public inbox for ipfire-scm@lists.ipfire.org
 help / color / mirror / Atom feed
* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. c004ed4755890f575729aefefad567ac033c8cb5
@ 2024-12-13  9:10 Arne Fitzenreiter
  0 siblings, 0 replies; only message in thread
From: Arne Fitzenreiter @ 2024-12-13  9:10 UTC (permalink / raw)
  To: ipfire-scm

[-- Attachment #1: Type: text/plain, Size: 97506 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  c004ed4755890f575729aefefad567ac033c8cb5 (commit)
       via  df2bef7d7844b5b3a920a5830034178f9cfc1573 (commit)
       via  7f2dcfc3c630eba5bc7e65fab2188c9cf4b3ac5e (commit)
       via  a3a7f558f6e1b87007736482b896defb24ff5890 (commit)
       via  212b478b7ac1a8f6d0cbeb22876ca4e69bc7abeb (commit)
       via  c419a39aaa8ccd04d68526a3a4121f1f1f85edc2 (commit)
       via  0cdad09a6365d9187107262a9498ba8d2307c086 (commit)
       via  8ded4c550e8346c26e5b3698d14ea4f3eeded826 (commit)
       via  98819de0e7bede8b513f789edc35b963eaa1b963 (commit)
       via  e12b927c107d4773541da8a51dbf47a067f4757b (commit)
       via  736d1d3458dbc6a95c98d66f8a09f3275195e88f (commit)
       via  1fe3a28a1162642956477ffa9e44cf5017cccaf1 (commit)
       via  b339479762d361faea1727df92730ca3db2c8581 (commit)
       via  0d5afc054418873f37dedbf07dd7b165cd1f0d08 (commit)
       via  aab1c3d6c123bddcdcf0dd03bac082b4fa5729f5 (commit)
       via  9435f5d771da46180043863e3c49b71ad53b0715 (commit)
       via  2d47222b6828431966a21250035bf803a7c4e855 (commit)
       via  a0bf3c9d1d78a9007054b50554b6e8edabcce33d (commit)
       via  4dc89aca1eb36ce79f30bb401f51bcfe91d4472d (commit)
       via  5a91471b29456d585ece283eb230387ac0787c4a (commit)
       via  8c946062ec66e72da2f00fc52433a6f41bb5fa4d (commit)
       via  89e87940aa96279a2feffb9c0ead752e616a19c3 (commit)
       via  7d13ce53b9227464718d603c7c122118d318d7a3 (commit)
       via  ebb345e9e054166ebfd57a2f11ef16131529e380 (commit)
       via  413ae40a16ee16326bc3f0d13b5c60d66e833f84 (commit)
       via  51ed86d877d2b460129858d614936d8203dafd40 (commit)
       via  110505bd4a0023da57e79ae3e70cb3ccc59d119c (commit)
       via  a67c8e78c7146d0fc73b4b7af61c0e2699927958 (commit)
       via  a9db42e0da4c6f6fb56cb1ce99aea4ea2e47f155 (commit)
       via  1f58338afe0c09fd6b7a0d2c8eceec7f44bbc71f (commit)
       via  c4e77b29357812f4859deb0cfe3b0bf614e44cd8 (commit)
       via  20c522c5956009444fea7801a82e914e4443122f (commit)
       via  baaed917d61f7aa59a1fdab0a586dcbd54957606 (commit)
       via  d068c6a5898cec2ac90169f809c6702716d9cd0d (commit)
       via  b7513eb4e82e9f0551daaffec995a4aa98dc6993 (commit)
       via  de8ed87d05887907740bef72180b6e8f63d01416 (commit)
      from  4df6f0b66e70a9410468a1101f6d0d32ddd0e77f (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit c004ed4755890f575729aefefad567ac033c8cb5
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 10:05:31 2024 +0100

    core191: ship libxml2
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit df2bef7d7844b5b3a920a5830034178f9cfc1573
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:11:06 2024 +0100

    libxml2: Update to version 2.13.5
    
    - Update from version 2.13.3 to 2.13.5
    - Update of rootfile
    - Changelog
        2.13.5
    	### Regressions
    		- xmlIO: Fix reading from non-regular files like pipes (Nick Wellnhofer)
    		- xmlreader: Fix return value of xmlTextReaderReadString (Nick Wellnhofer)
    		- parser: Fix loading of parameter entities in external DTDs
    		  (Nick Wellnhofer)
    		- parser: Fix downstream code that swaps DTDs (Nick Wellnhofer)
    		- parser: Fix detection of duplicate attributes (Nick Wellnhofer)
    		- string: Fix va_copy fallback (Nick Wellnhofer)
    	### Bug fixes
    		- xpath: Fix parsing of non-ASCII names (Nick Wellnhofer)
        2.13.4
    	### Regressions
    		- parser: Make unsupported encodings an error in declarations
    		- io: don't set the executable bit when creating files (triallax)
    		- xmlcatalog: Improved fix for #699
    		- Revert "catalog: Fetch XML catalog before dumping"
    		- io: Add missing calls to xmlInitParser
    		- tree: Restore return value of xmlNodeListGetString with NULL list
    		- parser: Fix error handling after reaching limit
    		- parser: Make xmlParseChunk return an error if parser was stopped
    	### Bug fixes
    		- python: Fix SAX driver with character streams
    	### Improvements
    		- xpath: Make recursion check work with xmlXPathCompile
    		- parser: Report at least one fatal error
    	### Portability
    		- include: Check whether _MSC_VER is defined
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 7f2dcfc3c630eba5bc7e65fab2188c9cf4b3ac5e
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 10:04:20 2024 +0100

    core191: ship libuv
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit a3a7f558f6e1b87007736482b896defb24ff5890
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:11:05 2024 +0100

    libuv: Update to version 1.49.2
    
    - Update from version 1.48.0 to 1.49.2
    - Update of rootfile not required
    - Changelog
        1.49.2
    	* win,fs: remove trailing slash in junctions (Hüseyin Açacak)
    	* Revert "linux: eliminate a read on eventfd per wakeup" (Ben Noordhuis)
    	* win: Fix linked list logic in getaddrinfo (Thad House)
    	* win: fix compilation against Windows 24H2 SDK (Thad House)
    	* win: remap ERROR_NOACCESS and ERROR_BUFFER_OVERFLOW (Jameson Nash)
    	* win,fs: match trailing slash presence in junctions to user input (Jameson
    	  Nash)
        1.49.1
    	* build: add darwin-syscalls.h to release tarball (Ben Noordhuis)
    	* linux: use IORING_SETUP_NO_SQARRAY when available (Ben Noordhuis)
    	* linux: use IORING_OP_FTRUNCATE when available (Ben Noordhuis)
    	* win: fix pNtQueryDirectoryFile check (Rialbat)
    	* win: fix WriteFile() error translation (Santiago Gimeno)
    	* win,fs: uv_fs_rmdir() to return ENOENT on file (Santiago Gimeno)
    	* win,pipe: ipc code does not support async read (Jameson Nash)
    	* netbsd: fix build (Adam)
    	* win,fs: fix bug in fs__readdir (Hüseyin Açacak)
    	* unix: workaround gcc bug on armv7 (Santiago Gimeno)
    	* unix: work around arm-linux-gnueabihf-gcc bug (Ben Noordhuis)
    	* unix: fix uv_tcp_keepalive in smartOS (Santiago Gimeno)
    	* unix: fix uv_getrusage ru_maxrss on solaris (Poul T Lomholt)
        1.49.0
    	* test: fix -Wpointer-to-int-cast on 32 bits systems (Ben Noordhuis)
    	* build: add alias for libuv to CMakeLists.txt (Anthony Alayo)
    	* linux: create io_uring sqpoll ring lazily (Ben Noordhuis)
    	* misc: run sample CI when code changes (Jameson Nash)
    	* linux: fix uv_available_parallelism using cgroup (Thomas Walter)
    	* doc: fix tty example segfault (hiiizxf)
    	* udp,unix: fix sendmsg use-after-free (Geddy)
    	* cygwin: implement uv_resident_set_memory (Farzin Monsef)
    	* win: almost fix race detecting ESRCH in uv_kill (Santiago Gimeno)
    	* test: disable env var test under win32+asan (Ben Noordhuis)
    	* unix,fs: fix realpath calls that use the system allocator (Saúl Ibarra
    	  Corretgé)
    	* sunos: sync tcp keep-alive with other unices (Andy Pan)
    	* linux: fix /proc/self/stat executable name parsing (Farzin Monsef)
    	* test,ci: fix [AM]San, disable ASLR (Ben Noordhuis)
    	* win: remove _alloca usage (Ben Noordhuis)
    	* unix: reinstate preadv/pwritev fallback code (Ben Noordhuis)
    	* linux: don't delay EPOLL_CTL_DEL operations (Ben Noordhuis)
    	* doc: fix typos in ChangeLog (tgolang)
    	* unix,win: error on zero delay tcp keepalive (Saúl Ibarra Corretgé)
    	* win: simplify uv_once implementation (Saúl Ibarra Corretgé)
    	* doc: correct udp socket options documentation (Ben Noordhuis)
    	* linux: don't use sendmmsg() for single datagrams (Ben Noordhuis)
    	* unix: fix fd leaks in SCM_RIGHTS error path (Ben Noordhuis)
    	* win: robustify uv_os_getenv() error checking (Ben Noordhuis)
    	* test: use newer ASSERT_MEM_EQ macro (Ben Noordhuis)
    	* unix: de-duplicate conditions for using kqueue (Brad King)
    	* darwin: simplify uv_hrtime (Saúl Ibarra Corretgé)
    	* mailmap: update saghul's main email address (Saúl Ibarra Corretgé)
    	* win: remove no longer needed define (Saúl Ibarra Corretgé)
    	* doc: fix some typos (josedelinux)
    	* linux,darwin: make `uv_fs_copyfile` behaves like `cp -r` (Juan José Arboleda)
    	* dragonfly: disable SO_REUSEPORT for UDP socket bindings (Andy Pan)
    	* test: remove the obsolete HAVE_KQUEUE macro (Andy Pan)
    	* unix: use the presence of SOCK_* instead of OS macros for socketpair (Andy
    	  Pan)
    	* bsd: support pipe2() on *BSD (Andy Pan)
    	* unix: support SO_REUSEPORT with load balancing for TCP (Andy Pan)
    	* doc: add entries for extended getpw (Juan José Arboleda)
    	* test: fix the flaky test-tcp-reuseport (Andy Pan)
    	* aix,ibmi: fix compilation errors in fs_copyfile (Jeffrey H. Johnson)
    	* unix: support SO_REUSEPORT with load balancing for UDP (Andy Pan)
    	* tcpkeepalive: distinguish OS versions and use proper time units (Andy Pan)
    	* win: map ERROR_BAD_EXE_FORMAT to UV_EFTYPE (Hüseyin Açacak)
    	* doc: add instruction how to install with Conan (Uilian Ries)
    	* unix,win: remove unused req parameter from macros (Viacheslav Muravyev)
    	* build: fix android ci build (Ben Noordhuis)
    	* unix,win: export wtf8 functions properly (Ben Noordhuis)
    	* hurd: add includes and macro prerequisites (Olivier Valentin)
    	* hurd: stub uv_thread_setpriority() (Olivier Valentin)
    	* ci: use macOS 12 for macOS and iOS builds (Saúl Ibarra Corretgé)
    	* darwin: fix crash on iOS(arm64) (郑苏波 (Super Zheng))
    	* Create dependabot.yml for updating github-actions (Jameson Nash)
    	* doc: correct names of Win32 APIs in fs.rst (zeertzjq)
    	* ci: bump upload and download-artifact versions (dependabot[bot])
    	* ci: bump actions/setup-python from 4 to 5 (dependabot[bot])
    	* ci: bump KyleMayes/install-llvm-action from 1 to 2 (dependabot[bot])
    	* win,error: remap ERROR_NO_DATA to EAGAIN (Jameson Nash)
    	* test: handle zero-length udp datagram (Ben Noordhuis)
    	* misc: remove splay trees macros (Viacheslav Muravyev)
    	* test,openbsd: remove superfluous ifdef guard (Ben Noordhuis)
    	* win,fs: use posix delete semantics, if supported (Ian Butterworth)
    	* win: fix env var in uv_os_homedir and uv_os_tmpdir (Hüseyin Açacak)
    	* fsevents: detect watched directory removal (Santiago Gimeno)
    	* ci: bump actions/checkout to 4 (dependabot[bot])
    	* linux: eliminate a read on eventfd per wakeup (Andy Pan)
    	* test: pipe_overlong_path handle ENAMETOOLONG (Abdirahim Musse)
    	* win,fs: use the new Windows fast stat API (Hüseyin Açacak)
    	* win,pipe: fix race with concurrent readers (Jameson Nash)
    	* win,signal: fix data race dispatching SIGWINCH (Jameson Nash)
    	* build: ubsan fixes (Matheus Izvekov)
    	* linux: disable SQPOLL io_uring by default (Santiago Gimeno)
    	* win: fix fs.c ubsan failure (Matheus Izvekov)
    	* test: rmdir can return `EEXIST` or `ENOTEMPTY` (Richard Lau)
    	* test: check for `UV_CHANGE` or `UV_RENAME` event (Richard Lau)
    	* unix,fs: silence -Wunused-result warning (Santiago Gimeno)
    	* linux: support abstract unix socket autobinding (Ben Noordhuis)
    	* kqueue: use EVFILT_USER for async if available (Andy Pan)
    	* win: remove deprecated GetVersionExW call (Shelley Vohr)
    	* doc: document uv_loop_option (握猫猫)
    	* doc: fix the `uv_*_set_data` series of functions (握猫猫)
    	* doc: properly label enumerations and types (握猫猫)
    	* doc: document specific macOS fs_event behavior (Santiago Gimeno)
    	* win,pipe: restore fallback handling for blocking pipes (Jameson Nash)
    	* unix,win: remove unused rb-tree macro parameters (Viacheslav Muravyev)
    	* win: compute parallelism from process cpu affinity (Ben Noordhuis)
    	* win: use NtQueryInformationProcess in uv_os_getppid (Zuohui Yang)
    	* win,pipe: fix missing assignment to success (Jameson Nash)
    	* win: fix uv_available_parallelism on win32 (Ben Noordhuis)
    	* win,pipe: fix another missing assignment to success (Jameson Nash)
    	* kqueue: disallow ill-suited file descriptor kinds (Andy Pan)
    	* unix: restore tty attributes on handle close (Ben Noordhuis)
    	* test: delete test with invalid assumption (Ben Noordhuis)
    	* dragonflybsd: fix compilation failure (Jeffrey H. Johnson)
    	* test: run android tests on ci (Edigleysson Silva (Edy))
    	* darwin: add udp mmsg support (Raihaan Shouhell)
    	* unix: work around arm-linux-gnueabihf-gcc bug (Ben Noordhuis)
    	* unix: expand uv_available_parallelism() to support more platforms (Ondřej
    	  Surý)
    	* doc: add known issue in armv7 (Santiago Gimeno)
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 212b478b7ac1a8f6d0cbeb22876ca4e69bc7abeb
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 10:03:07 2024 +0100

    core191: ship libtirpc
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit c419a39aaa8ccd04d68526a3a4121f1f1f85edc2
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:11:03 2024 +0100

    libtirpc: Update to version 1.3.6
    
    - Update from version 1.3.5 to 1.3.6
    - Update of rootfile not required
    - Changelog
        1.3.6
    	    configure.ac: Using autoupdate updated to the latest autoconf macros
    	    svc_fd_create: skip getsockname on a non-network socket
    	     As svcfd_create(3) said, it can:
    	     Create a service on top of any open file descriptor.
    	     But getsockname and getpeername in svc_fd_create assume that
    	     fd should be a connected socket.
    	     This patch will leave xp_raddr and xp_laddr uninitialized
    	     if fd is not a connected socket.
    	    detect whether linker supports --version-script
    	    check for gss_pname_to_uid or hardcode an early return if we can't use
    	     aname to localname
    	    test for IPV6_PKTINFO and potentially define __APPLE_USE_RFC_3542 to expose
    	     macos supports both RFC 2292 and RFC 3542 versions of ipv6 options and
    	     you choose which to expose, with a define
    	    macos uses the same mutex primitives as linux and so can use these defines
    	    check for struct rpcent in netdb.h before redefining
    	     macos defines it in netdb.h
    	    include string.h when we need a memset prototype for
    	    attempt to use machine/endian.h if endian.h does not exist
    	     macos has the former, not the latter
    	    updated macOS support for tirpc [2/7] SOL_IP vs IPPROTO_IP
    	     in order to have protocol numbers on macOS, we need to first determine
    	     we don't have SOL_IP, and then that we do have IPPROTO_IP, and then
    	     define the former as the latter. do the same for IPV6
    	    check for getpeereid
    	     macos ships with it, this avoids trying to build a replacement for a defined
    	     function
    	    rpcb_prot.x: Update _PATH_RPCBINDSOCK
    	     2f9ce0c updated rpcb_prot.h, but rpcb_prot.x must be updated as well.
    	    Move rpcbind.sock to /run
    	     Most of the distros have /var/run as symlink to /run.
    	     Because /var may be a separate partition, and could even be mounted via
    	     NFS, having to look directly to /run help to avoid issues rpcbind
    	     startup early in boot when /var might not be available.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 0cdad09a6365d9187107262a9498ba8d2307c086
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 10:01:56 2024 +0100

    core191: ship libpipeline
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 8ded4c550e8346c26e5b3698d14ea4f3eeded826
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:11:02 2024 +0100

    libpipeline: Update to version 1.5.8
    
    - Update from version 1.5.7 to 1.5.8
    - Update of rootfile
    - Changelog
        1.5.8
    	 * Upgrade to Gnulib `stable-202407`.  Building libpipeline now requires
    	   Automake >= 1.14.
    	 * Use C23-style `nullptr`.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 98819de0e7bede8b513f789edc35b963eaa1b963
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 10:00:07 2024 +0100

    core191: ship libpcap
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit e12b927c107d4773541da8a51dbf47a067f4757b
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:11:01 2024 +0100

    libpcap: Update to version 1.10.5
    
    - Update from version 1.10.4 to 1.10.5
    - Update of rootfile
    - Fixes for 2 CVE's
    - Changelog
        1.10.5
    	    Source code:
    	      Spell WirelessHART details properly.
    	      Mark pcap_vasprintf() as printf-like.
    	      Finalize moving of bpf_filter.c. (GH #1166)
    	      Remove an unneeded argument from gen_mcode6().
    	      Don't do some Berkeley YACC workarounds with YACC releases not
    	        requiring them.
    	      Use correct data types rather than int in some cases.
    	      Squelch compiler warning in grammar.c.
    	      Fix findalldevtest compilation if IPv6 isn't enabled.
    	      Rename helper routines for pcap modules to have names beginning with
    	        pcapint_, to avoid namespace collisions for code linking statically
    	        with libpcap.
    	      Avoid casting hack for the Windows cleanup-on-exit routine.
    	      Use %zu format for one case of printing a size_t.
    	      Fix some Coverity errors.
    	      Fix availabilities of some functions to match reality.
    	      pcap: make the seconds and microseconds/nanoseconds fields unsigned.
    	      Remove the unused pcap-rpcap-int.h header file.
    	    Thread safety:
    	      Make some static variables thread-local; fixes issue #1174.
    	    Packet filtering:
    	      Improve reporting of some invalid filter expressions.
    	      Return an error from pcap_compile() if the scanner fails to initialize.
    	      Optimizer fix from Archit Shah to recompute dominators after
    	        moving code (#976); fixes #945 (although the resulting filter
    	        isn't empty).
    	      Optimizer fix from Archit Shah to mark value as unknown when store
    	        of that value is deleted (#972); fixes #143, #434, #436, #437,
    	        and #1076.
    	    Linux:
    	      Properly return warnings.
    	      Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
    	      Avoid 32-bit unsigned integer overflow in USB captures.  Fixes
    	        issues #1134 and #1205.
    	      Fix a file descriptor leak.
    	      Properly report warnings about unknown ARPHRD_ types.
    	      Fix DLT_CAN_SOCKETCAN handling of CAN FD.
    	      Add CAN XL support to DLT_CAN_SOCKETCAN.
    	      Clean up the code that sets the "real" ("original") length for
    	        isochronous USB transfers.
    	      Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    	        Bluetoth modules.
    	    Solaris:
    	      Handle BPF returning ESRCH for unknown devices.
    	      List the "any" device if it's supported.
    	      Report {non-existent zone}/{interface} errors appropriately.
    	      Allow attaching to links owned by a non-global zone.  (Based on
    	        pull request #1202.)
    	      Fix AF_LINK handling on illumos.
    	    macOS:
    	      Redid the availability macros to be closer to what Apple's doing
    	        in recent SDKs, including tagging pcap-namedb.h routines.
    	      Fix the install name of the installed shared library to have a
    	        full path when building with CMake.
    	      Fix universal builds.
    	    Haiku:
    	      Convert the module to C.  Fixes issue #1114.
    	      Address a few compiler warnings.  Fixes issue #1114.
    	      Fix various build problems.  Fixes issue #1114.
    	      Report non-existent devices correctly.
    	      Fix handling of packet statistics.
    	      Fix packet timestamping.
    	      Fix packet filtering with low snaplen.
    	      Improve connection status reporting.
    	      Add support for promiscuous mode.
    	      Detect DLTs and loopback capture support at run time.
    	      Report IEEE 802.11 as PCAP_IF_WIRELESS.
    	    Windows:
    	      Fix internal handling of "not supported" error codes from NPF.
    	      Work around a bug in Npcap 1.00 in case of driver version mismatch.
    	      Don't call WSACleanup() when handling a failed WSAStartup().
    	    BSD, macOS, AIX, Solaris 11, Linux:
    	      Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    	        mechanism is not present, in the hopes that, for example,
    	        attempts to capture on Windows Services for Linux 1, in which
    	        the NT kernel attempts to simulate Linux system calls but does
    	        not support packet sockets, can get an error that better
    	        indicates the underlying problem.
    	    AirPcap:
    	      Format an error message if we run out of memory.
    	    nflog:
    	      Fix count of dropped packets.
    	      Make sure we don't overflow when rounding up the TLV length.
    	    rpcap:
    	      Handle routines removed in at least some OpenSSL libraries.
    	      CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    	        double frees in some cases.
    	      Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    	        on UN*Xes and as SOCKET on Windows.
    	      CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    	        file:// URL with a path to a directory that cannot be opened.
    	    Savefiles:
    	      Handle DLT_/LINKTYPE_ mapping better, to handle some
    	        OpenBSD-specific link types better.
    	      Treat if_tsoffset as signed in pcapng files, as the spec says.
    	      Don't try to fix the "real" length for isochronous USB
    	        transfers if the number of USB descriptors is too large.
    	      Reject pcap files where one of the reserved fields in the
    	        "link-layer type plus other stuff" is non-zero.
    	    Building and testing:
    	      Add a configure option to help debugging (--enable-instrument-functions).
    	      Improved tests and error reporting for uses of pkg-config, and
    	        improve help message.
    	      Fix Haiku build.
    	      With CMake, install headers in CMAKE_INSTALL_INCLUDEDIR rather
    	        than just include.
    	      Build libpcap.a before building test programs.
    	      Print address family numerically, as well as symbolically,
    	        in findalldevstest.
    	      Fail with suggestions, rather than failing over to no capture
    	        support, if no capture mechanism was found.  Fixes issue #1016.
    	      Don't indent comments in Make, as that may cause them not to be
    	        recognized as comments.
    	      Don't check for libssl if we aren't going to use it.
    	      Better handle enabling and disabling of sanitizers.  Fixes issue
    	        #1171.
    	      CMakeLists.txt: Print "Symlinking: /some/path to ..." conditionally.
    	      Evaluate CMAKE_INSTALL_PREFIX at install time.
    	      cmake: Update the minimum required version to 2.8.12 (except Windows).
    	      cmake: suppress CMP0042 OLD deprecated warning.
    	      Makefile.in: Add the releasecheck target.
    	      Cirrus CI: Add the "make releasecheck" command in the Linux task.
    	      Makefile.in: Add the whitespacecheck target.
    	      Cirrus CI: Run the "make whitespacecheck" command in the Linux task.
    	      Autoconf: Update config.{guess,sub}, timestamps 2024-01-01.
    	      Autoconf: Update the install-sh script to the 2020-11-14.01 version.
    	      Compile with '-Wnull-pointer-subtraction',
    	        '-Wunused-but-set-parameter', and '-Wunused-but-set-variable' in
    	        devel mode if supported.
    	      Don't ignore spaces between CMAKE_C_FLAGS and DPDK_C_FLAGS with
    	        CMake.
    	      Use noreturn and __format__ with XL C 7.0 and later.
    	      Check for the same -W flags in autotools and CMake.
    	      Autoconf: Add autogen.sh, remove configure and config.h.in and put
    	        these generated files in the release tarball.
    	      Autoconf: Get the size of a time_t.
    	      Fix propagation of cc_werr_cflags() output.
    	      Makefile.in(s): Fix the depend target.
    	      mkdep: Exit with a non-zero status if a command fails.
    	      Fix HCI_CHANNEL_MONITOR detection with musl libc.
    	      Extend "make shellcheck" onto mkdep too.
    	      Add initial support for building with TinyCC.
    	      Address all known compiler warnings specific to illumos, Linux, NetBSD,
    	        Solaris and Sun C; in CI expect warnings specific to TinyCC only.
    	    Documentation:
    	      Update and fix pcap-filter man page.
    	      Add a README.haiku.md file.
    	      Document pcap-config better.
    	      Man page formatting and prose fixes.
    	      Rename doc/README.Win32.md to doc/README.windows.md.
    	      Update pcap-savefile man page to match the Internet-Draft for
    	        pcap.
    	      Fix CMake issues for target used by other projects.
    	      Explain "any" device better in pcap_open_live(3PCAP).
    	      Update INSTALL.md.
    	      Note in man pages that errbuf arguments must point to an error
    	        buffer.
    	      Note that if pcap_findalldevs() fails it sets *alldevsp to NULL;
    	        there's no devices list to free.
    	      Explain "other addresses" in pcap_findalldevs(3PCAP).
    	      Document pcap_lookupnet(3PCAP) a bit better.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 736d1d3458dbc6a95c98d66f8a09f3275195e88f
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:58:58 2024 +0100

    core191: ship liboping
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 1fe3a28a1162642956477ffa9e44cf5017cccaf1
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:11:00 2024 +0100

    liboping: Update to version 1.10.0
    
    - Update from version 1.3.4 (2009) to 1.10.0 (2017)
    - Update of rootfile
    - Changelog
        1.10.0
    	* Build system: Search the "rt" library for clock_gettime(). This
    	  fixes build issues on Mac OS X. Thanks to Yann E. Morni for this
    	  fix. #9
    	* Build system: The "--with[out]-ncurses" option has been added and
    	  allows to enforce/disable the building of "noping". Thanks to Thomas
    	  Deutschmann for the patch. #15
    	* Build system: Compatibility code to work with pkg-config < 0.27 has
    	  been added. #22
    	* liboping: Creation of ICMPv4 packets has been fixed: due to an
    	  incorrect sizeof() the payload may have been prefixed by 20 zero
    	  bytes, resulting in larger packets than desired. Thanks to Kyle Zhou
    	  for reporting and fixing this. #10
    	* liboping: The number of file descriptors used has been reduced to at
    	  most two (from one per host). This and a few other optimizations
    	  significantly improve performance. Thanks to Luke Heberling for the
    	  patch. #11
    	* oping, noping: Handling of the "-O" command line flag has been
    	  fixed.
    	* oping, noping: The "-b" option has been added and enables a bell
    	  whenever an echo reply is received. Thanks to Antoine Beaupré for
    	  the patch. #6
    	* noping: The background color has been changed to use the terminal
    	  default. Thanks to @middleO. #18
    	* noping: The ability to add hosts after noping has started (the "a"
    	  key) has been added. Thanks to Hamish Coleman for the patch. #20,
    	  #23
        1.9.0
    	* liboping: The new "PING_OPT_MARK" option allows to mark packets,
    	  which can be used for filtering and routing such packets on Linux.
    	* oping, noping: The new "-m" command line option allows to set a mark
    	  on packets sent by the tool.
    	* oping, noping: The new "-O" command line option allows to write
    	  measurements to an CSV file.
    	* oping, noping: The new "-w" command line option allows to specify
    	  the timeout after which a packet/reply is considered "dropped".
        1.8.0
    	* oping, noping: Average and standard deviation have been removed from
    	  the status output, which show median and 95th percentile instead.
    	  The percentile can be chosen with the "-P" option.
    	* noping: The additional graph types "histogram" and "boxplot" have
    	  been added, which can be selected with the "-g" option.
        1.7.0
    	* oping, noping: The new -Z option allows the exit status to indicate
    	  the number of failing hosts. Thanks to Barak Pearlmutter for the
    	  patch.
    	* noping: The ability to print a "prettyping" style graph has been
    	  added. Thanks to Antoine Beaupré for his work!
    	* src/liboping.c: Build issues on Solaris have been fixed. Thanks
    	  Scott Severtson for the fix!
    	* Build system: Creation and installation of a pkg-config file has
    	  been added. Thanks to Barak Pearlmutter for the patch.
        1.6.2
    	* Build system: Setting capabilities and the set-UID bit has been made
    	  more fault-tolerant, so that it will work with Debian's fakeroot(1)
    	  utility.
    	* src/liboping.c: Fixed a compiler warning about an non-static format
    	  string. Thanks to Brian Edwards for pointing this out.
    	* src/liboping.c: Fixed compilation under Mac OS X and Solaris. Thanks
    	  to Clayton O'Neill for his patch.
        1.6.1
    	* Build system: If "make install" is executed as root, the CAP_NET_RAW
    	  capability is added to the binary (on Linux) or the set-UID bit is
    	  set (other Unixes).
    	* src/oping.c: Fix compiler warnings which may abort the build. Thanks
    	  to James Bromberger for reporting the problem.
    	* noping: Compatibility with ncurses 5.8 has been fixed. Thanks to
    	  Gaetan Bisson for his patch.
        1.6.0
    	* liboping: Improve timing of received network packets using
    	  SO_TIMESTAMP if available. Thanks to Bruno Prémont for his patch.
        1.5.1
    	* oping, noping: Alias for the “Voice Admit” DSCP has been added.
    	* src/oping.c, src/liboping.c: Compiler warnings / errors have been
    	  fixed. Thanks to James Bromberger for reporting one of them.
        1.5.0
    	* src/liboping.c: The possibility to set the QoS byte of outgoing IPv4
    	  and IPv6 packets and read the byte from incoming packets has been
    	  added. Thanks to Vladimir Melnikov for his patch.
    	* oping, noping: Add the ability to configure the QoS field on the
    	  command line. If either the QoS field of outgoing or incoming
    	  packets is non-standard, the QoS byte of incoming packets will be
    	  printed.
    	* liboping: The library has been relicensed under the LGPL 2.1.
        1.4.0
    	* noping: A new front-end to liboping, using the ncurses library, has
    	  been added. The new command line application displays ping
    	  statistics online and highlights aberrant round-trip times.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit b339479762d361faea1727df92730ca3db2c8581
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:57:45 2024 +0100

    core191: ship libnl-3
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 0d5afc054418873f37dedbf07dd7b165cd1f0d08
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:59 2024 +0100

    libnl-3: Update to version 3.11.0
    
    - Update from version 3.10.0 to 3.11.0
    - Update of rootfile not required
    - Changelog details are only available by viewing the git repo commits
       https://github.com/thom311/libnl/commits/main/
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit aab1c3d6c123bddcdcf0dd03bac082b4fa5729f5
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:54:58 2024 +0100

    core191: ship jibjpeg
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 9435f5d771da46180043863e3c49b71ad53b0715
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:58 2024 +0100

    libjpeg: Update to version 3.0.4
    
    - Update from version 3.0.3 to 3.0.4
    - Update of rootfile not required
    - Changelog
        3.0.4
    	1. Fixed an issue whereby the CPU usage of the default marker processor in the
    	decompressor grew exponentially with the number of markers.  This caused an
    	unreasonable slow-down in `jpeg_read_header()` if an application called
    	`jpeg_save_markers()` to save markers of a particular type and then attempted
    	to decompress a JPEG image containing an excessive number of markers of that
    	type.
    	2. Hardened the default marker processor in the decompressor to guard against
    	an issue (exposed by 3.0 beta2[6]) whereby attempting to decompress a
    	specially-crafted malformed JPEG image (specifically an image with a complete
    	12-bit-per-sample Start Of Frame segment followed by an incomplete
    	8-bit-per-sample Start Of Frame segment) using buffered-image mode and input
    	prefetching caused a segfault if the `fill_input_buffer()` method in the
    	calling application's custom source manager incorrectly returned `FALSE` in
    	response to a prematurely-terminated JPEG data stream.
    	3. Fixed an issue in cjpeg whereby, when generating a 12-bit-per-sample or
    	16-bit-per-sample lossless JPEG image, specifying a point transform value
    	greater than 7 resulted in an error ("Invalid progressive/lossless parameters")
    	unless the `-precision` option was specified before the `-lossless` option.
    	4. Fixed a regression introduced by 3.0.3[3] that made it impossible for
    	calling applications to generate 12-bit-per-sample arithmetic-coded lossy JPEG
    	images using the TurboJPEG API.
    	5. Fixed an error ("Destination buffer is not large enough") that occurred when
    	attempting to generate a full-color lossless JPEG image using the TurboJPEG
    	Java API's `byte[] TJCompressor.compress()` method if the value of
    	`TJ.PARAM_SUBSAMP` was not `TJ.SAMP_444`.
    	6. Fixed a segfault in djpeg that occurred if a negative width was specified
    	with the `-crop` option.  Since the cropping region width was read into an
    	unsigned 32-bit integer, a negative width was interpreted as a very large
    	value.  With certain negative width and positive left boundary values, the
    	bounds checks in djpeg and `jpeg_crop_scanline()` overflowed and did not detect
    	the out-of-bounds width, which caused a buffer overrun in the upsampling or
    	color conversion routine.  Both bounds checks now use 64-bit integers to guard
    	against overflow, and djpeg now checks for negative numbers when it parses the
    	crop specification from the command line.
    	7. Fixed an issue whereby the TurboJPEG lossless transformation function and
    	methods checked the specified cropping region against the source image
    	dimensions and level of chrominance subsampling rather than the destination
    	image dimensions and level of chrominance subsampling, which caused some
    	cropping regions to be unduly rejected when performing 90-degree rotation,
    	270-degree rotation, transposition, transverse transposition, or grayscale
    	conversion.
    	8. Fixed an issue whereby the TurboJPEG lossless transformation function and
    	methods did not honor `TJXOPT_COPYNONE`/`TJTransform.OPT_COPYNONE` unless it
    	was specified for all lossless transforms.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 2d47222b6828431966a21250035bf803a7c4e855
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:53:28 2024 +0100

    core191: ship libgpg-error
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit a0bf3c9d1d78a9007054b50554b6e8edabcce33d
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:57 2024 +0100

    libgpg-error: Update to version 1.51
    
    - Update from version 1.50 to 1.51
    - Update of rootfile
    - Changelog
        1.51
    	 * Allow initialization of new Windows threads to utf8 mode.  [T7185]
    	 * Add GPGRT_PROCESS_ALLOW_SET_FG for gpgrt_process_spawn.
    	   [rEb79d4206f4]
    	 * Add new spawn function to modify the environment.  [T7307]
    	 * Fix missing environ var for macOS and others.  [T7169,T7307]
    	 * Fix forgotten _gpgrt_post_syscall on create pipe failure.  [rEbcab96484d]
    	 * Let gpgrt_poll return an error for a closed fd.  [rE4a3dc85f69]
    	 * Fix build error introduced by C-committee stupidity.  [T7344]
    	 * Interface changes relative to the 1.50 release:
    		 _gpg_w32_gettext_use_utf8           EXTN (new value 2).
    		 gpgrt_spawn_actions_set_env_rev     NEW.
    		 GPGRT_PROCESS_ALLOW_SET_FG          NEW.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 4dc89aca1eb36ce79f30bb401f51bcfe91d4472d
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:52:03 2024 +0100

    core191: ship libedit
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 5a91471b29456d585ece283eb230387ac0787c4a
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:56 2024 +0100

    libedit: Update to version 20240808-3.1
    
    - Update from version 20240517-3.1 to 20240808-3.1
    - Update of rootfile
    - Changelog
        20240808-3.1
    	   * all: sync with upstream source
    	   * doc/Makefile.am: fix regression. Name all manpage links as el_*
    		(e.g. el_history.3) to avoid conflicts.
    		Reported by Zopolis4
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 8c946062ec66e72da2f00fc52433a6f41bb5fa4d
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:50:34 2024 +0100

    core191: ship libcap
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 89e87940aa96279a2feffb9c0ead752e616a19c3
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:55 2024 +0100

    libcap: Update to version 2.72
    
    - Update from version 2.70 to 2.72
    - Update of rootfile
    - Changelog
        2.72
          ERRATA:
            Failed to support more modern Linux architectures including arm64. Fix provided
    	 by Xi Ruoyao.
          This specific release is devoted to a wholesale rewrite of libpsx to operate on
           native Linux threads (aka LWP = Light Weight Processes).
            Given the potential for misbehavior, we're isolating this release to that change.
                Should some issue(s) arise, and folk need to roll back, this will hopefully
    	     make downstream packagers' lives a bit easier: skip this release altogether.
            This addresses LCAP-CR-23-102 (SEVERITY) NONE from the libcap-2.69 security
    	 audit. This addresses Bug 217476.
            This addresses C++ std::thread libpsx support. This addresses Bug 218607
    	 reported by Vini Ipsmaker.
                Included a test case for this: contrib/bug218607/
            This now allows the PSX mechanism to apply to threads launched by loaded .so
    	 plugins. This addresses Bug 219174 reported by Stas Sergeev.
                Included a test case for this: tests/b219174.c
            The rewrite has significantly reduced the need for any odd linking of the
    	 -lpsx library. Namely, if code makes use of the psx_syscall*() functions,
    	 there is no need for anything other than -lpsx on the link line.
                Updated a whole lot of documentation that warned folk about the
    	     -wrap=pthread_create linking need not being needed any more. (Bug 219456)
                Linking -lcap and -lpsx still requires some extra care. Updated
    	     cap_get_proc(3) manual page to explain.
            Was unable to figure out how to work around the pre-go1.16.* bug related to
    	 cgo and interrupt handling while thread exit with the rewritten libpsx code.
    	 Decided to abandon full support for earlier versions of Go.
                Explanation is Bug 219478 which points to old Go bug.
          Transitioned key used for signing Go package tags to use the
           0D23D34C577B08C4082CFD76430C5CFF993116B1 key.
          Very tiny documentation change for the cap package to try again to get a runnable
           example to show up on the pkg.go.dev website.
        2.71
          Reduce the need for CAP_SETPCAP in IAB setting to the specific instances in
    	which the kernel requires it. This addresses Bug 219169 reported by
    	Christopher Head.
          Resolve subtle libpsx linker flag issue related to -Bsymbolic-functions. This
    	addresses Bug 219169 reported by Stas Sergeev.
          Add new GPG signing key. At this stage, none of the older keys have been
    	retired. This addresses Bug 218860 requested by David Runge at Arch Linux. Key
    	details:
    		$ gpg --fingerprint 0D23D34C577B08C4082CFD76430C5CFF993116B1
    		pub   ed25519 2024-10-26 [SC]
    		      0D23 D34C 577B 08C4 082C  FD76 430C 5CFF 9931 16B1
    		uid           [ultimate] Andrew G. Morgan (2024+ libcap signing key)
    				<morgan(a)kernel.org>
    		sub   cv25519 2024-10-26 [E]
          Expand use of various $(xFLAGS) to building simple binaries in the build tree.
    	Requested by Pierre-Clément Tosi.
          Numerous documentation updates and clarifications.
          Added a programming example to the cap package documentation. Exploring how to
    	embed viewer runnable content in the automatically generated online pkg.go.dev
    	documentation.
          Work around a longstanding glibc segfault annoyance for in-build-tree testing.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 7d13ce53b9227464718d603c7c122118d318d7a3
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:49:27 2024 +0100

    core191: ship libarchive
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit ebb345e9e054166ebfd57a2f11ef16131529e380
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:54 2024 +0100

    libarchive: Update to version 3.7.7
    
    - Update from version 3.7.4 to 3.7.7
    - Update of rootfile
    - Fixes for 3 CVE's in 3.7.5
    - Changelog
        3.7.7
    	Security fixes:
    	    gzip: prevent a hang when processing a malformed gzip inside a gzip (#2366, OSS-Fuzz)
    	    tar: don't crash on truncated tar archives (#2364, OSS-Fuzz)
    	    tar: fix two leaks in tar header parsing (#2377)
    	Important bugfixes:
    	    7-zip: read/write symlink paths as UTF-8 (#2252)
    	    cpio: exit with an error code if an entry could not be extracted (#2371)
    	    rar5: report encrypted entries (#2096)
    	    tar: fix truncation of entry pathnames in specific archives (#2360)
    	    windows: fix ARCHIVE_EXTRACT_SECURE_NOABSOLUTEPATHS (#2363)
        3.7.6
    	This release fixes a tar regression introduced in libarchive 3.7.5 (#2331, #2337)
    	Important bugfixes.
    	    tar: clean up linkpath between entries (#2343)
    	    tar: fix memory leaks when processing symlinks or parsing pax headers (#2338)
    	    iso: be more cautious about parsing ISO-9660 timestamps (#2330)
        3.7.5
    	Security fixes:
    	    fix multiple vulnerabilities identified by SAST (#2251, #2256)
    	    cpio: ignore out-of-range gid/uid/size/ino and harden AFIO parsing (#2258)
    	    lzop: prevent integer overflow (#2174)
    	    rar4: protect copy_from_lzss_window_to_unp() (#2172, CVE-2024-20696)
    	    rar4: fix CVE-2024-26256 (#2269, CVS-2024-26256)
    	    rar4: fix OOB in delta and audio filter (#2148, #2149)
    	    rar4: fix out of boundary access with large files (#2179)
    	    rar4: add boundary checks to rgb filter (#2210)
    	    rar4: fix OOB access with unicode filenames (#2203)
    	    rar5: clear 'data ready' cache on window buffer reallocs (#2265)
    	    rpm: calculate huge header sizes correctly (#2158)
    	    unzip: unify EOF handling (#2175)
    	    util: fix out of boundary access in mktemp functions (#2160)
    	    uu: stop processing if lines are too long (#2168)
    	Important bugfixes:
    	    7zip: fix issue when skipping first file in 7zip archive that is a
    		  multiple of 65536 bytes (#2245)
    	    ar: fix archive entries having no type (#2290)
    	    lha: do not allow negative file sizes (#2155)
    	    lha: fix integer truncation on 32-bit systems (#2161)
    	    shar: check strdup return value (#2173)
    	    rar5: don't try to read rediculously long names (#2259)
    	    xar: fix another infinite loop and expat error handling (#2150)
    	    many Windows fixes, cleanups and improvements
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 413ae40a16ee16326bc3f0d13b5c60d66e833f84
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:48:11 2024 +0100

    core191: ship less
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 51ed86d877d2b460129858d614936d8203dafd40
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:53 2024 +0100

    less: Update to version 668
    
    - Update from version 661 to 668
    - Update of rootfile not required
    - Changelog
        668
    	* Make 256/true colors work better on Windows without -Da
    	  (github #539, github #546, github #562).
    	* Fix build using --with-secure (github #544).
    	* Fix crash when using --header on command line (github #545).
    	* Fix possible crash when scrolling left/right or toggling -S (github #547).
    	* Fix bug when using #stop in a lesskey file (github #551).
    	* Fix bug when using --shift or --match-shift on command line with
    	  a parameter starting with '.' (github #554).
    	* Fix bug in R command when file size changes (github #553).
    	* Fix bug using --header when file does not fill screen (github #556).
    	* Fix ^X bug when output is not a terminal (github #558).
    	* Fix bug where ^Z is not handled immediately (github #563).
    	* Fix bug where first byte from a LESSOPEN filter is deleted if it is
    	  greater than 0x7F (github #568).
    	* Fix uninitialized variable in edit_ifile (github #573).
    	* Fix incorrect handling of UTF-8 chars in prompts (github #576).
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 110505bd4a0023da57e79ae3e70cb3ccc59d119c
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:46:49 2024 +0100

    core191: ship krb5
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit a67c8e78c7146d0fc73b4b7af61c0e2699927958
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:52 2024 +0100

    krb5: Update to version 1.21.3
    
    - Update from version 1.21.2 to 1.21.3
    - Update of rootfile not required
    - Changelog
        1.21.3
    	* Fix vulnerabilities in GSS message token handling [CVE-2024-37370,
    	  CVE-2024-37371].
    	* Fix a potential bad pointer free in krb5_cccol_have_contents().
    	* Fix a memory leak in the macOS ccache type.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit a9db42e0da4c6f6fb56cb1ce99aea4ea2e47f155
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:45:42 2024 +0100

    core191: ship knot
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 1f58338afe0c09fd6b7a0d2c8eceec7f44bbc71f
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:51 2024 +0100

    knot: Update to version 3.4.2
    
    - Update from version 3.3.8 to 3.4.2
    - Update of rootfile
    - Changelog
        3.4.2
    	Improvements:
    		 - knotd: new warning log upon every incremental update if previous
    			  zone signing failed
    		 - mod-cookies: support for two secret values specification
    		 - keymgr: key pregenerate works even when a KSK exists
    		 - libs: upgraded embedded libngtcp2 to 1.8.1
    	Bugfixes:
    		 - knotd: server can crash when processing just a terminal label as QNAME
    		 - knotd: failed to compile if no atomic operations available
    		 - kjournalprint: failed to merge zone-in-journal if followed by a
    				  non-first changeset
    		 - knot-exporter: faulty escape sequence in time value parsing
    		 - knot-exporter: failed to parse zone-status output
    		 - kxdpgun: periodic statistics doesn't work correctly for longer time
    			    periods
        3.4.1
    	Features:
    		 - knotd: ACL configuration allows protocol specification (see
    			  'acl.protocol')
    		 - knotc: support for benevolent zone updates (see zone-begin with
    			  '+benevolent')
    		 - knotd: implemented TLS session resumption
    		 - knotd: pending TLS connections leak memory when the server shuts down
    		 - kjournalprint: added print merged changesets mode (see '-M')
    		 - libknot: added NXNAME meta type (Thanks to Jan Včelák)
    	Improvements:
    		 - knotd: DNSKEY synchronization event logs removed/added *DNSKEYs
    		 - knotd: control command log message contains filters and flags in
    			  the debug mode
    		 - knotc: zone status prints running, pending, and frozen duration
    		 - knotd,knotc: unification of control flags and filters
    		 - keymgr: key listing reports configured keys that are inaccessible
    		 - libs: upgraded embedded libngtcp2 to 1.8.0
    		 - doc: various fixes and updates
    	Bugfixes:
    		 - knotd: missing support for IPv6 link local address configuration
    		 - knotd: zone reload occasionally causes a core dump #939 (Thanks to
    			  lidcc2)
    		 - knotd: race condition in DDNS over QUIC processing
    		 - knotd: imperfect signal handling on some auxiliary threads
    		 - knotd: EDNS EXPIRE not updated when zone signing results in up-to-date
    		 - knotd: failed to reload autogenerated QUIC/TLS key after process
    			  ownership change
    		 - knotc: zone backup filter +keysonly doesn't disable other defaults
    		 - kxdpgun: failed to receive more data over QUIC until 1-RTT
    			    handshake is done
    		 - knsupdate: memory leak if rdata parsing fails
    		 - doc: failed to install manual pages from a tarball
    		 - Dockerfile: TCP port 853 not exposed for DoT
        3.4.0
    	Features:
    		 - knotd: full DNS over TLS (DoT, RFC 7858) implementation (see 'DNS
    			  over TLS')
    		 - knotd: bidirectional XFR over TLS (XoT) support with opportunistic,
    			  strict, and mutual authentication profiles
    		 - knotd: support for DDNS over QUIC and TLS
    		 - knotd: DNSSEC validation requires the remaining RRSIG validity is
    			  longer than 'rrsig-refresh'
    		 - knotd: new event for automatic DNSSEC revalidation
    		 - knotd: if enabled DNSSEC signing, EDNS expire is adjusted to the
    			  earliest RRSIG expiration
    		 - knotd: added support for libdbus as an alternative to systemd dbus
    		          (see '--enable-dbus=libdbus' configure parameter)
    		 - knotd: new XDP-related configuration options
    		          (see 'xdp.ring-size', 'xdp.busypoll-budget', and
    			  'xdp.busypoll-timeout')
    		 - knotc: new command for explicit triggering DNSSEC validation (see
    			  'zone-validate' command)
    		 - keymgr: SKR verification requires end of DNSKEY RRSIG validity
    			   covers next DNSKEY snapshot
    		 - kdig: +nocrypto applies also to CERT, DS, SSHFP, DHCID, TLSA,
    			 ZONEMD, and TSIG
    		 - knsupdate: added support for DDNS over QUIC and TLS (see '-Q' and
    			      '-S' parameters)
    		 - kxdpgun: support for reading a binary input file (see '-B' parameter)
    		 - kxdpgun: support for output in JSON (see '-j' parameter)
    		 - kxdpgun: support for periodical output (see '-S' parameter)
    		 - mod-rrl: module offers limiting of non-UDP protocols based on
    			    consumed time (see 'mod-rrl.time-rate-limit' and
    			    'mod-rrl.time-instant-limit')
    		 - utils: -VV option for listing compile time configuration summary
    	Improvements:
    		 - knotd: up to eight DDNS queries can be queued per zone when frozen
    		 - knotd: the number of created/validated RRSIGs is logged
    		 - knotd: overhaul of atomic operations usage
    		 - knotd: unified DNAME semantic errors with the CNAME ones
    		          (see 'Handling CNAME and DNAME-related updates')
    		 - knotd: better DDNS pre-check to prevent dropping a bulk of updates
    		 - knotd: extended SOA presence semantic checks
    		 - knotd: disallowed concurrent control zone and config transactions
    			  to avoid deadlock
    		 - knotd: disallowed opening zone transaction when blocking command is
    			  running to avoid deadlock
    		 - knotd: new XDP statistic counters
    		 - knotd: remote zone serial is logged upon received incoming transfer
    		 - knotd: zone backup stores and zone restore checks the CPU
    			  architecture compatibility
    		 - knotd: time configuration options support 'w', 'M', and 'y' units
    		 - knotd: some control commands can be processed asynchronously
    		 - knotc: zone backup overwrites already existing backupdir in the
    			  force mode
    		 - kdig: EDNS is enabled by default
    		 - kdig: the default EDNS payload size was lowered to 1232
    		 - mod-rrl: completely reimplemented UDP rate limiting using an efficient
    		            query-counting mechanism on several address prefix lengths
    		 - mod-rrl: module no longer requires explicit configuration
    		 - libknot: various XDP improvements and new configuration parameters
    		 - docker: increased -D_FORTIFY_SOURCE to 3
    	Bugfixes:
    		 - knotd: deadlock during zone-ksk-submitted processing of a frozen zone
    		 - kxdpgun: race condition in SIGUSR1 signal processing
    		 - doc: parallel build is unreliable #928
    	Compatibility:
    		 - configure: increase minimal GnuTLS version to 3.6.10
    		 - configure: removed deprecated libidn 1 support
    		 - configure: removed liburcu search fallback
    		 - configure: required GCC or LLVM Clang compiler with C11 support
    		 - knotd: removed already ignored obsolete configuration options
    		 - keymgr: removed legacy parameter '--brief'
    		 - kjournalprint: removed legacy parameter '--no-color'
    		 - kjournalprint: removed legacy database specification without '--dir'
    		 - kcatalogprint: removed legacy database specification without '--dir'
    		 - packaging: CentOS 7, Debian 10, and Ubuntu 18.04 no longer supported
    		 - doc: removed info pages
        3.3.9
    	Improvements:
    		 - libknot: added EDE code 30
    		 - libknot: improved performance of knot_rrset_to_wire_extra()
    		 - libs: upgraded embedded libngtcp2 to 1.7.0
    		 - doc: various fixes and updates
    	Bugfixes:
    		 - keymgr: pregenerate clears future timestamps of old keys and
    			   creates new keys
    		 - mod-dnsproxy: defective TSIG processing
    		 - mod-dnsproxy: TCP not detected in the XDP mode
    		 - kxdpgun: unsuccessful interface initialization leaks memory
    		 - packaging: libknot not installed with python3-libknot
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit c4e77b29357812f4859deb0cfe3b0bf614e44cd8
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:44:38 2024 +0100

    core191: ship kmod
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 20c522c5956009444fea7801a82e914e4443122f
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:50 2024 +0100

    kmod: Update to version 33
    
    - Update from version 32 to 33
    - Update of rootfile
    - Changelog
        33
    	- Improvements
    		- Allow to handle compressed modules even without decompression
    		  libraries linked in. Previously we would detect if the kernel
    		  supported the decompression algorithm and pass the module directly
    		  through finit_module(). However it wouldn't consider the file if
    		  the respective decompression library was compiled out. Now it's
    		  possible to completely disable all libraries and still have module
    		  load working with libkmod.
    		  Tools that inspect module content themselves like modinfo and depmod
    		  won't work if the decompression library is not enabled.
    		- Add weak dependencies - these are similar to pre softdep, but they
    		  don't cause the dependency to be loaded by libkmod: when a module has
    		  a weak dependency, it is expected that module may or may not be used,
    		  with decision happening in runtime by the kernel. It's purpose is to
    		  be informational for other tools like ones used to create initramfs,
    		  so the module is made available before switch_root(), but doesn't
    		  imply it to be loaded when not needed.
    		- Improve compatibility with non-gnu libc like musl and uClibc. Now it's
    		  possible to build and use libkmod and tools without any additional
    		  compat patches.
    		- Move manpages from xsltproc to scdoc, which is now needed during build.
    		- Improve documentation in manpages, fixing typos, rewording sentences,
    		  detailing how configuration files are handled with precedence order
    		  and making all the manpages more consistent on how to reference
    		  options, environment variables, configuration, authors, etc.
    		- Speed up zstd decompression, particularly when not using glibc.
    		- Stop parsing .alias files from modprobe.d directories. Configuration
    		  files were always documented as needing the .conf extension. For
    		  compatibility reason with module-init-tools, kmod also parsed .alias
    		  files. However that was also done in module-init-tools for
    		  compatibility reasons and not documented anywhere. From inspection
    		  on what distros are using, none use .alias files in practice, so
    		  stop parsing those files and follow what's documented.
    		- Adopt SPDX for license and cleanup comments on individual files.
    		- Since kmod 29 there's a github mirror for the repository. Now it's
    		  also used for issues and improvement tracking. With that, the old
    		  TODO file has been removed and distros/users are encouraged to file
    		  issues in github.
    	- Bug fixes
    		- Move kmod.pc to the right dir, ${datadir}/pkgconfig, as it's related
    		  to kmod, not libkmod.
    		- Fix error handling while loading a file and mmap fails.
    		- Fix error handling while handling errors from the decompression
    		  libraries.
    		- Add missing documentation for KMOD_INDEX_MODULES_BUILTIN that was
    		  added in v27 breaking the ABI. A wide search has found one external
    		  tool using it, which hasn't been updated in the past 12 years. It
    		  was deemed safe to simply update the documentation to include the
    		  missing enum.
    		- Move kmod_module_new_from_name_lookup() to the correct symbol
    		  version. It was added by mistake to @LIBKMOD_5 when v30 got released.
    		  No external user of this API was found, so it was considered safe
    		  to just move it.
    	- Others
    		- Overwrite symlinks when installing tools.
    		- General cleanup of how (de)compression libraries are integrated.
    		- Add CI infrastructure to automatically test in several distros
    		  before applying commit series. Currently the latest versions of
    		  Alpine, Archlinux, Fedora and Ubuntu are covered. More distros are
    		  easy to add as they are all containerized.
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit baaed917d61f7aa59a1fdab0a586dcbd54957606
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:43:20 2024 +0100

    core191: ship json-c
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit d068c6a5898cec2ac90169f809c6702716d9cd0d
Author: Adolf Belka <adolf.belka(a)ipfire.org>
Date:   Tue Nov 19 22:10:49 2024 +0100

    json-c: Update to version 0.18
    
    - Update from version 0.17 to 0.18
    - Update of rootfile
    - Changelog
        0.18
    	Deprecated and removed features:
    		* Clean up pre-3.9 CMake support in CMakeLists.txt
    	New features
    		* Build pkg-config for msvc as well
    	Significant changes and bug fixes
    		* Critical fix for binary compatibility with 0.16: Move the
    		  json_tokener_error_memory entry to the end of enum json_tokener_error.
    		* Issue #829: attempt to detect clang-cl.exe and pass MSVC-compatile
    		  command line arguments.
    		* PR #831 - rename WIN32 to _WIN32
    		* PR #839 - Fix gcc 5 "may be used uninitialized" failure in
    		  json_pointer.c
    		* PR #849 - random_seed.c: add a Coverity Scan suppression
    		* Issue #854: Set error=json_tokener_error_memory in
    		  json_tokener_parser_verbose() when allocating the tokener fails.
    		* Issue #857: fix a few places where json_tokener should have been
    		  returning json_tokener_error_memory but wasn't.
    		* Handle yet another out-of-memory condition in json_tokener,
    		  duplocate can return NULL.
    		* Various fixes in the fuzzers
    		* A few minor doc fixes
    
    Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit b7513eb4e82e9f0551daaffec995a4aa98dc6993
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Fri Dec 13 09:41:24 2024 +0100

    core191: ship dnsforward.cgi
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit de8ed87d05887907740bef72180b6e8f63d01416
Author: Wayne <waynetsun(a)ucpix.de>
Date:   Thu Oct 24 16:03:07 2024 +0200

    Makes entries in dnsforward.cgi visible
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/rootfiles/common/json-c                     |  2 +-
 config/rootfiles/common/kmod                       |  5 ++--
 config/rootfiles/common/knot                       |  4 +--
 config/rootfiles/common/libarchive                 |  2 +-
 config/rootfiles/common/libcap                     |  4 +--
 config/rootfiles/common/libedit                    | 33 +++++++++++-----------
 config/rootfiles/common/libgpg-error               |  2 +-
 config/rootfiles/common/liboping                   |  5 ++--
 config/rootfiles/common/libpcap                    |  2 +-
 config/rootfiles/common/libpipeline                |  2 +-
 config/rootfiles/common/libxml2                    |  2 +-
 config/rootfiles/core/191/filelists/files          |  1 +
 .../{oldcore/125 => core/191}/filelists/json-c     |  0
 .../{oldcore/125 => core/191}/filelists/kmod       |  0
 .../{oldcore/128 => core/191}/filelists/knot       |  0
 .../{oldcore/169 => core/191}/filelists/krb5       |  0
 .../{oldcore/103 => core/191}/filelists/less       |  0
 .../{oldcore/104 => core/191}/filelists/libarchive |  0
 .../{oldcore/104 => core/191}/filelists/libcap     |  0
 .../{oldcore/128 => core/191}/filelists/libedit    |  0
 .../106 => core/191}/filelists/libgpg-error        |  0
 .../{oldcore/107 => core/191}/filelists/libjpeg    |  0
 .../{oldcore/158 => core/191}/filelists/libnl-3    |  0
 .../{oldcore/136 => core/191}/filelists/liboping   |  0
 .../{oldcore/109 => core/191}/filelists/libpcap    |  0
 config/rootfiles/core/191/filelists/libpipeline    |  1 +
 .../{oldcore/173 => core/191}/filelists/libtirpc   |  0
 .../{oldcore/162 => core/191}/filelists/libuv      |  0
 .../{oldcore/101 => core/191}/filelists/libxml2    |  0
 html/cgi-bin/dnsforward.cgi                        |  2 +-
 lfs/json-c                                         |  6 ++--
 lfs/kmod                                           |  6 ++--
 lfs/knot                                           |  4 +--
 lfs/krb5                                           |  6 ++--
 lfs/less                                           |  4 +--
 lfs/libarchive                                     |  4 +--
 lfs/libcap                                         |  4 +--
 lfs/libedit                                        |  4 +--
 lfs/libgpg-error                                   |  4 +--
 lfs/libjpeg                                        |  4 +--
 lfs/libnl-3                                        |  4 +--
 lfs/liboping                                       |  6 ++--
 lfs/libpcap                                        | 10 +++----
 lfs/libpipeline                                    |  6 ++--
 lfs/libtirpc                                       |  4 +--
 lfs/libuv                                          |  6 ++--
 lfs/libxml2                                        |  4 +--
 47 files changed, 80 insertions(+), 73 deletions(-)
 copy config/rootfiles/{oldcore/125 => core/191}/filelists/json-c (100%)
 copy config/rootfiles/{oldcore/125 => core/191}/filelists/kmod (100%)
 copy config/rootfiles/{oldcore/128 => core/191}/filelists/knot (100%)
 copy config/rootfiles/{oldcore/169 => core/191}/filelists/krb5 (100%)
 copy config/rootfiles/{oldcore/103 => core/191}/filelists/less (100%)
 copy config/rootfiles/{oldcore/104 => core/191}/filelists/libarchive (100%)
 copy config/rootfiles/{oldcore/104 => core/191}/filelists/libcap (100%)
 copy config/rootfiles/{oldcore/128 => core/191}/filelists/libedit (100%)
 copy config/rootfiles/{oldcore/106 => core/191}/filelists/libgpg-error (100%)
 copy config/rootfiles/{oldcore/107 => core/191}/filelists/libjpeg (100%)
 copy config/rootfiles/{oldcore/158 => core/191}/filelists/libnl-3 (100%)
 copy config/rootfiles/{oldcore/136 => core/191}/filelists/liboping (100%)
 copy config/rootfiles/{oldcore/109 => core/191}/filelists/libpcap (100%)
 create mode 120000 config/rootfiles/core/191/filelists/libpipeline
 copy config/rootfiles/{oldcore/173 => core/191}/filelists/libtirpc (100%)
 copy config/rootfiles/{oldcore/162 => core/191}/filelists/libuv (100%)
 copy config/rootfiles/{oldcore/101 => core/191}/filelists/libxml2 (100%)

Difference in files:
diff --git a/config/rootfiles/common/json-c b/config/rootfiles/common/json-c
index f050376cb..dbf87f32c 100644
--- a/config/rootfiles/common/json-c
+++ b/config/rootfiles/common/json-c
@@ -21,5 +21,5 @@
 #usr/lib/cmake/json-c/json-c-targets.cmake
 #usr/lib/libjson-c.so
 usr/lib/libjson-c.so.5
-usr/lib/libjson-c.so.5.3.0
+usr/lib/libjson-c.so.5.4.0
 #usr/lib/pkgconfig/json-c.pc
diff --git a/config/rootfiles/common/kmod b/config/rootfiles/common/kmod
index 4ba8225b7..952031a78 100644
--- a/config/rootfiles/common/kmod
+++ b/config/rootfiles/common/kmod
@@ -15,7 +15,8 @@ sbin/rmmod
 #usr/lib/libkmod.la
 #usr/lib/libkmod.so
 usr/lib/libkmod.so.2
-usr/lib/libkmod.so.2.4.2
-#usr/lib/pkgconfig/kmod.pc
+usr/lib/libkmod.so.2.5.0
 #usr/lib/pkgconfig/libkmod.pc
 #usr/share/bash-completion/completions/kmod
+#usr/share/pkgconfig
+#usr/share/pkgconfig/kmod.pc
diff --git a/config/rootfiles/common/knot b/config/rootfiles/common/knot
index 0fc076c10..5d0ab19d3 100644
--- a/config/rootfiles/common/knot
+++ b/config/rootfiles/common/knot
@@ -9,7 +9,7 @@ usr/lib/libdnssec.so.9.0.0
 #usr/lib/libknot.la
 #usr/lib/libknot.lai
 #usr/lib/libknot.so
-usr/lib/libknot.so.14
-usr/lib/libknot.so.14.0.0
+usr/lib/libknot.so.15
+usr/lib/libknot.so.15.0.0
 #usr/lib/libknotus.a
 #usr/lib/libknotus.la
diff --git a/config/rootfiles/common/libarchive b/config/rootfiles/common/libarchive
index 2f38c29a7..0e6d2087b 100644
--- a/config/rootfiles/common/libarchive
+++ b/config/rootfiles/common/libarchive
@@ -7,7 +7,7 @@
 #usr/lib/libarchive.la
 #usr/lib/libarchive.so
 usr/lib/libarchive.so.13
-usr/lib/libarchive.so.13.7.4
+usr/lib/libarchive.so.13.7.7
 #usr/lib/pkgconfig/libarchive.pc
 #usr/share/man/man1/bsdcat.1
 #usr/share/man/man1/bsdcpio.1
diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap
index ea90c7564..82754304e 100644
--- a/config/rootfiles/common/libcap
+++ b/config/rootfiles/common/libcap
@@ -6,10 +6,10 @@ sbin/setcap
 #usr/include/sys/psx_syscall.h
 #usr/lib/libcap.so
 usr/lib/libcap.so.2
-usr/lib/libcap.so.2.70
+usr/lib/libcap.so.2.72
 #usr/lib/libpsx.so
 #usr/lib/libpsx.so.2
-usr/lib/libpsx.so.2.70
+usr/lib/libpsx.so.2.72
 #usr/lib/pkgconfig/libcap.pc
 #usr/lib/pkgconfig/libpsx.pc
 #usr/lib/security
diff --git a/config/rootfiles/common/libedit b/config/rootfiles/common/libedit
index 7d4a13ea6..f910fb74e 100644
--- a/config/rootfiles/common/libedit
+++ b/config/rootfiles/common/libedit
@@ -4,7 +4,7 @@
 #usr/lib/libedit.la
 #usr/lib/libedit.so
 usr/lib/libedit.so.0
-usr/lib/libedit.so.0.0.73
+usr/lib/libedit.so.0.0.74
 #usr/lib/pkgconfig/libedit.pc
 #usr/share/man/man3/editline.3
 #usr/share/man/man3/el_deletestr.3
@@ -12,6 +12,12 @@ usr/lib/libedit.so.0.0.73
 #usr/share/man/man3/el_get.3
 #usr/share/man/man3/el_getc.3
 #usr/share/man/man3/el_gets.3
+#usr/share/man/man3/el_history.3
+#usr/share/man/man3/el_history_end.3
+#usr/share/man/man3/el_history_init.3
+#usr/share/man/man3/el_history_w.3
+#usr/share/man/man3/el_history_wend.3
+#usr/share/man/man3/el_history_winit.3
 #usr/share/man/man3/el_init.3
 #usr/share/man/man3/el_init_fd.3
 #usr/share/man/man3/el_insertstr.3
@@ -22,6 +28,16 @@ usr/lib/libedit.so.0.0.73
 #usr/share/man/man3/el_resize.3
 #usr/share/man/man3/el_set.3
 #usr/share/man/man3/el_source.3
+#usr/share/man/man3/el_tok_end.3
+#usr/share/man/man3/el_tok_init.3
+#usr/share/man/man3/el_tok_line.3
+#usr/share/man/man3/el_tok_reset.3
+#usr/share/man/man3/el_tok_str.3
+#usr/share/man/man3/el_tok_wend.3
+#usr/share/man/man3/el_tok_winit.3
+#usr/share/man/man3/el_tok_wline.3
+#usr/share/man/man3/el_tok_wreset.3
+#usr/share/man/man3/el_tok_wstr.3
 #usr/share/man/man3/el_wdeletestr.3
 #usr/share/man/man3/el_wget.3
 #usr/share/man/man3/el_wgetc.3
@@ -31,20 +47,5 @@ usr/lib/libedit.so.0.0.73
 #usr/share/man/man3/el_wparse.3
 #usr/share/man/man3/el_wpush.3
 #usr/share/man/man3/el_wset.3
-#usr/share/man/man3/history_end.3
-#usr/share/man/man3/history_init.3
-#usr/share/man/man3/history_w.3
-#usr/share/man/man3/history_wend.3
-#usr/share/man/man3/history_winit.3
-#usr/share/man/man3/tok_end.3
-#usr/share/man/man3/tok_init.3
-#usr/share/man/man3/tok_line.3
-#usr/share/man/man3/tok_reset.3
-#usr/share/man/man3/tok_str.3
-#usr/share/man/man3/tok_wend.3
-#usr/share/man/man3/tok_winit.3
-#usr/share/man/man3/tok_wline.3
-#usr/share/man/man3/tok_wreset.3
-#usr/share/man/man3/tok_wstr.3
 #usr/share/man/man5/editrc.5
 #usr/share/man/man7/editline.7
diff --git a/config/rootfiles/common/libgpg-error b/config/rootfiles/common/libgpg-error
index b6742cde6..ec61ac1f8 100644
--- a/config/rootfiles/common/libgpg-error
+++ b/config/rootfiles/common/libgpg-error
@@ -6,7 +6,7 @@ usr/bin/gpg-error
 #usr/lib/libgpg-error.la
 #usr/lib/libgpg-error.so
 usr/lib/libgpg-error.so.0
-usr/lib/libgpg-error.so.0.37.0
+usr/lib/libgpg-error.so.0.38.0
 #usr/lib/pkgconfig/gpg-error.pc
 #usr/share/aclocal/gpg-error.m4
 #usr/share/aclocal/gpgrt.m4
diff --git a/config/rootfiles/common/liboping b/config/rootfiles/common/liboping
index 9ab1c24d5..60ae21bc3 100644
--- a/config/rootfiles/common/liboping
+++ b/config/rootfiles/common/liboping
@@ -1,15 +1,16 @@
+usr/bin/noping
 usr/bin/oping
 #usr/include/oping.h
 #usr/lib/liboping.a
 #usr/lib/liboping.la
 usr/lib/liboping.so
 usr/lib/liboping.so.0
-usr/lib/liboping.so.0.2.3
+usr/lib/liboping.so.0.3.0
 usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/Net/Oping.pm
 #usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/Net/Oping
 #usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/Net/Oping/.packlist
-#usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/Net/Oping/Oping.bs
 usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/Net/Oping/Oping.so
+#usr/lib/pkgconfig/liboping.pc
 #usr/share/man/man3/Net::Oping.3
 #usr/share/man/man3/liboping.3
 #usr/share/man/man3/ping_construct.3
diff --git a/config/rootfiles/common/libpcap b/config/rootfiles/common/libpcap
index 43c9140ea..7497e2cb1 100644
--- a/config/rootfiles/common/libpcap
+++ b/config/rootfiles/common/libpcap
@@ -21,7 +21,7 @@
 #usr/lib/libpcap.a
 usr/lib/libpcap.so
 usr/lib/libpcap.so.1
-usr/lib/libpcap.so.1.10.4
+usr/lib/libpcap.so.1.10.5
 #usr/lib/pkgconfig/libpcap.pc
 #usr/share/man/man1/pcap-config.1
 #usr/share/man/man3/pcap.3pcap
diff --git a/config/rootfiles/common/libpipeline b/config/rootfiles/common/libpipeline
index b706294aa..9fd2226a3 100644
--- a/config/rootfiles/common/libpipeline
+++ b/config/rootfiles/common/libpipeline
@@ -2,7 +2,7 @@
 #usr/lib/libpipeline.la
 #usr/lib/libpipeline.so
 #usr/lib/libpipeline.so.1
-#usr/lib/libpipeline.so.1.5.7
+#usr/lib/libpipeline.so.1.5.8
 #usr/lib/pkgconfig/libpipeline.pc
 #usr/share/man/man3/libpipeline.3
 #usr/share/man/man3/pipecmd_arg.3
diff --git a/config/rootfiles/common/libxml2 b/config/rootfiles/common/libxml2
index 0eadee10c..7fa288199 100644
--- a/config/rootfiles/common/libxml2
+++ b/config/rootfiles/common/libxml2
@@ -54,7 +54,7 @@
 #usr/lib/libxml2.la
 #usr/lib/libxml2.so
 usr/lib/libxml2.so.2
-usr/lib/libxml2.so.2.13.3
+usr/lib/libxml2.so.2.13.5
 #usr/lib/pkgconfig/libxml-2.0.pc
 #usr/share/aclocal/libxml.m4
 #usr/share/doc/libxml2
diff --git a/config/rootfiles/core/191/filelists/files b/config/rootfiles/core/191/filelists/files
index a35c93ed4..b6dea7f6b 100644
--- a/config/rootfiles/core/191/filelists/files
+++ b/config/rootfiles/core/191/filelists/files
@@ -1 +1,2 @@
+srv/web/ipfire/cgi-bin/dnsforward.cgi
 srv/web/ipfire/cgi-bin/services.cgi
diff --git a/config/rootfiles/core/191/filelists/json-c b/config/rootfiles/core/191/filelists/json-c
new file mode 120000
index 000000000..2da263e3d
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/json-c
@@ -0,0 +1 @@
+../../../common/json-c
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/kmod b/config/rootfiles/core/191/filelists/kmod
new file mode 120000
index 000000000..0020e197e
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/kmod
@@ -0,0 +1 @@
+../../../common/kmod
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/knot b/config/rootfiles/core/191/filelists/knot
new file mode 120000
index 000000000..28e96f878
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/knot
@@ -0,0 +1 @@
+../../../common/knot
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/krb5 b/config/rootfiles/core/191/filelists/krb5
new file mode 120000
index 000000000..082c3cbcd
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/krb5
@@ -0,0 +1 @@
+../../../common/krb5
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/less b/config/rootfiles/core/191/filelists/less
new file mode 120000
index 000000000..65c0e0771
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/less
@@ -0,0 +1 @@
+../../../common/less
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libarchive b/config/rootfiles/core/191/filelists/libarchive
new file mode 120000
index 000000000..551f1f743
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libarchive
@@ -0,0 +1 @@
+../../../common/libarchive
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libcap b/config/rootfiles/core/191/filelists/libcap
new file mode 120000
index 000000000..ed67d950a
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libcap
@@ -0,0 +1 @@
+../../../common/libcap
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libedit b/config/rootfiles/core/191/filelists/libedit
new file mode 120000
index 000000000..03fc483da
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libedit
@@ -0,0 +1 @@
+../../../common/libedit
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libgpg-error b/config/rootfiles/core/191/filelists/libgpg-error
new file mode 120000
index 000000000..cad431339
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libgpg-error
@@ -0,0 +1 @@
+../../../common/libgpg-error
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libjpeg b/config/rootfiles/core/191/filelists/libjpeg
new file mode 120000
index 000000000..3b1a782fb
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libjpeg
@@ -0,0 +1 @@
+../../../common/libjpeg
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libnl-3 b/config/rootfiles/core/191/filelists/libnl-3
new file mode 120000
index 000000000..00e61c261
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libnl-3
@@ -0,0 +1 @@
+../../../common/libnl-3
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/liboping b/config/rootfiles/core/191/filelists/liboping
new file mode 120000
index 000000000..3ae1904e7
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/liboping
@@ -0,0 +1 @@
+../../../common/liboping
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libpcap b/config/rootfiles/core/191/filelists/libpcap
new file mode 120000
index 000000000..c7f9f52a8
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libpcap
@@ -0,0 +1 @@
+../../../common/libpcap
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libpipeline b/config/rootfiles/core/191/filelists/libpipeline
new file mode 120000
index 000000000..385d9d2c8
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libpipeline
@@ -0,0 +1 @@
+../../../common/libpipeline
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libtirpc b/config/rootfiles/core/191/filelists/libtirpc
new file mode 120000
index 000000000..7ff318291
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libtirpc
@@ -0,0 +1 @@
+../../../common/libtirpc
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libuv b/config/rootfiles/core/191/filelists/libuv
new file mode 120000
index 000000000..c74f52510
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libuv
@@ -0,0 +1 @@
+../../../common/libuv
\ No newline at end of file
diff --git a/config/rootfiles/core/191/filelists/libxml2 b/config/rootfiles/core/191/filelists/libxml2
new file mode 120000
index 000000000..242e69fa3
--- /dev/null
+++ b/config/rootfiles/core/191/filelists/libxml2
@@ -0,0 +1 @@
+../../../common/libxml2
\ No newline at end of file
diff --git a/html/cgi-bin/dnsforward.cgi b/html/cgi-bin/dnsforward.cgi
index 4af5ed200..d5a46b675 100644
--- a/html/cgi-bin/dnsforward.cgi
+++ b/html/cgi-bin/dnsforward.cgi
@@ -325,7 +325,7 @@ foreach my $line (@current)
 		$col="bgcolor='${Header::colouryellow}'"; }
 	elsif ($disable_dnssec eq 'on') {
 		print "<tr>";
-		$col="bgcolor='${Header::colourred}' style='color: white'"; }
+		$col="bgcolor='${Header::colourred}' style='color: black'"; }
 	elsif ($id % 2) {
 		print "<tr>";
 		$col="bgcolor='$color{'color22'}'"; }
diff --git a/lfs/json-c b/lfs/json-c
index e529eb141..edca5d3b2 100644
--- a/lfs/json-c
+++ b/lfs/json-c
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.17
+VER        = 0.18
 
 THISAPP    = json-c-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 26be25141447f2b652fa09d7096141a8bf7992469bcc53b275c1bc0108fc36a8898a8185c381218d3146d00fa03bdd0b837be073410fc93af943b5f083dbaa69
+$(DL_FILE)_BLAKE2 = d39bab289976cb2f76bcf3ad8254f7f5b4d11e2aa4dedebd60dc7d131a3f6ec57beacdc575aeeb191cf449d16c549d424172e78464731eeb66305f47f72371c2
 
 install : $(TARGET)
 
diff --git a/lfs/kmod b/lfs/kmod
index 2719083e5..96c39ad70 100644
--- a/lfs/kmod
+++ b/lfs/kmod
@@ -24,7 +24,9 @@
 
 include Config
 
-VER        = 32
+VER        = 33
+
+# https://www.kernel.org/pub/linux/utils/kernel/kmod/
 
 THISAPP    = kmod-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 5b5dac4639406549b23bb1da44bedd86a42885304ef4c7c67344dc8fd70b9e0ca3f83d033c6b80f6e00371d7188e205f4b68fadc56a9ddbf9d6a9d28e9b1e9a4
+$(DL_FILE)_BLAKE2 = 5fb4ea9d96217f8c94cba752b07a1b53228c6ae79dbaa605030cd84e3c6ca8d9c1a703a0253cea1d6c78a78f1507e2a1d9c6215d28dcb01b9e7f8b98a9fde425
 
 install : $(TARGET)
 
diff --git a/lfs/knot b/lfs/knot
index a016f3f91..6645c7be5 100644
--- a/lfs/knot
+++ b/lfs/knot
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.3.8
+VER        = 3.4.2
 
 THISAPP    = knot-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = a51e756f34d8641b2bc8ce32cb37c68c19ce1b5e13e981647e165634644ee005bb0a31b869148d50b3cd0a040f6952857df726e8ff67c5a46204270fa02396c5
+$(DL_FILE)_BLAKE2 = 0b633b27b22665db243bc4222f05028a17ee7ec6ba5960ff1cfe503d27bf3d26218f771cb15b70bbf8782898bcc7748bd5c27d55747607a1d93f784cdadddad7
 
 install : $(TARGET)
 
diff --git a/lfs/krb5 b/lfs/krb5
index cf5daa54a..73f249e8b 100644
--- a/lfs/krb5
+++ b/lfs/krb5
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Kerberos
 
-VER        = 1.21.2
+VER        = 1.21.3
 
 THISAPP    = krb5-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 2afb3ff962a343bc07182fdab0c0ffb221632ff38baab74278cfc721ae72deacc260221470de36e420584f00b780e13221d2e511d4831bca8e1270b7f3d9e824
+$(DL_FILE)_BLAKE2 = e909a55eaedab68e5c829bb7bbd26cec5db2d7b8d97f3b034de94d8f957003f16977ac619afee3b862f288e59f05c5e44f41e65b8883961c8b22a26e2f4733bc
 
 install : $(TARGET)
 
diff --git a/lfs/less b/lfs/less
index 8f94a2eeb..e5d87e3a2 100644
--- a/lfs/less
+++ b/lfs/less
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 661
+VER        = 668
 
 THISAPP    = less-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = c1fa9a7a646fcc1203945e00c35fe41bddef0c564e30f120a37e417ecd5c60d234e0253a2e18123508dd5c0313bce346dc7752e96cdc1b067bd07a2a39818b42
+$(DL_FILE)_BLAKE2 = 0f6a85a1c66577dd2a28682a6f8399e42fdbe9fc1498b2e89c6bb7c47109e8d3ab934abe5dd998b2c8dfacfb174ad9daeb79b3d4c13df22fa035ea792b2eaf5e
 
 install : $(TARGET)
 
diff --git a/lfs/libarchive b/lfs/libarchive
index 668f2a87e..3f4eccff0 100644
--- a/lfs/libarchive
+++ b/lfs/libarchive
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.7.4
+VER        = 3.7.7
 
 THISAPP    = libarchive-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 128f72235da61e112201046c0cfe62a8c580cf73b426c4cfe270ae913356f6ad430ba33a663dcd617b082c7baf45ada8d1c9928c45fea16fd57e8020693a60bc
+$(DL_FILE)_BLAKE2 = e118c693f7a78e86ab868fc6c2c77beba539cf5c7d5999e270cdceb225e9f85c68c938ec6ce3a33f75b2a44a6f7debe2c280d2573c1bcf05806300e8dce1a4f0
 
 install : $(TARGET)
 
diff --git a/lfs/libcap b/lfs/libcap
index 51e32f9c6..c4a50b2c7 100644
--- a/lfs/libcap
+++ b/lfs/libcap
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.70
+VER        = 2.72
 
 THISAPP    = libcap-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 77b72acee53032117ea481e3380d1b497f9264b6193b9523542508c7c3e46070248ca4ed910d35809ce6e52caa60cbb31edb125c47221627eeda35c61bd0914b
+$(DL_FILE)_BLAKE2 = 2c854fd9a714ab1daae3831829b4b7a890a0894953ba88ae1e190274e7fc635275ce4bf2c668b390ba8196248cb1f953fafb3a9af3907e688c1ab40774f7c6e0
 
 install : $(TARGET)
 
diff --git a/lfs/libedit b/lfs/libedit
index c0d50aad6..eeaf1ddca 100644
--- a/lfs/libedit
+++ b/lfs/libedit
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 20240517-3.1
+VER        = 20240808-3.1
 
 THISAPP    = libedit-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 6326a428204c020864b47db938973a13afb3580f9bb4e7b4d3cb861743c75e1cee99b569cb2baad3e1c7d6dc6986af5282492b5dd9f421a8243bf1d583a87e15
+$(DL_FILE)_BLAKE2 = c10a53d155a7dfbffdaa177aa41206c4bdca54efe8debd7df8cc3ddeaacf574e3cdd69bce9d30801c533f92907e757a92011fde989ee3a39ec91a73b9f80aa41
 
 install : $(TARGET)
 
diff --git a/lfs/libgpg-error b/lfs/libgpg-error
index e06a34937..74604d343 100644
--- a/lfs/libgpg-error
+++ b/lfs/libgpg-error
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.50
+VER        = 1.51
 
 THISAPP    = libgpg-error-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 621d9a604585daa1fbd08aaa94f3b177f6265046ccf452317e126e73079c567c555cbb8ab8b63e09b76bdf4f11a1aad7effd118651fe9e9cbcf01229f20ab297
+$(DL_FILE)_BLAKE2 = 8727a993fb5e589beceafce9d06d843b28ceff80398c33a5655608bdcd3d92ee363389bc209a1dff675b9f78d56f13b78d77e55696c0736612b09275ae0da7f3
 
 install : $(TARGET)
 
diff --git a/lfs/libjpeg b/lfs/libjpeg
index 311ce4bc9..b835bff29 100644
--- a/lfs/libjpeg
+++ b/lfs/libjpeg
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.0.3
+VER        = 3.0.4
 
 THISAPP    = libjpeg-turbo-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 9d141dadd0dce970bf857b51352c57a8e15180438abd7d6d66f9dfd24e23889add8c6c89120b84026e40ab61611516b0567984bd1db37e9c45b41917cf32e9a6
+$(DL_FILE)_BLAKE2 = cf951582ce7cdf0dce39075bb1cc58f6a61fa0bdaca4874a4f06a03d2cd11775bc626c8d391d4fc76574d302a781ba47e5c90e2aa2d6a21a8b8d06712437e241
 
 install : $(TARGET)
 
diff --git a/lfs/libnl-3 b/lfs/libnl-3
index e91cf7bda..ecedaf470 100644
--- a/lfs/libnl-3
+++ b/lfs/libnl-3
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.10.0
+VER        = 3.11.0
 
 THISAPP    = libnl-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 13383c4ef49be3bcf89122b24d1d5dc9834353aa7128f04f50993203add14aa7f97a4500164982ddcb82f481f7324a26efc2375036d5a23bfa62b15c4fe07473
+$(DL_FILE)_BLAKE2 = 8e2792620f56e1e9e05e4fe1f9bece70938c82c2d1a9f4e0f9de1ce0b1a7a2bf60f31a42e6056407b383875c08c575b26df87b9bd6b421d5053e96983e193c54
 
 install : $(TARGET)
 
diff --git a/lfs/liboping b/lfs/liboping
index 7ea7d753b..0160b3635 100644
--- a/lfs/liboping
+++ b/lfs/liboping
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2018  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.3.4
+VER        = 1.10.0
 
 THISAPP    = liboping-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = e60b59cad18f9f458c63ec08465eaac5c40b954a9c6aa6844029a1b3e2973de19e0b46846cb99edb465f315310f552b8578280f243acbe726b92034e396a07f9
+$(DL_FILE)_BLAKE2 = 2fa8719df251116c51aa93262697751df72b93368d543e5bb34668eb1bb07d7c0be143c943b32b23ee8d02e94ac2cc66f46f923ee4ab672b414ef16ce2f75acf
 
 install : $(TARGET)
 
diff --git a/lfs/libpcap b/lfs/libpcap
index 0dfe562bf..abdba19da 100644
--- a/lfs/libpcap
+++ b/lfs/libpcap
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,10 +24,10 @@
 
 include Config
 
-VER        = 1.10.4
+VER        = 1.10.5
 
 THISAPP    = libpcap-$(VER)
-DL_FILE    = $(THISAPP).tar.gz
+DL_FILE    = $(THISAPP).tar.xz
 DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 05a7eafc1e1817f7844008db89d8fb10cd2525c22f7ee6c9e3d582b14229412f38ccced5e9d80a96dd459ef9eab12eccb5c1dd4978ddc9f66267469212005e4c
+$(DL_FILE)_BLAKE2 = eafc01c0b865f7e7917dcf353ce8e79cea8981eb68068a20b50d9650e1aa89874d3fd6bbfa93ff61ec9edbb610d22cd5f09c0723c12e95005725c66436658d2b
 
 install : $(TARGET)
 
@@ -71,7 +71,7 @@ $(subst %,%_BLAKE2,$(objects)) :
 
 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 	@$(PREBUILD)
-	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
+	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
 	cd $(DIR_APP) && ./configure \
 		--prefix=/usr \
 		--enable-bluetooth=no \
diff --git a/lfs/libpipeline b/lfs/libpipeline
index ece978708..ba281df70 100644
--- a/lfs/libpipeline
+++ b/lfs/libpipeline
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2018  IPFire Team  <info(a)ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.5.7
+VER        = 1.5.8
 
 THISAPP    = libpipeline-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = b8f9ff6886f8df12e3fefbfaa0cbcb1e07d7baaa8a1dfcf4bc01c17c6632b8c6a40e55395f1e4870ca391eefb1535ebbc3931fcdee51cf5f4293741e437a2f25
+$(DL_FILE)_BLAKE2 = 1feb1a9493fd0850b4e3e446619e7e042bd97d8c0bbb3e13a91d90d6cde3ca2c17fb8a3ca256f65291dadc4d8703ad5d3a795839bf8280adc4547b3ec3d2da7d
 
 install : $(TARGET)
 
diff --git a/lfs/libtirpc b/lfs/libtirpc
index 493e9444f..d902b08ff 100644
--- a/lfs/libtirpc
+++ b/lfs/libtirpc
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Transport Independent RPC Library
 
-VER        = 1.3.5
+VER        = 1.3.6
 
 THISAPP    = libtirpc-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 1ae1cc0be1c52bca8fbe2300159d9298b069b3f81adde7f50da3fb7049f9b9f628393dfe94e9276facfeea2b1ccdc9a52632fee4af432c36e457fd3ff2b0963c
+$(DL_FILE)_BLAKE2 = 521e1e3d2ceefd668f1b0d52b7c0342b97952d322eeb7bf740bb1eb1fb88a14b0a2fce57f07a9fd3797d289f57f511085924bba3d8984f15c799468d30f47500
 
 install : $(TARGET)
 
diff --git a/lfs/libuv b/lfs/libuv
index c2d1903e1..295c30182 100644
--- a/lfs/libuv
+++ b/lfs/libuv
@@ -25,9 +25,9 @@
 
 include Config
 
-VER        = 1.48.0
+VER        = 1.49.2
 
-THISAPP    = libuv-$(VER)
+THISAPP    = libuv-v$(VER)
 DL_FILE    = $(THISAPP).tar.gz
 DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = b58d2eab78555ae80a16e35c7d18c7145d386e7996d4d17d73d13bc543acb465215cdce3c64082ccd2596a73a43b45112fe97b795c1f4fa33cd54317c50e2abe
+$(DL_FILE)_BLAKE2 = a4a3367053ab3d5b87c502ef4a25b569fc829b3580005333adf2d3f02a799e6fefec9b6c2cf354eb0e8fe003eff4d3bd5d0f91980dd44702595bfdc54a9fad66
 
 install : $(TARGET)
 
diff --git a/lfs/libxml2 b/lfs/libxml2
index 9c98ef0b5..5ecea8db7 100644
--- a/lfs/libxml2
+++ b/lfs/libxml2
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.13.3
+VER        = 2.13.5
 
 THISAPP    = libxml2-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 446dce96b7386961877812b4f7bd804b236ca676ba5738c4b058b8b6ac610ae2e8eb1871884bfe7ca9130088820312b8fdf6878c8ea85d3c4d4d63f8591816f6
+$(DL_FILE)_BLAKE2 = 46c280630638e2c8009c593bbbcf90ccbfffe9ddcc99987c4d91c2223043759f2b4d6511b31b2357c5250ac3b40d96ef05c17b4d2adc61972665f8a0d899dfe8
 
 install : $(TARGET)
 


hooks/post-receive
--
IPFire 2.x development tree

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2024-12-13  9:10 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-12-13  9:10 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. c004ed4755890f575729aefefad567ac033c8cb5 Arne Fitzenreiter

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox