public inbox for ipfire-scm@lists.ipfire.org
 help / color / mirror / Atom feed
* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 39fd5ed1d733fb5b9880cdecd173fb334d248e33
@ 2025-10-15  9:07 Michael Tremer
  0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2025-10-15  9:07 UTC (permalink / raw)
  To: ipfire-scm

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  39fd5ed1d733fb5b9880cdecd173fb334d248e33 (commit)
       via  fc4f89d58e6074b9c858f00a6e4ba9bbed1f2478 (commit)
       via  a547ea3d0a502dede283c4f429dfef6fa10f3d6e (commit)
       via  dddd5c3dde909913d20ac9023a69dfc68979fecd (commit)
       via  add6d88c75e606c5624aefba64b1d93cc639753e (commit)
       via  1ff7d83feb175d2f74a3a11de64a618cca768ace (commit)
       via  f8eb6555c8b0d06352b73257bded14c68a66539c (commit)
       via  735dc6f15973d4465cfad778242a272500430f9a (commit)
       via  51ba2168ca5107280a292371ce49b2ca81bcb905 (commit)
       via  df6a4a532020212fda8cf31ddfa4e6ce6eb52352 (commit)
       via  f53e622336180543a431f39976042730f03e6cc7 (commit)
       via  e95252a7566ab9d87e3d33c88060dd5367091534 (commit)
       via  d1a2e4ad225f69ca42b7dac822b322afa9ed960a (commit)
       via  0dc4824f7512498f2b854038203e8eefc5d7afe8 (commit)
       via  128ed29d827f1863208a29887e1505684e50310f (commit)
       via  d768e1893ebfe0c5416a2ce5f1403ce4d82dacdc (commit)
      from  5c548191d022319e90707b312d76b4506e5e6420 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 39fd5ed1d733fb5b9880cdecd173fb334d248e33
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 18:32:06 2025 +0200

    openssl: Update to version 3.6.0
    
    - Update from version 3.5.4 to 3.6.0
    - Update of rootfile
    - The changelog mentions that some changes might be significant or incompatible in
       certain situations. I had a look through it and didn't believe that these would
       apply to IPFire but it would be good for someone else to confirm.
    - What I did do was to install this version of openssl into my vm testbed and then
       tested out running openvpn rw & n2n. Everything worked fine.
    - I then cleared the x509 root/host certificate set and then created a new one followed
       by new client certificates. All these were successfully created without any issues.
    - Changelog
        3.6.0
    	Feature release adding significant new functionality to OpenSSL.
    	This release incorporates the following potentially significant or incompatible
    	 changes:
    	    Added NIST security categories for PKEY objects.
    	    Added support for EVP_SKEY opaque symmetric key objects to the key
    	     derivation and key exchange provider methods. Added EVP_KDF_CTX_set_SKEY(),
    	     EVP_KDF_derive_SKEY(), and EVP_PKEY_derive_SKEY() functions.
    	    Added LMS signature verification support as per [SP 800-208]..
    	     This support is present in both the FIPS and default providers.
    	    An ANSI-C toolchain is no longer sufficient for building OpenSSL.
    	     The code should be built using compilers supporting C-99 features.
    	    Support for the VxWorks platforms has been removed.
    	    Added an openssl configutl utility for processing the OpenSSL
    	     configuration file and dumping the equal configuration file.
    	    Added support for FIPS 186-5 deterministic ECDSA signature
    	     generation to the FIPS provider.
    	    Deprecated EVP_PKEY_ASN1_METHOD-related functions.
    
    Tested-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit fc4f89d58e6074b9c858f00a6e4ba9bbed1f2478
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:08:07 2025 +0200

    core199: Ship vim
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit a547ea3d0a502dede283c4f429dfef6fa10f3d6e
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:08:00 2025 +0200

    vim: Update to version 9.1.1854
    
    - Update from version 9.1.1406 to 9.1.1854
    - Update of rootfile
    - Changelog is not available. Generally each patch version number update is related to
       a commit entry in the git repository. The details for all the commit changes can be
       found at https://github.com/vim/vim/commits/master/
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit dddd5c3dde909913d20ac9023a69dfc68979fecd
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:08:06 2025 +0200

    core199: Ship p11-kit
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit add6d88c75e606c5624aefba64b1d93cc639753e
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:07:59 2025 +0200

    p11-kit: Update to version 0.25.10
    
    - Update from version 0.25.8 to 0.25 10
    - Update of rootfile
    - Changelog
        0.25.10
    	* ci fixes [PR#722, PR#723]
        0.25.9
    	* subprojects/pkcs11-json: Update git submodule [PR#719]
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 1ff7d83feb175d2f74a3a11de64a618cca768ace
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:08:05 2025 +0200

    core199: Ship openssh
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit f8eb6555c8b0d06352b73257bded14c68a66539c
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:07:58 2025 +0200

    openssh: Update to version 10.2p1
    
    - Update from version 10.0p1 to 10.2p1
    - No change to rootfile
    - Changelog
        10.2p1
          Future deprecation warning
    	 * A future release of OpenSSH will deprecate support for SHA1 SSHFP
    	   records due to weaknesses in the SHA1 hash function. SHA1 SSHFP
    	   DNS records will be ignored and ssh-keygen -r will generate only
    	   SHA256 SSHFP records.
    	   The SHA256 hash algorithm, which has no known weaknesses, has
    	   been supported for SSHFP records since OpenSSH 6.1, released in
    	   2012.
          Bugfixes
    	 * ssh(1): fix mishandling of terminal connections when
    	   ControlPersist was active that rendered the session unusable.
    	   bz3872
    	 * ssh-keygen(1): fix download of keys from PKCS#11 tokens.
    	 * ssh-keygen(1): fix CA signing operations when the CA key is held
    	   in a ssh-agent(1). bz3877
        10.1p1
          Future deprecation warning
    	 * A future release of OpenSSH will deprecate support for SHA1 SSHFP
    	   records due to weaknesses in the SHA1 hash function. SHA1 SSHFP
    	   DNS records will be ignored and ssh-keygen -r will generate only
    	   SHA256 SSHFP records.
    	   The SHA256 hash algorithm, which has no known weaknesses, has
    	   been supported for SSHFP records since OpenSSH 6.1, released in
    	   2012.
          Potentially-incompatible changes
    	 * ssh(1): add a warning when the connection negotiates a non-post
    	   quantum key agreement algorithm.
    	   This warning has been added due to the risk of "store now, decrypt
    	   later" attacks. More details at https://openssh.com/pq.html
    	   This warning may be controlled via a new WarnWeakCrypto ssh_config
    	   option, defaulting to on. This option is likely to control
    	   additional weak crypto warnings in the future.
    	 * ssh(1), sshd(8): major changes to handling of DSCP marking/IPQoS
    	   In both client and server the default DSCP (a.k.a IPQoS) values
    	   were revised and the way these values are used during runtime has
    	   changed.
    	   Interactive traffic is now assigned to the EF (Expedited
    	   Forwarding) class by default. This provides more appropriate
    	   packet prioritisation information for the intermediate network,
    	   such as wireless media (cf. RFC 8325). Non-interactive traffic
    	   will now use the operating system default DSCP marking. Both the
    	   interactive and non-interactive DSCP values may be overridden via
    	   the IPQoS keyword, described in ssh_config(5) and sshd_config(5).
    	   The appropriate DSCP marking is now automatically selected and
    	   updated as needed over the course of a connection's lifetime.
    	   ssh(1) and sshd(8) will switch between the interactive and
    	   non-interactive IPQoS values depending on the type of SSH
    	   channels open at the time. For example, if an sftp session is
    	   using the connection alongside a shell session, then the non-
    	   interactive value will be used for the duration of the sftp. A
    	   connection which contains only interactive sessions is marked EF.
    	 * ssh(1), sshd(8): deprecate support for IPv4 type-of-service (ToS)
    	   keywords in the IPQoS configuration directive.
    	   Type of Service (ToS) was deprecated in the late nineties and
    	   replaced with the Differentiated Services architecture, which
    	   has significant advantages for operators because it offers more
    	   granularity.
    	   OpenSSH switched its default IPQoS from ToS to DSCP values in
    	   2018 (openssh-7.7).
    	   IPQoS configurations with 'lowdelay', 'reliability', or
    	   'throughput' will be ignored and will instead use the system
    	   default QoS settings. Additionally, a debug message will be logged
    	   about the deprecation with a suggestion to use DSCP QoS instead.
    	 * ssh-add(1): when adding certificates to an agent, set the expiry
    	   to the certificate expiry time plus a short (5 min) grace period.
    	   This will cause the agent to automatically remove certificates
    	   shortly after they expire. A new ssh-add -N option disables this
    	   behaviour.
    	 * All: remove experimental support for XMSS keys. This was never
    	   enabled by default. We expect to implement a new post-quantum
    	   signature scheme in the near future.
    	 * ssh-agent(1), sshd(8): move agent listener sockets from /tmp to
    	   under ~/.ssh/agent for both ssh-agent(1) and forwarded sockets
    	   in sshd(8).
    	   This ensures processes that have restricted filesystem access
    	   that includes /tmp do not ambiently have the ability to use keys
    	   in an agent.
    	   Moving the default directory has the consequence that the OS will
    	   no longer clean up stale agent sockets, so ssh-agent now gains
    	   this ability.
    	   To support $HOME on NFS, the socket path includes a truncated
    	   hash of the hostname. ssh-agent will, by default, only clean up
    	   sockets from the same hostname.
    	   ssh-agent(1) gains some new flags: -U suppresses the automatic
    	   cleanup of stale sockets when it starts. -u forces a cleanup
    	   without keeping a running agent, -uu forces a cleanup that ignores
    	   the hostname. -T makes ssh-agent put the socket back in /tmp.
          Security
    	* ssh(1): disallow control characters in usernames passed via the
    	  commandline or expanded using %-sequences from the configuration
    	  file, and disallow \0 characters in ssh:// URIs.
    	  If an ssh(1) commandline was constructed using usernames or URIs
    	  obtained from an untrusted source, and if a ProxyCommand that uses
    	  the %r expansion was configured, then it may be possible for an
    	  attacker to inject shell expressions that may be executed when the
    	  proxy command is started.
    	  We strongly recommend against using untrusted inputs to construct
    	  ssh(1) commandlines.
    	  This change also relaxes the validity checks in one small way:
    	  usernames supplied via the configuration file as literals (i.e.
    	  that have no % expansion characters) are not subject to these
    	  validity checks. This allows usernames that contain arbitrary
    	  characters to be used, but only via configuration files. This is
    	  done on the basis that ssh's configuration is trusted.
          New features
    	 * ssh(1), sshd(8): add SIGINFO handlers to log active channel and
    	   session information.
    	 * sshd(8): when refusing a certificate for user authentication, log
    	   enough information to identify the certificate in addition to the
    	   reason why it was being denied. Makes debugging certificate
    	   authorisation problems a bit easier.
    	 * ssh(1), ssh-agent(1): support ed25519 keys hosted on PKCS#11
    	   tokens.
    	 * ssh(1): add an ssh_config(5) RefuseConnection option that, when
    	   encountered while processing an active section in a
    	   configuration, terminates ssh(1) with an error message that
    	   contains the argument to the option.
    	   This may be useful for expressing reminders or warnings in config
    	   files, for example:
    	   Match host foo
    	            RefuseConnection "foo is deprecated, use splork instead"
    	 * sshd(8): make the X11 display number check relative to
    	   X11DisplayOffset. This will allow people to use X11DisplayOffset
    	   to configure much higher port ranges if they really want, while
    	   not changing the default behaviour.
    	 * unit tests: the unit test framework now includes some basic
    	   benchmarking capabilities. Run with "make UNITTEST_BENCHMARK=yes"
    	   on OpenBSD or "make unit-bench" on Portable OpenSSH.
          Bugfixes
    	 * sshd(8): fix mistracking of MaxStartups process exits in some
    	   situations. At worst, this could cause all MaxStartups slots to
    	   fill and sshd to refuse new connections.
    	 * ssh(1): fix delay on X client startup when ObscureKeystrokeTiming
    	   is enabled. bz#3820
    	 * sshd(8): increase the maximum size of the supported configuration
    	   from 256KB to 4MB, which ought to be enough for anybody. Fail
    	   early and visibly when this limit is breached. bz3808
    	 * sftp(1): during sftp uploads, avoid a condition where a failed
    	   write could be ignored if a subsequent write succeeded. This is
    	   unlikely but technically possible because sftp servers are
    	   allowed to reorder requests.
    	 * sshd(8): avoid a race condition when the sshd-auth process exits
    	   that could cause a spurious error message to be logged.
    	 * sshd(8): log at level INFO when PerSourcePenalties actually
    	   blocks access to a source address range. Previously this was
    	   logged at level VERBOSE, which hid enforcement actions under
    	   default config settings.
    	 * sshd(8): GssStrictAcceptor was missing from sshd -T output; fix
    	 * sshd(8): Make the MaxStartups and PerSourceNetBlockSize options
    	   first-match-wins as advertised. bz3859
    	 * ssh(1): fix an incorrect return value check in the local forward
    	   cancellation path that would cause failed cancellations not to be
    	   logged.
    	 * sshd(8): make "Match !final" not trigger a second parsing pass
    	   of ssh_config (unless hostname canonicalisation or a separate
    	   "Match final" does). bz3843
    	 * ssh(1): better debug diagnostics when loading keys. Will now list
    	   key fingerprint and algorithm (not just algorithm number) as well
    	   as making it explicit which keys didn't load.
    	 * All: fix a number of memory leaks found by LeakSanitizer,
    	   Coverity and manual inspection.
    	 * sshd(8): Output the current name for PermitRootLogin's
    	   "prohibit-password" in sshd -T instead of its deprecated alias
    	   "without-password".  bz#3788
    	 * ssh(1): make writing known_hosts lines more atomic by writing
    	   the entire line in one operation and using unbuffered stdio.
    	   Usually writes to this file are serialised on the "Are you sure
    	   you want to continue connecting?" prompt, but if host key
    	   checking is disabled and connections were being made with high
    	   concurrency then interleaved writes might have been possible.
          Portability
    	 * sshd(8): check the username didn't change during the PAM
    	   transactions.
    	   PAM modules can change the user during their execution, but
    	   this is not supported by sshd(8). If such a case was incorrectly
    	   configured by the system administrator, then sshd(8) could end up
    	   using a different username to the one authorised by PAM.
    	 * sshd(8): don't log audit messages with UNKNOWN hostname to avoid
    	   slow DNS lookups in the audit subsystem.
    	 * All: when making a copy of struct passwd, ensure struct fields are
    	   non-NULL. Android libc can return NULL pw_gecos, for example.
    	 * All: Remove status bits from OpenSSL >=3 version check.
    	 * sshd(8), ssh(1): Use SSH_TUN_COMPAT_AF on FreeBSD. Otherwise tun
    	   forwarding from other OSes fails as soon as the first IPv6 message
    	   is sent by the other side (which is usually a Router Solicitation
    	   ICMPv6 message which is sent as soon as the interface is up).
    	 * ssh(1), ssh-agent(8): check for nlist function presence before
    	   attempting to use it instead of relying on the presence of the
    	   nlist.h header.  Mac OS X, for example, has the header but not
    	   the function in the 64bit libraries.
    	 * All: fill in missing system header files.
    	   Create replacement header files inside openbsd-compat for common
    	   headers that are missing on a given platform. Usually these are
    	   just empty, but in some cases they'll include the equivalent file.
    	   This avoids having to wrap those includes in '#ifdef HAVE_FOO_H'
    	   and reduces the diff between Portable OpenSSH and OpenBSD.
    	 * sshd(8): handle futex_time64 properly in seccomp sandbox
    	   Previously we only allowed __NR_futex, but some 32-bit systems
    	   apparently support __NR_futex_time64. We had support for this
    	   in the sandbox, but because of a macro error only __NR_futex was
    	   allowlisted.
    	 * Add contrib/gnome-ssh-askpass4 for GNOME 40+ using the GCR API.
    	 * sshd(8): let ga_init() fail gracefully if getgrouplist does.
    	   Apparently getgrouplist() can fail on OSX when passed a
    	   non-existent group name. Other platforms seem to return a group
    	   list consisting of the numeric gid passed to the function. bz3848
    	 * ssh-agent(1): exit 0 from SIGTERM under systemd socket-activation,
    	   preventing a graceful shutdown of an agent via systemd from
    	   incorrectly marking the service as "failed".
    	 * build: wrap some autoconf macros in AC_CACHE_CHECK.
    	   This allows skipping/overriding the OSSH_CHECK_CFLAG_COMPILE and
    	   OSSH_CHECK_CFLAG_LINK macros used to discover supported compiler
    	   or linker flags. E.g.
    	     $ ./configure ossh_cv_cflag__fzero_call_used_regs_used=no
    	     [...]
    	     checking if cc supports compile flag -fzero-call-used-regs=used
    	     and linking succeeds... (cached) no
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 735dc6f15973d4465cfad778242a272500430f9a
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:08:04 2025 +0200

    core199: Ship libgpg-error
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 51ba2168ca5107280a292371ce49b2ca81bcb905
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:07:57 2025 +0200

    libgpg-error: Update to version 1.56
    
    - Update from version 1.54 to 1.56
    - Update of rootfile
    - Changelog
        1.56
    	 * Support the %b conversion specifier in the estream printf
    	   functions.  [rE6ac5332e4f]
    	 * New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share
    	   the "nul" device.  [T7723]
    	 * Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows.  [T7716]
    	 * New mode keyword "share=xxx" for gpgrt_fopen.  [rE461cb5a8ea]
    	 * Change the default method to get the number of fds to close.  This
    	   fixes a spawning problem on certain POSIX machine.  [T7696]
    	 * Fix some cases of inheriting HANDLEs on Windows.  [T7716]
    	 * New system configurations for 64-bit Android, i686 Android, x86_64
    	   Android and an armv7a alias to arm for Android.
    	 * Set build specific build variable for zOS  [rE7ee191f54c]
    	 * Interface changes relative to the 1.55 release:
    		 GPG_ERR_UNEXPECTED_PACKET           NEW.
    		 GPGRT_PROCESS_STDIO_NUL             NEW.
        1.55
    	 * Rewrite the extended length path handling under Windows.
    	   [T5754,rEfba44d619d]
    	 * Add new test commands to the gpg-error tool.  Allow command w/o
    	   dashes and reformat the help.  [rEc002490a8f]
    	 * Silence warning from gcc 15.  [T7621]
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit df6a4a532020212fda8cf31ddfa4e6ce6eb52352
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:08:03 2025 +0200

    core199: Ship kbd
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit f53e622336180543a431f39976042730f03e6cc7
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:07:56 2025 +0200

    kbd: Update to version 2.9.0
    
    - Update from version 2.8.0 to 2.9.0
    - Update of rootfile
    - Changelog
        2.9.0
    	keymaps:
    	    Add console keymap for Mac swiss german keyboards.
    	libkbdfile:
    	    Detect archive type based on content.
    	    Add support for decompressing files without using utilities. Use
    	    ELF_DLOPEN_METADATA if possible.
    	utils:
    	    loadkeys: Add --tkeymap to dump the keymap as text.
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit e95252a7566ab9d87e3d33c88060dd5367091534
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:07:54 2025 +0200

    fetchmail: Update to version 6.5.6
    
    - Update from version 6.5.5 to 6.5.6
    - No change to rootfile
    - Changelog
        6.5.6
          SECURITY BUGFIX:
    	* fetchmail-SA-2025-01.txt: CVE pending assignment by MITRE
    	  An SMTP server advertising EHLO and AUTH, and if fetchmail is configured to
    	  authenticate (esmtpname and esmtppassword given and non-empty), the server
    	  might crash fetchmail by sending a "334" response without further blank to
    	  fetchmail's AUTH request. This is in violation of applicable RFC-4952 though.
    	    Fetchmail now detects this situation and reports it separately as
    	  malformed server reply.
    	    Fetchmail 6.5.6 has been released without waiting for translation updates
    	  or CVE identifier, these will be provided in followup releases.
          BUGFIXES:
    	* RFC-5321: When the --smtpaddress, --smtphost, --smtpname, -D or -S argument
    	  is an numeric address literal such as 192.0.2.2 or 2001:0DB8::4321, properly
    	  format that as such in the SMTP RCPT command as user@[192.0.2.2] or
    	  user@[IPv6:2001:0DB8::4321].
    	* When printing output on the console while fetching mail, do not intersperse
    	  another copy of our program name and date in the middle of a log line.
    	  Workaround for older versions: --logfile /dev/tty  (might also use
    	  --logfile /dev/stderr) - but note this changes buffering behavior and may
    	  output to appear later and without ticker marks.
    	* A few low-priority memory leaks in the command-line options parser were
    	  fixed. Since this parser runs only once, leaks are harmless.
    	* Some minor code cleanups and robustness fixes were made, and we should
    	  see fewer compiler warnings as a result.
          CHANGES:
    	* Given the slow update schedules of some distributions, already add code
    	  that checks if time_t() is good beyond the year 2038,
    	  meaning time_t is either unsigned (which would last until 2106) or
    	  64 bits wide.  If the system isn't safe, warn on every launch of fetchmail
    	  beginning 2028-01-01 at 00:00 GMT so users have 10 years to plan.
    	  Fetchmail will also print a warning if time(time_t *t) overflows.
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit d1a2e4ad225f69ca42b7dac822b322afa9ed960a
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:08:02 2025 +0200

    core199: Ship hwdata
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 0dc4824f7512498f2b854038203e8eefc5d7afe8
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:08:01 2025 +0200

    core199: Ship btrfs-progs
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 128ed29d827f1863208a29887e1505684e50310f
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:07:55 2025 +0200

    hwdata: Update to version 0.400
    
    - Update from version 0.398 to 0.400
    - No change to rootfile
    - Changelog
        0.399
    	Update usb and vendor ids
        0.400
    	Update usb and vendor ids
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit d768e1893ebfe0c5416a2ce5f1403ce4d82dacdc
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Oct 14 15:07:53 2025 +0200

    btrfs-progs: Update to version 6.17
    
    - Update from veresion 6.16 to 6.17
    - No change to rootfile
    - Changelog
        6.17
    	   * inspect list-chunks: more sorting keys, descending order
    	   * fi resize: add support for offline (unmounted) growing of single device
    	   * device stats: add support for offline (unmounted) reads
    	   * quota status: new command, overview what mode is enabled, tunables
    	   * fi commit-stats: new command, print various commit stats from sysfs (since
    	     kernel 6.1)
    	   * balance start: print warning and delay start if there's a missing device
    	     in the filesystem
    	   * mkfs:
    	      * print zoned mode (native, emulated)
    	   * check:
    	      * verify device bytes in super block item and in chunk tree
    	   * other
    	      * updated CI, new and updated tests
    	      * cleanups, refactoring
    	      * documentation updates
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/rootfiles/common/kbd                        |  3 +
 config/rootfiles/common/libgpg-error               |  2 +-
 config/rootfiles/common/openssl                    | 44 ++++++++++
 config/rootfiles/common/p11-kit                    |  2 +-
 config/rootfiles/common/vim                        | 95 +++++++++-------------
 .../186 => core/199}/filelists/btrfs-progs         |  0
 .../{oldcore/132 => core/199}/filelists/hwdata     |  0
 .../{oldcore/112 => core/199}/filelists/kbd        |  0
 .../106 => core/199}/filelists/libgpg-error        |  0
 .../{oldcore/100 => core/199}/filelists/openssh    |  0
 .../{oldcore/160 => core/199}/filelists/p11-kit    |  0
 .../{oldcore/134 => core/199}/filelists/vim        |  0
 lfs/btrfs-progs                                    |  4 +-
 lfs/fetchmail                                      |  6 +-
 lfs/hwdata                                         |  4 +-
 lfs/kbd                                            |  4 +-
 lfs/libgpg-error                                   |  4 +-
 lfs/openssh                                        |  4 +-
 lfs/openssl                                        |  4 +-
 lfs/p11-kit                                        |  4 +-
 lfs/vim                                            |  4 +-
 21 files changed, 106 insertions(+), 78 deletions(-)
 copy config/rootfiles/{oldcore/186 => core/199}/filelists/btrfs-progs (100%)
 copy config/rootfiles/{oldcore/132 => core/199}/filelists/hwdata (100%)
 copy config/rootfiles/{oldcore/112 => core/199}/filelists/kbd (100%)
 copy config/rootfiles/{oldcore/106 => core/199}/filelists/libgpg-error (100%)
 copy config/rootfiles/{oldcore/100 => core/199}/filelists/openssh (100%)
 copy config/rootfiles/{oldcore/160 => core/199}/filelists/p11-kit (100%)
 copy config/rootfiles/{oldcore/134 => core/199}/filelists/vim (100%)

Difference in files:
diff --git a/config/rootfiles/common/kbd b/config/rootfiles/common/kbd
index 7344cfc19..7ecfba385 100644
--- a/config/rootfiles/common/kbd
+++ b/config/rootfiles/common/kbd
@@ -361,6 +361,8 @@ lib/kbd/keymaps/i386
 #lib/kbd/keymaps/i386/fgGIod
 #lib/kbd/keymaps/i386/fgGIod/tr_f-latin5.map.gz
 #lib/kbd/keymaps/i386/fgGIod/trf.map.gz
+#lib/kbd/keymaps/i386/hcesar
+#lib/kbd/keymaps/i386/hcesar/hcesar.map.gz
 lib/kbd/keymaps/i386/include
 #lib/kbd/keymaps/i386/include/applkey.map.gz
 #lib/kbd/keymaps/i386/include/azerty-layout.inc
@@ -532,6 +534,7 @@ lib/kbd/keymaps/i386/include
 #lib/kbd/keymaps/i386/qwertz/hu.map.gz
 #lib/kbd/keymaps/i386/qwertz/sg-latin1-lk450.map.gz
 #lib/kbd/keymaps/i386/qwertz/sg-latin1.map.gz
+#lib/kbd/keymaps/i386/qwertz/sg-mac.map.gz
 #lib/kbd/keymaps/i386/qwertz/sg.map.gz
 #lib/kbd/keymaps/i386/qwertz/sk-prog-qwertz.map.gz
 #lib/kbd/keymaps/i386/qwertz/sk-qwertz.map.gz
diff --git a/config/rootfiles/common/libgpg-error b/config/rootfiles/common/libgpg-error
index cf34b3bdb..c96fe87de 100644
--- a/config/rootfiles/common/libgpg-error
+++ b/config/rootfiles/common/libgpg-error
@@ -6,7 +6,7 @@ usr/bin/gpg-error
 #usr/lib/libgpg-error.la
 #usr/lib/libgpg-error.so
 usr/lib/libgpg-error.so.0
-usr/lib/libgpg-error.so.0.39.2
+usr/lib/libgpg-error.so.0.40.0
 #usr/lib/pkgconfig/gpg-error.pc
 #usr/share/aclocal/gpg-error.m4
 #usr/share/aclocal/gpgrt.m4
diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl
index 5374f5e65..2052f8284 100644
--- a/config/rootfiles/common/openssl
+++ b/config/rootfiles/common/openssl
@@ -185,6 +185,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man1/openssl-cmds.html
 #usr/share/doc/openssl/html/man1/openssl-cmp.html
 #usr/share/doc/openssl/html/man1/openssl-cms.html
+#usr/share/doc/openssl/html/man1/openssl-configutl.html
 #usr/share/doc/openssl/html/man1/openssl-crl.html
 #usr/share/doc/openssl/html/man1/openssl-crl2pkcs7.html
 #usr/share/doc/openssl/html/man1/openssl-dgst.html
@@ -985,6 +986,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man7/EVP_PKEY-EC.html
 #usr/share/doc/openssl/html/man7/EVP_PKEY-FFC.html
 #usr/share/doc/openssl/html/man7/EVP_PKEY-HMAC.html
+#usr/share/doc/openssl/html/man7/EVP_PKEY-LMS.html
 #usr/share/doc/openssl/html/man7/EVP_PKEY-ML-DSA.html
 #usr/share/doc/openssl/html/man7/EVP_PKEY-ML-KEM.html
 #usr/share/doc/openssl/html/man7/EVP_PKEY-RSA.html
@@ -1003,6 +1005,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man7/EVP_SIGNATURE-ECDSA.html
 #usr/share/doc/openssl/html/man7/EVP_SIGNATURE-ED25519.html
 #usr/share/doc/openssl/html/man7/EVP_SIGNATURE-HMAC.html
+#usr/share/doc/openssl/html/man7/EVP_SIGNATURE-LMS.html
 #usr/share/doc/openssl/html/man7/EVP_SIGNATURE-ML-DSA.html
 #usr/share/doc/openssl/html/man7/EVP_SIGNATURE-RSA.html
 #usr/share/doc/openssl/html/man7/EVP_SIGNATURE-SLH-DSA.html
@@ -1113,6 +1116,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man1/openssl-cmds.1ossl
 #usr/share/man/man1/openssl-cmp.1ossl
 #usr/share/man/man1/openssl-cms.1ossl
+#usr/share/man/man1/openssl-configutl.1ossl
 #usr/share/man/man1/openssl-crl.1ossl
 #usr/share/man/man1/openssl-crl2pkcs7.1ossl
 #usr/share/man/man1/openssl-dgst.1ossl
@@ -1829,10 +1833,16 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/CMS_ReceiptRequest_new.3ossl
 #usr/share/man/man3/CMS_RecipientInfo_decrypt.3ossl
 #usr/share/man/man3/CMS_RecipientInfo_encrypt.3ossl
+#usr/share/man/man3/CMS_RecipientInfo_kari_get0_ctx.3ossl
 #usr/share/man/man3/CMS_RecipientInfo_kari_set0_pkey.3ossl
 #usr/share/man/man3/CMS_RecipientInfo_kari_set0_pkey_and_peer.3ossl
 #usr/share/man/man3/CMS_RecipientInfo_kekri_get0_id.3ossl
 #usr/share/man/man3/CMS_RecipientInfo_kekri_id_cmp.3ossl
+#usr/share/man/man3/CMS_RecipientInfo_kemri_cert_cmp.3ossl
+#usr/share/man/man3/CMS_RecipientInfo_kemri_get0_ctx.3ossl
+#usr/share/man/man3/CMS_RecipientInfo_kemri_get0_kdf_alg.3ossl
+#usr/share/man/man3/CMS_RecipientInfo_kemri_set0_pkey.3ossl
+#usr/share/man/man3/CMS_RecipientInfo_kemri_set_ukm.3ossl
 #usr/share/man/man3/CMS_RecipientInfo_ktri_cert_cmp.3ossl
 #usr/share/man/man3/CMS_RecipientInfo_ktri_get0_signer_id.3ossl
 #usr/share/man/man3/CMS_RecipientInfo_set0_key.3ossl
@@ -1937,6 +1947,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/CRYPTO_THREAD_unlock.3ossl
 #usr/share/man/man3/CRYPTO_THREAD_write_lock.3ossl
 #usr/share/man/man3/CRYPTO_aligned_alloc.3ossl
+#usr/share/man/man3/CRYPTO_aligned_alloc_array.3ossl
 #usr/share/man/man3/CRYPTO_alloc_ex_data.3ossl
 #usr/share/man/man3/CRYPTO_atomic_add.3ossl
 #usr/share/man/man3/CRYPTO_atomic_add64.3ossl
@@ -1945,8 +1956,10 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/CRYPTO_atomic_load_int.3ossl
 #usr/share/man/man3/CRYPTO_atomic_or.3ossl
 #usr/share/man/man3/CRYPTO_atomic_store.3ossl
+#usr/share/man/man3/CRYPTO_calloc.3ossl
 #usr/share/man/man3/CRYPTO_clear_free.3ossl
 #usr/share/man/man3/CRYPTO_clear_realloc.3ossl
+#usr/share/man/man3/CRYPTO_clear_realloc_array.3ossl
 #usr/share/man/man3/CRYPTO_free.3ossl
 #usr/share/man/man3/CRYPTO_free_ex_data.3ossl
 #usr/share/man/man3/CRYPTO_free_ex_index.3ossl
@@ -1956,6 +1969,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/CRYPTO_get_ex_new_index.3ossl
 #usr/share/man/man3/CRYPTO_get_mem_functions.3ossl
 #usr/share/man/man3/CRYPTO_malloc.3ossl
+#usr/share/man/man3/CRYPTO_malloc_array.3ossl
 #usr/share/man/man3/CRYPTO_malloc_fn.3ossl
 #usr/share/man/man3/CRYPTO_mem_ctrl.3ossl
 #usr/share/man/man3/CRYPTO_mem_debug_pop.3ossl
@@ -1966,11 +1980,14 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/CRYPTO_memcmp.3ossl
 #usr/share/man/man3/CRYPTO_new_ex_data.3ossl
 #usr/share/man/man3/CRYPTO_realloc.3ossl
+#usr/share/man/man3/CRYPTO_realloc_array.3ossl
 #usr/share/man/man3/CRYPTO_realloc_fn.3ossl
 #usr/share/man/man3/CRYPTO_secure_allocated.3ossl
+#usr/share/man/man3/CRYPTO_secure_calloc.3ossl
 #usr/share/man/man3/CRYPTO_secure_clear_free.3ossl
 #usr/share/man/man3/CRYPTO_secure_free.3ossl
 #usr/share/man/man3/CRYPTO_secure_malloc.3ossl
+#usr/share/man/man3/CRYPTO_secure_malloc_array.3ossl
 #usr/share/man/man3/CRYPTO_secure_malloc_done.3ossl
 #usr/share/man/man3/CRYPTO_secure_malloc_init.3ossl
 #usr/share/man/man3/CRYPTO_secure_malloc_initialized.3ossl
@@ -2699,9 +2716,11 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_KDF_CTX_kdf.3ossl
 #usr/share/man/man3/EVP_KDF_CTX_new.3ossl
 #usr/share/man/man3/EVP_KDF_CTX_reset.3ossl
+#usr/share/man/man3/EVP_KDF_CTX_set_SKEY.3ossl
 #usr/share/man/man3/EVP_KDF_CTX_set_params.3ossl
 #usr/share/man/man3/EVP_KDF_CTX_settable_params.3ossl
 #usr/share/man/man3/EVP_KDF_derive.3ossl
+#usr/share/man/man3/EVP_KDF_derive_SKEY.3ossl
 #usr/share/man/man3/EVP_KDF_do_all_provided.3ossl
 #usr/share/man/man3/EVP_KDF_fetch.3ossl
 #usr/share/man/man3/EVP_KDF_free.3ossl
@@ -3045,6 +3064,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_PKEY_decrypt_init_ex.3ossl
 #usr/share/man/man3/EVP_PKEY_delete_attr.3ossl
 #usr/share/man/man3/EVP_PKEY_derive.3ossl
+#usr/share/man/man3/EVP_PKEY_derive_SKEY.3ossl
 #usr/share/man/man3/EVP_PKEY_derive_init.3ossl
 #usr/share/man/man3/EVP_PKEY_derive_init_ex.3ossl
 #usr/share/man/man3/EVP_PKEY_derive_set_peer.3ossl
@@ -3104,6 +3124,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_PKEY_get_raw_private_key.3ossl
 #usr/share/man/man3/EVP_PKEY_get_raw_public_key.3ossl
 #usr/share/man/man3/EVP_PKEY_get_security_bits.3ossl
+#usr/share/man/man3/EVP_PKEY_get_security_category.3ossl
 #usr/share/man/man3/EVP_PKEY_get_size.3ossl
 #usr/share/man/man3/EVP_PKEY_get_size_t_param.3ossl
 #usr/share/man/man3/EVP_PKEY_get_utf8_string_param.3ossl
@@ -3297,6 +3318,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_SKEY_get0_raw_key.3ossl
 #usr/share/man/man3/EVP_SKEY_get0_skeymgmt_name.3ossl
 #usr/share/man/man3/EVP_SKEY_import.3ossl
+#usr/share/man/man3/EVP_SKEY_import_SKEYMGMT.3ossl
 #usr/share/man/man3/EVP_SKEY_import_raw_key.3ossl
 #usr/share/man/man3/EVP_SKEY_is_a.3ossl
 #usr/share/man/man3/EVP_SKEY_to_provider.3ossl
@@ -3734,6 +3756,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_LINE.3ossl
 #usr/share/man/man3/OPENSSL_MALLOC_FAILURES.3ossl
 #usr/share/man/man3/OPENSSL_MALLOC_FD.3ossl
+#usr/share/man/man3/OPENSSL_MALLOC_SEED.3ossl
 #usr/share/man/man3/OPENSSL_MSTR.3ossl
 #usr/share/man/man3/OPENSSL_MSTR_HELPER.3ossl
 #usr/share/man/man3/OPENSSL_VERSION_BUILD_METADATA.3ossl
@@ -3745,14 +3768,17 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_VERSION_PRE_RELEASE.3ossl
 #usr/share/man/man3/OPENSSL_VERSION_TEXT.3ossl
 #usr/share/man/man3/OPENSSL_aligned_alloc.3ossl
+#usr/share/man/man3/OPENSSL_aligned_alloc_array.3ossl
 #usr/share/man/man3/OPENSSL_atexit.3ossl
 #usr/share/man/man3/OPENSSL_buf2hexstr.3ossl
 #usr/share/man/man3/OPENSSL_buf2hexstr_ex.3ossl
+#usr/share/man/man3/OPENSSL_calloc.3ossl
 #usr/share/man/man3/OPENSSL_cipher_name.3ossl
 #usr/share/man/man3/OPENSSL_cleanse.3ossl
 #usr/share/man/man3/OPENSSL_cleanup.3ossl
 #usr/share/man/man3/OPENSSL_clear_free.3ossl
 #usr/share/man/man3/OPENSSL_clear_realloc.3ossl
+#usr/share/man/man3/OPENSSL_clear_realloc_array.3ossl
 #usr/share/man/man3/OPENSSL_config.3ossl
 #usr/share/man/man3/OPENSSL_fork_child.3ossl
 #usr/share/man/man3/OPENSSL_fork_parent.3ossl
@@ -3778,18 +3804,22 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_load_u64_be.3ossl
 #usr/share/man/man3/OPENSSL_load_u64_le.3ossl
 #usr/share/man/man3/OPENSSL_malloc.3ossl
+#usr/share/man/man3/OPENSSL_malloc_array.3ossl
 #usr/share/man/man3/OPENSSL_malloc_init.3ossl
 #usr/share/man/man3/OPENSSL_mem_debug_pop.3ossl
 #usr/share/man/man3/OPENSSL_mem_debug_push.3ossl
 #usr/share/man/man3/OPENSSL_memdup.3ossl
 #usr/share/man/man3/OPENSSL_no_config.3ossl
 #usr/share/man/man3/OPENSSL_realloc.3ossl
+#usr/share/man/man3/OPENSSL_realloc_array.3ossl
 #usr/share/man/man3/OPENSSL_riscvcap.3ossl
 #usr/share/man/man3/OPENSSL_s390xcap.3ossl
 #usr/share/man/man3/OPENSSL_secure_actual_size.3ossl
+#usr/share/man/man3/OPENSSL_secure_calloc.3ossl
 #usr/share/man/man3/OPENSSL_secure_clear_free.3ossl
 #usr/share/man/man3/OPENSSL_secure_free.3ossl
 #usr/share/man/man3/OPENSSL_secure_malloc.3ossl
+#usr/share/man/man3/OPENSSL_secure_malloc_array.3ossl
 #usr/share/man/man3/OPENSSL_secure_zalloc.3ossl
 #usr/share/man/man3/OPENSSL_sk_deep_copy.3ossl
 #usr/share/man/man3/OPENSSL_sk_delete.3ossl
@@ -3811,6 +3841,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_sk_reserve.3ossl
 #usr/share/man/man3/OPENSSL_sk_set.3ossl
 #usr/share/man/man3/OPENSSL_sk_set_cmp_func.3ossl
+#usr/share/man/man3/OPENSSL_sk_set_thunks.3ossl
 #usr/share/man/man3/OPENSSL_sk_shift.3ossl
 #usr/share/man/man3/OPENSSL_sk_sort.3ossl
 #usr/share/man/man3/OPENSSL_sk_unshift.3ossl
@@ -4433,6 +4464,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_PARAM_set_long.3ossl
 #usr/share/man/man3/OSSL_PARAM_set_octet_ptr.3ossl
 #usr/share/man/man3/OSSL_PARAM_set_octet_string.3ossl
+#usr/share/man/man3/OSSL_PARAM_set_octet_string_or_ptr.3ossl
 #usr/share/man/man3/OSSL_PARAM_set_size_t.3ossl
 #usr/share/man/man3/OSSL_PARAM_set_time_t.3ossl
 #usr/share/man/man3/OSSL_PARAM_set_uint.3ossl
@@ -4565,6 +4597,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_STORE_LOADER_set_load.3ossl
 #usr/share/man/man3/OSSL_STORE_LOADER_set_open.3ossl
 #usr/share/man/man3/OSSL_STORE_LOADER_set_open_ex.3ossl
+#usr/share/man/man3/OSSL_STORE_LOADER_settable_ctx_params.3ossl
 #usr/share/man/man3/OSSL_STORE_LOADER_up_ref.3ossl
 #usr/share/man/man3/OSSL_STORE_SEARCH.3ossl
 #usr/share/man/man3/OSSL_STORE_SEARCH_by_alias.3ossl
@@ -5241,7 +5274,9 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SRP_user_pwd_set1_ids.3ossl
 #usr/share/man/man3/SRP_user_pwd_set_gN.3ossl
 #usr/share/man/man3/SSL_ACCEPT_CONNECTION_NO_BLOCK.3ossl
+#usr/share/man/man3/SSL_ACCEPT_STREAM_BIDI.3ossl
 #usr/share/man/man3/SSL_ACCEPT_STREAM_NO_BLOCK.3ossl
+#usr/share/man/man3/SSL_ACCEPT_STREAM_UNI.3ossl
 #usr/share/man/man3/SSL_CIPHER_description.3ossl
 #usr/share/man/man3/SSL_CIPHER_find.3ossl
 #usr/share/man/man3/SSL_CIPHER_get_auth_nid.3ossl
@@ -5711,6 +5746,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_get0_server_cert_type.3ossl
 #usr/share/man/man3/SSL_get0_session.3ossl
 #usr/share/man/man3/SSL_get0_signature_name.3ossl
+#usr/share/man/man3/SSL_get0_tlsext_status_ocsp_resp_ex.3ossl
 #usr/share/man/man3/SSL_get0_verified_chain.3ossl
 #usr/share/man/man3/SSL_get0_verify_cert_store.3ossl
 #usr/share/man/man3/SSL_get1_builtin_sigalgs.3ossl
@@ -5895,6 +5931,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_set0_chain_cert_store.3ossl
 #usr/share/man/man3/SSL_set0_rbio.3ossl
 #usr/share/man/man3/SSL_set0_security_ex_data.3ossl
+#usr/share/man/man3/SSL_set0_tlsext_status_ocsp_resp_ex.3ossl
 #usr/share/man/man3/SSL_set0_tmp_dh_pkey.3ossl
 #usr/share/man/man3/SSL_set0_verify_cert_store.3ossl
 #usr/share/man/man3/SSL_set0_wbio.3ossl
@@ -6268,6 +6305,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/X509_CRL_get0_lastUpdate.3ossl
 #usr/share/man/man3/X509_CRL_get0_nextUpdate.3ossl
 #usr/share/man/man3/X509_CRL_get0_signature.3ossl
+#usr/share/man/man3/X509_CRL_get0_tbs_sigalg.3ossl
 #usr/share/man/man3/X509_CRL_get_REVOKED.3ossl
 #usr/share/man/man3/X509_CRL_get_ext.3ossl
 #usr/share/man/man3/X509_CRL_get_ext_by_NID.3ossl
@@ -6535,6 +6573,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/X509_STORE_CTX_set_error_depth.3ossl
 #usr/share/man/man3/X509_STORE_CTX_set_ex_data.3ossl
 #usr/share/man/man3/X509_STORE_CTX_set_get_crl.3ossl
+#usr/share/man/man3/X509_STORE_CTX_set_ocsp_resp.3ossl
 #usr/share/man/man3/X509_STORE_CTX_set_purpose.3ossl
 #usr/share/man/man3/X509_STORE_CTX_set_trust.3ossl
 #usr/share/man/man3/X509_STORE_CTX_set_verify.3ossl
@@ -7193,6 +7232,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/i2d_PKCS7_bio.3ossl
 #usr/share/man/man3/i2d_PKCS7_bio_stream.3ossl
 #usr/share/man/man3/i2d_PKCS7_fp.3ossl
+#usr/share/man/man3/i2d_PKCS8PrivateKey.3ossl
 #usr/share/man/man3/i2d_PKCS8PrivateKeyInfo_bio.3ossl
 #usr/share/man/man3/i2d_PKCS8PrivateKeyInfo_fp.3ossl
 #usr/share/man/man3/i2d_PKCS8PrivateKey_bio.3ossl
@@ -7392,6 +7432,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man7/EVP_KEYMGMT-ED25519.7ossl
 #usr/share/man/man7/EVP_KEYMGMT-ED448.7ossl
 #usr/share/man/man7/EVP_KEYMGMT-HMAC.7ossl
+#usr/share/man/man7/EVP_KEYMGMT-LMS.7ossl
 #usr/share/man/man7/EVP_KEYMGMT-ML-DSA.7ossl
 #usr/share/man/man7/EVP_KEYMGMT-ML-KEM-1024.7ossl
 #usr/share/man/man7/EVP_KEYMGMT-ML-KEM-512.7ossl
@@ -7441,6 +7482,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man7/EVP_PKEY-ED448.7ossl
 #usr/share/man/man7/EVP_PKEY-FFC.7ossl
 #usr/share/man/man7/EVP_PKEY-HMAC.7ossl
+#usr/share/man/man7/EVP_PKEY-LMS.7ossl
 #usr/share/man/man7/EVP_PKEY-ML-DSA-44.7ossl
 #usr/share/man/man7/EVP_PKEY-ML-DSA-65.7ossl
 #usr/share/man/man7/EVP_PKEY-ML-DSA-87.7ossl
@@ -7482,6 +7524,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man7/EVP_SIGNATURE-ED25519.7ossl
 #usr/share/man/man7/EVP_SIGNATURE-ED448.7ossl
 #usr/share/man/man7/EVP_SIGNATURE-HMAC.7ossl
+#usr/share/man/man7/EVP_SIGNATURE-LMS.7ossl
 #usr/share/man/man7/EVP_SIGNATURE-ML-DSA-44.7ossl
 #usr/share/man/man7/EVP_SIGNATURE-ML-DSA-65.7ossl
 #usr/share/man/man7/EVP_SIGNATURE-ML-DSA-87.7ossl
@@ -7504,6 +7547,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man7/EVP_SIGNATURE-Siphash.7ossl
 #usr/share/man/man7/Ed25519.7ossl
 #usr/share/man/man7/Ed448.7ossl
+#usr/share/man/man7/LMS.7ossl
 #usr/share/man/man7/OPENSSL_API_COMPAT.7ossl
 #usr/share/man/man7/OPENSSL_NO_DEPRECATED.7ossl
 #usr/share/man/man7/OSSL_PROVIDER-FIPS.7ossl
diff --git a/config/rootfiles/common/p11-kit b/config/rootfiles/common/p11-kit
index 2d3fbf246..f05a68068 100644
--- a/config/rootfiles/common/p11-kit
+++ b/config/rootfiles/common/p11-kit
@@ -15,7 +15,7 @@ usr/bin/trust
 #usr/lib/libp11-kit.la
 #usr/lib/libp11-kit.so
 usr/lib/libp11-kit.so.0
-usr/lib/libp11-kit.so.0.4.3
+usr/lib/libp11-kit.so.0.4.5
 usr/lib/p11-kit-proxy.so
 #usr/lib/pkcs11
 #usr/lib/pkcs11/p11-kit-client.la
diff --git a/config/rootfiles/common/vim b/config/rootfiles/common/vim
index e9108e17b..00e5ae3b2 100644
--- a/config/rootfiles/common/vim
+++ b/config/rootfiles/common/vim
@@ -92,6 +92,8 @@ usr/share/vim
 #usr/share/vim/vim91/autoload/typeset.vim
 #usr/share/vim/vim91/autoload/typst.vim
 #usr/share/vim/vim91/autoload/vimball.vim
+#usr/share/vim/vim91/autoload/vimcomplete.vim
+#usr/share/vim/vim91/autoload/vimgoto.vim
 #usr/share/vim/vim91/autoload/xml
 #usr/share/vim/vim91/autoload/xml/html32.vim
 #usr/share/vim/vim91/autoload/xml/html401f.vim
@@ -222,6 +224,7 @@ usr/share/vim
 #usr/share/vim/vim91/compiler/perl.vim
 #usr/share/vim/vim91/compiler/perlcritic.vim
 #usr/share/vim/vim91/compiler/php.vim
+#usr/share/vim/vim91/compiler/phpstan.vim
 #usr/share/vim/vim91/compiler/pip_compile.vim
 #usr/share/vim/vim91/compiler/podchecker.vim
 #usr/share/vim/vim91/compiler/powershell.vim
@@ -429,6 +432,7 @@ usr/share/vim
 #usr/share/vim/vim91/doc/vim9.txt
 #usr/share/vim/vim91/doc/vim9class.txt
 #usr/share/vim/vim91/doc/visual.txt
+#usr/share/vim/vim91/doc/wayland.txt
 #usr/share/vim/vim91/doc/windows.txt
 #usr/share/vim/vim91/doc/workshop.txt
 #usr/share/vim/vim91/evim.vim
@@ -458,6 +462,7 @@ usr/share/vim
 #usr/share/vim/vim91/ftplugin/asy.vim
 #usr/share/vim/vim91/ftplugin/autohotkey.vim
 #usr/share/vim/vim91/ftplugin/automake.vim
+#usr/share/vim/vim91/ftplugin/autopkgtest.vim
 #usr/share/vim/vim91/ftplugin/awk.vim
 #usr/share/vim/vim91/ftplugin/bash.vim
 #usr/share/vim/vim91/ftplugin/basic.vim
@@ -465,6 +470,8 @@ usr/share/vim
 #usr/share/vim/vim91/ftplugin/bindzone.vim
 #usr/share/vim/vim91/ftplugin/bitbake.vim
 #usr/share/vim/vim91/ftplugin/bp.vim
+#usr/share/vim/vim91/ftplugin/brighterscript.vim
+#usr/share/vim/vim91/ftplugin/brightscript.vim
 #usr/share/vim/vim91/ftplugin/bst.vim
 #usr/share/vim/vim91/ftplugin/btm.vim
 #usr/share/vim/vim91/ftplugin/bzl.vim
@@ -484,6 +491,7 @@ usr/share/vim
 #usr/share/vim/vim91/ftplugin/cmake.vim
 #usr/share/vim/vim91/ftplugin/cmakecache.vim
 #usr/share/vim/vim91/ftplugin/cobol.vim
+#usr/share/vim/vim91/ftplugin/codeowners.vim
 #usr/share/vim/vim91/ftplugin/conf.vim
 #usr/share/vim/vim91/ftplugin/config.vim
 #usr/share/vim/vim91/ftplugin/confini.vim
@@ -535,6 +543,7 @@ usr/share/vim
 #usr/share/vim/vim91/ftplugin/falcon.vim
 #usr/share/vim/vim91/ftplugin/fennel.vim
 #usr/share/vim/vim91/ftplugin/fetchmail.vim
+#usr/share/vim/vim91/ftplugin/fga.vim
 #usr/share/vim/vim91/ftplugin/fish.vim
 #usr/share/vim/vim91/ftplugin/flexwiki.vim
 #usr/share/vim/vim91/ftplugin/forth.vim
@@ -611,6 +620,7 @@ usr/share/vim
 #usr/share/vim/vim91/ftplugin/karel.vim
 #usr/share/vim/vim91/ftplugin/kconfig.vim
 #usr/share/vim/vim91/ftplugin/kdl.vim
+#usr/share/vim/vim91/ftplugin/kerml.vim
 #usr/share/vim/vim91/ftplugin/kivy.vim
 #usr/share/vim/vim91/ftplugin/kotlin.vim
 #usr/share/vim/vim91/ftplugin/kwt.vim
@@ -689,6 +699,7 @@ usr/share/vim
 #usr/share/vim/vim91/ftplugin/odin.vim
 #usr/share/vim/vim91/ftplugin/ondir.vim
 #usr/share/vim/vim91/ftplugin/opencl.vim
+#usr/share/vim/vim91/ftplugin/openscad.vim
 #usr/share/vim/vim91/ftplugin/openvpn.vim
 #usr/share/vim/vim91/ftplugin/org.vim
 #usr/share/vim/vim91/ftplugin/pamconf.vim
@@ -699,6 +710,7 @@ usr/share/vim
 #usr/share/vim/vim91/ftplugin/perl.vim
 #usr/share/vim/vim91/ftplugin/php.vim
 #usr/share/vim/vim91/ftplugin/pinfo.vim
+#usr/share/vim/vim91/ftplugin/pkl.vim
 #usr/share/vim/vim91/ftplugin/plaintex.vim
 #usr/share/vim/vim91/ftplugin/plsql.vim
 #usr/share/vim/vim91/ftplugin/pod.vim
@@ -786,6 +798,7 @@ usr/share/vim
 #usr/share/vim/vim91/ftplugin/swiftgyb.vim
 #usr/share/vim/vim91/ftplugin/swig.vim
 #usr/share/vim/vim91/ftplugin/sysctl.vim
+#usr/share/vim/vim91/ftplugin/sysml.vim
 #usr/share/vim/vim91/ftplugin/systemd.vim
 #usr/share/vim/vim91/ftplugin/systemverilog.vim
 #usr/share/vim/vim91/ftplugin/tap.vim
@@ -805,9 +818,11 @@ usr/share/vim
 #usr/share/vim/vim91/ftplugin/treetop.vim
 #usr/share/vim/vim91/ftplugin/tt2html.vim
 #usr/share/vim/vim91/ftplugin/tutor.vim
+#usr/share/vim/vim91/ftplugin/twig.vim
 #usr/share/vim/vim91/ftplugin/typescript.vim
 #usr/share/vim/vim91/ftplugin/typescriptreact.vim
 #usr/share/vim/vim91/ftplugin/typst.vim
+#usr/share/vim/vim91/ftplugin/uc.vim
 #usr/share/vim/vim91/ftplugin/uci.vim
 #usr/share/vim/vim91/ftplugin/udevconf.vim
 #usr/share/vim/vim91/ftplugin/udevperm.vim
@@ -953,6 +968,7 @@ usr/share/vim
 #usr/share/vim/vim91/indent/mp.vim
 #usr/share/vim/vim91/indent/nginx.vim
 #usr/share/vim/vim91/indent/nsis.vim
+#usr/share/vim/vim91/indent/nu.vim
 #usr/share/vim/vim91/indent/objc.vim
 #usr/share/vim/vim91/indent/obse.vim
 #usr/share/vim/vim91/indent/ocaml.vim
@@ -1107,7 +1123,6 @@ usr/share/vim
 #usr/share/vim/vim91/pack/dist/opt/editorconfig/doc/tags
 #usr/share/vim/vim91/pack/dist/opt/editorconfig/ftdetect
 #usr/share/vim/vim91/pack/dist/opt/editorconfig/ftdetect/editorconfig.vim
-#usr/share/vim/vim91/pack/dist/opt/editorconfig/mkzip.sh
 #usr/share/vim/vim91/pack/dist/opt/editorconfig/plugin
 #usr/share/vim/vim91/pack/dist/opt/editorconfig/plugin/editorconfig.vim
 #usr/share/vim/vim91/pack/dist/opt/helptoc
@@ -1141,7 +1156,6 @@ usr/share/vim
 #usr/share/vim/vim91/pack/dist/opt/netrw/autoload/netrw/fs.vim
 #usr/share/vim/vim91/pack/dist/opt/netrw/autoload/netrw/msg.vim
 #usr/share/vim/vim91/pack/dist/opt/netrw/autoload/netrw/os.vim
-#usr/share/vim/vim91/pack/dist/opt/netrw/autoload/netrwSettings.vim
 #usr/share/vim/vim91/pack/dist/opt/netrw/autoload/netrw_gitignore.vim
 #usr/share/vim/vim91/pack/dist/opt/netrw/doc
 #usr/share/vim/vim91/pack/dist/opt/netrw/doc/netrw.txt
@@ -1273,6 +1287,7 @@ usr/share/vim
 #usr/share/vim/vim91/syntax/autohotkey.vim
 #usr/share/vim/vim91/syntax/autoit.vim
 #usr/share/vim/vim91/syntax/automake.vim
+#usr/share/vim/vim91/syntax/autopkgtest.vim
 #usr/share/vim/vim91/syntax/ave.vim
 #usr/share/vim/vim91/syntax/avra.vim
 #usr/share/vim/vim91/syntax/awk.vim
@@ -1297,6 +1312,7 @@ usr/share/vim
 #usr/share/vim/vim91/syntax/cabalconfig.vim
 #usr/share/vim/vim91/syntax/cabalproject.vim
 #usr/share/vim/vim91/syntax/calendar.vim
+#usr/share/vim/vim91/syntax/cangjie.vim
 #usr/share/vim/vim91/syntax/catalog.vim
 #usr/share/vim/vim91/syntax/cdl.vim
 #usr/share/vim/vim91/syntax/cdrdaoconf.vim
@@ -1326,6 +1342,7 @@ usr/share/vim
 #usr/share/vim/vim91/syntax/cmusrc.vim
 #usr/share/vim/vim91/syntax/cobol.vim
 #usr/share/vim/vim91/syntax/coco.vim
+#usr/share/vim/vim91/syntax/codeowners.vim
 #usr/share/vim/vim91/syntax/colortest.vim
 #usr/share/vim/vim91/syntax/conaryrecipe.vim
 #usr/share/vim/vim91/syntax/conf.vim
@@ -1544,6 +1561,7 @@ usr/share/vim
 #usr/share/vim/vim91/syntax/karel.vim
 #usr/share/vim/vim91/syntax/kconfig.vim
 #usr/share/vim/vim91/syntax/kdl.vim
+#usr/share/vim/vim91/syntax/kitty.vim
 #usr/share/vim/vim91/syntax/kivy.vim
 #usr/share/vim/vim91/syntax/kix.vim
 #usr/share/vim/vim91/syntax/kotlin.vim
@@ -1573,6 +1591,7 @@ usr/share/vim
 #usr/share/vim/vim91/syntax/livebook.vim
 #usr/share/vim/vim91/syntax/lnk.vim
 #usr/share/vim/vim91/syntax/lnkmap.vim
+#usr/share/vim/vim91/syntax/log.vim
 #usr/share/vim/vim91/syntax/loginaccess.vim
 #usr/share/vim/vim91/syntax/logindefs.vim
 #usr/share/vim/vim91/syntax/logtalk.vim
@@ -1662,6 +1681,7 @@ usr/share/vim
 #usr/share/vim/vim91/syntax/nqc.vim
 #usr/share/vim/vim91/syntax/nroff.vim
 #usr/share/vim/vim91/syntax/nsis.vim
+#usr/share/vim/vim91/syntax/nu.vim
 #usr/share/vim/vim91/syntax/obj.vim
 #usr/share/vim/vim91/syntax/objc.vim
 #usr/share/vim/vim91/syntax/objcpp.vim
@@ -1700,6 +1720,7 @@ usr/share/vim
 #usr/share/vim/vim91/syntax/pilrc.vim
 #usr/share/vim/vim91/syntax/pine.vim
 #usr/share/vim/vim91/syntax/pinfo.vim
+#usr/share/vim/vim91/syntax/pkl.vim
 #usr/share/vim/vim91/syntax/plaintex.vim
 #usr/share/vim/vim91/syntax/pli.vim
 #usr/share/vim/vim91/syntax/plm.vim
@@ -1809,6 +1830,7 @@ usr/share/vim
 #usr/share/vim/vim91/syntax/shared/context-data-interfaces.vim
 #usr/share/vim/vim91/syntax/shared/context-data-metafun.vim
 #usr/share/vim/vim91/syntax/shared/context-data-tex.vim
+#usr/share/vim/vim91/syntax/shared/debarchitectures.vim
 #usr/share/vim/vim91/syntax/shared/debversions.vim
 #usr/share/vim/vim91/syntax/shared/hgcommitDiff.vim
 #usr/share/vim/vim91/syntax/shared/typescriptcommon.vim
@@ -2023,9 +2045,8 @@ usr/share/vim
 #usr/share/vim/vim91/tools/vimspell.txt
 #usr/share/vim/vim91/tools/xcmdsrv_client.c
 #usr/share/vim/vim91/tutor
-#usr/share/vim/vim91/tutor/README.el.cp737.txt
 #usr/share/vim/vim91/tutor/README.el.txt
-#usr/share/vim/vim91/tutor/README.ru.utf-8.txt
+#usr/share/vim/vim91/tutor/README.ru.txt
 #usr/share/vim/vim91/tutor/README.txt
 #usr/share/vim/vim91/tutor/en
 #usr/share/vim/vim91/tutor/en/vim-01-beginner.tutor
@@ -2050,81 +2071,41 @@ usr/share/vim
 #usr/share/vim/vim91/tutor/tutor.vim
 #usr/share/vim/vim91/tutor/tutor1
 #usr/share/vim/vim91/tutor/tutor1.bar
-#usr/share/vim/vim91/tutor/tutor1.bar.utf-8
-#usr/share/vim/vim91/tutor/tutor1.bg.utf-8
+#usr/share/vim/vim91/tutor/tutor1.bg
 #usr/share/vim/vim91/tutor/tutor1.ca
-#usr/share/vim/vim91/tutor/tutor1.ca.utf-8
 #usr/share/vim/vim91/tutor/tutor1.cs
-#usr/share/vim/vim91/tutor/tutor1.cs.cp1250
-#usr/share/vim/vim91/tutor/tutor1.cs.utf-8
 #usr/share/vim/vim91/tutor/tutor1.da
-#usr/share/vim/vim91/tutor/tutor1.da.utf-8
 #usr/share/vim/vim91/tutor/tutor1.de
-#usr/share/vim/vim91/tutor/tutor1.de.utf-8
 #usr/share/vim/vim91/tutor/tutor1.el
-#usr/share/vim/vim91/tutor/tutor1.el.cp737
-#usr/share/vim/vim91/tutor/tutor1.el.utf-8
 #usr/share/vim/vim91/tutor/tutor1.eo
-#usr/share/vim/vim91/tutor/tutor1.eo.utf-8
 #usr/share/vim/vim91/tutor/tutor1.es
-#usr/share/vim/vim91/tutor/tutor1.es.utf-8
 #usr/share/vim/vim91/tutor/tutor1.fr
-#usr/share/vim/vim91/tutor/tutor1.fr.utf-8
 #usr/share/vim/vim91/tutor/tutor1.gl
-#usr/share/vim/vim91/tutor/tutor1.gl.utf-8
 #usr/share/vim/vim91/tutor/tutor1.hr
-#usr/share/vim/vim91/tutor/tutor1.hr.cp1250
-#usr/share/vim/vim91/tutor/tutor1.hr.utf-8
 #usr/share/vim/vim91/tutor/tutor1.hu
-#usr/share/vim/vim91/tutor/tutor1.hu.cp1250
-#usr/share/vim/vim91/tutor/tutor1.hu.utf-8
 #usr/share/vim/vim91/tutor/tutor1.it
-#usr/share/vim/vim91/tutor/tutor1.it.utf-8
-#usr/share/vim/vim91/tutor/tutor1.ja.euc
-#usr/share/vim/vim91/tutor/tutor1.ja.sjis
-#usr/share/vim/vim91/tutor/tutor1.ja.utf-8
+#usr/share/vim/vim91/tutor/tutor1.ja
 #usr/share/vim/vim91/tutor/tutor1.ko
-#usr/share/vim/vim91/tutor/tutor1.ko.euc
-#usr/share/vim/vim91/tutor/tutor1.ko.utf-8
-#usr/share/vim/vim91/tutor/tutor1.lt.utf-8
-#usr/share/vim/vim91/tutor/tutor1.lv.utf-8
+#usr/share/vim/vim91/tutor/tutor1.lt
+#usr/share/vim/vim91/tutor/tutor1.lv
 #usr/share/vim/vim91/tutor/tutor1.nb
-#usr/share/vim/vim91/tutor/tutor1.nb.utf-8
 #usr/share/vim/vim91/tutor/tutor1.nl
-#usr/share/vim/vim91/tutor/tutor1.nl.utf-8
 #usr/share/vim/vim91/tutor/tutor1.no
-#usr/share/vim/vim91/tutor/tutor1.no.utf-8
 #usr/share/vim/vim91/tutor/tutor1.pl
-#usr/share/vim/vim91/tutor/tutor1.pl.cp1250
-#usr/share/vim/vim91/tutor/tutor1.pl.utf-8
 #usr/share/vim/vim91/tutor/tutor1.pt
-#usr/share/vim/vim91/tutor/tutor1.pt.utf-8
 #usr/share/vim/vim91/tutor/tutor1.ru
-#usr/share/vim/vim91/tutor/tutor1.ru.cp1251
-#usr/share/vim/vim91/tutor/tutor1.ru.utf-8
 #usr/share/vim/vim91/tutor/tutor1.sk
-#usr/share/vim/vim91/tutor/tutor1.sk.cp1250
-#usr/share/vim/vim91/tutor/tutor1.sk.utf-8
-#usr/share/vim/vim91/tutor/tutor1.sr.cp1250
-#usr/share/vim/vim91/tutor/tutor1.sr.utf-8
+#usr/share/vim/vim91/tutor/tutor1.sr
 #usr/share/vim/vim91/tutor/tutor1.sv
-#usr/share/vim/vim91/tutor/tutor1.sv.utf-8
-#usr/share/vim/vim91/tutor/tutor1.tr.iso9
-#usr/share/vim/vim91/tutor/tutor1.tr.utf-8
-#usr/share/vim/vim91/tutor/tutor1.uk.utf-8
-#usr/share/vim/vim91/tutor/tutor1.utf-8
-#usr/share/vim/vim91/tutor/tutor1.vi.utf-8
-#usr/share/vim/vim91/tutor/tutor1.zh.big5
-#usr/share/vim/vim91/tutor/tutor1.zh.euc
-#usr/share/vim/vim91/tutor/tutor1.zh.utf-8
-#usr/share/vim/vim91/tutor/tutor1.zh_cn.utf-8
-#usr/share/vim/vim91/tutor/tutor1.zh_tw.utf-8
+#usr/share/vim/vim91/tutor/tutor1.tr
+#usr/share/vim/vim91/tutor/tutor1.uk
+#usr/share/vim/vim91/tutor/tutor1.vi
+#usr/share/vim/vim91/tutor/tutor1.zh_cn
+#usr/share/vim/vim91/tutor/tutor1.zh_tw
 #usr/share/vim/vim91/tutor/tutor2
+#usr/share/vim/vim91/tutor/tutor2.fr
 #usr/share/vim/vim91/tutor/tutor2.gl
-#usr/share/vim/vim91/tutor/tutor2.gl.utf-8
 #usr/share/vim/vim91/tutor/tutor2.it
-#usr/share/vim/vim91/tutor/tutor2.it.utf-8
-#usr/share/vim/vim91/tutor/tutor2.ru.utf-8
-#usr/share/vim/vim91/tutor/tutor2.sr.utf-8
-#usr/share/vim/vim91/tutor/tutor2.utf-8
+#usr/share/vim/vim91/tutor/tutor2.ru
+#usr/share/vim/vim91/tutor/tutor2.sr
 #usr/share/vim/vim91/vimrc_example.vim
diff --git a/config/rootfiles/core/199/filelists/btrfs-progs b/config/rootfiles/core/199/filelists/btrfs-progs
new file mode 120000
index 000000000..d7a2f6f52
--- /dev/null
+++ b/config/rootfiles/core/199/filelists/btrfs-progs
@@ -0,0 +1 @@
+../../../common/btrfs-progs
\ No newline at end of file
diff --git a/config/rootfiles/core/199/filelists/hwdata b/config/rootfiles/core/199/filelists/hwdata
new file mode 120000
index 000000000..ced911666
--- /dev/null
+++ b/config/rootfiles/core/199/filelists/hwdata
@@ -0,0 +1 @@
+../../../common/hwdata
\ No newline at end of file
diff --git a/config/rootfiles/core/199/filelists/kbd b/config/rootfiles/core/199/filelists/kbd
new file mode 120000
index 000000000..9b85839b1
--- /dev/null
+++ b/config/rootfiles/core/199/filelists/kbd
@@ -0,0 +1 @@
+../../../common/kbd
\ No newline at end of file
diff --git a/config/rootfiles/core/199/filelists/libgpg-error b/config/rootfiles/core/199/filelists/libgpg-error
new file mode 120000
index 000000000..cad431339
--- /dev/null
+++ b/config/rootfiles/core/199/filelists/libgpg-error
@@ -0,0 +1 @@
+../../../common/libgpg-error
\ No newline at end of file
diff --git a/config/rootfiles/core/199/filelists/openssh b/config/rootfiles/core/199/filelists/openssh
new file mode 120000
index 000000000..d8c77fd8e
--- /dev/null
+++ b/config/rootfiles/core/199/filelists/openssh
@@ -0,0 +1 @@
+../../../common/openssh
\ No newline at end of file
diff --git a/config/rootfiles/core/199/filelists/p11-kit b/config/rootfiles/core/199/filelists/p11-kit
new file mode 120000
index 000000000..e652deb67
--- /dev/null
+++ b/config/rootfiles/core/199/filelists/p11-kit
@@ -0,0 +1 @@
+../../../common/p11-kit
\ No newline at end of file
diff --git a/config/rootfiles/core/199/filelists/vim b/config/rootfiles/core/199/filelists/vim
new file mode 120000
index 000000000..98613172e
--- /dev/null
+++ b/config/rootfiles/core/199/filelists/vim
@@ -0,0 +1 @@
+../../../common/vim
\ No newline at end of file
diff --git a/lfs/btrfs-progs b/lfs/btrfs-progs
index 652ae34ea..d5b4fa812 100644
--- a/lfs/btrfs-progs
+++ b/lfs/btrfs-progs
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 6.16
+VER        = 6.17
 
 # https://mirrors.edge.kernel.org/pub/linux/kernel/people/kdave/btrfs-progs/
 
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 375c60a93bc5b62d7c3a94d5ed108b81786b27f2beba27d85bcede94a892d84e71b1fe00a1574cc53066fe77bb37408b2b382db4a1664fefcc676c1c3efa1c60
+$(DL_FILE)_BLAKE2 = 301409e4f0e17c25620070bab0aedc1e57ad672bc7b4e4c1f9db2cd34c6104667800df2979ff456554c94e415be649dd7b8f43859d6539f84a1c050c2db27dd4
 
 install : $(TARGET)
 
diff --git a/lfs/fetchmail b/lfs/fetchmail
index 3a04ba881..2cd118aae 100644
--- a/lfs/fetchmail
+++ b/lfs/fetchmail
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Full-Featured POP and IMAP Mail Retrieval Daemon
 
-VER        = 6.5.5
+VER        = 6.5.6
 
 THISAPP    = fetchmail-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -34,7 +34,7 @@ DL_FROM    = $(URL_IPFIRE)
 DIR_APP    = $(DIR_SRC)/$(THISAPP)
 TARGET     = $(DIR_INFO)/$(THISAPP)
 PROG       = fetchmail
-PAK_VER    = 21
+PAK_VER    = 22
 
 DEPS       =
 
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 73d7dafb33dd6d8efd70c4d4ab7cb6d43d8fc41b66eef9facdd2ac27300e9ff94b0a40b5c49d6fa6a91bd0625243f6805f7dbc681e851ead9910d2507914d16e
+$(DL_FILE)_BLAKE2 = cef4a2d2f7611cea3ab689c3cd6cedd7f598fef7f28908621b74d788fa8a3b747fb5b70fb3637052bce4f75eaa35f910ea7c41444becf9330248a6548a6cc984
 
 install : $(TARGET)
 
diff --git a/lfs/hwdata b/lfs/hwdata
index e83b6f37f..4f19edccf 100644
--- a/lfs/hwdata
+++ b/lfs/hwdata
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.398
+VER        = 0.400
 
 THISAPP    = hwdata-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 415cf2e0e1735c4b0a2186421e85186f20ae3b165a8224923ef24471b98f3f923484072702c2f0c21dffe98ad2144459e14f2829b77c110e2397141da2bde676
+$(DL_FILE)_BLAKE2 = 40adc56864974dc68fd407980b3a071d2715d3aac80ec8812ad955bbd5462cef92a7dc4bf156c4e8da0395b53da29430db815f522cc8fcef1098cd33540828e5
 
 install : $(TARGET)
 
diff --git a/lfs/kbd b/lfs/kbd
index d77ab620b..7354ff551 100644
--- a/lfs/kbd
+++ b/lfs/kbd
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.8.0
+VER        = 2.9.0
 
 THISAPP    = kbd-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -42,7 +42,7 @@ $(DL_FILE)                            = $(DL_FROM)/$(DL_FILE)
 kbd-latarcyrheb-16-fixed.tar.bz2      = $(DL_FROM)/kbd-latarcyrheb-16-fixed.tar.bz2
 kbd-latsun-fonts.tar.bz2              = $(DL_FROM)/kbd-latsun-fonts.tar.bz2
 
-$(DL_FILE)_BLAKE2 = 3b1917e37bbb4f2a975cf1f6bbfeba6a6ee486378d770c3b0232c62c40fe758181a15799f9119e3e4eedbb356a0677b3fba4b0afef135d346801693a6ef432cc
+$(DL_FILE)_BLAKE2 = 6f54dc139b7b20b5ac0f53129f67a9629c9bda22a09f7bd36dfa59500ac6fb87df18169872ca231645c1be6afb33fada97f096ef497f49547228dd01efa083f4
 kbd-latarcyrheb-16-fixed.tar.bz2_BLAKE2  = d5c701333b9eae7e0c467aebee5b2217c3225dee615622f77e501569f1464a8c32380b2d4a522730db74a909e1ea746e660ea6849bbf48195af22bda73858d1b
 kbd-latsun-fonts.tar.bz2_BLAKE2	         = c3def1192331a65f3edcf608ca164370d2db0c61444f71fc83bf35cb86d417ae92582180ace853a3cf93e569a83a42fca054fbadbf7f5986a1abd17e8bb6691f
 
diff --git a/lfs/libgpg-error b/lfs/libgpg-error
index 12ee9a5cf..883663ce8 100644
--- a/lfs/libgpg-error
+++ b/lfs/libgpg-error
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.54
+VER        = 1.56
 
 THISAPP    = libgpg-error-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 75f0cd9f1cb8c85bd86f7f49c6be6ec7aa216e39a269b92c9231fa4c441e862ef0b666cc6639a154777f31526bb41b1f81796662c8b210616c4a04c3db8e3d68
+$(DL_FILE)_BLAKE2 = 2c84fe5cef8c77dc01f481aeacada815baf7fff85369a9c877dc4a11f2e3f84f37ad69a04213bc79765677dd2829a5074d7c8239b298429484378234cb4d2a66
 
 install : $(TARGET)
 
diff --git a/lfs/openssh b/lfs/openssh
index 46151228c..bdaa19c9d 100644
--- a/lfs/openssh
+++ b/lfs/openssh
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 10.0p1
+VER        = 10.2p1
 
 THISAPP    = openssh-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 4ce353adf75aade8f4b2a223ad13e2f92cd23d1e60b4ee52bad0eaf036571229438cd9760dfa99c0e10fa09a8ac47b2bfb04eb183fb7b9287ac564ec75316a75
+$(DL_FILE)_BLAKE2 = 8c031b10b1642e21b46f7d1db84ba42692e378a54af3d8e5b5c8706c3a0a06d442a02ed8803063121e7ff325ea275cad4432b9eaa6a7f47a4d7cfad504953ab6
 
 install : $(TARGET)
 
diff --git a/lfs/openssl b/lfs/openssl
index dc3f733a0..88bc6d98f 100644
--- a/lfs/openssl
+++ b/lfs/openssl
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.5.4
+VER        = 3.6.0
 
 THISAPP    = openssl-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -72,7 +72,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 07e02f88af05e189385eef28599b81bd16d242130975c79df46e565a0dd92f74e59807d4770a2b3316adf08f2ca6a0dd2bfc96ab2a88a8dfb5c0d19197fe8fbf
+$(DL_FILE)_BLAKE2 = 4a0150aa9a78581e74119b338848458249630c94a43589a5b311d41c669b817b043007ddd13b3fb81233da10af3ccd455f3fbf3b09cf45016c475a8e2044e965
 
 install : $(TARGET)
 
diff --git a/lfs/p11-kit b/lfs/p11-kit
index 0676023c7..9ae835013 100644
--- a/lfs/p11-kit
+++ b/lfs/p11-kit
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.25.8
+VER        = 0.25.10
 
 THISAPP    = p11-kit-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = d351b7b015920d7ecf1b9d3b4f1f3fc62c7ef46c1dc9ed3475b9ac7f5dbf5a47b2d2a19049e7eef81e35d0f993a860ee5df1864f0341596dca143140ae14e5c4
+$(DL_FILE)_BLAKE2 = 9f5a1be36a5b67ac35b294afdacf1b3a5c1c579b04e3407ea7bc6899cfe74330682653da50975a13e443b3a79379fdf6c6ed2a778933cf5dbba4fdf6dc52c99a
 
 install : $(TARGET)
 
diff --git a/lfs/vim b/lfs/vim
index 574e3432c..7c4d0d115 100644
--- a/lfs/vim
+++ b/lfs/vim
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 9.1.1406
+VER        = 9.1.1854
 
 THISAPP    = vim-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = e50d541d6e8a0cb7a332a3a09ff1794f7cd347b16f76bc3b71645d28eddb1472683b4be7a307653cce0a2a79c7c7703383bc481dae6d35818b9179f9be14926d
+$(DL_FILE)_BLAKE2 = a5469910c381392b80c98c60d6c826b88c42bf0d8815f080297fbca44d9159fcfa2af79a3d5f1766c800d19ccb929979847dbe3677af95e448986cd88eefc2f3
 
 install : $(TARGET)
 


hooks/post-receive
--
IPFire 2.x development tree


^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2025-10-15  9:07 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-10-15  9:07 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 39fd5ed1d733fb5b9880cdecd173fb334d248e33 Michael Tremer

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox