From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4Zhf994yT6z32dy for ; Tue, 22 Apr 2025 10:48:29 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R10" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4Zhf994cJQz2y7l for ; Tue, 22 Apr 2025 10:48:29 +0000 (UTC) Received: from people01.haj.ipfire.org (people01.haj.ipfire.org [172.28.1.161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (secp384r1) client-digest SHA384) (Client CN "people01.haj.ipfire.org", Issuer "E6" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4Zhf975lnmz19H for ; Tue, 22 Apr 2025 10:48:27 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1745318907; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=AJXMSxThH8JNBpoV2eFh5AAKq8zafFYX+DN0jakt0Zk=; b=YJF/x5NKPJIEccFtlaPeSvHEUuh5/cePgbL+TpM2UEm2dYYdI8G87I/QBEPI1/BGY1AJVD k2gT2Z8uj/F7icAw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1745318907; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=AJXMSxThH8JNBpoV2eFh5AAKq8zafFYX+DN0jakt0Zk=; b=vuwjUANROdhs8ylDoUMjRTM17+lGTtMWKIq+lFL5BwiqOr5yOUQ9xKPXU26srWb5Bfm5qr xfnHQ4DcwTjCQ3iDH7JLIqawalfolagWScwfAKIfSuTFRFDmuU5vp400hSt5NOKcMElukx /F3QeK9M3qf8M3PBXQX/atpTHuCQ22TRm01IISSRuMgpCY1IYQ9JKdKfVoAYG9JgInVClk a+qeU80CYu2rieyYklGJP/Q6LzIWpYZeviXslULXYACmBZHpB0tV4XV4Eo5wrxirGFIg1p 1SCNPOT1jkxssYAwNIUgrK7OhjODo02vT1eCAsLglmpqThOHOqm3OKW5v/z2nA== Received: by people01.haj.ipfire.org (Postfix, from userid 1000) id 4Zhf972xpmz2y6T; Tue, 22 Apr 2025 10:48:27 +0000 (UTC) To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, master, updated. 678fa86af6129b960b6efe419a21a24507c6d993 X-Git-Refname: refs/heads/master X-Git-Reftype: branch X-Git-Oldrev: 7affb9a237f09a9c292a7d03f5410a2d610bc0af X-Git-Newrev: 678fa86af6129b960b6efe419a21a24507c6d993 Message-Id: <4Zhf972xpmz2y6T@people01.haj.ipfire.org> Date: Tue, 22 Apr 2025 10:48:27 +0000 (UTC) From: Michael Tremer Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via 678fa86af6129b960b6efe419a21a24507c6d993 (commit) via 8460bc1ed8f6c22bea62c827383b4aa30d4a5da3 (commit) via 057f84be8f06cc2b578b2f8a32751cf09d4dcdcf (commit) via 5426ee1d309a5d0f9c2ca9d36b9b1d4fae8ed009 (commit) from 7affb9a237f09a9c292a7d03f5410a2d610bc0af (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 678fa86af6129b960b6efe419a21a24507c6d993 Author: Matthias Fischer Date: Fri Apr 18 00:46:24 2025 +0200 bind: Update to 9.20.8 For details see: https://downloads.isc.org/isc/bind9/9.20.8/doc/arm/html/notes.html#notes-for-bind-9-20-8 Signed-off-by: Matthias Fischer Reviewed-by: Michael Tremer Signed-off-by: Michael Tremer commit 8460bc1ed8f6c22bea62c827383b4aa30d4a5da3 Author: Michael Tremer Date: Tue Apr 22 10:30:25 2025 +0000 core194: Ship libarchive Signed-off-by: Michael Tremer commit 057f84be8f06cc2b578b2f8a32751cf09d4dcdcf Author: Adolf Belka Date: Wed Apr 2 22:25:40 2025 +0200 libarchive: Update to version 3.7.9 - Update from version 3.7.7 to 3.7.9 - Update of rootfile - 3 CVE fixes in 3.7.8 - Changelog 3.7.9 Important bugfixes: a regression in libarchive 3.7.8 regarding GNU sparse entries was fixed (#2558) 3.7.8 Security fixes: tar reader: Handle truncation in the middle of a GNU long linkname (#2422, CVE-2024-57970) unzip: fix null pointer dereference (#2532, CVE-2025-1632) tar reader: fix unchecked return value in list_item_verbose() (#2532, CVE-2025-25724) Important bugfixes: 7zip reader: add SPARC (#2399) and POWERPC (#2459) filter support for non-LZMA compressors tar reader: Ignore ustar size when pax size is present (#2405) tar writer: Fix bug when -s/a/b/ used more than once with b flag (#2435) cpio: Fix a Y2038 bug on Windows (#2471) libarchive: Handle ARCHIVE_FILTER_LZOP in archive_read_append_filter (#2519) libarchive: Adding missing seeker function to archive_read_open_FILE() (#2539) Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 5426ee1d309a5d0f9c2ca9d36b9b1d4fae8ed009 Author: Adolf Belka Date: Tue Apr 8 23:37:27 2025 +0200 xz: Update to version 5.8.1 - Update from version 5.8.0 to 5.8.1 - Update of rootfile - Changelog 5.8.1 IMPORTANT: This includes a security fix for CVE-2025-31115 which affects XZ Utils from 5.3.3alpha to 5.8.0. No new 5.4.x or 5.6.x releases will be made, but the fix is in the v5.4 and v5.6 branches in the xz Git repository. A standalone patch for all affected versions is available as well. * Multithreaded .xz decoder (lzma_stream_decoder_mt()): - Fix a bug that could at least result in a crash with invalid input. (CVE-2025-31115) - Fix a performance bug: Only one thread was used if the whole input file was provided at once to lzma_code(), the output buffer was big enough, timeout was disabled, and LZMA_FINISH was used. There are no bug reports about this, thus it's possible that no real-world application was affected. * Avoid even with C11/C17 compilers. This fixes the build with Oracle Developer Studio 12.6 on Solaris 10 when the compiler is in C11 mode (the header doesn't exist). * Autotools: Restore compatibility with GNU make versions older than 4.0 by creating the package using GNU gettext 0.23.1 infrastructure instead of 0.24. * Update Croatian translation. Signed-off-by: Adolf Belka Reviewed-by: Michael Tremer Signed-off-by: Michael Tremer ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/bind | 10 +++++----- config/rootfiles/common/libarchive | 2 +- config/rootfiles/common/xz | 2 +- .../rootfiles/{oldcore/104 => core/194}/filelists/libarchive | 0 lfs/bind | 4 ++-- lfs/libarchive | 6 +++--- lfs/xz | 4 ++-- 7 files changed, 14 insertions(+), 14 deletions(-) copy config/rootfiles/{oldcore/104 => core/194}/filelists/libarchive (100%) Difference in files: diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index 0467b7b04..0beffd862 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -240,18 +240,18 @@ usr/bin/nsupdate #usr/include/ns/types.h #usr/include/ns/update.h #usr/include/ns/xfrout.h -usr/lib/libdns-9.20.7.so +usr/lib/libdns-9.20.8.so #usr/lib/libdns.la #usr/lib/libdns.so -usr/lib/libisc-9.20.7.so +usr/lib/libisc-9.20.8.so #usr/lib/libisc.la #usr/lib/libisc.so -usr/lib/libisccc-9.20.7.so +usr/lib/libisccc-9.20.8.so #usr/lib/libisccc.la #usr/lib/libisccc.so -usr/lib/libisccfg-9.20.7.so +usr/lib/libisccfg-9.20.8.so #usr/lib/libisccfg.la #usr/lib/libisccfg.so -usr/lib/libns-9.20.7.so +usr/lib/libns-9.20.8.so #usr/lib/libns.la #usr/lib/libns.so diff --git a/config/rootfiles/common/libarchive b/config/rootfiles/common/libarchive index 0e6d2087b..ee10915f1 100644 --- a/config/rootfiles/common/libarchive +++ b/config/rootfiles/common/libarchive @@ -7,7 +7,7 @@ #usr/lib/libarchive.la #usr/lib/libarchive.so usr/lib/libarchive.so.13 -usr/lib/libarchive.so.13.7.7 +usr/lib/libarchive.so.13.7.9 #usr/lib/pkgconfig/libarchive.pc #usr/share/man/man1/bsdcat.1 #usr/share/man/man1/bsdcpio.1 diff --git a/config/rootfiles/common/xz b/config/rootfiles/common/xz index 3873744c8..f836d4578 100644 --- a/config/rootfiles/common/xz +++ b/config/rootfiles/common/xz @@ -41,7 +41,7 @@ usr/bin/xzmore #usr/lib/liblzma.la #usr/lib/liblzma.so usr/lib/liblzma.so.5 -usr/lib/liblzma.so.5.8.0 +usr/lib/liblzma.so.5.8.1 #usr/lib/pkgconfig/liblzma.pc #usr/share/doc/xz #usr/share/doc/xz/AUTHORS diff --git a/config/rootfiles/core/194/filelists/libarchive b/config/rootfiles/core/194/filelists/libarchive new file mode 120000 index 000000000..551f1f743 --- /dev/null +++ b/config/rootfiles/core/194/filelists/libarchive @@ -0,0 +1 @@ +../../../common/libarchive \ No newline at end of file diff --git a/lfs/bind b/lfs/bind index a35d82975..330501460 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@ include Config -VER = 9.20.7 +VER = 9.20.8 THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = c5198939382e7295b4dfcb2ddbd86e5bccc10047d5e963dab2381404eb7a14543218e3caa438b395a2982cb607da84012f3a76a41c790a48ed615238bc080b5c +$(DL_FILE)_BLAKE2 = cc8f9de7cff23af113c48d365d41774f5141f937091b2f97e682104be03e64c86eb6f00a5f2e43ac4a3472c24b2909ca0d4cb82194cf4e8e510d5dded40ddd5a install : $(TARGET) diff --git a/lfs/libarchive b/lfs/libarchive index 3f4eccff0..d5c508210 100644 --- a/lfs/libarchive +++ b/lfs/libarchive @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2025 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 3.7.7 +VER = 3.7.9 THISAPP = libarchive-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -41,7 +41,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = e118c693f7a78e86ab868fc6c2c77beba539cf5c7d5999e270cdceb225e9f85c68c938ec6ce3a33f75b2a44a6f7debe2c280d2573c1bcf05806300e8dce1a4f0 +$(DL_FILE)_BLAKE2 = 7bcfb3fe8ffd9452f3d71cdc738144069594030278572ebba0bb247ad74fd68ec19822f281364878228ee311976e216614d4764e56c5fb7f98801695ab7aa7f4 install : $(TARGET) diff --git a/lfs/xz b/lfs/xz index 511848c1d..1ee1faa52 100644 --- a/lfs/xz +++ b/lfs/xz @@ -24,7 +24,7 @@ include Config -VER = 5.8.0 +VER = 5.8.1 THISAPP = xz-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -45,7 +45,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 5087c88884a857b96bc5658548fc9b07ab2f14fe9eabfaeaa19e21810e7588c97621db08353632bd56e66ae2085ec5adc421c4d6849525b630d56dadd65c9f81 +$(DL_FILE)_BLAKE2 = f11be3971e181bb49b6a92d3cc07ebb1c6b5fb53bc5d079e0952eed94f069656cffb37a2e2e8f068a5f119c6ef5ee565b3ac9978a5afa24a40d49607d492d176 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree