* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. acdf1075ca9646af2162ffd1fe4af85de4a2c59c
@ 2026-04-28 8:10 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2026-04-28 8:10 UTC (permalink / raw)
To: ipfire-scm
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 154725 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via acdf1075ca9646af2162ffd1fe4af85de4a2c59c (commit)
via bd02d1d84e8d1e20df624ce7dd02300c369d0134 (commit)
via df40650f0efbf86598a3a8d970821370dad00a5b (commit)
via 61728dcd51c09690b41bb5831344b02baf5635ac (commit)
via 40e03b2efdf336205772a0485f5c309484429076 (commit)
via 389610b3a1f995c221ddbbb616f34f1ad9ba6231 (commit)
via c339b4d74d177d99fc8b8f5e276435870083c95f (commit)
via 5eb0ecc437734def3da067792e5d1aa5d4275e0d (commit)
via 86f61f7d10b7d189d0180db7eb8fc6ad3c8bf718 (commit)
via bb06a68eaf09916c801f259114852046029e5d65 (commit)
via 9e5025b3e62af8d07d6886b1886815a56d62effb (commit)
via 4c67560087ebfa7267d1d2cd5d6fbf37c92bdc09 (commit)
via 9cb9425d58dc40f74aeffd3dfc70b7f5391bc407 (commit)
via ba84efac95a427a67c8734b0b0b428c8d567d8ce (commit)
via 225a5d2a7c1ffcf5b037eb01950eeee7b57c6983 (commit)
via f08224bea8e1d8b3f4b65bb78e6110c414d982c5 (commit)
via ea3914daca188db2794f215d3f506effff644f0e (commit)
via c07e8bf67d661bef458f538fbe8b2334fa0605c1 (commit)
via 05a210699f7b9e388b11d0a96c40a979737ff6aa (commit)
via a53cbf01c303872960a429bfb20b6e0564ac53dd (commit)
via 7fb6ed437ea71f46125d1e357d5acdfdeef4f8d0 (commit)
via 69587b41b74929c56e6ff74b0225e303de5fc435 (commit)
via 788c8cf5de2307a6cbc0873bca7cb89d8a241965 (commit)
via a419c7397d3b5a7afc8fb1a7cb751cf7fe4bf6a5 (commit)
via f9a5bfb023d01435681037dc1719ddadc858b1b8 (commit)
via ef9dfe511d1ec8b4d0de3df388a11119aae56995 (commit)
via a5fe059ed9b086b90ea59c002244e957784f179d (commit)
via 4b1f0eba0f221db092172cd894288c7a1115ed29 (commit)
via 127344b9d4f5944d67c56a0fdf5e19fb08ea1b53 (commit)
via 4952b1c46cfddf7b0d32dbcefe4f513c87f530da (commit)
via 80380d1f78ce03a1b7cbd5dd71db102a0be39032 (commit)
via afe44031d1278c7a5fbb9f48b6bc9bfa0401f809 (commit)
from 014b31c6271a8f48af2c8888ca5ad2bdf15c18f7 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit acdf1075ca9646af2162ffd1fe4af85de4a2c59c
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon Apr 27 20:46:59 2026 +0200
core202: Ship sed
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit bd02d1d84e8d1e20df624ce7dd02300c369d0134
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon Apr 27 20:47:01 2026 +0200
sed: Update to version 4.10
- Update from version 4.9 to 4.10
- Update of rootfile
- Changelog
4.10
Bug fixes
sed 's/a/b/g' (and other global substitutions) now works on input
lines longer than 2GB. Previously, matches beyond the 2^31 byte offset
would evoke a "panic" (exit 4).
[bug present since the beginning]
'sed --follow-symlinks -i' no longer has a TOCTOU race that could let
an attacker swap a symlink between resolution and open, causing sed to
read attacker-chosen content and write it to the original target.
[bug introduced in sed 4.1e]
sed no longer falsely matches when back-references are combined with
optional groups (.?) and the $ anchor. For example, this no longer
falsely matches the empty string at beginning of line:
$ echo ab | sed -E 's/^(.?)(.?).?\2\1$/X/'
Xab
[bug present since "the beginning"]
In --posix mode, sed no longer mishandles backslash escapes (\n,
\t, \a, etc.) after a named character class like [[:alpha:]].
For example, 's/^A\n[[:alpha:]]\n*/XXX/' would fail to match the
trailing newline, treating \n as a literal backslash and an 'n'
rather than a newline. This happened when an earlier backslash
escape in the same regex had already been converted, shifting the
in-place normalization buffer.
[bug introduced in sed 4.9]
sed --debug no longer crashes when a label (":") command is compiled
before the --debug option is processed, e.g., sed -f<(...) --debug.
[bug introduced in sed 4.7 with --debug]
sed no longer rejects the documented GNU extension 'a**' (equivalent
to 'a*') in Basic Regular Expression (BRE) mode. Previously, this
worked only with -E (ERE mode), even though grep has always accepted
it in BRE mode.
[bug present since "the beginning"]
sed no longer rejects "\c[" in regular expressions
[bug present since the beginning]
'sed --follow-symlinks -i' no longer mishandles an operand that is a
short symbolic link to a long symbolic link to a file.
[bug introduced in sed 4.9]
Fix some some longstanding but unlikely integer overflows.
Internally, 'sed' now more often prefers signed integer arithmetic,
which can be checked automatically via 'gcc -fsanitize=undefined'.
Changes in behavior
In the default C locale, diagnostics now quote 'like this' (with
apostrophes) instead of `like this' (with a grave accent and an
apostrophe). This tracks the GNU coding standards.
'sed --posix' now warns about uses of backslashes in the 's' command
that are handled by GNU sed but are not portable to other
implementations.
Build-related
builds no longer fail on platforms without the <getopt.h> header or
getopt_long function.
[bug introduced in sed 4.9]
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit df40650f0efbf86598a3a8d970821370dad00a5b
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon Apr 27 20:47:00 2026 +0200
man-pages: Update to version 6.18
- Update from version 6.17 to 6.18
- Update of rootfile
- Changelog
6.18
New and rewritten pages
man2/
futex_waitv.2
man3/
aprintf.3
io_destroy.3 (previously, io_destroy(2))
io_setup.3 (previously, io_setup(2))
rawmemchr.3 (previously, memchr(3))
stpcpy.3 (previously, strcpy(3))
strchrnul.3 (previously, strchr(3))
strdupa.3 (previously, strdup(3))
strnul.3
strtok_r.3 (previously, strtok(3))
Newly documented interfaces in existing pages
man2/
landlock_create_ruleset.2
struct landlock_ruleset_attr::scoped
LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF
LANDLOCK_RESTRICT_SELF_LOG_SAME_EXEC_OFF
LANDLOCK_RESTRICT_SELF_LOG_NEW_EXEC_ON
LANDLOCK_CREATE_RULESET_ERRATA
landlock_restrict_self.2
LANDLOCK_RESTRICT_SELF_TSYNC
statmount.2
req.mnt_ns_id
STATMOUNT_MNT_NS_ID
STATMOUNT_MNT_OPTS
STATMOUNT_FS_SUBTYPE
STATMOUNT_SB_SOURCE
STATMOUNT_OPT_ARRAY
STATMOUNT_OPT_SEC_ARRAY
STATMOUNT_{UIDMAP,GIDMAP}
STATMOUNT_SUPPORTED_MASK
req.mnt_ns_fd
STATMOUNT_BY_FD
truncate.2
ENOSPC
man3/
printf.3
scanf.3
%wN
man5/
core.5
%f
FC
man7/
landlock.7
LANDLOCK_RESTRICT_SELF_LOG_SUBDOMAINS_OFF
LANDLOCK_RESTRICT_SELF_LOG_SAME_EXEC_OFF
LANDLOCK_RESTRICT_SELF_LOG_NEW_EXEC_ON
LANDLOCK_CREATE_RULESET_ERRATA
LANDLOCK_RESTRICT_SELF_TSYNC
New and changed links
man3/
strndupa.3 (strdupa(3))
vaprintf.3 (aprintf(3))
Global changes
- man/
- man3/
- Document how string functions relate to each other.
- Separate documentation of system calls and of libaio wrappers.
Changes to individual files
The manual pages and other files in the repository have been improved
beyond what this changelog covers. To learn more about changes applied
to individual pages, or the authors of changes, use git(1)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 61728dcd51c09690b41bb5831344b02baf5635ac
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:43:50 2026 +0200
core202: Ship coreutils
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 40e03b2efdf336205772a0485f5c309484429076
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:00 2026 +0200
coreutils: Update to version 9.11
- Update from version 9.10 to 9.11
- No change to rootfile
- Changelog
9.11
Bug fixes
'dd' now always diagnoses partial writes correctly upon write failure.
Previously it may have indicated that only full writes were performed.
[This bug was present in "the beginning".]
'fold' will no longer truncate output when encountering 0xFF bytes.
[bug introduced in coreutils-9.8]
'fold' is again responsive to its input. Previously it would have delayed
processing until 256KiB was read from the input.
[bug introduced in coreutils-9.8]
'kill --help' now has links to valid anchors in the html manual.
[bug introduced in coreutils-9.10]
When configured with --enable-systemd, the commands 'pinky',
'uptime', 'users', and 'who' no longer consider the systemd session
classes 'greeter', 'lock-screen', 'background', 'background-light',
and 'none' to be users.
[bug introduced in coreutils-9.4]
'pwd' on ancient systems will no longer overflow a buffer
when operating in deep paths longer than twice the system PATH_MAX.
[bug introduced in coreutils-9.6]
'stat --printf=%%N' no longer performs unnecessary checks of the QUOTING_STYLE
environment variable.
[bug introduced in coreutils-8.26]
'timeout' no longer exits abruptly when its parent is the init process, e.g.,
when started by the entrypoint of a container.
[bug introduced in coreutils-9.10]
New Features
'cut' now supports multi-byte input and delimiters. Consequently
the -c option is now honored, and no longer an alias for -b, and
the -n option is now honored, and no longer ignored.
Also the -d option supports multi-byte delimiters.
'cut' adds new options for better compatibility:
The -w,--whitespace-delimited option was added to support blank aligned fields
and for better compatibility with FreeBSD/macOS.
The -O option was added as an alias for the --output-delimiter option,
for better compatibility with busybox/toybox.
The -F option was added as an alias for -w -O ' '
for better compatibility with busybox/toybox.
'date --date' now parses dot delimited dd.mm.yy format common in Europe.
This is in addition to the already supported mm/dd/yy and yy-mm-dd formats.
Changes in behavior
'cksum --check' now uses shell quoting when required, to more robustly
escape file names output in diagnostics.
This also affects md5sum, sha*sum, and b2sum.
Improvements
'cat' now uses zero-copy I/O on Linux when appropriate, to improve throughput.
E.g., throughput improved 6x from 12.9GiB/s to 81.8GiB/s on a Power10 system.
'df --local' recognises more file system types as remote.
Specifically: autofs, ncpfs, smb, smb2, gfs, gfs2, userlandfs.
'df' improves duplicate mount suppression, by checking each mount against
all previously kept entries for the same device, not just the latest one.
'expand' and 'unexpand' now support multi-byte characters.
'groups' and 'id' will now exit sooner after a write error,
which is significant when listing information for many users.
'install' now allows the combination of the --compare and
--preserve-timestamps options.
'fold', 'join', 'numfmt', 'uniq' now use more consistent blank character
determination on non GLIBC platforms. For example \u3000 (ideographic space)
will be considered a blank character on all platforms.
'nl' now supports multi-byte --section-delimiter characters.
'shuf -i' now operates up to two times faster on systems with unlocked stdio
functions.
'tac' will now exit sooner after a write error, which is significant when
operating on a file with many lines.
'timeout' now properly detects when it is reparented by a subreaper process on
Linux instead of init, e.g., the 'systemd --user' process.
'wc -l' now operates up to four and a half times faster on hosts that support
Neon instructions.
'wc -m' now operates up to 2.6 times faster on GLIBC when processing
non-ASCII UTF-8 characters.
'yes' now uses zero-copy I/O on Linux to significantly increase throughput.
E.g., throughput improved 15x from 11.6GiB/s to 175GiB/s on a Power10 system.
Build-related
./configure --enable-single-binary=hardlinks is now supported on systems
with dash as the system shell at /bin/sh.
[issue introduced in coreutils-9.10]
The test suite may have failed with a "Hangup" error if run non-interactively.
[issue introduced in coreutils-9.10]
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 389610b3a1f995c221ddbbb616f34f1ad9ba6231
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:01 2026 +0200
git: Update to version 2.54.0
- Update from version 2.53.0 to 2.54.0
- Update of rootfile
- Changelog
2.54.0
UI, Workflows & Features
"git add -p" and friends note what the current status of the hunk
being shown is.
"git history" history rewriting (experimental) command has been
added.
"git replay" is taught to drop commits that become empty (not the
ones that are empty in the original).
The help text and the documentation for the "--expire" option of
"git worktree [list|prune]" have been improved.
When "git show-index" is run outside a repository, it silently
defaults to SHA-1; the tool now warns when this happens.
"git merge-file" can be run outside a repository, but it ignored
all configuration, even the per-user ones. The command now uses
available configuration files to find its customization.
"auto filter" logic for large-object promisor remote.
"git rev-list" and friends learn "--maximal-only" to show only the
commits that are not reachable by other commits.
Command line completion (in contrib/) update for
"stash import/export".
"git repo info" learns "--keys" action to list known keys.
Extend the alias configuration syntax to allow aliases using
characters outside ASCII alphanumeric (plus -).
A signature on a commit that was GPG signed a long time ago ought to
be still valid after the key that was used to sign it has expired,
but we showed them in alarming red.
"git subtree split --prefix=P <commit>" now checks the prefix P
against the tree of the (potentially quite different from the
current working tree) given commit.
"git add -p" learned a new mode that allows the user to revisit a
file that was already dealt with.
Allow the directory in which reference backends store their data to
be specified.
"gitweb" has been taught to be mobile friendly.
"git apply --directory=./un/../normalized/path" now normalizes the
given path before using it.
"git maintenance" starts using the "geometric" strategy by default.
"git config list" is taught to show the values interpreted for
specific type with "--type=<X>" option.
"git add <submodule>" has been taught to honor
submodule.<name>.ignore that is set to "all" (and requires "git add
-f" to override it).
Hook commands are now allowed to be defined (possibly centrally)
in the configuration files, and run multiple of them for the same
hook event.
The way end-users can add their own "git <cmd>" subcommand by
storing "git-<cmd>" in a directory on their $PATH has not been
documented clearly, which has been corrected.
"git send-email" learns to pass hostname/port to Authen::SASL
module.
"git send-email" learns to support use of client-side certificates.
"git send-email" has learned to be a bit more careful when it
accepts charset to use from the end-user, to avoid y (mistaken
yes when expecting a charset like UTF-8) and other nonsense.
"git status" learned to show comparison between the current branch
and various other branches listed on status.compareBranches
configuration.
"git repo structure" command learns to report maximum values on
various aspects of objects it inspects.
"git rebase" learns "--trailer" option to drive the
interpret-trailers machinery.
"git fast-import" learned to optionally replace signature on
commits whose signatures get invalidated due to replaying by
signing afresh.
"git history" learned the "split" subcommand.
The reference-transaction hook was taught to be triggered before
taking locks on references in the "preparing" phase.
"git apply" now reports the name of the input file along with the
line number when it encounters a corrupt patch, and correctly
resets the line counter when processing multiple patch files.
The HTTP transport learned to react to "429 Too Many Requests".
"git repo info -h" and "git repo structure -h" limit their help output
to the part that is specific to the subcommand.
"git format-patch --cover-letter" learns to use a simpler format
instead of the traditional shortlog format to list its commits with
a new --commit-list-format option and format.commitListFormat
configuration variable.
git backfill learned to accept revision and pathspec arguments.
"git replay" (experimental) learns, in addition to "pick" and
"replay", a new operating mode "revert".
"git replay" now supports replaying down to the root commit.
Handling of signed commits and tags in fast-import has been made more
configurable.
"git config list" is the official way to spell "git config -l" and
"git config --list". Use it to update the documentation.
Performance, Internal Implementation, Development Support etc.
Avoid local submodule repository directory paths overlapping with
each other by encoding submodule names before using them as path
components.
The string_list API gains a new helper, string_list_sort_u(), and
new unit tests to extend coverage.
Improve set-up time of a perf test.
ISO C23 redefines strchr and friends that traditionally took
a const pointer and returned a non-const pointer derived from it to
preserve constness (i.e., if you ask for a substring in a const
string, you get a const pointer to the substring). Update code
paths that used non-const pointer to receive their results that did
not have to be non-const to adjust.
Rename three functions around the commit_list data structure.
Transaction to create objects (or not) is currently tied to the
repository, but in the future a repository can have multiple object
sources, which may have different transaction mechanisms. Make the
odb transaction API per object source.
"git merge-ours" is taught to work better in a sparse checkout.
Allow recording process ID of the process that holds the lock next
to a lockfile for diagnosis.
Reduce dependency on the_repository of xdiff-interface layer.
Code clean-up to use the commit_stack API.
"git diff --anchored=<text>" has been optimized.
A CodingGuidelines update.
Add process ancestry data to trace2 on macOS to match what we
already do on Linux and Windows. Also adjust the way Windows
implementation reports this information to match the other two.
A handful of places used refs_for_each_ref_in() API incorrectly,
which has been corrected.
Some tests assumed "iconv" is available without honoring ICONV
prerequisite, which has been corrected.
Revamp object enumeration API around odb.
Additional tests were introduced to see the interaction with netrc
auth with auth failure on the http transport.
A couple of bugs in use of flag bits around odb API has been
corrected, and the flag bits reordered.
Plumb gitk/git-gui build and install procedure in meson based
builds.
The code to accept shallow "git push" has been optimized.
Simplify build procedure for oxskeychain (in contrib/).
Fix dependency screw-up in meson-based builds.
Wean the mailmap code off of the_repository dependency.
API clean-up for the worktree subsystem.
The last uses of the_repository in "tree-diff.c" have been
eradicated.
Clean-up the code around "git repo info" command.
Mark the merge-ort codebase to prevent more uses of the_repository
from getting added.
The core.attributesfile is intended to be set per repository, but
was kept track of by a single global variable in-core, which has
been corrected by moving it to per-repository data structure.
Use the hook API to replace ad-hoc invocation of hook scripts via
the run_command() API.
Code refactoring around refs-for-each-* API functions.
The parse-options API learned to notice an options[] array with
duplicated long options.
(merge 237e520d81 rs/parse-options-duplicated-long-options later to maint).
The code to maintain mapping between object names in multiple hash
functions is being added, written in Rust.
A bit of OIDmap API enhancement and cleanup.
Move gitlab CI from macOS 14 images that are being deprecated.
The object source API is getting restructured to allow plugging new
backends.
Reduce dependence on the global the_hash_algo and the_repository
variables of wt-status code path.
The way combined list-object filter options are parsed has been
revamped.
Editorconfig filename patterns were specified incorrectly, making
many source files inside subdirectories unaffected, which has been
corrected.
The run_command() API lost its implicit dependency on the singleton
the_repository instance.
The unit test helper function was taught to use backslash
mnemonic notation for certain control characters like "\t", instead
of octal notation like "\011".
Adjust test-lint to allow "sed -E" to use ERE in the patterns.
Clar (unit testing framework) update from the upstream.
Reduce system overhead "git upload-pack" spends on relaying "git
pack-objects" output to the "git fetch" running on the other end of
the connection.
Add a coccinelle rule to break the build when "struct strbuf" gets
passed by value.
Further work on incremental repacking using MIDX/bitmap
The logic to count objects has been cleaned up.
Tweak the build infrastructure by moving tools around.
Uses of prio_queue as a LIFO stack of commits have been written
with commit_stack.
The cleanup of remaining bitmaps in "ahead_behind()" has been
simplified.
split-index.c has been updated to not use the global the_repository
and the_hash_algo variables.
The unsigned integer that is used as a bitset to specify the kind
of branches interpret_branch_name() function has been changed to
use a dedicated enum type.
Various updates to contrib/diff-highlight, including documentation
updates, test improvements, and color configuration handling.
Code paths that loop over another array to push each element into a
strvec have been rewritten to use strvec_pushv() instead.
In case homebrew breaks REG_ENHANCED again, leave an in-code comment
to suggest use of our replacement regex as a workaround.
MinGW build updates.
The way dash 0.5.13 handles non-ASCII contents in here-doc
is buggy and breaks our existing tests, which unfortunately
have been rewritten to avoid triggering the bug.
Object name handling (disambiguation and abbreviation) has been
refactored to be backend-generic, moving logic into the respective
object database backends.
pack-objects’s --stdin-packs=follow mode learns to handle
excluded-but-open packs.
A few code paths that spawned child processes for network
connection weren’t wait(2)ing for their children and letting "init"
reap them instead; they have been tightened.
Adjust the codebase for C23 that changes functions like strchr()
that discarded constness when they return a pointer into a const
string to preserve constness.
A handful of inappropriate uses of the_repository have been
rewritten to use the right repository structure instance in the
read-cache.c codepath.
Internals of "git fsck" have been refactored to not depend on the
global the_repository variable.
Reduce dependency on the_repository in add-patch.c file.
The way the "git log -L<range>:<file>" feature is bolted onto the
log/diff machinery is being reworked a bit to make the feature
compatible with more diff options, like -S/G.
Further work to adjust the codebase for C23 that changes functions
like strchr() that discarded constness when they return a pointer into
a const string to preserve constness.
"git rev-list --maximal-only" has been optimized by borrowing the
logic used by "git show-branch --independent", which computes the
same kind of information much more efficiently.
Fixes since v2.53
HTTP transport failed to authenticate in some code paths, which has
been corrected.
(merge ed0f7a62f7 ap/http-probe-rpc-use-auth later to maint).
The computation of column width made by "git diff --stat" was
confused when pathnames contain non-ASCII characters.
(merge 04f5d95ef7 lp/diff-stat-utf8-display-width-fix later to maint).
The "-z" and "--max-depth" documentation (and implementation of
"-z") in the "git last-modified" command have been updated.
(merge 9dcc09bed1 tc/last-modified-options-cleanup later to maint).
A handful of code paths that started using batched ref update API
(after Git 2.51 or so) lost detailed error output, which have been
corrected.
(merge eff9299eac kn/ref-batch-output-error-reporting-fix later to maint).
"git blame --ignore-revs=… --color-lines" did not account for
ignored revisions passing blame to the same commit an adjacent line
gets blamed for.
(merge d519082d4e rs/blame-ignore-colors-fix later to maint).
Coccinelle rules update.
(merge 60614838a4 tc/memzero-array later to maint).
Giving "git last-modified" a tree (not a commit-ish) died an
uncontrolled death, which has been corrected.
(merge 525ef52301 tc/last-modified-not-a-tree later to maint).
Test contrib/ things in CI to catch breakages before they enter the
"next" branch.
(merge c591c3ceff jc/ci-test-contrib-too later to maint).
A handful of documentation pages have been modernized to use the
"synopsis" style.
(merge a34d1d53a6 ja/doc-synopsis-style-even-more later to maint).
Small clean-up of xdiff library to remove unnecessary data
duplication.
(merge 5086213bd2 pw/xdiff-cleanups later to maint).
Update sample commit-msg hook to complain when a log message has
material mailinfo considers the end of log message in the middle.
(merge 83804c361b pw/commit-msg-sample-hook later to maint).
"git pack-objects --stdin-packs" with "--exclude-promisor-objects"
fetched objects that are promised, which was not wanted. This has
been fixed.
(merge f4eff7116d ps/pack-concat-wo-backfill later to maint).
"git switch <name>", in an attempt to create a local branch <name>
after a remote tracking branch of the same name gave an advice
message to disambiguate using "git checkout", which has been
updated to use "git switch".
(merge 12fee11f21 jc/checkout-switch-restore later to maint).
It does not make much sense to apply the "incomplete-line"
whitespace rule to symbolic links, whose contents almost always
lack the final newline. "git apply" and "git diff" are now taught
to exclude them for a change to symbolic links.
(merge 6a41481c6d jc/whitespace-incomplete-line later to maint).
"git format-patch --from=<me>" did not honor the command line
option when writing out the cover letter, which has been corrected.
Update build procedure for mergetool documentation in meson-based builds.
(merge 58e4eeeeb5 pw/meson-doc-mergetool later to maint).
An earlier attempt to optimize "git subtree" discarded too much
relevant histories, which has been corrected.
A prefetch call can be triggered to access a stale diff_queue entry
after diffcore-break breaks a filepair into two and freed the
original entry that is no longer used, leading to a segfault, which
has been corrected.
(merge 2d88ab078d hy/diff-lazy-fetch-with-break-fix later to maint).
"git fetch --deepen" that tries to go beyond merged branch used to
get confused where the updated shallow points are, which has been
corrected.
(merge 3ef68ff40e sp/shallow-deepen-relative-fix later to maint).
"fsck" iterates over packfiles and its access to pack data caused
the list to be permuted, which caused it to loop forever; the code
to access pack data by "fsck" has been updated to avoid this.
(merge 13eb65d366 ps/fsck-stream-from-the-right-object-instance later to maint).
"git log --graph --stat" did not count the display width of colored
graph part of its own output correctly, which has been corrected.
(merge 064b869efc lp/diff-stat-utf8-display-width-fix later to maint).
The configuration variable format.noprefix did not behave as a
proper boolean variable, which has now been fixed and documented.
(merge ea3a62c40e kh/format-patch-noprefix-is-boolean later to maint).
CI fix.
(merge eb35167dd4 ps/ci-reduce-gitlab-envsize later to maint).
"git diff --no-index --find-object=<object-name>" outside a
repository of course wouldn’t be able to find the object and died
while parsing the command line. The command is made to die in a
bit more user-friendly way.
(merge b0ddc7947c mm/diff-no-index-find-object later to maint).
Fix typo-induced breakages in fsmonitor-watchman sample hook.
(merge 41366e4677 pt/fsmonitor-watchman-sample-fix later to maint).
"git for-each-repo" started from a secondary worktree did not work
as expected, which has been corrected.
(merge e87493b9b4 ds/for-each-repo-w-worktree later to maint).
The construct test "$(command)" = expectation loses the exit
status from the command, which has been fixed by breaking up the
statement into pieces.
(merge d3edca979a fp/t3310-unhide-git-failures later to maint).
While discovering a ".git" directory, the code treats any stat()
failure as a sign that a filesystem entity .git does not exist
there, and ignores ".git" that is not a "gitdir" file or a
directory. The code has been tightened to notice and report
filesystem corruption better.
(merge 1dd27bfbfd ty/setup-error-tightening later to maint).
Plug a few leaks where mmap’ed memory regions are not unmapped.
(merge a8a69bbb64 jk/unleak-mmap later to maint).
A test now uses the symbolic constant $ZERO_OID instead of 40 "0" to
work better with SHA-256 as well as SHA-1.
(merge 30310f3cc4 ss/t3200-test-zero-oid later to maint).
Instead of hardcoded origin, use the configured default remote
when fetching from submodules.
(merge 3b5fb32da8 ng/submodule-default-remote later to maint).
The code in "git help" that shows configuration items in sorted
order was awkwardly organized and prone to bugs.
"imap-send" used to use functions whose use is going to be removed
with OpenSSL 4.0; rewrite them using public API that has been
available since OpenSSL 1.1 since 2016 or so.
(merge 6392a0b75d bb/imap-send-openssl-4.0-prep later to maint).
Fix an example in the user-manual.
(merge 5514f14617 gj/user-manual-fix-grep-example later to maint).
The final clean-up phase of the diff output could turn the result of
histogram diff algorithm suboptimal, which has been corrected.
(merge e417277ae9 yc/histogram-hunk-shift-fix later to maint).
"git diff -U<num>" was too lenient in its command line parsing and
took an empty string as a valid <num>.
(merge 4f6a803aba ty/doc-diff-u-wo-number later to maint).
The handling of the incomplete lines at the end by "git
diff-highlight" has been fixed.
merge-file --object-id used to trigger a BUG when run in a linked
worktree, which has been fixed.
(merge 57246b7c62 mr/merge-file-object-id-worktree-fix later to maint).
"git apply -p<n>" parses <n> more carefully now.
(merge d05d84c5f5 mf/apply-p-no-atoi later to maint).
A test to run a .bat file with whitespaces in the name with arguments
with whitespaces in them was flaky in that sometimes it got killed
before it produced expected side effects, which has been rewritten to
make it more robust.
(merge 3ad4921838 jk/t0061-bat-test-update later to maint).
"git ls-remote +refs/tags/:refs/tags/ https://…" run outside a
repository would dereference a NULL while trying to see if the given
refspec is a single-object refspec, which has been corrected.
(merge 4e5dc601dd kj/refspec-parsing-outside-repository later to maint).
Fix a regression in writing the commit-graph where commits with dates
exceeding 34 bits (beyond year 2514) could cause an underflow and
crash Git during the generation data overflow chunk writing.
The value of a wrong pointer variable was referenced in an error
message that reported that it shouldn’t be NULL.
(merge 753ecf4205 yc/path-walk-fix-error-reporting later to maint).
The check in "receive-pack" to prevent a checked out branch from
getting updated via updateInstead mechanism has been corrected.
"git backfill" is capable of auto-detecting a sparsely checked out
working tree, which was broken.
(merge 339eba65a7 th/backfill-auto-detect-sparseness-fix later to maint).
add_files_to_cache() used diff_files() to detect only the paths that
are different between the index and the working tree and add them,
which does not need rename detection, which interfered with unnecessary
conflicts.
(merge c0ce43376b ng/add-files-to-cache-wo-rename later to maint).
Doc mark-up update for entries in the glossary with bulleted lists.
(merge a65cbd87ea jk/doc-markup-sub-list-indentation later to maint).
CI dependency updates.
(merge 4bdb17e3a8 jc/ci-github-actions-use-checkout-v5 later to maint).
Other code cleanup, docfix, build fix, etc.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit c339b4d74d177d99fc8b8f5e276435870083c95f
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:03 2026 +0200
harfbuzz: Update to version 14.2.0
- Update from version 14.0.0 to 14.2.0
- Update of rootfile
- Changelog
14.2.0
- GPU library:
* New color-glyph paint renderer, based on design by Lê Duy Quang.
`hb_gpu_paint_t` walks a font's paint tree (COLRv0 or COLRv1) and encodes
its layers (solid fills, linear / radial / sweep gradients, transforms,
composite groups) into a compact blob.
A new fragment-shader function `hb_gpu_paint()` renders the blob in
premultiplied RGBA; monochrome glyphs are handled transparently via a
synthesized foreground-colored layer.
Shader sources provided in GLSL, WGSL, MSL, and HLSL.
* Paint encoder limitations: the encoder sets `unsupported` and returns
`NULL` when `num_ops` would exceed 32767, `push_group` nests deeper than 4,
or the paint tree calls back through the image callback (PaintImage).
Nested glyph clips are intersected up to 3 levels; a few composite modes
use approximate fallbacks; `push_clip_rectangle` is silently ignored.
* Encode entry point now returns extents and auto-clears the encoder; the
standalone `get_extents()` is gone.
* Gradient color stop interpolation now happens in premultiplied space per
the OpenType COLR specification.
* The foreground color sentinel (`is_foreground`) now correctly preserves the
paint-tree alpha from the encoded color data instead of discarding it.
* The hb-gpu utility gains `--draw` / `--paint` flags with per-font
auto-detect, and `--output-file` / `-o` for headless single-frame rendering
to a PPM image.
- Vector library:
* New PDF output backend. Vector paint glyphs now render to PDF page content,
producing scalable COLRv0 / COLRv1 color-glyph artwork (solid fills, linear
/ radial / sweep gradients, blend modes, PNG images with transparency) that
can be embedded directly in PDF documents. Useful for PDF producers such as
LibreOffice that want crisp, resolution-independent color emoji.
* New SVG id prefix API on paint allows prefixing document references, which
allows for embedding multiple SVGs in the same page without name clashes
(`hb_vector_paint_set_svg_prefix`).
* Removed glyph path dedup from vector draw and paint. Each glyph is emitted
inline; no `<defs>` / `<use>` caching.
* `_glyph()` functions are now thin convenience wrappers documented as
equivalent expansions of the underlying font draw/paint API.
* Drop glyph-source rendering of SVG-in-OT fonts.
- Raster library:
* Drop glyph-source rendering of SVG-in-OT fonts.
- Across Draw / Paint subsystems:
* `_reset()` methods gain matching`_clear()` companions that drop accumulated
data while preserving user configuration. Getter companions added for
setters across raster, vector, and gpu types.
- Various fuzzer fixes for raster, vector, and GPU libraries.
- Paint API:
* New arbitrary-path clip: `hb_paint_push_clip_path_start` / `_end` let
callers clip to a caller-supplied outline, not just a font glyph.
`push_clip_path_start()` returns the draw-funcs (and matching draw data)
for the backend’s path accumulator; the caller drives `hb_draw_*()` into
it, then calls `push_clip_path_end()`, followed by painted ops, then
`hb_paint_pop_clip()` to release the clip. Implemented for all paint
backends: vector (SVG defs + clipPath + url ref), vector PDF (q / path / W
n), raster (path rendered to an alpha mask, intersected with the current
clip), and GPU (the path is encoded into a Slug sub-blob so the fragment
shader clips against it the same way it clips against glyph outlines).
- Shaping:
* Indic: categorize U+1CF5 and U+1CF6 as CS.
- Changed API
* GPU library:
- `hb_gpu_draw_glyph()` now returns `void` (was `hb_bool_t`). Use
`hb_gpu_draw_glyph_or_fail()` if you need the success status.
- `hb_gpu_paint_glyph()` now returns `void` (was `hb_bool_t`) and
internally synthesizes a foreground-colored layer for non-color glyphs
via `hb_font_paint_glyph()`, so every glyph with an outline produces
output. Use `hb_gpu_paint_glyph_or_fail()` (which delegates to
`hb_font_paint_glyph_or_fail()`) if you need to distinguish color vs
synthesized paint. Encoder-level limits (unsupported ops, group-stack
overflow) no longer fail paint_glyph; they surface from
`hb_gpu_paint_encode()` returning `NULL`.
- `hb_gpu_draw_encode()` now takes an `extents` out-parameter and
auto-clears the encoder on return.
- `hb_gpu_draw_darken()` renamed to `hb_gpu_stem_darken()`.
* Vector library:
- `hb_vector_svg_set_precision()` and its paint counterpart renamed to
`hb_vector_draw_set_precision()` / `hb_vector_paint_set_precision()`
(SVG-specific naming is inaccurate with the PDF backend added).
- `hb_vector_draw_glyph()` / `hb_vector_paint_glyph()` now return `void`
(were `hb_bool_t`). Paint additionally gains a draw fallback for
non-color glyphs. Use the matching `_or_fail()` variants for the
`hb_bool_t` return.
* Raster library:
- `hb_raster_draw_glyph()` / `hb_raster_paint_glyph()` now return `void`
(were `hb_bool_t`). Paint additionally gains a draw fallback for
non-color glyphs. Use the matching `_or_fail()` variants for the
`hb_bool_t` return.
* General:
- Many read-only getters gained const on their object argument.
- Six public draw / paint funcs getters across raster, vector, and gpu now
take a const-pointer to the relevant context instance instead of being
singletons:
hb_raster_draw_get_funcs (const hb_raster_draw_t *)`
hb_raster_paint_get_funcs (const hb_raster_paint_t *)
hb_vector_draw_get_funcs (const hb_vector_draw_t *)
hb_vector_paint_get_funcs (const hb_vector_paint_t *)
hb_gpu_draw_get_funcs (const hb_gpu_draw_t *)
hb_gpu_paint_get_funcs (const hb_gpu_paint_t *)
This is what lets vector_paint dispatch to SVG- vs PDF- flavored
callbacks transparently when called from outside code; the others
currently use the instance for symmetry only.
- New API
* Draw:
+HB_DRAW_LINE_CAP_BUTT
+HB_DRAW_LINE_CAP_ROUND
+HB_DRAW_LINE_CAP_SQUARE
+hb_draw_line_cap_t
+hb_draw_line()
+hb_draw_rectangle()
+hb_draw_circle()
* Paint:
+hb_paint_push_clip_path_start_func_t
+hb_paint_push_clip_path_end_func_t
+hb_paint_sweep_gradient_tile_func_t
+hb_paint_push_group_for_func_t
+hb_paint_push_group_for()
+hb_paint_funcs_set_push_group_for_func()
+hb_paint_reduce_linear_anchors()
+hb_paint_normalize_color_line()
+hb_paint_sweep_gradient_tiles()
+hb_paint_push_clip_path_start()
+hb_paint_push_clip_path_end()
+hb_paint_funcs_set_push_clip_path_start_func()
+hb_paint_funcs_set_push_clip_path_end_func()
* GPU library:
+HB_GPU_SHADER_STAGE_VERTEX
+HB_GPU_SHADER_STAGE_FRAGMENT
+HB_GPU_SHADER_LANG_INVALID
+hb_gpu_shader_stage_t
+hb_gpu_paint_t
+hb_gpu_paint_create_or_fail()
+hb_gpu_paint_reference()
+hb_gpu_paint_destroy()
+hb_gpu_paint_set_user_data()
+hb_gpu_paint_get_user_data()
+hb_gpu_paint_get_funcs()
+hb_gpu_paint_set_palette()
+hb_gpu_paint_get_palette()
+hb_gpu_paint_set_custom_palette_color()
+hb_gpu_paint_clear_custom_palette_colors()
+hb_gpu_paint_set_scale()
+hb_gpu_paint_get_scale()
+hb_gpu_paint_glyph()
+hb_gpu_paint_encode()
+hb_gpu_paint_clear()
+hb_gpu_paint_reset()
+hb_gpu_paint_recycle_blob()
+hb_gpu_paint_shader_source()
+hb_gpu_paint_glyph_or_fail()
+hb_gpu_shader_source()
+hb_gpu_draw_shader_source()
+hb_gpu_draw_clear()
+hb_gpu_draw_get_scale()
+hb_gpu_draw_glyph_or_fail()
* Raster library:
+hb_raster_draw_clear()
+hb_raster_draw_glyph_or_fail()
+hb_raster_paint_clear()
+hb_raster_paint_glyph_or_fail()
+hb_raster_paint_set_palette()
+hb_raster_paint_get_palette()
+hb_raster_paint_get_foreground()
+hb_raster_paint_set_background()
+hb_raster_paint_get_background()
* Vector library:
+HB_VECTOR_FORMAT_PDF
+hb_vector_draw_clear()
+hb_vector_draw_get_precision()
+hb_vector_draw_get_format()
+hb_vector_draw_glyph_or_fail()
+hb_vector_draw_new_path()
+hb_vector_draw_set_foreground()
+hb_vector_draw_get_foreground()
+hb_vector_draw_set_background()
+hb_vector_draw_get_background()
+hb_vector_paint_clear()
+hb_vector_paint_get_precision()
+hb_vector_paint_get_format()
+hb_vector_paint_get_foreground()
+hb_vector_paint_set_background()
+hb_vector_paint_get_background()
+hb_vector_paint_get_palette()
+hb_vector_paint_glyph_or_fail()
+hb_vector_paint_set_svg_prefix()
+hb_vector_paint_get_svg_prefix()
- Removed API
* GPU library:
-hb_gpu_shader_fragment_source() (replaced by hb_gpu_shader_source(stage))
-hb_gpu_shader_vertex_source() (replaced by hb_gpu_shader_source(stage))
-hb_gpu_draw_get_extents() (extents are now an out-parameter of hb_gpu_draw_encode())
* Vector library:
-hb_vector_draw_set_flat()
-hb_vector_draw_get_flat()
-hb_vector_paint_set_flat()
-hb_vector_paint_get_flat()
14.1.0
- GPU library improvements:
* Add anti-aliased rendering for small sizes.
* Store font scale in blob header.
* Port scale/ppem support to MSL, WGSL, and HLSL shaders.
* Fix contour breaks and bounds quantization in encode.
* Fix garbled rendering after font change in web demo.
* Various robustness fixes.
- Various fuzzing fixes for `harfbuzz-raster`, `harfbuzz-gpu` and
`harfbuzz-vector` libraries.
- Move `HB_NO_CFF` from `HB_LEAN` to `HB_NO_DRAW` closure, and fix
`HB_TINY` build.
- New API:
+hb_gpu_draw_set_scale()
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 5eb0ecc437734def3da067792e5d1aa5d4275e0d
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:43:51 2026 +0200
core202: Ship glib
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 86f61f7d10b7d189d0180db7eb8fc6ad3c8bf718
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:02 2026 +0200
glib: Update to version 2.88.0
- Update from version 2.87.0 to 2.88.0
- Update of rootfile
- 3 CVE fixes in 2.87.3
- 3 CVE fixes in 2.87.1
- Changelog
2.88.0
* Bugs fixed:
- !5097 gslice: Factor out a size helper macro and stop using MAX in a public
header
2.87.5
* Brown paper bag release to attempt to fix the dist-job in CI; this caused it
to be impossible to build a release archive for 2.87.4
* Bugs fixed:
- !5096 ci: Force a git clone and update the index when running dist-job
2.87.4
* Avoid installing broken symlinks as part of the test data for the gdatetime
tests (!5054, work by Alessandro Astone)
* Fix `g_file_set_contents()` with non-ASCII filenames on Windows (#3873, work
by Lukas K.)
* Bugs fixed:
- #3688 Documentation issue with g_slice_new and g_slice_new0 (Philip
Withnall)
- #3730 Unclear assertion failure message when `G_PARAM_CONSTRUCT` and
`G_PARAM_CONSTRUCT_ONLY` are both specified (depuc8)
- #3814 vs2019-arm64 CI fails with ninja error (Philip Withnall)
- #3873 g_file_set_contents broken on windows for non-ASCII filenames
- #3885 Documentation of g_file_info_get_is_backup() doesn’t define what a
backup file is (depuc8)
- #3897 GLocalFileInfo's set_symlink() is backwards (Philip Withnall)
- #3905 Memory leak in g_desktop_app_info_launch_uris_with_spawn (correctmost)
- !5030 gsocketconnection: Set an error when closed if no address is cached
- !5037 minor doc fixes
- !5047 i18n: Update and correction for Occitan
- !5048 ci: Install gi-docgen in the Fedora CI image
- !5049 Update Serbian translation
- !5050 Update Swedish translation
- !5051 Update French translation
- !5052 Update Bulgarian translation
- !5053 Update Romanian translation
- !5054 tests: Create unix_localtime root directory structure at runtime
- !5055 Update Chinese (China) translation
- !5056 Update Japanese translation
- !5057 Update Korean translation
- !5058 Update Georgian translation
- !5059 Update Ukrainian translation
- !5060 Update Lithuanian translation
- !5061 Update French translation
- !5062 Update Hungarian translation
- !5064 Update Portuguese translation
- !5065 Update Nepali translation
- !5066 i18n: Update for Occitan
- !5068 Update Turkish translation
- !5069 Update Brazilian Portuguese translation
- !5070 Update Galician translation
- !5071 Update Kazakh translation
- !5075 Update Polish translation
- !5076 Update Catalan translation
- !5077 Update Slovenian translation
- !5078 gio-tool-launch: Fix a filename leak
- !5080 Update Catalan translation
- !5081 Update Danish translation
- !5082 Update Polish translation
- !5084 Update British English translation
- !5085 Update Georgian translation
- !5087 Update Nepali translation
- !5088 tests: Fix a minor memory leak in the socket test
- !5089 ci: Drop workaround for GitLab submodule checkout bug
- !5090 Prevent iptosmessage test failures on FreeBSD and Hurd
- !5091 gobject: Disable new construct property check with G_DISABLE_CHECKS
* Translation updates:
- Bulgarian (Alexander Alexandrov Shopov)
- Catalan (Victor Dargallo, Jordi Mas)
- Chinese (China) (luming zh)
- Danish (Ask Hjorth Larsen)
- English (United Kingdom) (Bruce Cowan)
- French (Guillaume Bernard)
- Galician (Francisco Diéguez Souto)
- Georgian (Ekaterine Papava)
- Hungarian (Balázs Úr)
- Japanese (Makoto Sakaguchi)
- Kazakh (Baurzhan Muftakhidinov)
- Korean (Changwoo Ryu)
- Lithuanian (Aurimas Aurimas Černius)
- Nepali (Pawan Chitrakar)
- Occitan (post 1500) (Mejans)
- Polish (Victoria)
- Portuguese (Hugo Carvalho)
- Portuguese (Brazil) (Rafael Fontenelle)
- Romanian (Antonio Marin)
- Serbian (Miloš Popović)
- Slovenian (Martin)
- Swedish (Anders Jonsson)
- Turkish (Emin Tufan Çetin)
- Ukrainian (Yuri Chornoivan)
2.87.3
* Improved support for `GNotification` on Windows (#3867, #3869, work by
Oscar Pernia Moreno)
* Fix module lookups via `GModule` on Cygwin (#3741, work by Ailin Nemui)
* Fix local timezone lookup with nested symlinks in `/etc/localtime` (#3816,
work by Alessandro Astone)
* Fix ordering and sequential consistency of gatomic memory barriers on MSVC
and fallback GCC code paths (#3829, #3852, work by Luca Bacci)
* Fix various integer overflow bugs (#3870, #3871, #3872, CVE-2026-1484,
CVE-2026-1485, CVE-2026-1489, work by Marco Trevisan)
* Add `GSocketControlMessage` subclasses for receiving `IP_TOS` and
`IPV6_TCLASS` (!4846, work by Jakub Adam)
* Support polling more than 1024 FDs on macOS (!4953, work by Ihar Hrachyshka)
* Remove platform-specific backward compatibility from GLib-2.0 as it’s
impossible to support (#3839, !4881, work by Marco Trevisan)
* Improve introspection annotations for delimiters on `g_strsplit_set()` (this
may require changes in introspection bindings)
* Basic support for building and running some functionality on tvOS and watchOS
(!4992, work by Nirbheek Chauhan)
* Add `g_get_monotonic_time()` variant with nanosecond precision (!5004, work
by Benjamin Otte)
* Bugs fixed:
- #3628 Add test suite for gdbus tool (Philip Withnall)
- #3741 GModule incorrectly searches for cyg....so instead of cyg....dll on
Cygwin (Ailin Nemui)
- #3816 Local timezone wrongly considered to be UTC if timezone file in
/usr/share/zoneinfo is a symlink (Alessandro Astone)
- #3829 [RFC] gatomic: Memory barriers should be reversed (Luca Bacci)
- #3839 Broken Unix/Win32 specific GIRs
- #3852 MSVC and GCC-fallback atomics are not sequentially consistent (Luca
Bacci)
- #3863 Iterating over a short (preallocated) GVariant bytestring invalidly
refs a NULL GBytes (Christian Hergert)
- #3865 callable-info/native-address test fails on big endian (Alessandro
Astone)
- #3867 win32: Notifications without body won't show up
- #3869 gnotification-win32: Re-initialize tray icon if `explorer.exe` got
restarted
- #3870 (CVE-2026-1484) (YWH-PGM9867-168) Integer Overflow -> Buffer Underflow
on Glib through glib/gbase64.c via g_base64_encode_close() leads to OOB
Write (Marco Trevisan (Treviño))
- #3871 (CVE-2026-1485) (#YWH-PGM9867-169) Buffer underflow on Glib through
gio/gcontenttype-fdo.c via parse_header() lead to OOB Read/Write (Marco
Trevisan (Treviño))
- #3872 (CVE-2026-1489) (#YWH-PGM9867-171) Integer Overflow on Glib through
glib/guniprop.c via output_marks() lead to OOB Write in
glib/gutf8.c:g_unichar_to_utf8() (Marco Trevisan (Treviño))
- #3877 hash test failing randomly on MSYS2 (Luca Bacci)
- #3880 Integer overflow in gio-launch-desktop from over-long environment
variables (Philip Withnall)
- #3881 Integer overflow in g_resource_find_overlay() from over-long
environment variables (Philip Withnall)
- #3883 Integer overflow in `g_path_get_basename()` when passed an extremely
long path (length ≈SSIZE_MAX) (Philip Withnall)
- #3886 Crash in gdbus-tool on invalid --method argument format (Philip
Withnall)
- #3895 date_time_lookup_era unsafely caches `setlocale` pointer (Philip
Withnall)
- !4846 gio: Add GSocketControlMessage subclasses for receiving IP_TOS and
IPV6_TCLASS
- !4953 darwin: Support g_poll:maxfd >= FD_SETSIZE
- !4957 gstrfuncs: Annotate g_strsplit_set() as taking a byte array of
delimiters
- !4966 gio-tool-{copy,move}: Fix incorrect transfer rate calculation and
improve visualization
- !4968 markup: Better error reporting
- !4970 gutf8: Clarify docs about negative return values
- !4971 gutf8: Use size_t internally for some length calculations
- !4976 docs: Fix a typo and specify a codeblock is C
- !4977 gobject: Add nullable annotation to g_weak_ref_get return value
- !4982 markup: Initialize tag positions
- !4985 ci/fedora, glib/casemap: Add tests for the Azerbaijani cases
- !4987 giomodule: Simplify macro usage for getting the giomodule dir, don't
use it on iOS
- !4991 gio/gdatainputstream: Mark bytes as potentially unused
- !4992 Disable or stub out fork/execv* usage when targeting tvOS and watchOS
- !4993 Windows: Add test-profile
- !4996 Fix some small regressions in the iOS build
- !4997 meson: Add guesses for compute_int to speed up cross-compile setup
- !5002 Update Lithuanian translation
- !5004 Add g_get_monotonic_time() variant with nanosecond precision
- !5006 gfileutils: Fix a regression in `g_path_get_basename()` for plain
files
- !5008 Update Swedish translation
- !5009 Update Kazakh translation
- !5011 Update Romanian translation
- !5012 Compilation fixes for CLangCL and older MSVC
- !5013 Update Czech translation
- !5014 Update Russian translation
- !5015 GApplication: make send_notification / withdraw_notification thread-
safe
- !5018 Update Ukrainian translation
- !5020 Update Romanian translation
- !5021 Update Lithuanian translation
- !5023 Update Greek translation
- !5024 Update Chinese (China) translation
- !5025 Update Slovenian translation
- !5026 Update Brazilian Portuguese translation
- !5027 Update Basque translation
- !5028 gvalue: Update default terminology to initial
- !5029 Update Bulgarian translation
- !5031 Update Galician translation
- !5032 Update Hungarian translation
- !5034 Fix const qualifiers where discarded
- !5036 Address more size types issues
- !5038 Update Kazakh translation
- !5039 Update Catalan translation
- !5040 gsettings-tool: Fix leaks when running set commands
- !5041 gsettings-tool: Fix leaks when specifying invalid schemas
- !5042 Update Spanish translation
* Translation updates:
- Basque (Asier Saratsua Garmendia)
- Bulgarian (Alexander Alexandrov Shopov)
- Catalan (Victor Dargallo)
- Chinese (China) (luming zh)
- Czech (Daniel Rusek)
- Galician (Fran Diéguez)
- Greek, Modern (1453-) (Efstathios Iosifidis)
- Hungarian (Balázs Úr)
- Kazakh (Baurzhan Muftakhidinov)
- Lithuanian (Aurimas Aurimas Černius)
- Portuguese (Brazil) (Juliano de Souza Camargo)
- Romanian (Antonio Marin)
- Russian (Artur S0)
- Slovenian (Martin)
- Spanish (Daniel Mustieles)
- Swedish (Anders Jonsson)
- Ukrainian (Yuri Chornoivan)
2.87.2
* Add initial support for `GNotification` on Windows (#3857, work by
Oscar Pernia Moreno)
* Bugs fixed:
- #3850 g_strsplit_set docs are misleading (Matthias Clasen)
- #3857 win32: Add support for notifications using Shell_NotifyIcon API
- #3858 glib-compile-resources: Incorrect compiler detection on Windows when
building GTK causes a DoS (L. E. Segovia)
- #3863 Iterating over a short (preallocated) GVariant bytestring invalidly
refs a NULL GBytes (Christian Hergert)
- #3864 gir-tracker-bot posting diffs against too-recent-`main` (Marco
Trevisan (Treviño))
- #3867 win32: Notifications without body won't show up
- !4918 gio/unixmounts: use bsearch() to check for set inclusion
- !4949 gdesktopappinfo: Fix -Wsign-conversion warnings
- !4950 gobject: Fix -Wshorten-64-to-32 warnings and enable warning flag
- !4958 gtestutils: Avoid pointless logging string handling in gtestutils
- !4959 glib-unix: Implement g_unix_fd_query_path for Cygwin
- !4964 gio: Fix some -Wsign-conversion warnings
- !4965 gmodule: Enable -Wshorten-64-to-32 warnings for gmodule
- !4967 Fixup unicode 17
2.87.1
* Several low-risk CVE fixes (#3827, #3834, #3845)
* Fix return type of `gi_callable_info_get_closure_native_address()` (#3859,
work by Philip Chimento)
* Tweak thread pool handling for `GTask` threads to prevent stalls (#3840, work
by Ignazio Pillai)
* Respect `NO_COLOR` environment variable in log output (!4898, work by
Aaron Andersen)
* Update file system type lists to mark more file system types as system ones
and to recognise `ntfs3` file systems (!4916 and #3828, work by
Christian Hergert and Alexander Schwinn)
* Add `G_GNUC_FLAG_ENUM` attribute to mark enums as flags (!4900, work by
Philip Chimento)
* Add a static CRT constructor and fusion manifest XML for GLib utilities on
Windows so that `stderr` can be unbuffered and streams are flushed on exit
(#3733, work by Luca Bacci)
* Fix `G_FILE_MONITOR_WATCH_HARD_LINKS` on Windows (#3819, work by Jehan)
* Bugs fixed:
- #74 ignore case and '-' vs '_' differences when maching on enum/flag
nick/name (Emmanuel Fleury)
- #1181 Test failure: check_expected_events
- #3360 msys2-mingw32 CI failure: mingw-w64-i686-gcc and mingw-w64-i686-gcc-
objc are in conflict
- #3733 gi-compile-repository.py test intermittently fails on Windows with
empty stderr (Luca Bacci)
- #3818 g_main_context_check with a NULL context crashes (Michiel Jan Laurens
de Hoon)
- #3819 G_FILE_MONITOR_WATCH_HARD_LINKS flag does not monitor files on Windows
- #3827 (CVE-2025-13601) (#YWH-PGM9867-134) Incorrect calculation of buffer
size in g_escape_uri_string() (Philip Withnall)
- #3828 NTFS not detected by g_file_info_get_attribute_string
- #3834 (CVE-2025-14087) (#YWH-PGM9867-145) Buffer underflow on Glib through
glib/gvariant via bytestring_parse() or string_parse() leads to OOB Write
(Philip Withnall)
- #3840 GTask: g_task_run_in_thread never starts pending tasks (Ignazio
Pillai)
- #3843 glib: Integer overflow in `g_bytes_new_from_bytes()` leads to
corrupted `GBytes` object (Philip Withnall)
- #3845 (CVE-2025-14512) GIO: Integer overflow in file attribute escaping
(Philip Withnall)
- #3851 Integer overflow in `g_buffered_input_stream_peek()` leads to
segmentation fault (Philip Withnall)
- #3859 Return type of gi_callable_info_get_closure_native_address() should be
void* (Philip Chimento)
- !4883 ci: Do not use anymore only/except deprecated syntax
- !4885 ci: Track changes to gir files using artifacts and MRs comments
- !4898 glog: respect NO_COLOR environment variable
- !4899 genvironment: consider macOS behavior when testing g_getenv
- !4900 Add G_GNUC_FLAG_ENUM
- !4904 glog: guard NO_COLOR environment variable check with a GOnce for
performance reasons
- !4907 completion: fix error on nounset mode unknown completions
- !4908 glocalfile: Complain if `faccessat` sets an unusual error and use
AT_FDCWD
- !4909 glocalfile: Fix trash user cancellation not reported on Windows
- !4910 ci: Use issue bot native support for $ISSUE_BOT_API_TOKEN_FILE
- !4913 gdbusprivate: check length of path to GDBus binary
- !4916 gio/gunixmounts: mark some file-system types as system
- !4920 tests: Fix static-link test when running installed
- !4921 gutf8: Add tests and clarify documentation for g_unichar_to_utf8()
- !4922 ci: Enable the gobject-introspection build for the debian-stable-i386
job
- !4923 Added AIX implementation of g_unix_fd_query_path
- !4926 Fix g_strcompress docs (mod 256)
- !4928 Update of the Occitan translation
- !4930 gio/gunixmounts: Mark more file systems as system internal
- !4931 gio/gunixmounts: Replace /bin/efi with /boot/efi
- !4937 docs(GResource): Tweak overlays description
- !4939 gsocks4aproxy: Fix a buffer leak when finishing connecting
- !4941 gsignal: Cleanup handler disconnection avoiding unneeded operations
- !4942 gio: Fix a few -Wsign-conversion warnings
- !4943 ci: Some fixups on the gir checker
* Translation updates:
- Occitan (post 1500) (Mejans)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit bb06a68eaf09916c801f259114852046029e5d65
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:05 2026 +0200
iana-etc: Update to version 20260409
- Update from version 20260327 to 20260409
- No change to rootfile
- No changelog provided
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 9e5025b3e62af8d07d6886b1886815a56d62effb
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:06 2026 +0200
iperf3: Update to version 3.21
- Update from version 3.19 to 3.21
- No change to rootfile
- 3 CVE fixes were applied in version 3.19.1
- Changelog
3.21
* Notable user-visible changes
* Support has been added for Global Segmentation Offload (GSO) and
Global Receive Offload (GRO) under Linux (PR #1926, PR #2007,
also note that a number of other pull requests were submitted
towards this functionality).
* The `--bind-dev` option is now supported on macOS (PR #1945).
* Support has been added on macOS for the equivalent of the
`tcp_info` structure (#1411, PR #2008). This change results in
TCP window information being printed in human-readable output
and a number of TCP statistics being added to the JSON output.
* The iperf3 server provides more information about various error
conditions to the client (PR #1914, PR #1931, PR #1950).
* The maximum value for the `--set-mss` option is now 32K (PR
#1816). Note that this option still does not work reliably in
all cases.
* The cancellation type of child threads was changed from
`PTHREAD_CANCEL_ASYNCHRONOUS` to `PTHREAD_CANCEL_DEFERRED`
(#1991, #2003, PR #2004). This change fixes some hangs that
could occur at the end of a test.
* A race condition leading to a crash when closing sockets at the
end of a test has been fixed (PR #1990).
* iperf3 no longer erroneously prints that zero UDP packets were
lost during a lossy UDP test (#1984, PR #1988).
* A division by zero error has been avoided (PR #2002).
* The security posture of the `iperf3.service` file has been
improved considerably by updating a number of settings (PR
#1855). Note that this file is neither installed nor activated
by default.
* Notable developer-visible changes
* iperf3 finally performs `ldconfig` as a part of `make install`
on platforms that require it (#1995, PR #2005).
* Various bug fixes (PR #1960, PR #1981, PR #2001).
* Various documentation fixes (PR #1972, PR #1974, PR #1993).
3.20
* Notable user-visible changes
* Millisecond-resolution representations have been added to JSON
timestamps. (PR #1846)
* The reorder_seen metric, where available, is now available in
the JSON output. (PR #1278)
* A division by zero error has been fixed. (PR #1906)
* Some command-line options were not properly restricted to the
client or server; this problem has been fixed. (#1892 / PR #1894)
* The combination of `--udp` and `--file` is now explicitly
disallowed. (PR #1909)
* It is now possible to get both the full JSON result object as
well as streaming intermediate JSON result objects. This
functionality is enabled by using the new `--json-stream-full`
command-line flag, in addition to the existing `--json-stream`
flag (PR #1903)
* Sends with `--zerocopy` are now properly seeded with data
instead of being all-zeroes. (PR #1949)
* The `--server-max-duration` flag is now allowed on the iperf3 server to impose
a maximum duration on timed tests. (PR #1684)
* The `--rcv-timeout` flag is now ignored for `--bidir`
tests. This change prevents premature termination of
bidirectional tests. (#1766 / PR #1946)
* Several errors in the authentication code were uncovered when
building with OpenSSL 3.5.3 and later versions. These were
fixed. (#1951 / PR #1956)
* Various issues in the iperf3 manual page were fixed up. (PR
#1887, PR #1927, PR #1936, PR #1941, #1891 / PR #1952)
* Notable developer-visible changes
* A build failure with uClibc has been fixed. (#1888 / PR #1890)
* It is now possible to use the API to load RSA keys from a file.
(PR #1889)
* Some calls to sprintf() were replaced with calls to
snprintf(). There were no hazards in the code as written, but
this change might help silence some compiler warnings and
potentially prevent future vulnerabilities. (PR #1929)
* Proper error handling has been added to the `unit_atoX()`
functions. (PR #1394)
* Some memory handling errors in `t_auth` were fixed. (PR #1953)
* Minor enhancements and fixes to GitHub Actions workflows (PR
#1919, PR #1928, PR #1942).
3.19.1
* Notable user-visible changes
* SECURITY NOTE: Thanks to Han Lee with Apple Information Security
for finding and reporting several memory errors
including a buffer overflow within the
`--skip-rx-copy` option, and two memory errors
within authentication, including a heap overflow
in the plaintext password and an assert.
* An off-by-one heap overflow has been fixed in authentication.
(CVE-2025-54349, ESNET-SECADV-2025-0003)
* An assert in authentication has been removed. (CVE-2025-54350,
ESNET-SECADV-2025-0002)
* A buffer overflow in the `--skip-rx-copy` option for zerocopy
has been fixed. (CVE-2025-54351, ESNET-SECADV-2025-0001)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 4c67560087ebfa7267d1d2cd5d6fbf37c92bdc09
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:08 2026 +0200
libcap-ng: Update to version 0.9.3
- Update from version 0.9.2 to 0.9.3
- Update of rootfile
- Changelog
0.9.3
- In cap-audit, split capability analysis across init and runtime phases
- If vm_sockets.h and others are not available, remove "netcap --advanced"
- Add netcap --list-interfaces & --interface to restrict output to 1 interface
- Put bash completions in /usr/share/bash-completion/completions/
- capng_change_id now detects it added setpcap and drops only if it added it
- Add capng_stage_additional_groups and its support in capng_change_id
- Add CAPNG_APPLY_BOUNDING flag to capng_change_id to direct it to apply changes
- filecap: add path-to-fd consistency check in capability write path
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 9cb9425d58dc40f74aeffd3dfc70b7f5391bc407
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:43:53 2026 +0200
core202: Ship iproute2
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit ba84efac95a427a67c8734b0b0b428c8d567d8ce
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:43:54 2026 +0200
core202: Ship libcap
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 225a5d2a7c1ffcf5b037eb01950eeee7b57c6983
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:07 2026 +0200
iproute2: Update to version 7.0.0
- Update from version 6.17.0 to 7.0.0
- Update of rootfile
- Changelog is not provided. Details of changes for versions 7.0.0, 6.19.0 and 6.18.0
can be found from the git commit changes
https://git.kernel.org/pub/scm/network/iproute2/iproute2.git
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit f08224bea8e1d8b3f4b65bb78e6110c414d982c5
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:09 2026 +0200
libcap: Update to version 2.78
- Update from version 2.77 to 2.78
- Update of rootfile
- Changelog
2.78
Fix mistakes in setcap for reporting errors: report them with the appropriate filename.
Thanks to Nikolas for reporting these in Bug 220245.
Fix bug in cap.GetIAB() reported and fix provided by Garret Kelly via Bug 220420.
Improve libcap managed memory allocation and support CHERI RISC-V. Reported with fix
by Chris Hofer via Bug 220415.
Add (unverified) support for the PSX mechanism on microblaze, arc, openrisc and xtensa
architectures. Thanks to Tom Petazzoni for including these in Bug 219915
Please let me know if these work or fail on these architectures.
Add C++ support to the run a .so file as an executable mechanism employed by libcap.so,
libpsx.so and pam_cap.so. Not really necessary for the libcap build tree, but wanted
to capture the details of my recent update to a Stackoverflow answer on the topic.
Use BUILD_LDFLAGS when compiling _makenames fix contributed by Khem Raj.
Fix broke some builds, so will revert and apply a more comprehensive fix.
Fixed sendmail issue discussion link. Thanks to Ariel Otilibili for noticing the
breakage and contributing a fix.
Some debugging fixes for use of the kdebug/ testing setup
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit ea3914daca188db2794f215d3f506effff644f0e
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:43:55 2026 +0200
core202: Ship libgcrypt
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit c07e8bf67d661bef458f538fbe8b2334fa0605c1
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:10 2026 +0200
libgcrypt: Update to version 1.12.2
- Update from version 1.12.0 to 1.12.2
- Update of rootfile
- Changelog
1.12.2
* Bug fixes:
- Fix possible ECDH buffer overwrite with zeroes. [T8211]
- Add a missing bounds check to the Dilithium context handling.
[T8208]
- Add point validation when using the new KEM interface. [T8212]
* Other:
- Fix the dead-code of stronger_key_check for RSA. [T8171]
1.12.1
* Bug fixes:
- Fix for aSmartOS (Solaris) build problem due to AVX2 changes.
[T8071]
- Fix a regression in gcry_mpi_ec_curve_point. [T8080]
- Make sure to have MPI limbs pre-allocated in ECC and fix
Weierstrass curve use with PUBKEY_FLAG_PARAM. [T8094]
* Other:
- Add MPI configuration for NetBSD m68k. [T8069]
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 05a210699f7b9e388b11d0a96c40a979737ff6aa
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:43:56 2026 +0200
core202: Ship libjpeg
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit a53cbf01c303872960a429bfb20b6e0564ac53dd
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:11 2026 +0200
libjpeg: Update to version 3.1.4.1
- Update from version 3.1.3 to 3.1.4.1
- No change to rootfile
- Changelog
3.1.4.1
1. Fixed multiple issues, some long-standing and some that were regressions
introduced in 3.1.4, that made the CMake package config files non-relocatable
and broke the `--prefix` option to `cmake --install`.
3.1.4
1. Fixed an issue in the TurboJPEG 2.x compatibility wrapper whereby, if a
calling program attempted to decompress a lossless JPEG image using
`tjDecompress2()` with decompression scaling, the decompressed image was
unexpectedly unscaled. This could have led to a buffer overrun if the caller
allocated the packed-pixel destination buffer based on the assumption that the
decompressed image would be scaled down.
2. The SIMD dispatchers now use `getauxval()` or `elf_aux_info()`, if
available, to detect support for Neon and AltiVec instructions on AArch32 and
PowerPC Linux, Android, and *BSD systems.
3. Hardened the libjpeg API against hypothetical applications that may
erroneously set one of the exposed quantization table values to 0 just before
calling `jpeg_start_compress()`. (This would never happen in a
correctly-written program, because `jpeg_add_quant_table()` clamps all values
less than 1.)
4. Fixed a division-by-zero error that occurred when attempting to use the
jpegtran `-drop` option with a specially-crafted malformed drop image
(specifically an image in which one or more of the quantization table values
was 0.)
5. Fixed an issue in the TurboJPEG API library's data destination manager that
manifested as:
- a memory leak that occurred if a pre-allocated JPEG destination buffer
was passed to `tj3Compress*()` or `tj3Transform()`, `TJPARAM_NOREALLOC` was
unset, and it was necessary for the library to re-allocate the buffer to
accommodate the destination image, and
- a potential caller double free that occurred if pre-allocated JPEG
destination buffers were passed to `tj3Transform()`, multiple lossless
transform operations were performed, and it was necessary for the library to
re-allocate the second buffer to accommodate the second destination image.
6. Fixed an issue in `tj3Transform()` whereby, if `TJPARAM_SAVEMARKERS` was set
to 2 or 4, `TJXOPT_COPYNONE` was not specified, an ICC profile was extracted
from the source image, and another ICC profile was associated with the
TurboJPEG instance using `tj3SetICCProfile()`, both profiles were embedded in
the destination image. The documented API behavior is for `TJXOPT_COPYNONE` to
take precedence over `TJPARAM_SAVEMARKERS` and for `TJPARAM_SAVEMARKERS` to
take precedence over the associated ICC profile. Thus, `tj3Transform()` now
ignores the associated ICC profile unless `TJXOPT_COPYNONE` is specified or
`TJPARAM_SAVEMARKERS` is set to something other than 2 or 4.
7. Fixed an oversight in the libjpeg API whereby, if a calling application
manually set `cinfo.Ss` (the predictor selection value) to a value less than 1
or greater than 7 after calling `jpeg_enable_lossless()` and prior to calling
`jpeg_start_compress()`, an incorrect (all white) lossless JPEG image was
silently generated.
8. Further hardened the TurboJPEG Java API against hypothetical applications
that may erroneously pass huge values to one of the compression, YUV encoding,
decompression, YUV decoding, or packed-pixel image I/O methods, leading to
signed integer overflow in the JNI wrapper's buffer size checks that rendered
those checks ineffective.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 7fb6ed437ea71f46125d1e357d5acdfdeef4f8d0
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:12 2026 +0200
libmpc: Update to version 1.4.1
- Update from version 1.4.0 to 1.4.1
- Update of rootfile
- Changelog
1.4.1
- Bug fix: mpc_fr_div: Fix memory leak introduced in release 1.4.0.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 69587b41b74929c56e6ff74b0225e303de5fc435
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:13 2026 +0200
libpng: Update to version 1.6.58
- Update from version 1.6.56 to 1.6.58
- Update of rootfile
- CVE fix applied in 1.6.57
- Changelog
1.6.58
Fixed a regression introduced in version 1.6.56 that caused `png_get_PLTE`
to return stale palette data after applying gamma and background transforms
in-place.
(Reported by ralfjunker <ralfjunker@users.noreply.github.com>.)
1.6.57
Fixed CVE-2026-34757 (medium severity):
Use-after-free in `png_set_PLTE`, `png_set_tRNS` and `png_set_hIST`
leading to corrupted chunk data and potential heap information disclosure.
Also hardened the append-style setters (`png_set_text`, `png_set_sPLT`,
`png_set_unknown_chunks`) against a theoretical variant of the same
aliasing pattern.
(Reported by Iv4n <Iv4n550@users.noreply.github.com>.)
Fixed integer overflow in rowbytes computation in read transforms.
(Contributed by Mohammad Seet.)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 788c8cf5de2307a6cbc0873bca7cb89d8a241965
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:14 2026 +0200
libsodium: Update to version 1.0.22
- Update from version 1.0.21 to 1.0.22
- Update of rootfile
- Patch fix for arm build has been integrated into the tarball in this version
- Changelog
1.0.22
- Post-quantum key encapsulation is now available. ML-KEM768, the
NIST-standardized lattice-based KEM, is accessible through the
`crypto_kem_mlkem768_*()` functions.
- X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for protection
against both classical and quantum adversaries, is available through the
`crypto_kem_*()` functions. X-Wing is the recommended KEM for most
applications.
- SHA-3 hash functions are now available as `crypto_hash_sha3256_*()`
and `crypto_hash_sha3512_*()`, with both one-shot and streaming APIs.
1.0.21-stable
- Performance: NEON optimizations for Argon2 on ARM platforms.
- Performance: SHA3 (Keccak1600) now leverages ARM SHA3 instructions when
available on ARM platforms.
- Performance: WebAssembly SIMD implementations of Argon2 have been added.
- Emscripten: LTO is now disabled. With Emscripten 4, LTO produced
WebAssembly modules with functions that ran significantly slower than
without it.
- Emscripten: a new option allows compilation with SIMD support.
- Emscripten: native ESM module generation is now supported.
- JavaScript sumo builds now allow up to 80 MiB memory usage, so that
`crypto_pwhash` with the interactive settings can be used in pure
JavaScript, not just WebAssembly.
- XOF state alignment has been relaxed.
- `crypto_core_keccak1600_state` has been added.
- Export missing `crypto_ipcrypt_nd_keygen()` helper function.
- `crypto_auth_hmacsha256_init` and `crypto_auth_hmacsha512_init` now
accept NULL key pointers (with a zero key length), for consistency with
other `_init` functions.
- apple-xcframework: headers are now in a Clibsodium subdirectory
to prevent module.modulemap collisions with other xcframeworks.
- Fixed compilation with GCC on aarch64 and gcc 4.x.
- On aarch64, aes256-gcm is now enabled even when not using clang,
including MSVC.
- Added compatibility with Visual Studio 2026 when toolsets do not
define PlatformToolsetVersion.
- Libsodium can be directly used as a dependency in a Zig project.
- Performance of MSVC builds has been improved.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit a419c7397d3b5a7afc8fb1a7cb751cf7fe4bf6a5
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:43:57 2026 +0200
core202: Ship libxml2
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit f9a5bfb023d01435681037dc1719ddadc858b1b8
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:15 2026 +0200
libxml2: Update to version 2.15.3
- Update from version 2.15.1 to 2.15.3
- Update of rootfile
- Five CVE fixes applied in 2.15.2
- Changelog
2.15.3
Security
- parser: Pass userData to SAX text callbacks in xmlParseReference (type-confusion)
- entities: copy children in xmlCopyEntity
- c14n: Fix Type confusion in xmlC14NProcessAttrsAxis
- python: Do not decref string after adding to the list (double-free / use-after-free)
- c14n: Reuse tmp_str, xmlStrcat reallocates *cur (double-free)
Improvements
- schemas: Fix relative schemaLocation resolution in XSI assembly in streaming mode
- xmlreader: propagate reader resource loaders to validator parsers
- python: Make python bindings python2 compatible
- xmlregexp: Fix escape-sequence character range matching
- xmlreader: Free input in xmlReaderForFd (memory-leak)
- xmlstring: Free cur on every error for xmlStrncat (memory-leak)
- catalog: Free xmlCatalogResolveCache on cleanup (memory leak)
- Fix nanohttp.c build when --without-output
- test: fix mismatched signed/unsigned comparison
2.15.2
Security
- CVE-2026-1757 fix: Memory leak in xmllint Shell - shell.c
- CVE-2026-0990 fix: Prevent infinite recursion in
xmlCatalogListXMLResolve
- CVE-2026-0992 fix: Exponential behavior when handling
- parser: Fix infinite loop in xmlCtxtParseContent
- CVE-2025-10911 libxslt related: Ignore next/prev of documents when
traversing XPath
- CVE-2026-0989 fix: Add RelaxNG include limit
- xmlIO: use size_t for buffer size reallocation
- uri: fix signed integer overflow in xmlBuildRelativeURISafe
- schematron: fix memory leaks on error paths in xmlSchematronParseRule
- catalog: fix stack overflow from self-referencing SGML CATALOG entries
Improvements
- fuzz: Make fuzzy encoding match more lenient
- Fix C14N type confusion
- meson: Fix build with Meson < 1.3
- xmllint: Use zlib directly
- xmllint: New option to separate xpath results using null, --xpath0
- autotools: Make valgrind actually check for leaks
- meson: Add valgrind test setup
- Fix xmlOutputBufferGetContent output when encoder is set
- threads: don't force _WIN32_WINNT to Vista if it's set to a higher value
- dist: Add generated documentation to the dist as "dist-doc" folder
to simplify downstream packaging of doc
- Fix xmlRemoveEntity removing from wrong hash table
- use duplicating variant in relaxng to mitigate UAF
- Fix memory leak in xmlTextWriterStartAttributeNS on OOM
- meson: remove hardcoded buildtype=debug default
- Fix memory leak of prefix in xmlTextWriterStartElementNS()
- writer: Add a few extra NULL checks to avoid memory leaks on corrupt
writer path.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit ef9dfe511d1ec8b4d0de3df388a11119aae56995
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:43:58 2026 +0200
core202: Ship parted
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit a5fe059ed9b086b90ea59c002244e957784f179d
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:16 2026 +0200
parted: Update to version 3.7
- Update from version 3.6 to 3.7
- Update of rootfile
- Changelog
3.7
Promoting alpha release to stable release 3.7
3.6.37
New Features
hurd: Support USB device names
Bug Fixes
Stop adding boot code into the MBR if it's zero when updating an
existing msdos partition table.
disk.c: Update metadata after reading partition table
Fix initialization of atr_c_locale inside PED_ASSERT
nilfs2: Fixed possible sigsegv in case of corrupted superblock
libparted: Do not detect ext4 without journal as ext2
libparted: Fix dvh disklabel unhandled exception
libparted: Fix sun disklabel unhandled exception
parted: fix do_version declaration to work with gcc 15
libparted: Fail early when detecting nilfs2
doc: Document IEC unit behavior in the manpage
parted: Print the Fixing... message to stderr
docs: Finish setup of libparted API docs
libparted: link libparted-fs-resize.so to libuuid
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 4b1f0eba0f221db092172cd894288c7a1115ed29
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:17 2026 +0200
pciutils: Update to version 3.15.0
- Update from version 3.14.0 to 3.15.0
- Update of rootfile
- Changelog
3.15.0
* New capabilities are decoded: MMIO Register Block Locator,
Flit Error Injection, Flit Logging.
* Decoding of PCIe capabilities updated to Gen7.
* Both lspci and setpci warn when the "-s" or "-d" option
is given multiple times.
* Improved display of interrupts in "lspci -vv". Routing of
interrupt pins is shown only if the pins are not disabled.
Routing of MSI(X) interrupts is shown when available
(which is currently supported by the sysfs back-end only).
* Minor improvements to Windows back-ends.
* The dump back-end can read the dump from stdin when given "-"
as a file name.
* FreeBSD supports 64-bit addresses.
* Added README.DJGPP.
* Updated pci.ids.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 127344b9d4f5944d67c56a0fdf5e19fb08ea1b53
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:43:59 2026 +0200
core202: Ship texinfo
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 4952b1c46cfddf7b0d32dbcefe4f513c87f530da
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 13:44:18 2026 +0200
texinfo: Update to version 7.3
- Update from version 7.2 to 7.3
- Update of rootfile
- Changelog
7.3
* Language
. new commands for title page creation: @documentinfo, @publication,
and @maketitle. you can use these instead of explicit formatting
inside @titlepage.
. you can use heading commands such as @heading after @node. nodes
defined this way are not part of the chapter structure of the document
(unlike if @section etc. were used).
. new command @xrefname can follow @node in place of a heading command.
this is for when you do not want any heading at all to be displayed.
. new command @namedanchor for defining text to be used for a cross-
reference to an anchor (with @xrefautomaticsectiontitle on)
. new command @thispart to print part name in headings or footings
. deprecate @clickstyle
. if there is no @documentlanguage, the language is unspecified, rather
than en_US. (texi2any will still use English strings by default,
but will not put en_US in the output, depending on output format.)
* texi2any
. texi2any uses the Perl extensions in C for converters when possible,
which results in a large speed-up for HTML output.
set the `TEXINFO_XS_CONVERT' environment variable to 0 for pure Perl.
. optional experimental texi2any program implementation in C embedding Perl.
use --enable-using-c-texi2any to prefer the C implementation.
. report leading directory components of input file names in messages
(this reverses 6.8 release change, 2021).
. when CHECK_NORMAL_MENU_STRUCTURE is on, give the line number of the
problem menu entry
. DUMP_TREE should now be a file name, or - to output to standard error
. remove USE_REL_REV variable; former effect is now always on
. (API only) rename LINKS_BUTTONS customization variable to LINKS_DIRECTIONS
. (API only) rename space direction ' ' to 'Space'
. HTML output:
. the HIGHLIGHT_SYNTAX variable can be used for syntax highlighting
of code samples. this feature was present in earlier releases but
is no longer marked as experimental.
. do not wrap the contents of <style> elements in an HTML comment,
as this is no longer needed for browser compatibility
. the --transliterate-file-names option (which sets the
TRANSLITERATE_FILE_NAMES variable) is now off by default.
. when creating redirection files with --node-files (the default),
ignore the settings of TRANSLITERATE_FILE_NAMES, BASEFILENAME_LENGTH,
and EXTENSION.
. likewise, ignore these variables for links to external manuals
(they are still used for the file names generated for the
converted manual content).
. the default setting of WORDS_IN_PAGE has changed from 300 to 200.
this means that a navigation panel is more likely to be output at
the bottom of fairly short nodes.
. use the last @printindex in the input file for the Index direction
. only output 'accesskey' attributes when splitting by node
. for locations of external manuals, use files ending with the
.cnf extension in the htmlxref.d directories (in addition to files
called htmlxref.cnf). this should make it easier to combine
information on HTML cross-references from different sources.
. in an htmlxref file, you can explicity trigger a link to a local
manual by using an empty URL
. you can set FORMAT_MENU to 'menu_no_detailmenu' to omit an
automatically generated @detailmenu from the Top node
. info.js (with INFO_JS_DIR) fixes and improvements:
. avoid pop-up over Top node and display the correct title
. --internal-links outputs more types of internal link, including
anchors, sections and floats. the possible type names reported
in the second column have changed.
. USE_NEXT_HEADING_FOR_LONE_NODE removed. former effect is now
always on.
. (API only) remove the buttons specifications with scalar references,
direction text or functions references should be used instead
. (API only) remove the Texinfo::TeX4HT customization package
. Info output:
. new experimental variable INFO_MATH_IMAGES allows outputting
images for mathematics notation
. LaTeX output:
. use UTF-8 encoding for output by default, regardless of input
encoding. override with OUTPUT_ENCODING_NAME.
. XML output:
. use HTML entities names for @H and @dotaccent accents types
* texinfo.tex
. add entries in PDF outline for index initials
. use Unicode in PDF outline for input documents encoded in UTF-8
. '@set xrefautomaticsectiontitle on' does not affect cross-references
to anchors, matching the HTML output
. separate adjacent footnote markers with commas, e.g. '1, 2' not '1 2'
* info
. you can use hook scripts to handle an info manual not being found.
these hooks can provide a message to the user with information on
how to install the manual.
. when run as 'info TOPIC INDEX-ENTRY', prefer index entries that
refer to the node that would be loaded by 'info TOPIC'. this aids
in retrieving documentation of command-line options when multiple
programs are documented in the same manual.
for example, 'info cp -- -s' goes to the documentation of the -s
option for the cp program in the coreutils manual, rather than the
-s option of any other program.
. list all customizable variables in help buffer including how they
got their values
. reuse introductory text in dir file rather than supplying our own text,
as was the case in older version of info and is the case in Emacs
. removed fallback if a node is not found in a cross-reference to
searching for a file of the same name. e.g. "* Foo::" in a menu
would go to a file called "Foo", if no node called "Foo" was found.
now only the node is looked for.
. new variable 'raw-utf8-output' supports viewing UTF-8 Info files
on MS-Windows
* Distribution
. automake 1.18.1, autoconf 2.72, gettext 0.26, libtool 2.5.4
. support for DJGPP removed
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 80380d1f78ce03a1b7cbd5dd71db102a0be39032
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 20:05:35 2026 +0200
libarchive: Update to version 3.8.7
- Update from version 3.8.6 to 3.8.7
- Update of rootfile
- Changelog
3.8.7
CAB: fix NULL pointer dereference during skip (#2900)
CAB: Fix Heap OOB Write in CAB LZX decoder (#2919)
cpio: various fixes and improvements (#2899, #2908, #2910, #2939)
contrib/untar: fix out-of-bounds read (#2903)
iso9660: fix undefined behavior (#2897)
iso9660: fix posibble heap buffer overflow on 32-bit systems (#2934)
libarchive: fix handling of option failures (#2871)
libarchive: do not continue with truncated numbers (#2911)
libarchive: lzop and grzip filter support (#2947)
RAR: fix LZSS window size mismatch after PPMd block (#2898)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit afe44031d1278c7a5fbb9f48b6bc9bfa0401f809
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Sun Apr 26 23:37:41 2026 +0200
expat: Update to version 2.8.0
- Update from version 2.7.5 to 2.8.0
- Update of rootfile
- CVE fix
- Changelog
2.8.0
Security fixes:
47 1183 CVE-2026-41080 -- The existing hash flooding protection
(based on SipHash) only used 4 to 8 bytes of entropy for
a salt, when 16 bytes of salt are supported by the
implementation of SipHash used by Expat. Now full 16 bytes
of entropy are used to improve protection against hash
flooding attacks.
Existing API function XML_SetHashSalt is now deprecated
because of its limitations, and its use should be
considered a vulnerability. Please either use the new API
function XML_SetHashSalt16Bytes (with known-high-quality
entropy input only!) instead, or leave the derivation of
a 16-bytes hash salt from high quality entropy to Expat's
internal machinery (by *not* calling either of the two
XML_SetHashSalt* functions).
Bug fixes:
1188 Avoid propagating /dev/urandom file descriptor to child
processes
1193 Fix interpretation of `errno` after randomization calls
1195 Avoid assuming uint8_t is a character type
Other changes:
1180 1199 Add support for `getentropy(3)` as a source of entropy;
this helps with protecting against hash flooding attacks,
in particular with WASI SDK (where none of the other
entropy sources supported by libexpat are available).
1200 Autotools: Add `--without-arc4random` and
`--without-arc4random-buf`
1200 Autotools: Make `./configure` output report on available
high quality entropy sources
1173 Autotools|macOS: Sync CMake templates with CMake 4.3.0
1201 Autotools|CMake: Improve checks for `arc4random` and
`arc4random_buf` e.g. with modern glibc
1201 CMake: Report on availability of functions `arc4random` and
`arc4random_buf`
1201 CMake: Mark entropy related build switches as advanced
1189 ..
1203 1204 Extract new files from entropy extraction code
1194 Stop duplicating C tests 1:1 as C++ ("runtests_cxx")
1202 Fix a comment typo in expat_external.h
1187 Fix grammar in compile error message
1192 examples: Build warning-free with -Wwrite-strings
1171 tests: Address harmless warning from Coverity
1170 1176 Sync file headers
1190 1206 Version info bumped from 12:3:11 (libexpat*.so.1.11.3)
to 13:0:12 (libexpat*.so.1.12.0); see https://verbump.de/
for what these numbers do
Infrastructure:
1166 1167 ..
1172 1175 ..
1178 1179 ..
1185 1205 CI: Make Perl XML::Parser integration tests run against
both version 2.47 and the latest release 2.58
1169 CI: Adapt to breaking changes regarding Inno Setup
1173 CI: Adapt to breaking changes regarding CMake
1174 CI: Include public corpus of fuzzer `xml_lpm_fuzzer` with
regression testing
1181 1182 CI: Bump WASI SDK from 30 to 32
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/common/expat | 20 ++--
config/rootfiles/common/glib | 18 ++--
config/rootfiles/common/harfbuzz | 14 +--
config/rootfiles/common/iproute2 | 5 +
config/rootfiles/common/libarchive | 2 +-
config/rootfiles/common/libcap | 4 +-
config/rootfiles/common/libcap-ng | 3 +-
config/rootfiles/common/libgcrypt | 2 +-
config/rootfiles/common/libmpc | 2 +-
config/rootfiles/common/libpng | 2 +-
config/rootfiles/common/libsodium | 6 +-
config/rootfiles/common/libxml2 | 2 +-
config/rootfiles/common/man-pages | 6 ++
config/rootfiles/common/parted | 1 +
config/rootfiles/common/pciutils | 2 +-
config/rootfiles/common/texinfo | 107 ++++++++++++++-------
.../{oldcore/103 => core/202}/filelists/coreutils | 0
.../{oldcore/118 => core/202}/filelists/glib | 0
.../{oldcore/106 => core/202}/filelists/iproute2 | 0
.../{oldcore/104 => core/202}/filelists/libcap | 0
.../{oldcore/105 => core/202}/filelists/libgcrypt | 0
.../{oldcore/107 => core/202}/filelists/libjpeg | 0
.../{oldcore/101 => core/202}/filelists/libxml2 | 0
.../{oldcore/124 => core/202}/filelists/parted | 0
.../{oldcore/100 => core/202}/filelists/sed | 0
.../{oldcore/190 => core/202}/filelists/texinfo | 0
config/rootfiles/packages/git | 1 +
lfs/coreutils | 4 +-
lfs/expat | 4 +-
lfs/git | 6 +-
lfs/glib | 6 +-
lfs/harfbuzz | 4 +-
lfs/iana-etc | 4 +-
lfs/iperf3 | 8 +-
lfs/iproute2 | 6 +-
lfs/libarchive | 4 +-
lfs/libcap | 6 +-
lfs/libcap-ng | 4 +-
lfs/libgcrypt | 4 +-
lfs/libjpeg | 4 +-
lfs/libmpc | 4 +-
lfs/libpng | 4 +-
lfs/libsodium | 7 +-
lfs/libxml2 | 6 +-
lfs/man-pages | 4 +-
lfs/parted | 10 +-
lfs/pciutils | 6 +-
lfs/sed | 6 +-
lfs/texinfo | 6 +-
....0.21_fix_compilation_with_GCC_on_aarch64.patch | 33 -------
50 files changed, 187 insertions(+), 160 deletions(-)
copy config/rootfiles/{oldcore/103 => core/202}/filelists/coreutils (100%)
copy config/rootfiles/{oldcore/118 => core/202}/filelists/glib (100%)
copy config/rootfiles/{oldcore/106 => core/202}/filelists/iproute2 (100%)
copy config/rootfiles/{oldcore/104 => core/202}/filelists/libcap (100%)
copy config/rootfiles/{oldcore/105 => core/202}/filelists/libgcrypt (100%)
copy config/rootfiles/{oldcore/107 => core/202}/filelists/libjpeg (100%)
copy config/rootfiles/{oldcore/101 => core/202}/filelists/libxml2 (100%)
copy config/rootfiles/{oldcore/124 => core/202}/filelists/parted (100%)
copy config/rootfiles/{oldcore/100 => core/202}/filelists/sed (100%)
copy config/rootfiles/{oldcore/190 => core/202}/filelists/texinfo (100%)
delete mode 100644 src/patches/libsodium-1.0.21_fix_compilation_with_GCC_on_aarch64.patch
Difference in files:
diff --git a/config/rootfiles/common/expat b/config/rootfiles/common/expat
index 93b23090b..611c2a203 100644
--- a/config/rootfiles/common/expat
+++ b/config/rootfiles/common/expat
@@ -2,21 +2,21 @@
#usr/include/expat.h
#usr/include/expat_config.h
#usr/include/expat_external.h
-#usr/lib/cmake/expat-2.7.5
-#usr/lib/cmake/expat-2.7.5/expat-config-version.cmake
-#usr/lib/cmake/expat-2.7.5/expat-config.cmake
-#usr/lib/cmake/expat-2.7.5/expat-noconfig.cmake
-#usr/lib/cmake/expat-2.7.5/expat.cmake
+#usr/lib/cmake/expat-2.8.0
+#usr/lib/cmake/expat-2.8.0/expat-config-version.cmake
+#usr/lib/cmake/expat-2.8.0/expat-config.cmake
+#usr/lib/cmake/expat-2.8.0/expat-noconfig.cmake
+#usr/lib/cmake/expat-2.8.0/expat.cmake
#usr/lib/libexpat.la
#usr/lib/libexpat.so
usr/lib/libexpat.so.1
-usr/lib/libexpat.so.1.11.3
+usr/lib/libexpat.so.1.12.0
#usr/lib/pkgconfig/expat.pc
#usr/share/doc/expat
-#usr/share/doc/expat-2.7.5
-#usr/share/doc/expat-2.7.5/ok.min.css
-#usr/share/doc/expat-2.7.5/reference.html
-#usr/share/doc/expat-2.7.5/style.css
+#usr/share/doc/expat-2.8.0
+#usr/share/doc/expat-2.8.0/ok.min.css
+#usr/share/doc/expat-2.8.0/reference.html
+#usr/share/doc/expat-2.8.0/style.css
#usr/share/doc/expat/AUTHORS
#usr/share/doc/expat/changelog
#usr/share/man/man1/xmlwf.1
diff --git a/config/rootfiles/common/glib b/config/rootfiles/common/glib
index cd4ef61da..cd96e6f7a 100644
--- a/config/rootfiles/common/glib
+++ b/config/rootfiles/common/glib
@@ -106,6 +106,8 @@ usr/include/glib-2.0/gio/gdebugcontroller.h
#usr/include/glib-2.0/gio/gioscheduler.h
#usr/include/glib-2.0/gio/giostream.h
#usr/include/glib-2.0/gio/giotypes.h
+#usr/include/glib-2.0/gio/giptosmessage.h
+#usr/include/glib-2.0/gio/gipv6tclassmessage.h
#usr/include/glib-2.0/gio/glistmodel.h
#usr/include/glib-2.0/gio/gliststore.h
#usr/include/glib-2.0/gio/gloadableicon.h
@@ -337,22 +339,22 @@ usr/include/glib-2.0/gio/gdebugcontroller.h
#usr/lib/glib-2.0/include/glibconfig.h
#usr/lib/libgio-2.0.so
usr/lib/libgio-2.0.so.0
-usr/lib/libgio-2.0.so.0.8700.0
+usr/lib/libgio-2.0.so.0.8800.0
#usr/lib/libgirepository-2.0.so
usr/lib/libgirepository-2.0.so.0
-usr/lib/libgirepository-2.0.so.0.8700.0
+usr/lib/libgirepository-2.0.so.0.8800.0
#usr/lib/libglib-2.0.so
usr/lib/libglib-2.0.so.0
-usr/lib/libglib-2.0.so.0.8700.0
+usr/lib/libglib-2.0.so.0.8800.0
#usr/lib/libgmodule-2.0.so
usr/lib/libgmodule-2.0.so.0
-usr/lib/libgmodule-2.0.so.0.8700.0
+usr/lib/libgmodule-2.0.so.0.8800.0
#usr/lib/libgobject-2.0.so
usr/lib/libgobject-2.0.so.0
-usr/lib/libgobject-2.0.so.0.8700.0
+usr/lib/libgobject-2.0.so.0.8800.0
#usr/lib/libgthread-2.0.so
usr/lib/libgthread-2.0.so.0
-usr/lib/libgthread-2.0.so.0.8700.0
+usr/lib/libgthread-2.0.so.0.8800.0
#usr/lib/pkgconfig/gio-2.0.pc
#usr/lib/pkgconfig/gio-unix-2.0.pc
#usr/lib/pkgconfig/girepository-2.0.pc
@@ -375,8 +377,8 @@ usr/lib/libgthread-2.0.so.0.8700.0
#usr/share/gdb/auto-load
#usr/share/gdb/auto-load/usr
#usr/share/gdb/auto-load/usr/lib
-#usr/share/gdb/auto-load/usr/lib/libglib-2.0.so.0.8700.0-gdb.py
-#usr/share/gdb/auto-load/usr/lib/libgobject-2.0.so.0.8700.0-gdb.py
+#usr/share/gdb/auto-load/usr/lib/libglib-2.0.so.0.8800.0-gdb.py
+#usr/share/gdb/auto-load/usr/lib/libgobject-2.0.so.0.8800.0-gdb.py
#usr/share/gettext/its
#usr/share/gettext/its/gschema.its
#usr/share/gettext/its/gschema.loc
diff --git a/config/rootfiles/common/harfbuzz b/config/rootfiles/common/harfbuzz
index 799c2ddc1..63fe01c89 100644
--- a/config/rootfiles/common/harfbuzz
+++ b/config/rootfiles/common/harfbuzz
@@ -52,25 +52,25 @@ usr/include/harfbuzz/hb-script-list.h
#usr/lib/cmake/harfbuzz/harfbuzz-config.cmake
#usr/lib/libharfbuzz-cairo.so
usr/lib/libharfbuzz-cairo.so.0
-usr/lib/libharfbuzz-cairo.so.0.61400.0
+usr/lib/libharfbuzz-cairo.so.0.61420.0
#usr/lib/libharfbuzz-gobject.so
usr/lib/libharfbuzz-gobject.so.0
-usr/lib/libharfbuzz-gobject.so.0.61400.0
+usr/lib/libharfbuzz-gobject.so.0.61420.0
#usr/lib/libharfbuzz-gpu.so
usr/lib/libharfbuzz-gpu.so.0
-usr/lib/libharfbuzz-gpu.so.0.61400.0
+usr/lib/libharfbuzz-gpu.so.0.61420.0
#usr/lib/libharfbuzz-raster.so
usr/lib/libharfbuzz-raster.so.0
-usr/lib/libharfbuzz-raster.so.0.61400.0
+usr/lib/libharfbuzz-raster.so.0.61420.0
#usr/lib/libharfbuzz-subset.so
usr/lib/libharfbuzz-subset.so.0
-usr/lib/libharfbuzz-subset.so.0.61400.0
+usr/lib/libharfbuzz-subset.so.0.61420.0
#usr/lib/libharfbuzz-vector.so
usr/lib/libharfbuzz-vector.so.0
-usr/lib/libharfbuzz-vector.so.0.61400.0
+usr/lib/libharfbuzz-vector.so.0.61420.0
#usr/lib/libharfbuzz.so
usr/lib/libharfbuzz.so.0
-usr/lib/libharfbuzz.so.0.61400.0
+usr/lib/libharfbuzz.so.0.61420.0
#usr/lib/pkgconfig/harfbuzz-cairo.pc
#usr/lib/pkgconfig/harfbuzz-gobject.pc
#usr/lib/pkgconfig/harfbuzz-gpu.pc
diff --git a/config/rootfiles/common/iproute2 b/config/rootfiles/common/iproute2
index 804c6bf6c..12fa8a968 100644
--- a/config/rootfiles/common/iproute2
+++ b/config/rootfiles/common/iproute2
@@ -12,10 +12,12 @@ sbin/bridge
sbin/ctstat
sbin/dcb
sbin/devlink
+sbin/dpll
sbin/genl
sbin/ifstat
sbin/ip
sbin/lnstat
+sbin/netshaper
sbin/nstat
sbin/rdma
sbin/routel
@@ -35,6 +37,7 @@ sbin/vdpa
#usr/lib/tc/paretonormal.dist
#usr/sbin/arpd
#usr/share/bash-completion/completions/devlink
+#usr/share/bash-completion/completions/dpll
usr/share/bash-completion/completions/tc
#usr/share/man/man3/libnetlink.3
#usr/share/man/man7/tc-hfsc.7
@@ -62,6 +65,7 @@ usr/share/bash-completion/completions/tc
#usr/share/man/man8/devlink-sb.8
#usr/share/man/man8/devlink-trap.8
#usr/share/man/man8/devlink.8
+#usr/share/man/man8/dpll.8
#usr/share/man/man8/genl.8
#usr/share/man/man8/ifstat.8
#usr/share/man/man8/ip-address.8
@@ -92,6 +96,7 @@ usr/share/bash-completion/completions/tc
#usr/share/man/man8/ip-xfrm.8
#usr/share/man/man8/ip.8
#usr/share/man/man8/lnstat.8
+#usr/share/man/man8/netshaper.8
#usr/share/man/man8/nstat.8
#usr/share/man/man8/rdma-dev.8
#usr/share/man/man8/rdma-link.8
diff --git a/config/rootfiles/common/libarchive b/config/rootfiles/common/libarchive
index 51c853f09..e39dfb50d 100644
--- a/config/rootfiles/common/libarchive
+++ b/config/rootfiles/common/libarchive
@@ -7,7 +7,7 @@
#usr/lib/libarchive.la
#usr/lib/libarchive.so
usr/lib/libarchive.so.13
-usr/lib/libarchive.so.13.8.6
+usr/lib/libarchive.so.13.8.7
#usr/lib/pkgconfig/libarchive.pc
#usr/share/man/man1/bsdcat.1
#usr/share/man/man1/bsdcpio.1
diff --git a/config/rootfiles/common/libcap b/config/rootfiles/common/libcap
index 1b470d075..a3e2752df 100644
--- a/config/rootfiles/common/libcap
+++ b/config/rootfiles/common/libcap
@@ -6,10 +6,10 @@ sbin/setcap
#usr/include/sys/psx_syscall.h
#usr/lib/libcap.so
usr/lib/libcap.so.2
-usr/lib/libcap.so.2.77
+usr/lib/libcap.so.2.78
#usr/lib/libpsx.so
#usr/lib/libpsx.so.2
-usr/lib/libpsx.so.2.77
+usr/lib/libpsx.so.2.78
#usr/lib/pkgconfig/libcap.pc
#usr/lib/pkgconfig/libpsx.pc
#usr/lib/security
diff --git a/config/rootfiles/common/libcap-ng b/config/rootfiles/common/libcap-ng
index 683ed3bb3..33e96b97a 100644
--- a/config/rootfiles/common/libcap-ng
+++ b/config/rootfiles/common/libcap-ng
@@ -1,7 +1,6 @@
#usr/bin/filecap
#usr/bin/netcap
#usr/bin/pscap
-#usr/etc/bash_completion.d/libcap-ng.bash_completion
#usr/include/cap-ng.h
#usr/lib/libcap-ng.la
#usr/lib/libcap-ng.so
@@ -13,6 +12,7 @@ usr/lib/libdrop_ambient.so.0
usr/lib/libdrop_ambient.so.0.0.0
#usr/lib/pkgconfig/libcap-ng.pc
#usr/share/aclocal/cap-ng.m4
+#usr/share/bash-completion/completions/libcap-ng.bash_completion
#usr/share/man/man3/capng_apply.3
#usr/share/man/man3/capng_apply_caps_fd.3
#usr/share/man/man3/capng_capability_to_name.3
@@ -32,6 +32,7 @@ usr/lib/libdrop_ambient.so.0.0.0
#usr/share/man/man3/capng_save_state.3
#usr/share/man/man3/capng_set_rootid.3
#usr/share/man/man3/capng_setpid.3
+#usr/share/man/man3/capng_stage_additional_groups.3
#usr/share/man/man3/capng_update.3
#usr/share/man/man3/capng_updatev.3
#usr/share/man/man7/libdrop_ambient.7
diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt
index 968c30cf4..5dc013833 100644
--- a/config/rootfiles/common/libgcrypt
+++ b/config/rootfiles/common/libgcrypt
@@ -5,7 +5,7 @@
#usr/lib/libgcrypt.la
#usr/lib/libgcrypt.so
usr/lib/libgcrypt.so.20
-usr/lib/libgcrypt.so.20.7.0
+usr/lib/libgcrypt.so.20.7.2
#usr/lib/pkgconfig/libgcrypt.pc
#usr/share/aclocal/libgcrypt.m4
#usr/share/info/gcrypt.info
diff --git a/config/rootfiles/common/libmpc b/config/rootfiles/common/libmpc
index 60e08c62d..172115082 100644
--- a/config/rootfiles/common/libmpc
+++ b/config/rootfiles/common/libmpc
@@ -3,6 +3,6 @@
#usr/lib/libmpc.la
#usr/lib/libmpc.so
usr/lib/libmpc.so.3
-usr/lib/libmpc.so.3.4.0
+usr/lib/libmpc.so.3.4.1
#usr/lib/pkgconfig/mpc.pc
#usr/share/info/mpc.info
diff --git a/config/rootfiles/common/libpng b/config/rootfiles/common/libpng
index c19c261c5..ef7d888f3 100644
--- a/config/rootfiles/common/libpng
+++ b/config/rootfiles/common/libpng
@@ -16,7 +16,7 @@ usr/lib/libpng.so
#usr/lib/libpng16.la
usr/lib/libpng16.so
usr/lib/libpng16.so.16
-usr/lib/libpng16.so.16.56.0
+usr/lib/libpng16.so.16.58.0
#usr/lib/pkgconfig/libpng.pc
#usr/lib/pkgconfig/libpng16.pc
#usr/share/man/man3/libpng.3
diff --git a/config/rootfiles/common/libsodium b/config/rootfiles/common/libsodium
index 423fabba1..02501408d 100644
--- a/config/rootfiles/common/libsodium
+++ b/config/rootfiles/common/libsodium
@@ -25,12 +25,16 @@
#usr/include/sodium/crypto_generichash_blake2b.h
#usr/include/sodium/crypto_hash.h
#usr/include/sodium/crypto_hash_sha256.h
+#usr/include/sodium/crypto_hash_sha3.h
#usr/include/sodium/crypto_hash_sha512.h
#usr/include/sodium/crypto_ipcrypt.h
#usr/include/sodium/crypto_kdf.h
#usr/include/sodium/crypto_kdf_blake2b.h
#usr/include/sodium/crypto_kdf_hkdf_sha256.h
#usr/include/sodium/crypto_kdf_hkdf_sha512.h
+#usr/include/sodium/crypto_kem.h
+#usr/include/sodium/crypto_kem_mlkem768.h
+#usr/include/sodium/crypto_kem_xwing.h
#usr/include/sodium/crypto_kx.h
#usr/include/sodium/crypto_onetimeauth.h
#usr/include/sodium/crypto_onetimeauth_poly1305.h
@@ -75,5 +79,5 @@
#usr/lib/libsodium.la
#usr/lib/libsodium.so
usr/lib/libsodium.so.26
-usr/lib/libsodium.so.26.3.0
+usr/lib/libsodium.so.26.4.0
#usr/lib/pkgconfig/libsodium.pc
diff --git a/config/rootfiles/common/libxml2 b/config/rootfiles/common/libxml2
index 779b249ea..5a4f85793 100644
--- a/config/rootfiles/common/libxml2
+++ b/config/rootfiles/common/libxml2
@@ -54,5 +54,5 @@
#usr/lib/libxml2.la
#usr/lib/libxml2.so
usr/lib/libxml2.so.16
-usr/lib/libxml2.so.16.1.1
+usr/lib/libxml2.so.16.1.3
#usr/lib/pkgconfig/libxml-2.0.pc
diff --git a/config/rootfiles/common/man-pages b/config/rootfiles/common/man-pages
index c37472d24..10b76474b 100644
--- a/config/rootfiles/common/man-pages
+++ b/config/rootfiles/common/man-pages
@@ -130,6 +130,7 @@
#usr/local/share/man/man2/ftruncate.2
#usr/local/share/man/man2/ftruncate64.2
#usr/local/share/man/man2/futex.2
+#usr/local/share/man/man2/futex_waitv.2
#usr/local/share/man/man2/futimesat.2
#usr/local/share/man/man2/get_kernel_syms.2
#usr/local/share/man/man2/get_mempolicy.2
@@ -1082,6 +1083,7 @@
#usr/local/share/man/man3/aligned_alloc.3
#usr/local/share/man/man3/alloca.3
#usr/local/share/man/man3/alphasort.3
+#usr/local/share/man/man3/aprintf.3
#usr/local/share/man/man3/arc4random.3
#usr/local/share/man/man3/arc4random_buf.3
#usr/local/share/man/man3/arc4random_uniform.3
@@ -1717,6 +1719,8 @@
#usr/local/share/man/man3/innetgr.3
#usr/local/share/man/man3/insque.3
#usr/local/share/man/man3/intro.3
+#usr/local/share/man/man3/io_destroy.3
+#usr/local/share/man/man3/io_setup.3
#usr/local/share/man/man3/iruserok.3
#usr/local/share/man/man3/iruserok_af.3
#usr/local/share/man/man3/isalnum.3
@@ -2349,6 +2353,7 @@
#usr/local/share/man/man3/strndup.3
#usr/local/share/man/man3/strndupa.3
#usr/local/share/man/man3/strnlen.3
+#usr/local/share/man/man3/strnul.3
#usr/local/share/man/man3/strpbrk.3
#usr/local/share/man/man3/strptime.3
#usr/local/share/man/man3/strrchr.3
@@ -2487,6 +2492,7 @@
#usr/local/share/man/man3/va_end.3
#usr/local/share/man/man3/va_start.3
#usr/local/share/man/man3/valloc.3
+#usr/local/share/man/man3/vaprintf.3
#usr/local/share/man/man3/vasprintf.3
#usr/local/share/man/man3/vdprintf.3
#usr/local/share/man/man3/verr.3
diff --git a/config/rootfiles/common/parted b/config/rootfiles/common/parted
index bfd65096e..61063d3b2 100644
--- a/config/rootfiles/common/parted
+++ b/config/rootfiles/common/parted
@@ -30,6 +30,7 @@ usr/sbin/partprobe
#usr/share/locale/da/LC_MESSAGES/parted.mo
#usr/share/locale/de/LC_MESSAGES/parted.mo
#usr/share/locale/es/LC_MESSAGES/parted.mo
+#usr/share/locale/fi/LC_MESSAGES/parted.mo
#usr/share/locale/fr/LC_MESSAGES/parted.mo
#usr/share/locale/fur/LC_MESSAGES/parted.mo
#usr/share/locale/gl/LC_MESSAGES/parted.mo
diff --git a/config/rootfiles/common/pciutils b/config/rootfiles/common/pciutils
index 49347ad35..abe1a7b67 100644
--- a/config/rootfiles/common/pciutils
+++ b/config/rootfiles/common/pciutils
@@ -1,7 +1,7 @@
bin/lspci
bin/setpci
lib/libpci.so.3
-lib/libpci.so.3.14.0
+lib/libpci.so.3.15.0
sbin/update-pciids
#usr/include/pci
#usr/include/pci/config.h
diff --git a/config/rootfiles/common/texinfo b/config/rootfiles/common/texinfo
index ae804b31e..99069ae4a 100644
--- a/config/rootfiles/common/texinfo
+++ b/config/rootfiles/common/texinfo
@@ -8,39 +8,57 @@
#usr/bin/texi2pdf
#usr/bin/texindex
#usr/lib/texi2any
-#usr/lib/texi2any/ConvertXS.la
-#usr/lib/texi2any/ConvertXS.so
-#usr/lib/texi2any/DocumentXS.la
-#usr/lib/texi2any/DocumentXS.so
-#usr/lib/texi2any/IndicesXS.la
-#usr/lib/texi2any/IndicesXS.so
-#usr/lib/texi2any/MiscXS.la
-#usr/lib/texi2any/MiscXS.so
-#usr/lib/texi2any/Parsetexi.la
-#usr/lib/texi2any/Parsetexi.so
-#usr/lib/texi2any/StructuringTransfoXS.la
-#usr/lib/texi2any/StructuringTransfoXS.so
-#usr/lib/texi2any/XSParagraph.la
-#usr/lib/texi2any/XSParagraph.so
-#usr/lib/texi2any/libtexinfo-convert.la
-#usr/lib/texi2any/libtexinfo-convert.so
-#usr/lib/texi2any/libtexinfo-convert.so.0
-#usr/lib/texi2any/libtexinfo-convert.so.0.0.0
-#usr/lib/texi2any/libtexinfo-convertxs.la
-#usr/lib/texi2any/libtexinfo-convertxs.so
-#usr/lib/texi2any/libtexinfo-convertxs.so.0
-#usr/lib/texi2any/libtexinfo-convertxs.so.0.0.0
-#usr/lib/texi2any/libtexinfo.la
-#usr/lib/texi2any/libtexinfo.so
-#usr/lib/texi2any/libtexinfo.so.0
-#usr/lib/texi2any/libtexinfo.so.0.0.0
-#usr/lib/texi2any/libtexinfoxs.la
-#usr/lib/texi2any/libtexinfoxs.so
-#usr/lib/texi2any/libtexinfoxs.so.0
-#usr/lib/texi2any/libtexinfoxs.so.0.0.0
+#usr/lib/texi2any/XS_extension
+#usr/lib/texi2any/XS_extension/ConfigXS.la
+#usr/lib/texi2any/XS_extension/ConfigXS.so
+#usr/lib/texi2any/XS_extension/ConvertToTexinfoXS.la
+#usr/lib/texi2any/XS_extension/ConvertToTexinfoXS.so
+#usr/lib/texi2any/XS_extension/ConvertXS.la
+#usr/lib/texi2any/XS_extension/ConvertXS.so
+#usr/lib/texi2any/XS_extension/DocumentXS.la
+#usr/lib/texi2any/XS_extension/DocumentXS.so
+#usr/lib/texi2any/XS_extension/IndicesXS.la
+#usr/lib/texi2any/XS_extension/IndicesXS.so
+#usr/lib/texi2any/XS_extension/MiscXS.la
+#usr/lib/texi2any/XS_extension/MiscXS.so
+#usr/lib/texi2any/XS_extension/Parsetexi.la
+#usr/lib/texi2any/XS_extension/Parsetexi.so
+#usr/lib/texi2any/XS_extension/ReaderXS.la
+#usr/lib/texi2any/XS_extension/ReaderXS.so
+#usr/lib/texi2any/XS_extension/StructuringTransfoXS.la
+#usr/lib/texi2any/XS_extension/StructuringTransfoXS.so
+#usr/lib/texi2any/XS_extension/TreeElementConverterXS.la
+#usr/lib/texi2any/XS_extension/TreeElementConverterXS.so
+#usr/lib/texi2any/XS_extension/TreeElementXS.la
+#usr/lib/texi2any/XS_extension/TreeElementXS.so
+#usr/lib/texi2any/XS_extension/XSParagraph.la
+#usr/lib/texi2any/XS_extension/XSParagraph.so
+#usr/lib/texi2any/lib
+#usr/lib/texi2any/lib/libtexinfo-convert.la
+#usr/lib/texi2any/lib/libtexinfo-convert.so
+#usr/lib/texi2any/lib/libtexinfo-convert.so.1
+#usr/lib/texi2any/lib/libtexinfo-convert.so.1.0.0
+#usr/lib/texi2any/lib/libtexinfo-convertxs.la
+#usr/lib/texi2any/lib/libtexinfo-convertxs.so
+#usr/lib/texi2any/lib/libtexinfo-convertxs.so.1
+#usr/lib/texi2any/lib/libtexinfo-convertxs.so.1.0.0
+#usr/lib/texi2any/lib/libtexinfo-main.la
+#usr/lib/texi2any/lib/libtexinfo-main.so
+#usr/lib/texi2any/lib/libtexinfo-main.so.0
+#usr/lib/texi2any/lib/libtexinfo-main.so.0.0.0
+#usr/lib/texi2any/lib/libtexinfo.la
+#usr/lib/texi2any/lib/libtexinfo.so
+#usr/lib/texi2any/lib/libtexinfo.so.1
+#usr/lib/texi2any/lib/libtexinfo.so.1.0.0
+#usr/lib/texi2any/lib/libtexinfoxs.la
+#usr/lib/texi2any/lib/libtexinfoxs.so
+#usr/lib/texi2any/lib/libtexinfoxs.so.1
+#usr/lib/texi2any/lib/libtexinfoxs.so.1.0.0
#usr/share/info/info-stnd.info
#usr/share/info/texi2any_api.info
#usr/share/info/texi2any_internals.info
+#usr/share/info/texi2any_internals.info-1
+#usr/share/info/texi2any_internals.info-2
#usr/share/info/texinfo.info
#usr/share/info/texinfo.info-1
#usr/share/info/texinfo.info-2
@@ -65,8 +83,11 @@
#usr/share/texi2any/Texinfo
#usr/share/texi2any/Texinfo/Commands.pm
#usr/share/texi2any/Texinfo/Commands.pod
+#usr/share/texi2any/Texinfo/CommandsValues.pm
+#usr/share/texi2any/Texinfo/CommandsValues.pod
#usr/share/texi2any/Texinfo/Common.pm
#usr/share/texi2any/Texinfo/Config.pm
+#usr/share/texi2any/Texinfo/ConfigXS.pm
#usr/share/texi2any/Texinfo/Convert
#usr/share/texi2any/Texinfo/Convert/ConvertXS.pm
#usr/share/texi2any/Texinfo/Convert/Converter.pm
@@ -81,12 +102,19 @@
#usr/share/texi2any/Texinfo/Convert/ParagraphNonXS.pm
#usr/share/texi2any/Texinfo/Convert/PlainTexinfo.pm
#usr/share/texi2any/Texinfo/Convert/Plaintext.pm
+#usr/share/texi2any/Texinfo/Convert/ReadDocBook.pm
+#usr/share/texi2any/Texinfo/Convert/TestReader.pm
#usr/share/texi2any/Texinfo/Convert/Texinfo.pm
#usr/share/texi2any/Texinfo/Convert/TexinfoMarkup.pm
+#usr/share/texi2any/Texinfo/Convert/TexinfoNonXS.pm
#usr/share/texi2any/Texinfo/Convert/TexinfoSXML.pm
#usr/share/texi2any/Texinfo/Convert/TexinfoXML.pm
+#usr/share/texi2any/Texinfo/Convert/TexinfoXS.pm
#usr/share/texi2any/Texinfo/Convert/Text.pm
#usr/share/texi2any/Texinfo/Convert/TextContent.pm
+#usr/share/texi2any/Texinfo/Convert/TreeElementConverter.pm
+#usr/share/texi2any/Texinfo/Convert/TreeElementConverterXS.pm
+#usr/share/texi2any/Texinfo/Convert/TreeElementReadDocBook.pm
#usr/share/texi2any/Texinfo/Convert/Unicode.pm
#usr/share/texi2any/Texinfo/Convert/Utils.pm
#usr/share/texi2any/Texinfo/DebugTree.pm
@@ -94,6 +122,7 @@
#usr/share/texi2any/Texinfo/DocumentXS.pm
#usr/share/texi2any/Texinfo/Documentlanguages.pm
#usr/share/texi2any/Texinfo/HTMLData.pm
+#usr/share/texi2any/Texinfo/HTMLDataCSS.pm
#usr/share/texi2any/Texinfo/Indices.pm
#usr/share/texi2any/Texinfo/IndicesXS.pm
#usr/share/texi2any/Texinfo/ManipulateTree.pm
@@ -103,16 +132,20 @@
#usr/share/texi2any/Texinfo/OutputUnits.pm
#usr/share/texi2any/Texinfo/Parser.pm
#usr/share/texi2any/Texinfo/ParserNonXS.pm
+#usr/share/texi2any/Texinfo/Reader.pm
+#usr/share/texi2any/Texinfo/ReaderNonXS.pm
#usr/share/texi2any/Texinfo/Report.pm
#usr/share/texi2any/Texinfo/StructTransfXS.pm
#usr/share/texi2any/Texinfo/Structuring.pm
#usr/share/texi2any/Texinfo/Tests.pm
#usr/share/texi2any/Texinfo/Transformations.pm
#usr/share/texi2any/Texinfo/Translations.pm
-#usr/share/texi2any/Texinfo/XS
-#usr/share/texi2any/Texinfo/XS/parsetexi
-#usr/share/texi2any/Texinfo/XS/parsetexi/Parsetexi.pm
+#usr/share/texi2any/Texinfo/TreeElement.pm
+#usr/share/texi2any/Texinfo/TreeElementNonXS.pm
+#usr/share/texi2any/Texinfo/UnicodeData.pm
#usr/share/texi2any/Texinfo/XSLoader.pm
+#usr/share/texi2any/XSTexinfo
+#usr/share/texi2any/XSTexinfo/Parsetexi.pm
#usr/share/texi2any/ext
#usr/share/texi2any/ext/epub3.pm
#usr/share/texi2any/ext/highlight_syntax.pm
@@ -546,7 +579,13 @@
#usr/share/texi2any/lib/libintl-perl/lib/Locale/Util.pm
#usr/share/texi2any/lib/libintl-perl/lib/Locale/gettext_dumb.pm
#usr/share/texi2any/lib/libintl-perl/lib/Locale/gettext_pp.pm
+#usr/share/texi2any/load_txi_modules
#usr/share/texinfo
-#usr/share/texinfo/htmlxref.cnf
+#usr/share/texinfo/htmlxref.d
+#usr/share/texinfo/htmlxref.d/Texinfo_GNU.cnf
+#usr/share/texinfo/htmlxref.d/Texinfo_nonGNU.cnf
+#usr/share/texinfo/info-hooks
+#usr/share/texinfo/info-hooks/gnu-manuals-locations.dat
+#usr/share/texinfo/info-hooks/manual-not-found
#usr/share/texinfo/texindex.awk
#usr/share/texinfo/texinfo.dtd
diff --git a/config/rootfiles/core/202/filelists/coreutils b/config/rootfiles/core/202/filelists/coreutils
new file mode 120000
index 000000000..7351ed2cf
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/coreutils
@@ -0,0 +1 @@
+../../../common/coreutils
\ No newline at end of file
diff --git a/config/rootfiles/core/202/filelists/glib b/config/rootfiles/core/202/filelists/glib
new file mode 120000
index 000000000..44665746a
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/glib
@@ -0,0 +1 @@
+../../../common/glib
\ No newline at end of file
diff --git a/config/rootfiles/core/202/filelists/iproute2 b/config/rootfiles/core/202/filelists/iproute2
new file mode 120000
index 000000000..05f0f71fb
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/iproute2
@@ -0,0 +1 @@
+../../../common/iproute2
\ No newline at end of file
diff --git a/config/rootfiles/core/202/filelists/libcap b/config/rootfiles/core/202/filelists/libcap
new file mode 120000
index 000000000..ed67d950a
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/libcap
@@ -0,0 +1 @@
+../../../common/libcap
\ No newline at end of file
diff --git a/config/rootfiles/core/202/filelists/libgcrypt b/config/rootfiles/core/202/filelists/libgcrypt
new file mode 120000
index 000000000..2df12a20e
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/libgcrypt
@@ -0,0 +1 @@
+../../../common/libgcrypt
\ No newline at end of file
diff --git a/config/rootfiles/core/202/filelists/libjpeg b/config/rootfiles/core/202/filelists/libjpeg
new file mode 120000
index 000000000..3b1a782fb
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/libjpeg
@@ -0,0 +1 @@
+../../../common/libjpeg
\ No newline at end of file
diff --git a/config/rootfiles/core/202/filelists/libxml2 b/config/rootfiles/core/202/filelists/libxml2
new file mode 120000
index 000000000..242e69fa3
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/libxml2
@@ -0,0 +1 @@
+../../../common/libxml2
\ No newline at end of file
diff --git a/config/rootfiles/core/202/filelists/parted b/config/rootfiles/core/202/filelists/parted
new file mode 120000
index 000000000..89195d8e8
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/parted
@@ -0,0 +1 @@
+../../../common/parted
\ No newline at end of file
diff --git a/config/rootfiles/core/202/filelists/sed b/config/rootfiles/core/202/filelists/sed
new file mode 120000
index 000000000..fc5f5c6d6
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/sed
@@ -0,0 +1 @@
+../../../common/sed
\ No newline at end of file
diff --git a/config/rootfiles/core/202/filelists/texinfo b/config/rootfiles/core/202/filelists/texinfo
new file mode 120000
index 000000000..fa9df0257
--- /dev/null
+++ b/config/rootfiles/core/202/filelists/texinfo
@@ -0,0 +1 @@
+../../../common/texinfo
\ No newline at end of file
diff --git a/config/rootfiles/packages/git b/config/rootfiles/packages/git
index 3fb9dba6c..e39c7b1eb 100644
--- a/config/rootfiles/packages/git
+++ b/config/rootfiles/packages/git
@@ -76,6 +76,7 @@ usr/libexec/git-core/git-grep
#usr/libexec/git-core/git-gui--askyesno
usr/libexec/git-core/git-hash-object
usr/libexec/git-core/git-help
+usr/libexec/git-core/git-history
usr/libexec/git-core/git-hook
usr/libexec/git-core/git-http-backend
usr/libexec/git-core/git-http-fetch
diff --git a/lfs/coreutils b/lfs/coreutils
index 9b4270c37..862a7249d 100644
--- a/lfs/coreutils
+++ b/lfs/coreutils
@@ -24,7 +24,7 @@
include Config
-VER = 9.10
+VER = 9.11
THISAPP = coreutils-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -56,7 +56,7 @@ objects =$(DL_FILE)
$(DL_FILE)= $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 7f9f93afc996dea7b6ab412703b1706f40616ae4fee1eea9e5cad0f1e8e95b03df9570084a2703fa4b5bb1cb2eaf8bbe55368c0c7ff58af985b30d09227f9309
+$(DL_FILE)_BLAKE2 = bea602b60824724bddd53ef7a232292ddb99f9b940ebedc30bd42f9b2f3d4763e7ea6c1d76c556413261b8c0bba7b1adbb4a5f6619ff3c9bdbe80d05a12ebd86
install : $(TARGET)
diff --git a/lfs/expat b/lfs/expat
index 3f00072bd..f14e48ab5 100644
--- a/lfs/expat
+++ b/lfs/expat
@@ -24,7 +24,7 @@
include Config
-VER = 2.7.5
+VER = 2.8.0
THISAPP = expat-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 97adfd7cb056066e3a3ec9ef1808d298bc935eb0d17ffca23bcf75810290c8ed8377b21d67b2e1b4a27773057f49f95da9a8f2e368d02d266c980bebbeb1b009
+$(DL_FILE)_BLAKE2 = e7b5f20e9960085d2bcfd88ac590e70a9aaebcc4b1411064d008af638bdf4189730d6fd9772d518dc4c38c3cefc649ed31c1e3ad7de64125377dba8c6d2e01b8
install : $(TARGET)
diff --git a/lfs/git b/lfs/git
index 4822189ad..74a23d38a 100644
--- a/lfs/git
+++ b/lfs/git
@@ -24,7 +24,7 @@
include Config
-VER = 2.53.0
+VER = 2.54.0
SUMMARY = Fast, scalable, distributed revision control system
THISAPP = git-$(VER)
@@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = git
-PAK_VER = 41
+PAK_VER = 42
DEPS = perl-Authen-SASL perl-Net-SMTP-SSL
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = a23ccb2f793d37347e892f6094ad589510c93011a53fb2c14cdcbfbe6d87413edb4585a98253e4ca5124217f66ad783f4fa584f38dc25ffa34772da01dc45f02
+$(DL_FILE)_BLAKE2 = 68ee0623ff5a695a35dae2f31e3f410ebd4b6a8296c7c9fd03f53668878e9164b78ca82869c8a0719b3fae981f514f2022c45b39df7174b5e883348bdd269a82
install : $(TARGET)
diff --git a/lfs/glib b/lfs/glib
index 7459d3bf4..1b6e2269f 100644
--- a/lfs/glib
+++ b/lfs/glib
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 2.87.0
+VER = 2.88.0
# https://download.gnome.org/sources/glib/
THISAPP = glib-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 799fc394e15c90c357687b681041530d9035af1c1d9ec16eaeb2453f3041e8c2a9d64b3e4e033e186975a3551edb95a4b1605300fa1384d7bf5f6600ce89ac18
+$(DL_FILE)_BLAKE2 = b540e0f5490f85b44cfad5d819f4a6fd911addc26fed8b8b49852bd6ec322d7d16136b691452030cf5f590374ea06cf8fdb8c9109d5cbe7b68625379bbd40615
install : $(TARGET)
diff --git a/lfs/harfbuzz b/lfs/harfbuzz
index 508944200..f6f83f22a 100644
--- a/lfs/harfbuzz
+++ b/lfs/harfbuzz
@@ -24,7 +24,7 @@
include Config
-VER = 14.0.0
+VER = 14.2.0
THISAPP = harfbuzz-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = a4fe29775ba4844c197a0d46a9d8db197301ea74ad21475ebe799a23d7a3ccd1ac642d15913067d2d7f4714381658b078827be2d0aec86dea91bcabfba66ab43
+$(DL_FILE)_BLAKE2 = bc0df1fad40bbd2f7348d16e1d17927285a1e64eae02bf27f5921691cb77cbe8646a5f51e14c97953416b9e08f326c824646d2f114b59e37579657727cf706f4
install : $(TARGET)
diff --git a/lfs/iana-etc b/lfs/iana-etc
index 8d7f9a931..a9a79b464 100644
--- a/lfs/iana-etc
+++ b/lfs/iana-etc
@@ -24,7 +24,7 @@
include Config
-VER = 20260327
+VER = 20260409
# https://github.com/Mic92/iana-etc
THISAPP = iana-etc-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 280ba88a2ea3c6885f6c852bec73a6cd303f5a1eaee0b00afd4a7f756b6e9d90306e338a07b74501cc6334cdab56fb6f2acf7b5b6320eca1439c7abd4e0427d7
+$(DL_FILE)_BLAKE2 = 4b8f1056db4a38881a3efeb20e1b02ea2e2377a06f8fdf6c0b467277fab15c6b5e6c2e25d2eebe9140148591cd970283195adf2aabd5bbc5c4d61579c1845e56
install : $(TARGET)
diff --git a/lfs/iperf3 b/lfs/iperf3
index dbbc5a5ce..7c4095ed9 100644
--- a/lfs/iperf3
+++ b/lfs/iperf3
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -26,7 +26,7 @@ include Config
SUMMARY = A tool to measure network performance
-VER = 3.19
+VER = 3.21
THISAPP = iperf-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = iperf3
-PAK_VER = 8
+PAK_VER = 9
DEPS =
@@ -51,7 +51,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = b6f5e9bdef5ee3fc38bef893144bc6ad003ccbc7b3db4793dbd2aec5998faa55cac215a0db06ab37729dc1c05787ebacbf09db8a6e6517f82492a6c67ec3d9e6
+$(DL_FILE)_BLAKE2 = 696a13caaa5cf52a69c65566ae4d2d8788a4225d689d32e73306f5174dad141c92ea3acdda9a929803a1e57eee6844350be2da749e5f44c48bf0ab7890e97745
install : $(TARGET)
check : $(patsubst %,$(DIR_CHK)/%,$(objects))
diff --git a/lfs/iproute2 b/lfs/iproute2
index bbbf5d88a..01682c576 100644
--- a/lfs/iproute2
+++ b/lfs/iproute2
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 6.17.0
+VER = 7.0.0
# https://mirrors.edge.kernel.org/pub/linux/utils/net/iproute2/
THISAPP = iproute2-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 49b88fd1eaea34376b086be02e72505ca62f52f3c53f3ee29cd273532521fabe8d38062277852dcc69f78b86b9460b213bbeedc9c51ce20d3bb1fd35d86b6fc8
+$(DL_FILE)_BLAKE2 = 1edec3088a16657ee85c1799bf911c6cd75a359efc75fc23ac922474b1e10e9410454d6e6930b58ebe047a8b5fa4f522e9fb7f53a4d9a4e3b84b8979c5aaa926
install : $(TARGET)
diff --git a/lfs/libarchive b/lfs/libarchive
index 8ff9f2914..bb84841ff 100644
--- a/lfs/libarchive
+++ b/lfs/libarchive
@@ -24,7 +24,7 @@
include Config
-VER = 3.8.6
+VER = 3.8.7
THISAPP = libarchive-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 456eb5b3bbb0e59ccbc34a9704c7bf1dd9f8cffc0075be546b5fbd66f1157651fbfe7298da8c17f80b2ef0420cfeaac971ff06b10ee9d372d4eb8b17f8497628
+$(DL_FILE)_BLAKE2 = 6ed65a679b0c55e66410454de2865e8de67eb668845ac007c7d555d6023390cf95fb93ae3d006e9fef73314f8d7c3dcb8a4a44548e48e418c4d30e15b922e828
install : $(TARGET)
diff --git a/lfs/libcap b/lfs/libcap
index 24c042095..1259230b7 100644
--- a/lfs/libcap
+++ b/lfs/libcap
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 2.77
+VER = 2.78
THISAPP = libcap-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 9725a5f886907f718a7149841003ac04aced8d322ae190b7035873dc823098c58311f15b9fe7e2a3fec683de6e2eeea108cd008f5f79e8dba24bb20595351812
+$(DL_FILE)_BLAKE2 = 60b1afed4df471e9bbb631deca850920408710fb166335d5640feadf5e2feced0bccae10ba4010eca0dfb0cbb5cd41e255c2e4ac232dc3d18b7d269df9f1e72a
install : $(TARGET)
diff --git a/lfs/libcap-ng b/lfs/libcap-ng
index 9915e9587..85b2dda85 100644
--- a/lfs/libcap-ng
+++ b/lfs/libcap-ng
@@ -24,7 +24,7 @@
include Config
-VER = 0.9.2
+VER = 0.9.3
THISAPP = libcap-ng-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = c9823bd7397e82fcc00a201b275283e8f49597ebeff21bec859bbfd962b55152caf10ede1dc2060634bda2c3c8523f446671aeab55a9a1c5b78d0031047ce13b
+$(DL_FILE)_BLAKE2 = 8050f69c91a8c5214d718d3ad750cf50db25690b9b8d59f37db32d33d5a0fe864afe8064ca4261f27f49f65064926c816a627a9c1c7a28e268a1a459409c59d8
install : $(TARGET)
diff --git a/lfs/libgcrypt b/lfs/libgcrypt
index 2ddac800e..75ef9e8ff 100644
--- a/lfs/libgcrypt
+++ b/lfs/libgcrypt
@@ -24,7 +24,7 @@
include Config
-VER = 1.12.0
+VER = 1.12.2
THISAPP = libgcrypt-$(VER)
DL_FILE = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 2d600fb5288aed426d99fdd5628dd7382108301371f0d6488d5911f62519802e2b4b53181196955d084b5f11a71e4673b4064db407e1cc55eadc15610faf660c
+$(DL_FILE)_BLAKE2 = f52a10acdbf56a5adc927e22508a30d131a001e8f559d55c72d4ccfea4a514ef7983ab3f985af798c06a9c188639f21c54f1cc0ec6cba968172ddc6bd21ae0bd
install : $(TARGET)
diff --git a/lfs/libjpeg b/lfs/libjpeg
index da4c04536..b03f795cf 100644
--- a/lfs/libjpeg
+++ b/lfs/libjpeg
@@ -24,7 +24,7 @@
include Config
-VER = 3.1.3
+VER = 3.1.4.1
THISAPP = libjpeg-turbo-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 3c675aa56b3474ca8a27f355d14dd7411d90471564c5916884e87818b7165e73a6c6b416dc2800e31c10dd1390ae88353e81d80eceb2e22c00b6a81ac5cf3d65
+$(DL_FILE)_BLAKE2 = 7e38379b4e3bb168e6ec081be5852f9a7f4680929d42e5cccb0c00632130eee9200afdc9c2ed99250c3ddfc1cd8dd21f60da54e6c48157884c9173ae1b3f9a9f
install : $(TARGET)
diff --git a/lfs/libmpc b/lfs/libmpc
index ffdf11ec4..067c40e53 100644
--- a/lfs/libmpc
+++ b/lfs/libmpc
@@ -24,7 +24,7 @@
include Config
-VER = 1.4.0
+VER = 1.4.1
THISAPP = mpc-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = d00dbc52a92efd619498671475743c9f35797343c731542f881c04c4a0b198f5b36df51bfde3ce520866d1851958409a6dd0de02d85d7b2e0ba00ccb27a30464
+$(DL_FILE)_BLAKE2 = 793b4cf37e7e805dcbf24bc39903d5d778702e80cf5eac60b840834f09868656856a008cff6b45e7a5a312c3ed21a593d84f45765e9ac456ab3dd38a083acff1
install : $(TARGET)
diff --git a/lfs/libpng b/lfs/libpng
index d65a5d86e..6aa7fbee9 100644
--- a/lfs/libpng
+++ b/lfs/libpng
@@ -24,7 +24,7 @@
include Config
-VER = 1.6.56
+VER = 1.6.58
THISAPP = libpng-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = f653a3177e0910fc156a792d5522fc2a0c04ce0bb43eabb68e06922303dcf6062d8f9b570440bfe1a94ac1b901ef6e9c32b6882d0f4a406e5a9090ea3396f89a
+$(DL_FILE)_BLAKE2 = 51042e8f2b56d469b516db9cbde6d4b6813a62d1b7117898ba32a9a5ac5cd73832c627d7377745e5d5154aade6ec6928fc6b9cd9b96885f64b7ca7df19ca40ec
install : $(TARGET)
diff --git a/lfs/libsodium b/lfs/libsodium
index 8f6605643..31604274d 100644
--- a/lfs/libsodium
+++ b/lfs/libsodium
@@ -24,10 +24,10 @@
include Config
-VER = 1.0.21
+VER = 1.0.22
THISAPP = libsodium-$(VER)
-DL_FILE = $(THISAPP).tar.gz
+DL_FILE = $(THISAPP).tar.bz2
DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = df68159bbf0b5198ab185e93857b4f07af1d4aa7ffd178b7cb78ff5b020b6ee93ab5c3e71f59812b79906ff4df19e42845435c2bc22bbe8b0a0804076b0ddd05
+$(DL_FILE)_BLAKE2 = 054878d42c67a5bb0e65adea6746668cd768e3650a164e3b33b8d68361a824fa37f7cadd8cce60f4ba5a25921f4910380b8ea95992c2b4c34160937005277cd4
install : $(TARGET)
@@ -73,7 +73,6 @@ $(subst %,%_BLAKE2,$(objects)) :
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
- cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/libsodium-1.0.21_fix_compilation_with_GCC_on_aarch64.patch
cd $(DIR_APP) && ./configure \
--prefix=/usr \
--disable-static
diff --git a/lfs/libxml2 b/lfs/libxml2
index c1ea739eb..84ebb0a0a 100644
--- a/lfs/libxml2
+++ b/lfs/libxml2
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 2.15.1
+VER = 2.15.3
# https://download.gnome.org/sources/libxml2/
THISAPP = libxml2-$(VER)
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 73c4d17adacda67d71c5a120c7de2324df1db35963cadbe18166dafe122e1f10dcab9d4fed0e128c077a5ca31432bfaf72f742c42680251660d397ab8bc3538b
+$(DL_FILE)_BLAKE2 = 2ff478b46a40957386cd1ed0627bfc0f2433f47e786f20db3942304c90289adaeb1d9c3f12665df312b86cfac42f8e4dbc18e965bf90018f93c230b9b862df66
install : $(TARGET)
diff --git a/lfs/man-pages b/lfs/man-pages
index fb34a9084..4e4e12936 100644
--- a/lfs/man-pages
+++ b/lfs/man-pages
@@ -24,7 +24,7 @@
include Config
-VER = 6.17
+VER = 6.18
THISAPP = man-pages-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = c167bb2023c5401624c18ae5445b2fb93a11aa298baa0e69bf6a817d8e715d7277429e759f60fcd72536e1a0d904982c0b81e26dc60130d691820227f822d5b2
+$(DL_FILE)_BLAKE2 = 4c434420f094fc3e00fc1b26a62337a154527b6dc8a9c59abccf6307dc22750a09d253df104a6ef61543be4a4328b905b91610e60b340258671cebe91e9258e6
install : $(TARGET)
diff --git a/lfs/parted b/lfs/parted
index b3632a3c0..ff48a62ec 100644
--- a/lfs/parted
+++ b/lfs/parted
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2023 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -26,7 +26,7 @@ include Config
SUMMARY = GNU partitioner
-VER = 3.6
+VER = 3.7
THISAPP = parted-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -45,7 +45,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 99b6d096e4db05144c98e9f0a9a97c647aa911ee5df031244b03d5223f709d43d9302cef12dd4b2f97f42ec476510561b7f8b3b1ef7cb09d0a7c4d512e7a6739
+$(DL_FILE)_BLAKE2 = 967a2c5e6f8d93bd8eff2fe9092413582437c7d33fb151ca5230c8acd0c32e94c90edcb83abed888da560f7fbfcc77ee31cda54ddc3c1af24b1a1c522ab83bca
install : $(TARGET)
@@ -76,7 +76,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
$(UPDATE_AUTOMAKE)
- cd $(DIR_APP) && ./configure --prefix=/usr --disable-device-mapper
+ cd $(DIR_APP) && ./configure \
+ --prefix=/usr \
+ --disable-device-mapper
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
@rm -rf $(DIR_APP)
diff --git a/lfs/pciutils b/lfs/pciutils
index 5d529692f..9e46e4ca3 100644
--- a/lfs/pciutils
+++ b/lfs/pciutils
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 3.14.0
+VER = 3.15.0
THISAPP = pciutils-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 3ab270c4523cc1968d5f3a03d2564eff5560b60eb8307bafe44ee240a6636dc676fbf0a28effe3c9abc99bfc86a975aea066d634a5e5adaffb2c63ba226511d9
+$(DL_FILE)_BLAKE2 = 29d3d38be6a3b8abce8db86e9160fc27ce966375f2ea441dff20cad9d7f7dfebe42a17d6054a406ed0d52035ad9c9071837e0e7650c954ff1c84514554f6c34f
install : $(TARGET)
diff --git a/lfs/sed b/lfs/sed
index 89ca4f250..f11096053 100644
--- a/lfs/sed
+++ b/lfs/sed
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2018 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 4.9
+VER = 4.10
THISAPP = sed-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -53,7 +53,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 6c7c7dc782b87c3bd0b5e826ba46c2f1dc7bd8c1159945fcf14b394711742964628774cf9f27d844b672721d7849e6c31992d82fafb9ed4118b7feb60406d1e1
+$(DL_FILE)_BLAKE2 = 6decea38a3e6eb3b672af2380ec3f32759b60350dba528d28a57b74806db33208baed69a8497d423bc7626105930e3e9c9ea68f68b8bcd4a3270f2d8922a2487
install : $(TARGET)
diff --git a/lfs/texinfo b/lfs/texinfo
index 588704782..e0badb760 100644
--- a/lfs/texinfo
+++ b/lfs/texinfo
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 7.2
+VER = 7.3
THISAPP = texinfo-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -50,7 +50,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = fc6bd020310a437a73d5723d257ca3da1d15329e9e668fa78c49ac77759c2c990d4422c2a7071b217ea214b88389a0cbb43d3fcfa5fe9bf9651270167b15c342
+$(DL_FILE)_BLAKE2 = e9c17aec5ebf9d22eb22b40a06a24de675fca6d511f448170983d474b0906e23c25a00b75907b260abf66e660aefa6d6af928a1785bcf9b2099a0e791aac7025
install : $(TARGET)
diff --git a/src/patches/libsodium-1.0.21_fix_compilation_with_GCC_on_aarch64.patch b/src/patches/libsodium-1.0.21_fix_compilation_with_GCC_on_aarch64.patch
deleted file mode 100644
index 1ffdbd088..000000000
--- a/src/patches/libsodium-1.0.21_fix_compilation_with_GCC_on_aarch64.patch
+++ /dev/null
@@ -1,33 +0,0 @@
-diff --git a/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c b/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c
-index c5a27e92ec..bad4ce3898 100644
---- a/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c
-+++ b/src/libsodium/crypto_ipcrypt/ipcrypt_armcrypto.c
-@@ -37,7 +37,7 @@ typedef uint64x2_t BlockVec;
- # define XOR128_3(a, b, c) veorq_u64(veorq_u64((a), (b)), (c))
- # define SET64x2(a, b) vsetq_lane_u64((uint64_t) (a), vmovq_n_u64((uint64_t) (b)), 1)
- # define BYTESHL128(a, b) \
-- vreinterpretq_u64_u8(vextq_s8(vdupq_n_s8(0), vreinterpretq_s8_u64(a), 16 - (b)))
-+ vreinterpretq_u64_u8(vextq_u8(vdupq_n_u8(0), vreinterpretq_u8_u64(a), 16 - (b)))
-
- # define AES_XENCRYPT(block_vec, rkey) \
- vreinterpretq_u64_u8( \
-@@ -348,12 +348,12 @@ pfx_set_bit(uint8_t ip16[16], const unsigned int bit_index, const uint8_t bit_va
- static void
- pfx_shift_left(uint8_t ip16[16])
- {
-- BlockVec v = LOAD128(ip16);
-- const BlockVec shl = vshlq_n_u8(vreinterpretq_u8_u64(v), 1);
-- const BlockVec msb = vshrq_n_u8(vreinterpretq_u8_u64(v), 7);
-- const BlockVec zero = vdupq_n_u8(0);
-- const BlockVec carries = vextq_u8(vreinterpretq_u8_u64(msb), zero, 1);
-- v = vreinterpretq_u64_u8(vorrq_u8(shl, carries));
-+ BlockVec v = LOAD128(ip16);
-+ const uint8x16_t shl = vshlq_n_u8(vreinterpretq_u8_u64(v), 1);
-+ const uint8x16_t msb = vshrq_n_u8(vreinterpretq_u8_u64(v), 7);
-+ const uint8x16_t zero = vdupq_n_u8(0);
-+ const uint8x16_t carries = vextq_u8(msb, zero, 1);
-+ v = vreinterpretq_u64_u8(vorrq_u8(shl, carries));
- STORE128(ip16, v);
- }
-
-
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-04-28 8:10 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-04-28 8:10 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. acdf1075ca9646af2162ffd1fe4af85de4a2c59c Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox