* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. d3d06bc816eec2266bc78190db5e9d8e1c50e30f
@ 2026-05-21 13:46 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2026-05-21 13:46 UTC (permalink / raw)
To: ipfire-scm
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 32916 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via d3d06bc816eec2266bc78190db5e9d8e1c50e30f (commit)
via 4521ea10227e7f2729474505195aacfd6743e083 (commit)
via 1928f95081afd1e8858a5a0d2ef1a44f897ecdaa (commit)
via 0a717a1357e6b60275b0eb4113b0ae05f8a6cb77 (commit)
via 43f50ebad077bfcb68493958acd48be3a961e015 (commit)
via 88dea3a1187ad8e978db9859f8d497e1a08603ed (commit)
via 887e752e324d49db60e195b567b65f093969c3aa (commit)
via f7898141e90ce8241ac31ee40417f3addb90599e (commit)
via dfcc64bd8aac6809d1c058cd891fddb373cb94d5 (commit)
via c9f577122c69dcdb8682cb03015f8b9f2b0874ac (commit)
via 2f97c9a22ce197f361dc02da13247ef0a807e969 (commit)
via 35d45aad9c59e87fe60d2c66cb18dcd015960d71 (commit)
via f607f40952821ee52bdf28d34ba91bf95bdbc01f (commit)
from 8ea76ebb73498c770374ccef9977518dca300821 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit d3d06bc816eec2266bc78190db5e9d8e1c50e30f
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu May 21 13:45:53 2026 +0000
core203: Ship rrdtool
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 4521ea10227e7f2729474505195aacfd6743e083
Author: Matthias Fischer <matthias.fischer@ipfire.org>
Date: Thu May 21 15:26:46 2026 +0200
rrdtool: Update to 1.10.2
Excerpt from "CHANGES":
"RRDtool 1.10.2 - 2026-05-19
===========================
Bugfixes
--------
* The Linux .deb packages were missing the Lua language binding @oetiker
* The Python binding is now installed with pip into a consistent, distribution-independent location @oetiker
Features
--------
* RPM releases now ship matching debuginfo and debugsource packages @oetiker
RRDtool 1.10.1 - 2026-05-19
===========================
Bugfixes
--------
* Modernize obsolete autoconf macros so configure regenerates cleanly with current autotools @oetiker
Features
--------
* Add more DEB and RPM package variants: Ubuntu 26.04, Debian 13, AlmaLinux 8/10, Fedora @oetiker
RRDtool 1.10.0 - 2026-05-19
===========================
Bugfixes
--------
* Mark the Ruby bindings as Ractor safe @LevitatingBusinessMan
* Fix Compatiblity with TCL-9 @yselkowitz
* Correctly link Ruby Bindings @LevitatingBusinessMan
* Fix MacOS Build error (no SOCK_CLOEXEC on mac) @ensc fixes oetiker#1261
* Fix build on 32bits platforms (like armhf) when time_t is 64bits, fixes #1264
* Fix compilation on illumos @hadfl
* Python2.3 is deprecated and therefore, the Python bindings should use Python3 as default @pticon
* Fix issue where RRDtool detects a LINE or AREA with a constant numeric value as being exportable
* Fix broken argc overflow check in rrdcached tune handler that rejected all tune commands @somethingwithproof
* Harden rrdcached pid file parsing and daemon options with strtol validation @somethingwithproof
* Add NULL, bounds, and zero-division safety guards in xport, graph, and graph_helper @somethingwithproof
* Escape control characters in JSON xport output per RFC 7159 @somethingwithproof fixes #1311
* Add pkg-config fallback for Perl and Ruby bindings when building standalone @somethingwithproof
* Export ABS_TOP_BUILDDIR to environment for Ruby extconf.rb during in-tree builds @somethingwithproof
* Fix parse_tick: shift the legend by 2 spaces for the "coloured-box" @neo954 #1314
Features
--------
* Add Georgian translation @NorwayFun
* Add -S short option for --step in rrdtool xport @somethingwithproof fixes #1310
* Automated release workflow: a single workflow_dispatch on master computes
the next SemVer, bumps version strings in-place, builds source tarball +
Windows MSVC zips + RPM (AlmaLinux) + DEB (Ubuntu/Debian) — the binary
packages install under /opt/rrdtool so they coexist with distro-maintained
rrdtool packages without touching the system. See .github/workflows/release.yml. @oetiker"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 1928f95081afd1e8858a5a0d2ef1a44f897ecdaa
Author: Matthias Fischer <matthias.fischer@ipfire.org>
Date: Thu May 21 15:39:06 2026 +0200
rsync: Update to 3.4.3
For details see:
https://download.samba.org/pub/rsync/NEWS#3.4.3
"SECURITY FIXES:
Six CVEs are fixed in this release. All six are assigned by VulnCheck as
CNA. Affected versions are 3.4.2 and earlier in every case. Three of the
six (CVE-2026-29518, CVE-2026-43617, CVE-2026-43619) require non-default
daemon configuration to reach: the first and third need use chroot = no for
a module, the second needs daemon chroot = ... set in rsyncd.conf. Two
(CVE-2026-43618, CVE-2026-43620) are reachable from a normal pull or a
normal authenticated daemon connection. The sixth (CVE-2026-45232) is
reachable only when RSYNC_PROXY is set and the proxy (or a MITM) returns a
pathological response. Many thanks to the external researchers who reported
these issues.
CVE-2026-29518 (CVSS v4.0 7.3, HIGH): TOCTOU symlink race condition
allowing local privilege escalation in daemon mode without chroot. An
rsync daemon configured with "use chroot = no" was exposed to a
time-of-check / time-of-use race on parent path components: a local
attacker with write access to a module could replace a parent directory
component with a symlink between the receiver's check and its open(),
redirecting reads (basis-file disclosure) and writes (file overwrite)
outside the module. Default "use chroot = yes" is not exposed.
secure_relative_open() (added in 3.4.0 for CVE-2024-12086) was
previously unused in the daemon-no-chroot case; the fix enables it
there and reroutes the sender's read-path opens through it. Reported by
Nullx3D (Batuhan Sancak), Damien Neil and Michael Stapelberg.
CVE-2026-43617 (CVSS v3.1 4.8, MEDIUM): Hostname/ACL bypass on an rsync
daemon configured with daemon chroot = /X in rsyncd.conf when the
chroot tree lacks DNS resolution support. The reverse-DNS lookup of the
connecting client was performed after the daemon chroot had been
entered; if /X did not contain the libc resolver fixtures
(/etc/resolv.conf, /etc/nsswitch.conf, /etc/hosts, NSS service modules)
the lookup failed and the connecting hostname was set to "UNKNOWN",
causing hostname-based deny rules to silently fail open. IP-based ACLs
are unaffected. The per-module use chroot setting is unrelated to this
issue. The fix performs the lookup before entering the daemon chroot.
Reported by MegaManSec.
CVE-2026-43618 (CVSS v3.1 8.1, HIGH): Integer overflow in the
compressed-token decoder enabling remote memory disclosure to an
authenticated daemon peer. The receiver accumulated a 32-bit signed
counter without overflow checking; a malicious sender could trigger an
overflow that, with careful manipulation, leaked process memory
contents to the attacker -- environment variables, passwords, heap
and library pointers -- significantly weakening ASLR. The fix bounds
the counter and adds wire-input validation in several adjacent places
(defence-in-depth). Workaround for older releases: refuse options =
compress in rsyncd.conf. Reported by Omar Elsayed.
CVE-2026-43619 (CVSS v3.1 6.3, MEDIUM): Symlink races on path-based
system calls in "use chroot = no" daemon mode (generalisation of
CVE-2026-29518). Earlier fixes for symlink races on the receiver's
open() call missed the same race class on every other path-based system
call: chmod, lchown, utimes, rename, unlink, mkdir, symlink, mknod,
link, rmdir and lstat. The fix routes each affected path-based syscall
through a parent dirfd opened under RESOLVE_BENEATH-equivalent
kernel-enforced confinement (openat2 on Linux 5.6+, O_RESOLVE_BENEATH
on FreeBSD 13+ and macOS 15+, per-component O_NOFOLLOW walk elsewhere).
Default "use chroot = yes" is not exposed. Reported by Andrew Tridgell
as a follow-on audit of CVE-2026-29518.
CVE-2026-43620 (CVSS v3.1 6.5, MEDIUM): Out-of-bounds read in the
receiver's recv_files() enabling remote denial-of-service of any client
pulling from a malicious server (incomplete fix of commit 797e17f). The
earlier parent_ndx<0 guard added to send_files() was not applied to the
visually-identical block in recv_files(). A malicious rsync server can
drive any connecting client into a deterministic SIGSEGV by setting
CF_INC_RECURSE in the compatibility flags and sending a crafted file
list and transfer record. inc_recurse is the protocol-30+ default, so
no special options are required on the victim. Workaround for older
releases: --no-inc-recursive on the client. Reported by Pratham Gupta.
CVE-2026-45232 (CVSS v3.1 3.1, LOW): Off-by-one out-of-bounds stack
write in the rsync client's HTTP CONNECT proxy handler
(establish_proxy_connection() in socket.c). After issuing the CONNECT
request, rsync read the proxy's first response line one byte at a time
into a 1024-byte stack buffer with the bound cp < &buffer[sizeof buffer
- 1]. If the proxy (or a MITM in front of it) returned 1023+ bytes on
that first line without a newline terminator, cp exited the loop
pointing at a buffer slot the loop never wrote, leaving *cp holding
stale stack data from the earlier snprintf() of the outgoing CONNECT
request. The post-loop logic then wrote a single \0 one byte past the
end of the buffer on the stack. Reach is client-side only, and only
when RSYNC_PROXY is set so rsync tunnels an rsync:// connection through
an HTTP CONNECT proxy. The written byte is always \0 and the offset is
fixed by the buffer size, not attacker-chosen, so this is not an
arbitrary-write primitive: practical impact is corruption of one
adjacent stack byte and possible later misbehaviour or crash. The fix
detects the "buffer filled without finding \n" case explicitly by
position and refuses the response with "proxy response line too long".
Reported by Aisle Research via Michal Ruprich (rsync-3.4.1-2.el10 QE).
In addition to the six CVE fixes, this release adds defence-in-depth
hardening on several adjacent paths: bounded wire-supplied counts and
lengths in flist/io/acls/xattrs, a guard against length underflow in
cumulative snprintf() callers, a parent block-index bounds check on the
receiver, a NULL check in read_delay_line(), a lower ceiling on
MAX_WIRE_DEL_STAT to avoid signed-int overflow in the read_del_stats()
accumulator, rejection of hyphen-prefixed remote-shell hostnames
(defence-in-depth against argv-injection in tooling that forwards untrusted
input into the hostspec position; reported by Aisle Research via Michal
Ruprich), and a NULL-check on localtime_r() in timestring() to keep a
malicious server from crashing the client by advertising a file with an
out-of-range modtime.
BUG FIXES:
Fixed a regression introduced by the 3.4.0 secure_relative_open() CVE
fix where legitimate directory symlinks on the receiver side (e.g. when
using -K / --copy-dirlinks) caused "failed verification -- update
discarded" errors on delta transfers. The old code rejected every
symlink in the path with a per-component O_NOFOLLOW walk; the receiver
now uses kernel-enforced "stay below dirfd" path resolution where
available. Fixes #715.
PORTABILITY / BUILD:
secure_relative_open() now uses openat2(RESOLVE_BENEATH |
RESOLVE_NO_MAGICLINKS) on Linux 5.6+, and openat() with
O_RESOLVE_BENEATH on FreeBSD 13+ and macOS 15+ (Sequoia) / iOS 18+. The
kernel rejects ".." escapes, absolute symlinks, and symlinks whose
target lies outside the starting directory, while still following
symlinks that resolve within it -- the same trade-off that fixes the
issue #715 regression without weakening the original CVE protection.
Other platforms (Solaris, OpenBSD, NetBSD, Cygwin) retain the previous
per-component O_NOFOLLOW walk; on those platforms the issue #715
regression remains visible.
testsuite/xattrs: ignore SUNWattr_* in the Solaris xls helper.
DEVELOPER RELATED:
Added testsuite/symlink-dirlink-basis.test (taken from PR #864 by
Samuel Henrique) covering the issue #715 regression and several edge
cases (--backup, --inplace, --partial-dir with protocol < 29, top-level
files). The test skips on platforms without a RESOLVE_BENEATH
equivalent.
Added regression tests for the new security fixes:
chmod-symlink-race.test, chdir-symlink-race.test,
bare-do-open-symlink-race.test, alt-dest-symlink-race.test,
copy-dest-source-symlink.test, sender-flist-symlink-leak.test,
secure-relpath-validation.test, daemon-chroot-acl.test and
daemon-refuse-compress.test. The symlink-race tests skip on Cygwin,
Solaris, OpenBSD and NetBSD (no RESOLVE_BENEATH equivalent on those
platforms).
runtests.py now errors early with a clear message when any of the test
helper programs (tls, trimslash, t_unsafe, t_chmod_secure,
t_secure_relpath, wildtest, getgroups, getfsdev) are missing, instead
of letting many tests fail with confusing "not found" errors.
Added OpenBSD and NetBSD CI jobs that run make check on those
platforms.
Added Ubuntu 22.04 and AlmaLinux 8 CI workflows so future backports to
the two mainstream LTS families build and test on the same CI surface
as trunk.
testsuite/protected-regular.test now runs unprivileged via unshare with
user-namespace UID mapping, falling back to skip if unshare/uidmap is
not available; previously it required real root.
Added symlink-dirlink-basis to the Cygwin CI's expected-skipped list.
Removed the old release system (replaced by the new release script in
3.4.2)."
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 0a717a1357e6b60275b0eb4113b0ae05f8a6cb77
Merge: 8ea76ebb7 43f50ebad
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu May 21 13:45:23 2026 +0000
Merge branch 'master' into next
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/common/rrdtool | 222 +++++++++++----------
config/rootfiles/common/unbound | 2 +-
.../{oldcore/111 => core/203}/filelists/rrdtool | 0
config/rootfiles/oldcore/202/filelists/files | 1 +
lfs/rrdtool | 6 +-
lfs/rsync | 6 +-
lfs/unbound | 8 +-
7 files changed, 127 insertions(+), 118 deletions(-)
copy config/rootfiles/{oldcore/111 => core/203}/filelists/rrdtool (100%)
Difference in files:
diff --git a/config/rootfiles/common/rrdtool b/config/rootfiles/common/rrdtool
index 68cfc0f25..8a13345e9 100644
--- a/config/rootfiles/common/rrdtool
+++ b/config/rootfiles/common/rrdtool
@@ -20,115 +20,123 @@ usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/RRDs.pm
#usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/RRDs/.packlist
usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/RRDs/RRDs.so
#usr/lib/pkgconfig/librrd.pc
-#usr/lib/python3.10/site-packages/rrdtool-0.1.10-py3.10.egg-info
-#usr/lib/python3.10/site-packages/rrdtool-0.1.10-py3.10.egg-info/PKG-INFO
-#usr/lib/python3.10/site-packages/rrdtool-0.1.10-py3.10.egg-info/SOURCES.txt
-#usr/lib/python3.10/site-packages/rrdtool-0.1.10-py3.10.egg-info/dependency_links.txt
-#usr/lib/python3.10/site-packages/rrdtool-0.1.10-py3.10.egg-info/top_level.txt
-usr/lib/python3.10/site-packages/rrdtool.cpython-310-xxxMACHINExxx-linux-gnu.so
-#usr/share/doc/rrdtool-1.9.0
-#usr/share/doc/rrdtool-1.9.0/html
-#usr/share/doc/rrdtool-1.9.0/html/RRDp.html
-#usr/share/doc/rrdtool-1.9.0/html/RRDs.html
-#usr/share/doc/rrdtool-1.9.0/html/bin_dec_hex.html
-#usr/share/doc/rrdtool-1.9.0/html/cdeftutorial.html
-#usr/share/doc/rrdtool-1.9.0/html/index.html
-#usr/share/doc/rrdtool-1.9.0/html/librrd.html
-#usr/share/doc/rrdtool-1.9.0/html/rpntutorial.html
-#usr/share/doc/rrdtool-1.9.0/html/rrd-beginners.html
-#usr/share/doc/rrdtool-1.9.0/html/rrd_pdpcalc.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdbuild.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdcached.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdcgi.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdcreate.html
-#usr/share/doc/rrdtool-1.9.0/html/rrddump.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdfetch.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdfirst.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdflushcached.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdgraph.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdgraph_data.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdgraph_examples.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdgraph_graph.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdgraph_rpn.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdinfo.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdlast.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdlastupdate.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdlist.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdpython.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdresize.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdrestore.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdthreads.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdtool.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdtune.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdtutorial.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdupdate.html
-#usr/share/doc/rrdtool-1.9.0/html/rrdxport.html
-#usr/share/doc/rrdtool-1.9.0/txt
-#usr/share/doc/rrdtool-1.9.0/txt/bin_dec_hex.pod
-#usr/share/doc/rrdtool-1.9.0/txt/bin_dec_hex.txt
-#usr/share/doc/rrdtool-1.9.0/txt/cdeftutorial.pod
-#usr/share/doc/rrdtool-1.9.0/txt/cdeftutorial.txt
-#usr/share/doc/rrdtool-1.9.0/txt/librrd.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rpntutorial.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rpntutorial.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrd-beginners.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrd-beginners.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrd_pdpcalc.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrd_pdpcalc.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdbuild.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdbuild.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdcached.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdcached.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdcgi.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdcgi.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdcreate.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdcreate.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrddump.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrddump.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdfetch.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdfetch.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdfirst.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdfirst.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdflushcached.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdflushcached.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_data.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_data.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_examples.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_examples.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_graph.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_graph.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_rpn.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_rpn.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdinfo.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdinfo.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdlast.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdlast.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdlastupdate.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdlastupdate.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdlist.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdlist.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdpython.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdpython.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdresize.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdresize.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdrestore.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdrestore.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdthreads.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdthreads.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdtool.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdtool.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdtune.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdtune.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdtutorial.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdtutorial.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdupdate.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdupdate.txt
-#usr/share/doc/rrdtool-1.9.0/txt/rrdxport.pod
-#usr/share/doc/rrdtool-1.9.0/txt/rrdxport.txt
+#usr/lib/python3
+#usr/lib/python3/site-packages
+#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info
+#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/INSTALLER
+#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/METADATA
+#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/RECORD
+#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/REQUESTED
+#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/WHEEL
+#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/direct_url.json
+#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/licenses
+#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/licenses/COPYING
+#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/top_level.txt
+#usr/lib/python3/site-packages/rrdtool.cpython-310-xxxMACHINExxx-linux-gnu.so
+#usr/share/doc/rrdtool-1.10.2
+#usr/share/doc/rrdtool-1.10.2/html
+#usr/share/doc/rrdtool-1.10.2/html/RRDp.html
+#usr/share/doc/rrdtool-1.10.2/html/RRDs.html
+#usr/share/doc/rrdtool-1.10.2/html/bin_dec_hex.html
+#usr/share/doc/rrdtool-1.10.2/html/cdeftutorial.html
+#usr/share/doc/rrdtool-1.10.2/html/index.html
+#usr/share/doc/rrdtool-1.10.2/html/librrd.html
+#usr/share/doc/rrdtool-1.10.2/html/rpntutorial.html
+#usr/share/doc/rrdtool-1.10.2/html/rrd-beginners.html
+#usr/share/doc/rrdtool-1.10.2/html/rrd_pdpcalc.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdbuild.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdcached.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdcgi.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdcreate.html
+#usr/share/doc/rrdtool-1.10.2/html/rrddump.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdfetch.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdfirst.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdflushcached.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdgraph.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_data.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_examples.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_graph.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_rpn.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdinfo.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdlast.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdlastupdate.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdlist.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdpython.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdresize.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdrestore.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdthreads.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdtool.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdtune.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdtutorial.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdupdate.html
+#usr/share/doc/rrdtool-1.10.2/html/rrdxport.html
+#usr/share/doc/rrdtool-1.10.2/txt
+#usr/share/doc/rrdtool-1.10.2/txt/bin_dec_hex.pod
+#usr/share/doc/rrdtool-1.10.2/txt/bin_dec_hex.txt
+#usr/share/doc/rrdtool-1.10.2/txt/cdeftutorial.pod
+#usr/share/doc/rrdtool-1.10.2/txt/cdeftutorial.txt
+#usr/share/doc/rrdtool-1.10.2/txt/librrd.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rpntutorial.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rpntutorial.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrd-beginners.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrd-beginners.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrd_pdpcalc.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrd_pdpcalc.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdbuild.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdbuild.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdcached.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdcached.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdcgi.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdcgi.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdcreate.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdcreate.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrddump.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrddump.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdfetch.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdfetch.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdfirst.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdfirst.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdflushcached.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdflushcached.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_data.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_data.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_examples.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_examples.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_graph.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_graph.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_rpn.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_rpn.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdinfo.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdinfo.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdlast.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdlast.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdlastupdate.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdlastupdate.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdlist.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdlist.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdpython.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdpython.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdresize.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdresize.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdrestore.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdrestore.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdthreads.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdthreads.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdtool.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdtool.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdtune.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdtune.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdtutorial.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdtutorial.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdupdate.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdupdate.txt
+#usr/share/doc/rrdtool-1.10.2/txt/rrdxport.pod
+#usr/share/doc/rrdtool-1.10.2/txt/rrdxport.txt
#usr/share/locale/fr/LC_MESSAGES/rrdtool.mo
#usr/share/locale/hu/LC_MESSAGES/rrdtool.mo
+#usr/share/locale/ka/LC_MESSAGES/rrdtool.mo
#usr/share/man/man1/bin_dec_hex.1
#usr/share/man/man1/cdeftutorial.1
#usr/share/man/man1/rpntutorial.1
diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound
index 4ab2ee5b4..2fdf58b08 100644
--- a/config/rootfiles/common/unbound
+++ b/config/rootfiles/common/unbound
@@ -11,7 +11,7 @@ etc/unbound/unbound.conf
#usr/lib/libunbound.la
#usr/lib/libunbound.so
usr/lib/libunbound.so.8
-usr/lib/libunbound.so.8.1.36
+usr/lib/libunbound.so.8.1.37
#usr/lib/pkgconfig/libunbound.pc
usr/sbin/unbound
usr/sbin/unbound-anchor
diff --git a/config/rootfiles/core/203/filelists/rrdtool b/config/rootfiles/core/203/filelists/rrdtool
new file mode 120000
index 000000000..7a82e414b
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/rrdtool
@@ -0,0 +1 @@
+../../../common/rrdtool
\ No newline at end of file
diff --git a/config/rootfiles/oldcore/202/filelists/files b/config/rootfiles/oldcore/202/filelists/files
index 47b2a5a0b..dde5356f2 100644
--- a/config/rootfiles/oldcore/202/filelists/files
+++ b/config/rootfiles/oldcore/202/filelists/files
@@ -14,6 +14,7 @@ var/ipfire/backup/bin/backup.pl
var/ipfire/backup/include
var/ipfire/dns/dnsbl.json
var/ipfire/general-functions.pl
+var/ipfire/header.pl
var/ipfire/ipblocklist/sources
var/ipfire/network-functions.pl
var/ipfire/urlfilter/bin/autoupdate.pl
diff --git a/lfs/rrdtool b/lfs/rrdtool
index 5812dee78..8a58c62f8 100644
--- a/lfs/rrdtool
+++ b/lfs/rrdtool
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 1.9.0
+VER = 1.10.2
THISAPP = rrdtool-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = a5633b1bcacf53823f95f7899872e67d9941faec235c56546de8b66faf15a958a7c0d6a86d569c078e11a478dc272b1fbe784c3d3d9d45e8c3de696f0d6e378a
+$(DL_FILE)_BLAKE2 = 3d197fdf0f495870f19d1997d9e44779aa4154e00fdf06948148927d34842a714bd24131afd9368528e035ca536fdd71cbde716fbc96444d889916885a5edb6b
install : $(TARGET)
diff --git a/lfs/rsync b/lfs/rsync
index 6053dca82..2787e91a0 100644
--- a/lfs/rsync
+++ b/lfs/rsync
@@ -26,7 +26,7 @@ include Config
SUMMARY = Versatile tool for fast incremental file transfer
-VER = 3.4.2
+VER = 3.4.3
THISAPP = rsync-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = rsync
-PAK_VER = 22
+PAK_VER = 23
DEPS = libxxhash
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = bfc8aa3dc3b75de5e81519eab6d505ebd4d05ebc79c3336ebc925486fa6267cd13a37844d0817183cec68215788bc07e4a281f716bcd0bc7d93daa995df9122c
+$(DL_FILE)_BLAKE2 = 0bafded6a76a2cedcc6b1f37610c785fa05e62955a43ecb85b8522183a902be3b86157eccbf502116177be0efe19f3051d93cdca5e5734f4a3fbc8bca9878a4f
install : $(TARGET)
diff --git a/lfs/unbound b/lfs/unbound
index b0691e864..086025e4b 100644
--- a/lfs/unbound
+++ b/lfs/unbound
@@ -24,7 +24,7 @@
include Config
-VER = 1.25.0
+VER = 1.25.1
THISAPP = unbound-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 4c22e198c2257c251505f6845c42e67481edce2c5e8dc0c475584ef6b8e85907c322f32bd7ecfcb06243ba36fb3d91c63d8c1edd67dca66d374c6a242206e548
+$(DL_FILE)_BLAKE2 = da9818a14a540bf2d674f504a38da711cfead20af2c6f987aab74094b441ef31586f28608432d2369b2223b3287290f450218466654c71626e33df74da557f18
install : $(TARGET)
@@ -109,7 +109,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
-mkdir -pv /var/lib/unbound
install -v -m 644 $(DIR_SRC)/config/unbound/root.key \
/var/lib/unbound/root.key
- chown -Rv unbound:unbound /var/lib/unbound
+ chown -Rv nobody.nobody /var/lib/unbound
# Ship ICANN's certificates to validate DNS trust anchors
install -v -m 644 $(DIR_SRC)/config/unbound/icannbundle.pem \
@@ -117,7 +117,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
# Install the cache directory
-mkdir -pv /var/cache/unbound
- chown unbound:unbound /var/cache/unbound
+ chown nobody:nobody /var/cache/unbound
@rm -rf $(DIR_APP)
@$(POSTBUILD)
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-05-21 13:46 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-05-21 13:46 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. d3d06bc816eec2266bc78190db5e9d8e1c50e30f Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox