From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4dLNhG0TzNz2y1f for ; Tue, 02 Dec 2025 14:39:26 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4dLNhF29tfz2xyW for ; Tue, 02 Dec 2025 14:39:25 +0000 (UTC) Received: from people01.haj.ipfire.org (people01.haj.ipfire.org [IPv6:2001:678:b28::161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (secp384r1) client-digest SHA384) (Client CN "people01.haj.ipfire.org", Issuer "E8" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4dLNh51ZGpzF8 for ; Tue, 02 Dec 2025 14:39:17 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1764686357; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=ENMoqSa0LXm4UbnYb4UBKWxBPva4UT6ymasDpw6qulQ=; b=PYl7bqyaFgIaAfJ52A1AnABf0zhP3vlVQRUCbKaxXz6wd7Sg/svo8j3+YUGbhKzsMxpo33 Wh7trWdTK5EVdLCw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1764686357; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=ENMoqSa0LXm4UbnYb4UBKWxBPva4UT6ymasDpw6qulQ=; b=tX4LsmcXDGewUXRYE5TuBYRbEFF4yEZ+DVjxF360g/eZZDKFkLae0n8lLH383goSYVEM2L ULOK0Ds2FzovQJTw+ptaed5/9I5iTcY+KvOC32eRjAa+znAoV78vn7H9RpyxoK4oDzSNG/ UNMFEXUNdoQV4qZntR2uQGE1hYega+sRJ1WHg4TwZNKYvtyNTdQYEZAOaOJtEvMA+vibRO 8Rug5LoQ+db3Fr86V8nS8L00LD9u6yfiw58/hBzq4YwK52jpaTG9UYDvzipYl4b1DvNs4T 4IklPPzyPPPUVCnPsNgXS/AshLZcfzUvN3EZwVHpfeKBUrBVlv4frW7KPjjhIw== Received: by people01.haj.ipfire.org (Postfix, from userid 1000) id 4dLNh307Dmz2xsr; Tue, 02 Dec 2025 14:39:14 +0000 (UTC) To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 24ad6f00b5c69f1ba882e0b11c6aee3ce8e2b619 X-Git-Refname: refs/heads/next X-Git-Reftype: branch X-Git-Oldrev: d33730b6a2a00607a6f81554008637df9c18a3f5 X-Git-Newrev: 24ad6f00b5c69f1ba882e0b11c6aee3ce8e2b619 Message-Id: <4dLNh307Dmz2xsr@people01.haj.ipfire.org> Date: Tue, 02 Dec 2025 14:39:14 +0000 (UTC) From: Michael Tremer Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 24ad6f00b5c69f1ba882e0b11c6aee3ce8e2b619 (commit) via 5217226f0c0df995cec4aac8490b5c6ff453e011 (commit) via d71ff6588b6c2b30ea2cc33a9443fe092874d0fa (commit) via 7667b4e49fd1829f1c79b911b077279ab7b8f8b3 (commit) via 9f21090b9c1828906b9826b0729466067596f4d1 (commit) via fde71a8dd106b8bc712ba862d3c1f58b34bf8ea6 (commit) via 67fdbe0b3b7ce4f01742a274141e3e850bf439d9 (commit) via 88ca2ebfc8755ab09cde01b0a0f17019506f756f (commit) via 9db87258fbe9779354da0b7816757bf24937cef2 (commit) via 862b895052d01034fd01be248b3221b5c567014d (commit) via 6a9462b69263f5d1d685012d7f73beba7b7effe2 (commit) via a6579d21f662b42973346f406d6e9ad15339fe6f (commit) via d656b7af6411d0306513b853a552f56d6713c174 (commit) via c26c281d6447d40c26c421dbab42aff94cd9907b (commit) via 5195e0085ef2b320fe9a6312e5135a72f6c030bc (commit) from d33730b6a2a00607a6f81554008637df9c18a3f5 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 24ad6f00b5c69f1ba882e0b11c6aee3ce8e2b619 Author: Adolf Belka Date: Tue Dec 2 12:57:42 2025 +0100 core200: Ship sqlite Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 5217226f0c0df995cec4aac8490b5c6ff453e011 Author: Adolf Belka Date: Tue Dec 2 12:57:47 2025 +0100 sqlite: Update to version 3510100 - Update from version 3510000 to 3510100 - Update of rootfile - Changelog 3510100 Fix incorrect results from nested EXISTS queries caused by the optimization in item 6b in the 3.51.0 release. Fix a latent bug in fts5vocab virtual table, exposed by new optimizations in the 3.51.0 release Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit d71ff6588b6c2b30ea2cc33a9443fe092874d0fa Author: Adolf Belka Date: Tue Dec 2 12:57:46 2025 +0100 postfix: Update to version 3.10.6 - Update from version 3.10.4 to 3.10.6 - No change to rootfile - Changelog 3.10.6 Bugfix (defect introduced: Postfix 3.10, date: 20250117). Symptom: warning messages that smtp_tls_wrappermode requires "smtp_tls_security_level = encrypt". Root cause: Support for "TLS-Required: no" broke client-side TLS wrappermode support, by downgrading a connection to TLS security level 'may'. The fix changes the downgrade level for wrappermode connections to 'encrypt'. Rationale: by design, TLS can be optional only for connections that use STARTTLS. The downgrade to unauthenticated 'encrypt' allows a sender to avoid an email delivery problem. Problem reported by Joshua Tyler Cochran. New logging: the Postfix SMTP client will log a warning when an MX hostname does not match STS policy MX patterns, with "smtp_tls_enforce_sts_mx_patterns = yes" in Postfix, and with TLSRPT support enabled in a TLS policy plugin. It will log a successful match only when verbose logging is enabled. Bugfix (defect introduced: Postfix 3.10, date: 20240902): SMTP client null pointer crash when an STS policy plugin sends no policy_string or no mx_pattern attributes. This can happen only during tests with a fake STS plugin. Bugfix (defect introduced: Postfix 2.9, date: 20120307): segfault when a duplicate parameter name is given to "postconf -X" or "postconf -#'. Documentation: removed incorrect text from the parameter description for smtp_cname_overrides_servername. File: proto/postconf.proto. 3.10.5 Workaround for an interface mis-match between the Postfix SMTP client and MTA-STS policy plugins. The existing behavior is to connect to any MX host listed in DNS, and to match the server certificate against any STS policy MX host pattern. The corrected behavior is to connect to an MX host only if its name matches any STS policy MX host pattern, and to match the server certificate against the MX hostname. The corrected behavior must be enabled in two places: in Postfix with a new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes") and in an MTA-STS plugin by enabling TLSRPT support, so that the plugin forwards STS policy attributes to Postfix. This works even if Postfix TLSRPT support is disabled at build time or at runtime. TLSRPT Workaround: when a TLSRPT policy-type value is "no-policy-found", pretend that the TLSRPT policy domain value is equal to the recipient domain. This ignores that different policy types (TLSA, STS) use different policy domains. But this is what Microsoft does, and therefore, what other tools expect. Bugfix (defect introduced: Postfix 3.0): the Postfix SMTP client's connection reuse logic did not distinguish between sessions that require SMTPUTF8 support, and sessions that do not. The solution is 1) to store sessions with different SMTPUTF8 requirements under distinct connection cache storage keys, and 2) to not cache a connection when SMTPUTF8 is required but the server does not support that feature. Bugfix (defect introduced: Postfix 3.0, date 20140731): the smtpd 'disconnect' command statistics did not count commands with "bad syntax" and "bad UTF-8 syntax" errors. Bugfix: the August 2025 patch broke DBM library support which is still needed on Solaris; and the same change could result in warnings with "database X is older than source file Y". Postfix 3.11 forward compatibility: to avoid ugly warnings when Postfix 3.11 is rolled back to an older version, allow a preliminary 'size' record in maildrop queue files created with Postfix 3.11 or later. Bugfix (defect introduced: Postfix 3.8, date 20220128): non-reproducible build, because the 'postconf -e' output order for new main.cf entries was no longer deterministic. Problem reported by Oleksandr Natalenko, diagnosis by Eray Aslan. To make builds predictable, add missing meta_directory and shlib_directory settings to the stock main.cf file. Problem diagnosed by Eray Aslan. Bugfix (defect introduced: Postfix 3.9, date 20230517): posttls-finger(1) logged an incorrectly-formatted port number. Viktor Dukhovni. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 7667b4e49fd1829f1c79b911b077279ab7b8f8b3 Author: Adolf Belka Date: Tue Dec 2 12:57:41 2025 +0100 core200: Ship lvm2 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 9f21090b9c1828906b9826b0729466067596f4d1 Author: Adolf Belka Date: Tue Dec 2 12:57:45 2025 +0100 lvm2: Update to version 2.03.37 - Update from version 2.03.36 to 2.03.37 - No change to rootfile - Changelog 2.03.37 Remove unsupported --blockdevice option from lvscan. Support output in list mode for all lvmconfig --typeconfig types with --list. Enhance shutdown performance of daemons using libdaemon. Update lvmdevices(8). Add --force option for lvmdevices --update. Add --listids, --delid, --addid options for manipulation by device_id to lvmdevices. Add missing synchronization for vdopool. Fix deadlock in lvmdbusd on SIGINT in lvm shell mode. Add VG attr character and pr field for persistent reservation status to vgs. Fix persistent reservations setting handling in vgmerge, vgsplit and vgimportclone. Add missing synchronization while converting cachevols. Warn on classic snapshot on raid creation and error on activation if missing. Translate udev device paths in lvmdbusd for test environments. Use source='udev' in lvmdbusd to monitor processed udev events. Symlink to /dev nodes when using alternative dev dir to trigger udev. Avoid passing uninitilized buffer in dmeventd to fix valgrind report. Improve lvmdbusd matching of udevd reported device paths. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit fde71a8dd106b8bc712ba862d3c1f58b34bf8ea6 Author: Adolf Belka Date: Tue Dec 2 12:57:40 2025 +0100 core200: Ship libpng Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 67fdbe0b3b7ce4f01742a274141e3e850bf439d9 Author: Adolf Belka Date: Tue Dec 2 12:57:44 2025 +0100 libpng: Update to version 1.6.51 - Update from version 1.6.50 to 1.6.51 - Update of rootfile - Four CVE fixes - Changelog 1.6.51 Fixed CVE-2025-64505 (moderate severity): Heap buffer overflow in `png_do_quantize` via malformed palette index. (Reported by Samsung; analyzed by Fabio Gritti.) Fixed CVE-2025-64506 (moderate severity): Heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled. (Reported by Samsung and ; analyzed by Fabio Gritti.) Fixed CVE-2025-64720 (high severity): Buffer overflow in `png_image_read_composite` via incorrect palette premultiplication. (Reported by Samsung; analyzed by John Bowler.) Fixed CVE-2025-65018 (high severity): Heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`. (Reported by .) Fixed a memory leak in `png_set_quantize`. (Reported by Samsung; analyzed by Fabio Gritti.) Removed the experimental and incomplete ERROR_NUMBERS code. (Contributed by Tobias Stoeckmann.) Improved the RISC-V vector extension support; required RVV 1.0 or newer. (Contributed by Filip Wasil.) Added GitHub Actions workflows for automated testing. Performed various refactorings and cleanups. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 88ca2ebfc8755ab09cde01b0a0f17019506f756f Author: Adolf Belka Date: Tue Dec 2 12:57:39 2025 +0100 core200: Ship iana-etc Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 9db87258fbe9779354da0b7816757bf24937cef2 Author: Adolf Belka Date: Tue Dec 2 12:57:43 2025 +0100 iana-etc: Update to version 20251120 - Update from version 20251030 to 20251120 - No change to rootfile - No changelog provided Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 862b895052d01034fd01be248b3221b5c567014d Author: Adolf Belka Date: Mon Dec 1 17:11:06 2025 +0100 core200: Ship gnutls Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 6a9462b69263f5d1d685012d7f73beba7b7effe2 Author: Adolf Belka Date: Mon Dec 1 17:11:07 2025 +0100 gnutls: Update to version 3.8.11 - Update from version 3.8.10 to 3.8.11 - Update of rootfile - One CVE fix - Changelog 3.8.11 libgnutls: Fix stack overwrite in gnutls_pkcs11_token_init Reported by Luigino Camastra from Aisle Research. [GNUTLS-SA-2025-11-18, CVSS: low] [CVE-2025-9820] libgnutls: MAC algorithms for PSK binders is now configurable The previous implementation assumed HMAC-SHA256 to calculate the PSK binders. With the new gnutls_psk_allocate_client_credentials2() and gnutls_psk_allocate_server_credentials2() functions, the application can use other MAC algorithms such as HMAC-SHA384. libgnutls: Expose a new function to provide the maximum record send size A new function gnutls_record_get_max_send_size() has been added to determine the maximum size of a TLS record to be sent to the peer. libgnutls: Expose a new function to update keys without sending a KeyUpdate to the peer. A new function gnutls_handshake_update_receiving_key() has been added to allow updating the local receiving key without sending any KeyUpdate messages. libgnutls: PKCS#11 cryptographic provider configuration takes a token URI instead of a module path. To allow using a PKCS#11 module exposing multiple tokens, the "path" configuration keyword was replaced with the "url" keyword. libgnutls: Support crypto-auditing probe points crypto-auditing is a project to monitor which cryptographic operations are taking place in the library at run time, through eBPF. This adds necessary probe points for that, in public key cryptography and the TLS use-case. To enable this, run configure with --enable-crypto-auditing. build: The minimum version of Nettle has been updated to 3.10 Given Nettle 3.10 is ABI compatible with 3.6 and includes several security relevant fixes, the library's minimum requirement of Nettle is updated to 3.10. build: The default priority file path is now constructed from sysconfdir Previously, the location of the default priority file was hard-coded to be /etc/gnutls/config. Now it takes into account of the --sysconfdir option given to the configure script. API and ABI modifications: gnutls_psk_allocate_client_credentials2: New function gnutls_psk_allocate_server_credentials2: New function gnutls_record_get_max_send_size: New function gnutls_handshake_update_receiving_key: New function gnutls_audit_push_context: New function gnutls_audit_pop_context: New function gnutls_audit_current_context: New function Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit a6579d21f662b42973346f406d6e9ad15339fe6f Merge: d33730b6a d656b7af6 Author: Michael Tremer Date: Tue Dec 2 14:21:00 2025 +0000 Merge branch 'master' into next ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/gnutls | 9 ++++++++- config/rootfiles/common/libpng | 2 +- config/rootfiles/common/sqlite | 2 +- config/rootfiles/{oldcore/110 => core/200}/filelists/gnutls | 0 config/rootfiles/{oldcore/123 => core/200}/filelists/iana-etc | 0 config/rootfiles/{oldcore/109 => core/200}/filelists/libpng | 0 config/rootfiles/{oldcore/125 => core/200}/filelists/lvm2 | 0 config/rootfiles/{oldcore/125 => core/200}/filelists/sqlite | 0 lfs/gnutls | 4 ++-- lfs/iana-etc | 4 ++-- lfs/libpng | 4 ++-- lfs/libvirt | 2 +- lfs/lvm2 | 4 ++-- lfs/postfix | 6 +++--- lfs/qemu | 2 +- lfs/sqlite | 4 ++-- src/paks/libvirt/install.sh | 9 ++++++--- src/paks/libvirt/update.sh | 4 ++-- src/paks/qemu/install.sh | 2 +- 19 files changed, 34 insertions(+), 24 deletions(-) copy config/rootfiles/{oldcore/110 => core/200}/filelists/gnutls (100%) copy config/rootfiles/{oldcore/123 => core/200}/filelists/iana-etc (100%) copy config/rootfiles/{oldcore/109 => core/200}/filelists/libpng (100%) copy config/rootfiles/{oldcore/125 => core/200}/filelists/lvm2 (100%) copy config/rootfiles/{oldcore/125 => core/200}/filelists/sqlite (100%) Difference in files: diff --git a/config/rootfiles/common/gnutls b/config/rootfiles/common/gnutls index e863843258..52c3b67647 100644 --- a/config/rootfiles/common/gnutls +++ b/config/rootfiles/common/gnutls @@ -32,7 +32,7 @@ usr/lib/libgnutls-dane.so.0.4.1 #usr/lib/libgnutls.la #usr/lib/libgnutls.so usr/lib/libgnutls.so.30 -usr/lib/libgnutls.so.30.40.4 +usr/lib/libgnutls.so.30.41.0 #usr/lib/libgnutlsxx.la #usr/lib/libgnutlsxx.so usr/lib/libgnutlsxx.so.30 @@ -143,6 +143,9 @@ usr/lib/libgnutlsxx.so.30.0.0 #usr/share/man/man3/gnutls_anti_replay_set_add_function.3 #usr/share/man/man3/gnutls_anti_replay_set_ptr.3 #usr/share/man/man3/gnutls_anti_replay_set_window.3 +#usr/share/man/man3/gnutls_audit_current_context.3 +#usr/share/man/man3/gnutls_audit_pop_context.3 +#usr/share/man/man3/gnutls_audit_push_context.3 #usr/share/man/man3/gnutls_auth_client_get_type.3 #usr/share/man/man3/gnutls_auth_get_type.3 #usr/share/man/man3/gnutls_auth_server_get_type.3 @@ -360,6 +363,7 @@ usr/lib/libgnutlsxx.so.30.0.0 #usr/share/man/man3/gnutls_handshake_set_read_function.3 #usr/share/man/man3/gnutls_handshake_set_secret_function.3 #usr/share/man/man3/gnutls_handshake_set_timeout.3 +#usr/share/man/man3/gnutls_handshake_update_receiving_key.3 #usr/share/man/man3/gnutls_handshake_write.3 #usr/share/man/man3/gnutls_hash.3 #usr/share/man/man3/gnutls_hash_copy.3 @@ -684,7 +688,9 @@ usr/lib/libgnutlsxx.so.30.0.0 #usr/share/man/man3/gnutls_protocol_list.3 #usr/share/man/man3/gnutls_protocol_set_enabled.3 #usr/share/man/man3/gnutls_psk_allocate_client_credentials.3 +#usr/share/man/man3/gnutls_psk_allocate_client_credentials2.3 #usr/share/man/man3/gnutls_psk_allocate_server_credentials.3 +#usr/share/man/man3/gnutls_psk_allocate_server_credentials2.3 #usr/share/man/man3/gnutls_psk_client_get_hint.3 #usr/share/man/man3/gnutls_psk_format_imported_identity.3 #usr/share/man/man3/gnutls_psk_free_client_credentials.3 @@ -761,6 +767,7 @@ usr/lib/libgnutlsxx.so.30.0.0 #usr/share/man/man3/gnutls_record_get_direction.3 #usr/share/man/man3/gnutls_record_get_discarded.3 #usr/share/man/man3/gnutls_record_get_max_early_data_size.3 +#usr/share/man/man3/gnutls_record_get_max_send_size.3 #usr/share/man/man3/gnutls_record_get_max_size.3 #usr/share/man/man3/gnutls_record_get_state.3 #usr/share/man/man3/gnutls_record_overhead_size.3 diff --git a/config/rootfiles/common/libpng b/config/rootfiles/common/libpng index 5f3f801d51..9dfdef5c65 100644 --- a/config/rootfiles/common/libpng +++ b/config/rootfiles/common/libpng @@ -16,7 +16,7 @@ usr/lib/libpng.so #usr/lib/libpng16.la usr/lib/libpng16.so usr/lib/libpng16.so.16 -usr/lib/libpng16.so.16.50.0 +usr/lib/libpng16.so.16.51.0 #usr/lib/pkgconfig/libpng.pc #usr/lib/pkgconfig/libpng16.pc #usr/share/man/man3/libpng.3 diff --git a/config/rootfiles/common/sqlite b/config/rootfiles/common/sqlite index e4fa7c19f8..0d18c64c1d 100644 --- a/config/rootfiles/common/sqlite +++ b/config/rootfiles/common/sqlite @@ -3,6 +3,6 @@ usr/bin/sqlite3 #usr/include/sqlite3ext.h usr/lib/libsqlite3.so usr/lib/libsqlite3.so.0 -usr/lib/libsqlite3.so.3.51.0 +usr/lib/libsqlite3.so.3.51.1 #usr/lib/pkgconfig/sqlite3.pc #usr/share/man/man1/sqlite3.1 diff --git a/config/rootfiles/core/200/filelists/gnutls b/config/rootfiles/core/200/filelists/gnutls new file mode 120000 index 0000000000..8dbe60bc32 --- /dev/null +++ b/config/rootfiles/core/200/filelists/gnutls @@ -0,0 +1 @@ +../../../common/gnutls \ No newline at end of file diff --git a/config/rootfiles/core/200/filelists/iana-etc b/config/rootfiles/core/200/filelists/iana-etc new file mode 120000 index 0000000000..1f3d54dbd4 --- /dev/null +++ b/config/rootfiles/core/200/filelists/iana-etc @@ -0,0 +1 @@ +../../../common/iana-etc \ No newline at end of file diff --git a/config/rootfiles/core/200/filelists/libpng b/config/rootfiles/core/200/filelists/libpng new file mode 120000 index 0000000000..8ef96e2c13 --- /dev/null +++ b/config/rootfiles/core/200/filelists/libpng @@ -0,0 +1 @@ +../../../common/libpng \ No newline at end of file diff --git a/config/rootfiles/core/200/filelists/lvm2 b/config/rootfiles/core/200/filelists/lvm2 new file mode 120000 index 0000000000..d640870b75 --- /dev/null +++ b/config/rootfiles/core/200/filelists/lvm2 @@ -0,0 +1 @@ +../../../common/lvm2 \ No newline at end of file diff --git a/config/rootfiles/core/200/filelists/sqlite b/config/rootfiles/core/200/filelists/sqlite new file mode 120000 index 0000000000..4ea5697669 --- /dev/null +++ b/config/rootfiles/core/200/filelists/sqlite @@ -0,0 +1 @@ +../../../common/sqlite \ No newline at end of file diff --git a/lfs/gnutls b/lfs/gnutls index 25920dfe77..15d0362dd6 100644 --- a/lfs/gnutls +++ b/lfs/gnutls @@ -24,7 +24,7 @@ include Config -VER = 3.8.10 +VER = 3.8.11 THISAPP = gnutls-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 0b62e93b2818d2265ca11e561724547fa3c24d08986eb77ea743b4af52773db975c1859164c7d405d9a9bedfa981af58f10f85100b6c0e3542a38c49af407a4d +$(DL_FILE)_BLAKE2 = 54ec3fb396187294ae59c65fa92a515175d8ab19d9f5656569b372b5764b3090724aaa8cedd9467b530f2c74e86a6bfd956d3bd9439a7b69656dcc24e303cbe6 install : $(TARGET) diff --git a/lfs/iana-etc b/lfs/iana-etc index 23d8fc22a3..9c0e5c9f87 100644 --- a/lfs/iana-etc +++ b/lfs/iana-etc @@ -24,7 +24,7 @@ include Config -VER = 20251030 +VER = 20251120 # https://github.com/Mic92/iana-etc THISAPP = iana-etc-$(VER) @@ -41,7 +41,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = f2775fff5517d4195e54aa4290738c32eae1cabfd7ddb824692ad41c1e77080bc3bcafa9afa8915da094c537cd67bccc175c6771d28fca22fffc8a2240209f32 +$(DL_FILE)_BLAKE2 = fd85f0494f65774607c43b9f76fb1f9052b7d6782c893997984b791cbb449723d329f3dab99339e1e52a174ab0374ee9bc57166bb39e1a1833be2e0f3e076e5e install : $(TARGET) diff --git a/lfs/libpng b/lfs/libpng index e181be4e31..545b3efef1 100644 --- a/lfs/libpng +++ b/lfs/libpng @@ -24,7 +24,7 @@ include Config -VER = 1.6.50 +VER = 1.6.51 THISAPP = libpng-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2191536b4448d3a058b9dbb31f3d780959c9daf7b104550cc89e8ae984a3c9f01b86bf6c6708983989b4bfbe7232e3716b8a3b8cd3313a12c31e0623b6241d11 +$(DL_FILE)_BLAKE2 = 2d1ee36f9796e90a533abf26597df82c39cfab42f8d4044d35e0fdbab65612b9fc0234780677e2ea758450db9815b9d30870e8024bcebc0170c87361b7c4cc0a install : $(TARGET) diff --git a/lfs/libvirt b/lfs/libvirt index 659b42c586..6e3f1c8749 100644 --- a/lfs/libvirt +++ b/lfs/libvirt @@ -35,7 +35,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) SUP_ARCH = x86_64 aarch64 PROG = libvirt -PAK_VER = 43 +PAK_VER = 44 DEPS = ebtables libpciaccess ovmf swtpm qemu diff --git a/lfs/lvm2 b/lfs/lvm2 index 39573f05f2..df508d11a3 100644 --- a/lfs/lvm2 +++ b/lfs/lvm2 @@ -24,7 +24,7 @@ include Config -VER = 2.03.36 +VER = 2.03.37 THISAPP = LVM2.$(VER) DL_FILE = $(THISAPP).tgz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 487acd55d640d9f8265f62165485f6e3d94f3a4378f10e7086aa3bcc1adf0e82b2ae04f9f6a055d26d92554f219143013dc233ee45296437d5b73fd9e96fc150 +$(DL_FILE)_BLAKE2 = 4762ebe827b886c0e72a91c545c8c4fa9c9d1629e987f13d0c52ee41b80444c3c5c8a81a90566ed9bd7b68d67684749a7ad2cc066b20a3fa44eb8466ae0cc82e install : $(TARGET) diff --git a/lfs/postfix b/lfs/postfix index 2bc0174d16..a7ff99c4fe 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -26,7 +26,7 @@ include Config SUMMARY = A fast, secure, and flexible mailer -VER = 3.10.4 +VER = 3.10.6 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 49 +PAK_VER = 50 DEPS = @@ -72,7 +72,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = e0a9b3dbd858e9b2bacb137b886ef35a89220caf91da5bcb90de5fd3df7285645deaff6e58f571cdc75966098cf13190b0315690c270b9f3ed69a21e63d2d3ab +$(DL_FILE)_BLAKE2 = ca9f371f15af45c72ee97830d5bfb08b4ef2020409e55b1a99ef20681dfaec86fa7f7f799caa7b6e5757da0ea9ccbd5ac51104244b2e315f3cedb414b3e46451 install : $(TARGET) diff --git a/lfs/qemu b/lfs/qemu index d7a0ba9cad..ca1115c76f 100644 --- a/lfs/qemu +++ b/lfs/qemu @@ -35,7 +35,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = qemu -PAK_VER = 51 +PAK_VER = 52 DEPS = alsa libusbredir spice libslirp diff --git a/lfs/sqlite b/lfs/sqlite index 3a4d49c2d3..45dcfea343 100644 --- a/lfs/sqlite +++ b/lfs/sqlite @@ -24,7 +24,7 @@ include Config -VER = 3510000 +VER = 3510100 THISAPP = sqlite-autoconf-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 1e4f1589fa546a11bc505a0ed8c2960ba96a907854daedd116586412597855d9e454637ce9ccf8671ad1943bfdcf23c8913057f79c8baea886ce883be584dea1 +$(DL_FILE)_BLAKE2 = c946652f07cf743f425aa8182e29bb4fff9f929ee56202235f6e6dfd9d06c4fcda06a3f0b0a41a1d52401f067dfb6e4c0871851ce402c1f7cfc358aac72855aa install : $(TARGET) diff --git a/src/paks/libvirt/install.sh b/src/paks/libvirt/install.sh index a11caa4341..288711ccb4 100644 --- a/src/paks/libvirt/install.sh +++ b/src/paks/libvirt/install.sh @@ -24,9 +24,12 @@ . /opt/pakfire/lib/functions.sh # creates a new user and group called libvirt-remote if they not exist -getent group libvirt-remote >/dev/null || groupadd libvirt-remote -getent passwd libvirt-remote >/dev/null || \ -useradd -m -g libvirt-remote -s /bin/bash "libvirt-remote" +if ! getent group libvirt-remote >/dev/null; then + groupadd -r libvirt-remote +fi +if ! getent passwd libvirt-remote >/dev/null; then + useradd -r -m -g libvirt-remote -s /bin/bash "libvirt-remote" +fi extract_files diff --git a/src/paks/libvirt/update.sh b/src/paks/libvirt/update.sh index ab57cbf627..c9e9dd54b5 100644 --- a/src/paks/libvirt/update.sh +++ b/src/paks/libvirt/update.sh @@ -41,9 +41,9 @@ rm -f /etc/rc.d/rc*.d/*virtlogd # # creates a new user and group called libvirt-remote if they not exist -getent group libvirt-remote >/dev/null || groupadd libvirt-remote +getent group libvirt-remote >/dev/null || groupadd -r libvirt-remote getent passwd libvirt-remote >/dev/null || \ -useradd -m -g libvirt-remote -s /bin/bash "libvirt-remote" + useradd -r -m -g libvirt-remote -s /bin/bash "libvirt-remote" extract_files diff --git a/src/paks/qemu/install.sh b/src/paks/qemu/install.sh index e44ba5eca7..e0b84a629c 100644 --- a/src/paks/qemu/install.sh +++ b/src/paks/qemu/install.sh @@ -23,7 +23,7 @@ # . /opt/pakfire/lib/functions.sh #create the group kvm when they not exist -getent group kvm >/dev/null || groupadd kvm +getent group kvm >/dev/null || groupadd -r kvm extract_files restore_backup ${NAME} echo shm /dev/shm tmpfs defaults,size=256M 0 0 >> /etc/fstab hooks/post-receive -- IPFire 2.x development tree