* [PATCH] core206: Ship patch
2026-10-26 15:59 [PATCH] core206: Ship openldap Adolf Belka
@ 2026-10-26 15:59 ` Adolf Belka
2026-10-26 15:59 ` [PATCH] openldap: Update to version 2.7.2 Adolf Belka
` (2 subsequent siblings)
3 siblings, 0 replies; 5+ messages in thread
From: Adolf Belka @ 2026-10-26 15:59 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
config/rootfiles/core/206/filelists/patch | 1 +
1 file changed, 1 insertion(+)
create mode 120000 config/rootfiles/core/206/filelists/patch
diff --git a/config/rootfiles/core/206/filelists/patch b/config/rootfiles/core/206/filelists/patch
new file mode 120000
index 000000000..27a38252a
--- /dev/null
+++ b/config/rootfiles/core/206/filelists/patch
@@ -0,0 +1 @@
+../../../common/patch
\ No newline at end of file
--
2.56.0
^ permalink raw reply [flat|nested] 5+ messages in thread* [PATCH] openldap: Update to version 2.7.2
2026-10-26 15:59 [PATCH] core206: Ship openldap Adolf Belka
2026-10-26 15:59 ` [PATCH] core206: Ship patch Adolf Belka
@ 2026-10-26 15:59 ` Adolf Belka
2026-10-26 15:59 ` [PATCH] patch: Update to version 2.8.1 Adolf Belka
2026-10-26 15:59 ` [PATCH] shairport-sync: Update to version 5.6.2 Adolf Belka
3 siblings, 0 replies; 5+ messages in thread
From: Adolf Belka @ 2026-10-26 15:59 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2.7.1 to 2.7.2
- No change in rootfile
- Changelog
2.7.2
Added slapd support for comments with ACLS (ITS#5500,ITS#10619)
Added slapd-config option to throttle when qtime exceeds threshold (ITS#10617)
Added slapo-nssov option to forward updates (ITS#8149)
Fixed libldap with deeply nested URL filters (ITS#10585)
Fixed slapd GnuTLS client-cert verification handling (ITS#10616)
Fixed slapo-accesslog handling of per-op info state (ITS#10597)
Fixed slapo-sssvlv control parsing (ITS#10590)
Contrib
Fixed slappw-sha2 pointer aliasing (ITS#10611)
Fixed denyop rejection handling (ITS#10635)
Minor Cleanup
ITS#8617
ITS#8884
ITS#10455
ITS#10581
ITS#10573
ITS#10586
ITS#10587
ITS#10588
ITS#10589
ITS#10592
ITS#10593
ITS#10594
ITS#10595
ITS#10596
ITS#10599
ITS#10600
ITS#10602
ITS#10603
ITS#10606
ITS#10607
ITS#10608
ITS#10609
ITS#10610
ITS#10612
ITS#10620
ITS#10621
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/openldap | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lfs/openldap b/lfs/openldap
index 9da734d98..a19e86729 100644
--- a/lfs/openldap
+++ b/lfs/openldap
@@ -24,7 +24,7 @@
include Config
-VER = 2.7.1
+VER = 2.7.2
THISAPP = openldap-$(VER)
DL_FILE = $(THISAPP).tgz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = cad365ea14819b4e78c0104c687a3b6c6aa67de2b48a2bdf6a31c0e39a9e5e49f8d0e61e80ee43ba5c84b0a986a4bc683b404b6ac6f391667aec3f16333244ff
+$(DL_FILE)_BLAKE2 = bc06199ffa1d1f0f96d6accafc66aeff1fd2053752443121b740d1a7dc63efa257f0bcf030a60b141ee486fd87ee5a27ba99b753024778e7c127ced49c70dce6
install : $(TARGET)
--
2.56.0
^ permalink raw reply [flat|nested] 5+ messages in thread
* [PATCH] patch: Update to version 2.8.1
2026-10-26 15:59 [PATCH] core206: Ship openldap Adolf Belka
2026-10-26 15:59 ` [PATCH] core206: Ship patch Adolf Belka
2026-10-26 15:59 ` [PATCH] openldap: Update to version 2.7.2 Adolf Belka
@ 2026-10-26 15:59 ` Adolf Belka
2026-10-26 15:59 ` [PATCH] shairport-sync: Update to version 5.6.2 Adolf Belka
3 siblings, 0 replies; 5+ messages in thread
From: Adolf Belka @ 2026-10-26 15:59 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 2.8 to 2.8.1
- No change in rootfile
- 1 CVE fix
- Changelog
2.8.1
* Prevent creation of out-of-tree files (CVE-2026-115207).
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/patch | 9 +++++----
1 file changed, 5 insertions(+), 4 deletions(-)
diff --git a/lfs/patch b/lfs/patch
index 2569222de..47cd698da 100644
--- a/lfs/patch
+++ b/lfs/patch
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 2.8
+VER = 2.8.1
THISAPP = patch-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 687f566201adb2e32c3832b911adaddd9994aacb25b66886d6315bfe2752e09fd551b3856a39024b8472b2d95efebf412d4a7c085812a13620de811073a397ad
+$(DL_FILE)_BLAKE2 = bee49679ca7b823b5d0c8c380402c8a395c64a55f30669344dc645c2566c7bc5ae98aa363e59efe580ed2f1e783bed3b54e34bbd716d70f3f41aae8c8f7c082b
install : $(TARGET)
@@ -77,7 +77,8 @@ $(subst %,%_BLAKE2,$(objects)) :
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
- cd $(DIR_APP) && ./configure --prefix=$(PREFIX)
+ cd $(DIR_APP) && ./configure \
+ --prefix=$(PREFIX)
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
@rm -rf $(DIR_APP)
--
2.56.0
^ permalink raw reply [flat|nested] 5+ messages in thread
* [PATCH] shairport-sync: Update to version 5.6.2
2026-10-26 15:59 [PATCH] core206: Ship openldap Adolf Belka
` (2 preceding siblings ...)
2026-10-26 15:59 ` [PATCH] patch: Update to version 2.8.1 Adolf Belka
@ 2026-10-26 15:59 ` Adolf Belka
3 siblings, 0 replies; 5+ messages in thread
From: Adolf Belka @ 2026-10-26 15:59 UTC (permalink / raw)
To: development; +Cc: Adolf Belka
- Update from version 5.6.1 to 5.6.2
- No change in rootfile
- Changelog
5.6.2
Security-Related Bug Fix
Malformed DACP TLV (Tag-Length-Value) tokens could generate out-of-bounds (OOB)
reads in Shairport Sync. The bug fix was to improve checking of DACP TLV
payloads. Thanks to memoriaru for their report.
Enhancement
This enhancement changes how frames of audio are referenced, so that long sessions
(greater than about 12.5 hours) do not go silent due to signed 32-bit integer
sign overflow.
Background: AirPlay associates a 32-bit RTP timestamp, a timing reference number,
with every audio frame. After playing 2^31 - 1 frames of buffered audio --
about 12.5 hours at 48,000 frames per second -- the total number of frames
played exceeds 2^31 -1 and goes negative due to sign overflow. Timing
calculations fail, causing frames to be dropped and the player to go silent.
The enhancement develops 64-bit timestamps from RTP timestamps of the frames as
they are processed in preparation for playing. Many thanks to Martin Man for
their patient troubleshooting, PR and initial report.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
lfs/shairport-sync | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/lfs/shairport-sync b/lfs/shairport-sync
index 04a468754..af68ab0b4 100644
--- a/lfs/shairport-sync
+++ b/lfs/shairport-sync
@@ -26,7 +26,7 @@ include Config
SUMMARY = An AirPlay audio player
-VER = 5.6.1
+VER = 5.6.2
THISAPP = shairport-sync-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = shairport-sync
-PAK_VER = 21
+PAK_VER = 22
DEPS = alsa avahi ffmpeg libdaemon libplist nqptp soxr
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 7761d774d99b0d0c3adcd10a439aabbf365151676b2e831d60130328566daade09b00055736e6e65e8174f7c150fca5fd7cd6d1c39291d605cc323c20419b0a6
+$(DL_FILE)_BLAKE2 = 6017dd15818ae3f561d8f2a6572bf9368f970d29ec394e7e3041726474e8fb66a9a421aac36159ee8287c03ddb06a185688b913602dbef969eb3906f7654aaa5
install : $(TARGET)
--
2.56.0
^ permalink raw reply [flat|nested] 5+ messages in thread