* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. ed642520e68e73c8a72cce05728b5615f813ae79
@ 2025-10-13 15:50 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2025-10-13 15:50 UTC (permalink / raw)
To: ipfire-scm
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 73979 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via ed642520e68e73c8a72cce05728b5615f813ae79 (commit)
via c314ca768aeedb930f85063c12156a38dcd5c919 (commit)
via eafb08a778d9c30e355dd636c182c6994626bd68 (commit)
via c251b8e6c8fa6daac777d51cda17889d1e433c29 (commit)
via 30811deedae66b1e883845da8edebbef0727a28c (commit)
via 92bfdce684e57a58652e313f08700f7c5c2bc6b0 (commit)
via 5f21ed59172b69fff1b4ac9e53e87c7ef8214b4e (commit)
from d9f9f6db9afc8f282e54dfa7153e1bb37f122068 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit ed642520e68e73c8a72cce05728b5615f813ae79
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon Oct 13 13:15:03 2025 +0200
core199: Ship modified cgi files
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit c314ca768aeedb930f85063c12156a38dcd5c919
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon Oct 13 13:15:02 2025 +0200
cgi-bin: Apply consistent disable status to debug modules
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit eafb08a778d9c30e355dd636c182c6994626bd68
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon Oct 13 12:48:52 2025 +0200
core199: Ship wireguard.cgi
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit c251b8e6c8fa6daac777d51cda17889d1e433c29
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon Oct 13 12:48:51 2025 +0200
wireguard.cgi: disable debbugging modules
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 30811deedae66b1e883845da8edebbef0727a28c
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon Oct 13 12:39:53 2025 +0200
core199: Ship rust
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 92bfdce684e57a58652e313f08700f7c5c2bc6b0
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon Oct 13 12:39:52 2025 +0200
rust: Update to version 1.85.0
- Update from version 1.83.0 to 1.85.0
- The latest version of rust is at 1.90.0 but that version requires some existing rust
modules to also be updated. I will do that as a separate step once this patch is
in place.
- Update of rootfiles for all three architectures.
- Changelog
1.85.0
Language
The 2024 Edition is now stable. See the edition guide for more details.
Stabilize async closures See RFC 3668 for more details.
Stabilize #[diagnostic::do_not_recommend]
Add unpredictable_function_pointer_comparisons lint to warn against
function pointer comparisons
Lint on combining #[no_mangle] and #[export_name] attributes.
Compiler
The unstable flag -Zpolymorphize has been removed, see
https://github.com/rust-lang/compiler-team/issues/810 for some
background.
Platform Support
Promote powerpc64le-unknown-linux-musl to tier 2 with host tools
Refer to Rust’s platform support page for more information on Rust’s
tiered platform support.
Libraries
Panics in the standard library now have a leading library/ in their path
std::env::home_dir() on Windows now ignores the non-standard $HOME
environment variable
It will be un-deprecated in a subsequent release.
Add AsyncFn* to the prelude in all editions.
Stabilized APIs
BuildHasherDefault::new
ptr::fn_addr_eq
io::ErrorKind::QuotaExceeded
io::ErrorKind::CrossesDevices
{float}::midpoint
Unsigned {integer}::midpoint
NonZeroU*::midpoint
impl std::iter::Extend for tuples with arity 1 through 12
FromIterator<(A, ...)> for tuples with arity 1 through 12
std::task::Waker::noop
These APIs are now stable in const contexts:
mem::size_of_val
mem::align_of_val
Layout::for_value
Layout::align_to
Layout::pad_to_align
Layout::extend
Layout::array
std::mem::swap
std::ptr::swap
NonNull::new
HashMap::with_hasher
HashSet::with_hasher
BuildHasherDefault::new
<float>::recip
<float>::to_degrees
<float>::to_radians
<float>::max
<float>::min
<float>::clamp
<float>::abs
<float>::signum
<float>::copysign
MaybeUninit::write
Cargo
Add future-incompatibility warning against keywords in cfgs and add
raw-idents
Stabilize higher precedence trailing flags
Pass CARGO_CFG_FEATURE to build scripts
Rustdoc
Doc comment on impl blocks shows the first line, even when the impl block
is collapsed
Compatibility Notes
rustc no longer treats the test cfg as a well known check-cfg, instead it
is up to the build systems and users of --check-cfg1 to set it as a
well known cfg using --check-cfg=cfg(test).
This is done to enable build systems like Cargo to set it conditionally,
as not all source files are suitable for unit tests. Cargo (for now)
unconditionally sets the test cfg as a well known cfg.
Disable potentially incorrect type inference if there are trivial and
non-trivial where-clauses
std::env::home_dir() has been deprecated for years, because it can give
surprising results in some Windows configurations if the HOME
environment variable is set (which is not the normal configuration on
Windows). We had previously avoided changing its behavior, out of
concern for compatibility with code depending on this non-standard
configuration. Given how long this function has been deprecated, we’re
now fixing its behavior as a bugfix. A subsequent release will remove
the deprecation for this function.
Make core::ffi::c_char signedness more closely match that of the
platform-default char
This changed c_char from an i8 to u8 or vice versa on many Tier 2 and 3
targets (mostly Arm and RISC-V embedded targets). The new definition
may result in compilation failures but fixes compatibility issues with C.
The libc crate matches this change as of its 0.2.169 release.
When compiling a nested macro_rules macro from an external crate, the
content of the inner macro_rules is now built with the edition of the
external crate, not the local crate.
Increase sparcv9-sun-solaris and x86_64-pc-solaris Solaris baseline to 11.4.
Show abi_unsupported_vector_types lint in future breakage reports
Error if multiple super-trait instantiations of dyn Trait need associated
types to be specified but only one is provided
Change powerpc64-ibm-aix default codemodel to large
Internal Changes
These changes do not affect any public interfaces of Rust, but they
represent significant improvements to the performance or internals of
rustc and related tools.
Build x86_64-unknown-linux-gnu with LTO for C/C++ code (e.g., jemalloc)
1.84.1
Fix ICE 132920 in duplicate-crate diagnostics.
Fix errors for overlapping impls in incremental rebuilds.
Fix slow compilation related to the next-generation trait solver.
Fix debuginfo when LLVM’s location discriminator value limit is exceeded.
Fixes for building Rust from source:
Only try to distribute llvm-objcopy if llvm tools are enabled.
Add Profile Override for Non-Git Sources.
Resolve symlinks of LLVM tool binaries before copying them.
Make it possible to use ci-rustc on tarball sources.
1.84.0
Language
Allow #[deny] inside #[forbid] as a no-op
Show a warning when -Ctarget-feature is used to toggle features that can
lead to unsoundness due to ABI mismatches
Use the next-generation trait solver in coherence
Allow coercions to drop the principal of trait objects
Support / as the path separator for include!() in all cases on Windows
Taking a raw ref (raw (const|mut)) of a deref of a pointer (*ptr) is now safe
Stabilize s390x inline assembly
Stabilize Arm64EC inline assembly
Lint against creating pointers to immediately dropped temporaries
Execute drop glue when unwinding in an extern "C" function
Compiler
Add --print host-tuple flag to print the host target tuple and affirm the
“target tuple” terminology over “target triple”
Declaring functions with a calling convention not supported on the current
target now triggers a hard error
Set up indirect access to external data for
loongarch64-unknown-linux-{musl,ohos}
Enable XRay instrumentation for LoongArch Linux targets
Extend the unexpected_cfgs lint to also warn in external macros
Stabilize WebAssembly multivalue, reference-types, and tail-call target
features
Added Tier 2 support for the wasm32v1-none target
Libraries
Implement From<&mut {slice}> for Box/Rc/Arc<{slice}>
Move <float>::copysign, <float>::abs, <float>::signum to core
Add LowerExp and UpperExp implementations to NonZero
Implement FromStr for CString and TryFrom<CString> for String
std::os::darwin has been made public
Stabilized APIs
Ipv6Addr::is_unique_local
Ipv6Addr::is_unicast_link_local
core::ptr::with_exposed_provenance
core::ptr::with_exposed_provenance_mut
<ptr>::addr
<ptr>::expose_provenance
<ptr>::with_addr
<ptr>::map_addr
<int>::isqrt
<int>::checked_isqrt
<uint>::isqrt
NonZero::isqrt
core::ptr::without_provenance
core::ptr::without_provenance_mut
core::ptr::dangling
core::ptr::dangling_mut
Pin::as_deref_mut
These APIs are now stable in const contexts
AtomicBool::from_ptr
AtomicPtr::from_ptr
AtomicU8::from_ptr
AtomicU16::from_ptr
AtomicU32::from_ptr
AtomicU64::from_ptr
AtomicUsize::from_ptr
AtomicI8::from_ptr
AtomicI16::from_ptr
AtomicI32::from_ptr
AtomicI64::from_ptr
AtomicIsize::from_ptr
<ptr>::is_null
<ptr>::as_ref
<ptr>::as_mut
Pin::new
Pin::new_unchecked
Pin::get_ref
Pin::into_ref
Pin::get_mut
Pin::get_unchecked_mut
Pin::static_ref
Pin::static_mut
Cargo
Stabilize MSRV-aware resolver config
Stabilize resolver v3
Rustdoc
rustdoc-search: improve type-driven search
Compatibility Notes
Enable by default the LSX target feature for LoongArch Linux targets
The unstable -Zprofile flag (“gcov-style” coverage instrumentation) has
been removed. This does not affect the stable flags for coverage
instrumentation (-Cinstrument-coverage) and profile-guided
optimization (-Cprofile-generate, -Cprofile-use), which are unrelated
and remain available.
Support for the target named wasm32-wasi has been removed as the target is
now named wasm32-wasip1. This completes the transition plan for this
target following the introduction of wasm32-wasip1 in Rust 1.78.
Compiler warnings on use of wasm32-wasi introduced in Rust 1.81 are
now gone as well as the target is removed.
The syntax &pin (mut|const) T is now parsed as a type which in theory
could affect macro expansion results in some edge cases
Legacy syntax for calling std::arch functions is no longer permitted to
declare items or bodies (such as closures, inline consts, or async
blocks).
Declaring functions with a calling convention not supported on the current
target now triggers a hard error
The next-generation trait solver is now enabled for coherence, fixing
multiple soundness issues
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 5f21ed59172b69fff1b4ac9e53e87c7ef8214b4e
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon Oct 13 12:39:51 2025 +0200
clamav: Update to version 1.5.0
- Update from version 1.4.3 to 1.5.0
- Update of rootfile
- Required an update to rust as clamav required a rust version with edition2024. Patch
for that combined in this set.
- Changelog
1.5.0
Major changes
- Added checks to determine if an OLE2-based Microsoft Office document is
encrypted.
- Added the ability to record URIs found in HTML if the generate-JSON-metadata
feature is enabled.
Also adds an option to disable this in case you want the JSON metadata
feature but do not want to record HTML URIs.
The ClamScan command-line option is `--json-store-html-uris=no`.
The `clamd.conf` config option is `JsonStoreHTMLURIs no`.
The libclamav general scan option is `CL_SCAN_GENERAL_STORE_HTML_URIS`
- Added the ability to record URIs found in PDFs if the generate-JSON-metadata
feature is enabled.
Also adds an option to disable this in case you want the JSON metadata
feature but do not want to record PDF URIs.
The ClamScan command-line option is `--json-store-pdf-uris=no`.
The `clamd.conf` config option is `JsonStorePDFURIs no`.
The libclamav general scan option is `CL_SCAN_GENERAL_STORE_PDF_URIS`
- Added regex support for the `clamd.conf` `OnAccessExcludePath` config option.
This change courtesy of GitHub user b1tg.
- Added CVD signing/verification with external `.sign` files.
Freshclam will now attempt to download external signature files to accompany
existing `.cvd` databases and `.cdiff` patch files. Sigtool now has commands
to sign and verify using the external signatures.
ClamAV now installs a 'certs' directory in the app config directory
(e.g., `<prefix>/etc/certs`). The install path is configurable.
The CMake option to configure the CVD certs directory is
`-D CVD_CERTS_DIRECTORY=PATH`
New options to set an alternative CVD certs directory:
- The command-line option for Freshclam, ClamD, ClamScan, and Sigtool is
`--cvdcertsdir PATH`
- The environment variable for Freshclam, ClamD, ClamScan, and Sigtool is
`CVD_CERTS_DIR`
- The config option for Freshclam and ClamD is
`CVDCertsDirectory PATH`
Added two new APIs to the public clamav.h header:
```c
cl_error_t cl_cvdverify_ex(
const char *file,
const char *certs_directory,
uint32_t dboptions);
cl_error_t cl_cvdunpack_ex(
const char *file,
const char *dir,
const char *certs_directory,
uint32_t dboptions);
```
The original `cl_cvdverify` and `cl_cvdunpack` are deprecated.
Added a `cl_engine_field` enum option `CL_ENGINE_CVDCERTSDIR`.
You may set this option with `cl_engine_set_str` and get it with
`cl_engine_get_str`, to override the compiled in default CVD certs directory.
Thank you to Mark Carey at SAP for inspiring work on this feature with an
initial proof of concept for external-signature FIPS compliant CVD signing.
- Freshclam, ClamD, ClamScan, and Sigtool: Added an option to enable FIPS-like
limits disabling MD5 and SHA1 from being used for verifying digital signatures
or for being used to trust a file when checking for false positives (FPs).
For `freshclam.conf` and `clamd.conf` set this config option:
```
FIPSCryptoHashLimits yes
```
For `clamscan` and `sigtool` use this command-line option:
```
--fips-limits
```
For libclamav: Enable FIPS-limits for a ClamAV engine like this:
```C
cl_engine_set_num(engine, CL_ENGINE_FIPS_LIMITS, 1);
```
ClamAV will also attempt to detect if FIPS-mode is enabled. If so, it will
automatically enable the FIPS-limits feature.
This change mitigates safety concerns over the use of MD5 and SHA1 algorithms
to trust files and is required to enable ClamAV to operate legitimately in
FIPS-mode enabled environments.
Note: ClamAV may still calculate MD5 or SHA1 hashes as needed for detection
purposes or for informational purposes in FIPS-enabled environments and when
the FIPS-limits option is enabled.
- Upgraded the clean-file scan cache to use SHA2-256 (prior versions use MD5).
The clean-file cache algorithm is not configurable.
This change resolves safety concerns over the use of MD5 to trust files and
is required to enable ClamAV to operate legitimately in FIPS-mode enabled
environments.
- ClamD: Added an option to disable select administrative commands including
`SHUTDOWN`, `RELOAD`, `STATS` and `VERSION`.
The new `clamd.conf` options are:
```
EnableShutdownCommand yes
EnableReloadCommand yes
EnableStatsCommand yes
EnableVersionCommand yes
```
- libclamav: Added extended hashing functions with a "flags" parameter that
allows the caller to choose if they want to bypass FIPS hash algorithm limits:
```c
cl_error_t cl_hash_data_ex(
const char *alg,
const uint8_t *data,
size_t data_len,
uint8_t **hash,
size_t *hash_len,
uint32_t flags);
cl_error_t cl_hash_init_ex(
const char *alg,
uint32_t flags,
cl_hash_ctx_t **ctx_out);
cl_error_t cl_update_hash_ex(
cl_hash_ctx_t *ctx,
const uint8_t *data,
size_t length);
cl_error_t cl_finish_hash_ex(
cl_hash_ctx_t *ctx,
uint8_t **hash,
size_t *hash_len,
uint32_t flags);
void cl_hash_destroy(void *ctx);
cl_error_t cl_hash_file_fd_ex(
const char *alg,
int fd,
size_t offset,
size_t length,
uint8_t **hash,
size_t *hash_len,
uint32_t flags);
```
- ClamScan: Improved the precision of the bytes-scanned and bytes-read counters.
The ClamScan scan summary will now report exact counts in "GiB", "MiB", "KiB",
or "B" as appropriate. Previously, it always reported "MB".
- ClamScan: Add hash & file-type in/out CLI options:
- `--hash-hint`: The file hash so that libclamav does not need to calculate
it. The type of hash must match the `--hash-alg`.
- `--log-hash`: Print the file hash after each file scanned. The type of hash
printed will match the `--hash-alg`.
- `--hash-alg`: The hashing algorithm used for either `--hash-hint` or
`--log-hash`. Supported algorithms are "md5", "sha1", "sha2-256".
If not specified, the default is "sha2-256".
- `--file-type-hint`: The file type hint so that libclamav can optimize
scanning (e.g., "pe", "elf", "zip", etc.). You may also use ClamAV type names
such as "CL_TYPE_PE". ClamAV will ignore the hint if it is not familiar with
the specified type.
See also: https://docs.clamav.net/appendix/FileTypes.html#file-types
- `--log-file-type`: Print the file type after each file scanned.
We will not be adding this for ClamDScan, as we do not have a mechanism in the
ClamD socket API to receive scan options or a way for ClamD to include scan
metadata in the response.
- libclamav: Added new scan functions that provide additional functionality:
```c
cl_error_t cl_scanfile_ex(
const char *filename,
cl_verdict_t *verdict_out,
const char **last_alert_out,
uint64_t *scanned_out,
const struct cl_engine *engine,
struct cl_scan_options *scanoptions,
void *context,
const char *hash_hint,
char **hash_out,
const char *hash_alg,
const char *file_type_hint,
char **file_type_out);
cl_error_t cl_scandesc_ex(
int desc,
const char *filename,
cl_verdict_t *verdict_out,
const char **last_alert_out,
uint64_t *scanned_out,
const struct cl_engine *engine,
struct cl_scan_options *scanoptions,
void *context,
const char *hash_hint,
char **hash_out,
const char *hash_alg,
const char *file_type_hint,
char **file_type_out);
cl_error_t cl_scanmap_ex(
cl_fmap_t *map,
const char *filename,
cl_verdict_t *verdict_out,
const char **last_alert_out,
uint64_t *scanned_out,
const struct cl_engine *engine,
struct cl_scan_options *scanoptions,
void *context,
const char *hash_hint,
char **hash_out,
const char *hash_alg,
const char *file_type_hint,
char **file_type_out);
```
The older `cl_scan*()` functions are now deprecated and may be removed in a
future release. See `clamav.h` for more details.
- libclamav: Added a new engine option to toggle temp directory recursion.
Temp directory recursion is the idea that each object scanned in ClamAV's
recursive extract/scan process will get a new temp subdirectory, mimicking
the nesting structure of the file.
Temp directory recursion was introduced in ClamAV 0.103 and is enabled
whenever `--leave-temps` / `LeaveTemporaryFiles` is enabled.
In ClamAV 1.5, an application linking to libclamav can separately enable temp
directory recursion if they wish.
For ClamScan and ClamD, it will remain tied to `--leave-temps` /
`LeaveTemporaryFiles` options.
The new temp directory recursion option can be enabled with:
```c
cl_engine_set_num(engine, CL_ENGINE_TMPDIR_RECURSION, 1);
```
- libclamav: Added a class of scan callback functions that can be added with the
following API function:
```c
void cl_engine_set_scan_callback(struct cl_engine *engine, clcb_scan callback, cl_scan_callback_t location);
```
The scan callback location may be configured using the following five values:
- `CL_SCAN_CALLBACK_PRE_HASH`: Occurs just after basic file-type detection and
before any hashes have been calculated either for the cache or the gen-json
metadata.
- `CL_SCAN_CALLBACK_PRE_SCAN`: Occurs before parser modules run and before
pattern matching.
- `CL_SCAN_CALLBACK_POST_SCAN`: Occurs after pattern matching and after
running parser modules. A.k.a. the scan is complete for this layer.
- `CL_SCAN_CALLBACK_ALERT`: Occurs each time an alert (detection) would be
triggered during a scan.
- `CL_SCAN_CALLBACK_FILE_TYPE`: Occurs each time the file type determination
is refined. This may happen more than once per layer.
Each callback may alter scan behavior using the following return codes:
- `CL_BREAK`: Scan aborted by callback. The rest of the scan is skipped.
This does not mark the file as clean or infected, it just skips the rest of
the scan.
- `CL_SUCCESS` / `CL_CLEAN`: File scan will continue.
For `CL_SCAN_CALLBACK_ALERT`: This means you want to ignore this specific
alert and keep scanning.
This is different than `CL_VERIFIED` because it does not affect prior or
future alerts. Return `CL_VERIFIED` instead if you want to remove prior
alerts for this layer and skip the rest of the scan for this layer.
- `CL_VIRUS`: This means you do not trust the file. A new alert will be added.
For `CL_SCAN_CALLBACK_ALERT`: This means you agree with the alert and no
extra alert is needed.
- `CL_VERIFIED`: Layer explicitly trusted by the callback and previous alerts
removed for THIS layer. You might want to do this if you trust the hash or
verified a digital signature. The rest of the scan will be skipped for THIS
layer. For contained files, this does NOT mean that the parent or adjacent
layers are trusted.
Each callback is given a pointer to the current scan layer from which they can
get previous layers, can get the layer's fmap, and then various attributes of
the layer and of the fmap. To make this possible, there are new APIs to
query scan-layer details and fmap details:
```c
cl_error_t cl_fmap_set_name(cl_fmap_t *map, const char *name);
cl_error_t cl_fmap_get_name(cl_fmap_t *map, const char **name_out);
cl_error_t cl_fmap_set_path(cl_fmap_t *map, const char *path);
cl_error_t cl_fmap_get_path(cl_fmap_t *map, const char **path_out, size_t *offset_out, size_t *len_out);
cl_error_t cl_fmap_get_fd(const cl_fmap_t *map, int *fd_out, size_t *offset_out, size_t *len_out);
cl_error_t cl_fmap_get_size(const cl_fmap_t *map, size_t *size_out);
cl_error_t cl_fmap_set_hash(const cl_fmap_t *map, const char *hash_alg, char hash);
cl_error_t cl_fmap_have_hash(const cl_fmap_t *map, const char *hash_alg, bool *have_hash_out);
cl_error_t cl_fmap_will_need_hash_later(const cl_fmap_t *map, const char *hash_alg);
cl_error_t cl_fmap_get_hash(const cl_fmap_t *map, const char *hash_alg, char **hash_out);
cl_error_t cl_fmap_get_data(const cl_fmap_t *map, size_t offset, size_t len, const uint8_t **data_out, size_t *data_len_out);
cl_error_t cl_scan_layer_get_fmap(cl_scan_layer_t *layer, cl_fmap_t **fmap_out);
cl_error_t cl_scan_layer_get_parent_layer(cl_scan_layer_t *layer, cl_scan_layer_t **parent_layer_out);
cl_error_t cl_scan_layer_get_type(cl_scan_layer_t *layer, const char **type_out);
cl_error_t cl_scan_layer_get_recursion_level(cl_scan_layer_t *layer, uint32_t *recursion_level_out);
cl_error_t cl_scan_layer_get_object_id(cl_scan_layer_t *layer, uint64_t *object_id_out);
cl_error_t cl_scan_layer_get_last_alert(cl_scan_layer_t *layer, const char **alert_name_out);
cl_error_t cl_scan_layer_get_attributes(cl_scan_layer_t *layer, uint32_t *attributes_out);
```
This deprecates, but does not immediately remove, the existing scan callbacks:
```c
void cl_engine_set_clcb_pre_cache(struct cl_engine *engine, clcb_pre_cache callback);
void cl_engine_set_clcb_file_inspection(struct cl_engine *engine, clcb_file_inspection callback);
void cl_engine_set_clcb_pre_scan(struct cl_engine *engine, clcb_pre_scan callback);
void cl_engine_set_clcb_post_scan(struct cl_engine *engine, clcb_post_scan callback);
void cl_engine_set_clcb_virus_found(struct cl_engine *engine, clcb_virus_found callback);
void cl_engine_set_clcb_hash(struct cl_engine *engine, clcb_hash callback);
```
There is an interactive test program to demonstrate the new callbacks.
See: `examples/ex_scan_callbacks.c`
- Signature names that start with "Weak." will no longer alert.
Instead, they will be tracked internally and can be found in scan metadata
JSON. This is a step towards enabling alerting signatures to depend on prior
Weak indicator matches in the current layer or in child layers.
- For the "Generate Metadata JSON" feature:
- The "Viruses" array of alert names has been replaced by two new arrays that
include additional details beyond just signature name:
- "Indicators" records three types of indicators:
- **Strong** indicators are for traditional alerting signature matches and
will halt the scan, except in all-match mode.
- **Potentially Unwanted** indicators will only cause an alert at the end of
the scan unless a Strong indicator is found. They are treated the same
as Strong indicators in all-match mode.
- **Weak** indicators do not alert and will be leveraged in a future version
as a condition for logical signature matches.
- "Alerts" records only alerting indicators. Events that trust a file, such
as false positive signatures, will remove affected indicators, and mark
them as "Ignored" in the "Indicators" array.
- Add new option to calculate and record additional hash types when the
"generate metadata JSON" feature is enabled:
- libclamav option: `CL_SCAN_GENERAL_STORE_EXTRA_HASHES`
- ClamScan option: `--json-store-extra-hashes` (default off)
- `clamd.conf` option: `JsonStoreExtraHashes` (default 'no')
- The file hash is now stored as "sha2-256" instead of "FileMD5". If you
enable the "extra hashes" option, then it will also record "md5" and "sha1".
- Each object scanned now has a unique "Object ID".
- Sigtool: Renamed the sigtool option `--sha256` to `--sha2-256`.
The original option is still functional but is deprecated.
Other improvements
- Set a limit on the max-recursion config option. Users will no longer be
able to set max-recursion higher than 100.
This change prevents errors on start up or crashes if encountering
a file with that many layers of recursion.
- Build system: CMake improvements to support compiling for the AIX platform.
This change is courtesy of GitHub user KamathForAIX.
- Improve support for extracting malformed zip archives.
This change is courtesy of Frederick Sell.
- Windows: Code quality improvement for the ClamScan and ClamDScan `--move`
and `--remove` options.
This change is courtesy of Maxim Suhanov.
- Added file type recognition for an initial set of AI model file types.
The file type is accessible to applications using libclamav via the scan
callback functions and as an optional output parameter to the scan functions:
`cl_scanfile_ex()`, `cl_scanmap_ex()`, and `cl_scandesc_ex()`.
When scanning these files, type will now show "CL_TYPE_AI_MODEL" instead of
"CL_TYPE_BINARY_DATA".
- Added support for inline comments in ClamAV configuration files.
This change is courtesy of GitHub user userwiths.
- Disabled the MyDoom hardcoded/heuristic detection because of false positives.
- Sigtool: Added support for creating `.cdiff` and `.script` patch files for
CVDs that have underscores in the CVD name.
Also improved support for relative paths with the `--diff` command.
- Windows: Improved support for file names with UTF-8 characters not found in
the ANSI or OEM code pages when printing scan results or showing activity in
the ClamDTOP monitoring utility.
Fixed a bug with opening files with such names with the Sigtool utility.
- Improved the code quality of the ZIP module. Added inline documentation.
- Always run scan callbacks for embedded files. Embedded files are found within
other files through signature matches instead of by parsing. They will now
be processed the same way and then they can trigger application callbacks
(e.g., "pre-scan", "post-scan", etc.).
A consequence of this change is that each embedded file will be pattern-
matched just like any other extracted file. To minimize excessive pattern
matching, file header validation checks were added for ZIP, ARJ, and CAB.
Also fixed a bug with embedded PE file scanning to reduce unnecessary matching.
This change will impact scans with both the "leave-temps" feature and the
"force-to-disk" feature enabled, resulting in additional temporary files.
- Added DevContainer templates to the ClamAV Git repository in order to make it
easier to set up AlmaLinux or Debian development environments.
- Removed the "Heuristics.XZ.DicSizeLimit" alert because of potential unintended
alerts based on system state.
- Improved support for compiling on Solaris.
- Improved support for compiling on GNU/Hurd.
- Improved support for linking with the NCurses library dependency when
libtinfo is built as a separate library.
Bug fixes
- Reduced email multipart message parser complexity.
- Fixed possible undefined behavior in inflate64 module.
The inflate64 module is a modified version of the zlib library, taken from
version 1.2.3 with some customization and with some cherry-picked fixes.
This adds one additional fix from zlib 1.2.9.
Thank you to TITAN Team for reporting this issue.
- Fixed a bug in ClamD that broke reporting of memory usage on Linux.
The STATS command can be used to monitor ClamD directly or through ClamDTOP.
The memory stats feature does not work on all platforms (e.g., Windows).
- Windows: Fixed a build issue when the same library dependency is found in
two different locations.
- Fixed an infinite loop when scanning some email files in debug-mode.
This fix is courtesy of Yoann Lecuyer.
- Fixed a stack buffer overflow bug in the phishing signature load process.
This fix is courtesy of GitHub user Shivam7-1.
- Fixed a race condition in the Freshclam feature tests.
This fix is courtesy of GitHub user rma-x.
- Windows: Fixed a 5-byte heap buffer overread in the Windows unit tests.
This fix is courtesy of GitHub user Sophie0x2E.
- Fix double-extraction of OOXML-based office documents.
- ClamBC: Fixed crashes on startup.
- Fixed an assortment of issues found with Coverity static analysis.
- Fixed libclamav unit test, ClamD, and ClamDScan Valgrind test failures
affecting some platforms.
- Fixed crash in the Sigtool program when using the `--html-normalize` option.
- Fixed some potential NULL-pointer dereference issues if memory allocations
fail.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/common/aarch64/rust | 98 ++++++++++++------------
config/rootfiles/common/riscv64/rust | 98 ++++++++++++------------
config/rootfiles/common/x86_64/rust | 64 ++++++++--------
config/rootfiles/core/199/filelists/aarch64/rust | 1 +
config/rootfiles/core/199/filelists/files | 7 ++
config/rootfiles/core/199/filelists/riscv64/rust | 1 +
config/rootfiles/core/199/filelists/x86_64/rust | 1 +
config/rootfiles/packages/clamav | 14 ++--
html/cgi-bin/connections.cgi | 8 +-
html/cgi-bin/fireinfo.cgi | 8 +-
html/cgi-bin/fwhosts.cgi | 4 +-
html/cgi-bin/iptables.cgi | 3 +-
html/cgi-bin/modem-status.cgi | 8 +-
html/cgi-bin/wireguard.cgi | 9 ++-
html/cgi-bin/wirelessclient.cgi | 8 +-
lfs/clamav | 6 +-
lfs/rust | 14 ++--
17 files changed, 182 insertions(+), 170 deletions(-)
create mode 120000 config/rootfiles/core/199/filelists/aarch64/rust
create mode 120000 config/rootfiles/core/199/filelists/riscv64/rust
create mode 120000 config/rootfiles/core/199/filelists/x86_64/rust
Difference in files:
diff --git a/config/rootfiles/common/aarch64/rust b/config/rootfiles/common/aarch64/rust
index 0c3a86febf..19055ac28d 100644
--- a/config/rootfiles/common/aarch64/rust
+++ b/config/rootfiles/common/aarch64/rust
@@ -6,26 +6,26 @@
#usr/bin/rustdoc
#usr/etc/bash_completion.d
#usr/etc/bash_completion.d/cargo
-#usr/lib/libdarling_macro-e4812b92b7456d93.so
-#usr/lib/libderive_setters-782ea811bdd49ead.so
-#usr/lib/libderive_where-2fe66ad5e28b5751.so
-#usr/lib/libdisplaydoc-a57f8727fcc4df63.so
-#usr/lib/libicu_provider_macros-7393dfe0f4c17867.so
-#usr/lib/libproc_macro_hack-6b7ecb2d73ecb302.so
-#usr/lib/librustc_driver-38b407c8f864e7b6.so
-#usr/lib/librustc_fluent_macro-cb504772076bd568.so
-#usr/lib/librustc_index_macros-7fd17c7d9e7391ab.so
-#usr/lib/librustc_macros-9d206553845bfaf1.so
-#usr/lib/librustc_type_ir_macros-06a79348ebba339f.so
-#usr/lib/libserde_derive-302343a13ae8885d.so
-#usr/lib/libthiserror_impl-d9e9374b74803b94.so
-#usr/lib/libtime_macros-afb7a7514a52c11b.so
-#usr/lib/libtracing_attributes-a1b6044ce6688d4a.so
-#usr/lib/libunic_langid_macros_impl-18f9cc7c8a7e2045.so
-#usr/lib/libyoke_derive-e3f7ac5aa1e516cb.so
-#usr/lib/libzerocopy_derive-1d598db908ba3aa7.so
-#usr/lib/libzerofrom_derive-8a6f07078763d6bc.so
-#usr/lib/libzerovec_derive-4b210c688113c3c4.so
+#usr/lib/libdarling_macro-48c60ba578c36a18.so
+#usr/lib/libderive_setters-bdfbec951c0a0cf1.so
+#usr/lib/libderive_where-1280fdedb928b2b9.so
+#usr/lib/libdisplaydoc-2a39d0af4ba451ec.so
+#usr/lib/libicu_provider_macros-2355031845105802.so
+#usr/lib/libproc_macro_hack-2fb61d9ea1b51e16.so
+#usr/lib/librustc_driver-c048d41570338542.so
+#usr/lib/librustc_fluent_macro-5d08f2449a8d1a39.so
+#usr/lib/librustc_index_macros-3616864e0878239b.so
+#usr/lib/librustc_macros-9af36f6a1d64f82e.so
+#usr/lib/librustc_type_ir_macros-965f2d2a9475d718.so
+#usr/lib/libserde_derive-6a6f9b18169a12f0.so
+#usr/lib/libthiserror_impl-02bd7f8a09469611.so
+#usr/lib/libtime_macros-e83d7ae85f0f72f4.so
+#usr/lib/libtracing_attributes-c49d2f63065f963b.so
+#usr/lib/libunic_langid_macros_impl-0bbf2066776f4784.so
+#usr/lib/libyoke_derive-3668e5798b12e026.so
+#usr/lib/libzerocopy_derive-75eaa3aa75782f35.so
+#usr/lib/libzerofrom_derive-0f9693bcd0f4a45b.so
+#usr/lib/libzerovec_derive-302e6c91f5b923b1.so
#usr/lib/rustlib
#usr/lib/rustlib/aarch64-unknown-linux-gnu
#usr/lib/rustlib/aarch64-unknown-linux-gnu/bin
@@ -34,41 +34,42 @@
#usr/lib/rustlib/aarch64-unknown-linux-gnu/bin/gcc-ld/ld64.lld
#usr/lib/rustlib/aarch64-unknown-linux-gnu/bin/gcc-ld/lld-link
#usr/lib/rustlib/aarch64-unknown-linux-gnu/bin/gcc-ld/wasm-ld
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/bin/rust-objcopy
#usr/lib/rustlib/aarch64-unknown-linux-gnu/bin/wasm-component-ld
#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libaddr2line-ed18c7e0b38b6a17.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libadler-8fb8290c85cd5c7c.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/liballoc-e9c810686fe1c036.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libcfg_if-5c1562eddc983801.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libcompiler_builtins-87871e2835343b94.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libcore-7930636387874415.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libgetopts-75987d6ac78cc7ea.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libgimli-5cbb446b3b26b1c9.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libhashbrown-d4e58edb08cbd4f4.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/liblibc-1ff5c9b6079577e0.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libmemchr-33a84071306b4456.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libminiz_oxide-25bb268d2bc63db2.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libobject-082b7755a27e9161.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libpanic_abort-337bd1c969e487c9.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libpanic_unwind-47c9dea6317daa9b.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libproc_macro-d4afb888ada6e486.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libprofiler_builtins-7839ad938a6337e2.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libaddr2line-b5c2000e0cd7e2da.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libadler-7522a3b17c9865c1.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/liballoc-dd37cd35aaa8bbc1.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libcfg_if-d85d8ca815fd8ede.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libcompiler_builtins-28e5089f2b5f6c14.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libcore-f87f661789447f5d.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libgetopts-0d2560c9c04f523e.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libgimli-260b0ae067fcbc74.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libhashbrown-f81554601df81dba.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/liblibc-a407511d16763038.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libmemchr-49c225520932793c.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libminiz_oxide-904261fe6c2793b4.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libobject-1238c66087ccc721.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libpanic_abort-a663c8e263fd76c3.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libpanic_unwind-8015a5c851b5d89f.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libproc_macro-13fc50646028bfe3.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libprofiler_builtins-17fa3f5dd5b39bf9.rlib
#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc-stable_rt.asan.a
#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc-stable_rt.hwasan.a
#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc-stable_rt.lsan.a
#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc-stable_rt.msan.a
#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc-stable_rt.tsan.a
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc_demangle-0880bcdf77605aa1.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc_std_workspace_alloc-a2f8ab699e7c1d36.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc_std_workspace_core-fe7f8f1322fd0ddf.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc_std_workspace_std-7efb957f57bb431c.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libstd-346e3cabb9c58815.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libstd-346e3cabb9c58815.so
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libstd_detect-1e204028eba31834.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libsysroot-d657145cba988f86.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libtest-66229a29f5899ccb.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libunicode_width-b2702c66d06dc07f.rlib
-#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libunwind-4009a45ae155a494.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc_demangle-bdd5e3a96276e325.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc_std_workspace_alloc-1ef59f0a1b872e31.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc_std_workspace_core-e352fdf6f38ada21.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/librustc_std_workspace_std-05a98bc8a268f144.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libstd-55e662df679d038f.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libstd-55e662df679d038f.so
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libstd_detect-0b86b09b624ecd98.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libsysroot-61b860b8000a8886.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libtest-603b1bafd4f145b9.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libunicode_width-691e5c3921b9b49f.rlib
+#usr/lib/rustlib/aarch64-unknown-linux-gnu/lib/libunwind-1146c5c38405ef5e.rlib
#usr/lib/rustlib/components
#usr/lib/rustlib/etc
#usr/lib/rustlib/etc/gdb_load_rust_pretty_printers.py
@@ -130,7 +131,6 @@
#usr/share/man/man1/cargo-uninstall.1
#usr/share/man/man1/cargo-update.1
#usr/share/man/man1/cargo-vendor.1
-#usr/share/man/man1/cargo-verify-project.1
#usr/share/man/man1/cargo-version.1
#usr/share/man/man1/cargo-yank.1
#usr/share/man/man1/cargo.1
diff --git a/config/rootfiles/common/riscv64/rust b/config/rootfiles/common/riscv64/rust
index 053b28eb20..fd106892d7 100644
--- a/config/rootfiles/common/riscv64/rust
+++ b/config/rootfiles/common/riscv64/rust
@@ -6,26 +6,26 @@
#usr/bin/rustdoc
#usr/etc/bash_completion.d
#usr/etc/bash_completion.d/cargo
-#usr/lib/libdarling_macro-f120acbe3fbf23e7.so
-#usr/lib/libderive_setters-7c5e5b5bf44f53e8.so
-#usr/lib/libderive_where-84883d398d22408b.so
-#usr/lib/libdisplaydoc-6c45d70920b32d53.so
-#usr/lib/libicu_provider_macros-6a45a92d7e3f1c89.so
-#usr/lib/libproc_macro_hack-5131ce810273c4f4.so
-#usr/lib/librustc_driver-b7cb668fab885507.so
-#usr/lib/librustc_fluent_macro-e7823f2eee0d21e6.so
-#usr/lib/librustc_index_macros-f57ef0bbb55e0857.so
-#usr/lib/librustc_macros-fab7d1213d0e915d.so
-#usr/lib/librustc_type_ir_macros-ec7782fc3138816c.so
-#usr/lib/libserde_derive-b4e736c5625beb55.so
-#usr/lib/libthiserror_impl-efe79b1fd5672ccb.so
-#usr/lib/libtime_macros-58dd7f67eb1ec1c9.so
-#usr/lib/libtracing_attributes-da5071c862de5108.so
-#usr/lib/libunic_langid_macros_impl-1bd9a9c933968175.so
-#usr/lib/libyoke_derive-f6cead5c8dc55004.so
-#usr/lib/libzerocopy_derive-99740fa49715a4e1.so
-#usr/lib/libzerofrom_derive-4758a960f9514836.so
-#usr/lib/libzerovec_derive-f712fa0bf8b4d246.so
+#usr/lib/libdarling_macro-333094c091df4015.so
+#usr/lib/libderive_setters-eb9d17375f0d2024.so
+#usr/lib/libderive_where-a4ceb656b618c723.so
+#usr/lib/libdisplaydoc-6ab65588c4fed8b6.so
+#usr/lib/libicu_provider_macros-c1885a81c3aaa649.so
+#usr/lib/libproc_macro_hack-e8d8a46285916400.so
+#usr/lib/librustc_driver-308f082c9fea1d1b.so
+#usr/lib/librustc_fluent_macro-556889dcb410e6da.so
+#usr/lib/librustc_index_macros-4b06439ae4c576d8.so
+#usr/lib/librustc_macros-0c8828fa6210aaec.so
+#usr/lib/librustc_type_ir_macros-0b05e66771d07295.so
+#usr/lib/libserde_derive-70778b02209d2ff5.so
+#usr/lib/libthiserror_impl-35548549b7872eab.so
+#usr/lib/libtime_macros-ef6b176b1d947a33.so
+#usr/lib/libtracing_attributes-85c7e1ea105764f4.so
+#usr/lib/libunic_langid_macros_impl-b2f246a72e268ad0.so
+#usr/lib/libyoke_derive-701ee0d81fd6e1e2.so
+#usr/lib/libzerocopy_derive-e95fa47f5d0db252.so
+#usr/lib/libzerofrom_derive-42ab18fae7d19f9a.so
+#usr/lib/libzerovec_derive-8fa84d155226655f.so
#usr/lib/rustlib
#usr/lib/rustlib/components
#usr/lib/rustlib/etc
@@ -47,36 +47,37 @@
#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/bin/gcc-ld/ld64.lld
#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/bin/gcc-ld/lld-link
#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/bin/gcc-ld/wasm-ld
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/bin/rust-objcopy
#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/bin/wasm-component-ld
#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libaddr2line-9da5c100a9d34429.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libadler-7e4f8dd482183a21.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/liballoc-f0fe60513debccff.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libcfg_if-6c5a22ddc7094176.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libcompiler_builtins-76f7f47a467bd936.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libcore-4bef8ab5687945fb.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libgetopts-97d2bd2368965052.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libgimli-8fa123560ceb05a9.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libhashbrown-259d35b92dc093c0.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/liblibc-4ed35dec872f0065.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libmemchr-c85bbb7913e554eb.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libminiz_oxide-1315d4a2230927ba.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libobject-929b371ec32311c2.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libpanic_abort-5daeff17201a4144.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libpanic_unwind-018e581d84800e5c.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libproc_macro-93d0062dd5c838e2.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libprofiler_builtins-9c55fc65ee9866f0.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/librustc_demangle-064cca745c0e948c.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/librustc_std_workspace_alloc-ffcfaafef9dfe593.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/librustc_std_workspace_core-9f04f67614dd1725.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/librustc_std_workspace_std-f4e287682232ea77.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libstd-1c014cbb4a280f1a.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libstd-1c014cbb4a280f1a.so
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libstd_detect-763d9d293fd9c0fb.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libsysroot-24473b3cfbf82fe5.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libtest-67c59adcf581f2a5.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libunicode_width-6785439f71fd7500.rlib
-#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libunwind-f5cc357d9bfd7688.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libaddr2line-65de847b01fb13aa.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libadler-f6150e2c8c7520a2.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/liballoc-65012f886c45ba83.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libcfg_if-47b2ac880739af72.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libcompiler_builtins-dcaac2e374baa989.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libcore-e62f8d07515ae7ba.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libgetopts-3510c6a7a63b709c.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libgimli-94dceb6179529152.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libhashbrown-4a3b141370a80fcc.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/liblibc-e30ed58f641c8fef.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libmemchr-108d2e39dad4e231.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libminiz_oxide-809679d650a1462c.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libobject-3d904933cc45ac22.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libpanic_abort-a7dfdf989f233c89.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libpanic_unwind-432a51b442d90b95.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libproc_macro-cd166f2f689a98b2.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libprofiler_builtins-67327994d1b4bdc1.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/librustc_demangle-6087e86748847731.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/librustc_std_workspace_alloc-45dd03eb45d52454.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/librustc_std_workspace_core-fc703f796971554d.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/librustc_std_workspace_std-ebf8396a16eebb78.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libstd-8231cf027982a9e9.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libstd-8231cf027982a9e9.so
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libstd_detect-045721e0e8276e21.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libsysroot-3abe192d8d8fd99f.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libtest-11bd44812334fefb.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libunicode_width-5ad33c2ccb05df6c.rlib
+#usr/lib/rustlib/riscv64gc-unknown-linux-gnu/lib/libunwind-aaaa2315ee122353.rlib
#usr/lib/rustlib/rust-installer-version
#usr/lib/rustlib/uninstall.sh
#usr/libexec/rust-analyzer-proc-macro-srv
@@ -125,7 +126,6 @@
#usr/share/man/man1/cargo-uninstall.1
#usr/share/man/man1/cargo-update.1
#usr/share/man/man1/cargo-vendor.1
-#usr/share/man/man1/cargo-verify-project.1
#usr/share/man/man1/cargo-version.1
#usr/share/man/man1/cargo-yank.1
#usr/share/man/man1/cargo.1
diff --git a/config/rootfiles/common/x86_64/rust b/config/rootfiles/common/x86_64/rust
index 6df4dd5c44..e6c0ac5efb 100644
--- a/config/rootfiles/common/x86_64/rust
+++ b/config/rootfiles/common/x86_64/rust
@@ -6,9 +6,9 @@
#usr/bin/rustdoc
#usr/etc/bash_completion.d
#usr/etc/bash_completion.d/cargo
-#usr/lib/libLLVM-19-rust-1.83.0-stable.so
-#usr/lib/libLLVM.so.19.1-rust-1.83.0-stable
-#usr/lib/librustc_driver-a1396821e0813435.so
+#usr/lib/libLLVM-19-rust-1.85.0-stable.so
+#usr/lib/libLLVM.so.19.1-rust-1.85.0-stable
+#usr/lib/librustc_driver-77ea5bfe5f9d9ec5.so
#usr/lib/rustlib
#usr/lib/rustlib/components
#usr/lib/rustlib/etc
@@ -32,42 +32,43 @@
#usr/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld/ld64.lld
#usr/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld/lld-link
#usr/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld/wasm-ld
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-objcopy
#usr/lib/rustlib/x86_64-unknown-linux-gnu/bin/wasm-component-ld
#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-8d001680935b5e3c.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libadler-8251d2cef7072448.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/liballoc-8b83dbf3a7b8f999.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-51ea098fce5006bf.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcompiler_builtins-abe05db089cc2c62.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcore-959d3389fa3da8a5.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgetopts-094c0ce9f8c98ed9.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-ba8ce71964f984f4.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libhashbrown-9057355c92c922d5.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/liblibc-5a14e0d0b712e731.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-bd0d6cccce077b99.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libminiz_oxide-aca15549d5bff974.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-27dc4aa955912662.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_abort-75bd441a38375155.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-e31ab23316ed5080.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libproc_macro-a2fc9021817a412b.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libprofiler_builtins-29b8697b99bf2c3c.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-86d8d9428792e8ef.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libadler-fa99f5692b5dce85.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/liballoc-715bc629a88bca60.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-f7ee3f1ea78d9dae.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcompiler_builtins-1af05515ab19524a.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcore-406129d0e3fbc101.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgetopts-d04d0c542852b7d7.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-10f06487503767c2.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libhashbrown-a7f5bb2f736d3c49.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/liblibc-d3a35665f881365a.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-500edd5521c440d4.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libminiz_oxide-376454d49910c786.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-ec6154ccae37a33e.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_abort-4dabff3cfff0af69.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-267e668abf74a283.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libproc_macro-57e423f2e16d22f0.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libprofiler_builtins-39641a735291dd5c.rlib
#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc-stable_rt.asan.a
#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc-stable_rt.dfsan.a
#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc-stable_rt.lsan.a
#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc-stable_rt.msan.a
#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc-stable_rt.safestack.a
#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc-stable_rt.tsan.a
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc_demangle-99a73526abcec14b.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc_std_workspace_alloc-358be9bc1f6bab04.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc_std_workspace_core-c6fd227bdc7b39ff.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc_std_workspace_std-e1cd6e17fe237c71.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-ca74a2d9c5166d9f.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-ca74a2d9c5166d9f.so
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd_detect-63ac0d22cff92579.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libsysroot-3c56ec47f3360b59.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libtest-aa035fdca64e6492.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libunicode_width-aa0663517f777947.rlib
-#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libunwind-7d50b86011c66411.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc_demangle-6a38424de1e5bca5.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc_std_workspace_alloc-7e368919bdc4a44c.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc_std_workspace_core-ae70165d1278cff7.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/librustc_std_workspace_std-6cf585dc4073d549.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-6273572f18644c87.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-6273572f18644c87.so
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd_detect-de9763ea1c19dca3.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libsysroot-e9aa32a273745138.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libtest-bb17ba1fa02ea08e.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libunicode_width-7748d1fe0f8acd00.rlib
+#usr/lib/rustlib/x86_64-unknown-linux-gnu/lib/libunwind-91cafdaf16f7fe40.rlib
#usr/libexec/rust-analyzer-proc-macro-srv
#usr/share/cargo
#usr/share/cargo/registry
@@ -114,7 +115,6 @@
#usr/share/man/man1/cargo-uninstall.1
#usr/share/man/man1/cargo-update.1
#usr/share/man/man1/cargo-vendor.1
-#usr/share/man/man1/cargo-verify-project.1
#usr/share/man/man1/cargo-version.1
#usr/share/man/man1/cargo-yank.1
#usr/share/man/man1/cargo.1
diff --git a/config/rootfiles/core/199/filelists/aarch64/rust b/config/rootfiles/core/199/filelists/aarch64/rust
new file mode 120000
index 0000000000..3bf2aafc19
--- /dev/null
+++ b/config/rootfiles/core/199/filelists/aarch64/rust
@@ -0,0 +1 @@
+../../../../common/aarch64/rust
\ No newline at end of file
diff --git a/config/rootfiles/core/199/filelists/files b/config/rootfiles/core/199/filelists/files
index d1dcfade35..17b198cb7c 100644
--- a/config/rootfiles/core/199/filelists/files
+++ b/config/rootfiles/core/199/filelists/files
@@ -5,6 +5,13 @@ etc/rc.d/init.d/openvpn-rw
etc/rc.d/init.d/wireguard
etc/ssh/ssh_config
etc/ssh/sshd_config
+srv/web/ipfire/cgi-bin/connections.cgi
+srv/web/ipfire/cgi-bin/fireinfo.cgi
+srv/web/ipfire/cgi-bin/fwhosts.cgi
+srv/web/ipfire/cgi-bin/iptables.cgi
+srv/web/ipfire/cgi-bin/modem-status.cgi
srv/web/ipfire/cgi-bin/vulnerabilities.cgi
+srv/web/ipfire/cgi-bin/wireguard.cgi
+srv/web/ipfire/cgi-bin/wirelessclient.cgi
usr/sbin/openvpn-authenticator
var/ipfire/header.pl
diff --git a/config/rootfiles/core/199/filelists/riscv64/rust b/config/rootfiles/core/199/filelists/riscv64/rust
new file mode 120000
index 0000000000..e7404a1d2e
--- /dev/null
+++ b/config/rootfiles/core/199/filelists/riscv64/rust
@@ -0,0 +1 @@
+../../../../common/riscv64/rust
\ No newline at end of file
diff --git a/config/rootfiles/core/199/filelists/x86_64/rust b/config/rootfiles/core/199/filelists/x86_64/rust
new file mode 120000
index 0000000000..9c589e0aac
--- /dev/null
+++ b/config/rootfiles/core/199/filelists/x86_64/rust
@@ -0,0 +1 @@
+../../../../common/x86_64/rust
\ No newline at end of file
diff --git a/config/rootfiles/packages/clamav b/config/rootfiles/packages/clamav
index d5495e4b7b..5e5fe5438f 100644
--- a/config/rootfiles/packages/clamav
+++ b/config/rootfiles/packages/clamav
@@ -14,20 +14,20 @@ usr/bin/sigtool
#usr/include/libfreshclam.h
usr/lib/libclamav.so
usr/lib/libclamav.so.12
-usr/lib/libclamav.so.12.0.3
+usr/lib/libclamav.so.12.1.0
#usr/lib/libclamav_rust.a
usr/lib/libclammspack.so
usr/lib/libclammspack.so.0
usr/lib/libclammspack.so.0.8.0
usr/lib/libclamunrar.so
usr/lib/libclamunrar.so.12
-usr/lib/libclamunrar.so.12.0.3
+usr/lib/libclamunrar.so.12.1.0
usr/lib/libclamunrar_iface.so
usr/lib/libclamunrar_iface.so.12
-usr/lib/libclamunrar_iface.so.12.0.3
+usr/lib/libclamunrar_iface.so.12.1.0
usr/lib/libfreshclam.so
-usr/lib/libfreshclam.so.3
-usr/lib/libfreshclam.so.3.0.2
+usr/lib/libfreshclam.so.4
+usr/lib/libfreshclam.so.4.0.0
#usr/lib/pkgconfig/libclamav.pc
usr/sbin/clamd
#usr/share/doc/ClamAV
@@ -133,7 +133,6 @@ usr/sbin/clamd
#usr/share/doc/ClamAV/html/manual/Installing/Add-clamav-user.html
#usr/share/doc/ClamAV/html/manual/Installing/Community-projects.html
#usr/share/doc/ClamAV/html/manual/Installing/Docker.html
-#usr/share/doc/ClamAV/html/manual/Installing/Installing-from-source-Unix-old.html
#usr/share/doc/ClamAV/html/manual/Installing/Installing-from-source-Unix.html
#usr/share/doc/ClamAV/html/manual/Installing/Installing-from-source-Windows.html
#usr/share/doc/ClamAV/html/manual/Installing/Packages.html
@@ -168,7 +167,6 @@ usr/sbin/clamd
#usr/share/doc/ClamAV/html/print.html
#usr/share/doc/ClamAV/html/searcher.js
#usr/share/doc/ClamAV/html/searchindex.js
-#usr/share/doc/ClamAV/html/searchindex.json
#usr/share/doc/ClamAV/html/sitemap.xml
#usr/share/doc/ClamAV/html/theme-dawn.js
#usr/share/doc/ClamAV/html/theme-tomorrow_night.js
@@ -176,6 +174,8 @@ usr/sbin/clamd
#usr/share/doc/ClamAV/html/toc.js
#usr/share/doc/ClamAV/html/tomorrow-night.css
#var/ipfire/clamav
+#var/ipfire/clamav/certs
+#var/ipfire/clamav/certs/clamav.crt
var/ipfire/clamav/clamd.conf
var/ipfire/clamav/clamd.conf.sample
var/ipfire/clamav/freshclam.conf
diff --git a/html/cgi-bin/connections.cgi b/html/cgi-bin/connections.cgi
index 80cb4bb694..0c1282a922 100644
--- a/html/cgi-bin/connections.cgi
+++ b/html/cgi-bin/connections.cgi
@@ -2,7 +2,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2023 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -22,9 +22,9 @@
use strict;
use Switch;
-# enable only the following on debugging purpose
-use warnings;
-use CGI::Carp 'fatalsToBrowser';
+# only enable the following for debugging purposes
+#use warnings;
+#use CGI::Carp 'fatalsToBrowser';
require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
diff --git a/html/cgi-bin/fireinfo.cgi b/html/cgi-bin/fireinfo.cgi
index 04e36faf45..33d2f8a889 100644
--- a/html/cgi-bin/fireinfo.cgi
+++ b/html/cgi-bin/fireinfo.cgi
@@ -2,7 +2,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2011 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2011-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -21,9 +21,9 @@
use strict;
-# enable only the following on debugging purpose
-use warnings;
-use CGI::Carp 'fatalsToBrowser';
+# only enable the following for debugging purposes
+#use warnings;
+#use CGI::Carp 'fatalsToBrowser';
require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
diff --git a/html/cgi-bin/fwhosts.cgi b/html/cgi-bin/fwhosts.cgi
index dca425b692..7820523c5e 100644
--- a/html/cgi-bin/fwhosts.cgi
+++ b/html/cgi-bin/fwhosts.cgi
@@ -20,11 +20,11 @@
###############################################################################
use strict;
-# enable only the following on debugging purpose
+# only enable the following for debugging purposes
#use warnings;
+#use CGI::Carp 'fatalsToBrowser';
use Sort::Naturally;
-use CGI::Carp 'fatalsToBrowser';
no warnings 'uninitialized';
require '/var/ipfire/general-functions.pl';
require '/var/ipfire/network-functions.pl';
diff --git a/html/cgi-bin/iptables.cgi b/html/cgi-bin/iptables.cgi
index a27d6a9207..de519a1def 100644
--- a/html/cgi-bin/iptables.cgi
+++ b/html/cgi-bin/iptables.cgi
@@ -2,7 +2,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2010 IPFire Team #
+# Copyright (C) 2010-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -23,6 +23,7 @@ require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
require "${General::swroot}/header.pl";
+# only enable the following for debugging purposes
#use warnings;
#use CGI::Carp 'fatalsToBrowser';
diff --git a/html/cgi-bin/modem-status.cgi b/html/cgi-bin/modem-status.cgi
index 2d33a3d5e1..9237803190 100644
--- a/html/cgi-bin/modem-status.cgi
+++ b/html/cgi-bin/modem-status.cgi
@@ -2,7 +2,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2014 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -21,9 +21,9 @@
use strict;
-# enable only the following on debugging purpose
-use warnings;
-use CGI::Carp 'fatalsToBrowser';
+# only enable the following for debugging purposes
+#use warnings;
+#use CGI::Carp 'fatalsToBrowser';
require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
diff --git a/html/cgi-bin/wireguard.cgi b/html/cgi-bin/wireguard.cgi
index b9661948c9..bcb27cf277 100644
--- a/html/cgi-bin/wireguard.cgi
+++ b/html/cgi-bin/wireguard.cgi
@@ -2,7 +2,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2024 Michael Tremer <michael.tremer@ipfire.org> #
+# Copyright (C) 2024-2025 Michael Tremer <michael.tremer@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -21,9 +21,10 @@
use strict;
-# enable only the following on debugging purpose
-use warnings;
-use CGI::Carp 'fatalsToBrowser';
+# only enable the following for debugging purposes
+#use warnings;
+#use CGI::Carp 'fatalsToBrowser';
+
use Imager::QRCode;
use MIME::Base64;
diff --git a/html/cgi-bin/wirelessclient.cgi b/html/cgi-bin/wirelessclient.cgi
index 19c5bea501..6a2ee906a8 100644
--- a/html/cgi-bin/wirelessclient.cgi
+++ b/html/cgi-bin/wirelessclient.cgi
@@ -2,7 +2,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2012 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2012-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,9 +24,9 @@
use strict;
-# enable only the following on debugging purpose
-use warnings;
-use CGI::Carp 'fatalsToBrowser';
+# only enable the following for debugging purposes
+#use warnings;
+#use CGI::Carp 'fatalsToBrowser';
require '/var/ipfire/general-functions.pl';
require "${General::swroot}/lang.pl";
diff --git a/lfs/clamav b/lfs/clamav
index 6a1d3849b3..b3119bcd72 100644
--- a/lfs/clamav
+++ b/lfs/clamav
@@ -26,7 +26,7 @@ include Config
SUMMARY = Antivirus Toolkit
-VER = 1.4.3
+VER = 1.5.0
THISAPP = clamav-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = clamav
-PAK_VER = 77
+PAK_VER = 78
DEPS =
@@ -50,7 +50,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 144be77e7104ebf78482c9efc411a4a168bb4ea3ad18abb237e7bcc1f5cf3e2c10d5478a54d9dc0d82b028c923065bc614cd535fd4f67fb1e73f5fe1c6425861
+$(DL_FILE)_BLAKE2 = e14e7d1a4c4ef0d238a8cff02927492b521d56476377597b366601dc3c50c9fe60392ccdbd40ddda1ec8ddd1959a1acd8129937c4fde1e6b6f54b49043e08320
install : $(TARGET)
diff --git a/lfs/rust b/lfs/rust
index 74cfb92022..a122265ebb 100644
--- a/lfs/rust
+++ b/lfs/rust
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,12 +24,12 @@
include Config
-VER = 1.83.0
+VER = 1.85.0
-# From https://forge.rust-lang.org/infra/other-installation-methods.html#standalone-installers
+# https://forge.rust-lang.org/infra/other-installation-methods.html#standalone-installers
THISAPP = rust-$(VER)
-DL_FILE = $(THISAPP)-$(RUST_PLATFORM).tar.xz
+DL_FILE = $(THISAPP)-$(RUST_PLATFORM).tar.gz
DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)-$(RUST_PLATFORM)
TARGET = $(DIR_INFO)/$(THISAPP)
@@ -42,9 +42,9 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(THISAPP)-x86_64-unknown-linux-gnu.tar.xz_BLAKE2 = e2c661061e21c3ea6a75c0c9f43d0558405fe4f16f75d763f5a80c1d0c4d7cacd7bd7136e625872f9c22455439ee070ed9f84d661b9cb2d74b0f436153a34ffa
-$(THISAPP)-aarch64-unknown-linux-gnu.tar.xz_BLAKE2 = 781f87532f51b7d0fcef09dce5731bab309ff9510371b17da0e389db85962795a180807047b5989a880c5c47fa2ec704e00d240ac7c06a3e0fbed9c4f640e6ba
-$(THISAPP)-riscv64gc-unknown-linux-gnu.tar.xz_BLAKE2 = 91139066f3ac6a652db13985a225547eed242a6efaab0021bcf78b31e9e98fbedcdfe932110fa4c918f5eb3d8336b9b41a15dc2fcd316561d56e5bf205dd1567
+$(THISAPP)-x86_64-unknown-linux-gnu.tar.gz_BLAKE2 = c8df9b124ed155482d445c01a4e4d113206fc5d1bd2c8c55fbcd3462819796a06ec3b5fe8a0943f8eb46ef256673cf50101bb8644fea1565ae612d650f23ece8
+$(THISAPP)-aarch64-unknown-linux-gnu.tar.gz_BLAKE2 = bb5c7085b352e33b5cbfccc3910c2793918c517beb77cd432de60d798de997d0f659f489a08e98fd85e2ea56593b8fb831c9d6a8f78c684712b5bbc35a5824d4
+$(THISAPP)-riscv64gc-unknown-linux-gnu.tar.gz_BLAKE2 = a29aae566e349d597f7ed311c4b7b061c267f9c678b0227930401b8b89ccf56168bbbc168601d8c9d927a116f3efeb1e8ce582e9ca4aec40f270fa0ea9fa9a01
install : $(TARGET)
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2025-10-13 15:50 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-10-13 15:50 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. ed642520e68e73c8a72cce05728b5615f813ae79 Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox