* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. e2336a9e06b7a91b86cdc91002b0d281dbdf0849
@ 2025-08-27 10:38 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2025-08-27 10:38 UTC (permalink / raw)
To: ipfire-scm
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 66918 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via e2336a9e06b7a91b86cdc91002b0d281dbdf0849 (commit)
via 49cde8f359a93925f2ab1283fdc82a6ef5404edf (commit)
via 2a037e9d0dd839724f4607606e18fe71e8c21264 (commit)
via 433c140ddd46d7073aeb275bf6f6e2aba1251a4d (commit)
via 6d1f9a710819c3370fe2f7a23ea15c7f74d73ad2 (commit)
via d41e8f9b691b84deccd4480227432b7f46f60af9 (commit)
via 3f808c5133d97f95f388f9752ff06c65bff26a4d (commit)
via dbf605803ce8dc93013e042aebd7642470d30c4f (commit)
via eb7934977177d6b196d3656eddc20cd8da151deb (commit)
via 2e4002ec3bb27c8f8884c4157030aaffea97a1f4 (commit)
via b0dc0b6eb2198395bc650f80ac2b582331ec3c02 (commit)
via f6f1eccb1d4e59560ce0a11cd4bdf435404bb01f (commit)
via f5c652fe1911568ecdc1b6bfdf9108ad68c9d843 (commit)
via e44bdbb157a5fe819ffeafbd0c7580bdf9c0c783 (commit)
via 40f19c5a1f86804f1d24bb7a909e5f2cb8a24530 (commit)
via 49e379e59bc0993cfe6c2c9c589ed2ecfd75ec3a (commit)
via b524a408e26a6b274a4ed7ae77bbb66e02612cd3 (commit)
via 163bb0bc5f932fca92d84e99c46334a958f063b8 (commit)
via 257f15b70f9316d85369c32edb8dc044b463abaa (commit)
via 83efd1e49930705a1fcb48e0574ed466b67d36cf (commit)
via a202d2122ca8f9e90f67158e81c85664889ec09a (commit)
via 31c6b2f429482eec73c791dbdd79f6c3e6111dbb (commit)
via ac2a8ba7be1559b25ab9b99f9d9f539450903b86 (commit)
via e7b6394f7e9f643f7417aefb526b2b580db31a39 (commit)
via 7b668f5474e17d0c8ccb6d1b3318fb9ce9b3366d (commit)
from 10149ca776262592ee20e68768fb108e1500bead (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit e2336a9e06b7a91b86cdc91002b0d281dbdf0849
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:51 2025 +0200
core198: Ship whois
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 49cde8f359a93925f2ab1283fdc82a6ef5404edf
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:49:03 2025 +0200
whois: Update to version 5.6.4
- Update from version 5.6.1 to 5.6.4
- Update of rootfile not required
- Changelog
5.6.4
* Updated the .cm and .to TLD servers.
5.6.3
* Added the .sr and .мон (.xn--l1acc, Mongolia) TLD servers.
* Use readpassphrase(3) on OpenBSD and FreeBSD.
5.6.2
* Updated the .post and .in (and related IDN TLDs) TLD servers.
* Removed 1 new gTLDs which is no longer active.
* Build-Depend on libcrypt-dev. (Closes: #1106977)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 2a037e9d0dd839724f4607606e18fe71e8c21264
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:50 2025 +0200
core198: Ship sudo
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 433c140ddd46d7073aeb275bf6f6e2aba1251a4d
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:49:02 2025 +0200
sudo: Update to version 1.9.17p2
- Update from version 1.9.17p1 to 1.9.17p2
- Update of rootfile not required
- Changelog
1.9.17p2
* Fixed a bug introduced in sudo 1.9.16 that could result in sudo
sending SIGHUP to all processes on the system in certain rare
cases. The bug could manifest if sudo is running a command in
a pseudo-terminal, sudo terminates the command due to an internal
error, and the user's terminal is revoked. GitHub issue #458.
* Fixed a bug introduced in sudo 1.9.12 that caused sudo to abort
when the "intercept" and "intercept_verify" options are enabled
in sudoers and either the command line arguments or the environment
contains a string larger than the page size (usually 4096). This
only Linux affects systems that support the ptrace_readv_string()
function. GitHub issue #453.
* Fixed a bug in sudo's configure script introduced in sudo 1.9.17
that prevented mdoc-format man pages from being used on systems
without the mandoc utility. Bug #1077.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 6d1f9a710819c3370fe2f7a23ea15c7f74d73ad2
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:49:01 2025 +0200
rpcbind: Update to version 1.2.8
- Update from version 1.2.7 to 1.2.8
- Update of rootfile not required
- Changelog
1.2.8
rpcinfo: Removed a number of "old-style function definition" warnings
rpcbind: Add -v flag to print version and config
This helps to see compiled time options, e.g. remote calls enablement.
$ ./rpcbind -v
rpcbind 1.2.7
debug: no, libset debug: no, libwrap: no, nss modules: files,
remote calls: no, statedir: /run/rpcbind, systemd: yes,
user: root, warm start: no
man/rpcbind: Update list of options
-L was removed in 718ab7e, -w added in 9b1aaa6, -f added in eb36cf1.
Fixes: 718ab7e ("Removed the documentation about the non-existent '-L' flag")
Fixes: 9b1aaa6 ("Allow the warms start code to be enabled at compile
time...")
Fixes: eb36cf1 ("rpcbind: add no-fork mode")
Comment out ListenStream=@/run/rpcbind.sock
[nfs/nfs-utils/rpcbind] rpcbind: avoid dereferencing NULL from realloc()
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2173869
Move rpbind's default configuration to /run verses /var/run
Move rpcbind.lock to /run
Most of the distros have /var/run as symlink to /run.
Because /var may be a separate partition, and could even be mounted via
NFS, having to look directly to /run help to avoid issues rpcbind
startup early in boot when /var might not be available.
systemd/rpcbind.service.in: Want/After systemd-tmpfiles-setup
Add Want/After systemd-tmpfiles-setup.service. This is taken from Fedora
rpcbind-0.2.4-5.fc25 patch [1] which tried to handle bug #1401561 [2]
where /var/run/rpcbind.lock cannot be created due missing /var/run/
directory. But the suggestion to add RequiresMountFor=... was
implemented in ee569be ("Fix boot dependency in systemd service file").
But even with RequiresMountsFor=/run/rpcbind in rpcbind.service and
/run/rpcbind.lock there is error on openSUSE Tumbleweed with rpcbind
1.2.6:
rpcbind.service: Failed at step NAMESPACE spawning /usr/sbin/rpcbind:
Read-only file system
Adding systemd-tmpfiles-setup.service fixes it.
NOTE: Debian uses for this purpose remote-fs-pre.target (also works, but
systemd-tmpfiles-setup.service looks to me more specific).
openSUSE uses only After=sysinit.target as a result of #1117217 [3]
(also works).
[1] https://src.fedoraproject.org/rpms/rpcbind/blob/rawhide/f/rpcbind-0.2.4-systemd-service.patch
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1401561
[3] https://bugzilla.suse.com/show_bug.cgi?id=1117217
systemd/rpcbind.service.in: Add various hardenings options
We've been running rpcbind 1.2.6 with it in openSUSE since 2021.
NOTE: In systemd < 244 (released Nov 2019) some of these options are
unknown and will produce warnings, see
https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
man/rpcbind: Add Files section to manpage
Previous commit added 3 non-default files, mention them in man page.
systemd/rpcbind.service.in: Add few default EnvironmentFile
Add some defaults so that distros can drop patches to configure it.
* openSUSE and Fedora use /etc/sysconfig/rpcbind
https://build.opensuse.org/projects/network/packages/rpcbind/files/0001-systemd-unit-files.patch?expand=1
https://src.fedoraproject.org/rpms/rpcbind/blob/f41/f/rpcbind-0.2.3-systemd-envfile.patch
* Debian uses /etc/rpcbind.conf and /etc/default/rpcbind
https://salsa.debian.org/debian/rpcbind/-/blob/buster/debian/rpcbind.service?ref_type=heads
Add all these 3 in order:
* /etc/rpcbind.conf
* /etc/default/rpcbind
* /etc/sysconfig/rpcbind
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit d41e8f9b691b84deccd4480227432b7f46f60af9
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:49 2025 +0200
core198: Ship nano
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 3f808c5133d97f95f388f9752ff06c65bff26a4d
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:59 2025 +0200
nano: Update to version 8.6
- Update from version 8.5 to 8.6
- Update of rootfile not required
- Changelog
8.6
• The GotoLine menu accepts the prefixes ++ and -- for jumping
a number of lines forward or backward.
• Anchors are not forgotten when a line number is given on the
command line.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit dbf605803ce8dc93013e042aebd7642470d30c4f
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:48 2025 +0200
core198: Ship lsof
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit eb7934977177d6b196d3656eddc20cd8da151deb
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:58 2025 +0200
lsof: Update to version 4.99.5
- Update from version 4.99.4 to 4.99.5
- Update of rootfile not required
- Changelog
4.99.5
[linux] fix legacy linux kernel compatibility due to missing
/proc/self/ns (#329)
[linux] fix potential null pointer deference, reported by
@mono-trip (#332)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 2e4002ec3bb27c8f8884c4157030aaffea97a1f4
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:47 2025 +0200
core198: Ship libinih
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit b0dc0b6eb2198395bc650f80ac2b582331ec3c02
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:57 2025 +0200
libinih: Update to version 61
- Update from version 58 to 61
- Update of rootfile not required
- Changelog
61
add option to disable the test suite by @sage-etcher in #195
add ini_parse_string_length() that avoids internal strlen(), and ease… by
@lihuiba in #196
Fix bug where name only options are not processed after an error has
occurred by @msquire in #197
Optimise ini_rstrip() by @msquire in #198
60
test long lines by @isidroas in #190
Require C++ only for the host machine; bump project version to 59 by
@bgilbert in #191
meson: fix tests under Windows by @neheb in #192
59
INIReader: change variable visibility from private to protected by
@meiyasan in #165
Add meson test driver by @matoro in #170
Swap rstrip() and lskip() to reduce execution time of strlen() by
@isidroas in #177
Add preprocessor exclusions when INI_ALLOW_MULTILINE=0 by @isidroas in #178
tests: define only once the compiler and flag by @isidroas in #179
Test that long sections are truncated by @isidroas in #180
Add INIReader Sections and Keys methods by @Ishan09811 in #186
If a line is longer than INI_MAX_LINE, consume input up to next newline by
@benhoyt in #188
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit f6f1eccb1d4e59560ce0a11cd4bdf435404bb01f
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:46 2025 +0200
core198: Ship hwdata
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit f5c652fe1911568ecdc1b6bfdf9108ad68c9d843
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:56 2025 +0200
hwdata: Update to version 0.398
- Update from version 0.396 to 0.398
- Update of rootfile not required
- Changelog
0.398
Update usb and vendor ids
0.397
Update usb and vendor ids
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit e44bdbb157a5fe819ffeafbd0c7580bdf9c0c783
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:45 2025 +0200
core198: Ship harfbuzz
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 40f19c5a1f86804f1d24bb7a909e5f2cb8a24530
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:55 2025 +0200
harfbuzz: Update to version 11.4.3
- Update from version 11.2.1 to 11.4.3
- Update of rootfile
- Changelog
11.4.3
- Make shaping fail much faster for certain malformed fonts (e.g., those that
trigger infinite recursion).
- Fix undefined behaviour introduced in 11.4.2.
- Fix detection of the “Cambria Math” font when fonts are scaled, so the
workaround for the bad `MATH` table constant is applied.
11.4.2
- Various performance and memory usage improvements.
- The `hb-shape` command line tool can now be built with the amalgamated
`harfbuzz.cc` source.
- Fix regression in handling version 2 of `avar` table.
- Increase various buffer length limits for better handling of fonts that
generate huge number of glyphs per codepoint (e.g. Noto Sans Duployan)
- Improvements to the harfrust shaper for more accurate testing.
11.4.1
- Fix clang compiler warnings.
11.4.0
- General shaping and subsetting speedups.
- Fix in Graphite shaping backend when glyph advances became negative.
- Subsetting improvements, pruning empty mark-attachment lookups.
- Don't use the macro name `_S`, which is reserved by system liberaries.
- Build fixes and speedup.
- Add a `kbts` shaping backend that calls into the `kb_text_shape`
single-header shaping library. This is purely for testing and
performance evaluation and we do NOT recommend using it for any
other purposes.
11.3.3
- Fix but in vertical shaping of fonts without the vmtx table.
11.3.2
- Fix build with non-compliant C++11 compilers that don't recognize
the "and" keyword.
11.3.1
- Fix crasher in the glyph_v_origin function introduced in
11.3.0.
11.3.0
- Speed up handling fonts with very large number of variations:
- Drawing by up to 40%.
- Calculating glyph extents by up to 15%.
- Getting horizontal glyph advances by up to 45%.
- Speed up getting horizontal and vertical glyph advances by up to 24%.
- Significantly speed up vertical text shaping.
- Various documentation improvements.
- Various build improvements.
- Various subsetting improvements.
- Various improvements to Rust font functions (fontations integration) and shaper (HarfRust integration).
- Rename harfruzz option and shaper to harfrust following upstream rename.
- Implement hb_face_reference_blob() for DirectWrite font functions.
- New API:
+hb_font_get_glyph_origins_func_t
+hb_font_get_glyph_h_origins_func_t
+hb_font_get_glyph_v_origins_func_t
+hb_font_funcs_set_glyph_h_origins_func()
+hb_font_funcs_set_glyph_v_origins_func()
+hb_font_get_glyph_h_origins()
+hb_font_get_glyph_v_origins()
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 49e379e59bc0993cfe6c2c9c589ed2ecfd75ec3a
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:44 2025 +0200
core198: Ship gdbm
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit b524a408e26a6b274a4ed7ae77bbb66e02612cd3
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:53 2025 +0200
gdbm: Update to version 1.26
- Update from version 1.25 to 1.26
- Update of rootfile not required
- Changelog
1.26
* Fixed build on musl libc
* Fixed build on MacOS
* Improved testsuite
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 163bb0bc5f932fca92d84e99c46334a958f063b8
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:43 2025 +0200
core198: Ship btrfs-progs
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 257f15b70f9316d85369c32edb8dc044b463abaa
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:42 2025 +0200
btrfs-progs: Update to version 6.16
- Update from version 6.15 to 6.16
- Update of rootfile not required
- Changelog
6.16
* mkfs:
* print label of existing filesystem if attempting to overwrite
* remove note about changed defaults in 6.15
* discard support detection uses the ioctl and not sysfs, this should
work for all types of block devices
* device usage: fix printing units of partition sizes, used to be in 512B
sectors
* defrag: new option --nocomp to request no compression (kernel 6.17)
* check: detect missing orphan items for deleted subvolumes
* subvol delete: don't print warning if filesystem is mounted with
user_subvol_rm_allowed
* build: add build support for Android
* other:
* cleanups and refactoring
* sync sources with kernel
* documentation updates
* CI and test updates
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 83efd1e49930705a1fcb48e0574ed466b67d36cf
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed Aug 27 10:34:19 2025 +0000
core198: Ship BIND
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit a202d2122ca8f9e90f67158e81c85664889ec09a
Author: Matthias Fischer <matthias.fischer@ipfire.org>
Date: Tue Aug 26 17:55:14 2025 +0200
bind: Update to 9.20.12
For details see:
https://downloads.isc.org/isc/bind9/9.20.12/doc/arm/html/notes.html#notes-for-bind-9-20-12
"Notes for BIND 9.20.12
New Features
Support for parsing DSYNC records has been added.
These records are used for discovering the receiver endpoint for DNS
notification messages. For more information, see
draft-ietf-dnsop-generalized-notify-09. [GL #5440]
Feature Changes
Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS digest
type 1.
RSASHA1 and RSASHA1-NSEC-SHA1 DNSKEY algorithms have been deprecated by
the IETF and should no longer be used for DNSSEC. DS digest type 1
(SHA1) has also been deprecated in BIND 9. Validators are now expected
to treat these algorithms and digest as unknown, resulting in some
zones being treated as insecure when they were previously treated as
secure. Warnings have been added to named and tools when these
algorithms and this digest are being used for signing.
Zones signed with RSASHA1 or RSASHA1-NSEC-SHA1 should be migrated to a
different DNSKEY algorithm.
Zones with DS or CDS records with digest type 1 (SHA1) should be
updated to use a different digest type (e.g. SHA256) and the digest
type 1 records should be removed. [GL #5358]
Bug Fixes
Stale RRsets in a CNAME chain were not always refreshed.
Previously, with serve-stale enabled and a CNAME chain that contained a
stale RRset, the refresh query didn’t always properly refresh the stale
RRsets. This has been fixed. [GL #5243]
Add RPZ extended DNS error for zones with a CNAME override policy
configured.
Previously, when the zone was configured with a CNAME override policy,
or the response policy zone contained a wildcard CNAME, the extended
DNS error code was not added. This has been fixed. [GL #5342]
Fix dig issues.
When used with the +keepopen option, dig could terminate unexpectedly
in rare situations. Additionally, dig could hang and fail to shutdown
properly when interrupted during a query. These have been fixed. [GL
#5381]
Log dropped or slipped responses in the query-errors category.
Responses which were dropped or slipped because of Response Rate
Limiting (RRL) were logged in the rate-limit category instead of the
query-errors category, as documented in the ARM. This has been fixed.
[GL #5388]
synth-from-dnssec was not working in some scenarios.
Aggressive use of DNSSEC-Validated cache with NSEC was not working in
scenarios when no parent NSEC was in cache. This has been fixed. [GL
#5422]
Clean enough memory when adding new ADB names/entries under memory
pressure.
The ADB memory cleaning is opportunistic even when BIND is under memory
pressure (in the overmem condition). named now ensures that the
assigned memory limit is not exceeded by releasing twice the amount of
memory allocated for each new ADB name/entry when under memory
pressure. [GL !10637]
Prevent spurious validation failures.
Under rare circumstances, validation could fail if multiple clients
simultaneously iterated the same set of DNSSEC signatures. This has
been fixed. [GL #3014]"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 31c6b2f429482eec73c791dbdd79f6c3e6111dbb
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:49:04 2025 +0200
wsdd: Update to version 0.9
- Update from version 0.8 to 0.9
- Update of rootfile not required
- Changelog
0.9
Added
- Add command line argument to set source port for multicast message for better
firewall interoperability (#216)
- Add initial support for SunOS (#223), without dynamic address/interface
monitoring. Thanks to Carsten Grzemba.
- Add Socket-activated systemd service (#218). Thanks to Alessandro Astone.
Changed
- Devices are now recorded based on their URI provided in the endpoint
reference address, which is not neccessarily a UUID. This also affects API
(see #226).
- make `/etc/default/wsdd` optional for systemd (see #212)
- Remove support for Python 3.7 and 3.8 in Github workflows.
Fixed
- Clean conection turn-down for Python pre-3.13. Thanks to Alessandro Astone
- Handle TimeoutError in metadata exchange.
- Proper handling of endpoint addresses as URIs, not UUIDs, see #226.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit ac2a8ba7be1559b25ab9b99f9d9f539450903b86
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:49:00 2025 +0200
postfix: Update to version 3.10.4
- Update from version 3.10.2 to 3.10.4
- Update of rootfile not required
- Changelog
3.10.4
Fixes for postscreen(8):
Bugfix (defect introduced: postfix-2.2, date 20050203): after detecting a
lookup table change, and after starting a new postscreen process, the old
postscreen process logged an ENOTSOCK error while attempting to accept a
connection on a socket that it was no longer listening on. This error was
introduced first in the multi_server skeleton code, and was five years later
duplicated in the event_server skeleton that was created for postscreen.
Problem reported by Florian Piekert.
Bugfix (defect introduced: Postfix 2.8, date 20101230): after detecting a cache
table change and before starting a new postscreen process, the old postscreen
process did not close the postscreen_cache_map, and therefore kept an
exclusive lock that could prevent a new postscreen process from starting.
Problem reported by Florian Piekert.
Fixes for tlsproxy(8):
Bugfix (defect introduced: Postfix 3.7): incorrect backwards compatible support
for the legacy configuration parameters tlsproxy_client_level and
tlsproxy_client_policy. This disabled the tlsproxy TLS client role when a
legacy parameter was set (instead of the newer tlsproxy_client_security_level
or tlsproxy_client_policy_maps). Reported by John Doe, diagnosed by Viktor
Dukhovni.
Bugfix (defect introduced: Postfix 3.4): with the TLS client role disabled by
configuration, the tlsproxy daemon dereferenced a null pointer while handling
a tlsproxy client request. Reported by John Doe.
Reducing process churn: Postfix daemons no longer automatically restart after a
btree:, dbm:, hash:, lmdb:, or sdbm: table file modification time change, when
they opened that table for writing.
Portability: deleted an <openssl/engine.h> build dependency, because the feature
is being removed from OpenSSL, and Postfix no longer needs it.
Cleanup: with "tls_required_enable = yes", the Postfix SMTP client will no longer
maintain TLSRPT statistics for messages that contain a "TLS-Required: no"
header. This can prevent TLSRPT notifications for TLSRPT notifications.
Bugfix (defect introduced: Postfix 3.6, date 20200710): Postfix TLS client code
logged "Untrusted TLS connection" (wrong) instead of "Trusted TLS connection"
(right), for a new or resumed TLS session, when a server offered a trusted
(valid PKI trust chain) certificate that did not match the expected server name
pattern. Fix by Viktor Dukhovni.
3.10.3
This release fixes defects that were introduced in Postfix 3.10. These were
fixed first in the Postfix 3.11 unstable release.
The defects exist only with the default configuration "tls_required_enable = yes".
Bugfix (defect introduced: Postfix-3.10, date 20250117): include the
current TLS security level in the SMTP connection cache lookup key for
lookups by next-hop destination, to avoid reusing the same SMTP
connection when sending messages with and without a "TLS-Required: no"
header. Likewise, include the current TLS security level in the TLS
session lookup key, to avoid reusing the same TLS session info when
sending messages with and without a "TLS-Required: no" header.
Bugfix (defect introduced: Postfix-3.10, date 20250117): the Postfix SMTP
client attempted to look up TLSA records even with "TLS-Required: no".
This could result in unnecessary failures. Fix by Viktor Dukhovni &
Wietse.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit e7b6394f7e9f643f7417aefb526b2b580db31a39
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:54 2025 +0200
git: Update to version 2.51.0
- Update from version 2.50.1 to 2.51.0
- Update of rootfile not required
- Changelog
2.51.0
UI, Workflows & Features
* Userdiff patterns for the R language have been added.
* Documentation for "git send-email" has been updated with a bit more
credential helper and OAuth information.
* "git cat-file --batch" learns to understand %(objectmode) atom to
allow the caller to tell missing objects (due to repository
corruption) and submodules (whose commit objects are OK to be
missing) apart.
* "git diff --no-index dirA dirB" can limit the comparison with
pathspec at the end of the command line, just like normal "git
diff".
* "git subtree" (in contrib/) learned to grok GPG signing its commits.
* "git whatchanged" that is longer to type than "git log --raw"
which is its modern rough equivalent has outlived its usefulness
more than 10 years ago. Plan to deprecate and remove it.
* An interchange format for stash entries is defined, and subcommand
of "git stash" to import/export has been added.
* "git merge/pull" has been taught the "--compact-summary" option to
use the compact-summary format, intead of diffstat, when showing
the summary of the incoming changes.
* "git imap-send" has been broken for a long time, which has been
resurrected and then taught to talk OAuth2.0 etc.
* Some error messages from "git imap-send" has been updated.
* When "git daemon" sees a signal while attempting to accept() a new
client, instead of retrying, it skipped it by mistake, which has
been corrected.
* The reftable ref backend has matured enough; Git 3.0 will make it
the default format in a newly created repositories by default.
* "netrc" credential helper has been improved to understand textual
service names (like smtp) in addition to the numeric port numbers
(like 25).
* Lift the limitation to use changed-path filter in "git log" so that
it can be used for a pathspec with multiple literal paths.
* Clean up the way how signature on commit objects are exported to
and imported from fast-import stream.
* Remove unsupported, unused, and unsupportable old option from "git
log".
* Document recently added "git imap-send --list" with an example.
* "git pull" learned to pay attention to pull.autostash configuration
variable, which overrides rebase/merge.autostash.
* "git for-each-ref" learns "--start-after" option to help
applications that want to page its output.
* "git switch" and "git restore" are declared to be no longer
experimental.
* "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased to
'bar'" and then went on to run "git foo -h baz", which was
unexpected. Tighten the rule so that alias expansion is reported
only when "-h" is the sole option.
Performance, Internal Implementation, Development Support etc.
* "git pack-objects" learned to find delta bases from blobs at the
same path, using the --path-walk API.
* CodingGuidelines update.
* Add settings for Solaris 10 & 11.
* Meson-based build/test framework now understands TAP output
generated by our tests.
* "Do not explicitly initialize to zero" rule has been clarified in
the CodingGuidelines document.
* A test helper "test_seq" function learned the "-f <fmt>" option,
which allowed us to simplify a lot of test scripts.
* A lot of stale stuff has been removed from the contrib/ hierarchy.
* "git push" and "git fetch" are taught to update refs in batches to
gain performance.
* Some code paths in "git prune" used to ignore the passed-in
repository object and used the `the_repository` singleton instance
instead, which has been corrected.
* Update ".clang-format" and ".editorconfig" to match our style guide
a bit better.
* "make coccicheck" succeeds even when spatch made suggestions, which
has been updated to fail in such a case.
* Code clean-up around object access API.
* Define .precision to more canned parse-options type to avoid bugs
coming from using a variable with a wrong type to capture the
parsed values.
* Flipping the default hash function to SHA-256 at Git 3.0 boundary
is planned.
* Declare weather-balloon we raised for "bool" type 18 months ago a
success and officially allow using the type in our codebase.
* GIT_TEST_INSTALLED was not honored in the recent topic related to
SHA256 hashes, which has been corrected.
* The pop_most_recent_commit() function can have quite expensive
worst case performance characteristics, which has been optimized by
using prio-queue data structure.
* Move structure definition from unrelated header file to where it
belongs.
* To help our developers, document what C99 language features are
being considered for adoption, in addition to what past experiments
have already decided.
* The reftable unit tests are now ported to the "clar" unit testing
framework.
* Redefine where the multi-pack-index sits in the object subsystem,
which recently was restructured to allow multiple backends that
support a single object source that belongs to one repository. A
MIDX does span multiple "object sources".
* Reduce implicit assumption and dependence on the_repository in the
object-file subsystem.
Bug Fixes
* A memory-leak in an error code path has been plugged.
(merge 7082da85cb ly/commit-graph-graph-write-leakfix later to maint).
* A memory-leak in an error code path has been plugged.
(merge aedebdb6b9 ly/fetch-pack-leakfix later to maint).
* Some leftover references to documentation source files that no
longer exist, due to recent ".txt" -> ".adoc" renaming, have been
corrected.
(merge 3717a5775a jw/doc-txt-to-adoc-refs later to maint).
* "git stash -p <pathspec>" improvements.
(merge 468817bab2 pw/stash-p-pathspec-fixes later to maint).
* "git send-email" incremented its internal message counter when a
message was edited, which made logic that treats the first message
specially misbehave, which has been corrected.
(merge 2cc27b3501 ag/send-email-edit-threading-fix later to maint).
* "git stash" recorded a wrong branch name when submodules are
present in the current checkout, which has been corrected.
(merge ffb36c64f2 kj/stash-onbranch-submodule-fix later to maint).
* When asking to apply mailmap to both author and committer field
while showing a commit object, the field that appears later was not
correctly parsed and replaced, which has been corrected.
(merge abf94a283f sa/multi-mailmap-fix later to maint).
* "git maintenance" lacked the care "git gc" had to avoid holding
onto the repository lock for too long during packing refs, which
has been remedied.
(merge 1b5074e614 ps/maintenance-ref-lock later to maint).
* Avoid regexp_constraint and instead use comparison_constraint when
listing functions to exclude from application of coccinelle rules,
as spatch can be built with different regexp engine X-<.
(merge f2ad545813 jc/cocci-avoid-regexp-constraint later to maint).
* Updating submodules from the upstream did not work well when
submodule's HEAD is detached, which has been improved.
(merge ca62f524c1 jk/submodule-remote-lookup-cleanup later to maint).
* Remove unnecessary check from "git daemon" code.
(merge 0c856224d2 cb/daemon-fd-check-fix later to maint).
* Use of sysctl() system call to learn the total RAM size used on
BSDs has been corrected.
(merge 781c1cf571 cb/total-ram-bsd-fix later to maint).
* Drop FreeBSD 4 support and declare that we support only FreeBSD 12
or later, which has memmem() supported.
(merge 0392f976a7 bs/config-mak-freebsd later to maint).
* A diff-filter with negative-only specification like "git log
--diff-filter=d" did not trigger correctly, which has been fixed.
(merge 375ac087c5 jk/all-negative-diff-filter-fix later to maint).
* A failure to open the index file for writing due to conflicting
access did not state what went wrong, which has been corrected.
(merge 9455397a5c hy/read-cache-lock-error-fix later to maint).
* Tempfile removal fix in the codepath to sign commits with SSH keys.
(merge 4498127b04 re/ssh-sign-buffer-fix later to maint).
* Code and test clean-up around string-list API.
(merge 6e5b26c3ff sj/string-list later to maint).
* "git apply -N" should start from the current index and register
only new files, but it instead started from an empty index, which
has been corrected.
(merge 2b49d97fcb rp/apply-intent-to-add-fix later to maint).
* Leakfix with a new and a bit invasive test on pack-bitmap files.
(merge bfd5522e98 ly/load-bitmap-leakfix later to maint).
* "git fetch --prune" used to be O(n^2) expensive when there are many
refs, which has been corrected.
(merge 87d8d8c5d0 ph/fetch-prune-optim later to maint).
* When a ref creation at refs/heads/foo/bar fails, the files backend
now removes refs/heads/foo/ if the directory is otherwise not used.
(merge a3a7f20516 ps/refs-files-remove-empty-parent later to maint).
* "pack-objects" has been taught to avoid pointing into objects in
cruft packs from midx.
* "git remote" now detects remote names that overlap with each other
(e.g., remote nickname "outer" and "outer/inner" are used at the
same time), as it will lead to overlapping remote-tracking
branches.
(merge a5a727c448 jk/remote-avoid-overlapping-names later to maint).
* The gpg.program configuration variable, which names a pathname to
the (custom) GPG compatible program, can now be spelled with ~tilde
expansion.
(merge 7d275cd5c0 jb/gpg-program-variable-is-a-pathname later to maint).
* Our <sane-ctype.h> header file relied on that the system-supplied
<ctype.h> header is not later included, which would override our
macro definitions, but "amazon linux" broke this assumption. Fix
this by preemptively including <ctype.h> near the beginning of
<sane-ctype.h> ourselves.
(merge 9d3b33125f ps/sane-ctype-workaround later to maint).
* Clean-up compat/bswap.h mess.
(merge f4ac32c03a ss/compat-bswap-revamp later to maint).
* Meson-based build did not handle libexecdir setting correctly,
which has been corrected.
(merge 056dbe8612 rj/meson-libexecdir-fix later to maint).
* Document that we do not require "real" name when signing your
patches off.
(merge 1f0fed312a bc/contribution-under-non-real-names later to maint).
* "git commit" that concludes a conflicted merge failed to notice and remove
existing comment added automatically (like "# Conflicts:") when the
core.commentstring is set to 'auto'.
(merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint).
* "git rebase -i" with bogus rebase.instructionFormat configuration
failed to produce the todo file after recording the state files,
leading to confused "git status"; this has been corrected.
(merge ade14bffd7 ow/rebase-verify-insn-fmt-before-initializing-state later to maint).
* A few file descriptors left unclosed upon program completion in a
few test helper programs are now closed.
(merge 0f1b33815b hl/test-helper-fd-close later to maint).
* Interactive prompt code did not correctly strip CRLF from the end
of line on Windows.
(merge 711a20827b js/prompt-crlf-fix later to maint).
* The config API had a set of convenience wrapper functions that
implicitly use the_repository instance; they have been removed and
inlined at the calling sites.
* "git add/etc -p" now honor the diff.context configuration variable,
and also they learn to honor the -U<n> command-line option.
(merge 2b3ae04011 lm/add-p-context later to maint).
* The case where a new submodule takes a path where there used to be a
completely different subproject is now dealt with a bit better than
before.
(merge 5ed8c5b465 kj/renamed-submodule later to maint).
* The deflate codepath in "git archive --format=zip" had a
longstanding bug coming from misuse of zlib API, which has been
corrected.
* Other code cleanup, docfix, build fix, etc.
(merge b257adb571 lo/my-first-ow-doc-update later to maint).
(merge 8b34b6a220 ly/sequencer-update-squash-is-fixup-only later to maint).
(merge 5dceb8bd05 ly/do-not-localize-bug-messages later to maint).
(merge 61372dd613 ly/commit-buffer-reencode-leakfix later to maint).
(merge 81cd1eef7d ly/pack-bitmap-root-leakfix later to maint).
(merge bfc9f9cc64 ly/submodule-update-failure-leakfix later to maint).
(merge 65dff89c6b ma/doc-diff-cc-headers later to maint).
(merge efb61591ee jm/bundle-uri-debug-output-to-fp later to maint).
(merge a3d278bb64 ly/prepare-show-merge-leakfix later to maint).
(merge 1fde1c5daf ac/preload-index-wo-the-repository later to maint).
(merge 855cfc65ae rm/t2400-modernize later to maint).
(merge 2939494284 ly/run-builtin-use-passed-in-repo later to maint).
(merge ff73f375bb jg/mailinfo-leakfix later to maint).
(merge 996f14c02b jj/doc-branch-markup-fix later to maint).
(merge 1e77de1864 cb/ci-freebsd-update-to-14.3 later to maint).
(merge b0e9d25865 jk/fix-leak-send-pack later to maint).
(merge f3a9558c8c bs/remote-helpers-doc-markup-fix later to maint).
(merge c4e9775c60 kh/doc-config-subcommands later to maint).
(merge de404249ab ps/perlless-test-fixes later to maint).
(merge 953049eed8 ts/merge-orig-head-doc-fix later to maint).
(merge 0c83bbc704 rj/freebsd-sysinfo-build-fix later to maint).
(merge ad7780b38f ps/doc-pack-refs-auto-with-files-backend-fix later to maint).
(merge f4fa8a3687 rh/doc-glob-pathspec-fix later to maint).
(merge b27be108c8 ja/doc-git-log-markup later to maint).
(merge 14d7583beb pw/config-kvi-remove-path later to maint).
(merge f31abb421d jc/do-not-scan-argv-without-parsing later to maint).
(merge 26552cb62a jk/unleak-reflog-expire-entry later to maint).
(merge 339d95fda9 jc/ci-print-test-failures-fix later to maint).
(merge 8c3add51a8 cb/meson-avoid-broken-macos-pcre2 later to maint).
(merge 5247da07b8 ps/meson-clar-decls-fix later to maint).
(merge f3ef347bb2 ch/t7450-recursive-clone-test-fix later to maint).
(merge 4ac3302a1a jc/doc-release-vs-clear later to maint).
(merge 3bdd897413 ms/meson-with-ancient-git-wo-ls-files-dedup later to maint).
(merge cca758d324 kh/doc-fast-import-historical later to maint).
(merge 9b0781196a jc/test-hashmap-is-still-here later to maint).
(merge 1bad05bacc jk/revert-squelch-compiler-warning later to maint).
(merge 3a7e783d9c dl/squelch-maybe-uninitialized later to maint).
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 7b668f5474e17d0c8ccb6d1b3318fb9ce9b3366d
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Aug 26 20:48:52 2025 +0200
fping: Update to version 5.4
- Update from version 5.3 to 5.4
- Update of rootfile not required
- Changelog
5.4
Bugfixes
- Memory allocation safety checks for event storage (thanks David.A for bug report)
- Fix off-by-one boundary check in seqmap code (thanks David.A for bug report)
- The minimum value for the period (-p flag) is now 0.001 milliseconds,
since it probably never makes sense to use a smaller value, and to avoid doing
a very large memory allocation for event storage.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/common/bind | 11 ++++++-----
config/rootfiles/common/harfbuzz | 8 ++++----
config/rootfiles/{oldcore/100 => core/198}/filelists/bind | 0
.../{oldcore/186 => core/198}/filelists/btrfs-progs | 0
config/rootfiles/{oldcore/164 => core/198}/filelists/gdbm | 0
.../{oldcore/163 => core/198}/filelists/harfbuzz | 0
.../rootfiles/{oldcore/132 => core/198}/filelists/hwdata | 0
.../rootfiles/{oldcore/168 => core/198}/filelists/libinih | 0
config/rootfiles/{oldcore/170 => core/198}/filelists/lsof | 0
config/rootfiles/{oldcore/167 => core/198}/filelists/nano | 0
config/rootfiles/{oldcore/112 => core/198}/filelists/sudo | 0
.../rootfiles/{oldcore/162 => core/198}/filelists/whois | 0
lfs/bind | 4 ++--
lfs/btrfs-progs | 4 ++--
lfs/fping | 6 +++---
lfs/gdbm | 4 ++--
lfs/git | 6 +++---
lfs/harfbuzz | 4 ++--
lfs/hwdata | 4 ++--
lfs/libinih | 10 ++++++----
lfs/lsof | 6 +++---
lfs/nano | 4 ++--
lfs/postfix | 6 +++---
lfs/rpcbind | 15 +++++++--------
lfs/sudo | 4 ++--
lfs/whois | 4 ++--
lfs/wsdd | 8 ++++----
27 files changed, 55 insertions(+), 53 deletions(-)
copy config/rootfiles/{oldcore/100 => core/198}/filelists/bind (100%)
copy config/rootfiles/{oldcore/186 => core/198}/filelists/btrfs-progs (100%)
copy config/rootfiles/{oldcore/164 => core/198}/filelists/gdbm (100%)
copy config/rootfiles/{oldcore/163 => core/198}/filelists/harfbuzz (100%)
copy config/rootfiles/{oldcore/132 => core/198}/filelists/hwdata (100%)
copy config/rootfiles/{oldcore/168 => core/198}/filelists/libinih (100%)
copy config/rootfiles/{oldcore/170 => core/198}/filelists/lsof (100%)
copy config/rootfiles/{oldcore/167 => core/198}/filelists/nano (100%)
copy config/rootfiles/{oldcore/112 => core/198}/filelists/sudo (100%)
copy config/rootfiles/{oldcore/162 => core/198}/filelists/whois (100%)
Difference in files:
diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index fb6220c47..538f4a6dd 100644
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -28,6 +28,7 @@ usr/bin/nsupdate
#usr/include/dns/dnstap.h
#usr/include/dns/ds.h
#usr/include/dns/dsdigest.h
+#usr/include/dns/dsync.h
#usr/include/dns/dyndb.h
#usr/include/dns/ecs.h
#usr/include/dns/ede.h
@@ -240,18 +241,18 @@ usr/bin/nsupdate
#usr/include/ns/types.h
#usr/include/ns/update.h
#usr/include/ns/xfrout.h
-usr/lib/libdns-9.20.11.so
+usr/lib/libdns-9.20.12.so
#usr/lib/libdns.la
#usr/lib/libdns.so
-usr/lib/libisc-9.20.11.so
+usr/lib/libisc-9.20.12.so
#usr/lib/libisc.la
#usr/lib/libisc.so
-usr/lib/libisccc-9.20.11.so
+usr/lib/libisccc-9.20.12.so
#usr/lib/libisccc.la
#usr/lib/libisccc.so
-usr/lib/libisccfg-9.20.11.so
+usr/lib/libisccfg-9.20.12.so
#usr/lib/libisccfg.la
#usr/lib/libisccfg.so
-usr/lib/libns-9.20.11.so
+usr/lib/libns-9.20.12.so
#usr/lib/libns.la
#usr/lib/libns.so
diff --git a/config/rootfiles/common/harfbuzz b/config/rootfiles/common/harfbuzz
index 1b129edcf..08603435f 100644
--- a/config/rootfiles/common/harfbuzz
+++ b/config/rootfiles/common/harfbuzz
@@ -47,16 +47,16 @@ usr/include/harfbuzz/hb-script-list.h
#usr/lib/cmake/harfbuzz/harfbuzz-config.cmake
#usr/lib/libharfbuzz-cairo.so
usr/lib/libharfbuzz-cairo.so.0
-usr/lib/libharfbuzz-cairo.so.0.61121.0
+usr/lib/libharfbuzz-cairo.so.0.61143.0
#usr/lib/libharfbuzz-gobject.so
usr/lib/libharfbuzz-gobject.so.0
-usr/lib/libharfbuzz-gobject.so.0.61121.0
+usr/lib/libharfbuzz-gobject.so.0.61143.0
#usr/lib/libharfbuzz-subset.so
usr/lib/libharfbuzz-subset.so.0
-usr/lib/libharfbuzz-subset.so.0.61121.0
+usr/lib/libharfbuzz-subset.so.0.61143.0
#usr/lib/libharfbuzz.so
usr/lib/libharfbuzz.so.0
-usr/lib/libharfbuzz.so.0.61121.0
+usr/lib/libharfbuzz.so.0.61143.0
#usr/lib/pkgconfig/harfbuzz-cairo.pc
#usr/lib/pkgconfig/harfbuzz-gobject.pc
#usr/lib/pkgconfig/harfbuzz-subset.pc
diff --git a/config/rootfiles/core/198/filelists/bind b/config/rootfiles/core/198/filelists/bind
new file mode 120000
index 000000000..48a0ebaef
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/bind
@@ -0,0 +1 @@
+../../../common/bind
\ No newline at end of file
diff --git a/config/rootfiles/core/198/filelists/btrfs-progs b/config/rootfiles/core/198/filelists/btrfs-progs
new file mode 120000
index 000000000..d7a2f6f52
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/btrfs-progs
@@ -0,0 +1 @@
+../../../common/btrfs-progs
\ No newline at end of file
diff --git a/config/rootfiles/core/198/filelists/gdbm b/config/rootfiles/core/198/filelists/gdbm
new file mode 120000
index 000000000..ecf63bf59
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/gdbm
@@ -0,0 +1 @@
+../../../common/gdbm
\ No newline at end of file
diff --git a/config/rootfiles/core/198/filelists/harfbuzz b/config/rootfiles/core/198/filelists/harfbuzz
new file mode 120000
index 000000000..ffe1e0d0b
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/harfbuzz
@@ -0,0 +1 @@
+../../../common/harfbuzz
\ No newline at end of file
diff --git a/config/rootfiles/core/198/filelists/hwdata b/config/rootfiles/core/198/filelists/hwdata
new file mode 120000
index 000000000..ced911666
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/hwdata
@@ -0,0 +1 @@
+../../../common/hwdata
\ No newline at end of file
diff --git a/config/rootfiles/core/198/filelists/libinih b/config/rootfiles/core/198/filelists/libinih
new file mode 120000
index 000000000..7f703bed7
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/libinih
@@ -0,0 +1 @@
+../../../common/libinih
\ No newline at end of file
diff --git a/config/rootfiles/core/198/filelists/lsof b/config/rootfiles/core/198/filelists/lsof
new file mode 120000
index 000000000..1353d33e5
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/lsof
@@ -0,0 +1 @@
+../../../common/lsof
\ No newline at end of file
diff --git a/config/rootfiles/core/198/filelists/nano b/config/rootfiles/core/198/filelists/nano
new file mode 120000
index 000000000..2f07279c0
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/nano
@@ -0,0 +1 @@
+../../../common/nano
\ No newline at end of file
diff --git a/config/rootfiles/core/198/filelists/sudo b/config/rootfiles/core/198/filelists/sudo
new file mode 120000
index 000000000..0d3c45e04
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/sudo
@@ -0,0 +1 @@
+../../../common/sudo
\ No newline at end of file
diff --git a/config/rootfiles/core/198/filelists/whois b/config/rootfiles/core/198/filelists/whois
new file mode 120000
index 000000000..60cbd1894
--- /dev/null
+++ b/config/rootfiles/core/198/filelists/whois
@@ -0,0 +1 @@
+../../../common/whois
\ No newline at end of file
diff --git a/lfs/bind b/lfs/bind
index fa4d73d04..d62846f58 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@
include Config
-VER = 9.20.11
+VER = 9.20.12
THISAPP = bind-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 582e6de2699713e870dfc853f461c78b2d2b505bed0b571f853c94a731be9006783f45a4f897692289c1a9411725eac0b4de3818f1641221e62754316f410081
+$(DL_FILE)_BLAKE2 = f2135301ab04121c1ae82fc9283f0f03b0d11b634aaee49c072bb9a2a0f7e643a8f6c1f3890648e5d008a7d2c84953617b330241e3f856e33b56e64fb0312f0a
install : $(TARGET)
diff --git a/lfs/btrfs-progs b/lfs/btrfs-progs
index 952a59909..652ae34ea 100644
--- a/lfs/btrfs-progs
+++ b/lfs/btrfs-progs
@@ -24,7 +24,7 @@
include Config
-VER = 6.15
+VER = 6.16
# https://mirrors.edge.kernel.org/pub/linux/kernel/people/kdave/btrfs-progs/
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 5e79b7606fb236bc21e5b2401f5d6b27ad0ffb1b8ceef3ed9c7042b384508b1e1cc2a3a451d94e5369fa1592d91da78264caabe74bf1d907ac8e513a86b6fed8
+$(DL_FILE)_BLAKE2 = 375c60a93bc5b62d7c3a94d5ed108b81786b27f2beba27d85bcede94a892d84e71b1fe00a1574cc53066fe77bb37408b2b382db4a1664fefcc676c1c3efa1c60
install : $(TARGET)
diff --git a/lfs/fping b/lfs/fping
index 714372710..1f8d41772 100644
--- a/lfs/fping
+++ b/lfs/fping
@@ -26,7 +26,7 @@ include Config
SUMMARY = A program to ping multiple hosts
-VER = 5.3
+VER = 5.4
THISAPP = fping-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = fping
-PAK_VER = 9
+PAK_VER = 10
DEPS =
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = cc7b8bd2c8099c8bfb5e14d5b27f45cf1dc1aef24f941f5bf9c7aede95dac9472d2fe4033e8b7ea66fea8d901b99a7c908e7beff5484c0577c3f88517ef1a7ea
+$(DL_FILE)_BLAKE2 = b3c2f3ac8cb2d27593ad7a937c2fb27ab67bef3cd0d912a2a08b52bf9a96b2e5a5637567f0ef1203f86fefc99036a78ee05d69f175bdb1c2d62b6eaf6e474284
install : $(TARGET)
diff --git a/lfs/gdbm b/lfs/gdbm
index 4fd3cae7e..d762f47e9 100644
--- a/lfs/gdbm
+++ b/lfs/gdbm
@@ -24,7 +24,7 @@
include Config
-VER = 1.25
+VER = 1.26
THISAPP = gdbm-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 6abf5f77823dda7ebcaa775d58f7a311c8f73c7521fe223398b5cb4b4831ad177cfd87fd42f2b24ca2fc5984af7d51abcc5e509ceb6aab2746a52aecb550654b
+$(DL_FILE)_BLAKE2 = 9423ea16ee3e8f1ce57ea32371f49919e2a3819a206a61ce927676a08a71a6a495d3949714bff7be789dfce75bf0ab0ac76f07ec673b71a84ae32bd8cd483781
install : $(TARGET)
diff --git a/lfs/git b/lfs/git
index abdfe1a38..a0d655ec9 100644
--- a/lfs/git
+++ b/lfs/git
@@ -24,7 +24,7 @@
include Config
-VER = 2.50.1
+VER = 2.51.0
SUMMARY = Fast, scalable, distributed revision control system
THISAPP = git-$(VER)
@@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = git
-PAK_VER = 39
+PAK_VER = 40
DEPS = perl-Authen-SASL perl-Net-SMTP-SSL
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 4e5e3168d7dd88cc508920dd773df2ec6b568c70e8068a18010f01241ebc9e9140ca13a9820e14f0d4695e966c436aef305a81e61cc66007b756b75f48dd5d16
+$(DL_FILE)_BLAKE2 = b385ee2c7aed601435952c983045055c970cdda607d83ae8ba904ee10e5e76bca097ccbe0f22e4e1467c6d606c9eecb952ffb382f351124325b6fd5d87083596
install : $(TARGET)
diff --git a/lfs/harfbuzz b/lfs/harfbuzz
index 03ba8b6a5..574b51f15 100644
--- a/lfs/harfbuzz
+++ b/lfs/harfbuzz
@@ -24,7 +24,7 @@
include Config
-VER = 11.2.1
+VER = 11.4.3
THISAPP = harfbuzz-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 1c2553a02b4254c06f41a429c498439796e3c307ea2b1325b3ee99a4a87dc817bcc0ceb4ec23f0b1c708e3488249ce5f05913f4ab50fc2a66605b3e238f39d5d
+$(DL_FILE)_BLAKE2 = 88b2e29e28fd604457f40d26b85fc368823a08cdb2060138764534621d25620e0e25018719c9f64fcecca5051dcf4760bbcd05038cf32caa1902e27173ee1232
install : $(TARGET)
diff --git a/lfs/hwdata b/lfs/hwdata
index 00791fbbb..e83b6f37f 100644
--- a/lfs/hwdata
+++ b/lfs/hwdata
@@ -24,7 +24,7 @@
include Config
-VER = 0.396
+VER = 0.398
THISAPP = hwdata-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = a4d74693a78719337dfecae11da0cbd437686da6ff29091961014e75ffe598734f34c62a00a7d0a13b64a02964fc4c5ff54f22a6f87aeebe693f2fa15e366d06
+$(DL_FILE)_BLAKE2 = 415cf2e0e1735c4b0a2186421e85186f20ae3b165a8224923ef24471b98f3f923484072702c2f0c21dffe98ad2144459e14f2829b77c110e2397141da2bde676
install : $(TARGET)
diff --git a/lfs/libinih b/lfs/libinih
index 2df1d7799..7a0eca385 100644
--- a/lfs/libinih
+++ b/lfs/libinih
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 58
+VER = 61
THISAPP = inih-r$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = ba71b21b30c039df026adbd29b422b064934046ced21a37479421e866b73969826dc1fea4e3bc0c5ea427248c774d8f80b83056c54769d454bafa2f336d08024
+$(DL_FILE)_BLAKE2 = 6e0d5c3976db52c2a49c56026be79e00ff21fd92a96c37e13478c0e70ed955ec555af66f9737beb4e1338bb286418d86ae401098a6e7b9f599e05619458fea29
install : $(TARGET)
@@ -76,7 +76,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
$(UPDATE_AUTOMAKE)
- cd $(DIR_APP) && meson --prefix=/usr builddir/
+ cd $(DIR_APP) && meson \
+ --prefix=/usr \
+ builddir/
cd $(DIR_APP) && ninja -C builddir/ $(MAKETUNING)
cd $(DIR_APP) && ninja -C builddir/ install
@rm -rf $(DIR_APP)
diff --git a/lfs/lsof b/lfs/lsof
index b22d5e0fd..9bae57788 100644
--- a/lfs/lsof
+++ b/lfs/lsof
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 4.99.4
+VER = 4.99.5
THISAPP = lsof-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 43e97874779797733433c0942f47dd5bebdaf5ef12153ede91b472c044d9ca63a03aee38c0d5a939b3c3bc7b40321dac5d241da39ca108f1ca3355c6571bc253
+$(DL_FILE)_BLAKE2 = 998ce85c7a0e742e6f7696d00ee3b6bb8aa6b6e5c30d5c76ac1fc74ea7d8062d73da4de54f433147b74ef4a6d6ac168f70ee68773c82269e07ec3f90bd9b8a8c
install : $(TARGET)
diff --git a/lfs/nano b/lfs/nano
index cc41e36f6..d0c83e40b 100644
--- a/lfs/nano
+++ b/lfs/nano
@@ -24,7 +24,7 @@
include Config
-VER = 8.5
+VER = 8.6
THISAPP = nano-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 85de6d5349ed2332d41c054ff64979d7b00ec3c792564fcfb6ebed56b74a17c948117218a50297fead17674c06755afba393e73466eb2af9d3bb33af085c4f23
+$(DL_FILE)_BLAKE2 = f7e17085d237ec3512b21bb732c2ebcf71a96991344acd0efc3592a650be856aed3ad958df59e27f332f750ac5e46ba7ed06b23093c8b68c4bf0a94aeecd2af0
install : $(TARGET)
diff --git a/lfs/postfix b/lfs/postfix
index 5dd1a3c98..2bc0174d1 100644
--- a/lfs/postfix
+++ b/lfs/postfix
@@ -26,7 +26,7 @@ include Config
SUMMARY = A fast, secure, and flexible mailer
-VER = 3.10.2
+VER = 3.10.4
THISAPP = postfix-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = postfix
-PAK_VER = 48
+PAK_VER = 49
DEPS =
@@ -72,7 +72,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = b75fec52e837d43e0fa5d6ede3f44ccc62144133a2c433f536c566362b20a6a9b8a8cbf8e11f64d84fa751311cc9451158cda0edc212a0e45a9097530f41cea4
+$(DL_FILE)_BLAKE2 = e0a9b3dbd858e9b2bacb137b886ef35a89220caf91da5bcb90de5fd3df7285645deaff6e58f571cdc75966098cf13190b0315690c270b9f3ed69a21e63d2d3ab
install : $(TARGET)
diff --git a/lfs/rpcbind b/lfs/rpcbind
index a707d9c05..196089af6 100644
--- a/lfs/rpcbind
+++ b/lfs/rpcbind
@@ -26,7 +26,7 @@ include Config
SUMMARY = Transport independent RPC portmapper
-VER = 1.2.7
+VER = 1.2.8
THISAPP = rpcbind-$(VER)
DL_FILE = $(THISAPP).tar.bz2
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = rpcbind
-PAK_VER = 8
+PAK_VER = 9
DEPS =
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = f1e79b304ce5fe06c1c256d3512d999daffca782d956440f612b8a957ad7ddb35356b47aa4f4105d5b24d820daab32ec3a0f4a3b8ac76bb7adf5c3ed22d2ef01
+$(DL_FILE)_BLAKE2 = 70bef658aafc4b1b626a7e9ff312b34748e0142a0a93d058c28d6599545281464f27a5546abe287f0dd369e5264cb38940f85e5e6c128cb0e0f7aaa4b841ab77
install : $(TARGET)
@@ -83,11 +83,10 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE)
cd $(DIR_APP) && sed -i "/servname/s:rpcbind:sunrpc:" src/rpcbind.c
cd $(DIR_APP) && ./configure \
- --prefix=/usr \
- --bindir=/sbin \
- --with-rpcuser=root \
- --without-systemdsystemunitdir
-
+ --prefix=/usr \
+ --bindir=/sbin \
+ --with-rpcuser=root \
+ --without-systemdsystemunitdir
cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE)
cd $(DIR_APP) && make install
#install initscripts
diff --git a/lfs/sudo b/lfs/sudo
index c2c221417..f605ff683 100644
--- a/lfs/sudo
+++ b/lfs/sudo
@@ -24,7 +24,7 @@
include Config
-VER = 1.9.17p1
+VER = 1.9.17p2
THISAPP = sudo-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 21771348a8de392767c366bb938951327dcc64a4cedee716a802435899e5135c218468271833a9e3ab9d90bda29e36c0870e27dd333d3a5c64fb8e3a5ebbff58
+$(DL_FILE)_BLAKE2 = dd42ff4fd571ba8489cc59d71a09c7e0483d21daf9faf7e697beedc04d9f170b01e60446af179c949a3da115b616fbec07aff8fbf8b7d502161c24d1b35b7a69
install : $(TARGET)
diff --git a/lfs/whois b/lfs/whois
index e8ada71e7..951e2f858 100644
--- a/lfs/whois
+++ b/lfs/whois
@@ -24,7 +24,7 @@
include Config
-VER = 5.6.1
+VER = 5.6.4
THISAPP = whois-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = fde0acb2edc7d10e588d73f68cd83303986f05c986b1a237a4e635fe7a54d94073712907136b80a283b4733203a8ffa3588d1deb4bf8783d35943095fefbdd89
+$(DL_FILE)_BLAKE2 = 212ad7c3ce09804fa988b913cc0fc664bc09aa0fabd35570b3038da5d2c6df4eb4866fab083002549c2e3ac734765a139be67f74c019e22c0b93f3d222146196
install : $(TARGET)
diff --git a/lfs/wsdd b/lfs/wsdd
index 84a563a46..4ba4da28f 100644
--- a/lfs/wsdd
+++ b/lfs/wsdd
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 0.8
+VER = 0.9
SUMMARY = A Web Service Discovery host daemon.
THISAPP = wsdd-$(VER)
@@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = wsdd
-PAK_VER = 3
+PAK_VER = 4
DEPS =
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = e4b8e29073b6ea23b73d2f740f6dbabd8c90b615de32d9972c59e5a822daf6232fcdeafb180492a37c4a29ec266c733b160376abedce3b6a90feded2aed25aa2
+$(DL_FILE)_BLAKE2 = 8f3b20b8ddc5424fd33ec37c7f9314145ff9a91a0b49f9edd47e1691b3e775e17015bc4b2c115dd05994824140434a67c5a51637254e001922f9e1e927de8124
install : $(TARGET)
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2025-08-27 10:38 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-08-27 10:38 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. e2336a9e06b7a91b86cdc91002b0d281dbdf0849 Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox