_BLAKE2 = bfcb2d2ff1d20bc50513e95b820df1931ca51333756ab166049518d5978c72a4ebb9932b724331a46fff826897d81548828224adc840e9b0f16719fbc34056b2
 
 install : $(TARGET)
 
-- 
2.56.0

[PATCH] ethtool: Update to version 7.2

[Adolf Belka]

- Update from version 7.1 to 7.2
- No change in rootfile
- Changelog
7.2
	* Feature: support for KSZ87xx PHY tunables (--{get,set}-phy-tunable)
	* Fix: cmis: fix printing of Tx bias current (-m)
	* Fix: cmis: fix printing of channel-level flags (-m)
	* Fix: cmis: fix printing of CDB EPL pages (-m)
	* Fix: printing of transmitter technology for CMIS transceivers (-m)
	* Fix: avoid undefined behavior with CMIS transceivers (-m)
	* Fix: add missing CMIS transmitter technologies (-m)
	* Fix: printing of attenuation and wavelength (-m)
	* Fix: printing of link length (-m)
	* Fix: sfpid: print all implemented options (-m)
	* Fix: sfpid: print all compliance codes (-m)
	* Fix: qsfp: print all compliance codes (-m)
	* Fix: module-eeprom: clamp data length to attribute payload size (-m)
	* Fix: validate module EEPROM offset and length (-m)
	* Fix: rss: bound hash function masks in text and JSON output (-x)
	* Fix: fbnic: fix off-by-one shift in reg dump parser (-d)
	* Fix: fbnic: Fix various TX and RX CSR fields decoding (-d)
	* Fix: fbnic: Fix register dump names and bit labels (-d)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/ethtool | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/ethtool b/lfs/ethtool
index 62f0cf50e..d376b2eac 100644
--- a/lfs/ethtool
+++ b/lfs/ethtool
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 7.1
+VER        = 7.2
 
 THISAPP    = ethtool-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 54b3e8764e0c1ff960a09ad2f321d926a0cd7561066747db639d4167124276cea9d9b7b3e10da6df2d17635f392570f8f151d95433f3029e4d522c935796f719
+$(DL_FILE)_BLAKE2 = 5aed7beb8f4d0912f8bbda522ef699697c011df4ee6ff5352032fb8ad1e197748f5c21b81508b88c96d686a2452a4fef1de0f1cad568889d353b994c82548d78
 
 install : $(TARGET)
 
-- 
2.56.0

[PATCH] iproute2: Update to version 7.3.0

[Adolf Belka]

- Update from version 7.2.0 to 7.3.0
- No change in rootfile
- Changelog is not provided. Details of changes for version 7.3.0 can be found from
   the git commit changes
   https://git.kernel.org/pub/scm/network/iproute2/iproute2.git

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/iproute2 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/iproute2 b/lfs/iproute2
index c0881fc28..e927779a4 100644
--- a/lfs/iproute2
+++ b/lfs/iproute2
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 7.2.0
+VER        = 7.3.0
 #          https://mirrors.edge.kernel.org/pub/linux/utils/net/iproute2/
 
 THISAPP    = iproute2-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE)             = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = e03cb92aa6c1f092b144614a44b013b91573099a08f32a25b3fa894470d5940fd7737a5bb0add58c1227ad53a4db159574f4fcded128d2ef219aa55a213bc6c7
+$(DL_FILE)_BLAKE2 = 0c18f299eabb234389babd63bc52953cf1245387b37b73d0af834983346413b23e9c1b70d5246a1328dbaaf00de26fa5690f4d5c88b59ffa5582c8358f066be9
 
 install : $(TARGET)
 
-- 
2.56.0