From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4dVzbm0M1dz2xnx for ; Tue, 16 Dec 2025 14:20:20 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4dVzbm01v8z2xSh for ; Tue, 16 Dec 2025 14:20:19 +0000 (UTC) Received: from people01.haj.ipfire.org (people01.haj.ipfire.org [172.28.1.161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature ECDSA (secp384r1) client-digest SHA384) (Client CN "people01.haj.ipfire.org", Issuer "E8" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4dVzbl0gQ9z2D for ; Tue, 16 Dec 2025 14:20:19 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1765894819; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=bNyC7i6aADQeMiOMnW5mewJ0aJ1DzV69NY47xwR7YRg=; b=wtse+I0pylyTrT1gnxteDxssJUy7c3zGiJoBbaP0slT2ia66p/vyKHX5bykP85h6ao9Djl BfJjIdNJ2dQ/DnAg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1765894819; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=bNyC7i6aADQeMiOMnW5mewJ0aJ1DzV69NY47xwR7YRg=; b=vEuauR3YHVV79xLFOgXm4A6wD4bGwg97jJIOsTorapGCfnk80+X24BXZpZxwEn7DrsS70Q +HP4HrTvToMTVTwDKbbgHM3q/O8yciLT5m9cQhDXXA52+/jrmb944aqRXkGCvFamT3F6KL q9U/ZZ6MpN49DexuCxqXAWZPvA0nI/7mUU+lVPLG6PucJkr63K8EjR7/LX1l8e1+G7Hw7L MM/4UiHqRC0wN+H9OdpYcwKtfu/B3BYlIJnmO4dTQr0b14rOYb26+gpV/33o+Fp0or7o0R ukiaKcZdvnSgaHbkkSRNEB18Yq+fjx5xsXtojxRv93w3H/oT7c37Wv93GR8w5A== Received: by people01.haj.ipfire.org (Postfix, from userid 1000) id 4dVzbk5QFvz2y35; Tue, 16 Dec 2025 14:20:18 +0000 (UTC) To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 4f8e2a859cb8995da5d45fa732403b38b73fc055 X-Git-Refname: refs/heads/next X-Git-Reftype: branch X-Git-Oldrev: 745db366f92f55e0968cfbc12e25153a01078035 X-Git-Newrev: 4f8e2a859cb8995da5d45fa732403b38b73fc055 Message-Id: <4dVzbk5QFvz2y35@people01.haj.ipfire.org> Date: Tue, 16 Dec 2025 14:20:18 +0000 (UTC) From: Michael Tremer Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 4f8e2a859cb8995da5d45fa732403b38b73fc055 (commit) via 8a6ca4fdb9621a56d9c051011d8ef0909b1f8506 (commit) via 74aa460a6b72cb1ee657638b21ea673eff1e503c (commit) via 9611b9dd640194b7816ed74107fddd9fe31c3519 (commit) via 71e8feb9bacf966e8bc66952e877d722bbfc2067 (commit) via af444b63464828ad61ab4b95f5dd746ee848ed44 (commit) via 9b6b1556815fd17fce51971b2d866dbfd350f387 (commit) via d1661340704539761fc2a996203400fa3d1daaf6 (commit) via e92ca33f3c103915c6e3893cb984d703aaf7be73 (commit) via 9961cce694f7a7f7fcc110d2524bb7fcabe5c7de (commit) via d248c2abecdc53d0897c7666f2dd3d1c109df7e9 (commit) via 6c31a809f007868862c3601e54389159bc060cf1 (commit) via 340a47e5e911e7ef9f63881db08c302b9fe466e0 (commit) from 745db366f92f55e0968cfbc12e25153a01078035 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 4f8e2a859cb8995da5d45fa732403b38b73fc055 Author: Adolf Belka Date: Tue Dec 16 13:55:46 2025 +0100 core200: Ship wireless-regdb Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 8a6ca4fdb9621a56d9c051011d8ef0909b1f8506 Author: Adolf Belka Date: Tue Dec 16 13:55:47 2025 +0100 wireless-regdb: Update to version 2025.10.07 - Update from version 2023.05.03 to 2025.10.07 - Update of rootfile - Changelog 2025.10.07 Permit lower 6 GHz band for Kazakhstan (KZ) Update regulatory info including bandwidth for Costa Rica (CR) for 2023 update regulatory rules for Sint Marteen (SX) for 2018 update regulatory rules for Botswana (BW) for 2022 2025.07.10 update regulatory rules for Bosnia and Herzegovina (BA) for 6 GHz Update regulatory info for CEPT countries for 6GHz listed by WiFi Alliance update regulatory rules for Paraguay (PY) on 6 GHz for 2025 Update regulatory info for Estonia (EE) for 2024 Update regulatory info for Vietnam (VN) for 2025 Update regulatory rules for Brazil (BR) on 6GHz Update regulatory info for Egypt (EG) for 2024 Permit 320 MHz bandwidth in 6 GHz band for GB Update regulatory info for Indonesia (ID) for 2025 2025.02.20 Update frequency range with NO-INDOOR for Oman (OM) Update regulatory rules for Iran (IR) on both 2.4 and 5Ghz for 2021 allow NO-INDOOR flag in db.txt Update regulatory info for Cayman Islands (KY) for 2024 Update regulatory rules for Austria (AT) Permit 320 MHz bandwidth in 6 GHz band in ETSI/CEPT Update regulatory rules for Armenia (AM) on 2.4 and 5 GHz Update regulatory info for Oman (OM) Update regulatory info for Azerbaijan (AZ) on 6GHz for 2024 Update regulatory info for Moldova (MD) on 6GHz for 2022 Update regulatory info for Syria (SY) for 2020 assert and correct maximum bandwidth within frequency difference 2024.10.07 Update regulatory info for Tanzania (TZ) for 2024 Update regulatory info for Pakistan (PK) for 2024 Update regulatory info for Serbia (RS) for 2024 Revert Update regulatory info for Serbia (SR) for 2024 Correct regulatory rules of 6GHz frequency for Türkiye (TR) Update regulatory info for Honduras (HN) for 2023 Update regulatory info for Israel (IL) for 2021 Update regulatory info for Kuwait (KW) for 2022 Update regulatory info for Serbia (SR) for 2024 Add .b4-config Update .gitignore Correct regulatory rules for China (CN) Update regulatory info for Philippines (PH) on 6GHz Update regulatory info for Guatemala (GT) for 2020 Update regulatory info for Bahrain (BH) for 2024 Add regulatory info for Namibia (NA) for 2023 Update regulatory info for Togo (TG) for 2022 Update regulatory info for El Salvador (SV) on 6GHz Update regulatory info for Peru (PE) on 6GHz Update regulatory info for New Zealand (NZ) for 2022 Update regulatory info for Qatar (QA) on 6GHz 2024.07.04 Update regulatory info for Macao (MO) for 2024 Update regulatory info for Kenya (KE) for 2022 Update regulatory info for Jordan (JO) for 2022 Update regulatory info for Liechtenstein (LI) on 6GHz Update regulatory info for Dominican Republic (DO) on 6GHz Update regulatory info for Costa Rica (CR) for 2021 Update regulatory info for Colombia (CO) on 6GHz Update regulatory info for United Arab Emirates (AE) on 6GHz Update regulatory info for Argentina (AR) on 6GHz Update regulatory info for Mauritius(MU) on 6GHz Update regulatory info for Iceland (IS) on 6GHz Update regulatory info for Mexico (MX) on 6GHz Update regulatory info for Chile (CL) on 6GHz Update regulatory info for Morocco (MA) on 6GHz Update regulatory info for Malaysia (MY) for 2022 Update regulatory info for Thailand (TH) on 6GHz Update regulatory rules for South Africa (ZA) on 6GHz Update regulatory rules for Saudi Arabia (SA) on 6GHz Update regulatory rules for Mongolia (MN) on 6GHz 2024.05.08 Update regulatory rules for Taiwan (TW) on 6GHz Revert Update and disable 5470-5730MHz band according to TPC requirement for Singapore (SG) 2024.01.23 Update and disable 5470-5730MHz band according to TPC requirement for Singapore (SG) Update regulatory rules for Singapore (SG) for September 2023 Update regulatory rules for Japan (JP) for December 2023 Update regulatory rules for China (CN) Makefile Reproducible signatures Update keys and maintainer information 2023.09.01 Update regulatory rules for Australia (AU) for June 2023 Update regulatory info for Türkiye (TR) Update regulatory rules for Egypt (EG) from March 2022 guidelines Update regulatory rules for Philippines (PH) Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 74aa460a6b72cb1ee657638b21ea673eff1e503c Author: Adolf Belka Date: Tue Dec 16 11:27:59 2025 +0100 core200: Ship readline Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 9611b9dd640194b7816ed74107fddd9fe31c3519 Author: Adolf Belka Date: Tue Dec 16 11:28:05 2025 +0100 readline: Update to version 8.3 patch 3 - Update from version 8.3 patch 1 to 8.3 patch 3 - No change to rootfile - Changelog 8.3-003 A SIGINT during a reverse i-search can cause a segmentation fault due to accessing data freed by a signal handler. 8.3-002 If an application calls rl_save_prompt, which sets rl_prompt to NULL, without calling rl_set_prompt to set it to a new value, readline redisplay can dereference a NULL pointer. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 71e8feb9bacf966e8bc66952e877d722bbfc2067 Author: Adolf Belka Date: Tue Dec 16 11:27:58 2025 +0100 core200: Ship oath-toolkit Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit af444b63464828ad61ab4b95f5dd746ee848ed44 Author: Adolf Belka Date: Tue Dec 16 11:28:04 2025 +0100 oath-toolkit: Update to version 2.6.13 - Update from version 2.6.12 to 2.6.13 - No change to rootfile - Changelog 2.6.13 liboath/libpskc: Fix _FORTIFY_SOURCE build problem and allow configuration. Some platforms (e.g., Ubuntu 24.10) set _FORTIFY_SOURCE in the default compiler settings, and this caused build failures since our code unconditionally #define'd _FORTIFY_SOURCE to 2. We now allow you to override the desired level by running, for example ./configure CPPFLAGS=-D_FORTIFY_SOURCE=3 or CPPFLAGS=-D_FORTIFY_SOURCE=0. liboath: Fix --with-openssl builds, and test for it in pipeline. Reported by Tomasz Kłoczko in . Git hosting moved from gitlab.com to codeberg.org. The new URL is https://codeberg.org/oath-toolkit/oath-toolkit although the old GitLab project will continue to be used for pipelines: https://gitlab.com/oath-toolkit/oath-toolkit/-/pipelines Various build fixes including updated gnulib files. Gnulib files are no longer stored in git version control. As a consequence, gnulib is a required build dependency when building from git, see CONTRIBUTING.md. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 9b6b1556815fd17fce51971b2d866dbfd350f387 Author: Adolf Belka Date: Tue Dec 16 11:28:03 2025 +0100 libpng: Update to version 1.6.53 - Update from version 1.6.51 to 1.6.53 - Update of rootfile - CVE fix from version 1.6.52 - Changelog 1.6.53 Fixed a build failure on RISC-V RVV caused by a misspelled intrinsic. (Contributed by Alexander Smorkalov.) Fixed a build failure with CMake 4.1 or newer, on Windows, when using Visual C++ without MASM installed. 1.6.52 Fixed CVE-2025-66293 (high severity): Out-of-bounds read in `png_image_read_composite`. (Reported by flyfish101 .) Fixed the Paeth filter handling in the RISC-V RVV implementation. (Reported by Filip Wasil; fixed by Liang Junzhao.) Improved the performance of the RISC-V RVV implementation. (Contributed by Liang Junzhao.) Added allocation failure fuzzing to oss-fuzz. (Contributed by Philippe Antoine.) Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit d1661340704539761fc2a996203400fa3d1daaf6 Author: Adolf Belka Date: Tue Dec 16 11:27:57 2025 +0100 core200: Ship libidn2 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit e92ca33f3c103915c6e3893cb984d703aaf7be73 Author: Adolf Belka Date: Tue Dec 16 11:28:02 2025 +0100 libidn2: Update to version 2.3.8 - Update from version 2.3.7 to 2.3.8 - No change to rootfile - Changelog 2.3.8 Unicode 15.1.0 table updates. Now U+19DA is DISALLOWED again (see version 2.3.4 release notes). The release tarball is now reproducible. We publish a minimal source-only tarball generated by 'git archive'. The release tarball uses tar --format=ustar. The idn2 tool now binds the "gnulib" domain for translations. Update gnulib files and various build/maintenance fixes. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 9961cce694f7a7f7fcc110d2524bb7fcabe5c7de Author: Adolf Belka Date: Tue Dec 16 11:27:56 2025 +0100 core200: Ship libgpg-error Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit d248c2abecdc53d0897c7666f2dd3d1c109df7e9 Author: Adolf Belka Date: Tue Dec 16 11:28:01 2025 +0100 libgpg-error: Update to version 1.58 - Update from version 1.56 to 1.58 - Update of rootfile - Changelog 1.58 Fix building of static libraries on Windows. [rE421e101cf9] 1.57 The sysconfdir as provided by the configure run is now used for the default global config files of the argparser. [T7894] New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and gpgrt_absfnameconcat. [T7894,rE34dba88757] On Windows use the UI language instead of the locale for translations. [T7874] Some minor build improvements for zOS. Updated the Swedish and Portuguese translations. Interface changes relative to the 1.56 release: gpgrt_fconcat NEW. GPGRT_FCONCAT_ABS NEW. GPGRT_FCONCAT_TILDE NEW. GPGRT_FCONCAT_SYSCONF NEW. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 6c31a809f007868862c3601e54389159bc060cf1 Author: Adolf Belka Date: Tue Dec 16 11:28:00 2025 +0100 hwdata: Update to version 0.402 - Update from version 0.401 to 0.402 - No change to rootfile - Changelog 0.402 Update usb and vendor ids Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 340a47e5e911e7ef9f63881db08c302b9fe466e0 Author: Adolf Belka Date: Tue Dec 16 11:27:55 2025 +0100 bash: Update to version 5.3 patch 9 - Update from version 5.3 patch 8 to 5.3 patch 9 - No change to rootfile - Changelog 5.3-009 A SIGINT during a reverse i-search can cause a segmentation fault due to accessing data freed by a signal handler. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/libgpg-error | 2 +- config/rootfiles/common/libpng | 2 +- config/rootfiles/common/wireless-regdb | 4 +- .../106 => core/200}/filelists/libgpg-error | 0 .../{oldcore/191 => core/200}/filelists/libidn2 | 0 .../169 => core/200}/filelists/oath-toolkit | 0 .../{oldcore/139 => core/200}/filelists/readline | 0 .../131 => core/200}/filelists/wireless-regdb | 0 lfs/bash | 2 +- lfs/hwdata | 4 +- lfs/libgpg-error | 4 +- lfs/libidn2 | 6 +- lfs/libpng | 4 +- lfs/oath-toolkit | 6 +- lfs/readline | 4 +- lfs/wireless-regdb | 13 ++-- src/patches/bash/bash53-009 | 82 ++++++++++++++++++++++ src/patches/readline/readline83-002 | 44 ++++++++++++ src/patches/readline/readline83-003 | 78 ++++++++++++++++++++ 19 files changed, 230 insertions(+), 25 deletions(-) copy config/rootfiles/{oldcore/106 => core/200}/filelists/libgpg-error (100%) copy config/rootfiles/{oldcore/191 => core/200}/filelists/libidn2 (100%) copy config/rootfiles/{oldcore/169 => core/200}/filelists/oath-toolkit (100%) copy config/rootfiles/{oldcore/139 => core/200}/filelists/readline (100%) copy config/rootfiles/{oldcore/131 => core/200}/filelists/wireless-regdb (100%) create mode 100644 src/patches/bash/bash53-009 create mode 100644 src/patches/readline/readline83-002 create mode 100644 src/patches/readline/readline83-003 Difference in files: diff --git a/config/rootfiles/common/libgpg-error b/config/rootfiles/common/libgpg-error index c96fe87de..870138f26 100644 --- a/config/rootfiles/common/libgpg-error +++ b/config/rootfiles/common/libgpg-error @@ -6,7 +6,7 @@ usr/bin/gpg-error #usr/lib/libgpg-error.la #usr/lib/libgpg-error.so usr/lib/libgpg-error.so.0 -usr/lib/libgpg-error.so.0.40.0 +usr/lib/libgpg-error.so.0.41.1 #usr/lib/pkgconfig/gpg-error.pc #usr/share/aclocal/gpg-error.m4 #usr/share/aclocal/gpgrt.m4 diff --git a/config/rootfiles/common/libpng b/config/rootfiles/common/libpng index 9dfdef5c6..4983219e3 100644 --- a/config/rootfiles/common/libpng +++ b/config/rootfiles/common/libpng @@ -16,7 +16,7 @@ usr/lib/libpng.so #usr/lib/libpng16.la usr/lib/libpng16.so usr/lib/libpng16.so.16 -usr/lib/libpng16.so.16.51.0 +usr/lib/libpng16.so.16.53.0 #usr/lib/pkgconfig/libpng.pc #usr/lib/pkgconfig/libpng16.pc #usr/share/man/man3/libpng.3 diff --git a/config/rootfiles/common/wireless-regdb b/config/rootfiles/common/wireless-regdb index 12376c6e7..93e13ba67 100644 --- a/config/rootfiles/common/wireless-regdb +++ b/config/rootfiles/common/wireless-regdb @@ -1,9 +1,9 @@ -lib/firmware/regulatorydb.txt lib/firmware/regulatory.db lib/firmware/regulatory.db.p7s +lib/firmware/regulatorydb.txt #usr/lib/crda #usr/lib/crda/pubkeys -usr/lib/crda/pubkeys/sforshee.key.pub.pem +usr/lib/crda/pubkeys/wens.key.pub.pem usr/lib/crda/regulatory.bin #usr/share/man/man5/regulatory.bin.5.gz #usr/share/man/man5/regulatory.db.5.gz diff --git a/config/rootfiles/core/200/filelists/libgpg-error b/config/rootfiles/core/200/filelists/libgpg-error new file mode 120000 index 000000000..cad431339 --- /dev/null +++ b/config/rootfiles/core/200/filelists/libgpg-error @@ -0,0 +1 @@ +../../../common/libgpg-error \ No newline at end of file diff --git a/config/rootfiles/core/200/filelists/libidn2 b/config/rootfiles/core/200/filelists/libidn2 new file mode 120000 index 000000000..14a17fa23 --- /dev/null +++ b/config/rootfiles/core/200/filelists/libidn2 @@ -0,0 +1 @@ +../../../common/libidn2 \ No newline at end of file diff --git a/config/rootfiles/core/200/filelists/oath-toolkit b/config/rootfiles/core/200/filelists/oath-toolkit new file mode 120000 index 000000000..589cc0d9f --- /dev/null +++ b/config/rootfiles/core/200/filelists/oath-toolkit @@ -0,0 +1 @@ +../../../common/oath-toolkit \ No newline at end of file diff --git a/config/rootfiles/core/200/filelists/readline b/config/rootfiles/core/200/filelists/readline new file mode 120000 index 000000000..84209f189 --- /dev/null +++ b/config/rootfiles/core/200/filelists/readline @@ -0,0 +1 @@ +../../../common/readline \ No newline at end of file diff --git a/config/rootfiles/core/200/filelists/wireless-regdb b/config/rootfiles/core/200/filelists/wireless-regdb new file mode 120000 index 000000000..c9205b3cf --- /dev/null +++ b/config/rootfiles/core/200/filelists/wireless-regdb @@ -0,0 +1 @@ +../../../common/wireless-regdb \ No newline at end of file diff --git a/lfs/bash b/lfs/bash index adfbd35d1..fd68e8805 100644 --- a/lfs/bash +++ b/lfs/bash @@ -25,7 +25,7 @@ include Config VER = 5.3 -PATCHVER = 8 +PATCHVER = 9 THISAPP = bash-$(VER) DL_FILE = $(THISAPP).tar.gz diff --git a/lfs/hwdata b/lfs/hwdata index a116db268..cc156e12a 100644 --- a/lfs/hwdata +++ b/lfs/hwdata @@ -24,7 +24,7 @@ include Config -VER = 0.401 +VER = 0.402 THISAPP = hwdata-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 6bc46ef5d8d87431ff05d29b3afe818b251b7f8a2270684e4d42b3d5ca6237a197bdafa7578df59b0b7cd5c9b740e8962e0ef09c87e08e1f8de565a94afc4df9 +$(DL_FILE)_BLAKE2 = 8bc0da3c79dde751fd45b41c7a4c1859b0959fabeeaadd9e12a003c2c5a34f32e00e5536b0f515675347bcf34467a465fafb1ac7b8df7bdd9efac863643ed8da install : $(TARGET) diff --git a/lfs/libgpg-error b/lfs/libgpg-error index 883663ce8..8a6ae0a17 100644 --- a/lfs/libgpg-error +++ b/lfs/libgpg-error @@ -24,7 +24,7 @@ include Config -VER = 1.56 +VER = 1.58 THISAPP = libgpg-error-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2c84fe5cef8c77dc01f481aeacada815baf7fff85369a9c877dc4a11f2e3f84f37ad69a04213bc79765677dd2829a5074d7c8239b298429484378234cb4d2a66 +$(DL_FILE)_BLAKE2 = 7d1c0d54094d870e9e92aebadc4a8a3cf0e7a1ae7841b445896105583a8885439ca8364b2e364639759912ea46f801b41e5025db9aa292c4fce43713430711e1 install : $(TARGET) diff --git a/lfs/libidn2 b/lfs/libidn2 index b0e51e1e9..35dfc30e5 100644 --- a/lfs/libidn2 +++ b/lfs/libidn2 @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2025 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.3.7 +VER = 2.3.8 THISAPP = libidn2-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 40fde88e6be1e4665738855608a65c949834728463a3fb466192403f1076e99f7d399b9631308ff6776a28915251a0136ddfe6a67e8e010c7ccdb7fc64125d39 +$(DL_FILE)_BLAKE2 = 8b34975a5a469353ac960ade97d0b67080e811c0d0eb7b11dcb6a4b352753da59b17c812bab8c969877bfe027fc3de0a36b7c6b75942811f17938b676238fb3d install : $(TARGET) diff --git a/lfs/libpng b/lfs/libpng index 545b3efef..089f22f5b 100644 --- a/lfs/libpng +++ b/lfs/libpng @@ -24,7 +24,7 @@ include Config -VER = 1.6.51 +VER = 1.6.53 THISAPP = libpng-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2d1ee36f9796e90a533abf26597df82c39cfab42f8d4044d35e0fdbab65612b9fc0234780677e2ea758450db9815b9d30870e8024bcebc0170c87361b7c4cc0a +$(DL_FILE)_BLAKE2 = 62e28068e1885305828fff3296b19a7d61e11a52ca425be91289e17087be2c42f06ea2df000169632cc556b398cdcb4784a639879e038962310c53becae779f6 install : $(TARGET) diff --git a/lfs/oath-toolkit b/lfs/oath-toolkit index c031f97d1..4465b9f66 100644 --- a/lfs/oath-toolkit +++ b/lfs/oath-toolkit @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2022-2024 IPFire Team # +# Copyright (C) 2022-2025 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.6.12 +VER = 2.6.13 THISAPP = oath-toolkit-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 8bd184fa7166bc35af3bd632d0dd24ae00480f78a850e2ed4f058ec22711852757f01623ede16c8990daa366752578430be7c93a27d87c8ae92faf9a3aade1a1 +$(DL_FILE)_BLAKE2 = 055014039c611c382ba1cf902482c22df765636e7393e0a3f5acb0811a6be55b6b9dc7fc269d31705081bf02c240589d4fecdeb79fd151082a902e09597e7303 install : $(TARGET) diff --git a/lfs/readline b/lfs/readline index 3546de678..57ecea815 100644 --- a/lfs/readline +++ b/lfs/readline @@ -25,8 +25,8 @@ include Config VER = 8.3 -PATCHVER = 1 -# https://ftp.gnu.org/gnu/readline/ +PATCHVER = 3 +# https://ftp.gnu.org/gnu/readline/ THISAPP = readline-$(VER) DL_FILE = $(THISAPP).tar.gz diff --git a/lfs/wireless-regdb b/lfs/wireless-regdb index ba3dd8692..29ea579f9 100644 --- a/lfs/wireless-regdb +++ b/lfs/wireless-regdb @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2023 IPFire Team # +# Copyright (C) 2007-2025 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,10 +24,11 @@ include Config -VER = 2023-05-03 +VER = 2025.10.07 +# https://mirrors.edge.kernel.org/pub/software/network/wireless-regdb/ -THISAPP = wireless-regdb-master-$(VER) -DL_FILE = $(THISAPP).tar.gz +THISAPP = wireless-regdb-$(VER) +DL_FILE = $(THISAPP).tar.xz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) @@ -41,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 84eaf93a22cc1de0da4b9f13acbbff84572469683f5e4f2ed2bfc2cb2ccf2a3e0c3e556562954b003ebb82d340ee562ba205e24be79bf38640ea64ad36d20a4f +$(DL_FILE)_BLAKE2 = 655c637ca2a9269b6b17bc374c7d09dcbbc5228aaefcbe60cd0c24dc78d778a56848a338f830cac8deed7930100a0fffcfdc2d694513c4afa5d537ccf9397f97 install : $(TARGET) @@ -70,7 +71,7 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) - @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar xzf $(DIR_DL)/$(DL_FILE) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && make install cp -vf $(DIR_APP)/db.txt /lib/firmware/regulatorydb.txt @rm -rf $(DIR_APP) diff --git a/src/patches/bash/bash53-009 b/src/patches/bash/bash53-009 new file mode 100644 index 000000000..4b53b4145 --- /dev/null +++ b/src/patches/bash/bash53-009 @@ -0,0 +1,82 @@ + BASH PATCH REPORT + ================= + +Bash-Release: 5.3 +Patch-ID: bash53-009 + +Bug-Reported-by: penguin p +Bug-Reference-ID: +Bug-Reference-URL: https://lists.gnu.org/archive/html/bug-bash/2025-08/msg00080.html + +Bug-Description: + +A SIGINT during a reverse i-search can cause a segmentation fault due to +accessing data freed by a signal handler. + +Patch (apply with `patch -p0'): + +*** ../bash-20250807/lib/readline/input.c Tue Jul 8 15:37:13 2025 +--- lib/readline/input.c Fri Aug 22 15:04:05 2025 +*************** +*** 976,984 **** + if (rl_signal_event_hook) + (*rl_signal_event_hook) (); +! #if defined (READLINE_CALLBACKS) +! else if (osig == SIGINT && (ostate & RL_STATE_CALLBACK) && (ostate & (RL_STATE_ISEARCH|RL_STATE_NSEARCH|RL_STATE_NUMERICARG))) + /* just these cases for now */ + _rl_abort_internal (); +- #endif + } + } +--- 1004,1012 ---- + if (rl_signal_event_hook) + (*rl_signal_event_hook) (); +! /* If the application's SIGINT handler returns, make sure we abort out of +! searches and numeric arguments because we've freed necessary state. */ +! if (osig == SIGINT && (ostate & (RL_STATE_ISEARCH|RL_STATE_NSEARCH|RL_STATE_NUMERICARG))) + /* just these cases for now */ + _rl_abort_internal (); + } + } +*** ../bash-20250807/lib/readline/isearch.c Thu Jun 5 09:22:11 2025 +--- lib/readline/isearch.c Tue Aug 19 14:55:55 2025 +*************** +*** 890,899 **** + _rl_isearch_cleanup (_rl_search_cxt *cxt, int r) + { + if (r >= 0) + _rl_isearch_fini (cxt); + _rl_scxt_dispose (cxt, 0); +- _rl_iscxt = 0; +- +- RL_UNSETSTATE(RL_STATE_ISEARCH); + + return (r != 0); +--- 890,901 ---- + _rl_isearch_cleanup (_rl_search_cxt *cxt, int r) + { ++ RL_UNSETSTATE(RL_STATE_ISEARCH); ++ if (cxt == 0) ++ return (r != 0); ++ ++ _rl_iscxt = 0; + if (r >= 0) + _rl_isearch_fini (cxt); + _rl_scxt_dispose (cxt, 0); + + return (r != 0); +*** ../bash-5.3/patchlevel.h 2020-06-22 14:51:03.000000000 -0400 +--- patchlevel.h 2020-10-01 11:01:28.000000000 -0400 +*************** +*** 26,30 **** + looks for to find the patch level (for the sccs version string). */ + +! #define PATCHLEVEL 8 + + #endif /* _PATCHLEVEL_H_ */ +--- 26,30 ---- + looks for to find the patch level (for the sccs version string). */ + +! #define PATCHLEVEL 9 + + #endif /* _PATCHLEVEL_H_ */ diff --git a/src/patches/readline/readline83-002 b/src/patches/readline/readline83-002 new file mode 100644 index 000000000..356318de3 --- /dev/null +++ b/src/patches/readline/readline83-002 @@ -0,0 +1,44 @@ + READLINE PATCH REPORT + ===================== + +Readline-Release: 8.3 +Patch-ID: readline83-002 + +Bug-Reported-by: Tobias Powalowski +Bug-Reference-ID: <6465ed69-d2da-4277-92cf-1046bc97ca60@pm.me> +Bug-Reference-URL: https://lists.gnu.org/archive/html/bug-readline/2025-07/msg00005.html + +Bug-Description: + +If an application calls rl_save_prompt, which sets rl_prompt to NULL, +without calling rl_set_prompt to set it to a new value, readline redisplay +can dereference a NULL pointer. + +Patch (apply with `patch -p0'): + +*** ../readline-8.3/display.c Fri May 2 09:20:32 2025 +--- display.c Sun Jul 6 17:16:28 2025 +*************** +*** 784,788 **** + /* Useful shorthand used by rl_redisplay, update_line, rl_move_cursor_relative */ + #define INVIS_FIRST() (local_prompt_invis_chars[0]) +! #define WRAP_OFFSET(line, offset) ((line <= prompt_last_screen_line) ? local_prompt_invis_chars[line] : 0) + + #define W_OFFSET(line, offset) ((line) == 0 ? offset : 0) +--- 784,788 ---- + /* Useful shorthand used by rl_redisplay, update_line, rl_move_cursor_relative */ + #define INVIS_FIRST() (local_prompt_invis_chars[0]) +! #define WRAP_OFFSET(line, offset) ((line <= prompt_last_screen_line && local_prompt_invis_chars) ? local_prompt_invis_chars[line] : 0) + + #define W_OFFSET(line, offset) ((line) == 0 ? offset : 0) +*** ../readline-8.2/patchlevel 2013-11-15 08:11:11.000000000 -0500 +--- patchlevel 2014-03-21 08:28:40.000000000 -0400 +*************** +*** 1,3 **** + # Do not edit -- exists only for use by patch + +! 1 +--- 1,3 ---- + # Do not edit -- exists only for use by patch + +! 2 diff --git a/src/patches/readline/readline83-003 b/src/patches/readline/readline83-003 new file mode 100644 index 000000000..dd7fe4f19 --- /dev/null +++ b/src/patches/readline/readline83-003 @@ -0,0 +1,78 @@ + READLINE PATCH REPORT + ===================== + +Readline-Release: 8.3 +Patch-ID: readline83-003 + +Bug-Reported-by: penguin p +Bug-Reference-ID: +Bug-Reference-URL: https://lists.gnu.org/archive/html/bug-bash/2025-08/msg00080.html + +Bug-Description: + +A SIGINT during a reverse i-search can cause a segmentation fault due to +accessing data freed by a signal handler. + +Patch (apply with `patch -p0'): + +*** ../readline-8.3-patched/input.c Tue Jul 8 15:37:13 2025 +--- input.c Fri Aug 22 15:04:05 2025 +*************** +*** 976,984 **** + if (rl_signal_event_hook) + (*rl_signal_event_hook) (); +! #if defined (READLINE_CALLBACKS) +! else if (osig == SIGINT && (ostate & RL_STATE_CALLBACK) && (ostate & (RL_STATE_ISEARCH|RL_STATE_NSEARCH|RL_STATE_NUMERICARG))) + /* just these cases for now */ + _rl_abort_internal (); +- #endif + } + } +--- 1004,1012 ---- + if (rl_signal_event_hook) + (*rl_signal_event_hook) (); +! /* If the application's SIGINT handler returns, make sure we abort out of +! searches and numeric arguments because we've freed necessary state. */ +! if (osig == SIGINT && (ostate & (RL_STATE_ISEARCH|RL_STATE_NSEARCH|RL_STATE_NUMERICARG))) + /* just these cases for now */ + _rl_abort_internal (); + } + } +*** ../readline-8.3-patched/isearch.c Thu Jun 5 09:22:11 2025 +--- isearch.c Tue Aug 19 14:55:55 2025 +*************** +*** 890,899 **** + _rl_isearch_cleanup (_rl_search_cxt *cxt, int r) + { + if (r >= 0) + _rl_isearch_fini (cxt); + _rl_scxt_dispose (cxt, 0); +- _rl_iscxt = 0; +- +- RL_UNSETSTATE(RL_STATE_ISEARCH); + + return (r != 0); +--- 890,901 ---- + _rl_isearch_cleanup (_rl_search_cxt *cxt, int r) + { ++ RL_UNSETSTATE(RL_STATE_ISEARCH); ++ if (cxt == 0) ++ return (r != 0); ++ ++ _rl_iscxt = 0; + if (r >= 0) + _rl_isearch_fini (cxt); + _rl_scxt_dispose (cxt, 0); + + return (r != 0); +*** ../readline-8.3/patchlevel 2013-11-15 08:11:11.000000000 -0500 +--- patchlevel 2024-03-21 08:28:40.000000000 -0400 +*************** +*** 1,3 **** + # Do not edit -- exists only for use by patch + +! 2 +--- 1,3 ---- + # Do not edit -- exists only for use by patch + +! 3 hooks/post-receive -- IPFire 2.x development tree