public inbox for ipfire-scm@lists.ipfire.org
 help / color / mirror / Atom feed
* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 98278fef4c3321387c1673bddaa652fb0adb922d
@ 2024-06-04 13:09 Arne Fitzenreiter
  0 siblings, 0 replies; only message in thread
From: Arne Fitzenreiter @ 2024-06-04 13:09 UTC (permalink / raw)
  To: ipfire-scm

[-- Attachment #1: Type: text/plain, Size: 86680 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  98278fef4c3321387c1673bddaa652fb0adb922d (commit)
       via  a03adc928e832b8b6617cdb153aabea3a3ff42ef (commit)
       via  ed562f8ddee52bc52ee319d965f713c7f72962aa (commit)
       via  c7235a2c63651d629c728bdce8e21b03d2687dd3 (commit)
       via  dec072b2441be3efb091463a61b105fc85e1ae48 (commit)
       via  c375bcf8cd703e23ca2da222c469a4784b5bfd67 (commit)
       via  db27ff326e5d39d68dce72ef39b2b0f5ec54092e (commit)
       via  f3d6e2a0fbb21b78e3a5247049bc7b21595f2153 (commit)
      from  f62e4836012046ecb3c9ecc2ed104b9f8f07b032 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 98278fef4c3321387c1673bddaa652fb0adb922d
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed May 29 21:03:13 2024 +0200

    nut: Update to version 2.8.2
    
    - Update from version 2.8.1 to 2.8.2
    - Update of rootfile
    - Changelog
        2.8.2
    	 - Fix fallout of development in NUT v2.8.0 and/or v2.8.1:
    	   * dstate machinery: a segmentation fault (null pointer dereference) was
    	     possible with `INSTCMD` processing of commands without parameters nor
    	     `TRACKING` identifier. [#2155]
    	   * USB bus number detection for libusb-1.0 builds was overly zealous and
    	     wrongly considered zero values as an error. [#2198]
    	   * `upsmon` recognition of `CAL` state could linger after the calibration
    	     activity was completed by the hardware, which led to mis-processing of
    	     shutdown triggers. Also, notification was added to report "finished
    	     calibration". [issue #2168, PR #2169]
    	   * `upsmon` recognition of `OFF` state as a trigger for FSD (forced shut
    	     down) criticality considered also the input line state, which may be
    	     an independently evolving circumstance. [issue #2278, PR #2279]
    	   * `upsmon` support for `POLLFAIL_LOG_THROTTLE_MAX` did not neuter the
    	     applied setting when live-reloading configuration, so commenting it
    	     away in `upsmon.conf` did not have the effect of resetting the logging
    	     frequency to default. It also did not reset the counters to certainly
    	     follow the new configuration for existing faults. [issue #2207, PR #2209]
    	   * `upsmon` support for `POLLFAIL_LOG_THROTTLE_MAX` had an off-by-one error
    	     (e.g. reporting "Data stale" or "Driver not connected" every 30 sec with
    	     `POLLFAIL_LOG_THROTTLE_MAX 5` and `POLLFREQ 5` settings). [#2207]
    	   * Drivers running with non-default user account (e.g. with `user=root`
    	     in their configuration) failed to apply group ownership and permissions
    	     to their Unix socket file for interaction with the local data server.
    	     [#2185, #2096]
    	   * Dispatcher script `scripts/python/app/NUT-Monitor` referenced `py3qt3`
    	     instead of the correct `py3qt5`. It also tries to check both `py2gtk2`
    	     and `py3qt5` implementations verbosely, even if one is not installed.
    	     [#2199, #2201]
    	   * Set the `DesktopFileName` in `scripts/python/app/NUT-Monitor-py3qt5`,
    	     this binds the application with the desktop file and allow the Open
    	     Desktop compatible implementation to display the proper icon and
    	     application name. [#2205]
    	   * Original recipe for `apc_modbus` strictly required USB support even if
    	     building NUT without it. [#2262]
    	   * Builds requested with a specific C/C++ language standard revision via
    	     `CFLAGS` and `CXXFLAGS` should again be honoured. [PR #2306]
    	   * Allow requesting detailed debug builds (with disabled optimizations for
    	     binaries to best match the source code) for supported compilers using
    	     `configure` script option `--with-debuginfo`. Note that default autoconf
    	     behavior usually embeds moderate optimizations and debug information on
    	     its own. [PR #2310]
    	   * A fix applied among clean-ups between NUT v2.7.4 and v2.8.0 releases
    	     backfired for `usbhid-ups` subdriver `belkin-hid` which in practice
    	     relied on the broken older behavior; more details in its entry below.
    	     [PR #2371]
    	 - nut-usbinfo.pl, nut-scanner and libnutscan:
    	   * Library API version for `libnutscan` was bumped from 2.2.0 to 2.5.0
    	     during evolution of this NUT release.
    	   * USB VendorID:ProductID support list files generated by the script for
    	     different OS frameworks now include a comment with other possibly
    	     compatible driver names, where the respective file format allows for
    	     comments.
    	   * Added the concept of `alt_driver_names` in `nutscan_device_t` structure
    	     for ability to suggest a comment with other possibly compatible driver
    	     names in configuration snippets generated by `nut-scanner`; practical
    	     support implemented for USB connected drivers.
    	   * Added the concept of commented-away suggested option values `comment_tag`
    	     and a method to `nutscan_add_commented_option_to_device()`, instead of
    	     hacks in prepared config data which broke some use-cases. [#2221]
    	   * Command-line option `-U` for USB scan can now be specified several times
    	     to increase the detail level about hardware link to the device (this was
    	     previously always suggested, but may be not reliable if USB enumeration
    	     gets changed over time). [#2221]
    	   * Added generation of FreeBSD/pfSense quirks for USB devices supported
    	     by NUT (may get installed to `$datadir` e.g. `/usr/local/share/nut`
    	     and need to be pasted into your `/boot/loader.conf.local`). [#2159]
    	   * nut-scanner now avoids creating ambiguous `nutdevN` device section names
    	     when called separately to scan different media buses (one at a time).
    	     Now the "bus" name would be embedded (e.g. non-colliding `nutdev-usb1`
    	     and `nutdev-snmp1`). [#2247]
    	   * nut-scanner can now discover NUT simulated devices (`.dev` and `.seq`
    	     files) located in your sysconfig directory, and prepare configuration
    	     sections with the simulation driver (currently `dummy-ups`). [#2246]
    	   * nut-scanner now reports `dummy-ups` as driver when scanning NUT "bus"
    	     with Old or Avahi method. [#2236, #2245]
    	 - upsd: Fixed conditions for "no listening interface available" diagnosis
    	   to check how many listeners we succeeded with, not whether the first one
    	   succeeded or not. If not all requested (non-localhost) listeners were
    	   available, default to fail the daemon start-up attempt; support for an
    	   `ALLOW_NOT_ALL_LISTENERS` setting was added to control this behavior. [#723]
    	 - NUT CI improvements:
    	   * Added publishing recipes for PyNUT client bindings for NUT, so it ends
    	     up in the link:https://pypi.org/project/PyNUTClient[PyPI repository].
    	     [#2158]
    	   * Added support for new `ccache` namespace concept, where possible. [#2256]
    	   * Fixed an issue for builds configured `--without-usb`. [#2263]
    	   * Added a fallback for `libgd` discovery (for CGI etc. builds). [#2287]
    	   * Made `aspell` TeX module detection more reliable. [#2206]
    	   * Fixed recipes for completely out-of-tree builds to pass with documentation
    	     generation and checking on all tested "make" implementations. [#2318]
    	   * Various other recipe and documentation clean-up efforts. [#2284, #2269,
    	     #2261]
    	 - main driver core codebase:
    	   * Help users of drivers that can be built to support optionally USB and
    	     other media (like `nutdrv_qx` built for serial-only support), and built
    	     in fact without USB support but used for USB devices, with some more
    	     information to make troubleshooting easier. [issue #2259, PR #2260]
    	   * Driver programs with debug tracing support via `-D` CLI option and/or
    	     the `NUT_DEBUG_LEVEL` environment variable now check those earlier in
    	     their life-time, so that initialization routine can be debugged. [#2259]
    	   * Multiple USB-capable drivers got options to customize `usb_config_index`
    	     `usb_hid_rep_index`, `usb_hid_desc_index`, `usb_hid_ep_in` and
    	     `usb_hid_ep_out` hardware connection settings via `ups.conf` options.
    	     This is treated as experimental, not all code paths may be actually
    	     using such values from `struct usb_communication_subdriver_t` rather
    	     than hard-coded defaults. Discovery of correct values is up to the
    	     user at the moment (using `lsusb`, internet search, luck...) [#2149]
    	 - nut-driver-enumerator (NDE) service/script:
    	   * The optional daemon mode (primarily useful for systems which monitor
    	     a large and dynamic population of power devices) was enhanced with a
    	     `--daemon-after` variant which parses the configuration once before
    	     daemonization and this has a chance to fail while not forked off, as
    	     well as to allow only completing the service unit initialization when
    	     everything is actually ready to work (so further dependencies can start
    	     at the proper time). [#682]
    	   * Also applied other optimizations to the script implementation. [#682]
    	 - powerpanel text driver now handles status responses in any format and should
    	   support most devices. [#2156]
    	 - tripplite_usb driver now allows any device to match if a particular Unit ID
    	   was not specified in `ups.conf`. [PR #2297, issues #2282 and #2258]
    	 - snmp-ups driver:
    	   * added support for Eaton EMP002 sensor for ATS16 NM2 sub-driver. [#2286]
    	   * mapping table updates for apc-mib sub-driver. [#2264]
    	 - usbhid-ups driver:
    	   * `arduino-hid` subdriver was enhanced from "initial bare bones" experimental
    	     set of mapped data points to support some 20 more mappings to make it more
    	     useful as an UPS driver, not just a controller developer sandbox. [#2188]
    	   * `cps-hid` subdriver now supports devices branded as Cyber Energy and built
    	     by cooperation with Cyber Power Systems. [#2312]
    	   * `belkin-hid` subdriver now supports Liebert PSI5 devices which have a
    	     different numeric reading scale than earlier handled models. [issue #2271,
    	     PR #2272, PR #2369] Generally the wrong-scale processing was addressed,
    	     including a regression in NUT v2.8.0 which led to zero values
    	     in voltage data points which NUT v2.7.4 reported well [#2371]
    	   * The `onlinedischarge` configuration flag name was too ambiguous and got
    	     deprecated (will be supported but no longer promoted by documentation),
    	     introducing `onlinedischarge_onbattery` as the meaningful alias. [#2213]
    	   * Logged notifications about `OL+DISCHRG` state should now be throttled
    	     (see the driver manual page for more details) [#2214, #2215]:
    	     - If `battery.charge` is available, make the message when entering the
    	       state and then only if the charge differs from that when we posted
    	       the earlier message (e.g. really discharging) and is under
    	       `onlinedischarge_log_throttle_hovercharge` value (defaults to 100%);
    	     - Also can throttle to a time frequency configurable by a new option
    	       `onlinedischarge_log_throttle_sec`, by default 30 sec if `battery.charge`
    	       is not reported by the device (should be frequent by default, in case
    	       the UPS-reported state combination does reflect a bad power condition).
    	 - nutdrv_qx driver:
    	   * Fixed handling of `battery_voltage_reports_one_pack` configuration flag
    	     introduced in NUT v2.8.1. [originally by PR #1279; fixed by PR #2324,
    	     issue #2325]
    	 - Various code and documentation fixes for NSS crypto support. [#2274, #2268]
    	 - Laid foundations for the SmartNUT effort (aiming to integrate drivers with
    	   some other backends than the networked NUT data server process).
    	 - Eaton contributed recipes and scripts used to create the IPP for Unix
    	   bundle (aka Eaton IPSS Unix or UPP), a freely available value-added
    	   packaging of NUT distributed as the UPS software companion for OSes
    	   where their more complex UPS monitoring/management tools had not been
    	   ported. This allows for delivery of NUT packages with an interactive
    	   installer and some system integration scripts (events, notifications,
    	   status, shutdown daemon...), and was contributed to the NUT upstream
    	   project by Eaton -- provided "as is" at the moment, and may later serve
    	   as foundation or inspiration for new NUT features. [#2288]
    	 - nutconf (C++ library and tool to read and manage NUT configuration files)
    	   was started in the open by Eaton employees and used in the IPP installer,
    	   but the code lingered in a side branch. It was now brushed up to our common
    	   best practices and added to the main codebase. As of this import, there are
    	   known deficiencies in Windows platform support, as well as some un-awareness
    	   about configuration key words which appeared in NUT since 2013. [#2290]
    	 - The `tools/gitlog2changelog.py.in` script was revised, in particular to
    	   convert section titles (with contributor names coming from Git metadata)
    	   into plain ASCII character set, for `dblatex` versions which do not allow
    	   diacritics and other kinds of non-trivial characters in sections. This can
    	   cause successful builds of `ChangeLog.pdf` file on more platforms, but at
    	   expense of a semi-cosmetic difference in those names. [PR #2360, PR #2366]
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit a03adc928e832b8b6617cdb153aabea3a3ff42ef
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Sun Jun 2 12:14:16 2024 +0200

    postfix: Update to version 3.9.0
    
    - Update from version 3.8.4 to 3.9.0
    - Update of rootfile
    - With version 3.9.0 the option smtpd_forbid_bare_newline default value is now yes. With
       previous versions the default value was no but to prevent the possibility of an smtp
       smuggling attack the option should be yes. Previous version therefore actively set
       the value to yes and added it to the main.cf file when being installed. With version
       3.9.0 the default value is now yes so the option no longer needs to be added into
       main.cf, so smtp smuggling attack is protected by default now.
    - Removed the section from the install.sh file that added the option into main.cf with
       version 3.8.4. From 3.9.0 onwards the default value is yes so no longer needs to be
       actively added into main.cf
    - Changelog is too large to paste here. It can be read in the file RELEASE_NOTES in the
       source tarball.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit ed562f8ddee52bc52ee319d965f713c7f72962aa
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Wed May 29 18:01:01 2024 +0200

    samba: Update to version 4.20.1
    
    - This v2 version increments the PAK_VER number
    - Update from version 4.19.5 to 4.20.1
    - Update of rootfile
    - Changelog
        4.20.1
    	   * BUG 15630: dns update debug message is too noisy.
    	   * BUG 15635: Do not fail PAC validation for RFC8009 checksums types.
    	   * BUG 15605: Improve performance of lookup_groupmem() in idmap_ad.
    	   * BUG 15636: Smbcacls incorrectly propagates inheritance with Inherit-Only
    	     flag.
    	   * BUG 15611: http library doesn't support 'chunked transfer encoding'.
    	   * BUG 15600: Provide a systemd service file for the background queue daemon.
        4.20.0
    	   The changelog is too large to show here. Details can be found at
    	    https://www.samba.org/samba/history/samba-4.20.0.html
    	    I did not identify any changes related to how samba is configured in IPFire
        4.19.6
    	   * BUG 15527: fd_handle_destructor() panics within an smbd_smb2_close() if
    	     vfs_stat_fsp() fails in fd_close().
    	   * BUG 15588: samba-gpupdate: Correctly implement site support.
    	   * BUG 15527: fd_handle_destructor() panics within an smbd_smb2_close() if
    	     vfs_stat_fsp() fails in fd_close().
    	   * BUG 15588: samba-gpupdate: Correctly implement site support.
    	   * BUG 15599: libgpo: Segfault in python bindings.
    	   * BUG 15580: Packet marshalling push support missing for
    	     CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    	     CTDB_CONTROL_TCP_CLIENT_PASSED.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit c7235a2c63651d629c728bdce8e21b03d2687dd3
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Mon Jun 3 11:50:56 2024 +0200

    rsync: Update to version 3.3.0
    
    - Update from version 3.2.7 to 3.3.0
    - Update of rootfile not required
    - Changelog
        3.3.0
    	### BUG FIXES:
    		- Fixed a bug with `--sparse --inplace` where a trailing gap in the source
    		  file would not clear out the trailing data in the destination file.
    		- Fixed an buffer overflow in the checksum2 code if SHA1 is being used for
    		  the checksum2 algorithm.
    		- Fixed an issue when rsync is compiled using `_FORTIFY_SOURCE` so that the
    		  extra tests don't complain about a strlcpy() limit value (which was too
    		  large, even though it wasn't possible for the larger value to cause an
    		  overflow).
    		- Add a backtick to the list of characters that the filename quoting needs
    		  to escape using backslashes.
    		- Fixed a string-comparison issue in the internal handling of `--progress`
    		  (a locale such as tr_TR.utf-8 needed the internal triggering of `--info`
    		  options to use upper-case flag names to ensure that they match).
    		- Make sure that a local transfer marks the sender side as trusted.
    		- Change the argv handling to work with a newer popt library -- one that
    		  likes to free more data than it used to.
    		- Rsync now calls `OpenSSL_add_all_algorithms()` when compiled against an
    		  older openssl library.
    		- Fixed a problem in the daemon auth for older protocols (29 and before)
    		  if the openssl library is being used to compute MD4 checksums.
    		- Fixed `rsync -VV` on Cygwin -- it needed a flush of stdout.
    		- Fixed an old stats bug that counted devices as symlinks.
    	### ENHANCEMENTS:
    		- Enhanced rrsync with the `-no-overwrite` option that allows you to ensure
    		  that existing files on your restricted but writable directory can't be
    		  modified.
    		- Enhanced the manpages to mark links with .UR & .UE. If your nroff doesn't
    		  support these idioms, touch the file `.md2man-force` in the source
    		  directory so that `md-convert` gets called with the `--force-link-text`
    		  option, and that should ensure that your manpages are still readable
    		  even with the ignored markup.
    		- Some manpage improvements on the handling of [global] modules.
    		- Changed the mapfrom & mapto perl scripts (in the support dir) into a
    		  single python script named idmap.  Converted a couple more perl scripts
    		  into python.
    		- Changed the mnt-excl perl script (in the support dir) into a python
    		  script.
    	### DEVELOPER RELATED:
    		 - Updated config.guess (timestamp 2023-01-01) and config.sub (timestamp
    		   2023-01-21).
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit dec072b2441be3efb091463a61b105fc85e1ae48
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Mon Jun 3 16:47:28 2024 +0200

    git: Update to version 2.45.2
    
    - Update from version 2.44.0 to 2.45.2
    - Update of rootfile not required
    - Changelog
        2.45.2
    	In preparing security fixes for four CVEs, we made overly aggressive
    	"defense in depth" changes that broke legitimate use cases like 'git
    	lfs' and 'git annex.'  This release is to revert these misguided, if
    	well-intentioned, changes that were shipped in 2.45.1 and were not
    	direct security fixes.
    	      send-email: drop FakeTerm hack
    	      send-email: avoid creating more than one Term::ReadLine object
    	      ci: drop mention of BREW_INSTALL_PACKAGES variable
    	      ci: avoid bare "gcc" for osx-gcc job
    	      ci: stop installing "gcc-13" for osx-gcc
    	      hook: plug a new memory leak
    	      init: use the correct path of the templates directory again
    	      Revert "core.hooksPath: add some protection while cloning"
    	      tests: verify that `clone -c core.hooksPath=/dev/null` works again
    	      clone: drop the protections where hooks aren't run
    	      Revert "Add a helper function to compare file contents"
    	      Revert "fsck: warn about symlink pointing inside a gitdir"
        2.45.1
    	This release merges up the fix that appears in v2.39.4,
    	v2.40.2, v2.41.1, v2.42.2, v2.43.4 and v2.44.1 to address the
    	security issues CVE-2024-32002, CVE-2024-32004, CVE-2024-32020,
    	CVE-2024-32021 and CVE-2024-32465; see the release notes for
    	these versions for details.
        2.45.0
    	Backward Compatibility Notes
    	UI, Workflows & Features
    	 * Integrate the reftable code into the refs framework as a backend.
    	   With "git init --ref-format=reftable", hopefully it would be a lot
    	   more efficient to manage a repository with many references.
    	 * "git checkout -p" and friends learned that that "@" is a synonym
    	   for "HEAD".
    	 * Variants of vimdiff learned to honor mergetool.<variant>.layout
    	   settings.
    	 * "git reflog" learned a "list" subcommand that enumerates known reflogs.
    	 * When a merge conflicted at a submodule, merge-ort backend used to
    	   unconditionally give a lengthy message to suggest how to resolve
    	   it.  Now the message can be squelched as an advice message.
    	 * "git for-each-ref" learned "--include-root-refs" option to show
    	   even the stuff outside the 'refs/' hierarchy.
    	 * "git rev-list --missing=print" has learned to optionally take
    	   "--allow-missing-tips", which allows the objects at the starting
    	   points to be missing.
    	 * "git merge-tree" has learned that the three trees involved in the
    	   3-way merge only need to be trees, not necessarily commits.
    	 * "git log --merge" learned to pay attention to CHERRY_PICK_HEAD and
    	   other kinds of *_HEAD pseudorefs.
    	 * Platform specific tweaks for OS/390 has been added to
    	   config.mak.uname.
    	 * Users with safe.bareRepository=explicit can still work from within
    	   $GIT_DIR of a seconary worktree (which resides at .git/worktrees/$name/)
    	   of the primary worktree without explicitly specifying the $GIT_DIR
    	   environment variable or the --git-dir=<path> option.
    	 * The output format for dates "iso-strict" has been tweaked to show
    	   a time in the Zulu timezone with "Z" suffix, instead of "+00:00".
    	 * "git diff" and friends learned two extra configuration variables,
    	   diff.srcPrefix and diff.dstPrefix.
    	 * The status.showUntrackedFiles configuration variable had a name
    	   that tempts users to set a Boolean value expressed in our usual
    	   "false", "off", and "0", but it only took "no".  This has been
    	   corrected so "true" and its synonyms are taken as "normal", while
    	   "false" and its synonyms are taken as "no".
    	 * Remove an ancient and not well maintained Hg-to-git migration
    	   script from contrib/.
    	 * Hints that suggest what to do after resolving conflicts can now be
    	   squelched by disabling advice.mergeConflict.
    	 * Allow git-cherry-pick(1) to automatically drop redundant commits via
    	   a new `--empty` option, similar to the `--empty` options for
    	   git-rebase(1) and git-am(1). Includes a soft deprecation of
    	   `--keep-redundant-commits` as well as some related docs changes and
    	   sequencer code cleanup.
    	 * "git config" learned "--comment=<message>" option to leave a
    	   comment immediately after the "variable = value" on the same line
    	   in the configuration file.
    	 * core.commentChar used to be limited to a single byte, but has been
    	   updated to allow an arbitrary multi-byte sequence.
    	 * "git add -p" and other "interactive hunk selection" UI has learned to
    	   skip showing the hunk immediately after it has already been shown, and
    	   an additional action to explicitly ask to reshow the current hunk.
    	 * "git pack-refs" learned the "--auto" option, which defers the decision of
    	   whether and how to pack to the ref backend. This is used by the reftable
    	   backend to avoid repacking of an already-optimal ref database. The new mode
    	   is triggered from "git gc --auto".
    	 * "git add -u <pathspec>" and "git commit [-i] <pathspec>" did not
    	   diagnose a pathspec element that did not match any files in certain
    	   situations, unlike "git add <pathspec>" did.
    	 * The userdiff patterns for C# has been updated.
    	 * Git writes a "waiting for your editor" message on an incomplete
    	   line after launching an editor, and then append another error
    	   message on the same line if the editor errors out.  It now clears
    	   the "waiting for..." line before giving the error message.
    	 * The filename used for rejected hunks "git apply --reject" creates
    	   was limited to PATH_MAX, which has been lifted.
    	 * When "git bisect" reports the commit it determined to be the
    	   culprit, we used to show it in a format that does not honor common
    	   UI tweaks, like log.date and log.decorate.  The code has been
    	   taught to use "git show" to follow more customizations.
    	Performance, Internal Implementation, Development Support etc.
    	 * The code to iterate over refs with the reftable backend has seen
    	   some optimization.
    	 * More tests that are marked as "ref-files only" have been updated to
    	   improve test coverage of reftable backend.
    	 * Some parts of command line completion script (in contrib/) have
    	   been micro-optimized.
    	 * The way placeholders are to be marked-up in documentation have been
    	   specified; use "_<placeholder>_" to typeset the word inside a pair
    	   of <angle-brackets> emphasized.
    	 * "git --no-lazy-fetch cmd" allows to run "cmd" while disabling lazy
    	   fetching of objects from the promisor remote, which may be handy
    	   for debugging.
    	 * The implementation in "git clean" that makes "-n" and "-i" ignore
    	   clean.requireForce has been simplified, together with the
    	   documentation.
    	 * Uses of xwrite() helper have been audited and updated for better
    	   error checking and simpler code.
    	 * Some trace2 events that lacked def_param have learned to show it,
    	   enriching the output.
    	 * The parse-options code that deals with abbreviated long option
    	   names have been cleaned up.
    	 * The code in reftable backend that creates new table files works
    	   better with the tempfile framework to avoid leaving cruft after a
    	   failure.
    	 * The reftable code has its own custom binary search function whose
    	   comparison callback has an unusual interface, which caused the
    	   binary search to degenerate into a linear search, which has been
    	   corrected.
    	 * The code to iterate over reflogs in the reftable has been optimized
    	   to reduce memory allocation and deallocation.
    	 * Work to support a repository that work with both SHA-1 and SHA-256
    	   hash algorithms has started.
    	 * A new fuzz target that exercises config parsing code has been
    	   added.
    	 * Fix the way recently added tests interpolate variables defined
    	   outside them, and document the best practice to help future
    	   developers.
    	 * Introduce an experimental protocol for contributors to propose the
    	   topic description to be used in the "What's cooking" report, the
    	   merge commit message for the topic, and in the release notes and
    	   document it in the SubmittingPatches document.
    	 * The t/README file now gives a hint on running individual tests in
    	   the "t/" directory with "make t<num>-*.sh t<num>-*.sh".
    	   (merge 8d383806fc pb/test-scripts-are-build-targets later to maint).
    	 * The "hint:" messages given by the advice mechanism, when given a
    	   message with a blank line, left a line with trailing whitespace,
    	   which has been cleansed.
    	 * Documentation rules has been explicitly described how to mark-up
    	   literal parts and a few manual pages have been updated as examples.
    	 * The .editorconfig file has been taught that a Makefile uses HT
    	   indentation.
    	 * t-prio-queue test has been cleaned up by using C99 compound
    	   literals; this is meant to also serve as a weather-balloon to smoke
    	   out folks with compilers who have trouble compiling code that uses
    	   the feature.
    	 * Windows binary used to decide the use of unix-domain socket at
    	   build time, but it learned to make the decision at runtime instead.
    	 * The "shared repository" test in the t0610 reftable test failed
    	   under restrictive umask setting (e.g. 007), which has been
    	   corrected.
    	 * Document and apply workaround for a buggy version of dash that
    	   mishandles "local var=val" construct.
    	 * The codepaths that reach date_mode_from_type() have been updated to
    	   pass "struct date_mode" by value to make them thread safe.
    	 * The strategy to compact multiple tables of reftables after many
    	   operations accumulate many entries has been improved to avoid
    	   accumulating too many tables uncollected.
    	 * The code to iterate over reftable blocks has seen some optimization
    	   to reduce memory allocation and deallocation.
    	 * The way "git fast-import" handles paths described in its input has
    	   been tightened up and more clearly documented.
    	 * The cvsimport tests required that the platform understands
    	   traditional timezone notations like CST6CDT, which has been
    	   updated to work on those systems as long as they understand
    	   POSIX notation with explicit tz transition dates.
    	 * The code to format trailers have been cleaned up.
        2.44.0
    	 * "git apply" on a filesystem without filemode support have learned
    	   to take a hint from what is in the index for the path, even when
    	   not working with the "--index" or "--cached" option, when checking
    	   the executable bit match what is required by the preimage in the
    	   patch.
    	   (merge 45b625142d cp/apply-core-filemode later to maint).
    	 * "git column" has been taught to reject negative padding value, as
    	   it would lead to nonsense behaviour including division by zero.
    	   (merge 76fb807faa kh/column-reject-negative-padding later to maint).
    	 * "git am --help" now tells readers what actions are available in
    	   "git am --whitespace=<action>", in addition to saying that the
    	   option is passed through to the underlying "git apply".
    	   (merge a171dac734 jc/am-whitespace-doc later to maint).
    	 * "git tag --column" failed to check the exit status of its "git
    	   column" invocation, which has been corrected.
    	   (merge 92e66478fc rj/tag-column-fix later to maint).
    	 * Credential helper based on libsecret (in contrib/) has been updated
    	   to handle an empty password correctly.
    	   (merge 8f1f2023b7 mh/libsecret-empty-password-fix later to maint).
    	 * "git difftool --dir-diff" learned to honor the "--trust-exit-code"
    	   option; it used to always exit with 0 and signalled success.
    	   (merge eb84c8b6ce ps/difftool-dir-diff-exit-code later to maint).
    	 * The code incorrectly attempted to use textconv cache when asked,
    	   even when we are not running in a repository, which has been
    	   corrected.
    	   (merge affe355fe7 jk/textconv-cache-outside-repo-fix later to maint).
    	 * Remove an empty file that shouldn't have been added in the first
    	   place.
    	   (merge 4f66942215 js/remove-cruft-files later to maint).
    	 * The logic to access reflog entries by date and number had ugly
    	   corner cases at the boundaries, which have been cleaned up.
    	   (merge 5edd126720 jk/reflog-special-cases-fix later to maint).
    	 * An error message from "git upload-pack", which responds to "git
    	   fetch" requests, had a trailing NUL in it, which has been
    	   corrected.
    	   (merge 3f4c7a0805 sg/upload-pack-error-message-fix later to maint).
    	 * Clarify wording in the CodingGuidelines that requires <git-compat-util.h>
    	   to be the first header file.
    	   (merge 4e89f0e07c jc/doc-compat-util later to maint).
    	 * "git commit -v --cleanup=scissors" used to add the scissors line
    	   twice in the log message buffer, which has been corrected.
    	   (merge e90cc075cc jt/commit-redundant-scissors-fix later to maint).
    	 * A custom remote helper no longer cannot access the newly created
    	   repository during "git clone", which is a regression in Git 2.44.
    	   This has been corrected.
    	   (merge 199f44cb2e ps/remote-helper-repo-initialization-fix later to maint).
    	 * Various parts of upload-pack have been updated to bound the resource
    	   consumption relative to the size of the repository to protect from
    	   abusive clients.
    	   (merge 6cd05e768b jk/upload-pack-bounded-resources later to maint).
    	 * The upload-pack program, when talking over v2, accepted the
    	   packfile-uris protocol extension from the client, even if it did
    	   not advertise the capability, which has been corrected.
    	   (merge a922bfa3b5 jk/upload-pack-v2-capability-cleanup later to maint).
    	 * Make sure failure return from merge_bases_many() is properly caught.
    	   (merge 25fd20eb44 js/merge-base-with-missing-commit later to maint).
    	 * FSMonitor client code was confused when FSEvents were given in a
    	   different case on a case-insensitive filesystem, which has been
    	   corrected.
    	   (merge 29c139ce78 jh/fsmonitor-icase-corner-case-fix later to maint).
    	 * The "core.commentChar" configuration variable only allows an ASCII
    	   character, which was not clearly documented, which has been
    	   corrected.
    	   (merge fb7c556f58 kh/doc-commentchar-is-a-byte later to maint).
    	 * With release 2.44 we got rid of all uses of test_i18ngrep and there
    	   is no in-flight topic that adds a new use of it.  Make a call to
    	   test_i18ngrep a hard failure, so that we can remove it at the end
    	   of this release cycle.
    	   (merge 381a83dfa3 jc/test-i18ngrep later to maint).
    	 * The command line completion script (in contrib/) learned to
    	   complete "git reflog" better.
    	   (merge 1284f9cc11 rj/complete-reflog later to maint).
    	 * The logic to complete the command line arguments to "git worktree"
    	   subcommand (in contrib/) has been updated to correctly honor things
    	   like "git -C dir" etc.
    	   (merge 3574816d98 rj/complete-worktree-paths-fix later to maint).
    	 * When git refuses to create a branch because the proposed branch
    	   name is not a valid refname, an advice message is given to refer
    	   the user to exact naming rules.
    	   (merge 8fbd903e58 kh/branch-ref-syntax-advice later to maint).
    	 * Code simplification by getting rid of code that sets an environment
    	   variable that is no longer used.
    	   (merge 72a8d3f027 pw/rebase-i-ignore-cherry-pick-help-environment later to maint).
    	 * The code to find the effective end of log messages can fall into an
    	   endless loop, which has been corrected.
    	   (merge 2541cba2d6 fs/find-end-of-log-message-fix later to maint).
    	 * Mark-up used in the documentation has been improved for
    	   consistency.
    	   (merge 45d5ed3e50 ja/doc-markup-fixes later to maint).
    	 * The status.showUntrackedFiles configuration variable was
    	   incorrectly documented to accept "false", which has been corrected.
    	 * Leaks from "git restore" have been plugged.
    	   (merge 2f64da0790 rj/restore-plug-leaks later to maint).
    	 * "git bugreport --no-suffix" was not supported and instead
    	   segfaulted, which has been corrected.
    	   (merge b3b57c69da js/bugreport-no-suffix-fix later to maint).
    	 * The documentation for "%(trailers[:options])" placeholder in the
    	   "--pretty" option of commands in the "git log" family has been
    	   updated.
    	   (merge bff85a338c bl/doc-key-val-sep-fix later to maint).
    	 * "git checkout --conflict=bad" reported a bad conflictStyle as if it
    	   were given to a configuration variable; it has been corrected to
    	   report that the command line option is bad.
    	   (merge 5a99c1ac1a pw/checkout-conflict-errorfix later to maint).
    	 * Code clean-up in the "git log" machinery that implements custom log
    	   message formatting.
    	   (merge 1c10b8e5b0 jk/pretty-subject-cleanup later to maint).
    	 * "git config" corrupted literal HT characters written in the
    	   configuration file as part of a value, which has been corrected.
    	   (merge e6895c3f97 ds/config-internal-whitespace-fix later to maint).
    	 * A unit test for reftable code tried to enumerate all files in a
    	   directory after reftable operations and expected to see nothing but
    	   the files it wanted to leave there, but was fooled by .nfs* cruft
    	   files left, which has been corrected.
    	   (merge 0068aa7946 ps/reftable-unit-test-nfs-workaround later to maint).
    	 * The implementation and documentation of "object-format" option
    	   exchange between the Git itself and its remote helpers did not
    	   quite match, which has been corrected.
    	 * The "--pretty=<shortHand>" option of the commands in the "git log"
    	   family, defined as "[pretty] shortHand = <expansion>" should have
    	   been looked up case insensitively, but was not, which has been
    	   corrected.
    	   (merge f999d5188b bl/pretty-shorthand-config-fix later to maint).
    	 * "git apply" failed to extract the filename the patch applied to,
    	   when the change was about an empty file created in or deleted from
    	   a directory whose name ends with a SP, which has been corrected.
    	   (merge 776ffd1a30 jc/apply-parse-diff-git-header-names-fix later to maint).
    	 * Update a more recent tutorial doc.
    	   (merge 95ab557b4b dg/myfirstobjectwalk-updates later to maint).
    	 * The test script had an incomplete and ineffective attempt to avoid
    	   clobbering the testing user's real crontab (and its equivalents),
    	   which has been completed.
    	   (merge 73cb87773b es/test-cron-safety later to maint).
    	 * Use advice_if_enabled() API to rewrite a simple pattern to
    	   call advise() after checking advice_enabled().
    	   (merge 6412d01527 rj/use-adv-if-enabled later to maint).
    	 * Another "set -u" fix for the bash prompt (in contrib/) script.
    	   (merge d7805bc743 vs/complete-with-set-u-fix later to maint).
    	 * "git checkout/switch --detach foo", after switching to the detached
    	   HEAD state, gave the tracking information for the 'foo' branch,
    	   which was pointless.
    	 * "git apply" has been updated to lift the hardcoded pathname length
    	   limit, which in turn allowed a mksnpath() function that is no
    	   longer used.
    	   (merge 708f7e0590 rs/apply-lift-path-length-limit later to maint).
    	 * A file descriptor leak in an error codepath, used when "git apply
    	   --reject" fails to create the *.rej file, has been corrected.
    	   (merge 2b1f456adf rs/apply-reject-fd-leakfix later to maint).
    	 * A config parser callback function fell through instead of returning
    	   after recognising and processing a variable, wasting cycles, which
    	   has been corrected.
    	   (merge a816ccd642 ds/fetch-config-parse-microfix later to maint).
    	 * Fix was added to work around a regression in libcURL 8.7.0 (which has
    	   already been fixed in their tip of the tree).
    	   (merge 92a209bf24 jk/libcurl-8.7-regression-workaround later to maint).
    	 * The variable that holds the value read from the core.excludefile
    	   configuration variable used to leak, which has been corrected.
    	   (merge 0e0fefb29f jc/unleak-core-excludesfile later to maint).
    	 * vreportf(), which is used by error() and friends, has been taught
    	   to give the error message printf-format string when its vsnprintf()
    	   call fails, instead of showing nothing useful to identify the
    	   nature of the error.
    	   (merge c63adab961 rs/usage-fallback-to-show-message-format later to maint).
    	 * Adjust to an upcoming changes to GNU make that breaks our Makefiles.
    	   (merge 227b8fd902 tb/make-indent-conditional-with-non-spaces later to maint).
    	 * Git 2.44 introduced a regression that makes the updated code to
    	   barf in repositories with multi-pack index written by older
    	   versions of Git, which has been corrected.
    	 * When .git/rr-cache/ rerere database gets corrupted or rerere is fed to
    	   work on a file with conflicted hunks resolved incompletely, the rerere
    	   machinery got confused and segfaulted, which has been corrected.
    	   (merge 167395bb47 mr/rerere-crash-fix later to maint).
    	 * The "receive-pack" program (which responds to "git push") was not
    	   converted to run "git maintenance --auto" when other codepaths that
    	   used to run "git gc --auto" were updated, which has been corrected.
    	   (merge 7bf3057d9c ps/run-auto-maintenance-in-receive-pack later to maint).
    	 * Other code cleanup, docfix, build fix, etc.
    	   (merge f0e578c69c rs/use-xstrncmpz later to maint).
    	   (merge 83e6eb7d7a ba/credential-test-clean-fix later to maint).
    	   (merge 64562d784d jb/doc-interactive-singlekey-do-not-need-perl later to maint).
    	   (merge c431a235e2 cp/t9146-use-test-path-helpers later to maint).
    	   (merge 82d75402d5 ds/doc-send-email-capitalization later to maint).
    	   (merge 41bff66e35 jc/doc-add-placeholder-fix later to maint).
    	   (merge 6835f0efe9 jw/remote-doc-typofix later to maint).
    	   (merge 244001aa20 hs/rebase-not-in-progress later to maint).
    	   (merge 2ca6c07db2 jc/no-include-of-compat-util-from-headers later to maint).
    	   (merge 87bd7fbb9c rs/fetch-simplify-with-starts-with later to maint).
    	   (merge f39addd0d9 rs/name-rev-with-mempool later to maint).
    	   (merge 9a97b43e03 rs/submodule-prefix-simplify later to maint).
    	   (merge 40b8076462 ak/rebase-autosquash later to maint).
    	   (merge 3223204456 eg/add-uflags later to maint).
    	   (merge 5f78d52dce es/config-doc-sort-sections later to maint).
    	   (merge 781fb7b4c2 as/option-names-in-messages later to maint).
    	   (merge 51d41dc243 jk/doc-remote-helpers-markup-fix later to maint).
    	   (merge e1aaf309db pb/ci-win-artifact-names-fix later to maint).
    	   (merge ad538c61da jc/index-pack-fsck-levels later to maint).
    	   (merge 67471bc704 ja/doc-formatting-fix later to maint).
    	   (merge 86f9ce7dd6 bl/doc-config-fixes later to maint).
    	   (merge 0d527842b7 az/grep-group-error-message-update later to maint).
    	   (merge 7c43bdf07b rs/strbuf-expand-bad-format later to maint).
    	   (merge 8b68b48d5c ds/typofix-core-config-doc later to maint).
    	   (merge 39bb692152 rs/imap-send-use-xsnprintf later to maint).
    	   (merge 8d320cec60 jc/t2104-style-fixes later to maint).
    	   (merge b4454d5a7b pw/t3428-cleanup later to maint).
    	   (merge 84a7c33a4b pf/commitish-committish later to maint).
    	   (merge 8882ee9d68 la/mailmap-entry later to maint).
    	   (merge 44bdba2fa6 rs/no-openssl-compilation-fix-on-macos later to maint).
    	   (merge f412d72c19 yb/replay-doc-linkfix later to maint).
    	   (merge 5da40be8d7 xx/rfc2822-date-format-in-doc later to maint).
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit c375bcf8cd703e23ca2da222c469a4784b5bfd67
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date:   Wed May 29 09:35:03 2024 +0000

    vectorscan: Don't build for riscv64
    
    This architecture does not seem to be support and since we don't support
    this as a primary architecture just yet, we will build without this
    package.
    
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit db27ff326e5d39d68dce72ef39b2b0f5ec54092e
Merge: f62e483601 f3d6e2a0fb
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Tue Jun 4 14:15:20 2024 +0200

    Merge remote-tracking branch 'origin/master' into next

-----------------------------------------------------------------------

Summary of changes:
 config/rootfiles/common/{ => aarch64}/vectorscan   |   0
 config/rootfiles/common/x86_64/vectorscan          |   1 +
 config/rootfiles/packages/nut                      |   3 +-
 config/rootfiles/packages/postfix                  |   1 +
 config/rootfiles/packages/x86_64/samba             | 317 +++++++++++++--------
 lfs/git                                            |   6 +-
 lfs/linux                                          |   3 +
 lfs/nut                                            |   8 +-
 lfs/postfix                                        |   8 +-
 lfs/rsync                                          |   8 +-
 lfs/samba                                          |   6 +-
 lfs/vectorscan                                     |   1 +
 src/paks/postfix/install.sh                        |   4 -
 .../linux/linux-6.6.32-asix88179_reset.patch       |  17 ++
 14 files changed, 234 insertions(+), 149 deletions(-)
 rename config/rootfiles/common/{ => aarch64}/vectorscan (100%)
 create mode 120000 config/rootfiles/common/x86_64/vectorscan
 create mode 100644 src/patches/linux/linux-6.6.32-asix88179_reset.patch

Difference in files:
diff --git a/config/rootfiles/common/vectorscan b/config/rootfiles/common/aarch64/vectorscan
similarity index 100%
rename from config/rootfiles/common/vectorscan
rename to config/rootfiles/common/aarch64/vectorscan
diff --git a/config/rootfiles/common/x86_64/vectorscan b/config/rootfiles/common/x86_64/vectorscan
new file mode 120000
index 0000000000..d9581de701
--- /dev/null
+++ b/config/rootfiles/common/x86_64/vectorscan
@@ -0,0 +1 @@
+../aarch64/vectorscan
\ No newline at end of file
diff --git a/config/rootfiles/packages/nut b/config/rootfiles/packages/nut
index 1acab9d514..4d1d17887d 100644
--- a/config/rootfiles/packages/nut
+++ b/config/rootfiles/packages/nut
@@ -39,6 +39,7 @@ usr/bin/mge-utalk
 usr/bin/microdowell
 usr/bin/microsol-apc
 usr/bin/nut-scanner
+usr/bin/nutconf
 usr/bin/nutdrv_atcl_usb
 usr/bin/nutdrv_qx
 usr/bin/nutdrv_siemens-sitop
@@ -77,7 +78,7 @@ usr/lib/libnutclientstub.so.1.0.1
 #usr/lib/libnutscan.la
 #usr/lib/libnutscan.so
 usr/lib/libnutscan.so.2
-usr/lib/libnutscan.so.2.0.2
+usr/lib/libnutscan.so.2.0.5
 #usr/lib/libupsclient.la
 #usr/lib/libupsclient.so
 usr/lib/libupsclient.so.6
diff --git a/config/rootfiles/packages/postfix b/config/rootfiles/packages/postfix
index 23e1efb255..b77a5b42aa 100644
--- a/config/rootfiles/packages/postfix
+++ b/config/rootfiles/packages/postfix
@@ -96,6 +96,7 @@ usr/sbin/sendmail.postfix
 #usr/share/man/man5/lmdb_table.5
 #usr/share/man/man5/master.5
 #usr/share/man/man5/memcache_table.5
+#usr/share/man/man5/mongodb_table.5
 #usr/share/man/man5/mysql_table.5
 #usr/share/man/man5/nisplus_table.5
 #usr/share/man/man5/pcre_table.5
diff --git a/config/rootfiles/packages/x86_64/samba b/config/rootfiles/packages/x86_64/samba
index 7a44b9cdb2..f511e0101f 100644
--- a/config/rootfiles/packages/x86_64/samba
+++ b/config/rootfiles/packages/x86_64/samba
@@ -46,6 +46,7 @@ usr/bin/tdbrestore
 usr/bin/tdbtool
 usr/bin/testparm
 usr/bin/wbinfo
+usr/bin/wspsearch
 #usr/include/samba-4.0
 #usr/include/samba-4.0/charset.h
 #usr/include/samba-4.0/core
@@ -109,6 +110,7 @@ usr/bin/wbinfo
 #usr/include/samba-4.0/samba/version.h
 #usr/include/samba-4.0/share.h
 #usr/include/samba-4.0/smb2_lease_struct.h
+#usr/include/samba-4.0/smb3posix.h
 #usr/include/samba-4.0/smb_ldap.h
 #usr/include/samba-4.0/smbconf.h
 #usr/include/samba-4.0/smbldap.h
@@ -156,8 +158,8 @@ usr/lib/libndr-standard.so
 usr/lib/libndr-standard.so.0
 usr/lib/libndr-standard.so.0.0.1
 usr/lib/libndr.so
-usr/lib/libndr.so.3
-usr/lib/libndr.so.3.0.1
+usr/lib/libndr.so.4
+usr/lib/libndr.so.4.0.0
 usr/lib/libnetapi.so
 usr/lib/libnetapi.so.1
 usr/lib/libnetapi.so.1.0.0
@@ -186,7 +188,7 @@ usr/lib/libsamdb.so.0
 usr/lib/libsamdb.so.0.0.1
 usr/lib/libsmbclient.so
 usr/lib/libsmbclient.so.0
-usr/lib/libsmbclient.so.0.7.0
+usr/lib/libsmbclient.so.0.8.0
 usr/lib/libsmbconf.so
 usr/lib/libsmbconf.so.0
 usr/lib/libsmbconf.so.0.0.1
@@ -235,6 +237,7 @@ usr/lib/python3.10/site-packages/samba/dcerpc/atsvc.cpython-310-xxxMACHINExxx-li
 usr/lib/python3.10/site-packages/samba/dcerpc/auth.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/base.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/claims.cpython-310-xxxMACHINExxx-linux-gnu.so
+usr/lib/python3.10/site-packages/samba/dcerpc/conditional_ace.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/dcerpc.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/dfs.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/dns.cpython-310-xxxMACHINExxx-linux-gnu.so
@@ -244,6 +247,8 @@ usr/lib/python3.10/site-packages/samba/dcerpc/drsblobs.cpython-310-xxxMACHINExxx
 usr/lib/python3.10/site-packages/samba/dcerpc/drsuapi.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/echo.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/epmapper.cpython-310-xxxMACHINExxx-linux-gnu.so
+usr/lib/python3.10/site-packages/samba/dcerpc/gkdi.cpython-310-xxxMACHINExxx-linux-gnu.so
+usr/lib/python3.10/site-packages/samba/dcerpc/gmsa.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/idmap.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/initshutdown.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/irpc.cpython-310-xxxMACHINExxx-linux-gnu.so
@@ -261,6 +266,8 @@ usr/lib/python3.10/site-packages/samba/dcerpc/preg.cpython-310-xxxMACHINExxx-lin
 usr/lib/python3.10/site-packages/samba/dcerpc/samr.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/security.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/server_id.cpython-310-xxxMACHINExxx-linux-gnu.so
+usr/lib/python3.10/site-packages/samba/dcerpc/smb3posix.cpython-310-xxxMACHINExxx-linux-gnu.so
+usr/lib/python3.10/site-packages/samba/dcerpc/smbXsrv.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/smb_acl.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/spoolss.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/dcerpc/srvsvc.cpython-310-xxxMACHINExxx-linux-gnu.so
@@ -288,12 +295,14 @@ usr/lib/python3.10/site-packages/samba/forest_update.py
 usr/lib/python3.10/site-packages/samba/functional_level.py
 usr/lib/python3.10/site-packages/samba/gensec.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/getopt.py
+usr/lib/python3.10/site-packages/samba/gkdi.py
 usr/lib/python3.10/site-packages/samba/gp
 usr/lib/python3.10/site-packages/samba/gp/__init__.py
 usr/lib/python3.10/site-packages/samba/gp/gp_centrify_crontab_ext.py
 usr/lib/python3.10/site-packages/samba/gp/gp_centrify_sudoers_ext.py
 usr/lib/python3.10/site-packages/samba/gp/gp_cert_auto_enroll_ext.py
 usr/lib/python3.10/site-packages/samba/gp/gp_chromium_ext.py
+usr/lib/python3.10/site-packages/samba/gp/gp_drive_maps_ext.py
 usr/lib/python3.10/site-packages/samba/gp/gp_ext_loader.py
 usr/lib/python3.10/site-packages/samba/gp/gp_firefox_ext.py
 usr/lib/python3.10/site-packages/samba/gp/gp_firewalld_ext.py
@@ -324,6 +333,7 @@ usr/lib/python3.10/site-packages/samba/gp_parse/gp_pol.py
 usr/lib/python3.10/site-packages/samba/gpo.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/graph.py
 usr/lib/python3.10/site-packages/samba/hostconfig.py
+usr/lib/python3.10/site-packages/samba/hresult.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/idmap.py
 usr/lib/python3.10/site-packages/samba/join.py
 #usr/lib/python3.10/site-packages/samba/kcc
@@ -381,7 +391,9 @@ usr/lib/python3.10/site-packages/samba/netcmd/domain/models/auth_silo.py
 usr/lib/python3.10/site-packages/samba/netcmd/domain/models/claim_type.py
 usr/lib/python3.10/site-packages/samba/netcmd/domain/models/exceptions.py
 usr/lib/python3.10/site-packages/samba/netcmd/domain/models/fields.py
+usr/lib/python3.10/site-packages/samba/netcmd/domain/models/group.py
 usr/lib/python3.10/site-packages/samba/netcmd/domain/models/model.py
+usr/lib/python3.10/site-packages/samba/netcmd/domain/models/query.py
 usr/lib/python3.10/site-packages/samba/netcmd/domain/models/schema.py
 usr/lib/python3.10/site-packages/samba/netcmd/domain/models/site.py
 usr/lib/python3.10/site-packages/samba/netcmd/domain/models/subnet.py
@@ -410,12 +422,42 @@ usr/lib/python3.10/site-packages/samba/netcmd/processes.py
 usr/lib/python3.10/site-packages/samba/netcmd/pso.py
 usr/lib/python3.10/site-packages/samba/netcmd/rodc.py
 usr/lib/python3.10/site-packages/samba/netcmd/schema.py
+usr/lib/python3.10/site-packages/samba/netcmd/shell.py
 usr/lib/python3.10/site-packages/samba/netcmd/sites.py
 usr/lib/python3.10/site-packages/samba/netcmd/spn.py
 usr/lib/python3.10/site-packages/samba/netcmd/testparm.py
-usr/lib/python3.10/site-packages/samba/netcmd/user.py
+#usr/lib/python3.10/site-packages/samba/netcmd/user
+usr/lib/python3.10/site-packages/samba/netcmd/user/__init__.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/add.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/add_unix_attrs.py
+#usr/lib/python3.10/site-packages/samba/netcmd/user/auth
+usr/lib/python3.10/site-packages/samba/netcmd/user/auth/__init__.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/auth/policy.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/auth/silo.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/delete.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/disable.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/edit.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/enable.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/getgroups.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/list.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/move.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/password.py
+#usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords
+usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/__init__.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/common.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/get_kerberos_ticket.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/getpassword.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/show.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/readpasswords/syncpasswords.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/rename.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/sensitive.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/setexpiry.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/setpassword.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/setprimarygroup.py
+usr/lib/python3.10/site-packages/samba/netcmd/user/unlock.py
 usr/lib/python3.10/site-packages/samba/netcmd/validators.py
 usr/lib/python3.10/site-packages/samba/netcmd/visualize.py
+usr/lib/python3.10/site-packages/samba/nt_time.py
 usr/lib/python3.10/site-packages/samba/ntacls.py
 usr/lib/python3.10/site-packages/samba/ntstatus.cpython-310-xxxMACHINExxx-linux-gnu.so
 usr/lib/python3.10/site-packages/samba/param.cpython-310-xxxMACHINExxx-linux-gnu.so
@@ -471,16 +513,21 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/__init__.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/bug13653.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/check_output.py
+usr/lib/python3.10/site-packages/samba/tests/blackbox/claims.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/downgradedatabase.py
+usr/lib/python3.10/site-packages/samba/tests/blackbox/http_chunk.py
+usr/lib/python3.10/site-packages/samba/tests/blackbox/http_content.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/mdsearch.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/ndrdump.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_dns.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/netads_json.py
+usr/lib/python3.10/site-packages/samba/tests/blackbox/rpcd_witness_samba_only.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/samba_dnsupdate.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_basic.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_dfs_propagate_inherit.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_propagate_inhertance.py
+#usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcacls_save_restore.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcontrol.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/smbcontrol_process.py
 #usr/lib/python3.10/site-packages/samba/tests/blackbox/traffic_learner.py
@@ -489,6 +536,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/common.py
 #usr/lib/python3.10/site-packages/samba/tests/complex_expressions.py
 #usr/lib/python3.10/site-packages/samba/tests/compression.py
+#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_assembler.py
+#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_bytes.py
+#usr/lib/python3.10/site-packages/samba/tests/conditional_ace_claims.py
 #usr/lib/python3.10/site-packages/samba/tests/core.py
 #usr/lib/python3.10/site-packages/samba/tests/cred_opt.py
 #usr/lib/python3.10/site-packages/samba/tests/credentials.py
@@ -541,6 +591,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/gensec.py
 #usr/lib/python3.10/site-packages/samba/tests/get_opt.py
 #usr/lib/python3.10/site-packages/samba/tests/getdcname.py
+#usr/lib/python3.10/site-packages/samba/tests/gkdi.py
 #usr/lib/python3.10/site-packages/samba/tests/glue.py
 #usr/lib/python3.10/site-packages/samba/tests/gpo.py
 #usr/lib/python3.10/site-packages/samba/tests/gpo_member.py
@@ -563,14 +614,17 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/claims_in_pac.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/claims_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/compatability_tests.py
+#usr/lib/python3.10/site-packages/samba/tests/krb5/conditional_ace_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/device_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/etype_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/fast_tests.py
+#usr/lib/python3.10/site-packages/samba/tests/krb5/gkdi_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/group_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/kcrypto.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_base_test.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgs_tests.py
+#usr/lib/python3.10/site-packages/samba/tests/krb5/kdc_tgt_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/kpasswd_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/lockout_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/ms_kile_client_principal_lookup_tests.py
@@ -581,6 +635,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/raw_testcase.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_constants.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1.py
+#usr/lib/python3.10/site-packages/samba/tests/krb5/rfc4120_pyasn1_generated.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/rodc_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/s4u_tests.py
 #usr/lib/python3.10/site-packages/samba/tests/krb5/salt_tests.py
@@ -605,7 +660,10 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/logfiles.py
 #usr/lib/python3.10/site-packages/samba/tests/lsa_string.py
 #usr/lib/python3.10/site-packages/samba/tests/messaging.py
-#usr/lib/python3.10/site-packages/samba/tests/ndr.py
+#usr/lib/python3.10/site-packages/samba/tests/ndr
+#usr/lib/python3.10/site-packages/samba/tests/ndr/gkdi.py
+#usr/lib/python3.10/site-packages/samba/tests/ndr/gmsa.py
+#usr/lib/python3.10/site-packages/samba/tests/ndr/wbint.py
 #usr/lib/python3.10/site-packages/samba/tests/net_join.py
 #usr/lib/python3.10/site-packages/samba/tests/net_join_no_spnego.py
 #usr/lib/python3.10/site-packages/samba/tests/netbios.py
@@ -654,7 +712,6 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/contact.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/demote.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/dnscmd.py
-#usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_base.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_policy.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_auth_silo.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/domain_claim.py
@@ -680,10 +737,15 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/provision_userPassword_crypt.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/rodc.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/schema.py
+#usr/lib/python3.10/site-packages/samba/tests/samba_tool/silo_base.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/sites.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/timecmd.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user.py
+#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_auth_policy.py
+#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_auth_silo.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_check_password_script.py
+#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_get_kerberos_ticket.py
+#usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_getpassword_gmsa.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA_base.py
 #usr/lib/python3.10/site-packages/samba/tests/samba_tool/user_virtualCryptSHA_gpg.py
@@ -695,7 +757,9 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/samdb.py
 #usr/lib/python3.10/site-packages/samba/tests/samdb_api.py
 #usr/lib/python3.10/site-packages/samba/tests/sddl.py
+#usr/lib/python3.10/site-packages/samba/tests/sddl_conditional_ace.py
 #usr/lib/python3.10/site-packages/samba/tests/security.py
+#usr/lib/python3.10/site-packages/samba/tests/security_descriptors.py
 #usr/lib/python3.10/site-packages/samba/tests/segfault.py
 #usr/lib/python3.10/site-packages/samba/tests/sid_strings.py
 #usr/lib/python3.10/site-packages/samba/tests/smb-notify.py
@@ -711,6 +775,7 @@ usr/lib/python3.10/site-packages/samba/tdb_util.py
 #usr/lib/python3.10/site-packages/samba/tests/strings.py
 #usr/lib/python3.10/site-packages/samba/tests/subunitrun.py
 #usr/lib/python3.10/site-packages/samba/tests/tdb_util.py
+#usr/lib/python3.10/site-packages/samba/tests/token_factory.py
 #usr/lib/python3.10/site-packages/samba/tests/upgrade.py
 #usr/lib/python3.10/site-packages/samba/tests/upgradeprovision.py
 #usr/lib/python3.10/site-packages/samba/tests/upgradeprovisionneeddc.py
@@ -750,126 +815,126 @@ usr/lib/samba/ldb/sample.so
 usr/lib/samba/ldb/server_sort.so
 usr/lib/samba/ldb/skel.so
 usr/lib/samba/ldb/tdb.so
-usr/lib/samba/libCHARSET3-samba4.so
-usr/lib/samba/libLIBWBCLIENT-OLD-samba4.so
-usr/lib/samba/libMESSAGING-SEND-samba4.so
-usr/lib/samba/libMESSAGING-samba4.so
-usr/lib/samba/libREG-FULL-samba4.so
-usr/lib/samba/libRPC-SERVER-LOOP-samba4.so
-usr/lib/samba/libRPC-WORKER-samba4.so
-usr/lib/samba/libaddns-samba4.so
-usr/lib/samba/libads-samba4.so
-usr/lib/samba/libasn1-samba4.so
-usr/lib/samba/libasn1util-samba4.so
-usr/lib/samba/libauth-samba4.so
-usr/lib/samba/libauth-unix-token-samba4.so
-usr/lib/samba/libauth4-samba4.so
-usr/lib/samba/libauthkrb5-samba4.so
-usr/lib/samba/libcli-cldap-samba4.so
-usr/lib/samba/libcli-ldap-common-samba4.so
-usr/lib/samba/libcli-ldap-samba4.so
-usr/lib/samba/libcli-nbt-samba4.so
-usr/lib/samba/libcli-smb-common-samba4.so
-usr/lib/samba/libcli-spoolss-samba4.so
-usr/lib/samba/libcliauth-samba4.so
-usr/lib/samba/libclidns-samba4.so
-usr/lib/samba/libcluster-samba4.so
-usr/lib/samba/libcmdline-contexts-samba4.so
-usr/lib/samba/libcmdline-samba4.so
-usr/lib/samba/libcmocka-samba4.so
-usr/lib/samba/libcom-err-samba4.so
-usr/lib/samba/libcommon-auth-samba4.so
-usr/lib/samba/libdbwrap-samba4.so
-usr/lib/samba/libdcerpc-pkt-auth-samba4.so
-usr/lib/samba/libdcerpc-samba-samba4.so
-usr/lib/samba/libdcerpc-samba4.so
-usr/lib/samba/libdnsserver-common-samba4.so
-usr/lib/samba/libdsdb-module-samba4.so
-usr/lib/samba/libevents-samba4.so
-usr/lib/samba/libflag-mapping-samba4.so
-usr/lib/samba/libgenrand-samba4.so
-usr/lib/samba/libgensec-samba4.so
-usr/lib/samba/libgpext-samba4.so
-usr/lib/samba/libgpo-samba4.so
-usr/lib/samba/libgse-samba4.so
-usr/lib/samba/libgss-preauth-samba4.so
-usr/lib/samba/libgssapi-samba4.so
-usr/lib/samba/libhcrypto-samba4.so
-usr/lib/samba/libhdb-samba4.so
-usr/lib/samba/libheimbase-samba4.so
-usr/lib/samba/libheimntlm-samba4.so
-usr/lib/samba/libhttp-samba4.so
-usr/lib/samba/libhx509-samba4.so
-usr/lib/samba/libidmap-samba4.so
-usr/lib/samba/libinterfaces-samba4.so
-usr/lib/samba/libiov-buf-samba4.so
-usr/lib/samba/libkdc-samba4.so
-usr/lib/samba/libkrb5-samba4.so
-usr/lib/samba/libkrb5samba-samba4.so
-usr/lib/samba/libldb-cmdline-samba4.so
-usr/lib/samba/libldb-key-value-samba4.so
-usr/lib/samba/libldb-samba4.so
-usr/lib/samba/libldb-tdb-err-map-samba4.so
-usr/lib/samba/libldb-tdb-int-samba4.so
-usr/lib/samba/libldbsamba-samba4.so
-usr/lib/samba/liblibcli-lsa3-samba4.so
-usr/lib/samba/liblibcli-netlogon3-samba4.so
-usr/lib/samba/liblibsmb-samba4.so
-usr/lib/samba/libmessages-dgm-samba4.so
-usr/lib/samba/libmessages-util-samba4.so
-usr/lib/samba/libmscat-samba4.so
-usr/lib/samba/libmsghdr-samba4.so
-usr/lib/samba/libmsrpc3-samba4.so
-usr/lib/samba/libndr-samba-samba4.so
-usr/lib/samba/libndr-samba4.so
-usr/lib/samba/libnet-keytab-samba4.so
-usr/lib/samba/libnetif-samba4.so
-usr/lib/samba/libnpa-tstream-samba4.so
-usr/lib/samba/libnss-info-samba4.so
-usr/lib/samba/libposix-eadb-samba4.so
-usr/lib/samba/libprinter-driver-samba4.so
-usr/lib/samba/libprinting-migrate-samba4.so
-usr/lib/samba/libpyldb-util.cpython-310-x86-64-linux-gnu-samba4.so
-usr/lib/samba/libpytalloc-util.cpython-310-x86-64-linux-gnu-samba4.so
-usr/lib/samba/libregistry-samba4.so
-usr/lib/samba/libreplace-samba4.so
-usr/lib/samba/libroken-samba4.so
-usr/lib/samba/libsamba-cluster-support-samba4.so
-usr/lib/samba/libsamba-debug-samba4.so
-usr/lib/samba/libsamba-modules-samba4.so
-usr/lib/samba/libsamba-net.cpython-310-x86-64-linux-gnu-samba4.so
-usr/lib/samba/libsamba-python.cpython-310-x86-64-linux-gnu-samba4.so
-usr/lib/samba/libsamba-security-samba4.so
-usr/lib/samba/libsamba-sockets-samba4.so
-usr/lib/samba/libsamba3-util-samba4.so
-usr/lib/samba/libsamdb-common-samba4.so
-usr/lib/samba/libsecrets3-samba4.so
-usr/lib/samba/libserver-id-db-samba4.so
-usr/lib/samba/libserver-role-samba4.so
-usr/lib/samba/libshares-samba4.so
-usr/lib/samba/libsmb-transport-samba4.so
-usr/lib/samba/libsmbclient-raw-samba4.so
-usr/lib/samba/libsmbd-base-samba4.so
-usr/lib/samba/libsmbd-shim-samba4.so
-usr/lib/samba/libsmbldaphelper-samba4.so
-usr/lib/samba/libsmbpasswdparser-samba4.so
-usr/lib/samba/libsocket-blocking-samba4.so
-usr/lib/samba/libstable-sort-samba4.so
-usr/lib/samba/libsys-rw-samba4.so
-usr/lib/samba/libtalloc-report-printf-samba4.so
-usr/lib/samba/libtalloc-report-samba4.so
-usr/lib/samba/libtalloc-samba4.so
-usr/lib/samba/libtdb-samba4.so
-usr/lib/samba/libtdb-wrap-samba4.so
-usr/lib/samba/libtevent-samba4.so
-usr/lib/samba/libtime-basic-samba4.so
-usr/lib/samba/libtorture-samba4.so
-usr/lib/samba/libtrusts-util-samba4.so
-usr/lib/samba/libutil-reg-samba4.so
-usr/lib/samba/libutil-setid-samba4.so
-usr/lib/samba/libutil-tdb-samba4.so
-usr/lib/samba/libwind-samba4.so
-usr/lib/samba/libxattr-tdb-samba4.so
+usr/lib/samba/libCHARSET3-private-samba.so
+usr/lib/samba/libLIBWBCLIENT-OLD-private-samba.so
+usr/lib/samba/libMESSAGING-SEND-private-samba.so
+usr/lib/samba/libMESSAGING-private-samba.so
+usr/lib/samba/libREG-FULL-private-samba.so
+usr/lib/samba/libRPC-SERVER-LOOP-private-samba.so
+usr/lib/samba/libRPC-WORKER-private-samba.so
+usr/lib/samba/libaddns-private-samba.so
+usr/lib/samba/libads-private-samba.so
+usr/lib/samba/libasn1-private-samba.so
+usr/lib/samba/libasn1util-private-samba.so
+usr/lib/samba/libauth-private-samba.so
+usr/lib/samba/libauth-unix-token-private-samba.so
+usr/lib/samba/libauth4-private-samba.so
+usr/lib/samba/libauthkrb5-private-samba.so
+usr/lib/samba/libcli-cldap-private-samba.so
+usr/lib/samba/libcli-ldap-common-private-samba.so
+usr/lib/samba/libcli-ldap-private-samba.so
+usr/lib/samba/libcli-nbt-private-samba.so
+usr/lib/samba/libcli-smb-common-private-samba.so
+usr/lib/samba/libcli-spoolss-private-samba.so
+usr/lib/samba/libcliauth-private-samba.so
+usr/lib/samba/libclidns-private-samba.so
+usr/lib/samba/libcluster-private-samba.so
+usr/lib/samba/libcmdline-contexts-private-samba.so
+usr/lib/samba/libcmdline-private-samba.so
+usr/lib/samba/libcmocka-private-samba.so
+usr/lib/samba/libcom-err-private-samba.so
+usr/lib/samba/libcommon-auth-private-samba.so
+usr/lib/samba/libdbwrap-private-samba.so
+usr/lib/samba/libdcerpc-pkt-auth-private-samba.so
+usr/lib/samba/libdcerpc-samba-private-samba.so
+usr/lib/samba/libdcerpc-samba4-private-samba.so
+usr/lib/samba/libdnsserver-common-private-samba.so
+usr/lib/samba/libdsdb-module-private-samba.so
+usr/lib/samba/libevents-private-samba.so
+usr/lib/samba/libflag-mapping-private-samba.so
+usr/lib/samba/libgenrand-private-samba.so
+usr/lib/samba/libgensec-private-samba.so
+usr/lib/samba/libgpext-private-samba.so
+usr/lib/samba/libgpo-private-samba.so
+usr/lib/samba/libgse-private-samba.so
+usr/lib/samba/libgss-preauth-private-samba.so
+usr/lib/samba/libgssapi-private-samba.so
+usr/lib/samba/libhcrypto-private-samba.so
+usr/lib/samba/libhdb-private-samba.so
+usr/lib/samba/libheimbase-private-samba.so
+usr/lib/samba/libheimntlm-private-samba.so
+usr/lib/samba/libhttp-private-samba.so
+usr/lib/samba/libhx509-private-samba.so
+usr/lib/samba/libidmap-private-samba.so
+usr/lib/samba/libinterfaces-private-samba.so
+usr/lib/samba/libiov-buf-private-samba.so
+usr/lib/samba/libkdc-private-samba.so
+usr/lib/samba/libkrb5-private-samba.so
+usr/lib/samba/libkrb5samba-private-samba.so
+usr/lib/samba/libldb-cmdline-private-samba.so
+usr/lib/samba/libldb-key-value-private-samba.so
+usr/lib/samba/libldb-private-samba.so
+usr/lib/samba/libldb-tdb-err-map-private-samba.so
+usr/lib/samba/libldb-tdb-int-private-samba.so
+usr/lib/samba/libldbsamba-private-samba.so
+usr/lib/samba/liblibcli-lsa3-private-samba.so
+usr/lib/samba/liblibcli-netlogon3-private-samba.so
+usr/lib/samba/liblibsmb-private-samba.so
+usr/lib/samba/libmessages-dgm-private-samba.so
+usr/lib/samba/libmessages-util-private-samba.so
+usr/lib/samba/libmscat-private-samba.so
+usr/lib/samba/libmsghdr-private-samba.so
+usr/lib/samba/libmsrpc3-private-samba.so
+usr/lib/samba/libndr-samba-private-samba.so
+usr/lib/samba/libndr-samba4-private-samba.so
+usr/lib/samba/libnet-keytab-private-samba.so
+usr/lib/samba/libnetif-private-samba.so
+usr/lib/samba/libnpa-tstream-private-samba.so
+usr/lib/samba/libnss-info-private-samba.so
+usr/lib/samba/libposix-eadb-private-samba.so
+usr/lib/samba/libprinter-driver-private-samba.so
+usr/lib/samba/libprinting-migrate-private-samba.so
+usr/lib/samba/libpyldb-util.cpython-310-x86-64-linux-gnu-private-samba.so
+usr/lib/samba/libpytalloc-util.cpython-310-x86-64-linux-gnu-private-samba.so
+usr/lib/samba/libregistry-private-samba.so
+usr/lib/samba/libreplace-private-samba.so
+usr/lib/samba/libroken-private-samba.so
+usr/lib/samba/libsamba-cluster-support-private-samba.so
+usr/lib/samba/libsamba-debug-private-samba.so
+usr/lib/samba/libsamba-modules-private-samba.so
+usr/lib/samba/libsamba-net.cpython-310-x86-64-linux-gnu-private-samba.so
+usr/lib/samba/libsamba-python.cpython-310-x86-64-linux-gnu-private-samba.so
+usr/lib/samba/libsamba-security-private-samba.so
+usr/lib/samba/libsamba-sockets-private-samba.so
+usr/lib/samba/libsamba3-util-private-samba.so
+usr/lib/samba/libsamdb-common-private-samba.so
+usr/lib/samba/libsecrets3-private-samba.so
+usr/lib/samba/libserver-id-db-private-samba.so
+usr/lib/samba/libserver-role-private-samba.so
+usr/lib/samba/libshares-private-samba.so
+usr/lib/samba/libsmb-transport-private-samba.so
+usr/lib/samba/libsmbclient-raw-private-samba.so
+usr/lib/samba/libsmbd-base-private-samba.so
+usr/lib/samba/libsmbd-shim-private-samba.so
+usr/lib/samba/libsmbldaphelper-private-samba.so
+usr/lib/samba/libsmbpasswdparser-private-samba.so
+usr/lib/samba/libsocket-blocking-private-samba.so
+usr/lib/samba/libstable-sort-private-samba.so
+usr/lib/samba/libsys-rw-private-samba.so
+usr/lib/samba/libtalloc-private-samba.so
+usr/lib/samba/libtalloc-report-printf-private-samba.so
+usr/lib/samba/libtalloc-report-private-samba.so
+usr/lib/samba/libtdb-private-samba.so
+usr/lib/samba/libtdb-wrap-private-samba.so
+usr/lib/samba/libtevent-private-samba.so
+usr/lib/samba/libtime-basic-private-samba.so
+usr/lib/samba/libtorture-private-samba.so
+usr/lib/samba/libtrusts-util-private-samba.so
+usr/lib/samba/libutil-reg-private-samba.so
+usr/lib/samba/libutil-setid-private-samba.so
+usr/lib/samba/libutil-tdb-private-samba.so
+usr/lib/samba/libwind-private-samba.so
+usr/lib/samba/libxattr-tdb-private-samba.so
 usr/lib/samba/nss_info
 usr/lib/samba/nss_info/hash.so
 usr/lib/samba/nss_info/rfc2307.so
diff --git a/lfs/git b/lfs/git
index d10ca469c2..98b82c2a21 100644
--- a/lfs/git
+++ b/lfs/git
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.44.0
+VER        = 2.45.2
 SUMMARY    = Fast, scalable, distributed revision control system
 
 THISAPP    = git-$(VER)
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = git
-PAK_VER    = 32
+PAK_VER    = 33
 
 DEPS       = perl-Authen-SASL perl-MIME-Base64 perl-Net-SMTP-SSL
 
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 6dc145e20e737763fb738ccb4a65ba2f8d6f35bb4e30520a0c79f4fcc0eaaaf4e99a9be00eaa9e14dec231ed122d54be7dfa9212a3e5a75707730256391896d4
+$(DL_FILE)_BLAKE2 = 477acc786c26e0b04843ad6d07333607b2274d587263d72c6d036cade725e6f62f8c773903f401c799de71527d0473589afc507eec02f445e0c148dd7cbf407c
 
 install : $(TARGET)
 
diff --git a/lfs/linux b/lfs/linux
index ca3b051191..3f5e608385 100644
--- a/lfs/linux
+++ b/lfs/linux
@@ -133,6 +133,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	# https://bugzilla.ipfire.org/show_bug.cgi?id=12760
 	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-5.15-NFQUEUE-Hold-RCU-read-lock-while-calling-nf_reinject.patch
 
+	# reset ax88179 twice like in older kernels
+	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-6.6.32-asix88179_reset.patch
+
 	# Fix external module compile
 	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/linux/linux-6.0-fix_external_module_build.patch
 
diff --git a/lfs/nut b/lfs/nut
index ea133b6209..732211628f 100644
--- a/lfs/nut
+++ b/lfs/nut
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Network UPS Tools Core (Uninterruptible Power Supply Monitoring)
 
-VER        = 2.8.1
+VER        = 2.8.2
 
 THISAPP    = nut-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = nut
-PAK_VER    = 11
+PAK_VER    = 12
 
 DEPS       =
 
@@ -50,7 +50,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 370a1759beec6eaae6479b5174762b2bc600ca07543aad531cf74e179d8e000b4b3a8dd111c7556eb4fb545ebf8baee24fbb75f6235d03cefe239ba08f042ea5
+$(DL_FILE)_BLAKE2 = 87187293d8acda72c2d807d6f41f2601a318540f63a0ea93782b115402c6b43a0b61ecc710fd6de126d25e59dd4e03681f2b859a87549e9d5f7617ac7b2dad8c
 
 install : $(TARGET)
 
diff --git a/lfs/postfix b/lfs/postfix
index 7f2625a4e8..4971682674 100644
--- a/lfs/postfix
+++ b/lfs/postfix
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = A fast, secure, and flexible mailer
 
-VER        = 3.8.4
+VER        = 3.9.0
 
 THISAPP    = postfix-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = postfix
-PAK_VER    = 44
+PAK_VER    = 45
 
 DEPS       =
 
@@ -70,7 +70,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 200ce3d72444da05e42fc8627002d53d68c1b3d78b7f74b0130ac958c23d16454783ef4849a8c9a4e3cba8ae36646e921f7e94ac4fb819b597e1a5ab1a875272
+$(DL_FILE)_BLAKE2 = e07a525d9cbea43d3ed11f3d672452cf94f88ca7bbaf3c3254bf5be4ef675a1797a5fff2444c0db60c6eb53e43734a388a91faed72bb2fb4e3e5a353535602b0
 
 install : $(TARGET)
 
diff --git a/lfs/rsync b/lfs/rsync
index 7e55437042..fcbcd0ab90 100644
--- a/lfs/rsync
+++ b/lfs/rsync
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2022  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Versatile tool for fast incremental file transfer
 
-VER        = 3.2.7
+VER        = 3.3.0
 
 THISAPP    = rsync-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = rsync
-PAK_VER    = 18
+PAK_VER    = 19
 
 DEPS       =
 
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 1b910b321e8d6b49af9f26bef813509f0da12dedd6857897de136d3617c68d38368ce05de13b9b0ef35a5452dca141ebdcdfb6af8456151d0ca0ad546452b504
+$(DL_FILE)_BLAKE2 = 75a3cc50452086aebd16f42d7a309c173cbc1ea156227afb10d2106d0b9043e973676995b8199d22840775ae3df8db97d1c0de5f3aa58afa130c5b1348c3f825
 
 install : $(TARGET)
 
diff --git a/lfs/samba b/lfs/samba
index df78113139..ec6ef832ad 100644
--- a/lfs/samba
+++ b/lfs/samba
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 4.19.5
+VER        = 4.20.1
 SUMMARY    = A SMB/CIFS File, Print, and Authentication Server
 
 THISAPP    = samba-$(VER)
@@ -33,7 +33,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = samba
-PAK_VER    = 100
+PAK_VER    = 101
 
 DEPS       = avahi cups perl-Parse-Yapp perl-JSON wsdd
 
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 0f0081380ad459cca914e5e4cf505a4783ce97f0fb8c0471a6e558c747c16b0b327e545358265f365599c3807540985bcddb68aa67d14136cee4dbcb5158090c
+$(DL_FILE)_BLAKE2 = 5516b3d74705ee829971119d9931ccd339aaa857647dc46e40fda96f65ec5ba695db107f91075a46e1a7135cfdcc0a56ee67aa3475649b314260be03e4e44657
 
 install : $(TARGET)
 
diff --git a/lfs/vectorscan b/lfs/vectorscan
index 0b60e19c9c..0bcc1bcf40 100644
--- a/lfs/vectorscan
+++ b/lfs/vectorscan
@@ -31,6 +31,7 @@ DL_FILE    = $(THISAPP).tar.gz
 DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
+SUP_ARCH   = x86_64 aarch64
 
 # The compiler uses a lot of memory to compile hyperscan, hence we reduce
 # the total number of processes a little bit to be able to build on
diff --git a/src/paks/postfix/install.sh b/src/paks/postfix/install.sh
index 2e04e74a86..830970e1ea 100644
--- a/src/paks/postfix/install.sh
+++ b/src/paks/postfix/install.sh
@@ -25,10 +25,6 @@
 extract_files
 restore_backup ${NAME}
 
-# change main.cf parameter from default value to prevent smtp smuggling attack
-# will not be required once postfix-3.9.x is released as default will then be yes
-postconf -e 'smtpd_forbid_bare_newline = yes'
-
 postalias /etc/aliases
 # Set postfix's hostname
 postconf -e "myhostname=$(hostname -f)"
diff --git a/src/patches/linux/linux-6.6.32-asix88179_reset.patch b/src/patches/linux/linux-6.6.32-asix88179_reset.patch
new file mode 100644
index 0000000000..f0e7d09f16
--- /dev/null
+++ b/src/patches/linux/linux-6.6.32-asix88179_reset.patch
@@ -0,0 +1,17 @@
+diff -Naur linux-6.6.32.org/drivers/net/usb/ax88179_178a.c linux-6.6.32/drivers/net/usb/ax88179_178a.c
+--- linux-6.6.32.org/drivers/net/usb/ax88179_178a.c	2024-05-25 16:22:56.000000000 +0200
++++ linux-6.6.32/drivers/net/usb/ax88179_178a.c	2024-06-04 10:45:18.113453100 +0200
+@@ -1678,10 +1678,10 @@
+ {
+ 	struct ax88179_data *ax179_data = dev->driver_priv;
+ 
+-	if (ax179_data->initialized)
++//	if (ax179_data->initialized)
+ 		ax88179_reset(dev);
+-	else
+-		ax179_data->initialized = 1;
++//	else
++//		ax179_data->initialized = 1;
+ 
+ 	return 0;
+ }


hooks/post-receive
--
IPFire 2.x development tree

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2024-06-04 13:09 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-06-04 13:09 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 98278fef4c3321387c1673bddaa652fb0adb922d Arne Fitzenreiter

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox