From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bYWBH3CVqz2ywH for ; Fri, 4 Jul 2025 11:09:59 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bYWBH2wdlz2yqG for ; Fri, 4 Jul 2025 11:09:59 +0000 (UTC) Received: from people01.haj.ipfire.org (people01.haj.ipfire.org [172.28.1.161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (secp384r1) client-digest SHA384) (Client CN "people01.haj.ipfire.org", Issuer "E6" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4bYWBF6yslzrg for ; Fri, 4 Jul 2025 11:09:57 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1751627398; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=5cmiNZpjRZGPi9z/TRJoRG6IKnK+VlbNbLLSW8ry/rE=; b=c+UQl+ge6Qi9ODraJtq6LkT41e8ESHDrG7VZUrNGrEjxey0FwUU681svr7T8VDvf+NE32w kE6UcKiG6anUIYBQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1751627398; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=5cmiNZpjRZGPi9z/TRJoRG6IKnK+VlbNbLLSW8ry/rE=; b=jcxvT5PlbFqmawwThgveChQ6VKdAPqCcyluFLTiNsCw8v4DkvePl1r+KojOVUzVPgzzDVU JSpnEqcy4NTbKo7HtcdIRENx6xMreV8U6r4Hf3xp5dRDl9J2ESUMqFuTyYIiB5wtB0hXTP j5BeThqaCbq1gsgV6ERVe/RPKEbPgTNABfY6P9a380cvIWpJEn3/qYihqK2mpDPkD+Wi8y 1vjhlhI7avnOBfrkWL5asx3bZ3R3iEETe4xs/aaBQ+5ur9wJjr1gNkluL2hzx7tXFSC9FA m+oqqmEjIYxAN1C0wdqwJ3t5hcQfJfvbzxf8fndsoA8vGHdmhIDNnwqu7W0cBA== Received: by people01.haj.ipfire.org (Postfix, from userid 1000) id 4bYWBF4hnRz2xbl; Fri, 4 Jul 2025 11:09:57 +0000 (UTC) To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. efeb1d3bda767bbea062da70105fcbda59cbc594 X-Git-Refname: refs/heads/next X-Git-Reftype: branch X-Git-Oldrev: c03fb49f5ba1828ae3f99c3f817255fabc9ba823 X-Git-Newrev: efeb1d3bda767bbea062da70105fcbda59cbc594 Message-Id: <4bYWBF4hnRz2xbl@people01.haj.ipfire.org> Date: Fri, 4 Jul 2025 11:09:57 +0000 (UTC) From: Michael Tremer X-Spam: Yes Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via efeb1d3bda767bbea062da70105fcbda59cbc594 (commit) via de8887e60c6cd4be8fd1b877c00544c53d64f79e (commit) via 5bed1c20b7277f4c5c780f1673cfeaea8b7239bc (commit) via f667298748b566a55d62799538d24f3157b31966 (commit) via 730a88544fee7a78ae884bdba736acd10e510472 (commit) via 4823cfa893a8748c697e50968749ae0cbb70756d (commit) via e5699c55106631b61915843b81b930370b0eaa67 (commit) via 1aee27fec8827ac21187b8a9ccbf3325a66535ac (commit) via a2a73331107678fda4e973db21e4b45b8e061f0f (commit) via 110fc9fecb72c5b27eb957ba03d03b0e9d278a1a (commit) via 5ebef2176469d56cb323a02f03a6e217bfb30150 (commit) via f2c5412eb25fe4f42dc9dc40c1ed48f44ec34492 (commit) via c0a07f2df9aa9548d06a0e9558a462558871d19f (commit) via fe7ff845e43228bbf121f1367c890b233f469483 (commit) via f0fc4e07db5be29f684d98eef55900c1f7fb936e (commit) via 90dab2bef6b16b2a437d8ed6dd689bbfa9ac9e71 (commit) via 0a111abfc7e498908697239e919f9dd5877d745e (commit) via e8f33d48be66b79fcd5bb766a34fc862a5f7d075 (commit) via ee2a9d3975120989fe0a76227f333c8a0bd9119a (commit) via f31ba2c5ee9bd8414471f36ca1918ca769eb5a80 (commit) via 42e94a858f407b49c6f40f5c65d96a853c83177a (commit) via 0544285c74c33983ae65ae18884b009cb7a70a03 (commit) via b29cd91c961a5eeb1aa42bc679dad5b06b3446d2 (commit) via b0dd16dd4135bbaa3fea9393b68080469573cfa3 (commit) via 823a4174b1317290ee11221c2eadcfb7c1970643 (commit) via 70cf028910ebfbe335febedaff0a68737fd91687 (commit) via c19684c30ac6d7d0e6a1a63e8ba3857461780aa1 (commit) via 60797312ac5a16e9e55d214dbd686d2574da2d7e (commit) via 61ed7a4670e57f1e66bbdb02c53a2227eff14f6d (commit) via c58b8098864462d4d270bb3f049bd2b2504d459b (commit) from c03fb49f5ba1828ae3f99c3f817255fabc9ba823 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit efeb1d3bda767bbea062da70105fcbda59cbc594 Author: Adolf Belka Date: Fri Jul 4 12:14:29 2025 +0200 core197: Ship util linux Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit de8887e60c6cd4be8fd1b877c00544c53d64f79e Author: Adolf Belka Date: Fri Jul 4 12:14:46 2025 +0200 util-linux: Update to version 2.41.1 - Update from version 2.41 to 2.41.1 - Update of rootfile not required - Changelog 2.41.1 autotools: - don't use wide-character ncurses if --disable-widechar (by Karel Zak) cfdisk: - fix memory leak and possible NULL dereference [gcc-analyzer] (by Karel Zak) column: - fix compiler warning for non-widechar compilation (by Karel Zak) fdformat: - use size_t and ssize_t (by Karel Zak) fdisk: - fix possible memory leak (by Karel Zak) fdisk,partx: - avoid strcasecmp() for ASCII-only strings (by Karel Zak) findmnt: - fix -k option parsing regression (by Karel Zak) hardlink: - define more function as inline (by Karel Zak) - fix performance regression (inefficient signal evaluation) (by Karel Zak) - Use macro for verbose output (by Karel Zak) include/cctype: - fix string comparison (by Karel Zak) include/mount-api-utils: - include linux/unistd.h (by Thomas Weißschuh) libblkid: - Fix crash while parsing config with libeconf (by Stanislav Brabec) - befs fix underflow (by Milan Broz) - avoid strcasecmp() for ASCII-only strings (by Karel Zak) libblkid/src/topology/dm: - fix fscanf return value check to match expected number of parsed items (by Mingjie Shen) libfdisk: - avoid strcasecmp() for ASCII-only strings (by Karel Zak) libmount: - (subdir) restrict for real mounts only (by Karel Zak) - (subdir) remove unused code (by Karel Zak) - avoid calling memset() unnecessarily (by Karel Zak) - avoid strcasecmp() for ASCII-only strings (by Karel Zak) - fix --no-canonicalize regression (by Karel Zak) libuuid: - fix uuid_time on macOS without attribute((alias)) (by Eugene Gershnik) lsblk: - use ID_PART_ENTRY_SCHEME as fallback for PTTYPE (by Karel Zak) - avoid strcasecmp() for ASCII-only strings (by Karel Zak) lscpu: - fix possible buffer overflow in cpuinfo parser (by Karel Zak) - Fix loongarch op-mode output with recent kernel (by Xi Ruoyao) lsfd: - (bug fix) scan the protocol field of /proc/net/packet as a hex number (by Masatake YAMATO) - fix the description for PACKET.PROTOCOL column (by Masatake YAMATO) lsns: - enhance compilation without USE_NS_GET_API (by Karel Zak) - fix undefined reference to add_namespace_for_nsfd #3483 (by Thomas Devoogdt) meson: - add feature for translated documentation (by Thomas Weißschuh) - remove tinfo dependency from 'more' (by Thomas Weißschuh) - fix manadocs for libsmartcols and libblkid (by Karel Zak) - fix po-man installation (by Karel Zak) misc: - never include wchar.h (by Karel Zak) more: - fix broken ':!command' command key (by cgoesche) - fix implicit previous shell_line execution #3508 (by cgoesche) mount: - (man) add missing word (by Jakub Wilk) namespace.h: - fix compilation on Linux < 4.10 (by Thomas Devoogdt) po: - update uk.po (from translationproject.org) (by Yuri Chornoivan) - update sr.po (from translationproject.org) (by Мирослав Николић) - update ro.po (from translationproject.org) (by Remus-Gabriel Chelu) - update pt.po (from translationproject.org) (by Pedro Albuquerque) - update pl.po (from translationproject.org) (by Jakub Bogusz) - update nl.po (from translationproject.org) (by Benno Schulenberg) - update ja.po (from translationproject.org) (by YOSHIDA Hideki) - update hr.po (from translationproject.org) (by Božidar Putanec) - update fr.po (from translationproject.org) (by Frédéric Marchal) - update es.po (from translationproject.org) (by Antonio Ceballos Roa) - update de.po (from translationproject.org) (by Mario Blättermann) - update cs.po (from translationproject.org) (by Petr Písař) po-man: - merge changes (by Karel Zak) - update sr.po (from translationproject.org) (by Мирослав Николић) - update de.po (from translationproject.org) (by Mario Blättermann) tests: - (test_mkfds::mapped-packet-socket) add a new parameter, protocol (by Masatake YAMATO) treewide: - add ul_ to parse_timestamp() function name (by Karel Zak) - add ul_ to parse_switch() function name (by Stanislav Brabec) - add ul_ to parse_size() function name (by Karel Zak) - add ul_ to parse_range() function name (by Karel Zak) - fix optional arguments usage (by Karel Zak) - avoid strcasecmp() for ASCII-only strings (by Karel Zak) Wipefs: - improve --all descriptions for whole-disks (by Karel Zak) Misc: - Do not call exit() on code ending in shared libraries (by Cristian Rodríguez) - remove two leftover license lines from colors.{c,h} (by Benno Schulenberg) - remove "Copyright (C) ...." notes from files that claim no copyright (by Benno Schulenberg) - correct the full name of the GPL in various files (by Benno Schulenberg) - Make scols_column_set_data_func docs visible (by FeRD (Frank Dana)) - Do not use strerror on shared libraries (by Cristian Rodríguez) - Fix typo in blkdiscard docs (by pls-no-hack) - lib/fileeq.c Fix a typo in message. (by Masanari Iida) Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 5bed1c20b7277f4c5c780f1673cfeaea8b7239bc Author: Adolf Belka Date: Fri Jul 4 12:14:45 2025 +0200 taglib: Update to version 2.1.1 - Update from version 2.0.2 to 2.1.1 - Update of rootfile - Changelog 2.1.1 * Map ID3v2.3 IPLS frames to both ID3v2.4 TIPL and TMCL to have a consistent behavior when using MusicBrainz tags with the property map interface. * Fix missing include for `wchar_t` when using C bindings with MinGW. 2.1 * Support for Shorten (SHN) files. * Compile time configuration of supported formats: WITH_APE, WITH_ASF, ... * Compile time configuration of data and temporary directories for unit tests: TESTS_DIR and TESTS_TMPDIR. * C bindings: Added taglib_file_new_wchar() and taglib_file_new_type_wchar(). * Preserve unicode encoding when downgrading to ID3v2.3. * Do not store FLAC metadata blocks which are too large. * Fix segfaults with String and ByteVector nullptr arguments. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit f667298748b566a55d62799538d24f3157b31966 Author: Adolf Belka Date: Fri Jul 4 12:14:28 2025 +0200 core197: Ship sqlite Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 730a88544fee7a78ae884bdba736acd10e510472 Author: Adolf Belka Date: Fri Jul 4 12:14:44 2025 +0200 sqlite: Update to version 3500200 - Update from version 3500100 to 3500200 - Update of rootfile - Changelog 3500200 Fix the concat_ws() SQL function so that it includes empty strings in the concatenation. Forum post 52503ac21d. Fix the file-io extension (used by the CLI) so that it can be built using the MinGW compiler chain. Avoid writing frames with no checksums into the wal file if a savepoint is rolled back after dirty pages have already been spilled into the wal file. Forum post b490f726db. Fix the Bitvec object to avoid stack overflow when the database is within 60 pages of its maximum size. Fix a problem with UPDATEs on fts5 tables that contain BLOB values. Fix an issue with transitive IS constraints on a RIGHT JOIN. Raise an error early if the number of aggregate terms in a query exceeds the maximum number of columns, to avoid downstream assertion faults. Ensure that sqlite3_setlk_timeout() holds the database mutex. Fix typos in API documentation. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 4823cfa893a8748c697e50968749ae0cbb70756d Author: Adolf Belka Date: Fri Jul 4 12:14:27 2025 +0200 core197: Ship shadow Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit e5699c55106631b61915843b81b930370b0eaa67 Author: Adolf Belka Date: Fri Jul 4 12:14:43 2025 +0200 shadow: Update to version 4.18.0 - Update from version 4.17.4 to 4.18.0 - Update of rootfile not required - Changelog 4.18.0 CI: purge man-db by @ikerexxe in #1241 passwd: document exit code when PAM has errored by @hallyn in #1244 Man patches by @zeha in #1175 Quick fix: define E_PAM_ERR in lib/pam_pass.c by @hallyn in #1245 Accept /usr/sbin/nologin as an alternate to /sbin/nologin by @zeha in #1246 Add LOGIN_ENV_SAFELIST to FOREIGNDEFS by @stanislav-brabec in #1248 ci: add gawk as a fedora dependency by @ikerexxe in #1252 man/useradd.8.xml: fix the CREATE_HOME description by @hallyn in #1251 lib/getdate.y: Restrict the date formats that we support by @alejandro-colomar in #1238 newuidmap: better error logging on failure by @matthewhughes934 in #1254 Extend basic test cases to check shadow and gshadow entries by @ikerexxe in #1237 lib/sizeof.h: Make sure STRLEN() only accepts string literals by @alejandro-colomar in #1260 Add strprefix(), and use it instead of its pattern by @alejandro-colomar in #1152 src/: Simplify, using strpbrk(3) by @alejandro-colomar in #1167 lib/string/strdup/: STRNDUPA(): Reimplement in terms of strndupa(3) by @alejandro-colomar in #1189 Remove dead beef by @alejandro-colomar in #1230 lib/atoi/a2i/: Simplify these macros by calling a2i() by @alejandro-colomar in #1137 strtolower(): Add API, and use it instead of its pattern by @alejandro-colomar in #1211 lib/: sget*ent(): Simplify by calling strdup(3) by @alejandro-colomar in #1146 fields by @alejandro-colomar in #1150 yacc(1) is a dead language; bury it deep in the ground by @alejandro-colomar in #1217 Test expiration date by @ikerexxe in #1233 [scp] Add strcaseprefix(), and use it instead of its pattern by @alejandro-colomar in #1262 valid_field(): Improve readability by @alejandro-colomar in #1208 lib/, src/, tests/: Use the standard countof() instead of our NITEMS() by @alejandro-colomar in #1259 lib/fs/mkstemp/, src/: Move fmkomstemp() to separate files under lib/fs/mkstemp/, and split into mkomstemp() by @alejandro-colomar in #1139 [x][v]aprintf(): Add APIs, and use them instead of [x][v]asprintf(3) by @alejandro-colomar in #1168 lib/get_pid.c: pid_t is a signed integer by @alejandro-colomar in #1264 src/newusers.c: Fix off-by-one benign bug in array declaration by @alejandro-colomar in #1266 Add some wrappers for usual loops around strsep(3) by @alejandro-colomar in #1155 lib/fs/readlink/areadlink.h: areadlink(): Avoid inconditionally using PATH_MAX by @sthibaul in #1222 configure: Fix typo by @sthibaul in #1268 Pre-release 4.18.0-rc1 by @hallyn in #1270 Update man pages for chage, shadow, passwd by @domiborges in #1243 contrib/: Burn it all by @alejandro-colomar in #1274 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 1aee27fec8827ac21187b8a9ccbf3325a66535ac Author: Adolf Belka Date: Fri Jul 4 12:14:26 2025 +0200 core197: Ship pciutils Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit a2a73331107678fda4e973db21e4b45b8e061f0f Author: Adolf Belka Date: Fri Jul 4 12:14:42 2025 +0200 pciutils: Update to version 3.14.0 - Update from version 3.13.0 to 3.14.0 - Update of rootfile - Changelog 3.14.0 * New capabilities are decoded: VirtIO SharedMemory, Physical Layer 16 to 64 GT/s, Flit Mode, Device 3, Intel vendor-specific. * ECAM now works on Windows and DJGPP. * The GNU/Hurd back-end works on 64-bit systems. * Added a new back-end for RT-Thread Smart OS. * got definitions of new classes and capabilities from PCI Code and ID Assignment rev 1.18. * can be included from C++ programs. * Updated pci.ids. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 110fc9fecb72c5b27eb957ba03d03b0e9d278a1a Author: Adolf Belka Date: Fri Jul 4 12:14:25 2025 +0200 core197: Ship pango Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 5ebef2176469d56cb323a02f03a6e217bfb30150 Author: Adolf Belka Date: Fri Jul 4 12:14:41 2025 +0200 pango: Update to version 1.56.4 - Update from version 1.56.3 to 1.56.4 - Update of rootfile - Changelog 1.56.4 - fontconfig: Improve the add_font_file implementation - fontconfig: Combine font features and style variants - fontconfig: Make sure font faces stay alive - win32: Drop some caching - win32: Make sure font faces stay alive - win32: Modernize and simplify the code - win32: Stop synthesizing fonts - win32: Implement list models - coretext: Support synthetic small caps - layout: Avoid assertions in line breaking - build: Require GLib 2.82 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit f2c5412eb25fe4f42dc9dc40c1ed48f44ec34492 Author: Adolf Belka Date: Fri Jul 4 12:14:24 2025 +0200 core197: Ship openssl Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit c0a07f2df9aa9548d06a0e9558a462558871d19f Author: Adolf Belka Date: Fri Jul 4 12:14:40 2025 +0200 openssl: Update to version 3.5.1 - Update from version 3.5.0 to 3.5.1 - Update of rootfile not required - Changelog 3.5.1 OpenSSL 3.5.1 is a security patch release. The most severe CVE fixed in this release is Low. This release incorporates the following bug fixes and mitigations: * Fix x509 application adds trusted use instead of rejected use. ([CVE-2025-4575]) Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit fe7ff845e43228bbf121f1367c890b233f469483 Author: Adolf Belka Date: Fri Jul 4 12:14:23 2025 +0200 core197: Ship nettle Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit f0fc4e07db5be29f684d98eef55900c1f7fb936e Author: Adolf Belka Date: Fri Jul 4 12:14:39 2025 +0200 nettle: Update to version 3.10.2 - Update from version 3.10.1 to 3.10.2 - Update of rootfile - Changelog 3.10.2 * Fix missing prototypes in getopt.h and getopt.c, affecting non-glibc systems, and causing compile errors with C23 compilers that require prototypes, e.g., gcc-15. * For powerpc64, avoid using v9 (ISA v3.0) instructions lxvb16x, lxv and stxv in powerpc64/p8/ files. * For powerpc64, add configure check for __VSX__, and disable use of assembly if not defined. Nettle's powerpc64 assembly requires at least v7 (ISA v2.06). Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 90dab2bef6b16b2a437d8ed6dd689bbfa9ac9e71 Author: Adolf Belka Date: Fri Jul 4 12:14:38 2025 +0200 ncdu: Update to version 1.22 - Update from version 1.20 to 1.22 - Update of rootfile not required - Changelog 1.22 - Add support for @-prefixed lines to ignore errors in config file (from 2.8) - List all supported options in `--help` (from 2.8) - Use `kB` instead of `KB` in `--si` mode (from 2.8) - Add `--graph-style` option (from 2.1) - Fix supported range of uid/gid numbers 1.21 - Perform tilde expansion on paths in the config file (from 2.7) - Fix JSON import of escaped UTF-16 surrogate pairs (from 2.7) - Fix displaying and exporting zero values when extended info is not available (from 2.6) - Fix JSON export and import of the “other filesystem” flag (from 2.5) Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 0a111abfc7e498908697239e919f9dd5877d745e Author: Adolf Belka Date: Fri Jul 4 12:14:22 2025 +0200 core197: Ship lvm2 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit e8f33d48be66b79fcd5bb766a34fc862a5f7d075 Author: Adolf Belka Date: Fri Jul 4 12:14:37 2025 +0200 lvm2: Update to version 2.03.33 - Update from version 2.03.32 to 2.03.33 - Update of rootfile not required - Changelog 2.03.33 Various spelling, grammar, formatting, test, and build script improvements. Override LC_NUMERIC locale if unsuitable for json_std report format. Repair raid arrays with transiently lost devices. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit ee2a9d3975120989fe0a76227f333c8a0bd9119a Author: Adolf Belka Date: Fri Jul 4 12:14:21 2025 +0200 core197: Ship libssh Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit f31ba2c5ee9bd8414471f36ca1918ca769eb5a80 Author: Adolf Belka Date: Fri Jul 4 12:14:36 2025 +0200 libssh: Update to version 0.11.2 - Update from version 0.11.1 to 0.11.2 - Update of rootfile - Changelog 0.11.2 * Security: * CVE-2025-4877 - Write beyond bounds in binary to base64 conversion * CVE-2025-4878 - Use of uninitialized variable in privatekey_from_file() * CVE-2025-5318 - Likely read beyond bounds in sftp server handle management * CVE-2025-5351 - Double free in functions exporting keys * CVE-2025-5372 - ssh_kdf() returns a success code on certain failures * CVE-2025-5449 - Likely read beyond bounds in sftp server message decoding * CVE-2025-5987 - Invalid return code for chacha20 poly1305 with OpenSSL * Compatibility * Fixed compatibility with CPM.cmake * Compatibility with OpenSSH 10.0 * Tests compatibility with new Dropbear releases * Removed p11-kit remoting from the pkcs11 testsuite * Bugfixes * Implement missing packet filter for DH GEX * Properly process the SSH2_MSG_DEBUG message * Allow escaping quotes in quoted arguments to ssh configuration * Do not fail with unknown match keywords in ssh configuration * Process packets before selecting signature algorithm during authentication * Do not fail hard when the SFTP status message is not sent by noncompliant servers Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 42e94a858f407b49c6f40f5c65d96a853c83177a Author: Adolf Belka Date: Fri Jul 4 12:18:12 2025 +0200 core197: Ship libpng Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 0544285c74c33983ae65ae18884b009cb7a70a03 Author: Adolf Belka Date: Fri Jul 4 12:14:35 2025 +0200 libpng: Update to version 1.6.50 - Update from version 1.6.48 to 1.6.50 - Update of rootfile - Changelog 1.6.50 Improved the detection of the RVV Extension on the RISC-V platform. (Contributed by Filip Wasil) Replaced inline ASM with C intrinsics in the RVV code. (Contributed by Filip Wasil) Fixed a decoder defect in which unknown chunks trailing IDAT, set to go through the unknown chunk handler, incorrectly triggered out-of-place IEND errors. (Contributed by John Bowler) Fixed the CMake file for cross-platform builds that require `libm`. 1.6.49 Added SIMD-optimized code for the RISC-V Vector Extension (RVV). (Contributed by Manfred Schlaegl, Dragos Tiselice and Filip Wasil) Added various fixes and improvements to the build scripts and to the sample code. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit b29cd91c961a5eeb1aa42bc679dad5b06b3446d2 Author: Adolf Belka Date: Fri Jul 4 12:14:20 2025 +0200 core197: Ship libjpeg Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit b0dd16dd4135bbaa3fea9393b68080469573cfa3 Author: Adolf Belka Date: Fri Jul 4 12:14:34 2025 +0200 libjpeg: Update to version 3.1.1 - Update from version 3.0.4 to 3.1.1 - Update of rootfile - Changelog 3.1.1 Hardened the libjpeg API against hypothetical calling applications that may erroneously change the value of the `data_precision` field in `jpeg_compress_struct` or `jpeg_decompress_struct` after calling `jpeg_start_compress()` or `jpeg_start_decompress()`. 3.1.0 Fixed an issue in the TurboJPEG API whereby, when generating a lossless JPEG image with more than 8 bits per sample, specifying a point transform value greater than 7 resulted in an error ("Parameter value out of range") unless `TJPARAM_PRECISION`/`TJ.PARAM_PRECISION` was specified before `TJPARAM_LOSSLESSPT`/`TJ.PARAM_LOSSLESSPT`. Fixed a regression introduced by 1.4 beta1[3] that prevented `jpeg_set_defaults()` from resetting the Huffman tables to default (baseline) values if Huffman table optimization or progressive mode was previously enabled in the same libjpeg instance. Fixed an issue whereby lossless JPEG compression could not be disabled if it was previously enabled in a libjpeg or TurboJPEG instance. `jpeg_set_defaults()` now disables lossless JPEG compression in a libjpeg instance, and setting `TJPARAM_LOSSLESS`/`TJ.PARAM_LOSSLESS` to `0` now disables lossless JPEG compression in a TurboJPEG instance. 3.1 beta1 The libjpeg-turbo source tree has been reorganized to make it easier to find the README files, license information, and build instructions. The documentation for the libjpeg API library and associated programs has been moved into the **doc/** subdirectory, all C source code and headers have been moved into a new **src/** subdirectory, and test scripts have been moved into a new **test/** subdirectory. cjpeg no longer allows GIF input files to be converted into 12-bit-per-sample JPEG files. That was never a useful feature, since GIF images have at most 256 colors referenced from a palette of 8-bit-per-component RGB values. Added support for lossless JPEG images with 2 to 15 bits per sample to the libjpeg and TurboJPEG APIs. When creating or decompressing a lossless JPEG image and when loading or saving a PBMPLUS image, functions/methods specific to 8-bit samples now handle 8-bit samples with 2 to 8 bits of data precision (specified using the `data_precision` field in `jpeg_compress_struct` or `jpeg_decompress_struct` or using `TJPARAM_PRECISION`/`TJ.PARAM_PRECISION`), functions/methods specific to 12-bit samples now handle 12-bit samples with 9 to 12 bits of data precision, and functions/methods specific to 16-bit samples now handle 16-bit samples with 13 to 16 bits of data precision. Refer to [libjpeg.txt](doc/libjpeg.txt), [usage.txt](doc/usage.txt), and the TurboJPEG API documentation for more details. All deprecated constants and methods in the TurboJPEG Java API have been removed. TJBench command-line arguments are now more consistent with those of cjpeg, djpeg, and jpegtran. More specifically: - `-copynone` has been replaced with `-copy none`. - `-fastdct` has been replaced with `-dct fast`. - `-fastupsample` has been replaced with `-nosmooth`. - `-hflip` and `-vflip` have been replaced with `-flip {horizontal|vertical}`. - `-limitscans` has been replaced with `-maxscans`, which allows the scan limit to be specified. - `-rgb`, `-bgr`, `-rgbx`, `-bgrx`, `-xbgr`, `-xrgb`, and `-cmyk` have been replaced with `-pixelformat {rgb|bgr|rgbx|bgrx|xbgr|xrgb|cmyk}`. - `-rot90`, `-rot180`, and `-rot270` have been replaced with `-rotate {90|180|270}`. - `-stoponwarning` has been replaced with `-strict`. - British spellings for `gray` (`grey`) and `optimize` (`optimise`) are now allowed. The old command-line arguments are deprecated and will be removed in a future release. TJBench command-line arguments can now be abbreviated as well. (Where possible, the abbreviations are the same as those supported by cjpeg, djpeg, and jpegtran.) Added a new TJBench option (`-pixelformat gray`) that can be used to test the performance of compressing/decompressing a grayscale JPEG image from/to a packed-pixel grayscale image. Fixed an issue whereby, if `TJPARAM_NOREALLOC` was set, TurboJPEG compression and lossless transformation functions ignored the JPEG buffer size(s) passed to them and assumed that the JPEG buffer(s) had been allocated to a worst-case size returned by `tj3JPEGBufSize()`. This behavior was never documented, although the documentation was unclear regarding whether the JPEG buffer size should be specified if a JPEG buffer is pre-allocated to a worst-case size. The TurboJPEG C and Java APIs have been improved in the following ways: - New image I/O methods (`TJCompressor.loadSourceImage()` and `TJDecompressor.saveImage()`) have been added to the Java API. These methods work similarly to the `tj3LoadImage*()` and `tj3SaveImage*()` functions in the C API. - The TurboJPEG lossless transformation function and methods now add restart markers to all destination images if `TJPARAM_RESTARTBLOCKS`/`TJ.PARAM_RESTARTBLOCKS` or `TJPARAM_RESTARTROWS`/`TJ.PARAM_RESTARTROWS` is set. - New functions/methods (`tj3SetICCProfile()` / `TJCompressor.setICCProfile()` / `TJTransformer.setICCProfile()` and `tj3GetICCProfile()` / `TJDecompressor.getICCProfile()`) can be used to embed and retrieve ICC profiles. - A new parameter (`TJPARAM_SAVEMARKERS`/`TJ.PARAM_SAVEMARKERS`) can be used to specify the types of markers that will be copied from the source image to the destination image during lossless transformation if `TJXOPT_COPYNONE`/`TJTransform.OPT_COPYNONE` is not specified. - A new convenience function/method (`tj3TransformBufSize()` / `TJTransformer.bufSize()`) can be used to compute the worst-case destination buffer size for a given lossless transform, taking into account cropping, transposition of the width and height, grayscale conversion, and the embedded or extracted ICC profile. TJExample has been replaced with three programs (TJComp, TJDecomp, and TJTran) that demonstrate how to approximate the functionality of cjpeg, djpeg, and jpegtran using the TurboJPEG C and Java APIs. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 823a4174b1317290ee11221c2eadcfb7c1970643 Author: Adolf Belka Date: Fri Jul 4 12:14:19 2025 +0200 core197: Ship jq Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 70cf028910ebfbe335febedaff0a68737fd91687 Author: Adolf Belka Date: Fri Jul 4 12:14:33 2025 +0200 jq: Update to version 1.8.1 - Update from version 1.7.1 to 1.8.1 - Update of rootfile not required - CVE fix in 1.8.1 & 1.8.0 - Changelog 1.8.1 Security fixes - CVE-2025-49014: Fix heap use after free in `f_strftime`, `f_strflocaltime`. @wader 499c91bca9d4d027833bc62787d1bb075c03680e - GHSA-f946-j5j2-4w5m: Fix stack overflow in `node_min_byte_len` of oniguruma. @wader 5e159b34b179417e3e0404108190a2ac7d65611c CLI changes - Fix assertion failure when syntax error happens at the end of the query. @itchyny #3350 Changes to existing functions - Fix portability of `strptime/1` especially for Windows. @itchyny #3342 Language changes - Revert the change of `reduce`/`foreach` state variable in 1.8.0 (#3205). This change was reverted due to serious performance regression. @itchyny #3349 Documentation changes - Add LICENSE notice of NetBSD's `strptime()` to COPYING. @itchyny #3344 Build improvements - Fix build on old Mac with old sed. @qianbinbin #3336 1.8.0 Releasing - Change the version number pattern to `1.X.Y` (`1.8.0` instead of `1.8`). @itchyny #2999 - Generate provenance attestations for release artifacts and docker image. @lectrical #3225 ```sh gh attestation verify --repo jqlang/jq jq-linux-amd64 gh attestation verify --repo jqlang/jq oci://ghcr.io/jqlang/jq:1.8.0 ``` Security fixes - CVE-2024-23337: Fix signed integer overflow in `jvp_array_write` and `jvp_object_rehash`. @itchyny de21386681c0df0104a99d9d09db23a9b2a78b1e - The fix for this issue now limits the maximum size of arrays and objects to 536870912 (`2^29`) elements. - CVE-2024-53427: Reject NaN with payload while parsing JSON. @itchyny a09a4dfd55e6c24d04b35062ccfe4509748b1dd3 - The fix for this issue now drops support for NaN with payload in JSON (like `NaN123`). Other JSON extensions like `NaN` and `Infinity` are still supported. - CVE-2025-48060: Fix heap buffer overflow in `jv_string_vfmt`. @itchyny c6e041699d8cd31b97375a2596217aff2cfca85b - Fix use of uninitialized value in `check_literal`. @itchyny #3324 - Fix segmentation fault on `strftime/1`, `strflocaltime/1`. @itchyny #3271 - Fix unhandled overflow in `@base64d`. @emanuele6 #3080 CLI changes - Fix `--indent 0` implicitly enabling `--compact-output`. @amarshall @gbrlmarn @itchyny #3232 ```sh $ jq --indent 0 . <<< '{ "foo": ["hello", "world"] }' { "foo": [ "hello", "world" ] } # Previously, this implied --compact-output, but now outputs with new lines. ``` - Improve error messages to show problematic position in the filter. @itchyny #3292 ```sh $ jq -n '1 + $foo + 2' jq: error: $foo is not defined at , line 1, column 5: 1 + $foo + 2 ^^^^ jq: 1 compile error ``` - Include column number in parser and compiler error messages. @liviubobocu #3257 - Fix error message for string literal beginning with single quote. @mattmeyers #2964 ```sh $ jq .foo <<< "{'foo':'bar'}" jq: parse error: Invalid string literal; expected ", but got ' at line 1, column 7 # Previously, the error message was Invalid numeric literal at line 1, column 7. ``` - Improve `JQ_COLORS` environment variable to support larger escapes like truecolor. @SArpnt #3282 ```sh JQ_COLORS="38;2;255;173;173:38;2;255;214;165:38;2;253;255;182:38;2;202;255;191:38;2;155;246;255:38;2;160;196;255:38;2;189;178;255:38;2;255;198;255" jq -nc '[null,false,true,42,{"a":"bc"}]' ``` - Add `--library-path` long option for `-L`. @thaliaarchi #3194 - Fix `--slurp --stream` when input has no trailing newline character. @itchyny #3279 - Fix `--indent` option to error for malformed values. @thaliaarchi #3195 - Fix option parsing of `--binary` on non-Windows platforms. @calestyo #3131 - Fix issue with `~/.jq` on Windows where `$HOME` is not set. @kirkoman #3114 - Fix broken non-Latin output in the command help on Windows. @itchyny #3299 - Increase the maximum parsing depth for JSON to 10000. @itchyny #3328 - Parse short options in order given. @thaliaarchi #3194 - Consistently reset color formatting. @thaliaarchi #3034 New functions - Add `trim/0`, `ltrim/0` and `rtrim/0` to trim leading and trailing white spaces. @wader #3056 ```sh $ jq -n '" hello " | trim, ltrim, rtrim' "hello" "hello " " hello" ``` - Add `trimstr/1` to trim string from both ends. @gbrlmarn #3319 ```sh $ jq -n '"foobarfoo" | trimstr("foo")' "bar" ``` - Add `add/1`. Generator variant of `add/0`. @myaaaaaaaaa #3144 ```sh $ jq -c '.sum = add(.xs[])' <<< '{"xs":[1,2,3]}' {"xs":[1,2,3],"sum":6} ``` - Add `skip/2` as the counterpart to `limit/2`. @itchyny #3181 ```sh $ jq -nc '[1,2,3,4,5] | [skip(2; .[])]' [3,4,5] ``` - Add `toboolean/0` to convert strings to booleans. @brahmlower @itchyny #2098 ```sh $ jq -n '"true", "false" | toboolean' true false ``` - Add `@urid` format. Reverse of `@uri`. @fmgornick #3161 ```sh $ jq -Rr '@urid' <<< '%6a%71' jq ``` Changes to existing functions - Use code point index for `indices/1`, `index/1` and `rindex/1`. @wader #3065 - This is a breaking change. Use `utf8bytelength/0` to get byte index. - Improve `tonumber/0` performance and rejects numbers with leading or trailing white spaces. @itchyny @thaliaarchi #3055 #3195 - This is a breaking change. Use `trim/0` to remove leading and trailing white spaces. - Populate timezone data when formatting time. This fixes timezone name in `strftime/1`, `strflocaltime/1` for DST. @marcin-serwin @sihde #3203 #3264 #3323 - Preserve numerical precision on unary negation, `abs/0`, `length/0`. @itchyny #3242 #3275 - Make `last(empty)` yield no output values like `first(empty)`. @itchyny #3179 - Make `ltrimstr/1` and `rtrimstr/1` error for non-string inputs. @emanuele6 #2969 - Make `limit/2` error for negative count. @itchyny #3181 - Fix `mktime/0` overflow and allow fewer elements in date-time representation array. @emanuele6 #3070 #3162 - Fix non-matched optional capture group. @wader #3238 - Provide `strptime/1` on all systems. @george-hopkins @fdellwing #3008 #3094 - Fix `_WIN32` port of `strptime`. @emanuele6 #3071 - Improve `bsearch/1` performance by implementing in C. @eloycoto #2945 - Improve `unique/0` and `unique_by/1` performance. @itchyny @emanuele6 #3254 #3304 - Fix error messages including long string literal not to break Unicode characters. @itchyny #3249 - Remove `pow10/0` as it has been deprecated in glibc 2.27. Use `exp10/0` instead. @itchyny #3059 - Remove private (and undocumented) `_nwise` filter. @itchyny #3260 Language changes - Fix precedence of binding syntax against unary and binary operators. Also, allow some expressions as object values. @itchyny #3053 #3326 - This is a breaking change that may change the output of filters with binding syntax as follows. ```sh $ jq -nc '[-1 as $x | 1,$x]' [1,-1] # previously, [-1,-1] $ jq -nc '1 | . + 2 as $x | -$x' -3 # previously, -1 $ jq -nc '{x: 1 + 2, y: false or true, z: null // 3}' {"x":3,"y":true,"z":3} # previously, syntax error ``` - Support Tcl-style multiline comments. @emanuele6 #2989 ```sh #!/bin/sh -- # Can be use to do shebang scripts. # Next line will be seen as a comment be of the trailing backslash. \ exec jq ... # this jq expression will result in [1] [ 1, # \ 2 ] ``` - Fix `foreach` not to break init backtracking with `DUPN`. @kanwren #3266 ```sh $ jq -n '[1, 2] | foreach .[] as $x (0, 1; . + $x)' 1 3 2 4 ``` - Fix `reduce`/`foreach` state variable should not be reset each iteration. @itchyny #3205 ```sh $ jq -n 'reduce range(5) as $x (0; .+$x | select($x!=2))' 8 $ jq -nc '[foreach range(5) as $x (0; .+$x | select($x!=2); [$x,.])]' [[0,0],[1,1],[3,4],[4,8]] ``` - Support CRLF line breaks in filters. @itchyny #3274 - Improve performance of repeating strings. @itchyny #3272 Documentation changes - Switch the homepage to custom domain [jqlang.org](https://jqlang.org). @itchyny @owenthereal #3243 - Make latest release instead of development version the default manual. @wader #3130 - Add opengraph meta tags. @wader #3247 - Replace jqplay.org with play.jqlang.org @owenthereal #3265 - Add missing line from decNumber's licence to `COPYING`. @emanuele6 #3106 - Various document improvements. @tsibley #3322, @itchyny #3240, @jhcarl0814 #3239, @01mf02 #3184, @thaliaarchi #3199, @NathanBaulch #3173, @cjlarose #3164, @sheepster1 #3105, #3103, @kishoreinvits #3042, @jbrains #3035, @thalman #3033, @SOF3 #3017, @wader #3015, @wllm-rbnt #3002 Build improvements - Fix build with GCC 15 (C23). @emanuele6 #3209 - Fix build with `-Woverlength-strings` @emanuele6 #3019 - Fix compiler warning `type-limits` in `found_string`. @itchyny #3263 - Fix compiler error in `jv_dtoa.c` and `builtin.c`. @UlrichEckhardt #3036 - Fix warning: a function definition without a prototype is deprecated. @itchyny #3259 - Define `_BSD_SOURCE` in `builtin.c` for OpenBSD support. @itchyny #3278 - Define empty `JV_{,V}PRINTF_LIKE` macros if `__GNUC__` is not defined. @emanuele6 #3160 - Avoid `ctype.h` abuse: cast `char` to `unsigned char` first. @riastradh #3152 - Remove multiple calls to free when successively calling `jq_reset`. @Sameesunkaria #3134 - Enable IBM z/OS support. @sachintu47 #3277 - Fix insecure `RUNPATH`. @orbea #3212 - Avoid zero-length `calloc`. @itchyny #3280 - Move oniguruma and decNumber to vendor directory. @itchyny #3234 Test improvements - Run tests in C locale. @emanuele6 #3039 - Improve reliability of `NO_COLOR` tests. @dag-erling #3188 - Improve `shtest` not to fail if `JQ_COLORS` and `NO_COLOR` are already set. @SArpnt #3283 - Refactor constant folding tests. @itchyny #3233 - Make tests pass when `--disable-decnum`. @nicowilliams 6d02d53f515bf1314d644eee93ba30b0d11c7d2b - Disable Valgrind by default during testing. @itchyny #3269 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit c19684c30ac6d7d0e6a1a63e8ba3857461780aa1 Author: Adolf Belka Date: Fri Jul 4 12:14:32 2025 +0200 haproxy: Update to version 3.2.2 - Update from version 3.1.2 to 3.2.2 - Update of rootfile not required - Changelog is too large to include here. Details can be found from the CHANGELOF file from the source tarball. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 60797312ac5a16e9e55d214dbd686d2574da2d7e Author: Adolf Belka Date: Fri Jul 4 12:14:31 2025 +0200 freeradius: Update to version 3.2.7 - Update from version 3.2.6 to 3.2.7 - Update of rootfile - Changelog 3.2.7 Feature Improvements Print MD5 hash of the configuration files in debug mode This helps people track configuration changes. Add support for IPv6 to "abinary" type. The fields are the same as for "ip", but use "ipv6", and IPv6 formatted addresses. Update radclient to make it clear that Message-Authenticator is added to all Access-Request packets, even if the input file does not contain it. Add support for Subject AltName URI. Closes #5450. Add python_path_mode option to python3 module. Relax checks on OpenSSL minor versions for OpenSSL 3.x. Add API for deleting dynamic home servers. set SO_KEEPALIVE on outbound sockets, so firewalls are less likly to close TCP connections. Allow querying of statistics when home_server has src_ipaddr set. See FreeRADIUS-Stats-Server-Src-IP-Address Fixes #5483. Update dictionary "man" page. Fixes #4346. Change jlibtool to use --show-config, to avoid conflicts with clang --config. Fixes #5442. RADIUS/TLS clients now support a "tls' subsection. For connections from this client, this section is used in preference to the "listen" TLS settings. This allows a server to easily present different identities to different clients. RADIUS/TLS has been updated for TLS-PSK and TLS 1.3. Tested with radsecproxy. Bug Fixes For EAP-TLS, send TLS start without a length field Some clients refuse to do EAP-TLS when this field exists. Avoid blocking TLS sockets on corner cases during session setup. Update home server stats. Correct error message about untrusted certs. Fixes #5466. Use PyEval_RestoreThread to swap to main thread Fixes #5111. Don't run Python detach function on config check. Fix a number of issues with TLS connections and "check_client_connections = yes". Be more careful about managing the incoming queue when databases block the server. The server will still be unable to make progress, but it should crash less. Whether or not this is a good thing is unknown. Better handler single-character expansions. Fixes #2216. Correct calculation of EAP length in pre-proxy. Fixes #5486. Don't segfault when using detail listeners. Fixes #5485. Add check for Couchbase v2, rlm_couchbase won't build on v3. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 61ed7a4670e57f1e66bbdb02c53a2227eff14f6d Author: Adolf Belka Date: Fri Jul 4 12:14:18 2025 +0200 core197: Ship fontconfig Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit c58b8098864462d4d270bb3f049bd2b2504d459b Author: Adolf Belka Date: Fri Jul 4 12:14:30 2025 +0200 fontconfig: Update to version 2.17.1 - Update from version 2.16.2 to 2.17.1 - Update of rootfile - Changelog 2.17.1 Fix a heap buffer overflow meson: Add 'noinstall' to default-hinting, default-sub-pixel-rendering, bitmap-conf build options Bump the libtool version 2.17 ci: Add a subproject test case for meson test: Set sys-root to WINEPATH for MinGW ci: Correct reference to not trigger fetching a branch for main ci: clean up and add changelog to the release note through changelog API meson: don't try to call run_command for gperf on --wrap-mode=forcefallback Make sure that the debugging facilities are initialized at loading config phase Add FcConfigPerferAppFont() to allow changing the order of application fonts conf.d/65-nonlatin.conf: Rename Lohit Oriya to Lohit Odia ci: disable meson static fontations build tentatively conf.d/65-nonlatin.conf: drop the leading extra white spaces ci: quote pip's requirement specifier in the build script ci: Add -O option to the build script for convenience ci: add installation test Add a test case for FcPtrList Improve performance of FcPtrListIterInitAtLast test: make sure we have fcstdint.h before building test programs Drop FcDefaultFini() from FcFini() to fix memory leaks test: do not free FcFontSet From FcConfigGetFonts Drop the configuration path migration code Drop FcObjectFini() from FcFini() to fix memory leaks Free the mutex object only when all cache objects isn't referenced Free the mutex object only when there are no references to the default FcConfig instance Increase a reference count for default FcConfig instance with FcInit() conf.d: Add a conf to guess a generic-family for substitution test: add a pattern test test: add a test scenario for 48-guessfamily.conf test-crbug1004254: hold FcConfig during running a test in a thread Simplify FcConfigFini() Revert "test-crbug1004254: hold FcConfig during running a test in a thread" Call FcMutexUnlock only when valid instance is available Fix a memory leak in default_langs Avoid possibly invalid access on MT Add bitmap-conf build option to choose default bitmap conf doc: rewrite check-missing-doc in Python Do not hardcode a cache version Add default font paths for Android in configure script meson: Fix additional-fonts-dirs build option that not taking effect meson: rename meson_options.txt to meson.options Allow dotfiles to scan for caching Trim trailing newline in string in cache Fix a crash with broken cache ci: cleanup builddir Do not fallback decoding with UTF-16BE if no iconv support Fix padding with "und" in pattern elements ci: fix pipeline fail of subproject build on forked project ci: add some usage text to build script Bump libtool version for autotools build Fix release script Avoid conflict between dgettext macro and declaration in fcint.h fix: Skip empty entries in XDG_DATA_DIRS parsing [Fontations] Factor out fcpat.c - add Fontations dependencies Add FcPatternObjectGet* impl for CharSet and LangSet [Fontations] Improve resolution of Rust crate features [Fontations] Roll Skrifa, Read-Fonts, Font-Types [Fontations] Pattern Bindings for CharSet and LangSet [Fontations] Container and local download of testfiles Add Pytest status to Meson Summary Add Roboto Flex to font downloading script Migrate pytest testcase 431 to pre-downloaded fonts [Fontations] Enable fc-query indexing through Fontations Revert "ci: disable meson static fontations build tentatively" [Fontations] Fix Rust edition, do not require extern crate [Fontations] Add support for "foundry" pattern element [Fontations] Add support for "version" pattern element [Fontations] Clippy fix for foundries mapping [Fontations] Add attributes weight, width, slant to Pattern Cargo build improvements [Fontations] Iterate over TrueType collections and named instances Amend license headers [Fontations] Process and append font capabilities to Pattern Speculative fix for uninitialised value used in FcFontSort [Fontations] Add charset pattern element [Fontations] Add langset pattern element [Fontations] Add fontwrapper, filename and symbol elements to pattern [Fontations] Add woff wrapper and filename if file is woff or woff2 [Fontations] Roll Fontations, Skrifa to 0.31.3 [Fontations] Match name id append order to FreeType indexer Sort test pattern elements [Fontations] Add pixel size information [Fontations] Fix size element and enable more element tests [Fontations] Add spacing property [Fontations] No style element for variable instance [Fontations] Remove pattern filter from tests Parse foundry from OS/2 for table version 0 [Fontations] Assorted fixes to match FreeType indexing [Fontations] Do not combine bindings into one crate Make "retry:" label conditional on ICONV [Fontations] Clarify import of FcLangSet Rename FcFreeTypeLangSet to FcLangSetFromCharset [Fontations] Fix downstream build of indexing with Fontations fccharset.c Avoid use-after-free warning fccharset.c Avoid use-after-free warning configure.ac: drop -fno-strict-aliasing Fix heap buffer underflow in FcConfigXdgDataDirs Fix use-after-free in FcConfigGetPrgname meson: don't force installation of a static library Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/fontconfig | 5 +-- config/rootfiles/common/libjpeg | 6 ++-- config/rootfiles/common/libpng | 2 +- config/rootfiles/common/libssh | 2 +- config/rootfiles/common/nettle | 4 +-- config/rootfiles/common/pango | 6 ++-- config/rootfiles/common/pciutils | 2 +- config/rootfiles/common/sqlite | 2 +- .../core/197/filelists/aarch64/util-linux | 1 + .../{oldcore/110 => core/197}/filelists/fontconfig | 0 .../{oldcore/164 => core/197}/filelists/jq | 0 .../{oldcore/107 => core/197}/filelists/libjpeg | 0 .../{oldcore/109 => core/197}/filelists/libpng | 0 .../{oldcore/137 => core/197}/filelists/libssh | 0 .../{oldcore/125 => core/197}/filelists/lvm2 | 0 .../{oldcore/101 => core/197}/filelists/nettle | 0 .../{oldcore/100 => core/197}/filelists/openssl | 0 .../{oldcore/163 => core/197}/filelists/pango | 0 .../{oldcore/101 => core/197}/filelists/pciutils | 0 .../core/197/filelists/riscv64/util-linux | 1 + .../{oldcore/104 => core/197}/filelists/shadow | 0 .../{oldcore/125 => core/197}/filelists/sqlite | 0 .../rootfiles/core/197/filelists/x86_64/util-linux | 1 + config/rootfiles/packages/freeradius | 6 ++++ config/rootfiles/packages/taglib | 8 +++-- lfs/fontconfig | 4 +-- lfs/freeradius | 6 ++-- lfs/haproxy | 6 ++-- lfs/jq | 11 +++--- lfs/libjpeg | 20 +++++------ lfs/libpng | 4 +-- lfs/libssh | 6 ++-- lfs/lvm2 | 21 ++++++----- lfs/ncdu | 8 ++--- lfs/nettle | 4 +-- lfs/openssl | 4 +-- lfs/pango | 4 +-- lfs/pciutils | 6 ++-- lfs/shadow | 26 +++++++------- lfs/sqlite | 4 +-- lfs/taglib | 15 ++++---- lfs/util-linux | 41 +++++++++++----------- 42 files changed, 126 insertions(+), 110 deletions(-) create mode 120000 config/rootfiles/core/197/filelists/aarch64/util-linux copy config/rootfiles/{oldcore/110 => core/197}/filelists/fontconfig (100%) copy config/rootfiles/{oldcore/164 => core/197}/filelists/jq (100%) copy config/rootfiles/{oldcore/107 => core/197}/filelists/libjpeg (100%) copy config/rootfiles/{oldcore/109 => core/197}/filelists/libpng (100%) copy config/rootfiles/{oldcore/137 => core/197}/filelists/libssh (100%) copy config/rootfiles/{oldcore/125 => core/197}/filelists/lvm2 (100%) copy config/rootfiles/{oldcore/101 => core/197}/filelists/nettle (100%) copy config/rootfiles/{oldcore/100 => core/197}/filelists/openssl (100%) copy config/rootfiles/{oldcore/163 => core/197}/filelists/pango (100%) copy config/rootfiles/{oldcore/101 => core/197}/filelists/pciutils (100%) create mode 120000 config/rootfiles/core/197/filelists/riscv64/util-linux copy config/rootfiles/{oldcore/104 => core/197}/filelists/shadow (100%) copy config/rootfiles/{oldcore/125 => core/197}/filelists/sqlite (100%) create mode 120000 config/rootfiles/core/197/filelists/x86_64/util-linux Difference in files: diff --git a/config/rootfiles/common/fontconfig b/config/rootfiles/common/fontconfig index 76cee2dfd..14c4975bd 100644 --- a/config/rootfiles/common/fontconfig +++ b/config/rootfiles/common/fontconfig @@ -19,6 +19,7 @@ etc/fonts/conf.d/60-latin.conf etc/fonts/conf.d/65-fonts-persian.conf etc/fonts/conf.d/65-nonlatin.conf etc/fonts/conf.d/69-unifont.conf +etc/fonts/conf.d/70-no-bitmaps-except-emoji.conf etc/fonts/conf.d/80-delicious.conf etc/fonts/conf.d/90-synthetic.conf #etc/fonts/conf.d/README @@ -36,10 +37,9 @@ usr/bin/fc-validate #usr/include/fontconfig/fcfreetype.h #usr/include/fontconfig/fcprivate.h #usr/include/fontconfig/fontconfig.h -#usr/lib/libfontconfig.a #usr/lib/libfontconfig.so usr/lib/libfontconfig.so.1 -usr/lib/libfontconfig.so.1.15.0 +usr/lib/libfontconfig.so.1.16.0 #usr/lib/pkgconfig/fontconfig.pc #usr/share/fontconfig #usr/share/fontconfig/conf.avail @@ -70,6 +70,7 @@ usr/lib/libfontconfig.so.1.15.0 #usr/share/fontconfig/conf.avail/40-nonlatin.conf #usr/share/fontconfig/conf.avail/45-generic.conf #usr/share/fontconfig/conf.avail/45-latin.conf +#usr/share/fontconfig/conf.avail/48-guessfamily.conf #usr/share/fontconfig/conf.avail/48-spacing.conf #usr/share/fontconfig/conf.avail/49-sansserif.conf #usr/share/fontconfig/conf.avail/50-user.conf diff --git a/config/rootfiles/common/libjpeg b/config/rootfiles/common/libjpeg index 740df676a..67fa34985 100644 --- a/config/rootfiles/common/libjpeg +++ b/config/rootfiles/common/libjpeg @@ -19,7 +19,7 @@ usr/lib/libjpeg.so.8 usr/lib/libjpeg.so.8.3.2 #usr/lib/libturbojpeg.so usr/lib/libturbojpeg.so.0 -usr/lib/libturbojpeg.so.0.3.0 +usr/lib/libturbojpeg.so.0.4.0 #usr/lib/pkgconfig/libjpeg.pc #usr/lib/pkgconfig/libturbojpeg.pc #usr/share/doc/libjpeg-turbo @@ -29,7 +29,9 @@ usr/lib/libturbojpeg.so.0.3.0 #usr/share/doc/libjpeg-turbo/example.c #usr/share/doc/libjpeg-turbo/libjpeg.txt #usr/share/doc/libjpeg-turbo/structure.txt -#usr/share/doc/libjpeg-turbo/tjexample.c +#usr/share/doc/libjpeg-turbo/tjcomp.c +#usr/share/doc/libjpeg-turbo/tjdecomp.c +#usr/share/doc/libjpeg-turbo/tjtran.c #usr/share/doc/libjpeg-turbo/usage.txt #usr/share/doc/libjpeg-turbo/wizard.txt #usr/share/man/man1/cjpeg.1 diff --git a/config/rootfiles/common/libpng b/config/rootfiles/common/libpng index 1e7de2f61..5f3f801d5 100644 --- a/config/rootfiles/common/libpng +++ b/config/rootfiles/common/libpng @@ -16,7 +16,7 @@ usr/lib/libpng.so #usr/lib/libpng16.la usr/lib/libpng16.so usr/lib/libpng16.so.16 -usr/lib/libpng16.so.16.48.0 +usr/lib/libpng16.so.16.50.0 #usr/lib/pkgconfig/libpng.pc #usr/lib/pkgconfig/libpng16.pc #usr/share/man/man3/libpng.3 diff --git a/config/rootfiles/common/libssh b/config/rootfiles/common/libssh index 5b0c59fbd..77dfc71cf 100644 --- a/config/rootfiles/common/libssh +++ b/config/rootfiles/common/libssh @@ -14,5 +14,5 @@ #usr/lib/cmake/libssh/libssh-config.cmake #usr/lib/libssh.so usr/lib/libssh.so.4 -usr/lib/libssh.so.4.10.1 +usr/lib/libssh.so.4.10.2 #usr/lib/pkgconfig/libssh.pc diff --git a/config/rootfiles/common/nettle b/config/rootfiles/common/nettle index 7558ebc81..267d1eef3 100644 --- a/config/rootfiles/common/nettle +++ b/config/rootfiles/common/nettle @@ -79,9 +79,9 @@ #usr/include/nettle/yarrow.h usr/lib/libhogweed.so usr/lib/libhogweed.so.6 -usr/lib/libhogweed.so.6.10 +usr/lib/libhogweed.so.6.11 #usr/lib/libnettle.so usr/lib/libnettle.so.8 -usr/lib/libnettle.so.8.10 +usr/lib/libnettle.so.8.11 #usr/lib/pkgconfig/hogweed.pc #usr/lib/pkgconfig/nettle.pc diff --git a/config/rootfiles/common/pango b/config/rootfiles/common/pango index 2d81f222f..faf484769 100644 --- a/config/rootfiles/common/pango +++ b/config/rootfiles/common/pango @@ -41,13 +41,13 @@ usr/bin/pango-view #usr/include/pango-1.0/pango/pangoft2.h #usr/lib/libpango-1.0.so usr/lib/libpango-1.0.so.0 -usr/lib/libpango-1.0.so.0.5600.3 +usr/lib/libpango-1.0.so.0.5600.4 #usr/lib/libpangocairo-1.0.so usr/lib/libpangocairo-1.0.so.0 -usr/lib/libpangocairo-1.0.so.0.5600.3 +usr/lib/libpangocairo-1.0.so.0.5600.4 #usr/lib/libpangoft2-1.0.so usr/lib/libpangoft2-1.0.so.0 -usr/lib/libpangoft2-1.0.so.0.5600.3 +usr/lib/libpangoft2-1.0.so.0.5600.4 #usr/lib/pkgconfig/pango.pc #usr/lib/pkgconfig/pangocairo.pc #usr/lib/pkgconfig/pangofc.pc diff --git a/config/rootfiles/common/pciutils b/config/rootfiles/common/pciutils index 316ec11fa..49347ad35 100644 --- a/config/rootfiles/common/pciutils +++ b/config/rootfiles/common/pciutils @@ -1,7 +1,7 @@ bin/lspci bin/setpci lib/libpci.so.3 -lib/libpci.so.3.13.0 +lib/libpci.so.3.14.0 sbin/update-pciids #usr/include/pci #usr/include/pci/config.h diff --git a/config/rootfiles/common/sqlite b/config/rootfiles/common/sqlite index 11b42a99e..dc8e79843 100644 --- a/config/rootfiles/common/sqlite +++ b/config/rootfiles/common/sqlite @@ -3,6 +3,6 @@ usr/bin/sqlite3 #usr/include/sqlite3ext.h usr/lib/libsqlite3.so usr/lib/libsqlite3.so.0 -usr/lib/libsqlite3.so.3.50.1 +usr/lib/libsqlite3.so.3.50.2 #usr/lib/pkgconfig/sqlite3.pc #usr/share/man/man1/sqlite3.1 diff --git a/config/rootfiles/core/197/filelists/aarch64/util-linux b/config/rootfiles/core/197/filelists/aarch64/util-linux new file mode 120000 index 000000000..ac8a5a4d9 --- /dev/null +++ b/config/rootfiles/core/197/filelists/aarch64/util-linux @@ -0,0 +1 @@ +../../../common/aarch64/util-linux \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/fontconfig b/config/rootfiles/core/197/filelists/fontconfig new file mode 120000 index 000000000..6daeffdd0 --- /dev/null +++ b/config/rootfiles/core/197/filelists/fontconfig @@ -0,0 +1 @@ +../../../common/fontconfig \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/jq b/config/rootfiles/core/197/filelists/jq new file mode 120000 index 000000000..5377b9cc7 --- /dev/null +++ b/config/rootfiles/core/197/filelists/jq @@ -0,0 +1 @@ +../../../common/jq \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/libjpeg b/config/rootfiles/core/197/filelists/libjpeg new file mode 120000 index 000000000..3b1a782fb --- /dev/null +++ b/config/rootfiles/core/197/filelists/libjpeg @@ -0,0 +1 @@ +../../../common/libjpeg \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/libpng b/config/rootfiles/core/197/filelists/libpng new file mode 120000 index 000000000..8ef96e2c1 --- /dev/null +++ b/config/rootfiles/core/197/filelists/libpng @@ -0,0 +1 @@ +../../../common/libpng \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/libssh b/config/rootfiles/core/197/filelists/libssh new file mode 120000 index 000000000..ecbb67053 --- /dev/null +++ b/config/rootfiles/core/197/filelists/libssh @@ -0,0 +1 @@ +../../../common/libssh \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/lvm2 b/config/rootfiles/core/197/filelists/lvm2 new file mode 120000 index 000000000..d640870b7 --- /dev/null +++ b/config/rootfiles/core/197/filelists/lvm2 @@ -0,0 +1 @@ +../../../common/lvm2 \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/nettle b/config/rootfiles/core/197/filelists/nettle new file mode 120000 index 000000000..f0dba7ac8 --- /dev/null +++ b/config/rootfiles/core/197/filelists/nettle @@ -0,0 +1 @@ +../../../common/nettle \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/openssl b/config/rootfiles/core/197/filelists/openssl new file mode 120000 index 000000000..e011a9266 --- /dev/null +++ b/config/rootfiles/core/197/filelists/openssl @@ -0,0 +1 @@ +../../../common/openssl \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/pango b/config/rootfiles/core/197/filelists/pango new file mode 120000 index 000000000..6c37231c7 --- /dev/null +++ b/config/rootfiles/core/197/filelists/pango @@ -0,0 +1 @@ +../../../common/pango \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/pciutils b/config/rootfiles/core/197/filelists/pciutils new file mode 120000 index 000000000..aeb45e7b3 --- /dev/null +++ b/config/rootfiles/core/197/filelists/pciutils @@ -0,0 +1 @@ +../../../common/pciutils \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/riscv64/util-linux b/config/rootfiles/core/197/filelists/riscv64/util-linux new file mode 120000 index 000000000..02e095fb4 --- /dev/null +++ b/config/rootfiles/core/197/filelists/riscv64/util-linux @@ -0,0 +1 @@ +../../../common/riscv64/util-linux \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/shadow b/config/rootfiles/core/197/filelists/shadow new file mode 120000 index 000000000..c0824b7b9 --- /dev/null +++ b/config/rootfiles/core/197/filelists/shadow @@ -0,0 +1 @@ +../../../common/shadow \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/sqlite b/config/rootfiles/core/197/filelists/sqlite new file mode 120000 index 000000000..4ea569766 --- /dev/null +++ b/config/rootfiles/core/197/filelists/sqlite @@ -0,0 +1 @@ +../../../common/sqlite \ No newline at end of file diff --git a/config/rootfiles/core/197/filelists/x86_64/util-linux b/config/rootfiles/core/197/filelists/x86_64/util-linux new file mode 120000 index 000000000..3a070ee50 --- /dev/null +++ b/config/rootfiles/core/197/filelists/x86_64/util-linux @@ -0,0 +1 @@ +../../../common/x86_64/util-linux \ No newline at end of file diff --git a/config/rootfiles/packages/freeradius b/config/rootfiles/packages/freeradius index 3a82e7d9c..d69783b4f 100644 --- a/config/rootfiles/packages/freeradius +++ b/config/rootfiles/packages/freeradius @@ -65,6 +65,7 @@ etc/raddb #etc/raddb/mods-available/passwd #etc/raddb/mods-available/perl #etc/raddb/mods-available/preprocess +#etc/raddb/mods-available/proxy_rate_limit #etc/raddb/mods-available/python #etc/raddb/mods-available/python3 #etc/raddb/mods-available/radutmp @@ -259,6 +260,7 @@ etc/raddb #etc/raddb/mods-enabled/pap #etc/raddb/mods-enabled/passwd #etc/raddb/mods-enabled/preprocess +#etc/raddb/mods-enabled/proxy_rate_limit #etc/raddb/mods-enabled/radutmp #etc/raddb/mods-enabled/realm #etc/raddb/mods-enabled/replicate @@ -544,6 +546,9 @@ usr/lib/freeradius/rlm_perl.so #usr/lib/freeradius/rlm_preprocess.a #usr/lib/freeradius/rlm_preprocess.la usr/lib/freeradius/rlm_preprocess.so +#usr/lib/freeradius/rlm_proxy_rate_limit.a +#usr/lib/freeradius/rlm_proxy_rate_limit.la +usr/lib/freeradius/rlm_proxy_rate_limit.so #usr/lib/freeradius/rlm_python3.a #usr/lib/freeradius/rlm_python3.la usr/lib/freeradius/rlm_python3.so @@ -993,6 +998,7 @@ usr/share/freeradius #usr/share/freeradius/dictionary.hillstone #usr/share/freeradius/dictionary.hp #usr/share/freeradius/dictionary.huawei +#usr/share/freeradius/dictionary.huawei.v2 #usr/share/freeradius/dictionary.iana #usr/share/freeradius/dictionary.iea #usr/share/freeradius/dictionary.infinera diff --git a/config/rootfiles/packages/taglib b/config/rootfiles/packages/taglib index 1dbab71e1..3ebbae98f 100644 --- a/config/rootfiles/packages/taglib +++ b/config/rootfiles/packages/taglib @@ -71,6 +71,9 @@ usr/bin/taglib-config #usr/include/taglib/rifffile.h #usr/include/taglib/s3mfile.h #usr/include/taglib/s3mproperties.h +#usr/include/taglib/shortenfile.h +#usr/include/taglib/shortenproperties.h +#usr/include/taglib/shortentag.h #usr/include/taglib/speexfile.h #usr/include/taglib/speexproperties.h #usr/include/taglib/synchronizedlyricsframe.h @@ -78,6 +81,7 @@ usr/bin/taglib-config #usr/include/taglib/tag.h #usr/include/taglib/tag_c.h #usr/include/taglib/taglib.h +#usr/include/taglib/taglib_config.h #usr/include/taglib/taglib_export.h #usr/include/taglib/tbytevector.h #usr/include/taglib/tbytevectorlist.h @@ -120,9 +124,9 @@ usr/bin/taglib-config #usr/lib/cmake/taglib/taglib-targets.cmake #usr/lib/libtag.so usr/lib/libtag.so.2 -usr/lib/libtag.so.2.0.2 +usr/lib/libtag.so.2.1.1 #usr/lib/libtag_c.so usr/lib/libtag_c.so.2 -usr/lib/libtag_c.so.2.0.2 +usr/lib/libtag_c.so.2.1.1 #usr/lib/pkgconfig/taglib.pc #usr/lib/pkgconfig/taglib_c.pc diff --git a/lfs/fontconfig b/lfs/fontconfig index 01c211b17..6755dbda8 100644 --- a/lfs/fontconfig +++ b/lfs/fontconfig @@ -24,7 +24,7 @@ include Config -VER = 2.16.2 +VER = 2.17.1 SUMMARY = Library for configuring and customizing font access THISAPP = fontconfig-$(VER) @@ -41,7 +41,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 24fdbfc573d1a97e08fc159b91e24b77ddeb646e59ab62bb154b18f07383103a8b1e00c635299e1209fb5965dc889b8ab8f5d7228083af1a916978fa69c71136 +$(DL_FILE)_BLAKE2 = 6a25826efacd177c89613aa63b0c94312129af500fb0f5a24de3bb16146b68cc42e45d80b020096286f15b730e0cbf0e640d57024f57299caec4a31b6d178ba9 install : $(TARGET) diff --git a/lfs/freeradius b/lfs/freeradius index 4a267485f..716a8e569 100644 --- a/lfs/freeradius +++ b/lfs/freeradius @@ -26,7 +26,7 @@ include Config SUMMARY = RADIUS Server -VER = 3.2.6 +VER = 3.2.7 THISAPP = freeradius-server-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = freeradius -PAK_VER = 24 +PAK_VER = 25 DEPS = libtalloc samba @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0af7cdf7fb784f2d5019f3bcb06d1d44dca046c9a4513d780ab032367001b6a67e9ea17a3a5b4609b9d7b936647e60c96e35188ba9644c4360071ac8d021bd58 +$(DL_FILE)_BLAKE2 = cd523fbc01e82d87f0944926612223ee2acafc008f0f50447c35263b5dcdd36c8f00c54dde1102a3987b45a7e67426c99a7aee692cf59983c80ead111a2188dd install : $(TARGET) diff --git a/lfs/haproxy b/lfs/haproxy index d73c94289..005754e55 100644 --- a/lfs/haproxy +++ b/lfs/haproxy @@ -26,7 +26,7 @@ include Config SUMMARY = The Reliable, High Performance TCP/HTTP Load Balancer -VER = 3.1.2 +VER = 3.2.2 # From: https://www.haproxy.org/download/ @@ -36,7 +36,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = haproxy -PAK_VER = 31 +PAK_VER = 32 DEPS = @@ -54,7 +54,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 234a365251f226dcd1892fe89ec0dc11f505a85e08b12be1dba61dfd03808cb4cd8ad0f0548b2250379ade124314a5b5577b634bb401798666bae41fe1cc1388 +$(DL_FILE)_BLAKE2 = 8dc203c6ff0d366cba482c55bb8fc03d0b8ed7f6fee96a311efebc8a00abb5f50f087fa4b1045322ee831f3f7da0bee6eea67200083b0af5d40e8dd3f252644c install : $(TARGET) diff --git a/lfs/jq b/lfs/jq index 7f48b5d38..abd752679 100644 --- a/lfs/jq +++ b/lfs/jq @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2025 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.7.1 +VER = 1.8.1 THISAPP = jq-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = bcd5498271b710ad4e130428f04481073aa94f9ff8f4f2dcf04cf684182cbc75a329677dbbdb1b724a313cd01a880af746565d221fc6ba55408eefd0f1ac0716 +$(DL_FILE)_BLAKE2 = ef0bf6195504aa551f4dfb9d7dd713a6142ddd681d291e8ee8d90488483445676b62623009857f19de2acfda3619505ec3dce8ea993438530da2da6ff7e42cbe install : $(TARGET) @@ -77,8 +77,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) $(UPDATE_AUTOMAKE) - cd $(DIR_APP) && ./configure --prefix=/usr \ - --without-oniguruma + cd $(DIR_APP) && ./configure \ + --prefix=/usr \ + --without-oniguruma cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install @rm -rf $(DIR_APP) diff --git a/lfs/libjpeg b/lfs/libjpeg index b835bff29..a2fbea304 100644 --- a/lfs/libjpeg +++ b/lfs/libjpeg @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2025 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 3.0.4 +VER = 3.1.1 THISAPP = libjpeg-turbo-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = cf951582ce7cdf0dce39075bb1cc58f6a61fa0bdaca4874a4f06a03d2cd11775bc626c8d391d4fc76574d302a781ba47e5c90e2aa2d6a21a8b8d06712437e241 +$(DL_FILE)_BLAKE2 = 813781b1c91ed132b2d1b6e3d7834673e202765362cc9e77a6e7d4a92e89c0192312405ae8197e1c306ad3c89e23cd6dc5e418bb9f3570f110014ab79f717401 install : $(TARGET) @@ -72,13 +72,13 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && mkdir -pv build cd $(DIR_APP)/build && cmake .. \ - -DCMAKE_INSTALL_PREFIX=/usr \ - -DCMAKE_BUILD_TYPE=RELEASE \ - -DENABLE_STATIC=FALSE \ - -DCMAKE_INSTALL_DOCDIR=/usr/share/doc/libjpeg-turbo \ - -DCMAKE_INSTALL_MANDIR=/usr/share/man \ - -DCMAKE_INSTALL_DEFAULT_LIBDIR=/usr/lib \ - -DWITH_JPEG8=1 + -DCMAKE_INSTALL_PREFIX=/usr \ + -DCMAKE_BUILD_TYPE=RELEASE \ + -DENABLE_STATIC=FALSE \ + -DCMAKE_INSTALL_DOCDIR=/usr/share/doc/libjpeg-turbo \ + -DCMAKE_INSTALL_MANDIR=/usr/share/man \ + -DCMAKE_INSTALL_DEFAULT_LIBDIR=/usr/lib \ + -DWITH_JPEG8=1 cd $(DIR_APP)/build && make $(MAKETUNING) cd $(DIR_APP)/build && make install diff --git a/lfs/libpng b/lfs/libpng index a97e13916..e181be4e3 100644 --- a/lfs/libpng +++ b/lfs/libpng @@ -24,7 +24,7 @@ include Config -VER = 1.6.48 +VER = 1.6.50 THISAPP = libpng-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2aec3b237d8cf2109186518a1604d9d10e0ef6739730988e01b91f20d48dcd736a293d3c96bed719807778a68273d1bf5cc2467fc19852dbfffd39295fcbf515 +$(DL_FILE)_BLAKE2 = 2191536b4448d3a058b9dbb31f3d780959c9daf7b104550cc89e8ae984a3c9f01b86bf6c6708983989b4bfbe7232e3716b8a3b8cd3313a12c31e0623b6241d11 install : $(TARGET) diff --git a/lfs/libssh b/lfs/libssh index d7b956aa6..80eaa0219 100644 --- a/lfs/libssh +++ b/lfs/libssh @@ -24,7 +24,7 @@ include Config -VER = 0.11.1 +VER = 0.11.2 THISAPP = libssh-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 87079b4eaf66ceb77803b3d854f847b3f3fb6a67ac3bfa756ebcf8f06bf2b313e976044e0a1d81227fb5278fb04bc56f1a82877d14a6ee76bec0c690b14f38a7 +$(DL_FILE)_BLAKE2 = 7f4a97b2027e386f5bfd308b1aac1938484722d4d1bb55ce0fa2de8358bedea47955df1cb4e68679033d1a5538058422770872f2f6513a82199ff506eccfad0e install : $(TARGET) @@ -72,7 +72,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) -mkdir -pv $(DIR_APP)/build cd $(DIR_APP)/build && cmake .. \ - -DCMAKE_INSTALL_PREFIX=/usr + -DCMAKE_INSTALL_PREFIX=/usr cd $(DIR_APP)/build && make $(MAKETUNING) cd $(DIR_APP)/build && make install @rm -rf $(DIR_APP) diff --git a/lfs/lvm2 b/lfs/lvm2 index 6a283b65a..fd67dd59e 100644 --- a/lfs/lvm2 +++ b/lfs/lvm2 @@ -24,7 +24,7 @@ include Config -VER = 2.03.32 +VER = 2.03.33 THISAPP = LVM2.$(VER) DL_FILE = $(THISAPP).tgz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = ad5c7c171659557a8b2c537cdb3bd1dea9927274e861cfee7a32b9845f69564621dcf04ca055439429497f51334fe0725724b767e5dba2faf8bd943a3f66f327 +$(DL_FILE)_BLAKE2 = 89a5f4c338cae4196edf815820819e71a6d4211bdaa447ba6e71100469261d9f0d4071a70502b53e6734a8f857771a73efc9de62644b09363a807c2fa9562829 install : $(TARGET) @@ -74,15 +74,14 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) $(UPDATE_AUTOMAKE) - cd $(DIR_APP) && \ - ./configure \ - --prefix=/usr \ - --with-usrlibdir=/usr/lib \ - --enable-pkgconfig \ - --with-udevdir=/lib/udev/rules.d \ - --with-default-locking-dir=/run/lvm \ - --enable-udev_rules \ - --enable-udev_sync + cd $(DIR_APP) && ./configure \ + --prefix=/usr \ + --with-usrlibdir=/usr/lib \ + --enable-pkgconfig \ + --with-udevdir=/lib/udev/rules.d \ + --with-default-locking-dir=/run/lvm \ + --enable-udev_rules \ + --enable-udev_sync cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install # copy the tailored lvm udev rules file that will mount volumes without systemd diff --git a/lfs/ncdu b/lfs/ncdu index 935e70712..16cf43fd7 100644 --- a/lfs/ncdu +++ b/lfs/ncdu @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2025 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -27,7 +27,7 @@ include Config SUMMARY = NCurses Disk Usage -VER = 1.20 +VER = 1.22 THISAPP = ncdu-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -35,7 +35,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = ncdu -PAK_VER = 5 +PAK_VER = 6 DEPS = @@ -49,7 +49,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0bb6576ecbb3df281c67a48409db2118521760f378defd9c082f732519c9828451b77897ca49e777674ae73a5aac0fd975b94d5a95b1689cd552b5840ac3b5de +$(DL_FILE)_BLAKE2 = f330bcbdcd3774a7f9215b8725822555c95940ae7a93e7256f93c8c7aab08fc5fc80f34e9899a5ad2300b6292ff17dec21f0de468cd8c925f8a94cf66400e722 install : $(TARGET) diff --git a/lfs/nettle b/lfs/nettle index 44b4904ee..193bcb178 100644 --- a/lfs/nettle +++ b/lfs/nettle @@ -24,7 +24,7 @@ include Config -VER = 3.10.1 +VER = 3.10.2 THISAPP = nettle-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = da2e82e647904e855a0e0bd1efee3b610b33de1a722f5d652deeca083d1983c5ee66754233a0917d3bb91bb5a527a3e80cd5fe18f7c25986076b2388910995b5 +$(DL_FILE)_BLAKE2 = 2bcd54c97d793238a9c6527f0ba4851dd9e5b53c80abc1ed012ef53e9dbed1fc47c474ca7c29a2c0a989830e45f85eb61db4752dd8b8487cffc8559f43788c89 install : $(TARGET) diff --git a/lfs/openssl b/lfs/openssl index a94f325a0..c59714470 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -24,7 +24,7 @@ include Config -VER = 3.5.0 +VER = 3.5.1 THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -72,7 +72,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 9bf55ad242863123ec117296ff4d3067a27da9e0aa104a70203009536440198bacbb155c6431801e139dee6deaf6a26e0ac9a5e71fdcf963d00ba3ec7434440f +$(DL_FILE)_BLAKE2 = 172db56ac41cee78bcb5d2223c33d78baf3326d8d466115f39be414384d265ad4541e00096d3f53435f9f89119882ae587b20b1ac05dc2ace46a0d43d7cc6996 install : $(TARGET) diff --git a/lfs/pango b/lfs/pango index 3488f10ec..2f2274519 100644 --- a/lfs/pango +++ b/lfs/pango @@ -24,7 +24,7 @@ include Config -VER = 1.56.3 +VER = 1.56.4 # https://download.gnome.org/sources/pango/ @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 02b12409a0d16090ebde13e6d92b2053468e32b4b97eb0f758e05ea2ffc44141367b77cef7bb2b701785a4f9f9071d06e47a6d4974e2aa5839571fd0de19efc3 +$(DL_FILE)_BLAKE2 = 727261844a914af5229379f7a0b41c2cc05df106523189f31112e50ba01a94bf45f17eacfb3e91fe51a2ea1d09132b6021cf51b8a0986ba258e651fc48e3f468 install : $(TARGET) diff --git a/lfs/pciutils b/lfs/pciutils index a2c28025f..5d529692f 100644 --- a/lfs/pciutils +++ b/lfs/pciutils @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2025 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 3.13.0 +VER = 3.14.0 THISAPP = pciutils-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = d779ca0fd8c96a54bf81f6234d6a38eae2882d39dd1a52a508246bc46b5f4ac9318bbca20266378ec3917e72fe6ec30c47b1b5e9df4e86d3f59cbe860e2ac70e +$(DL_FILE)_BLAKE2 = 3ab270c4523cc1968d5f3a03d2564eff5560b60eb8307bafe44ee240a6636dc676fbf0a28effe3c9abc99bfc86a975aea066d634a5e5adaffb2c63ba226511d9 install : $(TARGET) diff --git a/lfs/shadow b/lfs/shadow index 950777294..f0e23408a 100644 --- a/lfs/shadow +++ b/lfs/shadow @@ -24,7 +24,7 @@ include Config -VER = 4.17.4 +VER = 4.18.0 THISAPP = shadow-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 591e16e50cbba4e8b065f62d548bd8515192b479d1b73f464be315a2cbbab3ebdae132b9e087c98c11d125ac478dada5c3bc6f2637cc1ba91c6f7fe49c74d80e +$(DL_FILE)_BLAKE2 = f165f8cdf017ed5875fbea3ece01d44f988bc85ee039186b5cd8d5cb07d666d501065ad9746abf80c2d31661b0cc687a2bc375e286a5805fa168f6826724e82e install : $(TARGET) @@ -74,17 +74,17 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && find man -name Makefile.in -exec sed -i 's/passwd\.5 / /' {} \; $(UPDATE_AUTOMAKE) cd $(DIR_APP) && ./configure \ - --libdir=/lib \ - --sysconfdir=/etc \ - --with-yescrypt \ - --enable-shared \ - --disable-static \ - --without-selinux \ - --disable-nls \ - --with-group-name-max-length=32 \ - --without-libbsd \ - --without-bcrypt \ - --without-nscd + --libdir=/lib \ + --sysconfdir=/etc \ + --with-yescrypt \ + --enable-shared \ + --disable-static \ + --without-selinux \ + --disable-nls \ + --with-group-name-max-length=32 \ + --without-libbsd \ + --without-bcrypt \ + --without-nscd cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install diff --git a/lfs/sqlite b/lfs/sqlite index a02642020..be1bd4033 100644 --- a/lfs/sqlite +++ b/lfs/sqlite @@ -24,7 +24,7 @@ include Config -VER = 3500100 +VER = 3500200 THISAPP = sqlite-autoconf-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 4c475415cddad5b86b6a7f48971d15a5b5df3685ef9514af2f435f2cba26ae8a2c942232c194a83b685a79f9edb2d748f5f38cb00af7d0c6fdd930d2b3953ea5 +$(DL_FILE)_BLAKE2 = 0e4f2da8d11173f32625bbfa9fa07c3dcccc5343c410c9c10da47c9df7eeecaf33726d8e5fddf2ef78ce51a1adf0fe605a81278e2fc0d6044264ecf40f05bdfa install : $(TARGET) diff --git a/lfs/taglib b/lfs/taglib index 527ae9e3f..3e6001aea 100644 --- a/lfs/taglib +++ b/lfs/taglib @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2025 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Audio Meta-Data Library -VER = 2.0.2 +VER = 2.1.1 THISAPP = taglib-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = taglib -PAK_VER = 5 +PAK_VER = 6 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 389af213bd467d68e2b0ca4485f51c35e660439baf2ecb7165069e5cb73589f5cf6c92d56e25780cea60e082b6fa51c5dde320dd25b8c5ef0e3b738ff0a6d4ea +$(DL_FILE)_BLAKE2 = 2661183375764cebce8393d317ffa818abab16904b4481db30b2694fedce512ac9dc0239cf03decaddabb380f59b53e043bb28e5a0071277c53442aa683ba4cf install : $(TARGET) check : $(patsubst %,$(DIR_CHK)/%,$(objects)) @@ -83,10 +83,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && mkdir -pv build cd $(DIR_APP)/build && cmake .. \ - -DCMAKE_INSTALL_PREFIX=/usr \ - -DCMAKE_BUILD_TYPE=Release \ - -DBUILD_SHARED_LIBS=ON - + -DCMAKE_INSTALL_PREFIX=/usr \ + -DCMAKE_BUILD_TYPE=Release \ + -DBUILD_SHARED_LIBS=ON cd $(DIR_APP)/build && make $(MAKETUNING) cd $(DIR_APP)/build && make install @rm -rf $(DIR_APP) diff --git a/lfs/util-linux b/lfs/util-linux index 2b8a0c2dc..5ec0fa9bc 100644 --- a/lfs/util-linux +++ b/lfs/util-linux @@ -24,7 +24,8 @@ include Config -VER = 2.41 +VER = 2.41.1 +# https://www.kernel.org/pub/linux/utils/util-linux/ THISAPP = util-linux-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -42,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b0f6d63c1365d3b065584d4d79a1716e1f036474984fc08dd6b298d7f50e66736af046404d3c9d8051fd0c9c455bcd623257ea1b967b755bee063415d91c5c21 +$(DL_FILE)_BLAKE2 = 0734e461837d825a8c0f770061cc005cef9238beea15dd900283481bcec66a971492a898cd44581e889fd1af25cf631e16a687d3f0df0a86a8caa15e7f45c935 install : $(TARGET) @@ -74,24 +75,24 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) $(UPDATE_AUTOMAKE) cd $(DIR_APP) && ./configure \ - --docdir=/usr/share/doc/util-linux \ - --disable-chfn-chsh \ - --disable-static \ - --disable-nls \ - --disable-static \ - --disable-login \ - --disable-nologin \ - --disable-su \ - --disable-setpriv \ - --disable-runuser \ - --disable-pylibmount \ - --disable-liblastlog2 \ - --enable-pg \ - --enable-hardlink \ - --without-python \ - --without-systemd \ - --without-systemdsystemunitdir \ - runstatdir=/run + --docdir=/usr/share/doc/util-linux \ + --disable-chfn-chsh \ + --disable-static \ + --disable-nls \ + --disable-static \ + --disable-login \ + --disable-nologin \ + --disable-su \ + --disable-setpriv \ + --disable-runuser \ + --disable-pylibmount \ + --disable-liblastlog2 \ + --enable-pg \ + --enable-hardlink \ + --without-python \ + --without-systemd \ + --without-systemdsystemunitdir \ + runstatdir=/run cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install hooks/post-receive -- IPFire 2.x development tree