From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gLqSK5wfFz2xQW for ; Thu, 21 May 2026 13:46:09 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R12" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gLqSK5l45z2xNp for ; Thu, 21 May 2026 13:46:09 +0000 (UTC) Received: from people01.haj.ipfire.org (people01.haj.ipfire.org [IPv6:2001:678:b28::161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "people01.haj.ipfire.org", Issuer "E8" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gLqSK10nwz1v for ; Thu, 21 May 2026 13:46:09 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1779371169; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=MVJ/GnW5BNPeDuZS8wuaPuZ7X+EZoo8KA2fkSIfyn3Y=; b=1PY4TAKA5mLkoFN7oK+Bz1VK9fpng1TD5EG4XY4kDb3Ie+zN9wpuzC2OA2E00HO62gEFI3 XlqBM9ThFTas+CCg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1779371169; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=MVJ/GnW5BNPeDuZS8wuaPuZ7X+EZoo8KA2fkSIfyn3Y=; b=ZmmnCcCtSKPDwYqWR56ZedJdwNSrJPBWUeYNYkOgBNhxs7741zHn+qy11ygacVriT2I2Dm r0cfwN/sZ8FUiWRM146OvCePYKHAeRRIMaRPLKZ7FbBCwwy2nVUmT7LJJrpTjRdqtfKT3M /o9ciUoK/dC+g6hHKCp/NkSQ7PhS82m9bRTn7X0tga8vtKdOiAJf/dOX8IrHFo/UqBkT0z 712fRoqhgwESb1qRsO09WX99pFjsnV7Zk6jRm4RF5FyBz3amdcWd3uAm6NsD9FcBLbDDv7 dUODkhLoSkevEvN/Lgoaj8QKHS+hrX56gE9hCZeLSEDlH3KJpW/0r9OafFxjUA== Received: by people01.haj.ipfire.org (Postfix, from userid 1000) id 4gLqSK0ZZWz2xJB; Thu, 21 May 2026 13:46:09 +0000 (UTC) To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. d3d06bc816eec2266bc78190db5e9d8e1c50e30f X-Git-Refname: refs/heads/next X-Git-Reftype: branch X-Git-Oldrev: 8ea76ebb73498c770374ccef9977518dca300821 X-Git-Newrev: d3d06bc816eec2266bc78190db5e9d8e1c50e30f Message-Id: <4gLqSK0ZZWz2xJB@people01.haj.ipfire.org> Date: Thu, 21 May 2026 13:46:08 +0000 (UTC) From: Michael Tremer Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via d3d06bc816eec2266bc78190db5e9d8e1c50e30f (commit) via 4521ea10227e7f2729474505195aacfd6743e083 (commit) via 1928f95081afd1e8858a5a0d2ef1a44f897ecdaa (commit) via 0a717a1357e6b60275b0eb4113b0ae05f8a6cb77 (commit) via 43f50ebad077bfcb68493958acd48be3a961e015 (commit) via 88dea3a1187ad8e978db9859f8d497e1a08603ed (commit) via 887e752e324d49db60e195b567b65f093969c3aa (commit) via f7898141e90ce8241ac31ee40417f3addb90599e (commit) via dfcc64bd8aac6809d1c058cd891fddb373cb94d5 (commit) via c9f577122c69dcdb8682cb03015f8b9f2b0874ac (commit) via 2f97c9a22ce197f361dc02da13247ef0a807e969 (commit) via 35d45aad9c59e87fe60d2c66cb18dcd015960d71 (commit) via f607f40952821ee52bdf28d34ba91bf95bdbc01f (commit) from 8ea76ebb73498c770374ccef9977518dca300821 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit d3d06bc816eec2266bc78190db5e9d8e1c50e30f Author: Michael Tremer Date: Thu May 21 13:45:53 2026 +0000 core203: Ship rrdtool Signed-off-by: Michael Tremer commit 4521ea10227e7f2729474505195aacfd6743e083 Author: Matthias Fischer Date: Thu May 21 15:26:46 2026 +0200 rrdtool: Update to 1.10.2 Excerpt from "CHANGES": "RRDtool 1.10.2 - 2026-05-19 =========================== Bugfixes -------- * The Linux .deb packages were missing the Lua language binding @oetiker * The Python binding is now installed with pip into a consistent, distribution-independent location @oetiker Features -------- * RPM releases now ship matching debuginfo and debugsource packages @oetiker RRDtool 1.10.1 - 2026-05-19 =========================== Bugfixes -------- * Modernize obsolete autoconf macros so configure regenerates cleanly with current autotools @oetiker Features -------- * Add more DEB and RPM package variants: Ubuntu 26.04, Debian 13, AlmaLinux 8/10, Fedora @oetiker RRDtool 1.10.0 - 2026-05-19 =========================== Bugfixes -------- * Mark the Ruby bindings as Ractor safe @LevitatingBusinessMan * Fix Compatiblity with TCL-9 @yselkowitz * Correctly link Ruby Bindings @LevitatingBusinessMan * Fix MacOS Build error (no SOCK_CLOEXEC on mac) @ensc fixes oetiker#1261 * Fix build on 32bits platforms (like armhf) when time_t is 64bits, fixes #1264 * Fix compilation on illumos @hadfl * Python2.3 is deprecated and therefore, the Python bindings should use Python3 as default @pticon * Fix issue where RRDtool detects a LINE or AREA with a constant numeric value as being exportable * Fix broken argc overflow check in rrdcached tune handler that rejected all tune commands @somethingwithproof * Harden rrdcached pid file parsing and daemon options with strtol validation @somethingwithproof * Add NULL, bounds, and zero-division safety guards in xport, graph, and graph_helper @somethingwithproof * Escape control characters in JSON xport output per RFC 7159 @somethingwithproof fixes #1311 * Add pkg-config fallback for Perl and Ruby bindings when building standalone @somethingwithproof * Export ABS_TOP_BUILDDIR to environment for Ruby extconf.rb during in-tree builds @somethingwithproof * Fix parse_tick: shift the legend by 2 spaces for the "coloured-box" @neo954 #1314 Features -------- * Add Georgian translation @NorwayFun * Add -S short option for --step in rrdtool xport @somethingwithproof fixes #1310 * Automated release workflow: a single workflow_dispatch on master computes the next SemVer, bumps version strings in-place, builds source tarball + Windows MSVC zips + RPM (AlmaLinux) + DEB (Ubuntu/Debian) — the binary packages install under /opt/rrdtool so they coexist with distro-maintained rrdtool packages without touching the system. See .github/workflows/release.yml. @oetiker" Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 1928f95081afd1e8858a5a0d2ef1a44f897ecdaa Author: Matthias Fischer Date: Thu May 21 15:39:06 2026 +0200 rsync: Update to 3.4.3 For details see: https://download.samba.org/pub/rsync/NEWS#3.4.3 "SECURITY FIXES: Six CVEs are fixed in this release. All six are assigned by VulnCheck as CNA. Affected versions are 3.4.2 and earlier in every case. Three of the six (CVE-2026-29518, CVE-2026-43617, CVE-2026-43619) require non-default daemon configuration to reach: the first and third need use chroot = no for a module, the second needs daemon chroot = ... set in rsyncd.conf. Two (CVE-2026-43618, CVE-2026-43620) are reachable from a normal pull or a normal authenticated daemon connection. The sixth (CVE-2026-45232) is reachable only when RSYNC_PROXY is set and the proxy (or a MITM) returns a pathological response. Many thanks to the external researchers who reported these issues. CVE-2026-29518 (CVSS v4.0 7.3, HIGH): TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot. An rsync daemon configured with "use chroot = no" was exposed to a time-of-check / time-of-use race on parent path components: a local attacker with write access to a module could replace a parent directory component with a symlink between the receiver's check and its open(), redirecting reads (basis-file disclosure) and writes (file overwrite) outside the module. Default "use chroot = yes" is not exposed. secure_relative_open() (added in 3.4.0 for CVE-2024-12086) was previously unused in the daemon-no-chroot case; the fix enables it there and reroutes the sender's read-path opens through it. Reported by Nullx3D (Batuhan Sancak), Damien Neil and Michael Stapelberg. CVE-2026-43617 (CVSS v3.1 4.8, MEDIUM): Hostname/ACL bypass on an rsync daemon configured with daemon chroot = /X in rsyncd.conf when the chroot tree lacks DNS resolution support. The reverse-DNS lookup of the connecting client was performed after the daemon chroot had been entered; if /X did not contain the libc resolver fixtures (/etc/resolv.conf, /etc/nsswitch.conf, /etc/hosts, NSS service modules) the lookup failed and the connecting hostname was set to "UNKNOWN", causing hostname-based deny rules to silently fail open. IP-based ACLs are unaffected. The per-module use chroot setting is unrelated to this issue. The fix performs the lookup before entering the daemon chroot. Reported by MegaManSec. CVE-2026-43618 (CVSS v3.1 8.1, HIGH): Integer overflow in the compressed-token decoder enabling remote memory disclosure to an authenticated daemon peer. The receiver accumulated a 32-bit signed counter without overflow checking; a malicious sender could trigger an overflow that, with careful manipulation, leaked process memory contents to the attacker -⁠-⁠ environment variables, passwords, heap and library pointers -⁠-⁠ significantly weakening ASLR. The fix bounds the counter and adds wire-input validation in several adjacent places (defence-in-depth). Workaround for older releases: refuse options = compress in rsyncd.conf. Reported by Omar Elsayed. CVE-2026-43619 (CVSS v3.1 6.3, MEDIUM): Symlink races on path-based system calls in "use chroot = no" daemon mode (generalisation of CVE-2026-29518). Earlier fixes for symlink races on the receiver's open() call missed the same race class on every other path-based system call: chmod, lchown, utimes, rename, unlink, mkdir, symlink, mknod, link, rmdir and lstat. The fix routes each affected path-based syscall through a parent dirfd opened under RESOLVE_BENEATH-equivalent kernel-enforced confinement (openat2 on Linux 5.6+, O_RESOLVE_BENEATH on FreeBSD 13+ and macOS 15+, per-component O_NOFOLLOW walk elsewhere). Default "use chroot = yes" is not exposed. Reported by Andrew Tridgell as a follow-on audit of CVE-2026-29518. CVE-2026-43620 (CVSS v3.1 6.5, MEDIUM): Out-of-bounds read in the receiver's recv_files() enabling remote denial-of-service of any client pulling from a malicious server (incomplete fix of commit 797e17f). The earlier parent_ndx<0 guard added to send_files() was not applied to the visually-identical block in recv_files(). A malicious rsync server can drive any connecting client into a deterministic SIGSEGV by setting CF_INC_RECURSE in the compatibility flags and sending a crafted file list and transfer record. inc_recurse is the protocol-30+ default, so no special options are required on the victim. Workaround for older releases: --no-inc-recursive on the client. Reported by Pratham Gupta. CVE-2026-45232 (CVSS v3.1 3.1, LOW): Off-by-one out-of-bounds stack write in the rsync client's HTTP CONNECT proxy handler (establish_proxy_connection() in socket.c). After issuing the CONNECT request, rsync read the proxy's first response line one byte at a time into a 1024-byte stack buffer with the bound cp < &buffer[sizeof buffer - 1]. If the proxy (or a MITM in front of it) returned 1023+ bytes on that first line without a newline terminator, cp exited the loop pointing at a buffer slot the loop never wrote, leaving *cp holding stale stack data from the earlier snprintf() of the outgoing CONNECT request. The post-loop logic then wrote a single \0 one byte past the end of the buffer on the stack. Reach is client-side only, and only when RSYNC_PROXY is set so rsync tunnels an rsync:// connection through an HTTP CONNECT proxy. The written byte is always \0 and the offset is fixed by the buffer size, not attacker-chosen, so this is not an arbitrary-write primitive: practical impact is corruption of one adjacent stack byte and possible later misbehaviour or crash. The fix detects the "buffer filled without finding \n" case explicitly by position and refuses the response with "proxy response line too long". Reported by Aisle Research via Michal Ruprich (rsync-3.4.1-2.el10 QE). In addition to the six CVE fixes, this release adds defence-in-depth hardening on several adjacent paths: bounded wire-supplied counts and lengths in flist/io/acls/xattrs, a guard against length underflow in cumulative snprintf() callers, a parent block-index bounds check on the receiver, a NULL check in read_delay_line(), a lower ceiling on MAX_WIRE_DEL_STAT to avoid signed-int overflow in the read_del_stats() accumulator, rejection of hyphen-prefixed remote-shell hostnames (defence-in-depth against argv-injection in tooling that forwards untrusted input into the hostspec position; reported by Aisle Research via Michal Ruprich), and a NULL-check on localtime_r() in timestring() to keep a malicious server from crashing the client by advertising a file with an out-of-range modtime. BUG FIXES: Fixed a regression introduced by the 3.4.0 secure_relative_open() CVE fix where legitimate directory symlinks on the receiver side (e.g. when using -K / --copy-dirlinks) caused "failed verification -⁠-⁠ update discarded" errors on delta transfers. The old code rejected every symlink in the path with a per-component O_NOFOLLOW walk; the receiver now uses kernel-enforced "stay below dirfd" path resolution where available. Fixes #715. PORTABILITY / BUILD: secure_relative_open() now uses openat2(RESOLVE_BENEATH | RESOLVE_NO_MAGICLINKS) on Linux 5.6+, and openat() with O_RESOLVE_BENEATH on FreeBSD 13+ and macOS 15+ (Sequoia) / iOS 18+. The kernel rejects ".." escapes, absolute symlinks, and symlinks whose target lies outside the starting directory, while still following symlinks that resolve within it -⁠-⁠ the same trade-off that fixes the issue #715 regression without weakening the original CVE protection. Other platforms (Solaris, OpenBSD, NetBSD, Cygwin) retain the previous per-component O_NOFOLLOW walk; on those platforms the issue #715 regression remains visible. testsuite/xattrs: ignore SUNWattr_* in the Solaris xls helper. DEVELOPER RELATED: Added testsuite/symlink-dirlink-basis.test (taken from PR #864 by Samuel Henrique) covering the issue #715 regression and several edge cases (--backup, --inplace, --partial-dir with protocol < 29, top-level files). The test skips on platforms without a RESOLVE_BENEATH equivalent. Added regression tests for the new security fixes: chmod-symlink-race.test, chdir-symlink-race.test, bare-do-open-symlink-race.test, alt-dest-symlink-race.test, copy-dest-source-symlink.test, sender-flist-symlink-leak.test, secure-relpath-validation.test, daemon-chroot-acl.test and daemon-refuse-compress.test. The symlink-race tests skip on Cygwin, Solaris, OpenBSD and NetBSD (no RESOLVE_BENEATH equivalent on those platforms). runtests.py now errors early with a clear message when any of the test helper programs (tls, trimslash, t_unsafe, t_chmod_secure, t_secure_relpath, wildtest, getgroups, getfsdev) are missing, instead of letting many tests fail with confusing "not found" errors. Added OpenBSD and NetBSD CI jobs that run make check on those platforms. Added Ubuntu 22.04 and AlmaLinux 8 CI workflows so future backports to the two mainstream LTS families build and test on the same CI surface as trunk. testsuite/protected-regular.test now runs unprivileged via unshare with user-namespace UID mapping, falling back to skip if unshare/uidmap is not available; previously it required real root. Added symlink-dirlink-basis to the Cygwin CI's expected-skipped list. Removed the old release system (replaced by the new release script in 3.4.2)." Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 0a717a1357e6b60275b0eb4113b0ae05f8a6cb77 Merge: 8ea76ebb7 43f50ebad Author: Michael Tremer Date: Thu May 21 13:45:23 2026 +0000 Merge branch 'master' into next ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/rrdtool | 222 +++++++++++---------- config/rootfiles/common/unbound | 2 +- .../{oldcore/111 => core/203}/filelists/rrdtool | 0 config/rootfiles/oldcore/202/filelists/files | 1 + lfs/rrdtool | 6 +- lfs/rsync | 6 +- lfs/unbound | 8 +- 7 files changed, 127 insertions(+), 118 deletions(-) copy config/rootfiles/{oldcore/111 => core/203}/filelists/rrdtool (100%) Difference in files: diff --git a/config/rootfiles/common/rrdtool b/config/rootfiles/common/rrdtool index 68cfc0f25..8a13345e9 100644 --- a/config/rootfiles/common/rrdtool +++ b/config/rootfiles/common/rrdtool @@ -20,115 +20,123 @@ usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/RRDs.pm #usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/RRDs/.packlist usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/RRDs/RRDs.so #usr/lib/pkgconfig/librrd.pc -#usr/lib/python3.10/site-packages/rrdtool-0.1.10-py3.10.egg-info -#usr/lib/python3.10/site-packages/rrdtool-0.1.10-py3.10.egg-info/PKG-INFO -#usr/lib/python3.10/site-packages/rrdtool-0.1.10-py3.10.egg-info/SOURCES.txt -#usr/lib/python3.10/site-packages/rrdtool-0.1.10-py3.10.egg-info/dependency_links.txt -#usr/lib/python3.10/site-packages/rrdtool-0.1.10-py3.10.egg-info/top_level.txt -usr/lib/python3.10/site-packages/rrdtool.cpython-310-xxxMACHINExxx-linux-gnu.so -#usr/share/doc/rrdtool-1.9.0 -#usr/share/doc/rrdtool-1.9.0/html -#usr/share/doc/rrdtool-1.9.0/html/RRDp.html -#usr/share/doc/rrdtool-1.9.0/html/RRDs.html -#usr/share/doc/rrdtool-1.9.0/html/bin_dec_hex.html -#usr/share/doc/rrdtool-1.9.0/html/cdeftutorial.html -#usr/share/doc/rrdtool-1.9.0/html/index.html -#usr/share/doc/rrdtool-1.9.0/html/librrd.html -#usr/share/doc/rrdtool-1.9.0/html/rpntutorial.html -#usr/share/doc/rrdtool-1.9.0/html/rrd-beginners.html -#usr/share/doc/rrdtool-1.9.0/html/rrd_pdpcalc.html -#usr/share/doc/rrdtool-1.9.0/html/rrdbuild.html -#usr/share/doc/rrdtool-1.9.0/html/rrdcached.html -#usr/share/doc/rrdtool-1.9.0/html/rrdcgi.html -#usr/share/doc/rrdtool-1.9.0/html/rrdcreate.html -#usr/share/doc/rrdtool-1.9.0/html/rrddump.html -#usr/share/doc/rrdtool-1.9.0/html/rrdfetch.html -#usr/share/doc/rrdtool-1.9.0/html/rrdfirst.html -#usr/share/doc/rrdtool-1.9.0/html/rrdflushcached.html -#usr/share/doc/rrdtool-1.9.0/html/rrdgraph.html -#usr/share/doc/rrdtool-1.9.0/html/rrdgraph_data.html -#usr/share/doc/rrdtool-1.9.0/html/rrdgraph_examples.html -#usr/share/doc/rrdtool-1.9.0/html/rrdgraph_graph.html -#usr/share/doc/rrdtool-1.9.0/html/rrdgraph_rpn.html -#usr/share/doc/rrdtool-1.9.0/html/rrdinfo.html -#usr/share/doc/rrdtool-1.9.0/html/rrdlast.html -#usr/share/doc/rrdtool-1.9.0/html/rrdlastupdate.html -#usr/share/doc/rrdtool-1.9.0/html/rrdlist.html -#usr/share/doc/rrdtool-1.9.0/html/rrdpython.html -#usr/share/doc/rrdtool-1.9.0/html/rrdresize.html -#usr/share/doc/rrdtool-1.9.0/html/rrdrestore.html -#usr/share/doc/rrdtool-1.9.0/html/rrdthreads.html -#usr/share/doc/rrdtool-1.9.0/html/rrdtool.html -#usr/share/doc/rrdtool-1.9.0/html/rrdtune.html -#usr/share/doc/rrdtool-1.9.0/html/rrdtutorial.html -#usr/share/doc/rrdtool-1.9.0/html/rrdupdate.html -#usr/share/doc/rrdtool-1.9.0/html/rrdxport.html -#usr/share/doc/rrdtool-1.9.0/txt -#usr/share/doc/rrdtool-1.9.0/txt/bin_dec_hex.pod -#usr/share/doc/rrdtool-1.9.0/txt/bin_dec_hex.txt -#usr/share/doc/rrdtool-1.9.0/txt/cdeftutorial.pod -#usr/share/doc/rrdtool-1.9.0/txt/cdeftutorial.txt -#usr/share/doc/rrdtool-1.9.0/txt/librrd.txt -#usr/share/doc/rrdtool-1.9.0/txt/rpntutorial.pod -#usr/share/doc/rrdtool-1.9.0/txt/rpntutorial.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrd-beginners.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrd-beginners.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrd_pdpcalc.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrd_pdpcalc.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdbuild.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdbuild.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdcached.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdcached.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdcgi.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdcgi.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdcreate.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdcreate.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrddump.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrddump.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdfetch.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdfetch.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdfirst.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdfirst.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdflushcached.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdflushcached.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_data.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_data.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_examples.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_examples.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_graph.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_graph.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_rpn.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdgraph_rpn.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdinfo.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdinfo.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdlast.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdlast.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdlastupdate.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdlastupdate.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdlist.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdlist.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdpython.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdpython.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdresize.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdresize.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdrestore.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdrestore.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdthreads.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdthreads.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdtool.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdtool.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdtune.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdtune.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdtutorial.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdtutorial.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdupdate.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdupdate.txt -#usr/share/doc/rrdtool-1.9.0/txt/rrdxport.pod -#usr/share/doc/rrdtool-1.9.0/txt/rrdxport.txt +#usr/lib/python3 +#usr/lib/python3/site-packages +#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info +#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/INSTALLER +#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/METADATA +#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/RECORD +#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/REQUESTED +#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/WHEEL +#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/direct_url.json +#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/licenses +#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/licenses/COPYING +#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/top_level.txt +#usr/lib/python3/site-packages/rrdtool.cpython-310-xxxMACHINExxx-linux-gnu.so +#usr/share/doc/rrdtool-1.10.2 +#usr/share/doc/rrdtool-1.10.2/html +#usr/share/doc/rrdtool-1.10.2/html/RRDp.html +#usr/share/doc/rrdtool-1.10.2/html/RRDs.html +#usr/share/doc/rrdtool-1.10.2/html/bin_dec_hex.html +#usr/share/doc/rrdtool-1.10.2/html/cdeftutorial.html +#usr/share/doc/rrdtool-1.10.2/html/index.html +#usr/share/doc/rrdtool-1.10.2/html/librrd.html +#usr/share/doc/rrdtool-1.10.2/html/rpntutorial.html +#usr/share/doc/rrdtool-1.10.2/html/rrd-beginners.html +#usr/share/doc/rrdtool-1.10.2/html/rrd_pdpcalc.html +#usr/share/doc/rrdtool-1.10.2/html/rrdbuild.html +#usr/share/doc/rrdtool-1.10.2/html/rrdcached.html +#usr/share/doc/rrdtool-1.10.2/html/rrdcgi.html +#usr/share/doc/rrdtool-1.10.2/html/rrdcreate.html +#usr/share/doc/rrdtool-1.10.2/html/rrddump.html +#usr/share/doc/rrdtool-1.10.2/html/rrdfetch.html +#usr/share/doc/rrdtool-1.10.2/html/rrdfirst.html +#usr/share/doc/rrdtool-1.10.2/html/rrdflushcached.html +#usr/share/doc/rrdtool-1.10.2/html/rrdgraph.html +#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_data.html +#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_examples.html +#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_graph.html +#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_rpn.html +#usr/share/doc/rrdtool-1.10.2/html/rrdinfo.html +#usr/share/doc/rrdtool-1.10.2/html/rrdlast.html +#usr/share/doc/rrdtool-1.10.2/html/rrdlastupdate.html +#usr/share/doc/rrdtool-1.10.2/html/rrdlist.html +#usr/share/doc/rrdtool-1.10.2/html/rrdpython.html +#usr/share/doc/rrdtool-1.10.2/html/rrdresize.html +#usr/share/doc/rrdtool-1.10.2/html/rrdrestore.html +#usr/share/doc/rrdtool-1.10.2/html/rrdthreads.html +#usr/share/doc/rrdtool-1.10.2/html/rrdtool.html +#usr/share/doc/rrdtool-1.10.2/html/rrdtune.html +#usr/share/doc/rrdtool-1.10.2/html/rrdtutorial.html +#usr/share/doc/rrdtool-1.10.2/html/rrdupdate.html +#usr/share/doc/rrdtool-1.10.2/html/rrdxport.html +#usr/share/doc/rrdtool-1.10.2/txt +#usr/share/doc/rrdtool-1.10.2/txt/bin_dec_hex.pod +#usr/share/doc/rrdtool-1.10.2/txt/bin_dec_hex.txt +#usr/share/doc/rrdtool-1.10.2/txt/cdeftutorial.pod +#usr/share/doc/rrdtool-1.10.2/txt/cdeftutorial.txt +#usr/share/doc/rrdtool-1.10.2/txt/librrd.txt +#usr/share/doc/rrdtool-1.10.2/txt/rpntutorial.pod +#usr/share/doc/rrdtool-1.10.2/txt/rpntutorial.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrd-beginners.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrd-beginners.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrd_pdpcalc.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrd_pdpcalc.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdbuild.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdbuild.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdcached.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdcached.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdcgi.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdcgi.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdcreate.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdcreate.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrddump.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrddump.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdfetch.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdfetch.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdfirst.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdfirst.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdflushcached.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdflushcached.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_data.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_data.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_examples.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_examples.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_graph.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_graph.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_rpn.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_rpn.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdinfo.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdinfo.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdlast.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdlast.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdlastupdate.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdlastupdate.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdlist.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdlist.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdpython.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdpython.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdresize.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdresize.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdrestore.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdrestore.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdthreads.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdthreads.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdtool.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdtool.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdtune.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdtune.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdtutorial.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdtutorial.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdupdate.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdupdate.txt +#usr/share/doc/rrdtool-1.10.2/txt/rrdxport.pod +#usr/share/doc/rrdtool-1.10.2/txt/rrdxport.txt #usr/share/locale/fr/LC_MESSAGES/rrdtool.mo #usr/share/locale/hu/LC_MESSAGES/rrdtool.mo +#usr/share/locale/ka/LC_MESSAGES/rrdtool.mo #usr/share/man/man1/bin_dec_hex.1 #usr/share/man/man1/cdeftutorial.1 #usr/share/man/man1/rpntutorial.1 diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 4ab2ee5b4..2fdf58b08 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.1.36 +usr/lib/libunbound.so.8.1.37 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/config/rootfiles/core/203/filelists/rrdtool b/config/rootfiles/core/203/filelists/rrdtool new file mode 120000 index 000000000..7a82e414b --- /dev/null +++ b/config/rootfiles/core/203/filelists/rrdtool @@ -0,0 +1 @@ +../../../common/rrdtool \ No newline at end of file diff --git a/config/rootfiles/oldcore/202/filelists/files b/config/rootfiles/oldcore/202/filelists/files index 47b2a5a0b..dde5356f2 100644 --- a/config/rootfiles/oldcore/202/filelists/files +++ b/config/rootfiles/oldcore/202/filelists/files @@ -14,6 +14,7 @@ var/ipfire/backup/bin/backup.pl var/ipfire/backup/include var/ipfire/dns/dnsbl.json var/ipfire/general-functions.pl +var/ipfire/header.pl var/ipfire/ipblocklist/sources var/ipfire/network-functions.pl var/ipfire/urlfilter/bin/autoupdate.pl diff --git a/lfs/rrdtool b/lfs/rrdtool index 5812dee78..8a58c62f8 100644 --- a/lfs/rrdtool +++ b/lfs/rrdtool @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.9.0 +VER = 1.10.2 THISAPP = rrdtool-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = a5633b1bcacf53823f95f7899872e67d9941faec235c56546de8b66faf15a958a7c0d6a86d569c078e11a478dc272b1fbe784c3d3d9d45e8c3de696f0d6e378a +$(DL_FILE)_BLAKE2 = 3d197fdf0f495870f19d1997d9e44779aa4154e00fdf06948148927d34842a714bd24131afd9368528e035ca536fdd71cbde716fbc96444d889916885a5edb6b install : $(TARGET) diff --git a/lfs/rsync b/lfs/rsync index 6053dca82..2787e91a0 100644 --- a/lfs/rsync +++ b/lfs/rsync @@ -26,7 +26,7 @@ include Config SUMMARY = Versatile tool for fast incremental file transfer -VER = 3.4.2 +VER = 3.4.3 THISAPP = rsync-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = rsync -PAK_VER = 22 +PAK_VER = 23 DEPS = libxxhash @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = bfc8aa3dc3b75de5e81519eab6d505ebd4d05ebc79c3336ebc925486fa6267cd13a37844d0817183cec68215788bc07e4a281f716bcd0bc7d93daa995df9122c +$(DL_FILE)_BLAKE2 = 0bafded6a76a2cedcc6b1f37610c785fa05e62955a43ecb85b8522183a902be3b86157eccbf502116177be0efe19f3051d93cdca5e5734f4a3fbc8bca9878a4f install : $(TARGET) diff --git a/lfs/unbound b/lfs/unbound index b0691e864..086025e4b 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.25.0 +VER = 1.25.1 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 4c22e198c2257c251505f6845c42e67481edce2c5e8dc0c475584ef6b8e85907c322f32bd7ecfcb06243ba36fb3d91c63d8c1edd67dca66d374c6a242206e548 +$(DL_FILE)_BLAKE2 = da9818a14a540bf2d674f504a38da711cfead20af2c6f987aab74094b441ef31586f28608432d2369b2223b3287290f450218466654c71626e33df74da557f18 install : $(TARGET) @@ -109,7 +109,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) -mkdir -pv /var/lib/unbound install -v -m 644 $(DIR_SRC)/config/unbound/root.key \ /var/lib/unbound/root.key - chown -Rv unbound:unbound /var/lib/unbound + chown -Rv nobody.nobody /var/lib/unbound # Ship ICANN's certificates to validate DNS trust anchors install -v -m 644 $(DIR_SRC)/config/unbound/icannbundle.pem \ @@ -117,7 +117,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) # Install the cache directory -mkdir -pv /var/cache/unbound - chown unbound:unbound /var/cache/unbound + chown nobody:nobody /var/cache/unbound @rm -rf $(DIR_APP) @$(POSTBUILD) hooks/post-receive -- IPFire 2.x development tree