public inbox for ipfire-scm@lists.ipfire.org
 help / color / mirror / Atom feed
* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 8a88d06663292a88c0b3924ea9e90171b81899c2
@ 2023-11-21 19:14 Peter Müller
  0 siblings, 0 replies; only message in thread
From: Peter Müller @ 2023-11-21 19:14 UTC (permalink / raw)
  To: ipfire-scm

[-- Attachment #1: Type: text/plain, Size: 95928 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  8a88d06663292a88c0b3924ea9e90171b81899c2 (commit)
       via  88858cb16625b888048e17a821d9710183c7b723 (commit)
       via  ffa9119c54f62f11e0de6913d1e8b3cd01451d62 (commit)
       via  641f99fd625d70bdc8127cca306dc3880a2477ad (commit)
       via  239a269761cd612efbc4177b56177094ce4e5830 (commit)
       via  3622e130f2ec88ecb7a8fa32e17ff8d1831feb05 (commit)
       via  307d97ad2fa66fe99797dc4d079bccab17bee54c (commit)
       via  837bbbf4480e0abdbb6f5807f975be9ae0630b97 (commit)
       via  4e51c36c695b1bbd322e7580910e75a4136ddcff (commit)
       via  8bdfd8b99887a1686c9a92622e5c7e4762e914dd (commit)
       via  eb8ab3a1a8e39824267d998c884d68ee7ef5c18a (commit)
       via  5197e7bc6ab12c9610b49e9161693c6e8cc699f0 (commit)
       via  fa92e618c1e7b5e0a8d5e857189c4c74d1e8aefe (commit)
       via  8dfe5e4be790efaa4a841616ad65815d4f63127a (commit)
       via  d99c8a28ecfd6c25fafd8b27fa284563e44c0201 (commit)
       via  942b753cd802a0cfd393b443a294c14d56faa381 (commit)
       via  bbd49cbcca5cd025da2ffc082be8db63cf222184 (commit)
       via  726c4b0f4ab6cc53ccf0b756b585681591226966 (commit)
       via  c434310d036d04aa68f265f8df8368cf0157f6eb (commit)
       via  dfcdebc02969fe6cbd9edd1812fd0fc04b2ccf2e (commit)
       via  d7e237a4f5accbffbcb0f5597b9518efba42e749 (commit)
       via  307be8b0163035ba2b167cd9d825186df792e02a (commit)
       via  4b64641b381dd915bd1ab7d392a9f616ce31e90c (commit)
       via  bde13ed56b1226e2cc39179c495ca06b5161670d (commit)
       via  f376da91aa368320f0393bff29c12cd4e54786ea (commit)
       via  b8894582a71fc1b03b22d31da42a6fd5f35db5fe (commit)
       via  270a3c534d2eeb040182a950a2011884945d04ca (commit)
       via  1d552885c7c634733db73619cfc4651783d8a776 (commit)
      from  81b3cf237ccd48d7e0481b3d81b0406fa66ce578 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 8a88d06663292a88c0b3924ea9e90171b81899c2
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:13:35 2023 +0000

    Core Update 182: Ship iana-etc
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit 88858cb16625b888048e17a821d9710183c7b723
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Nov 8 22:58:02 2023 +0100

    iana-etc: Update to version 20231026
    
    - Update from version 20230810 to 20231026
    - Update of rootfile not required
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit ffa9119c54f62f11e0de6913d1e8b3cd01451d62
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:13:12 2023 +0000

    Core Update 182: Ship harfbuzz
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit 641f99fd625d70bdc8127cca306dc3880a2477ad
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Nov 8 22:58:01 2023 +0100

    harfbuzz: Update to version 8.2.2
    
    - Update from version 8.1.1 to 8.2.2
    - Update of rootfile
    - Changelog
        8.2.2
    	- Fix regression from 8.1.0 in shaping fonts with duplicate feature tags.
    	- Fix regression from 8.2.0 in parsing CSS-style feature strings.
    	- Variable fonts instanciation now handles more tables.
    	- Various CMake build improvements.
    	- various fixes to build without errors with gcc 4.9.2.
        8.2.1
    	- Unicode 15.1 support.
        8.2.0
    	- Various build and fuzzing fixes
    	- Improvements to COLRv1 painting.
    	- New API:
    		+hb_paint_color_glyph_func_t
    		+hb_paint_funcs_set_color_glyph_func
    		+hb_paint_color_glyph
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit 239a269761cd612efbc4177b56177094ce4e5830
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Nov 8 22:58:00 2023 +0100

    git: Update to version 2.42.1
    
    - Update from version 2.42.0 to 2.42.1
    - Update of rootfile not required
    - Changelog
    	 * Tests that are known to pass with LSan are now marked as such.
    	 * Flaky "git p4" tests, as well as "git svn" tests, are now skipped
    	   in the (rather expensive) sanitizer CI job.
    	 * Tests with LSan from time to time seem to emit harmless message
    	   that makes our tests unnecessarily flaky; we work it around by
    	   filtering the uninteresting output.
    	 * GitHub CI workflow has learned to trigger Coverity check.
    	 * Overly long label names used in the sequencer machinery are now
    	   chopped to fit under filesystem limitation.
    	 * Scalar updates.
    	 * Tweak GitHub Actions CI so that pushing the same commit to multiple
    	   branch tips at the same time will not waste building and testing
    	   the same thing twice.
    	 * The commit-graph verification code that detects mixture of zero and
    	   non-zero generation numbers has been updated.
    	 * "git diff -w --exit-code" with various options did not work
    	   correctly, which is being addressed.
    	 * transfer.unpackLimit ought to be used as a fallback, but overrode
    	   fetch.unpackLimit and receive.unpackLimit instead.
    	 * The use of API between two calls to require_clean_work_tree() from
    	   the sequencer code has been cleaned up for consistency.
    	 * "git diff --no-such-option" and other corner cases around the exit
    	   status of the "diff" command has been corrected.
    	 * "git for-each-ref --sort='contents:size'" sorts the refs according
    	   to size numerically, giving a ref that points at a blob twelve-byte
    	   (12) long before showing a blob hundred-byte (100) long.
    	 * Various fixes to the behavior of "rebase -i" when the command got
    	   interrupted by conflicting changes.
    	 * References from description of the `--patch` option in various
    	   manual pages have been simplified and improved.
    	 * "git grep -e A --no-or -e B" is accepted, even though the negation
    	   of "or" did not mean anything, which has been tightened.
    	 * The completion script (in contrib/) has been taught to treat the
    	   "-t" option to "git checkout" and "git switch" just like the
    	   "--track" option, to complete remote-tracking branches.
    	 * "git diff --no-index -R <(one) <(two)" did not work correctly,
    	   which has been corrected.
    	 * Update "git maintenance" timers' implementation based on systemd
    	   timers to work with WSL.
    	 * "git diff --cached" codepath did not fill the necessary stat
    	   information for a file when fsmonitor knows it is clean and ended
    	   up behaving as if it is not clean, which has been corrected.
    	 * Clarify how "alias.foo = : git cmd ; aliased-command-string" should
    	   be spelled with necessary whitespaces around punctuation marks to
    	   work.
    	 * HTTP Header redaction code has been adjusted for a newer version of
    	   cURL library that shows its traces differently from earlier
    	   versions.
    	 * An error message given by "git send-email" when given a malformed
    	   address did not give correct information, which has been corrected.
    	 * UBSan options were not propagated through the test framework to git
    	  run via the httpd, unlike ASan options, which has been corrected.
    	 Also contains various documentation updates, code clean-ups and minor fixups.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit 3622e130f2ec88ecb7a8fa32e17ff8d1831feb05
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:12:17 2023 +0000

    ghostscript: Increment package version number
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit 307d97ad2fa66fe99797dc4d079bccab17bee54c
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Nov 8 22:57:59 2023 +0100

    ghostscript: Update to version 10.02.1
    
    - Update from version 10.01.2 to 10.02.1
    - Update of rootfile
    - Changelog - these are highlights. For more details the git commits have to be used.
        10.02.1
    	release fixes CVE-2023-43115.
    	CVE-2023-43115 affects all Ghostscript/GhostPDL versions prior to 10.02.0.
    	CVE-2023-43115 is a remote code execution risk, so we recommend upgrading to
    	 version 10.02.0 as a matter of urgency
        10.02.0
    	release fixes CVE-2023-43115.
    	CVE-2023-43115 affects all Ghostscript/GhostPDL versions prior to 10.02.0.
    	CVE-2023-43115 is a remote code execution risk, so we recommend upgrading to
    	 version 10.02.0 as a matter of urgency
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit 837bbbf4480e0abdbb6f5807f975be9ae0630b97
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:10:28 2023 +0000

    Core Update 182: Remove orphaned gawk files
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit 4e51c36c695b1bbd322e7580910e75a4136ddcff
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:09:57 2023 +0000

    Core Update 182: Ship gawk
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit 8bdfd8b99887a1686c9a92622e5c7e4762e914dd
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:09:46 2023 +0000

    Core Update 182: Ship dhcpcd
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit eb8ab3a1a8e39824267d998c884d68ee7ef5c18a
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Nov 8 22:57:58 2023 +0100

    gawk: Update to version 5.3.0
    
    - Update from version 5.2.2 to 5.3.0
    - Update of rootfile
    - Changelog
        5.3.0
    	1. Infrastructure changes: Removed the use of libsigsegv. The
    	   value-add was never very much and it caused problems in some
    	   environments.
    	2. In keeping with new features in BWK awk, gawk now has built-in
    	   CSV file parsing. The behavior is intended to be identical to
    	   that of the "One True AWK" when --csv is applied. See the
    	   manual for details.
    	3. Also in keeping with BWK awk, gawk now supports a new \u escape
    	   sequence. This should be followed by 1-8 hexadecimal digits. The
    	   given code point is converted to its corresponding multibyte encoding
    	   for storage inside gawk. See the manual.
    	4. If PROCINFO["BUFFERPIPE"] exists, then pipe output is buffered.
    	   You can also use PROCINFO["command", "BUFFERPIPE"]. See the manual
    	   for details.
    	5. Because of the additional `do_csv' variable in the API, which breaks
    	   binary compatibility, the API major version was updated to 4 and
    	   the minor version was reset to zero.  The API remains source code
    	   compatible; that is, existing extensions should only require recompilation.
    	6. The manual now requires Texinfo 7.1 and its texinfo.tex for formatting.
    	   As a result, we no longer need to pre-process it, removing the need
    	   for gawktexi.in and leaving just gawk.texi.
    	7. And of course, there have been several minor code cleanups and bug fixes.
    	   See the ChangeLog for details.
        5.2.x
    	1. The readdir extension has been updated with additonal code and
    	   features, see the manual or its man page. As a result, the
    	   readdir_test.c extension has been removed.
    	2. We have a new translation: Ukranian.
    	3. Several subtle issues related to null regexp matches around
    	   multibyte characters have been fixed.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit 5197e7bc6ab12c9610b49e9161693c6e8cc699f0
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Nov 8 22:57:57 2023 +0100

    dhcpcd: Update to version 10.0.4
    
    - Update from version 10.0.2 to 10.0.4
    - Update of rootfile not required
    - Two patches removed as the fixes have been included in the source tarball
    - Changelog
        10.0.4
    	    privsep: allow __NR_mmap2 call by @olegartys in #253
    	    privsep: allow __NR_clock_gettime32 syscall by @olegartys in #254
    	    compat/arc4random.c: use memset instead of explicit_bzero by
    	     @ffontaine in #252
    	    privsep: avoid SIGPIPE errors when scripts write to stderr/stdout after
    	     dhcpcd is daemonised
        10.0.3
    	    Do not crash on dhcpcd test run by @pemensik in #231
    	    Add automated CI builds for Ubuntu, OpenBSD, FreeBSD and NetBSD by
    	     @tobhe in #229
    	    dhcpcd: Fix off-by-one overflow when read() writes full BUFSIZ by
    	     @tobhe in #236
    	    privsep: fix strlcpy overflow in psp_ifname by @tobhe in #239
    	    ci: execute tests after successful build by @tobhe in #243
    	    compat: update arc4random() to newer chacha20 based version from OpenBSD by
    	     @tobhe in #227
    	    Support libcrypto for hmac and sha256 by @tobhe in #223
    	    Use a local variable instead of the optind by @gotthardp in #86
    	    Send correct amount of used buffer for prefix exclude option by
    	     @ctomahogh in #250
    	    compat: use OpenSSL RAND_priv_bytes() for entropy by @tobhe in #248
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit fa92e618c1e7b5e0a8d5e857189c4c74d1e8aefe
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:08:24 2023 +0000

    Core Update 182: Ship and restart Unbound
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit 8dfe5e4be790efaa4a841616ad65815d4f63127a
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date:   Wed Nov 8 20:37:44 2023 +0100

    unbound: Update to 1.19.0
    
    For details see:
    https://nlnetlabs.nl/projects/unbound/download/#unbound-1-19-0
    
    Again: Changelog is IMHO too long to be published here...
    
    Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
    Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit d99c8a28ecfd6c25fafd8b27fa284563e44c0201
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:06:27 2023 +0000

    Core Update 182: Ship and restart Squid
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit 942b753cd802a0cfd393b443a294c14d56faa381
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date:   Wed Nov 8 10:58:37 2023 +0100

    squid: Update to 6.5
    
    For details see:
    https://github.com/squid-cache/squid/commits/v6
    
    Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
    Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit bbd49cbcca5cd025da2ffc082be8db63cf222184
Author: Matthias Fischer <matthias.fischer(a)ipfire.org>
Date:   Wed Nov 8 10:57:15 2023 +0100

    clamav: Update to 1.2.1
    
    For details see:
    https://blog.clamav.net/2023/10/clamav-121-113-104-010311-patch.html
    
    Excerpt:
    
    "ClamAV 1.2.1 is a patch release with the following fixes:
    
        Eliminate security warning about unused "atty" dependency.
    
        Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
    
        Build system: Fix link error with Clang/LLVM/LLD version 17. Patch courtesy of Yasuhiro Kimura.
    
        Fix alert-exceeds-max feature for files > 2GB and < max-filesize."
    
    Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org>
    Reviewed-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit 726c4b0f4ab6cc53ccf0b756b585681591226966
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Sat Nov 4 17:35:00 2023 +0000

    firewall: Reject outgoing TCP connections to port 25 by default
    
    This will affect new IPFire installations only, implementing a
    long-standing BCP for preemptively combating botnet spam. Reject is
    chosen over drop to reduce the likelihood for confusion during network
    troubleshooting.
    
    Cc: Michael Tremer <michael.tremer(a)ipfire.org>
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
    Tested-by: Peter Müller <peter.mueller(a)ipfire.org>

commit c434310d036d04aa68f265f8df8368cf0157f6eb
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Fri Sep 15 15:07:18 2023 +0000

    spectre-meltdown-checker: Update to 0.46
    
    See https://github.com/speed47/spectre-meltdown-checker/releases/tag/v0.46
    for this version's release notes.
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit dfcdebc02969fe6cbd9edd1812fd0fc04b2ccf2e
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:03:38 2023 +0000

    Core Update 182: Ship sqlite
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit d7e237a4f5accbffbcb0f5597b9518efba42e749
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Sep 13 12:14:14 2023 +0200

    sqlite: Update to version 3430100
    
    - Update from version 3430000 to 3430100
    - Update of rootfile not required
    - Changelog
        3.34.1
    	Fix a regression in the way that the sum(), avg(), and total() aggregate functions
    	 handle infinities.
    	Fix a bug in the json_array_length() function that occurs when the argument comes
    	 directly from json_remove().
    	Fix the omit-unused-subquery-columns optimization (introduced in in version 3.42.0)
    	 so that it works correctly if the subquery is a compound where one arm is
    	 DISTINCT and the other is not.
    	Other minor fixes.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit 307be8b0163035ba2b167cd9d825186df792e02a
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:03:10 2023 +0000

    Core Update 182: Ship qpdf
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit 4b64641b381dd915bd1ab7d392a9f616ce31e90c
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Sep 13 12:14:13 2023 +0200

    qpdf: Update to version 11.6.1
    
    - Update from version 11.5.0 to 11.6.1
    - Update of rootfile
    - Changelog
        11.6.1: release
            * Fix a logic error introduced in 11.6.0 in the fix to
              copyForeignObject. The bug could result in some pages not being
              copied.
        11.6.0: release
            * ascii85 parser: ignore spaces everywhere including between ~
              and >. Fixes #973.
            * Bug fix: with --pages, if one of the external files had warnings
              but the main file did not, the warning was previously not taken
              into consideration when determining the exit status.
            * Put quotation marks around the command in completion output to
              better handle spaces in paths. It is not a perfect fix (ideally,
              full shell-compatible quoting should be used), but it handles more
              cases than the old code and should handle all reasonable cases of
              qpdf being in a directory with a space in its name, which is
              common in Windows. Fixes #1021.
            * Move check for random number device to runtime instead of
              compile time. Since, by default, the crypto provider provides
              random numbers, runtime determination of a random number device is
              usually not needed. Fixes #1022.
            * Maintain links to foreign pages when copying foreign objects.
              This allows hyperlinks in imported files to work. Fixes #1003.
            * Bug fix: Return a null object if an attempt is made to to copy a
              foreign /Pages object with copyForeignObject. This corrects a
              possible crash. Fixes #1010.
            * Bug fix: Return a null object if an attempt is made to to copy a
              foreign /Pages object with copyForeignObject. Fixes #1003.
            * Add /MediaBox to a page if absent. Thanks M. Holger.
            * Use std::vector internally for Pl_Buffer to
              avoid incompatibility with C++20. Thanks to Zoe Clifford. Fixes #1024.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit bde13ed56b1226e2cc39179c495ca06b5161670d
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 19:02:15 2023 +0000

    Core Update 182: Ship jq
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

commit f376da91aa368320f0393bff29c12cd4e54786ea
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Sep 13 12:14:12 2023 +0200

    jq: Update to version 1.7
    
    - Update from version 1.6 to 1.7
    - This project had little happen to it for 5 years but is now going again
       https://jqlang.github.io/jq/
    - Update of rootfile
    - Changelog
        1.7
    	After a five year hiatus we're back with a GitHub organization, with new admins
             and new maintainers who have brought a great deal of energy to make a
             long-awaited and long-needed new release.  We're very grateful for all the new
             owners, admins, and maintainers.  Special thanks go to Owen Ou (@owenthereal)
             for pushing to set up a new GitHub organization for jq, Stephen Dolan (@stedolan)
             for transferring the jq repository to the new organization, @itchyny for doing a
             great deal of work to get the release done, Mattias Wadman (@wader) and Emanuele
             Torre (@emanuele6) for many PRs and code reviews.  Many others also contributed
             PRs, issues, and code reviews as well, and you can find their contributions in
             the Git log and on the [closed issues and PRs page]
             (https://github.com/jqlang/jq/issues?q=is%3Aclosed+sort%3Aupdated-desc).
    	Since the last stable release many things have happened:
    	- jq now lives at <https://github.com/jqlang>
    	- New maintainers, admins, and owners have been recruited.
    	  - A list of [current maintainers](https://github.com/jqlang/jq/blob/jq-1.7/AUTHORS#L4-L14)
    	- NEWS file is replaced by NEWS.md with Markdown format. @wader #2599
    	- CI, scan builds, release, website builds etc now use GitHub actions. @owenthereal @wader @itchyny #2596 #2603 #2620 #2723
    	- Lots of documentation improvements and fixes.
    	- Website updated with new section search box, better section ids for linking, dark mode, etc. @itchyny #2628
    	- Release builds for:
    	  - Linux `amd64`, `arm64`, `armel`, `armhf`, `i386`, `mips`, `mips64`, `mips64el`, `mips64r6`, `mips64r6el`, `mipsel`, `mipsr6`, `mipsr6el`, `powerpc`, `ppc64el`, `riscv64` and `s390x`
    	  - macOS `amd64` and `arm64`
    	  - Windows `i386` and `amd64`
    	  - Docker `linux/386`, `linux/amd64`, `linux/arm64`, `linux/mips64le`, `linux/ppc64le`, `linux/riscv64` and `linux/s390x`
    	  - More details see @owenthereal #2665
    	- Docker images are now available from `ghcr.io/jqlang/jq` instead of Docker Hub. @itchyny #2652 #2686
    	- OSS-fuzz. @DavidKorczynski #2760 #2762
    	Full commit log can be found at <https://github.com/jqlang/jq/compare/jq-1.6...jq-1.7> but here are some highlights:
          CLI changes
    	- Make object key color configurable using `JQ_COLORS` environment variable. @itchyny @haguenau @ericpruitt #2703
    	- Change the default color of null to Bright Black. @itchyny #2824
    	- Respect `NO_COLOR` environment variable to disable color output. See <https://no-color.org> for details. @itchyny #2728
    	- Improved `--help` output. Now mentions all options and nicer order. @itchyny @wader #2747 #2766 #2799
    	- Fix multiple issues of exit code using `--exit-code`/`-e` option. @ryo1kato #1697
    	- Add `--binary`/`-b` on Windows for binary output. To get `\n` instead of `\r\n` line endings. @nicowilliams 0dab2b1
    	- Add `--raw-output0` for NUL (zero byte) separated output. @asottile @pabs3 @itchyny #1990 #2235 #2684
    	- Fix assert crash and validate JSON for `--jsonarg`. @wader #2658
    	- Remove deprecated `--argfile` option. @itchyny #2768
    	- Enable stack protection. @nicowilliams #2801
          Language changes
    	- Use decimal number literals to preserve precision. Comparison operations respects precision but arithmetic operations might truncate. @leonid-s-usov #1752
    	- Adds new builtin `pick(stream)` to emit a projection of the input object or array. @pkoppstein #2656 #2779
    	- Adds new builtin `debug(msgs)` that works like `debug` but applies a filter on the input before writing to stderr. @pkoppstein #2710
    	- Adds new builtin `scan($re; $flags)`. Was documented but not implemented. @itchyny #1961
    	- Adds new builtin `abs` to get absolute value. This potentially allows the literal value of numbers to be preserved as `length` and `fabs` convert to float. @pkoppstein #2767
    	- Allow `if` without `else`-branch. When skipped the `else`-branch will be `.` (identity). @chancez @wader #1825 #2481
    	- Allow use of `$binding` as key in object literals. @nicowilliams 8ea4a55
    	- Allow dot between chained indexes when using `.["index"]` @nicowilliams #1168
    	- Allow dot for chained value iterator `.[]`, `.[]?` @wader #2650
    	- Fix try/catch catches more than it should. @nicowilliams #2750
    	- Speed up and refactor some builtins, also remove `scalars_or_empty/0`. @muhmuhten #1845
    	- Now `halt` and `halt_error` exit immediately instead of continuing to the next input. @emanuele6 #2667
    	- Fix issue converting string to number after previous convert error. @thalman #2400
    	- Fix issue representing large numbers on some platforms causing invalid JSON output. @itchyny #2661
    	- Fix deletion using assigning empty against arrays. @itchyny #2133
    	- Allow keywords to be used as binding name in more places. @emanuele6 #2681
    	- Allow using `nan` as NaN in JSON. @emanuele6 #2712
    	- Expose a module's function names in `modulemeta`. @mrwilson #2837
    	- Fix `contains/1` to handle strings with NUL. @nicowilliams 61cd6db
    	- Fix `stderr/0` to output raw text without any decoration. @itchyny #2751
    	- Fix `nth/2` to emit empty on index out of range. @itchyny #2674
    	- Fix `implode` to not assert and instead replace invalid unicode codepoints. @wader #2646
    	- Fix `indices/1` and `rindex/1` in case of overlapping matches in strings. @emanuele6 #2718
    	- Fix `sub/3` to resolve issues involving global search-and-replace (gsub) operations. @pkoppstein #2641
    	- Fix `significand/0`, `gamma/0` and `drem/2` to be available on macOS. @itchyny #2756 #2775
    	- Fix empty regular expression matches. @itchyny #2677
    	- Fix overflow exception of the modulo operator. @itchyny #2629
    	- Fix string multiplication by 0 (and less than 1) to emit empty string. @itchyny #2142
    	- Fix segfault when using libjq and threads. @thalman #2546
    	- Fix constant folding of division and reminder with zero divisor. @itchyny #2797
    	- Fix `error/0`, `error/1` to throw null error. @emanuele6 #2823
    	- Simpler and faster `transpose`. @pkoppstein #2758
    	- Simple and efficient implementation of `walk/1`. @pkoppstein #2795
    	- Remove deprecated filters `leaf_paths`, `recurse_down`. @itchyny #2666
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit b8894582a71fc1b03b22d31da42a6fd5f35db5fe
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Sep 13 12:14:10 2023 +0200

    dbus: Update to version 1.14.10
    
    - Update from version 1.14.6 to 1.14.10
    - Update of rootfile
    - Changelog
        dbus 1.14.10 (2023-09-01)
          Bug fixes:
    	• Avoid a dbus-daemon crash if re-creating a connection's policy fails.
    	  If it isn't possible to re-create its policy (for example if it belongs
    	  to a user account that has been deleted or if the Name Service Switch is
    	  broken, on a system not supporting SO_PEERGROUPS), we now log a warning,
    	  continue to use its current policy, and continue to reload other
    	  connections' policies. (dbus#343; Peter Benie, Simon McVittie)
    	• If getting the groups from a user ID fails, report the error correctly,
    	  instead of logging "(null)" (dbus#343, Simon McVittie)
    	• Return the primary group ID in GetConnectionCredentials()' UnixGroupIDs
    	  field for processes with a valid-but-empty supplementary group list
    	  (dbus!422, cptpcrd)
        dbus 1.14.8 (2023-06-06)
          Denial-of-service fixes:
    	• Fix an assertion failure in dbus-daemon when a privileged Monitoring
    	  connection (dbus-monitor, busctl monitor, gdbus monitor or similar)
    	  is active, and a message from the bus driver cannot be delivered to a
    	  client connection due to <deny> rules or outgoing message quota. This
    	  is a denial of service if triggered maliciously by a local attacker.
    	  (dbus#457; hongjinghao, Simon McVittie)
          Other fixes:
    	• Fix compilation on compilers not supporting __FUNCTION__
    	  (dbus!404, Barnabás Pőcze)
    	• Fix some memory leaks on out-of-memory conditions
    	  (dbus!403, Barnabás Pőcze)
    	• Documentation:
    	  · Fix syntax of a code sample in dbus-api-design
    	    (dbus!396; Yen-Chin, Lee)
          Tests and CI enhancements:
    	• Fix CI pipelines after freedesktop/freedesktop#540
    	  (dbus!405, dbus#456; Simon McVittie)
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit 270a3c534d2eeb040182a950a2011884945d04ca
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed Sep 13 12:14:09 2023 +0200

    alsa: Update to version 1.2.10
    
    - Update alsa-lib, alsa-utils & alsa-ucn-conf from version 1.2.9 to 1.2.10
    - Update of rootfile
    - Changelog is too large to include here. Details can be found at
       https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>

commit 1d552885c7c634733db73619cfc4651783d8a776
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Tue Nov 21 18:59:47 2023 +0000

    Start Core Update 182
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/firewall/config                             |   1 +
 config/rootfiles/common/gawk                       |   3 +-
 config/rootfiles/common/harfbuzz                   |   7 +-
 config/rootfiles/common/jq                         |   3 +-
 config/rootfiles/common/qpdf                       |   2 +-
 config/rootfiles/common/unbound                    |   2 +-
 config/rootfiles/core/{181 => 182}/exclude         |   0
 .../core/{181 => 182}/filelists/core-files         |   0
 .../{oldcore/125 => core/182}/filelists/dhcpcd     |   0
 .../{oldcore/163 => core/182/filelists}/files      |   0
 .../{oldcore/103 => core/182}/filelists/gawk       |   0
 .../{oldcore/163 => core/182}/filelists/harfbuzz   |   0
 .../{oldcore/123 => core/182}/filelists/iana-etc   |   0
 .../{oldcore/164 => core/182}/filelists/jq         |   0
 .../{oldcore/110 => core/182}/filelists/qpdf       |   0
 .../{oldcore/125 => core/182}/filelists/sqlite     |   0
 .../{oldcore/100 => core/182}/filelists/squid      |   0
 .../{oldcore/106 => core/182}/filelists/unbound    |   0
 .../rootfiles/{oldcore/152 => core/182}/update.sh  |  19 +-
 config/rootfiles/{core => oldcore}/181/exclude     |   0
 .../{core => oldcore}/181/filelists/aarch64/glibc  |   0
 .../{core => oldcore}/181/filelists/aarch64/linux  |   0
 .../{core => oldcore}/181/filelists/apache2        |   0
 .../{core => oldcore}/181/filelists/core-files     |   0
 .../rootfiles/{core => oldcore}/181/filelists/curl |   0
 .../{core => oldcore}/181/filelists/files          |   0
 .../{core => oldcore}/181/filelists/openssl        |   0
 .../{core => oldcore}/181/filelists/riscv64/glibc  |   0
 .../{core => oldcore}/181/filelists/riscv64/linux  |   0
 .../{core => oldcore}/181/filelists/riscv64/udev   |   0
 .../{core => oldcore}/181/filelists/sysvinit       |   0
 .../rootfiles/{core => oldcore}/181/filelists/udev |   0
 .../{core => oldcore}/181/filelists/x86_64/glibc   |   0
 .../{core => oldcore}/181/filelists/x86_64/linux   |   0
 config/rootfiles/{core => oldcore}/181/update.sh   |   0
 config/rootfiles/packages/alsa                     |  35 +++
 config/rootfiles/packages/clamav                   |   1 +
 config/rootfiles/packages/dbus                     |   2 +-
 config/rootfiles/packages/ghostscript              | 326 ++++++++++-----------
 lfs/alsa                                           |  14 +-
 lfs/clamav                                         |   6 +-
 lfs/configroot                                     |   5 +-
 lfs/dbus                                           |  15 +-
 lfs/dhcpcd                                         |   6 +-
 lfs/gawk                                           |   4 +-
 lfs/ghostscript                                    |   6 +-
 lfs/git                                            |   6 +-
 lfs/harfbuzz                                       |   4 +-
 lfs/iana-etc                                       |   4 +-
 lfs/jq                                             |   6 +-
 lfs/qpdf                                           |   4 +-
 lfs/spectre-meltdown-checker                       |   8 +-
 lfs/sqlite                                         |   4 +-
 lfs/squid                                          |   4 +-
 lfs/unbound                                        |   4 +-
 make.sh                                            |   2 +-
 ...-10.0.2-fix-off-by-one-overflow-when-read.patch |  26 --
 ...rivsep-fix-strlcpy-overflow-in-psp-ifname.patch |  28 --
 58 files changed, 274 insertions(+), 283 deletions(-)
 create mode 100644 config/firewall/config
 copy config/rootfiles/core/{181 => 182}/exclude (100%)
 copy config/rootfiles/core/{181 => 182}/filelists/core-files (100%)
 copy config/rootfiles/{oldcore/125 => core/182}/filelists/dhcpcd (100%)
 copy config/rootfiles/{oldcore/163 => core/182/filelists}/files (100%)
 copy config/rootfiles/{oldcore/103 => core/182}/filelists/gawk (100%)
 copy config/rootfiles/{oldcore/163 => core/182}/filelists/harfbuzz (100%)
 copy config/rootfiles/{oldcore/123 => core/182}/filelists/iana-etc (100%)
 copy config/rootfiles/{oldcore/164 => core/182}/filelists/jq (100%)
 copy config/rootfiles/{oldcore/110 => core/182}/filelists/qpdf (100%)
 copy config/rootfiles/{oldcore/125 => core/182}/filelists/sqlite (100%)
 copy config/rootfiles/{oldcore/100 => core/182}/filelists/squid (100%)
 copy config/rootfiles/{oldcore/106 => core/182}/filelists/unbound (100%)
 copy config/rootfiles/{oldcore/152 => core/182}/update.sh (89%)
 rename config/rootfiles/{core => oldcore}/181/exclude (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/aarch64/glibc (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/aarch64/linux (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/apache2 (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/core-files (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/curl (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/files (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/openssl (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/riscv64/glibc (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/riscv64/linux (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/riscv64/udev (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/sysvinit (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/udev (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/x86_64/glibc (100%)
 rename config/rootfiles/{core => oldcore}/181/filelists/x86_64/linux (100%)
 rename config/rootfiles/{core => oldcore}/181/update.sh (100%)
 delete mode 100644 src/patches/dhcpcd-10.0.2-fix-off-by-one-overflow-when-read.patch
 delete mode 100644 src/patches/dhcpcd-10.0.2-privsep-fix-strlcpy-overflow-in-psp-ifname.patch

Difference in files:
diff --git a/config/firewall/config b/config/firewall/config
new file mode 100644
index 000000000..c871576f2
--- /dev/null
+++ b/config/firewall/config
@@ -0,0 +1 @@
+1,REJECT,FORWARDFW,ON,std_net_src,ALL,std_net_tgt,RED,,TCP,,,ON,,,cust_srv,SMTP,Block port 25 (TCP) for outgoing connections to the internet,,,,,,,,,,00:00,00:00,,AUTO,,dnat,,,,,second
diff --git a/config/rootfiles/common/gawk b/config/rootfiles/common/gawk
index 7f4496e42..195d744ee 100644
--- a/config/rootfiles/common/gawk
+++ b/config/rootfiles/common/gawk
@@ -1,6 +1,6 @@
 usr/bin/awk
 usr/bin/gawk
-usr/bin/gawk-5.2.2
+usr/bin/gawk-5.3.0
 usr/bin/gawkbug
 usr/etc/profile.d
 usr/etc/profile.d/gawk.csh
@@ -49,6 +49,7 @@ usr/lib/gawk/time.so
 #usr/share/awk/round.awk
 #usr/share/awk/shellquote.awk
 #usr/share/awk/strtonum.awk
+#usr/share/awk/tocsv.awk
 #usr/share/awk/walkarray.awk
 #usr/share/awk/zerofile.awk
 #usr/share/info/gawk.info
diff --git a/config/rootfiles/common/harfbuzz b/config/rootfiles/common/harfbuzz
index 3895dfcac..1a933167b 100644
--- a/config/rootfiles/common/harfbuzz
+++ b/config/rootfiles/common/harfbuzz
@@ -44,15 +44,15 @@
 #usr/lib/libharfbuzz-cairo.la
 #usr/lib/libharfbuzz-cairo.so
 usr/lib/libharfbuzz-cairo.so.0
-usr/lib/libharfbuzz-cairo.so.0.60811.0
+usr/lib/libharfbuzz-cairo.so.0.60822.0
 #usr/lib/libharfbuzz-subset.la
 #usr/lib/libharfbuzz-subset.so
 usr/lib/libharfbuzz-subset.so.0
-usr/lib/libharfbuzz-subset.so.0.60811.0
+usr/lib/libharfbuzz-subset.so.0.60822.0
 #usr/lib/libharfbuzz.la
 #usr/lib/libharfbuzz.so
 usr/lib/libharfbuzz.so.0
-usr/lib/libharfbuzz.so.0.60811.0
+usr/lib/libharfbuzz.so.0.60822.0
 #usr/lib/pkgconfig/harfbuzz-cairo.pc
 #usr/lib/pkgconfig/harfbuzz-subset.pc
 #usr/lib/pkgconfig/harfbuzz.pc
@@ -131,6 +131,7 @@ usr/lib/libharfbuzz.so.0.60811.0
 #usr/share/gtk-doc/html/harfbuzz/api-index-7-3-0.html
 #usr/share/gtk-doc/html/harfbuzz/api-index-8-0-0.html
 #usr/share/gtk-doc/html/harfbuzz/api-index-8-1-0.html
+#usr/share/gtk-doc/html/harfbuzz/api-index-8-2-0.html
 #usr/share/gtk-doc/html/harfbuzz/api-index-full.html
 #usr/share/gtk-doc/html/harfbuzz/apple-advanced-typography-api.html
 #usr/share/gtk-doc/html/harfbuzz/buffers-language-script-and-direction.html
diff --git a/config/rootfiles/common/jq b/config/rootfiles/common/jq
index 7413eb883..4527dd6db 100644
--- a/config/rootfiles/common/jq
+++ b/config/rootfiles/common/jq
@@ -6,9 +6,10 @@ usr/bin/jq
 #usr/lib/libjq.so
 usr/lib/libjq.so.1
 usr/lib/libjq.so.1.0.4
+#usr/lib/pkgconfig/libjq.pc
 #usr/share/doc/jq
 #usr/share/doc/jq/AUTHORS
 #usr/share/doc/jq/COPYING
-#usr/share/doc/jq/README
+#usr/share/doc/jq/NEWS.md
 #usr/share/doc/jq/README.md
 #usr/share/man/man1/jq.1
diff --git a/config/rootfiles/common/qpdf b/config/rootfiles/common/qpdf
index 752c38491..ac6117db0 100644
--- a/config/rootfiles/common/qpdf
+++ b/config/rootfiles/common/qpdf
@@ -77,7 +77,7 @@ usr/bin/qpdf
 #usr/lib/cmake/qpdf/qpdfConfigVersion.cmake
 #usr/lib/libqpdf.so
 usr/lib/libqpdf.so.29
-usr/lib/libqpdf.so.29.5.0
+usr/lib/libqpdf.so.29.6.1
 #usr/lib/pkgconfig/libqpdf.pc
 #usr/share/doc/qpdf
 #usr/share/doc/qpdf/README-doc.txt
diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound
index f8463f9e8..78c5a31ae 100644
--- a/config/rootfiles/common/unbound
+++ b/config/rootfiles/common/unbound
@@ -11,7 +11,7 @@ etc/unbound/unbound.conf
 #usr/lib/libunbound.la
 #usr/lib/libunbound.so
 usr/lib/libunbound.so.8
-usr/lib/libunbound.so.8.1.22
+usr/lib/libunbound.so.8.1.23
 #usr/lib/pkgconfig/libunbound.pc
 usr/sbin/unbound
 usr/sbin/unbound-anchor
diff --git a/config/rootfiles/core/181/exclude b/config/rootfiles/core/182/exclude
similarity index 100%
rename from config/rootfiles/core/181/exclude
rename to config/rootfiles/core/182/exclude
diff --git a/config/rootfiles/core/181/filelists/core-files b/config/rootfiles/core/182/filelists/core-files
similarity index 100%
rename from config/rootfiles/core/181/filelists/core-files
rename to config/rootfiles/core/182/filelists/core-files
diff --git a/config/rootfiles/core/182/filelists/dhcpcd b/config/rootfiles/core/182/filelists/dhcpcd
new file mode 120000
index 000000000..1e799dabb
--- /dev/null
+++ b/config/rootfiles/core/182/filelists/dhcpcd
@@ -0,0 +1 @@
+../../../common/dhcpcd
\ No newline at end of file
diff --git a/config/rootfiles/core/182/filelists/files b/config/rootfiles/core/182/filelists/files
new file mode 100644
index 000000000..e69de29bb
diff --git a/config/rootfiles/core/182/filelists/gawk b/config/rootfiles/core/182/filelists/gawk
new file mode 120000
index 000000000..a3bbe32ce
--- /dev/null
+++ b/config/rootfiles/core/182/filelists/gawk
@@ -0,0 +1 @@
+../../../common/gawk
\ No newline at end of file
diff --git a/config/rootfiles/core/182/filelists/harfbuzz b/config/rootfiles/core/182/filelists/harfbuzz
new file mode 120000
index 000000000..ffe1e0d0b
--- /dev/null
+++ b/config/rootfiles/core/182/filelists/harfbuzz
@@ -0,0 +1 @@
+../../../common/harfbuzz
\ No newline at end of file
diff --git a/config/rootfiles/core/182/filelists/iana-etc b/config/rootfiles/core/182/filelists/iana-etc
new file mode 120000
index 000000000..1f3d54dbd
--- /dev/null
+++ b/config/rootfiles/core/182/filelists/iana-etc
@@ -0,0 +1 @@
+../../../common/iana-etc
\ No newline at end of file
diff --git a/config/rootfiles/core/182/filelists/jq b/config/rootfiles/core/182/filelists/jq
new file mode 120000
index 000000000..5377b9cc7
--- /dev/null
+++ b/config/rootfiles/core/182/filelists/jq
@@ -0,0 +1 @@
+../../../common/jq
\ No newline at end of file
diff --git a/config/rootfiles/core/182/filelists/qpdf b/config/rootfiles/core/182/filelists/qpdf
new file mode 120000
index 000000000..2d6c43dec
--- /dev/null
+++ b/config/rootfiles/core/182/filelists/qpdf
@@ -0,0 +1 @@
+../../../common/qpdf
\ No newline at end of file
diff --git a/config/rootfiles/core/182/filelists/sqlite b/config/rootfiles/core/182/filelists/sqlite
new file mode 120000
index 000000000..4ea569766
--- /dev/null
+++ b/config/rootfiles/core/182/filelists/sqlite
@@ -0,0 +1 @@
+../../../common/sqlite
\ No newline at end of file
diff --git a/config/rootfiles/core/182/filelists/squid b/config/rootfiles/core/182/filelists/squid
new file mode 120000
index 000000000..2dc8372a0
--- /dev/null
+++ b/config/rootfiles/core/182/filelists/squid
@@ -0,0 +1 @@
+../../../common/squid
\ No newline at end of file
diff --git a/config/rootfiles/core/182/filelists/unbound b/config/rootfiles/core/182/filelists/unbound
new file mode 120000
index 000000000..66adf0924
--- /dev/null
+++ b/config/rootfiles/core/182/filelists/unbound
@@ -0,0 +1 @@
+../../../common/unbound
\ No newline at end of file
diff --git a/config/rootfiles/core/182/update.sh b/config/rootfiles/core/182/update.sh
new file mode 100644
index 000000000..9c1f91589
--- /dev/null
+++ b/config/rootfiles/core/182/update.sh
@@ -0,0 +1,76 @@
+#!/bin/bash
+############################################################################
+#                                                                          #
+# This file is part of the IPFire Firewall.                                #
+#                                                                          #
+# IPFire is free software; you can redistribute it and/or modify           #
+# it under the terms of the GNU General Public License as published by     #
+# the Free Software Foundation; either version 3 of the License, or        #
+# (at your option) any later version.                                      #
+#                                                                          #
+# IPFire is distributed in the hope that it will be useful,                #
+# but WITHOUT ANY WARRANTY; without even the implied warranty of           #
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
+# GNU General Public License for more details.                             #
+#                                                                          #
+# You should have received a copy of the GNU General Public License        #
+# along with IPFire; if not, write to the Free Software                    #
+# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
+#                                                                          #
+# Copyright (C) 2023 IPFire-Team <info(a)ipfire.org>.                        #
+#                                                                          #
+############################################################################
+#
+. /opt/pakfire/lib/functions.sh
+/usr/local/bin/backupctrl exclude >/dev/null 2>&1
+
+core=182
+
+# Remove old core updates from pakfire cache to save space...
+for (( i=1; i<=$core; i++ )); do
+	rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
+done
+
+# Stop services
+/etc/rc.d/init.d/squid stop
+/etc/rc.d/init.d/unbound stop
+
+# Extract files
+extract_files
+
+# Remove files
+rm -rvf \
+	/usr/bin/gawk-5.2* \
+	/usr/lib/libqpdf.so.29.5*
+
+# update linker config
+ldconfig
+
+# Update Language cache
+/usr/local/bin/update-lang-cache
+
+# Filesytem cleanup
+/usr/local/bin/filesystem-cleanup
+
+# Start services
+/etc/init.d/unbound start
+if [ -f /var/ipfire/proxy/enable ]; then
+	/etc/init.d/squid start
+fi
+
+# This update needs a reboot...
+#touch /var/run/need_reboot
+
+# Finish
+/etc/init.d/fireinfo start
+sendprofile
+
+# Update grub config to display new core version
+if [ -e /boot/grub/grub.cfg ]; then
+	grub-mkconfig -o /boot/grub/grub.cfg
+fi
+
+sync
+
+# Don't report the exitcode last command
+exit 0
diff --git a/config/rootfiles/oldcore/181/exclude b/config/rootfiles/oldcore/181/exclude
new file mode 100644
index 000000000..8ee1c3c2f
--- /dev/null
+++ b/config/rootfiles/oldcore/181/exclude
@@ -0,0 +1,35 @@
+boot/config.txt
+boot/grub/grub.cfg
+boot/grub/grubenv
+boot/uEnv.txt
+etc/alternatives
+etc/collectd.custom
+etc/default/grub
+etc/ipsec.conf
+etc/ipsec.secrets
+etc/ipsec.user.conf
+etc/ipsec.user.secrets
+etc/localtime
+etc/shadow
+etc/snort/snort.conf
+etc/ssl/openssl.cnf
+etc/sudoers
+etc/sysconfig/firewall.local
+etc/sysconfig/rc.local
+etc/udev/rules.d/30-persistent-network.rules
+srv/web/ipfire/html/proxy.pac
+var/ipfire/dma
+var/ipfire/time
+var/ipfire/firewall/locationblock
+var/ipfire/fwhosts/customlocationgrp
+var/ipfire/ovpn
+var/ipfire/urlfilter/blacklist
+var/ipfire/urlfilter/settings
+var/lib/alternatives
+var/lib/location/database.db
+var/lib/location/ipset
+var/log/cache
+var/log/dhcpcd.log
+var/log/messages
+var/state/dhcp/dhcpd.leases
+var/updatecache
diff --git a/config/rootfiles/core/181/filelists/aarch64/glibc b/config/rootfiles/oldcore/181/filelists/aarch64/glibc
similarity index 100%
rename from config/rootfiles/core/181/filelists/aarch64/glibc
rename to config/rootfiles/oldcore/181/filelists/aarch64/glibc
diff --git a/config/rootfiles/core/181/filelists/aarch64/linux b/config/rootfiles/oldcore/181/filelists/aarch64/linux
similarity index 100%
rename from config/rootfiles/core/181/filelists/aarch64/linux
rename to config/rootfiles/oldcore/181/filelists/aarch64/linux
diff --git a/config/rootfiles/core/181/filelists/apache2 b/config/rootfiles/oldcore/181/filelists/apache2
similarity index 100%
rename from config/rootfiles/core/181/filelists/apache2
rename to config/rootfiles/oldcore/181/filelists/apache2
diff --git a/config/rootfiles/oldcore/181/filelists/core-files b/config/rootfiles/oldcore/181/filelists/core-files
new file mode 100644
index 000000000..0dec37e53
--- /dev/null
+++ b/config/rootfiles/oldcore/181/filelists/core-files
@@ -0,0 +1,5 @@
+etc/system-release
+etc/issue
+etc/os-release
+srv/web/ipfire/cgi-bin/credits.cgi
+var/ipfire/langs
diff --git a/config/rootfiles/core/181/filelists/curl b/config/rootfiles/oldcore/181/filelists/curl
similarity index 100%
rename from config/rootfiles/core/181/filelists/curl
rename to config/rootfiles/oldcore/181/filelists/curl
diff --git a/config/rootfiles/core/181/filelists/files b/config/rootfiles/oldcore/181/filelists/files
similarity index 100%
rename from config/rootfiles/core/181/filelists/files
rename to config/rootfiles/oldcore/181/filelists/files
diff --git a/config/rootfiles/core/181/filelists/openssl b/config/rootfiles/oldcore/181/filelists/openssl
similarity index 100%
rename from config/rootfiles/core/181/filelists/openssl
rename to config/rootfiles/oldcore/181/filelists/openssl
diff --git a/config/rootfiles/core/181/filelists/riscv64/glibc b/config/rootfiles/oldcore/181/filelists/riscv64/glibc
similarity index 100%
rename from config/rootfiles/core/181/filelists/riscv64/glibc
rename to config/rootfiles/oldcore/181/filelists/riscv64/glibc
diff --git a/config/rootfiles/core/181/filelists/riscv64/linux b/config/rootfiles/oldcore/181/filelists/riscv64/linux
similarity index 100%
rename from config/rootfiles/core/181/filelists/riscv64/linux
rename to config/rootfiles/oldcore/181/filelists/riscv64/linux
diff --git a/config/rootfiles/core/181/filelists/riscv64/udev b/config/rootfiles/oldcore/181/filelists/riscv64/udev
similarity index 100%
rename from config/rootfiles/core/181/filelists/riscv64/udev
rename to config/rootfiles/oldcore/181/filelists/riscv64/udev
diff --git a/config/rootfiles/core/181/filelists/sysvinit b/config/rootfiles/oldcore/181/filelists/sysvinit
similarity index 100%
rename from config/rootfiles/core/181/filelists/sysvinit
rename to config/rootfiles/oldcore/181/filelists/sysvinit
diff --git a/config/rootfiles/core/181/filelists/udev b/config/rootfiles/oldcore/181/filelists/udev
similarity index 100%
rename from config/rootfiles/core/181/filelists/udev
rename to config/rootfiles/oldcore/181/filelists/udev
diff --git a/config/rootfiles/core/181/filelists/x86_64/glibc b/config/rootfiles/oldcore/181/filelists/x86_64/glibc
similarity index 100%
rename from config/rootfiles/core/181/filelists/x86_64/glibc
rename to config/rootfiles/oldcore/181/filelists/x86_64/glibc
diff --git a/config/rootfiles/core/181/filelists/x86_64/linux b/config/rootfiles/oldcore/181/filelists/x86_64/linux
similarity index 100%
rename from config/rootfiles/core/181/filelists/x86_64/linux
rename to config/rootfiles/oldcore/181/filelists/x86_64/linux
diff --git a/config/rootfiles/core/181/update.sh b/config/rootfiles/oldcore/181/update.sh
similarity index 100%
rename from config/rootfiles/core/181/update.sh
rename to config/rootfiles/oldcore/181/update.sh
diff --git a/config/rootfiles/packages/alsa b/config/rootfiles/packages/alsa
index 8ec82d8c3..a18368e4a 100644
--- a/config/rootfiles/packages/alsa
+++ b/config/rootfiles/packages/alsa
@@ -141,6 +141,7 @@ usr/bin/aseqnet
 usr/bin/aserver
 usr/bin/axfer
 usr/bin/iecset
+usr/bin/nhlt-dmic-info
 usr/bin/speaker-test
 #usr/include/alsa
 #usr/include/alsa/asoundef.h
@@ -189,6 +190,8 @@ usr/bin/speaker-test
 #usr/include/alsa/sound/uapi/tlv.h
 #usr/include/alsa/timer.h
 #usr/include/alsa/topology.h
+#usr/include/alsa/ump.h
+#usr/include/alsa/ump_msg.h
 #usr/include/alsa/use-case.h
 #usr/include/alsa/version.h
 #usr/include/asoundlib.h
@@ -572,6 +575,9 @@ usr/share/alsa/ucm2/Rockchip/max98090/max98090.conf
 #usr/share/alsa/ucm2/Rockchip/rk3399-gru-sound
 usr/share/alsa/ucm2/Rockchip/rk3399-gru-sound/HiFi.conf
 usr/share/alsa/ucm2/Rockchip/rk3399-gru-sound/rk3399-gru-sound.conf
+#usr/share/alsa/ucm2/Rockchip/rk3588-es8316
+usr/share/alsa/ucm2/Rockchip/rk3588-es8316/HiFi.conf
+usr/share/alsa/ucm2/Rockchip/rk3588-es8316/rk3588-es8316.conf
 #usr/share/alsa/ucm2/Rockchip/rk817-sound
 usr/share/alsa/ucm2/Rockchip/rk817-sound/HiFi.conf
 usr/share/alsa/ucm2/Rockchip/rk817-sound/rk817-sound.conf
@@ -584,9 +590,16 @@ usr/share/alsa/ucm2/Samsung/snow/snow.conf
 usr/share/alsa/ucm2/Tegra/alc5632/HiFi.conf
 usr/share/alsa/ucm2/Tegra/alc5632/Record.conf
 usr/share/alsa/ucm2/Tegra/alc5632/alc5632.conf
+#usr/share/alsa/ucm2/Tegra/max98089
+usr/share/alsa/ucm2/Tegra/max98089/lge-x3-HiFi.conf
+usr/share/alsa/ucm2/Tegra/max98089/lge-x3-VoiceCall.conf
+usr/share/alsa/ucm2/Tegra/max98089/lge-x3.conf
 #usr/share/alsa/ucm2/Tegra/max98090
 usr/share/alsa/ucm2/Tegra/max98090/HiFi.conf
 usr/share/alsa/ucm2/Tegra/max98090/max98090.conf
+#usr/share/alsa/ucm2/Tegra/rt5631
+usr/share/alsa/ucm2/Tegra/rt5631/Asus-Transformer-HiFi.conf
+usr/share/alsa/ucm2/Tegra/rt5631/Asus-Transformer.conf
 #usr/share/alsa/ucm2/Tegra/rt5640
 usr/share/alsa/ucm2/Tegra/rt5640/Google-Nexus-7-HiFi.conf
 usr/share/alsa/ucm2/Tegra/rt5640/Google-Nexus-7.conf
@@ -596,6 +609,8 @@ usr/share/alsa/ucm2/Tegra/tegra-hda/tegra-hda.conf
 #usr/share/alsa/ucm2/Tegra/wm8903
 usr/share/alsa/ucm2/Tegra/wm8903/Acer-A500-HiFi.conf
 usr/share/alsa/ucm2/Tegra/wm8903/Acer-A500.conf
+usr/share/alsa/ucm2/Tegra/wm8903/Asus-Transformer-HiFi.conf
+usr/share/alsa/ucm2/Tegra/wm8903/Asus-Transformer.conf
 #usr/share/alsa/ucm2/USB-Audio
 #usr/share/alsa/ucm2/USB-Audio/Arturia
 usr/share/alsa/ucm2/USB-Audio/Arturia/Minifuse-12-HiFi.conf
@@ -667,6 +682,9 @@ usr/share/alsa/ucm2/USB-Audio/Steinberg/UR24C.conf
 usr/share/alsa/ucm2/USB-Audio/Steinberg/UR44-HiFi.conf
 usr/share/alsa/ucm2/USB-Audio/Steinberg/UR44.conf
 usr/share/alsa/ucm2/USB-Audio/USB-Audio.conf
+#usr/share/alsa/ucm2/USB-Audio/UniversalAudio
+usr/share/alsa/ucm2/USB-Audio/UniversalAudio/Volt2-HiFi.conf
+usr/share/alsa/ucm2/USB-Audio/UniversalAudio/Volt2.conf
 #usr/share/alsa/ucm2/codecs
 #usr/share/alsa/ucm2/codecs/cx2072x
 usr/share/alsa/ucm2/codecs/cx2072x/DisableSeq.conf
@@ -836,6 +854,10 @@ usr/share/alsa/ucm2/conf.d/acp/acp.conf
 usr/share/alsa/ucm2/conf.d/acp3xalc5682m98/acp3xalc5682m98.conf
 #usr/share/alsa/ucm2/conf.d/acp5x
 usr/share/alsa/ucm2/conf.d/acp5x/Valve-Jupiter-1.conf
+#usr/share/alsa/ucm2/conf.d/acp62
+usr/share/alsa/ucm2/conf.d/acp62/acp62.conf
+#usr/share/alsa/ucm2/conf.d/acp63
+usr/share/alsa/ucm2/conf.d/acp63/acp63.conf
 #usr/share/alsa/ucm2/conf.d/acp6x
 usr/share/alsa/ucm2/conf.d/acp6x/acp6x.conf
 #usr/share/alsa/ucm2/conf.d/bdw-rt5677
@@ -878,6 +900,8 @@ usr/share/alsa/ucm2/conf.d/mt8365-evk/mt8365-evk.conf
 usr/share/alsa/ucm2/conf.d/mtk-rt5650/mtk-rt5650.conf
 #usr/share/alsa/ucm2/conf.d/rk3399-gru-soun
 usr/share/alsa/ucm2/conf.d/rk3399-gru-soun/rk3399-gru-soun.conf
+#usr/share/alsa/ucm2/conf.d/rk3588-es8316
+usr/share/alsa/ucm2/conf.d/rk3588-es8316/rk3588-es8316.conf
 #usr/share/alsa/ucm2/conf.d/rockchip_es8316
 usr/share/alsa/ucm2/conf.d/rockchip_es8316/rockchip_es8316.conf
 #usr/share/alsa/ucm2/conf.d/sc8280xp
@@ -915,9 +939,18 @@ usr/share/alsa/ucm2/conf.d/sof-soundwire/sof-soundwire.conf
 usr/share/alsa/ucm2/conf.d/tegra-hda/tegra-hda.conf
 usr/share/alsa/ucm2/conf.d/tegra/ASUS Google Nexus 7 ALC5642.conf
 usr/share/alsa/ucm2/conf.d/tegra/Acer Iconia Tab A500 WM8903.conf
+usr/share/alsa/ucm2/conf.d/tegra/Asus EeePad Slider WM8903.conf
+usr/share/alsa/ucm2/conf.d/tegra/Asus EeePad Transformer WM8903.conf
+usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Infinity TF700T RT5631.conf
+usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Pad TF300T WM8903.conf
+usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Pad TF300TG RT5631.conf
+usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Pad TF300TL RT5631.conf
+usr/share/alsa/ucm2/conf.d/tegra/Asus Transformer Prime TF201 RT5631.conf
 usr/share/alsa/ucm2/conf.d/tegra/Compal PAZ00.conf
 usr/share/alsa/ucm2/conf.d/tegra/GoogleNyanBig.conf
 usr/share/alsa/ucm2/conf.d/tegra/GoogleNyanBlaze.conf
+usr/share/alsa/ucm2/conf.d/tegra/LG Optimus 4X HD MAX98089.conf
+usr/share/alsa/ucm2/conf.d/tegra/LG Optimus Vu MAX98089.conf
 #usr/share/alsa/ucm2/conf.virt.d
 usr/share/alsa/ucm2/conf.virt.d/.gitignore
 #usr/share/alsa/ucm2/lib
@@ -963,6 +996,7 @@ usr/share/alsa/ucm2/ucm.conf
 #usr/share/locale/ja/LC_MESSAGES/alsaconf.mo
 #usr/share/locale/ka/LC_MESSAGES/alsa-utils.mo
 #usr/share/locale/ka/LC_MESSAGES/alsaconf.mo
+#usr/share/locale/ko/LC_MESSAGES/alsa-utils.mo
 #usr/share/locale/ru/LC_MESSAGES/alsaconf.mo
 #usr/share/locale/sk/LC_MESSAGES/alsa-utils.mo
 #usr/share/man/fr/man8/alsaconf.8
@@ -984,6 +1018,7 @@ usr/share/alsa/ucm2/ucm.conf
 #usr/share/man/man1/axfer-transfer.1
 #usr/share/man/man1/axfer.1
 #usr/share/man/man1/iecset.1
+#usr/share/man/man1/nhlt-dmic-info.1
 #usr/share/man/man1/speaker-test.1
 #usr/share/man/man8/alsaconf.8
 #usr/share/sounds
diff --git a/config/rootfiles/packages/clamav b/config/rootfiles/packages/clamav
index a3ec7d6cb..428f73e6c 100644
--- a/config/rootfiles/packages/clamav
+++ b/config/rootfiles/packages/clamav
@@ -69,6 +69,7 @@ usr/sbin/clamd
 #usr/share/doc/ClamAV/html/faq/faq-eol.html
 #usr/share/doc/ClamAV/html/faq/faq-freshclam.html
 #usr/share/doc/ClamAV/html/faq/faq-ignore.html
+#usr/share/doc/ClamAV/html/faq/faq-malware-fp-reports.html
 #usr/share/doc/ClamAV/html/faq/faq-misc.html
 #usr/share/doc/ClamAV/html/faq/faq-ml.html
 #usr/share/doc/ClamAV/html/faq/faq-pua.html
diff --git a/config/rootfiles/packages/dbus b/config/rootfiles/packages/dbus
index 01b1538b7..2cf7fe37b 100644
--- a/config/rootfiles/packages/dbus
+++ b/config/rootfiles/packages/dbus
@@ -40,7 +40,7 @@ usr/bin/dbus-uuidgen
 #usr/lib/libdbus-1.la
 #usr/lib/libdbus-1.so
 usr/lib/libdbus-1.so.3
-usr/lib/libdbus-1.so.3.32.2
+usr/lib/libdbus-1.so.3.32.4
 #usr/lib/pkgconfig/dbus-1.pc
 usr/libexec/dbus-daemon-launch-helper
 #usr/share/dbus-1
diff --git a/config/rootfiles/packages/ghostscript b/config/rootfiles/packages/ghostscript
index fc0d64832..c7af93ce2 100644
--- a/config/rootfiles/packages/ghostscript
+++ b/config/rootfiles/packages/ghostscript
@@ -25,170 +25,170 @@ usr/bin/ps2ps
 usr/bin/ps2ps2
 usr/bin/unix-lpr.sh
 #usr/share/doc/ghostscript
-#usr/share/doc/ghostscript/10.01.2
-#usr/share/doc/ghostscript/10.01.2/COPYING
-#usr/share/doc/ghostscript/10.01.2/GS9_Color_Management.pdf
-#usr/share/doc/ghostscript/10.01.2/Ghostscript.pdf
-#usr/share/doc/ghostscript/10.01.2/News.htm
+#usr/share/doc/ghostscript/10.02.1
+#usr/share/doc/ghostscript/10.02.1/COPYING
+#usr/share/doc/ghostscript/10.02.1/GS9_Color_Management.pdf
+#usr/share/doc/ghostscript/10.02.1/Ghostscript.pdf
+#usr/share/doc/ghostscript/10.02.1/News.html
 #usr/share/ghostscript
-#usr/share/ghostscript/10.01.2
-#usr/share/ghostscript/10.01.2/lib
-#usr/share/ghostscript/10.01.2/lib/PDFA_def.ps
-#usr/share/ghostscript/10.01.2/lib/PDFX_def.ps
-#usr/share/ghostscript/10.01.2/lib/PM760p.upp
-#usr/share/ghostscript/10.01.2/lib/PM760pl.upp
-#usr/share/ghostscript/10.01.2/lib/PM820p.upp
-#usr/share/ghostscript/10.01.2/lib/PM820pl.upp
-#usr/share/ghostscript/10.01.2/lib/Stc670p.upp
-#usr/share/ghostscript/10.01.2/lib/Stc670pl.upp
-#usr/share/ghostscript/10.01.2/lib/Stc680p.upp
-#usr/share/ghostscript/10.01.2/lib/Stc680pl.upp
-#usr/share/ghostscript/10.01.2/lib/Stc740p.upp
-#usr/share/ghostscript/10.01.2/lib/Stc740pl.upp
-#usr/share/ghostscript/10.01.2/lib/Stc760p.upp
-#usr/share/ghostscript/10.01.2/lib/Stc760pl.upp
-#usr/share/ghostscript/10.01.2/lib/Stc777p.upp
-#usr/share/ghostscript/10.01.2/lib/Stc777pl.upp
-#usr/share/ghostscript/10.01.2/lib/Stp720p.upp
-#usr/share/ghostscript/10.01.2/lib/Stp720pl.upp
-#usr/share/ghostscript/10.01.2/lib/Stp870p.upp
-#usr/share/ghostscript/10.01.2/lib/Stp870pl.upp
-#usr/share/ghostscript/10.01.2/lib/acctest.ps
-#usr/share/ghostscript/10.01.2/lib/align.ps
-#usr/share/ghostscript/10.01.2/lib/bj8.rpd
-#usr/share/ghostscript/10.01.2/lib/bj8gc12f.upp
-#usr/share/ghostscript/10.01.2/lib/bj8hg12f.upp
-#usr/share/ghostscript/10.01.2/lib/bj8oh06n.upp
-#usr/share/ghostscript/10.01.2/lib/bj8pa06n.upp
-#usr/share/ghostscript/10.01.2/lib/bj8pp12f.upp
-#usr/share/ghostscript/10.01.2/lib/bj8ts06n.upp
-#usr/share/ghostscript/10.01.2/lib/bjc6000a1.upp
-#usr/share/ghostscript/10.01.2/lib/bjc6000b1.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610a0.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610a1.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610a2.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610a3.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610a4.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610a5.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610a6.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610a7.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610a8.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610b1.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610b2.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610b3.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610b4.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610b6.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610b7.upp
-#usr/share/ghostscript/10.01.2/lib/bjc610b8.upp
-#usr/share/ghostscript/10.01.2/lib/caption.ps
-#usr/share/ghostscript/10.01.2/lib/cbjc600.ppd
-#usr/share/ghostscript/10.01.2/lib/cbjc800.ppd
-#usr/share/ghostscript/10.01.2/lib/cdj550.upp
-#usr/share/ghostscript/10.01.2/lib/cdj690.upp
-#usr/share/ghostscript/10.01.2/lib/cdj690ec.upp
-#usr/share/ghostscript/10.01.2/lib/cid2code.ps
-#usr/share/ghostscript/10.01.2/lib/dnj750c.upp
-#usr/share/ghostscript/10.01.2/lib/dnj750m.upp
-#usr/share/ghostscript/10.01.2/lib/docie.ps
-#usr/share/ghostscript/10.01.2/lib/font2pcl.ps
-#usr/share/ghostscript/10.01.2/lib/ghostpdf.ppd
-#usr/share/ghostscript/10.01.2/lib/gs_ce_e.ps
-#usr/share/ghostscript/10.01.2/lib/gs_css_e.ps
-#usr/share/ghostscript/10.01.2/lib/gs_il2_e.ps
-#usr/share/ghostscript/10.01.2/lib/gs_kanji.ps
-#usr/share/ghostscript/10.01.2/lib/gs_ksb_e.ps
-#usr/share/ghostscript/10.01.2/lib/gs_l.xbm
-#usr/share/ghostscript/10.01.2/lib/gs_l.xpm
-#usr/share/ghostscript/10.01.2/lib/gs_l_m.xbm
-#usr/share/ghostscript/10.01.2/lib/gs_lgo_e.ps
-#usr/share/ghostscript/10.01.2/lib/gs_lgx_e.ps
-#usr/share/ghostscript/10.01.2/lib/gs_m.xbm
-#usr/share/ghostscript/10.01.2/lib/gs_m.xpm
-#usr/share/ghostscript/10.01.2/lib/gs_m_m.xbm
-#usr/share/ghostscript/10.01.2/lib/gs_s.xbm
-#usr/share/ghostscript/10.01.2/lib/gs_s.xpm
-#usr/share/ghostscript/10.01.2/lib/gs_s_m.xbm
-#usr/share/ghostscript/10.01.2/lib/gs_t.xbm
-#usr/share/ghostscript/10.01.2/lib/gs_t.xpm
-#usr/share/ghostscript/10.01.2/lib/gs_t_m.xbm
-#usr/share/ghostscript/10.01.2/lib/gs_wl1_e.ps
-#usr/share/ghostscript/10.01.2/lib/gs_wl2_e.ps
-#usr/share/ghostscript/10.01.2/lib/gs_wl5_e.ps
-#usr/share/ghostscript/10.01.2/lib/gslp.ps
-#usr/share/ghostscript/10.01.2/lib/gsnup.ps
-#usr/share/ghostscript/10.01.2/lib/ht_ccsto.ps
-#usr/share/ghostscript/10.01.2/lib/image-qa.ps
-#usr/share/ghostscript/10.01.2/lib/jispaper.ps
-#usr/share/ghostscript/10.01.2/lib/landscap.ps
-#usr/share/ghostscript/10.01.2/lib/lines.ps
-#usr/share/ghostscript/10.01.2/lib/mkcidfm.ps
-#usr/share/ghostscript/10.01.2/lib/necp2x.upp
-#usr/share/ghostscript/10.01.2/lib/necp2x6.upp
-#usr/share/ghostscript/10.01.2/lib/pdf2dsc.ps
-#usr/share/ghostscript/10.01.2/lib/pdf_info.ps
-#usr/share/ghostscript/10.01.2/lib/pf2afm.ps
-#usr/share/ghostscript/10.01.2/lib/pfbtopfa.ps
-#usr/share/ghostscript/10.01.2/lib/ppath.ps
-#usr/share/ghostscript/10.01.2/lib/pphs.ps
-#usr/share/ghostscript/10.01.2/lib/prfont.ps
-#usr/share/ghostscript/10.01.2/lib/printafm.ps
-#usr/share/ghostscript/10.01.2/lib/ps2ai.ps
-#usr/share/ghostscript/10.01.2/lib/ps2epsi.ps
-#usr/share/ghostscript/10.01.2/lib/ras1.upp
-#usr/share/ghostscript/10.01.2/lib/ras24.upp
-#usr/share/ghostscript/10.01.2/lib/ras3.upp
-#usr/share/ghostscript/10.01.2/lib/ras32.upp
-#usr/share/ghostscript/10.01.2/lib/ras4.upp
-#usr/share/ghostscript/10.01.2/lib/ras8m.upp
-#usr/share/ghostscript/10.01.2/lib/rollconv.ps
-#usr/share/ghostscript/10.01.2/lib/s400a1.upp
-#usr/share/ghostscript/10.01.2/lib/s400b1.upp
-#usr/share/ghostscript/10.01.2/lib/sharp.upp
-#usr/share/ghostscript/10.01.2/lib/sipixa6.upp
-#usr/share/ghostscript/10.01.2/lib/st640ih.upp
-#usr/share/ghostscript/10.01.2/lib/st640ihg.upp
-#usr/share/ghostscript/10.01.2/lib/st640p.upp
-#usr/share/ghostscript/10.01.2/lib/st640pg.upp
-#usr/share/ghostscript/10.01.2/lib/st640pl.upp
-#usr/share/ghostscript/10.01.2/lib/st640plg.upp
-#usr/share/ghostscript/10.01.2/lib/stc.upp
-#usr/share/ghostscript/10.01.2/lib/stc1520h.upp
-#usr/share/ghostscript/10.01.2/lib/stc2.upp
-#usr/share/ghostscript/10.01.2/lib/stc200_h.upp
-#usr/share/ghostscript/10.01.2/lib/stc2_h.upp
-#usr/share/ghostscript/10.01.2/lib/stc2s_h.upp
-#usr/share/ghostscript/10.01.2/lib/stc300.upp
-#usr/share/ghostscript/10.01.2/lib/stc300bl.upp
-#usr/share/ghostscript/10.01.2/lib/stc300bm.upp
-#usr/share/ghostscript/10.01.2/lib/stc500p.upp
-#usr/share/ghostscript/10.01.2/lib/stc500ph.upp
-#usr/share/ghostscript/10.01.2/lib/stc600ih.upp
-#usr/share/ghostscript/10.01.2/lib/stc600p.upp
-#usr/share/ghostscript/10.01.2/lib/stc600pl.upp
-#usr/share/ghostscript/10.01.2/lib/stc640p.upp
-#usr/share/ghostscript/10.01.2/lib/stc740ih.upp
-#usr/share/ghostscript/10.01.2/lib/stc800ih.upp
-#usr/share/ghostscript/10.01.2/lib/stc800p.upp
-#usr/share/ghostscript/10.01.2/lib/stc800pl.upp
-#usr/share/ghostscript/10.01.2/lib/stc_h.upp
-#usr/share/ghostscript/10.01.2/lib/stc_l.upp
-#usr/share/ghostscript/10.01.2/lib/stcany.upp
-#usr/share/ghostscript/10.01.2/lib/stcany_h.upp
-#usr/share/ghostscript/10.01.2/lib/stcinfo.ps
-#usr/share/ghostscript/10.01.2/lib/stcolor.ps
-#usr/share/ghostscript/10.01.2/lib/stocht.ps
-#usr/share/ghostscript/10.01.2/lib/traceimg.ps
-#usr/share/ghostscript/10.01.2/lib/traceop.ps
-#usr/share/ghostscript/10.01.2/lib/uninfo.ps
-#usr/share/ghostscript/10.01.2/lib/viewcmyk.ps
-#usr/share/ghostscript/10.01.2/lib/viewgif.ps
-#usr/share/ghostscript/10.01.2/lib/viewjpeg.ps
-#usr/share/ghostscript/10.01.2/lib/viewmiff.ps
-#usr/share/ghostscript/10.01.2/lib/viewpbm.ps
-#usr/share/ghostscript/10.01.2/lib/viewpcx.ps
-#usr/share/ghostscript/10.01.2/lib/viewps2a.ps
-#usr/share/ghostscript/10.01.2/lib/winmaps.ps
-#usr/share/ghostscript/10.01.2/lib/zeroline.ps
+#usr/share/ghostscript/10.02.1
+#usr/share/ghostscript/10.02.1/lib
+#usr/share/ghostscript/10.02.1/lib/PDFA_def.ps
+#usr/share/ghostscript/10.02.1/lib/PDFX_def.ps
+#usr/share/ghostscript/10.02.1/lib/PM760p.upp
+#usr/share/ghostscript/10.02.1/lib/PM760pl.upp
+#usr/share/ghostscript/10.02.1/lib/PM820p.upp
+#usr/share/ghostscript/10.02.1/lib/PM820pl.upp
+#usr/share/ghostscript/10.02.1/lib/Stc670p.upp
+#usr/share/ghostscript/10.02.1/lib/Stc670pl.upp
+#usr/share/ghostscript/10.02.1/lib/Stc680p.upp
+#usr/share/ghostscript/10.02.1/lib/Stc680pl.upp
+#usr/share/ghostscript/10.02.1/lib/Stc740p.upp
+#usr/share/ghostscript/10.02.1/lib/Stc740pl.upp
+#usr/share/ghostscript/10.02.1/lib/Stc760p.upp
+#usr/share/ghostscript/10.02.1/lib/Stc760pl.upp
+#usr/share/ghostscript/10.02.1/lib/Stc777p.upp
+#usr/share/ghostscript/10.02.1/lib/Stc777pl.upp
+#usr/share/ghostscript/10.02.1/lib/Stp720p.upp
+#usr/share/ghostscript/10.02.1/lib/Stp720pl.upp
+#usr/share/ghostscript/10.02.1/lib/Stp870p.upp
+#usr/share/ghostscript/10.02.1/lib/Stp870pl.upp
+#usr/share/ghostscript/10.02.1/lib/acctest.ps
+#usr/share/ghostscript/10.02.1/lib/align.ps
+#usr/share/ghostscript/10.02.1/lib/bj8.rpd
+#usr/share/ghostscript/10.02.1/lib/bj8gc12f.upp
+#usr/share/ghostscript/10.02.1/lib/bj8hg12f.upp
+#usr/share/ghostscript/10.02.1/lib/bj8oh06n.upp
+#usr/share/ghostscript/10.02.1/lib/bj8pa06n.upp
+#usr/share/ghostscript/10.02.1/lib/bj8pp12f.upp
+#usr/share/ghostscript/10.02.1/lib/bj8ts06n.upp
+#usr/share/ghostscript/10.02.1/lib/bjc6000a1.upp
+#usr/share/ghostscript/10.02.1/lib/bjc6000b1.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610a0.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610a1.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610a2.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610a3.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610a4.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610a5.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610a6.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610a7.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610a8.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610b1.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610b2.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610b3.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610b4.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610b6.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610b7.upp
+#usr/share/ghostscript/10.02.1/lib/bjc610b8.upp
+#usr/share/ghostscript/10.02.1/lib/caption.ps
+#usr/share/ghostscript/10.02.1/lib/cbjc600.ppd
+#usr/share/ghostscript/10.02.1/lib/cbjc800.ppd
+#usr/share/ghostscript/10.02.1/lib/cdj550.upp
+#usr/share/ghostscript/10.02.1/lib/cdj690.upp
+#usr/share/ghostscript/10.02.1/lib/cdj690ec.upp
+#usr/share/ghostscript/10.02.1/lib/cid2code.ps
+#usr/share/ghostscript/10.02.1/lib/dnj750c.upp
+#usr/share/ghostscript/10.02.1/lib/dnj750m.upp
+#usr/share/ghostscript/10.02.1/lib/docie.ps
+#usr/share/ghostscript/10.02.1/lib/font2pcl.ps
+#usr/share/ghostscript/10.02.1/lib/ghostpdf.ppd
+#usr/share/ghostscript/10.02.1/lib/gs_ce_e.ps
+#usr/share/ghostscript/10.02.1/lib/gs_css_e.ps
+#usr/share/ghostscript/10.02.1/lib/gs_il2_e.ps
+#usr/share/ghostscript/10.02.1/lib/gs_kanji.ps
+#usr/share/ghostscript/10.02.1/lib/gs_ksb_e.ps
+#usr/share/ghostscript/10.02.1/lib/gs_l.xbm
+#usr/share/ghostscript/10.02.1/lib/gs_l.xpm
+#usr/share/ghostscript/10.02.1/lib/gs_l_m.xbm
+#usr/share/ghostscript/10.02.1/lib/gs_lgo_e.ps
+#usr/share/ghostscript/10.02.1/lib/gs_lgx_e.ps
+#usr/share/ghostscript/10.02.1/lib/gs_m.xbm
+#usr/share/ghostscript/10.02.1/lib/gs_m.xpm
+#usr/share/ghostscript/10.02.1/lib/gs_m_m.xbm
+#usr/share/ghostscript/10.02.1/lib/gs_s.xbm
+#usr/share/ghostscript/10.02.1/lib/gs_s.xpm
+#usr/share/ghostscript/10.02.1/lib/gs_s_m.xbm
+#usr/share/ghostscript/10.02.1/lib/gs_t.xbm
+#usr/share/ghostscript/10.02.1/lib/gs_t.xpm
+#usr/share/ghostscript/10.02.1/lib/gs_t_m.xbm
+#usr/share/ghostscript/10.02.1/lib/gs_wl1_e.ps
+#usr/share/ghostscript/10.02.1/lib/gs_wl2_e.ps
+#usr/share/ghostscript/10.02.1/lib/gs_wl5_e.ps
+#usr/share/ghostscript/10.02.1/lib/gslp.ps
+#usr/share/ghostscript/10.02.1/lib/gsnup.ps
+#usr/share/ghostscript/10.02.1/lib/ht_ccsto.ps
+#usr/share/ghostscript/10.02.1/lib/image-qa.ps
+#usr/share/ghostscript/10.02.1/lib/jispaper.ps
+#usr/share/ghostscript/10.02.1/lib/landscap.ps
+#usr/share/ghostscript/10.02.1/lib/lines.ps
+#usr/share/ghostscript/10.02.1/lib/mkcidfm.ps
+#usr/share/ghostscript/10.02.1/lib/necp2x.upp
+#usr/share/ghostscript/10.02.1/lib/necp2x6.upp
+#usr/share/ghostscript/10.02.1/lib/pdf2dsc.ps
+#usr/share/ghostscript/10.02.1/lib/pdf_info.ps
+#usr/share/ghostscript/10.02.1/lib/pf2afm.ps
+#usr/share/ghostscript/10.02.1/lib/pfbtopfa.ps
+#usr/share/ghostscript/10.02.1/lib/ppath.ps
+#usr/share/ghostscript/10.02.1/lib/pphs.ps
+#usr/share/ghostscript/10.02.1/lib/prfont.ps
+#usr/share/ghostscript/10.02.1/lib/printafm.ps
+#usr/share/ghostscript/10.02.1/lib/ps2ai.ps
+#usr/share/ghostscript/10.02.1/lib/ps2epsi.ps
+#usr/share/ghostscript/10.02.1/lib/ras1.upp
+#usr/share/ghostscript/10.02.1/lib/ras24.upp
+#usr/share/ghostscript/10.02.1/lib/ras3.upp
+#usr/share/ghostscript/10.02.1/lib/ras32.upp
+#usr/share/ghostscript/10.02.1/lib/ras4.upp
+#usr/share/ghostscript/10.02.1/lib/ras8m.upp
+#usr/share/ghostscript/10.02.1/lib/rollconv.ps
+#usr/share/ghostscript/10.02.1/lib/s400a1.upp
+#usr/share/ghostscript/10.02.1/lib/s400b1.upp
+#usr/share/ghostscript/10.02.1/lib/sharp.upp
+#usr/share/ghostscript/10.02.1/lib/sipixa6.upp
+#usr/share/ghostscript/10.02.1/lib/st640ih.upp
+#usr/share/ghostscript/10.02.1/lib/st640ihg.upp
+#usr/share/ghostscript/10.02.1/lib/st640p.upp
+#usr/share/ghostscript/10.02.1/lib/st640pg.upp
+#usr/share/ghostscript/10.02.1/lib/st640pl.upp
+#usr/share/ghostscript/10.02.1/lib/st640plg.upp
+#usr/share/ghostscript/10.02.1/lib/stc.upp
+#usr/share/ghostscript/10.02.1/lib/stc1520h.upp
+#usr/share/ghostscript/10.02.1/lib/stc2.upp
+#usr/share/ghostscript/10.02.1/lib/stc200_h.upp
+#usr/share/ghostscript/10.02.1/lib/stc2_h.upp
+#usr/share/ghostscript/10.02.1/lib/stc2s_h.upp
+#usr/share/ghostscript/10.02.1/lib/stc300.upp
+#usr/share/ghostscript/10.02.1/lib/stc300bl.upp
+#usr/share/ghostscript/10.02.1/lib/stc300bm.upp
+#usr/share/ghostscript/10.02.1/lib/stc500p.upp
+#usr/share/ghostscript/10.02.1/lib/stc500ph.upp
+#usr/share/ghostscript/10.02.1/lib/stc600ih.upp
+#usr/share/ghostscript/10.02.1/lib/stc600p.upp
+#usr/share/ghostscript/10.02.1/lib/stc600pl.upp
+#usr/share/ghostscript/10.02.1/lib/stc640p.upp
+#usr/share/ghostscript/10.02.1/lib/stc740ih.upp
+#usr/share/ghostscript/10.02.1/lib/stc800ih.upp
+#usr/share/ghostscript/10.02.1/lib/stc800p.upp
+#usr/share/ghostscript/10.02.1/lib/stc800pl.upp
+#usr/share/ghostscript/10.02.1/lib/stc_h.upp
+#usr/share/ghostscript/10.02.1/lib/stc_l.upp
+#usr/share/ghostscript/10.02.1/lib/stcany.upp
+#usr/share/ghostscript/10.02.1/lib/stcany_h.upp
+#usr/share/ghostscript/10.02.1/lib/stcinfo.ps
+#usr/share/ghostscript/10.02.1/lib/stcolor.ps
+#usr/share/ghostscript/10.02.1/lib/stocht.ps
+#usr/share/ghostscript/10.02.1/lib/traceimg.ps
+#usr/share/ghostscript/10.02.1/lib/traceop.ps
+#usr/share/ghostscript/10.02.1/lib/uninfo.ps
+#usr/share/ghostscript/10.02.1/lib/viewcmyk.ps
+#usr/share/ghostscript/10.02.1/lib/viewgif.ps
+#usr/share/ghostscript/10.02.1/lib/viewjpeg.ps
+#usr/share/ghostscript/10.02.1/lib/viewmiff.ps
+#usr/share/ghostscript/10.02.1/lib/viewpbm.ps
+#usr/share/ghostscript/10.02.1/lib/viewpcx.ps
+#usr/share/ghostscript/10.02.1/lib/viewps2a.ps
+#usr/share/ghostscript/10.02.1/lib/winmaps.ps
+#usr/share/ghostscript/10.02.1/lib/zeroline.ps
 #usr/share/ghostscript/fonts
 #usr/share/ghostscript/fonts/COPYING
 #usr/share/ghostscript/fonts/ChangeLog
diff --git a/lfs/alsa b/lfs/alsa
index 7931a94fc..a0a517ed8 100644
--- a/lfs/alsa
+++ b/lfs/alsa
@@ -26,9 +26,9 @@ include Config
 
 SUMMARY    = Advanced Linux Sound Architecture
 
-VER        = 1.2.9
-UVER       = 1.2.9
-CVER       = 1.2.9
+VER        = 1.2.10
+UVER       = 1.2.10
+CVER       = 1.2.10
 FVER       = 1.2.4
 
 VERSUFIX   = ipfire$(KCFG)
@@ -38,7 +38,7 @@ DL_FILE    = $(THISAPP).tar.bz2
 DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 PROG       = alsa
-PAK_VER    = 17
+PAK_VER    = 18
 
 DEPS       =
 
@@ -58,10 +58,10 @@ alsa-utils-$(UVER).tar.bz2 = $(DL_FROM)/alsa-utils-$(UVER).tar.bz2
 alsa-firmware-$(FVER).tar.bz2 = $(DL_FROM)/alsa-firmware-$(FVER).tar.bz2
 alsa-ucm-conf-$(CVER).tar.bz2 = $(DL_FROM)/alsa-ucm-conf-$(CVER).tar.bz2
 
-$(DL_FILE)_BLAKE2 = ec0c6966802196016679652292a579c6301cce33a2e887fce79cdb80629b6df047269787445cf0645e6cf43d3d2aae8fa57ddad5ab79fc254ee65a0ed695f449
-alsa-utils-$(UVER).tar.bz2_BLAKE2 = 9d75f63c7ff8b0d7ee835a1ad8fc242dee9b59770b1ad0ff9cd233caf50ac844323fb2ebb8e649f03a0a30a161ec72cba472ac79e390c3f0eb6e2a184d8f576c
+$(DL_FILE)_BLAKE2 = b2e4f8431e61f5bb56b2b5d124e67d5a68bbca3c647bebfa93f5e5ff092ec9ef3f6cb6315801fcd93e21151784814ff238d357313b8b44f32d4e7c9ee565388f
+alsa-utils-$(UVER).tar.bz2_BLAKE2 = 077b4ad090c1ab40dd4fa22db01ae2a080ca849a5564dfe612654993297c80bd3584541c7e68aaad56c4c05538ba0de449e4677b1c4a9dfe56d8e11706c4ca35
 alsa-firmware-$(FVER).tar.bz2_BLAKE2 = 0f844f6cc4859b72635f24d347b4c790469aee39aa60d9addb2c168dcf06b48e7e3cbba26ff21c7e1f5aa355641eec7ab934cb09bfac8ca116a6ac6a7db9d548
-alsa-ucm-conf-$(CVER).tar.bz2_BLAKE2 = fe71790aa8658ab12378baa55f95a03aaebd3eb0aef2535b65b89884de6cb404a75b44fd238d2089e0a005ca81720f3c44d1912452908e97aa75fcda513908cf
+alsa-ucm-conf-$(CVER).tar.bz2_BLAKE2 = 215842f1f59c2dea5e3f3fe880dc49d6263998746a50c2591b8a9786ead3afae2c713e179ff6e8caa518b3a8516a1b031872c1fad2a17fbd3afbb0390a803693
 
 install : $(TARGET)
 
diff --git a/lfs/clamav b/lfs/clamav
index 2a2cb0853..b64753c44 100644
--- a/lfs/clamav
+++ b/lfs/clamav
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Antivirus Toolkit
 
-VER        = 1.2.0
+VER        = 1.2.1
 
 THISAPP    = clamav-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = clamav
-PAK_VER    = 69
+PAK_VER    = 70
 
 DEPS       =
 
@@ -50,7 +50,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 83df24d253f71e2c200c13c318aa6a52d34830e5e464a90f2a84e5c1b75a64f366b73aa1da9f5780b70d6f3ab97496910484ab5d52441cc1909d5ab4685330c2
+$(DL_FILE)_BLAKE2 = 1373c6882b165e769dcc3c3631dfe7183231b2fe4830608b57d919af1a8e9a5a73aa3cc4767981a27bb9845390165b5241750904d50e1a90b7237200b97f7ef3
 
 
 install : $(TARGET)
diff --git a/lfs/configroot b/lfs/configroot
index 2c09ae4a8..66efe04b5 100644
--- a/lfs/configroot
+++ b/lfs/configroot
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2022  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -64,7 +64,7 @@ $(TARGET) :
 	for i in auth/users backup/include.user backup/exclude.user \
 	    captive/settings captive/agb.txt captive/clients captive/voucher_out certs/index.txt certs/index.txt.attr ddns/config ddns/settings ddns/ipcache dhcp/settings \
 	    dhcp/fixleases dhcp/advoptions dhcp/dhcpd.conf.local dns/settings dns/servers dnsforward/config ethernet/aliases ethernet/settings ethernet/known_nics ethernet/scanned_nics \
-	    ethernet/wireless extrahd/scan extrahd/devices extrahd/partitions extrahd/settings firewall/settings firewall/config firewall/locationblock firewall/input firewall/outgoing \
+	    ethernet/wireless extrahd/scan extrahd/devices extrahd/partitions extrahd/settings firewall/settings firewall/locationblock firewall/input firewall/outgoing \
 	    fwhosts/customnetworks fwhosts/customhosts fwhosts/customgroups fwhosts/customservicegrp fwhosts/customlocationgrp fwlogs/ipsettings fwlogs/portsettings ipblocklist/modified \
 	    ipblocklist/settings mac/settings main/hosts main/routing main/security main/settings optionsfw/settings \
 	    ovpn/ccd.conf ovpn/ccdroute ovpn/ccdroute2 pakfire/settings portfw/config ppp/settings-1 ppp/settings-2 ppp/settings-3 ppp/settings-4 \
@@ -102,6 +102,7 @@ $(TARGET) :
 	cp $(DIR_SRC)/config/cfgroot/logging-settings		$(CONFIG_ROOT)/logging/settings
 	cp $(DIR_SRC)/config/cfgroot/ethernet-vlans		$(CONFIG_ROOT)/ethernet/vlans
 	cp $(DIR_SRC)/langs/list				$(CONFIG_ROOT)/langs/
+	cp $(DIR_SRC)/config/firewall/config			$(CONFIG_ROOT)/firewall/config
 	cp $(DIR_SRC)/config/firewall/convert-xtaccess		/usr/sbin/convert-xtaccess
 	cp $(DIR_SRC)/config/firewall/convert-outgoingfw	/usr/sbin/convert-outgoingfw
 	cp $(DIR_SRC)/config/firewall/convert-dmz		/usr/sbin/convert-dmz
diff --git a/lfs/dbus b/lfs/dbus
index f6f9c90a5..bd351a6f9 100644
--- a/lfs/dbus
+++ b/lfs/dbus
@@ -26,15 +26,14 @@ include Config
 
 SUMMARY    = D-Bus Message Bus System
 
-VER        = 1.14.6
-
+VER        = 1.14.10
 THISAPP    = dbus-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
 DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = dbus
-PAK_VER    = 10
+PAK_VER    = 11
 
 DEPS       =
 
@@ -48,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = c3b8a3bc455a65eb4c561fc701547760c4236912d9caf29822547c7ac4a5852d951c2a484e5eb0435f9d40dfa131e28b7243d5350318ea212aac7c28670ab355
+$(DL_FILE)_BLAKE2 = f605b0810dcde6a0753384927131e7f4675be737ad7506a51261717c2622e74b99ac33cc2c199b98e5aa6b9d7c68ef692b8ee9f684f6fdab8d06c6fa861a6f6b
 
 install : $(TARGET)
 
@@ -83,10 +82,10 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@rm -rf $(DIR_SRC)/dbus*
 	cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
 	cd $(DIR_APP) && ./configure \
-	                    --prefix=/usr \
-	                    --sysconfdir=/etc \
-				        --localstatedir=/var \
-				        --disable-static
+				--prefix=/usr \
+				--sysconfdir=/etc \
+				--localstatedir=/var \
+				--disable-static
 	cd $(DIR_APP) && make $(MAKETUNING)
 	cd $(DIR_APP) && make install
 
diff --git a/lfs/dhcpcd b/lfs/dhcpcd
index 2323b6104..da832046a 100644
--- a/lfs/dhcpcd
+++ b/lfs/dhcpcd
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 10.0.2
+VER        = 10.0.4
 
 THISAPP    = dhcpcd-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 999033b4c0bc46943332b0b7ed3f1869ad54e2c37346523a15fbd3d9f29db1e01c1ddd0a300826021d3e20493ea06358ef47ac6a02c50331ca0d90e31a123b85
+$(DL_FILE)_BLAKE2 = 770ee398eccff20cd4a37f89b841f8d580d9a42b456d93673ab3bf6ddf1ed0e49feda47ea8c1206a8a8582bccde80f45c3efbf2e1d0e493b06f04e2c6df876af
 
 install : $(TARGET)
 
@@ -71,8 +71,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
 	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
 	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-10.0.2-Allow-free-selection-of-MTU-by-the-user.patch
-	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-10.0.2-fix-off-by-one-overflow-when-read.patch
-	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/dhcpcd-10.0.2-privsep-fix-strlcpy-overflow-in-psp-ifname.patch
 	cd $(DIR_APP) && ./configure \
 			--prefix="" \
 			--sysconfdir=/var/ipfire/dhcpc \
diff --git a/lfs/gawk b/lfs/gawk
index 710d7c484..3a84db3ed 100644
--- a/lfs/gawk
+++ b/lfs/gawk
@@ -25,7 +25,7 @@
 
 include Config
 
-VER        = 5.2.2
+VER        = 5.3.0
 
 THISAPP    = gawk-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -49,7 +49,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 49dd69d3e2414867d60fe42b74b39bc6858114aeeb9305ade7bfd64f1933b3c93d59d127362b614cb4b73e29279ed3b4ea9fa0da94fce98ca9925980d17b5d0c
+$(DL_FILE)_BLAKE2 = 1bab754626a51679e4d6fe4552bc965f402a51d176eab30686bf19c74085fd15507b51514c3c46d38f68d3e98da4326c138411abe12e4d8793cec617b2533f3c
 
 install : $(TARGET)
 
diff --git a/lfs/ghostscript b/lfs/ghostscript
index a41375fce..9c947df7d 100644
--- a/lfs/ghostscript
+++ b/lfs/ghostscript
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = The Ghostscript interpreter for PostScript and PDF
 
-VER        = 10.01.2
+VER        = 10.02.1
 
 THISAPP    = ghostscript-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = ghostscript
-PAK_VER    = 15
+PAK_VER    = 16
 
 DEPS       = cups dbus
 
@@ -52,7 +52,7 @@ $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 ghostscript-fonts-std-8.11.tar.gz = $(URL_IPFIRE)/ghostscript-fonts-std-8.11.tar.gz
 gnu-gs-fonts-other-6.0.tar.gz = $(URL_IPFIRE)/gnu-gs-fonts-other-6.0.tar.gz
 
-$(DL_FILE)_BLAKE2 = d5bedfe058a9b982da3a5a9935617add8d963291f135e047369439eeb0b1587e697511fe4a2a9633cfb49594d3a36467d1df7904125f53c70d8161dc9825ff32
+$(DL_FILE)_BLAKE2 = b491473f0b3d50121e4373e21af3d8cdf55d9ca4390b240c4cb88d0d44e707e32570a7f1f05cb656d1b65443fcd7e37f5eab404d72a20f83d8fd87370a585467
 ghostscript-fonts-std-8.11.tar.gz_BLAKE2 = 1d8ae8f7813623a36e160bdd0ca9ccf33c67b945dd96952eb0e37e9bb5bb4ba5daf7df4da5ba53c1d25d6598a0576990ba7e094b8c395778cb9cdfd32761454c
 gnu-gs-fonts-other-6.0.tar.gz_BLAKE2 = 001709983161519365bcef23fef3705071b67253ff3b557c45d2ec892987815444d8dd1d213e94bc02e361917c061c723043bf04c98b0a1e38c9cd1f265d1312
 
diff --git a/lfs/git b/lfs/git
index 879c1aa3a..b74b3c8d8 100644
--- a/lfs/git
+++ b/lfs/git
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.42.0
+VER        = 2.42.1
 SUMMARY    = Fast, scalable, distributed revision control system
 
 THISAPP    = git-$(VER)
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = git
-PAK_VER    = 29
+PAK_VER    = 30
 
 DEPS       = perl-Authen-SASL perl-MIME-Base64 perl-Net-SMTP-SSL
 
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = efe8abd42955a7aee32a12067466d1d8dfc3946f40750254ad431bab7debe3398a9fd4833817a93f6496229184e7890034581300d8c94a98f0c0a209f3021bf4
+$(DL_FILE)_BLAKE2 = 913427edcf02bc6ee4b07ba9ceb2f7ebc1482512016d24f838439150809ca2f8b496ec705f7894c5cc1b66a10e3d95bbff5b004e20b0637e29a805f07578cd39
 
 install : $(TARGET)
 
diff --git a/lfs/harfbuzz b/lfs/harfbuzz
index 57b7cef3a..8febd8a41 100644
--- a/lfs/harfbuzz
+++ b/lfs/harfbuzz
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 8.1.1
+VER        = 8.2.2
 
 THISAPP    = harfbuzz-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 341603e50aec5294eb16fb431975304ee9badce5588d726c5ccbcf9e38878581c4bbf2e09f27c3d401da52c93121702f220cd207792448af66a9f23830df9114
+$(DL_FILE)_BLAKE2 = 5a26aa802b6e1afec734e59a9c280b4d336bb8ad72e0fbe6687237c150faa4d10fb2ae956b58394d7f6a2d1b97e6c91cd597a9b5146dcc3d2841d18d76611ec5
 
 install : $(TARGET)
 
diff --git a/lfs/iana-etc b/lfs/iana-etc
index f63198aa7..8e65cd5a8 100644
--- a/lfs/iana-etc
+++ b/lfs/iana-etc
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 20230810
+VER        = 20231026
 #		https://github.com/Mic92/iana-etc
 
 THISAPP    = iana-etc-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = ae259044920089b53fe5f711920e0f6bdc96a4d8a899b543e5a1782949a06ff93d9d5ca43096e0e32d904a9c68f30a688722b726f14a8b0a0d2104fb39e64b9e
+$(DL_FILE)_BLAKE2 = ce00884cc5ffeb7cc9fe7e3efb8f793282649bb4e1f914c9be6208afc8d81a79511f5910ae2906ffe64a88004007fdd05affe40153782d771bf1824cae834c8e
 
 install : $(TARGET)
 
diff --git a/lfs/jq b/lfs/jq
index f67961990..17fc8e88e 100644
--- a/lfs/jq
+++ b/lfs/jq
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2020  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.6
+VER        = 1.7
 
 THISAPP    = jq-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = c9be1314e9d027247de63492ee362e996ef85faf45a47ee421cad95ebde9188bff8d3fc7db64e717ab922e1052f3b1c1500f5589fc5b2199ab66effb000e442d
+$(DL_FILE)_BLAKE2 = eec09a90ab1b131e18ed02ffdb7070df98f540b6c54d3cf225d2171527ec384e651cf83325569707798152af3e89d9c3fa2326c86164d2535e774ddc3926112b
 
 install : $(TARGET)
 
diff --git a/lfs/qpdf b/lfs/qpdf
index bdcf43082..f155d274c 100644
--- a/lfs/qpdf
+++ b/lfs/qpdf
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 11.5.0
+VER        = 11.6.1
 
 THISAPP    = qpdf-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 54545665a31cf0cbfc50faa18f1dc64f036cd5bfd2b274ff443718e704e26f3a8cf83600f9dd7d8039cf4bdcaf42e1c14f03db775226b56c8ba53be33e0ca522
+$(DL_FILE)_BLAKE2 = fd6163963eb192b38ed1e78cba443e9e247e6ff408efd6cb480c81ac3d9d233e00edf9ef0858e51ac755b2b7cea0d8763ac6dda3fe9d54618114b4b3a00d5b15
 
 install : $(TARGET)
 
diff --git a/lfs/spectre-meltdown-checker b/lfs/spectre-meltdown-checker
index bfb429363..4bfe5274f 100644
--- a/lfs/spectre-meltdown-checker
+++ b/lfs/spectre-meltdown-checker
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2022  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Spectre & Meltdown Vulnerability Checker
 
-VER        = 0.45
+VER        = 0.46
 
 THISAPP    = spectre-meltdown-checker-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = spectre-meltdown-checker
-PAK_VER    = 6
+PAK_VER    = 7
 
 DEPS       =
 
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 14d49f40458167ab9af04cc31c9a0b9f8cb5f1e9417f5ac0bab0290be01cf14a737c716d8d28873fee1870535c0b36a56dac2d39f2cc7a000d27f0643a94cff7
+$(DL_FILE)_BLAKE2 = 355469c2176fffa8fb40695b47174959c9112e66cd870545ed424ef7b6ef4c10a5aa94bfbc6912510c979e16b0f8a18c0b822200eb69e9ded8300305d779fa79
 
 install : $(TARGET)
 
diff --git a/lfs/sqlite b/lfs/sqlite
index 01477e47d..56fe08a96 100644
--- a/lfs/sqlite
+++ b/lfs/sqlite
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3430000
+VER        = 3430100
 
 THISAPP    = sqlite-autoconf-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = dc5a5df76ffe86eb61438031ef3893fbe412f7c7607826dd032293ced06b2f76dfb5f6b85ba80e857069ea4244a3ec222f3f247faec192778c3ecfcc810faa07
+$(DL_FILE)_BLAKE2 = 35a47ccb83b3f24e76c7f34bd7cf40626022672f7e6570b809b30733b1b352d675215d4e1f795a24b4eb2c0ed582c5dc99cf4a12dad83c167df6a589e1b46f3f
 
 install : $(TARGET)
 
diff --git a/lfs/squid b/lfs/squid
index cd424e8bb..d92341794 100644
--- a/lfs/squid
+++ b/lfs/squid
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 6.3
+VER        = 6.5
 
 THISAPP    = squid-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -46,7 +46,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 7b94f870a78cd7f29ee762aa3c0c6d72412e719c65a2d3730b744b6ac6da1b26b15da42d89c004214b2574e53321d904af175ef156430459eae09d560895de5b
+$(DL_FILE)_BLAKE2 = 91ed91f9b0f56f440a7f15a63bbc3e19537b60bc8b31b5bf7e16884367d0da060c5490e1721dbd7c5fce7f4a4e958fb3554d6bdc5b55f568598f907722b651de
 
 install : $(TARGET)
 
diff --git a/lfs/unbound b/lfs/unbound
index 5fd114ccf..22bb2e1ce 100644
--- a/lfs/unbound
+++ b/lfs/unbound
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.18.0
+VER        = 1.19.0
 
 THISAPP    = unbound-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 55f68cdb08281adaa7446f9b284d850e5e0cbbcbeda98609d9f8297d1bb298fcba51fa0a0805df5acc0a475397c65d295a33ae26144cdafbedb9686915dd174b
+$(DL_FILE)_BLAKE2 = 66ec2b1cd32ac5930c088c73e884bc1fb4d35526a0c89bdbe209defd3e78326ce9b3c1a523fc1ab28b8fdf0e457280d5de7b300cf560c15d875f460bc361f5c7
 
 install : $(TARGET)
 
diff --git a/make.sh b/make.sh
index fce5024a5..d5d194cc8 100755
--- a/make.sh
+++ b/make.sh
@@ -23,7 +23,7 @@ NAME="IPFire"							# Software name
 SNAME="ipfire"							# Short name
 # If you update the version don't forget to update backupiso and add it to core update
 VERSION="2.27"							# Version number
-CORE="181"							# Core Level (Filename)
+CORE="182"							# Core Level (Filename)
 SLOGAN="www.ipfire.org"						# Software slogan
 CONFIG_ROOT=/var/ipfire						# Configuration rootdir
 MAX_RETRIES=1							# prefetch/check loop
diff --git a/src/patches/dhcpcd-10.0.2-fix-off-by-one-overflow-when-read.patch b/src/patches/dhcpcd-10.0.2-fix-off-by-one-overflow-when-read.patch
deleted file mode 100644
index 9e9cf3695..000000000
--- a/src/patches/dhcpcd-10.0.2-fix-off-by-one-overflow-when-read.patch
+++ /dev/null
@@ -1,26 +0,0 @@
-From f798bf23af8e5a0eae38931912e2b67e1d45aca4 Mon Sep 17 00:00:00 2001
-From: Tobias Heider <tobhe(a)users.noreply.github.com>
-Date: Sat, 12 Aug 2023 21:59:21 +0200
-Subject: [PATCH] dhcpcd: Fix off-by-one overflow when read() writes full
- BUFSIZ (#236)
-
----
- src/dhcpcd.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/src/dhcpcd.c b/src/dhcpcd.c
-index e06733d3..688a3a6d 100644
---- a/src/dhcpcd.c
-+++ b/src/dhcpcd.c
-@@ -1822,7 +1822,7 @@ dhcpcd_stderr_cb(void *arg, unsigned short events)
- 	if (!(events & ELE_READ))
- 		return;
- 
--	len = read(ctx->stderr_fd, log, sizeof(log));
-+	len = read(ctx->stderr_fd, log, sizeof(log) - 1);
- 	if (len == -1) {
- 		if (errno != ECONNRESET)
- 			logerr(__func__);
--- 
-2.39.2
-
diff --git a/src/patches/dhcpcd-10.0.2-privsep-fix-strlcpy-overflow-in-psp-ifname.patch b/src/patches/dhcpcd-10.0.2-privsep-fix-strlcpy-overflow-in-psp-ifname.patch
deleted file mode 100644
index 07c87017e..000000000
--- a/src/patches/dhcpcd-10.0.2-privsep-fix-strlcpy-overflow-in-psp-ifname.patch
+++ /dev/null
@@ -1,28 +0,0 @@
-From 1bd8fc7d4b34f752a32709d277a897e5ad202d97 Mon Sep 17 00:00:00 2001
-From: Tobias Heider <tobhe(a)users.noreply.github.com>
-Date: Tue, 15 Aug 2023 18:06:48 +0200
-Subject: [PATCH] privsep: fix strlcpy overflow in psp_ifname (#239)
-
-When running our Ubuntu tests with libc6 and strlcpy overflow checks
-enabled we found that the wrong size is passed to strlcpy resulting
-in a crash because of an overflow.
----
- src/privsep.c | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/src/privsep.c b/src/privsep.c
-index b11c0351..cfe54742 100644
---- a/src/privsep.c
-+++ b/src/privsep.c
-@@ -1200,7 +1200,7 @@ ps_newprocess(struct dhcpcd_ctx *ctx, struct ps_id *psid)
- #endif
- 
- 	if (!(ctx->options & DHCPCD_MANAGER))
--		strlcpy(psp->psp_ifname, ctx->ifv[0], sizeof(psp->psp_name));
-+		strlcpy(psp->psp_ifname, ctx->ifv[0], sizeof(psp->psp_ifname));
- 	TAILQ_INSERT_TAIL(&ctx->ps_processes, psp, next);
- 	return psp;
- }
--- 
-2.39.2
-


hooks/post-receive
--
IPFire 2.x development tree

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2023-11-21 19:14 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-11-21 19:14 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 8a88d06663292a88c0b3924ea9e90171b81899c2 Peter Müller

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox