* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. f63045c6583e7478f8d2e3c58f6ad2d378058f55
@ 2026-05-26 9:21 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2026-05-26 9:21 UTC (permalink / raw)
To: ipfire-scm
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 73580 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via f63045c6583e7478f8d2e3c58f6ad2d378058f55 (commit)
via fb6e7a95be571fed6cf514d1d1f6f6598549dfb8 (commit)
via e5b63d44924406748aad5faac4a2b150c75085ba (commit)
via 54ba2594662ca196ec3991c9d75f544bf103ab92 (commit)
via 09d8b4ba16faf9d4cb18b85426c97005233c4ae7 (commit)
via c0601f6b2d9aebce420f352f4f93a7794655dd34 (commit)
via 69632d47c6e9b4d778a4806fa17ac9cccf955e13 (commit)
via 4462ea962a4e6317413d42c7555468ca86305b6e (commit)
via 3707b43603c3ebb1a4116eb30235a2fb02a161ef (commit)
via b7319c11b81e3d65508766c10d21aaafd4e6e00b (commit)
via e3efbfb230a66d248850b497e9a7aee52d65085f (commit)
via 70554f97ffee658bd6d274409a169c7c54461c2f (commit)
via 41d8df9c4e4e725debf992daf9a1ef686c1e6c0d (commit)
via f9b65a030528193477f82b60ab1fc3725c9f45ea (commit)
via 69c6a1550a246fe2018fdf5c00f44376260ab030 (commit)
via 0508a0f3276f10e5e47aa3f86172342c8e7f4e68 (commit)
via 0cbffc01f3c3d50c092cde232abae33551179c56 (commit)
via f66fba2e5a271fecb58ff15a734e9bf791d92798 (commit)
via b5b2a79944cc98e20a92a33ddad317521e35cbda (commit)
via a0a0acd047bf5916486b440accc4d6537f3b3f8b (commit)
via fcd32fe6bd7e0b519a564df169467d4443346059 (commit)
via 99513d51cfe1abf295b7f11ce38631a811ed4d4b (commit)
via e9ead87cf77f306eb81d2b77d6752fab74fc2341 (commit)
via 2ed589f8579549fb0e684d4cc49ab5d3fe52bd8d (commit)
via 8ebef4ff28ec97ac8361d6c20a9b28874ffb7f12 (commit)
via 142c281b7990a9490f64ceb3fb628fac6d69c031 (commit)
via 84f5c4e862653b9f1ab524f0ff4bd73e531f5e26 (commit)
via 68098972e2b31d2697af5d8b43dd009095487dbc (commit)
via 34d10d48b0b1aee2accc0c4030e426bef66c84ce (commit)
via cbd5b49b38058f05109df10f7f8f0014844ba4a1 (commit)
via 508dfcb83883aae1b3e60fd3a7cab007d3505479 (commit)
via 27adf417f1cf15b664daf3fe0fab4ac13fcabf7a (commit)
via ec82e05f03f0fcd548fcb0298d7ea82120575168 (commit)
from 9b43c3d18aff3b95b4ffd982d71e58994f6a75ae (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit f63045c6583e7478f8d2e3c58f6ad2d378058f55
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue May 26 09:19:47 2026 +0000
dnsdist: Update to 2.0.6
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit fb6e7a95be571fed6cf514d1d1f6f6598549dfb8
Author: Matthias Fischer <matthias.fischer@ipfire.org>
Date: Mon May 25 20:41:41 2026 +0200
rrdtool: Update to 1.10.3
For details see:
https://github.com/oetiker/rrdtool-1.x/releases/tag/v1.10.3
"Bugfixes
add missing cairo dependency for ubuntu package @peejaychilds"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit e5b63d44924406748aad5faac4a2b150c75085ba
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:25:05 2026 +0200
xfsprogs: Update to version 7.0.1
- Update from version 7.0.0 to 7.0.1
- No change in rootfile
- Changelog
7.0.1
xfs_healer: fix missing HAVE_LISTMOUNT flag and stubs (Darrick J. Wong)
libfrog: add missing HAVE_LISTMOUNT flag (Andrey Albershteyn)
gitignore: add xfs_healer binaries and services (Anthony Iliopoulos)
libfrog: add fallback stubs for libfrog_statmount and fstatmount (Anthony Iliopoulos)
libfrog: add missing statmount flag definitions (Anthony Iliopoulos)
configure: always check for statmount supported_mask (Anthony Iliopoulos)
platform_defs.h: fix __counted_by_ptr annotation (Darrick J. Wong)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 54ba2594662ca196ec3991c9d75f544bf103ab92
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:25:04 2026 +0200
vim: Update to version 9.2.0526
- Update from version 9.2.0305 to 9.2.0526
- Update of rootfile
- Changelog is not available. Generally each patch version number update is related to
a commit entry in the git repository. The details for all the commit changes can be
found at https://github.com/vim/vim/commits/master/
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 09d8b4ba16faf9d4cb18b85426c97005233c4ae7
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:24:56 2026 +0200
core203: Ship sqlite
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit c0601f6b2d9aebce420f352f4f93a7794655dd34
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:25:02 2026 +0200
sqlite: Update to version 3530100
- Update from version 3530000 to 3530100
- Update of rootfile
- Changelog
3530100
Fixes for problems in 3.53.0 reported by users. See the check-in timeline for details.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 69632d47c6e9b4d778a4806fa17ac9cccf955e13
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:24:55 2026 +0200
core203: Ship meson
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 4462ea962a4e6317413d42c7555468ca86305b6e
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:25:01 2026 +0200
meson: Update to version 1.11.1
- Update from version 1.10.1 to 1.11.1
- Update of rootfile
- Changelog
1.11.1
See changes in link https://mesonbuild.com/Release-notes-for-1-11-0.html
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 3707b43603c3ebb1a4116eb30235a2fb02a161ef
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:24:54 2026 +0200
core203: Ship lvm2
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit b7319c11b81e3d65508766c10d21aaafd4e6e00b
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:25:00 2026 +0200
lvm2: Update to version 2.03.41
- Update from version 2.03.40 to 2.03.41
- No change in rootfile
- Changelog
2.03.41
Allow `lvchange --syncaction repair` on RAID LVs with integrity.
Fix adopt result routing in lvmlockd for lockspace start actions. (2.03.25)
Fix gcd division-by-zero and lcm overflow in lvm-maths.
Fix dual AUTOTYPE matching logic in lvmcmdline.
Fix nr_dirty tracking, underflows and error-path leak in bcache.
Fix child comparison in compare_config.
Fix cross-endian raw_locn flags interpretation in format_text.
Fix inverted strstr check in remove_layer_from_lv layer rename.
Improve radix-tree functions.
Unlink temp file on lock failure in create_temp_name.
Verify /dev/urandom is device before reading.
Add asymmetric length check in compare_value.
Add thinpooldata to get_lvt_enum in toollib.
Clear DEV_FILTERED_IS_LV before re-evaluating usable filter.
Add missing FWRAID case to dev_filtered_reason in lvmcache.
Reset wwid_buf between duplicate device iterations in lvmcache.
Read cache_pool_max_chunks as 64bit number.
Add cppcheck and gccanalyze make targets.
Require exclusive lock on origin for snapshot merge.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit e3efbfb230a66d248850b497e9a7aee52d65085f
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:24:53 2026 +0200
core203: Ship libusb
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 70554f97ffee658bd6d274409a169c7c54461c2f
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:24:59 2026 +0200
libusb: Update to version 1.0.30
- Update from version 1.0.29 to 1.0.30
- Update of rootfile
- Changelog
1.0.30
* Add hotplug support on Microsoft Windows
* Add RAW_IO support in WinUSB backend
* Work around a macOS 26 Tahoe compatibility breakage due to Apple changing
kUSBHostPortPropertyPortNumber
* Add new API libusb_get_device_string() to access device strings without opening the
device
* Add new API libusb_get_session_data() which returns the OS-specific handle
* Fix device removal races on non-hotplug builds
* Improve descriptor parsing memory safety
* On Darwin, fix concurrency issues
* On Android, fix intermittent failures in get_usbfs_fd()
* On Windows, fix bus number assignment for root hub device, preventing duplicate bus
number assignments
* Fix compilation with Microsoft Visual Studio 2026
* Fix various compiler warnings, improved tests and examples
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 41d8df9c4e4e725debf992daf9a1ef686c1e6c0d
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:24:52 2026 +0200
core203: Ship krb5
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit f9b65a030528193477f82b60ab1fc3725c9f45ea
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:24:58 2026 +0200
krb5: Update to version 1.22.2
- Update from version 1.22.1 to 1.22.2
- No change to rootfile
- 1 CVE fix
- Changelog
1.22.2
Fix potential uninitialized pointer free in kadm5 XDR parsing [CVE-2023-36054].
Fix read overruns in SPNEGO parsing.
Compatibility fix for autoconf 2.72.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 69c6a1550a246fe2018fdf5c00f44376260ab030
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:24:51 2026 +0200
core203: Ship iana-etc
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 0508a0f3276f10e5e47aa3f86172342c8e7f4e68
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 14:24:57 2026 +0200
iana-etc: Update to version 20260511
- Update from version 20260409 to 20260511
- No change to rootfile
- No changelog provided
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 0cbffc01f3c3d50c092cde232abae33551179c56
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue May 26 09:00:44 2026 +0000
Revert "core203: Ship stage2"
This reverts commit b5b2a79944cc98e20a92a33ddad317521e35cbda.
I am not sure we can actually ship this without breaking things. I just
don't know what would happen...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit f66fba2e5a271fecb58ff15a734e9bf791d92798
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:57 2026 +0200
transmission: Fix build warning - chown: warning: '.' should be ':'
- Replace ownership separator from . to :
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit b5b2a79944cc98e20a92a33ddad317521e35cbda
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:56 2026 +0200
core203: Ship stage2
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit a0a0acd047bf5916486b440accc4d6537f3b3f8b
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:55 2026 +0200
stage2: Fix build warning - chown: warning: '.' should be ':'
- Replace ownership separator from . to :
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit fcd32fe6bd7e0b519a564df169467d4443346059
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:54 2026 +0200
squid: Fix build warning - chown: warning: '.' should be ':'
- Replace ownership separator from . to :
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 99513d51cfe1abf295b7f11ce38631a811ed4d4b
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:53 2026 +0200
proxy-accounting: Fix build warning - chown: warning: '.' should be ':'
- Replace ownership separator from . to :
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit e9ead87cf77f306eb81d2b77d6752fab74fc2341
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:52 2026 +0200
core203: Ship pakfire
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 2ed589f8579549fb0e684d4cc49ab5d3fe52bd8d
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:51 2026 +0200
pakfire: Fix build warning - chown: warning: '.' should be ':'
- Replace ownership separator from . to :
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 8ebef4ff28ec97ac8361d6c20a9b28874ffb7f12
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:50 2026 +0200
iptraf-ng: Fix build warning - chown: warning: '.' should be ':'
- Replace ownership separator from . to :
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 142c281b7990a9490f64ceb3fb628fac6d69c031
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:49 2026 +0200
guardian: Fix build warning - chown: warning: '.' should be ':'
- Replace ownership separator from . to :
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 84f5c4e862653b9f1ab524f0ff4bd73e531f5e26
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:48 2026 +0200
gnump3d: Fix build warning - chown: warning: '.' should be ':'
- Replace ownership separator from . to :
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 68098972e2b31d2697af5d8b43dd009095487dbc
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:47 2026 +0200
core203: Ship dma
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 34d10d48b0b1aee2accc0c4030e426bef66c84ce
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:46 2026 +0200
dma: Fix build warning - chown: warning: '.' should be ':'
- Replace ownership separator from . to :
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit cbd5b49b38058f05109df10f7f8f0014844ba4a1
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:45 2026 +0200
core203: Ship collectd
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 508dfcb83883aae1b3e60fd3a7cab007d3505479
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Mon May 25 13:55:44 2026 +0200
collectd: Fix build warning chown: warning: '.' should be ':'
- Replace ownership separator from . to :
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 27adf417f1cf15b664daf3fe0fab4ac13fcabf7a
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue May 26 08:57:59 2026 +0000
core203: Ship BIND
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit ec82e05f03f0fcd548fcb0298d7ea82120575168
Author: Matthias Fischer <matthias.fischer@ipfire.org>
Date: Mon May 25 11:35:38 2026 +0200
bind: Update to 9.20.23
For details see:
https://downloads.isc.org/isc/bind9/9.20.23/doc/arm/html/notes.html#notes-for-bind-9-20-23
"Notes for BIND 9.20.23
Security Fixes
Limit resolver server list size. (CVE-2026-3592)
When resolving a domain with many nameservers that shared overlapping
IP addresses (e.g., 10 NS records all pointing at the same set of
addresses), BIND could previously waste time querying duplicate
addresses and build up excessively large server lists. Addresses in the
resolver's server list are now deduplicated so that each unique IP is
only queried once per resolution attempt, regardless of how many NS
records point to it. The number of addresses stored per nameserver name
is also now capped at six (combined A and AAAA), preventing memory and
CPU overhead from domains with unusually large NS/glue sets.
ISC would like to thank Shuhan Zhang from Tsinghua University for
reporting this issue. [GL #5641]
Fix GSS-API resource leak. (CVE-2026-3039)
A memory leak was fixed where each GSS-API TKEY negotiation leaked a
security context inside the GSS library. An unauthenticated attacker
could exhaust server memory by sending repeated TKEY queries to a
server with tkey-gssapi-keytab configured. The leaked memory was
allocated by the GSS library, bypassing BIND's memory accounting.
Multi-round GSS-API negotiation (GSS_S_CONTINUE_NEEDED) is now
rejected, as BIND never supported it correctly and Kerberos/SPNEGO
completes in a single round.
ISC would like to thank Vitaly Simonovich for bringing this
vulnerability to our attention. [GL #5752]
Disable recursion, UPDATE, and NOTIFY for non-IN views. (CVE-2026-5946)
Recursion, dynamic updates (UPDATE), and zone change notifications
(NOTIFY) are now disabled for views with a class other than IN (such as
CHAOS or HESIOD); authoritative service for non-IN zones (e.g.
version.bind in class CHAOS) continues to work as before. Servers
configured with recursion yes; in a non-IN view log a warning at
startup, and named-checkconf flags the same condition. UPDATE and
NOTIFY messages that specify the meta-classes ANY or NONE in the
question section are now rejected with FORMERR.
This addresses a set of closely related security issues collectively
identified as CVE-2026-5946. ISC would like to thank Mcsky23 for
bringing these issues to our attention. [GL #5784]
Avoid unbounded recursion loop. (CVE-2026-5950)
A bug during bad server handling could cause the resolver to enter an
infinite loop, continuously sending queries to an upstream server with
no exit condition, until the resolver query timeout was hit. This has
been fixed.
ISC would like to thank Billy Baraja (BielraX) for bringing this issue
to our attention. [GL #5804]
Fix crash in resolver when SIG(0)-signed responses are received under
load. (CVE-2026-5947)
A resolver could crash when handling a SIG(0)-signed response if the
matching client query was cancelled while signature verification was
still in progress — for example, when the recursive-clients quota was
exhausted. This has been fixed.
ISC would like to thank Naoki Wakamatsu for bringing this vulnerability
to our attention. [GL #5819]
Fix use-after-free error in DNS-over-HTTPS when processing HTTP/2
SETTINGS frames. (CVE-2026-3593)
Previously, a use-after-free vulnerability in the DNS-over-HTTPS
implementation could cause named to crash when a client sent a flood of
HTTP/2 SETTINGS frames while a DoH response was being written. This
affected servers with DoH (DNS-over-HTTPS) enabled and has been fixed.
ISC would like to thank Naresh Kandula Parmar (Nottiboy) for reporting
this. [GL #5755]
Fix outgoing zone transfers' quota issue.
Unauthorized clients could consume the entire outgoing zone-transfer
quota and block authorized zone transfer clients. This has been fixed.
[GL #3589]
Feature Changes
Fix CPU spikes and slow queries when cache approaches memory limit.
Cache cleanup is now spread probabilistically to avoid CPU usage spikes
and a drop in query throughput. [GL #5891]
Bug Fixes
Use the zone file's basename as origin in DNSSEC tools.
In dnssec-signzone and dnssec-verify, when the zone origin is not
specified using the -o parameter, the default behavior is to try to
sign using the zone's file name as the origin. So, for example,
dnssec-signzone -S example.com will work, so long as the file name
matches the zone name.
This now also works if the zone is in a different directory. For
example, dnssec-signzone -S zones/example.com will set the origin value
to example.com. [GL #5678]
Fix a possible race condition during zone transfers.
The named process could terminate unexpectedly when processing an IXFR
message during a zone transfer. This has been fixed. [GL #5767]
Fix named crash when processing SIG records in dynamic updates.
Previously, named could abort if a client sent a dynamic update
containing a SIG record (the legacy signature type) to a zone
configured with an update-policy. The function dns_db_findrdataset had
an incorrect requirements prerequisite that prevented SIG records from
being looked up, which was triggered as part of processing an UPDATE
request and could be triggered remotely by any client permitted to send
updates. This has been fixed by ensuring that SIG records are handled
consistently with RRSIG records during update processing. [GL #5818]
Fix rndc modzone behavior for a zone in named.conf.
If a zone was present in the configuration file and not originally
added by rndc addzone, rndc modzone for that zone would succeed once
but subsequent rndc modzone attempts would fail. This has been fixed.
[GL #5826]
Fix zone verification of NSEC3 signed zones.
Previously, when computing the compressed bitmap during verification of
an NSEC3-signed zone, an undersized buffer was used that resulted in an
out-of-bounds write if there were too many active windows in the
bitmap. This impacted the mirror zones which are NSEC3-signed,
dnssec-signzone and dnssec-verify. This has been fixed. [GL #5834]
Prevent a crash when using both dns64 and filter-aaaa.
An assertion failure could be triggered if both dns64 and the
filter-aaaa plugin were in use simultaneously. This happened if the
plugin triggered a second recursion process, which then attempted to
store DNS64 state information in a pointer that had already been set by
the original recursion process. This has been fixed. [GL #5854]
Fixed an assertion failure when processing catalog zones.
If a TXT record containing an invalid name TSIG key name was found when
processing a catalog zone member's primaries definition, dns_name_free
was incorrectly called, triggering an assertion. This has been fixed.
[GL #5858]
Prevent malicious DNSSEC zones from exhausting validator CPU.
A DNSSEC-signed zone could publish a DNSKEY with an unusually large RSA
public exponent and force any validator resolving names in that zone to
spend disproportionate CPU verifying signatures. The validator now
rejects such DNSKEYs, matching the limit already applied to keys read
from files or HSMs. [GL #5881]
Fix rndc-confgen aborting on HMAC-SHA-384/512 keys above 512 bits.
rndc-confgen (with either -A hmac-sha384 or -A hmac-sha512) previously
documented a -b range of 1..1024, but any value above 512 aborted on
hardened builds instead of producing a key. The full advertised range
now works. [GL #5903]
Prevent crafted queries from degrading RRL performance.
With response rate limiting enabled, an attacker sending queries from
many spoofed source addresses could steer entries into the same slot of
the internal rate-limit table and slow down query processing on the
affected server. The table now uses a per-process keyed hash so the
placement of entries cannot be predicted or influenced from the
network. [GL #5906]
Prevent rare named crash when notifies are cancelled.
Under heavy load, named could occasionally crash when a queued outbound
notify or zone refresh was cancelled at the moment it was being sent —
for example, while a zone was being reloaded or removed. The race that
caused the crash is now prevented. [GL #5915]
Stop delv from aborting on a malformed query name.
delv previously aborted with SIGABRT instead of exiting cleanly when
given a query name that failed wire-format conversion (e.g. a label
longer than 63 octets). After this change delv prints the parse error
and exits with a normal failure code. [GL #5916]
Fix a crash when reconfiguring while an NTA is being rechecked.
Previously, if named was reconfigured or shut down while a negative
trust anchor was being rechecked against authoritative servers, the
in-flight recheck could outlive the view that owned it and cause named
to crash. This has been fixed. [GL #5938]
Fix a bug in allow-query/allow-transfer catalog zone custom properties.
The named process could terminate unexpectedly when processing a
catalog zone with an invalid allow-query or allow-transfer custom
property (i.e. having a non-APL type) coexisting with the valid
property. This has been fixed. [GL #5941]
Fix a memory leak issue in catalog zones.
The named process could leak small amounts of memory when processing a
catalog zone entry which had defined custom primary servers with TSIG
keys, if both the regular primaries custom property syntax and the
legacy alternative syntax (masters) were used at the same time. This
has been fixed. [GL #5943]
Fix suppressed missing-glue check in named-checkzone.
named-checkzone and named-checkconf -z silently skipped the
missing-glue check for any NS name that had already triggered an
extra-AAAA-glue warning, so zones missing required A glue could pass
validation and be deployed with broken delegations. [GL !11899]
Implement seamless outgoing TCP connection reuse.
The resolver can and will reuse outgoing TCP connections to the same
host, as recommended by RFC 7766. This prevents a whole class of
attacks that abuse the fact that establishing a TCP connection is
expensive and it is fairly easy to deplete the outgoing TCP ports by
putting them into TIME_WAIT state.
The number of pipelined queries per connection is capped at 256 to
limit the impact of a connection drop. [GL !11845]
Reject record sets too large to serve in DNS.
When BIND was asked to store a record set whose total size exceeded
what fit in a DNS message, it would allocate memory and build the
structure, then fail later at response time. Such oversized record sets
are now rejected at the time of storage with an error, avoiding wasted
work on data that can never be served. [GL !11963]"
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/common/bind | 10 +-
config/rootfiles/common/libusb | 2 +-
config/rootfiles/common/meson | 15 +-
config/rootfiles/common/rrdtool | 202 ++++++++++-----------
config/rootfiles/common/sqlite | 2 +-
config/rootfiles/common/vim | 4 +
.../{oldcore/100 => core/203}/filelists/bind | 0
.../{oldcore/125 => core/203}/filelists/collectd | 0
.../{oldcore/101 => core/203}/filelists/dma | 0
.../{oldcore/123 => core/203}/filelists/iana-etc | 0
.../{oldcore/169 => core/203}/filelists/krb5 | 0
.../{oldcore/145 => core/203}/filelists/libusb | 0
.../{oldcore/125 => core/203}/filelists/lvm2 | 0
.../{oldcore/189 => core/203}/filelists/meson | 0
.../{oldcore/167 => core/203}/filelists/pakfire | 0
.../{oldcore/125 => core/203}/filelists/sqlite | 0
lfs/bind | 4 +-
lfs/collectd | 4 +-
lfs/dma | 6 +-
lfs/dnsdist | 6 +-
lfs/gnump3d | 6 +-
lfs/guardian | 6 +-
lfs/iana-etc | 4 +-
lfs/iptraf-ng | 6 +-
lfs/krb5 | 21 +--
lfs/libusb | 6 +-
lfs/lvm2 | 4 +-
lfs/meson | 4 +-
lfs/pakfire | 4 +-
lfs/proxy-accounting | 23 ++-
lfs/rrdtool | 4 +-
lfs/sqlite | 4 +-
lfs/squid | 8 +-
lfs/stage2 | 4 +-
lfs/transmission | 4 +-
lfs/vim | 4 +-
lfs/xfsprogs | 4 +-
37 files changed, 195 insertions(+), 176 deletions(-)
copy config/rootfiles/{oldcore/100 => core/203}/filelists/bind (100%)
copy config/rootfiles/{oldcore/125 => core/203}/filelists/collectd (100%)
copy config/rootfiles/{oldcore/101 => core/203}/filelists/dma (100%)
copy config/rootfiles/{oldcore/123 => core/203}/filelists/iana-etc (100%)
copy config/rootfiles/{oldcore/169 => core/203}/filelists/krb5 (100%)
copy config/rootfiles/{oldcore/145 => core/203}/filelists/libusb (100%)
copy config/rootfiles/{oldcore/125 => core/203}/filelists/lvm2 (100%)
copy config/rootfiles/{oldcore/189 => core/203}/filelists/meson (100%)
copy config/rootfiles/{oldcore/167 => core/203}/filelists/pakfire (100%)
copy config/rootfiles/{oldcore/125 => core/203}/filelists/sqlite (100%)
Difference in files:
diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind
index 63816f380..d85eb2b3f 100644
--- a/config/rootfiles/common/bind
+++ b/config/rootfiles/common/bind
@@ -241,18 +241,18 @@ usr/bin/nsupdate
#usr/include/ns/types.h
#usr/include/ns/update.h
#usr/include/ns/xfrout.h
-usr/lib/libdns-9.20.22.so
+usr/lib/libdns-9.20.23.so
#usr/lib/libdns.la
#usr/lib/libdns.so
-usr/lib/libisc-9.20.22.so
+usr/lib/libisc-9.20.23.so
#usr/lib/libisc.la
#usr/lib/libisc.so
-usr/lib/libisccc-9.20.22.so
+usr/lib/libisccc-9.20.23.so
#usr/lib/libisccc.la
#usr/lib/libisccc.so
-usr/lib/libisccfg-9.20.22.so
+usr/lib/libisccfg-9.20.23.so
#usr/lib/libisccfg.la
#usr/lib/libisccfg.so
-usr/lib/libns-9.20.22.so
+usr/lib/libns-9.20.23.so
#usr/lib/libns.la
#usr/lib/libns.so
diff --git a/config/rootfiles/common/libusb b/config/rootfiles/common/libusb
index d6c159f95..bc74b19af 100644
--- a/config/rootfiles/common/libusb
+++ b/config/rootfiles/common/libusb
@@ -5,5 +5,5 @@ etc/udev/rules.d/23-usb.rules
#usr/lib/libusb-1.0.la
#usr/lib/libusb-1.0.so
usr/lib/libusb-1.0.so.0
-usr/lib/libusb-1.0.so.0.5.0
+usr/lib/libusb-1.0.so.0.6.0
#usr/lib/pkgconfig/libusb-1.0.pc
diff --git a/config/rootfiles/common/meson b/config/rootfiles/common/meson
index aab212049..bd7763962 100644
--- a/config/rootfiles/common/meson
+++ b/config/rootfiles/common/meson
@@ -1,11 +1,11 @@
#usr/bin/meson
-#usr/lib/python3.10/site-packages/meson-1.10.1-py3.10.egg-info
-#usr/lib/python3.10/site-packages/meson-1.10.1-py3.10.egg-info/PKG-INFO
-#usr/lib/python3.10/site-packages/meson-1.10.1-py3.10.egg-info/SOURCES.txt
-#usr/lib/python3.10/site-packages/meson-1.10.1-py3.10.egg-info/dependency_links.txt
-#usr/lib/python3.10/site-packages/meson-1.10.1-py3.10.egg-info/entry_points.txt
-#usr/lib/python3.10/site-packages/meson-1.10.1-py3.10.egg-info/requires.txt
-#usr/lib/python3.10/site-packages/meson-1.10.1-py3.10.egg-info/top_level.txt
+#usr/lib/python3.10/site-packages/meson-1.11.1-py3.10.egg-info
+#usr/lib/python3.10/site-packages/meson-1.11.1-py3.10.egg-info/PKG-INFO
+#usr/lib/python3.10/site-packages/meson-1.11.1-py3.10.egg-info/SOURCES.txt
+#usr/lib/python3.10/site-packages/meson-1.11.1-py3.10.egg-info/dependency_links.txt
+#usr/lib/python3.10/site-packages/meson-1.11.1-py3.10.egg-info/entry_points.txt
+#usr/lib/python3.10/site-packages/meson-1.11.1-py3.10.egg-info/requires.txt
+#usr/lib/python3.10/site-packages/meson-1.11.1-py3.10.egg-info/top_level.txt
#usr/lib/python3.10/site-packages/mesonbuild
#usr/lib/python3.10/site-packages/mesonbuild/__init__.py
#usr/lib/python3.10/site-packages/mesonbuild/_pathlib.py
@@ -233,6 +233,7 @@
#usr/lib/python3.10/site-packages/mesonbuild/scripts/pickle_env.py
#usr/lib/python3.10/site-packages/mesonbuild/scripts/pycompile.py
#usr/lib/python3.10/site-packages/mesonbuild/scripts/python_info.py
+#usr/lib/python3.10/site-packages/mesonbuild/scripts/rc.py
#usr/lib/python3.10/site-packages/mesonbuild/scripts/regen_checker.py
#usr/lib/python3.10/site-packages/mesonbuild/scripts/reprotest.py
#usr/lib/python3.10/site-packages/mesonbuild/scripts/run_tool.py
diff --git a/config/rootfiles/common/rrdtool b/config/rootfiles/common/rrdtool
index 8a13345e9..bf1effb08 100644
--- a/config/rootfiles/common/rrdtool
+++ b/config/rootfiles/common/rrdtool
@@ -33,107 +33,107 @@ usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/auto/RRDs/RRDs.s
#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/licenses/COPYING
#usr/lib/python3/site-packages/rrdtool-0.1.10.dist-info/top_level.txt
#usr/lib/python3/site-packages/rrdtool.cpython-310-xxxMACHINExxx-linux-gnu.so
-#usr/share/doc/rrdtool-1.10.2
-#usr/share/doc/rrdtool-1.10.2/html
-#usr/share/doc/rrdtool-1.10.2/html/RRDp.html
-#usr/share/doc/rrdtool-1.10.2/html/RRDs.html
-#usr/share/doc/rrdtool-1.10.2/html/bin_dec_hex.html
-#usr/share/doc/rrdtool-1.10.2/html/cdeftutorial.html
-#usr/share/doc/rrdtool-1.10.2/html/index.html
-#usr/share/doc/rrdtool-1.10.2/html/librrd.html
-#usr/share/doc/rrdtool-1.10.2/html/rpntutorial.html
-#usr/share/doc/rrdtool-1.10.2/html/rrd-beginners.html
-#usr/share/doc/rrdtool-1.10.2/html/rrd_pdpcalc.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdbuild.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdcached.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdcgi.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdcreate.html
-#usr/share/doc/rrdtool-1.10.2/html/rrddump.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdfetch.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdfirst.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdflushcached.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdgraph.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_data.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_examples.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_graph.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdgraph_rpn.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdinfo.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdlast.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdlastupdate.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdlist.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdpython.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdresize.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdrestore.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdthreads.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdtool.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdtune.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdtutorial.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdupdate.html
-#usr/share/doc/rrdtool-1.10.2/html/rrdxport.html
-#usr/share/doc/rrdtool-1.10.2/txt
-#usr/share/doc/rrdtool-1.10.2/txt/bin_dec_hex.pod
-#usr/share/doc/rrdtool-1.10.2/txt/bin_dec_hex.txt
-#usr/share/doc/rrdtool-1.10.2/txt/cdeftutorial.pod
-#usr/share/doc/rrdtool-1.10.2/txt/cdeftutorial.txt
-#usr/share/doc/rrdtool-1.10.2/txt/librrd.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rpntutorial.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rpntutorial.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrd-beginners.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrd-beginners.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrd_pdpcalc.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrd_pdpcalc.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdbuild.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdbuild.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdcached.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdcached.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdcgi.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdcgi.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdcreate.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdcreate.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrddump.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrddump.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdfetch.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdfetch.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdfirst.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdfirst.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdflushcached.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdflushcached.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_data.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_data.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_examples.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_examples.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_graph.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_graph.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_rpn.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdgraph_rpn.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdinfo.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdinfo.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdlast.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdlast.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdlastupdate.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdlastupdate.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdlist.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdlist.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdpython.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdpython.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdresize.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdresize.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdrestore.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdrestore.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdthreads.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdthreads.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdtool.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdtool.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdtune.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdtune.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdtutorial.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdtutorial.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdupdate.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdupdate.txt
-#usr/share/doc/rrdtool-1.10.2/txt/rrdxport.pod
-#usr/share/doc/rrdtool-1.10.2/txt/rrdxport.txt
+#usr/share/doc/rrdtool-1.10.3
+#usr/share/doc/rrdtool-1.10.3/html
+#usr/share/doc/rrdtool-1.10.3/html/RRDp.html
+#usr/share/doc/rrdtool-1.10.3/html/RRDs.html
+#usr/share/doc/rrdtool-1.10.3/html/bin_dec_hex.html
+#usr/share/doc/rrdtool-1.10.3/html/cdeftutorial.html
+#usr/share/doc/rrdtool-1.10.3/html/index.html
+#usr/share/doc/rrdtool-1.10.3/html/librrd.html
+#usr/share/doc/rrdtool-1.10.3/html/rpntutorial.html
+#usr/share/doc/rrdtool-1.10.3/html/rrd-beginners.html
+#usr/share/doc/rrdtool-1.10.3/html/rrd_pdpcalc.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdbuild.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdcached.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdcgi.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdcreate.html
+#usr/share/doc/rrdtool-1.10.3/html/rrddump.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdfetch.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdfirst.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdflushcached.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdgraph.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdgraph_data.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdgraph_examples.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdgraph_graph.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdgraph_rpn.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdinfo.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdlast.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdlastupdate.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdlist.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdpython.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdresize.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdrestore.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdthreads.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdtool.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdtune.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdtutorial.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdupdate.html
+#usr/share/doc/rrdtool-1.10.3/html/rrdxport.html
+#usr/share/doc/rrdtool-1.10.3/txt
+#usr/share/doc/rrdtool-1.10.3/txt/bin_dec_hex.pod
+#usr/share/doc/rrdtool-1.10.3/txt/bin_dec_hex.txt
+#usr/share/doc/rrdtool-1.10.3/txt/cdeftutorial.pod
+#usr/share/doc/rrdtool-1.10.3/txt/cdeftutorial.txt
+#usr/share/doc/rrdtool-1.10.3/txt/librrd.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rpntutorial.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rpntutorial.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrd-beginners.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrd-beginners.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrd_pdpcalc.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrd_pdpcalc.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdbuild.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdbuild.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdcached.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdcached.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdcgi.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdcgi.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdcreate.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdcreate.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrddump.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrddump.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdfetch.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdfetch.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdfirst.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdfirst.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdflushcached.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdflushcached.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdgraph.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdgraph.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdgraph_data.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdgraph_data.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdgraph_examples.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdgraph_examples.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdgraph_graph.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdgraph_graph.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdgraph_rpn.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdgraph_rpn.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdinfo.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdinfo.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdlast.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdlast.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdlastupdate.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdlastupdate.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdlist.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdlist.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdpython.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdpython.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdresize.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdresize.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdrestore.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdrestore.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdthreads.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdthreads.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdtool.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdtool.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdtune.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdtune.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdtutorial.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdtutorial.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdupdate.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdupdate.txt
+#usr/share/doc/rrdtool-1.10.3/txt/rrdxport.pod
+#usr/share/doc/rrdtool-1.10.3/txt/rrdxport.txt
#usr/share/locale/fr/LC_MESSAGES/rrdtool.mo
#usr/share/locale/hu/LC_MESSAGES/rrdtool.mo
#usr/share/locale/ka/LC_MESSAGES/rrdtool.mo
diff --git a/config/rootfiles/common/sqlite b/config/rootfiles/common/sqlite
index 47cd98234..bf2eabc20 100644
--- a/config/rootfiles/common/sqlite
+++ b/config/rootfiles/common/sqlite
@@ -3,6 +3,6 @@ usr/bin/sqlite3
#usr/include/sqlite3ext.h
usr/lib/libsqlite3.so
usr/lib/libsqlite3.so.0
-usr/lib/libsqlite3.so.3.53.0
+usr/lib/libsqlite3.so.3.53.1
#usr/lib/pkgconfig/sqlite3.pc
#usr/share/man/man1/sqlite3.1
diff --git a/config/rootfiles/common/vim b/config/rootfiles/common/vim
index 4be32a8fe..49584d6dd 100644
--- a/config/rootfiles/common/vim
+++ b/config/rootfiles/common/vim
@@ -280,6 +280,7 @@ usr/share/vim
#usr/share/vim/vim92/compiler/zig.vim
#usr/share/vim/vim92/compiler/zig_build.vim
#usr/share/vim/vim92/compiler/zig_build_exe.vim
+#usr/share/vim/vim92/compiler/zig_cc.vim
#usr/share/vim/vim92/compiler/zig_test.vim
#usr/share/vim/vim92/compiler/zsh.vim
#usr/share/vim/vim92/defaults.vim
@@ -455,6 +456,7 @@ usr/share/vim
#usr/share/vim/vim92/ftplugin/abaqus.vim
#usr/share/vim/vim92/ftplugin/abnf.vim
#usr/share/vim/vim92/ftplugin/ada.vim
+#usr/share/vim/vim92/ftplugin/algol68.vim
#usr/share/vim/vim92/ftplugin/alsaconf.vim
#usr/share/vim/vim92/ftplugin/ant.vim
#usr/share/vim/vim92/ftplugin/antlr4.vim
@@ -568,6 +570,7 @@ usr/share/vim
#usr/share/vim/vim92/ftplugin/gdscript.vim
#usr/share/vim/vim92/ftplugin/gdshader.vim
#usr/share/vim/vim92/ftplugin/gel.vim
+#usr/share/vim/vim92/ftplugin/ghostty.vim
#usr/share/vim/vim92/ftplugin/git.vim
#usr/share/vim/vim92/ftplugin/gitattributes.vim
#usr/share/vim/vim92/ftplugin/gitcommit.vim
@@ -1296,6 +1299,7 @@ usr/share/vim
#usr/share/vim/vim92/syntax/aflex.vim
#usr/share/vim/vim92/syntax/ahdl.vim
#usr/share/vim/vim92/syntax/aidl.vim
+#usr/share/vim/vim92/syntax/algol68.vim
#usr/share/vim/vim92/syntax/alsaconf.vim
#usr/share/vim/vim92/syntax/amiga.vim
#usr/share/vim/vim92/syntax/aml.vim
diff --git a/config/rootfiles/core/203/filelists/bind b/config/rootfiles/core/203/filelists/bind
new file mode 120000
index 000000000..48a0ebaef
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/bind
@@ -0,0 +1 @@
+../../../common/bind
\ No newline at end of file
diff --git a/config/rootfiles/core/203/filelists/collectd b/config/rootfiles/core/203/filelists/collectd
new file mode 120000
index 000000000..871b32f14
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/collectd
@@ -0,0 +1 @@
+../../../common/collectd
\ No newline at end of file
diff --git a/config/rootfiles/core/203/filelists/dma b/config/rootfiles/core/203/filelists/dma
new file mode 120000
index 000000000..60f4682da
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/dma
@@ -0,0 +1 @@
+../../../common/dma
\ No newline at end of file
diff --git a/config/rootfiles/core/203/filelists/iana-etc b/config/rootfiles/core/203/filelists/iana-etc
new file mode 120000
index 000000000..1f3d54dbd
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/iana-etc
@@ -0,0 +1 @@
+../../../common/iana-etc
\ No newline at end of file
diff --git a/config/rootfiles/core/203/filelists/krb5 b/config/rootfiles/core/203/filelists/krb5
new file mode 120000
index 000000000..082c3cbcd
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/krb5
@@ -0,0 +1 @@
+../../../common/krb5
\ No newline at end of file
diff --git a/config/rootfiles/core/203/filelists/libusb b/config/rootfiles/core/203/filelists/libusb
new file mode 120000
index 000000000..edbe8c215
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/libusb
@@ -0,0 +1 @@
+../../../common/libusb
\ No newline at end of file
diff --git a/config/rootfiles/core/203/filelists/lvm2 b/config/rootfiles/core/203/filelists/lvm2
new file mode 120000
index 000000000..d640870b7
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/lvm2
@@ -0,0 +1 @@
+../../../common/lvm2
\ No newline at end of file
diff --git a/config/rootfiles/core/203/filelists/meson b/config/rootfiles/core/203/filelists/meson
new file mode 120000
index 000000000..2fc86c133
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/meson
@@ -0,0 +1 @@
+../../../common/meson
\ No newline at end of file
diff --git a/config/rootfiles/core/203/filelists/pakfire b/config/rootfiles/core/203/filelists/pakfire
new file mode 120000
index 000000000..d5b1d0d03
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/pakfire
@@ -0,0 +1 @@
+../../../common/pakfire
\ No newline at end of file
diff --git a/config/rootfiles/core/203/filelists/sqlite b/config/rootfiles/core/203/filelists/sqlite
new file mode 120000
index 000000000..4ea569766
--- /dev/null
+++ b/config/rootfiles/core/203/filelists/sqlite
@@ -0,0 +1 @@
+../../../common/sqlite
\ No newline at end of file
diff --git a/lfs/bind b/lfs/bind
index 5dfedca9c..67a1a1ef0 100644
--- a/lfs/bind
+++ b/lfs/bind
@@ -25,7 +25,7 @@
include Config
-VER = 9.20.22
+VER = 9.20.23
THISAPP = bind-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -43,7 +43,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 74537646d8c08c4874548b064ab62bab3721d22e2654feed54ea0b61c087018b24f725d0cfaf8298bc71a1be280c753c86449b13e5d9ec26f84ba7e9f61b7a5a
+$(DL_FILE)_BLAKE2 = f4f5526fac2832685204ccc93087df3ce2dd3fbb267a5b68d0cf8074365a8f1d6e7b9ff130b41a023ea8dd96499a361a0396188f0a71a08630c54ec13e63c39a
install : $(TARGET)
diff --git a/lfs/collectd b/lfs/collectd
index f7e6ee206..b063bd36f 100644
--- a/lfs/collectd
+++ b/lfs/collectd
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -105,7 +105,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
echo "# Put custom configfiles in this folder" > /etc/collectd.d/info
cp -vf $(DIR_SRC)/config/collectd/collectd.* /etc/
mv /etc/collectd.vpn /var/ipfire/ovpn/collectd.vpn
- chown nobody.nobody /var/ipfire/ovpn/collectd.vpn
+ chown nobody:nobody /var/ipfire/ovpn/collectd.vpn
# install the collectd 4.x to 5.x migration program
install -v -m 755 -o root $(DIR_APP)/contrib/migrate-4-5.px /var/ipfire/collectd-migrate-4-to-5.pl
ln -f -s ../var/ipfire/ovpn/collectd.vpn /etc/collectd.vpn
diff --git a/lfs/dma b/lfs/dma
index 9200de290..f56210eb9 100644
--- a/lfs/dma
+++ b/lfs/dma
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -80,8 +80,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
cd $(DIR_APP) && make
cd $(DIR_APP) && make install mailq-link install-spool-dirs install-etc
install -v -m 755 $(DIR_SRC)/config/dma/dma-cleanup-spool /usr/sbin
- chown -R nobody.nobody /var/ipfire/dma
- chown nobody.mail /var/ipfire/dma/auth.conf
+ chown -R nobody:nobody /var/ipfire/dma
+ chown nobody:mail /var/ipfire/dma/auth.conf
chmod 640 /var/ipfire/dma/auth.conf
ln -svf dma /usr/sbin/sendmail.dma
/usr/sbin/alternatives --install /usr/sbin/sendmail sendmail /usr/sbin/sendmail.dma 20
diff --git a/lfs/dnsdist b/lfs/dnsdist
index ac4075afc..044dc682d 100644
--- a/lfs/dnsdist
+++ b/lfs/dnsdist
@@ -26,7 +26,7 @@ include Config
SUMMARY = A highly DNS-, DoS- and abuse-aware loadbalancer
-VER = 2.0.5
+VER = 2.0.6
THISAPP = dnsdist-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = dnsdist
-PAK_VER = 34
+PAK_VER = 35
DEPS =
@@ -50,7 +50,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = e00273f837d24b07c3d424c507fff8fea6f0c579014ad20a24dbd75a86c8c24a9a3d3477b3e044999303b34fa02ffa2e28d22dade967fdc1cca540b91c135015
+$(DL_FILE)_BLAKE2 = 5584784ae29553659e7c6b6001adf0c616fa4107ec77829fe70ef3107fed88b78d45dcc849526e58f1600ad529c0fa086258de422c6ce57497599ee28046697d
install : $(TARGET)
diff --git a/lfs/gnump3d b/lfs/gnump3d
index 292dee9f6..4bd85e557 100644
--- a/lfs/gnump3d
+++ b/lfs/gnump3d
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2023 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = gnump3d
-PAK_VER = 10
+PAK_VER = 11
DEPS =
@@ -92,7 +92,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
cd $(DIR_APP) && make install
mkdir -p /var/mp3
echo Folder for music files > /var/mp3/info
- chown nobody.nobody /var/mp3
+ chown nobody:nobody /var/mp3
install -m 644 $(DIR_SRC)/config/gnump3d/gnump3d.conf /etc/gnump3d/
ln -sf /usr/bin/gnump3d-index /etc/fcron.daily/gnump3d-index
diff --git a/lfs/guardian b/lfs/guardian
index 6eaa50aac..268cadd1e 100644
--- a/lfs/guardian
+++ b/lfs/guardian
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2022 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -35,7 +35,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = guardian
-PAK_VER = 27
+PAK_VER = 28
DEPS = perl-inotify2 perl-Net-IP
@@ -94,7 +94,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
# Create config directory and create files.
-mkdir -pv /var/ipfire/guardian
- chown nobody.nobody /var/ipfire/guardian
+ chown nobody:nobody /var/ipfire/guardian
# Create directory and file for logging.
-mkdir -pv /var/log/guardian
diff --git a/lfs/iana-etc b/lfs/iana-etc
index a9a79b464..ab28469f0 100644
--- a/lfs/iana-etc
+++ b/lfs/iana-etc
@@ -24,7 +24,7 @@
include Config
-VER = 20260409
+VER = 20260511
# https://github.com/Mic92/iana-etc
THISAPP = iana-etc-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 4b8f1056db4a38881a3efeb20e1b02ea2e2377a06f8fdf6c0b467277fab15c6b5e6c2e25d2eebe9140148591cd970283195adf2aabd5bbc5c4d61579c1845e56
+$(DL_FILE)_BLAKE2 = 7d0e759b01f60a604ca37f4c7e0b981d88b8091b17efee37e79e54f05fde9c349d5f3ec8a93256b9bddb55726a03a01b194f492003ed9a39f08d5ff8a1411280
install : $(TARGET)
diff --git a/lfs/iptraf-ng b/lfs/iptraf-ng
index f5e07352d..30d40253e 100644
--- a/lfs/iptraf-ng
+++ b/lfs/iptraf-ng
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = iptraf-ng
-PAK_VER = 5
+PAK_VER = 6
DEPS =
@@ -90,7 +90,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
# Directory install
-mkdir -vp /var/log/iptraf-ng
chmod 750 /var/log/iptraf-ng
- chown root.root /var/log/iptraf-ng
+ chown root:root /var/log/iptraf-ng
# Install logrotate
install -v -m 644 $(DIR_SRC)/config/iptraf-ng/iptraf-ng.logrotate \
diff --git a/lfs/krb5 b/lfs/krb5
index cdf2d80d6..1c3f5e2b2 100644
--- a/lfs/krb5
+++ b/lfs/krb5
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -26,7 +26,7 @@ include Config
SUMMARY = Kerberos
-VER = 1.22.1
+VER = 1.22.2
THISAPP = krb5-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = aed6a7f511ae7085a81fa6dc553881ea478bb8bb8aa43ab13e1312ead392fb93173998bfdfc730dca4d715b2ed52da6a12f2417f95525d9ff5c4629e8ca5fedc
+$(DL_FILE)_BLAKE2 = c0fee5d954fee1c10dcd16f37243fbf586b23f1136e58c21202cd38f195586592cf6d5fa1b9eba27c8b5210db4dcc72ea47a20011295980d5eda671861571a7e
install : $(TARGET)
@@ -78,14 +78,13 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
cd $(DIR_APP) && patch -Np2 -i $(DIR_SRC)/src/patches/krb5-1.18.3_remove_known_failed_test.patch
cd $(DIR_APP) && patch -Np2 < $(DIR_SRC)/src/patches/krb5-1.12.3-FTBFS.patch
cd $(DIR_APP) && ./configure \
- --prefix=/usr \
- --sysconfdir=/etc \
- --localstatedir=/var/lib \
- --with-system-et \
- --with-system-ss \
- --enable-dns-for-realm \
- CPPFLAGS="-I/usr/include/et"
-
+ --prefix=/usr \
+ --sysconfdir=/etc \
+ --localstatedir=/var/lib \
+ --with-system-et \
+ --with-system-ss \
+ --enable-dns-for-realm \
+ CPPFLAGS="-I/usr/include/et"
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
diff --git a/lfs/libusb b/lfs/libusb
index 4b12242d7..3341ca626 100644
--- a/lfs/libusb
+++ b/lfs/libusb
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 1.0.29
+VER = 1.0.30
THISAPP = libusb-$(VER)
DL_FILE = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 74db11918fa704eae3a320838c84dd06427acd5e3f73263e965decd1a09f0a14ed2d1a3916bf7eada26ab1164a3955a9fa3bdff8e3294264c6f8e1137866652a
+$(DL_FILE)_BLAKE2 = 88de82ef1e487719e3084faebe09c129d36483a74e5ead3d867972a7a08fc84e29523a98b2c44fadc251c3b383b59a8cfb4a5620ac4d751fa62b4ec1ab476724
install : $(TARGET)
diff --git a/lfs/lvm2 b/lfs/lvm2
index 538cb161e..e7a065e1b 100644
--- a/lfs/lvm2
+++ b/lfs/lvm2
@@ -24,7 +24,7 @@
include Config
-VER = 2.03.40
+VER = 2.03.41
THISAPP = LVM2.$(VER)
DL_FILE = $(THISAPP).tgz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 8879915ba959de72becceddfccd4a9f7cae14e1614cddc1b4f89ad6f784ecbca03c0d734e834f87f9f53b432aa16ac9a55c9e1c93cdf199a53166ea4c1964330
+$(DL_FILE)_BLAKE2 = 17dccb4ac2f171bb3ca1d6a542845aebb4690aed5e56aa644b4b42ad5ff085e55f222da3035b28199dd19788b8554ad311f5df14e325c6c4289881b5ee23ecb7
install : $(TARGET)
diff --git a/lfs/meson b/lfs/meson
index cf928514b..9ff7ae20e 100644
--- a/lfs/meson
+++ b/lfs/meson
@@ -24,7 +24,7 @@
include Config
-VER = 1.10.1
+VER = 1.11.1
THISAPP = meson-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 0d99736cdc1b3576026bce775a15c805c8178e2b21615829e028a05f5265cb5c72bd04a9ac5a45a9cf247d54f37f25a98f094efb5e1addb78e9a6ff863629642
+$(DL_FILE)_BLAKE2 = 3fcedb28ae3646e1c6bc1b9596ec3f04af1752bef7de9a0a1086aa103d8e0e91b22c66b85f66751447571d2d8815cf3582aacb1e252ea4af59aa18ae1bbede13
install : $(TARGET)
diff --git a/lfs/pakfire b/lfs/pakfire
index 2e75f7f68..8b9a7f92b 100644
--- a/lfs/pakfire
+++ b/lfs/pakfire
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -56,7 +56,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
sed -e "s/@VERSION@/$(PAKFIRE_VERSION)/g" \
< $(DIR_APP)/pakfire.conf \
> $(DIR_APP)/etc/pakfire.conf
- chown root.root $(DIR_APP) -R
+ chown root:root $(DIR_APP) -R
chmod 755 $(DIR_APP)/pakfire
ln -sf ../../var/log/pakfire /opt/pakfire/logs
ln -sf ../../var/cache/pakfire /opt/pakfire/cache
diff --git a/lfs/proxy-accounting b/lfs/proxy-accounting
index 125fa127d..2f0430ab9 100644
--- a/lfs/proxy-accounting
+++ b/lfs/proxy-accounting
@@ -1,6 +1,21 @@
###############################################################################
-# IPFire.org - An Open Source Firewall Solution #
-# Copyright (C) 2007-2018 IPFire Team <info@ipfire.org> #
+# #
+# IPFire.org - A linux based firewall #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
+# #
+# This program is free software: you can redistribute it and/or modify #
+# it under the terms of the GNU General Public License as published by #
+# the Free Software Foundation, either version 3 of the License, or #
+# (at your option) any later version. #
+# #
+# This program is distributed in the hope that it will be useful, #
+# but WITHOUT ANY WARRANTY; without even the implied warranty of #
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
+# GNU General Public License for more details. #
+# #
+# You should have received a copy of the GNU General Public License #
+# along with this program. If not, see <http://www.gnu.org/licenses/>. #
+# #
###############################################################################
###############################################################################
@@ -17,7 +32,7 @@ THISAPP = proxy-accounting-$(VER)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = proxy-accounting
-PAK_VER = 14
+PAK_VER = 15
DEPS = perl-File-ReadBackwards
@@ -69,7 +84,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
#activate hourly logging of proxy logfile
ln -sf /usr/local/bin/acct.pl /etc/fcron.hourly/squid-accounting
- chown -R nobody.nobody /var/ipfire/accounting
+ chown -R nobody:nobody /var/ipfire/accounting
@rm -rf $(DIR_APP)
@$(POSTBUILD)
diff --git a/lfs/rrdtool b/lfs/rrdtool
index 8a58c62f8..c9c70c0cc 100644
--- a/lfs/rrdtool
+++ b/lfs/rrdtool
@@ -24,7 +24,7 @@
include Config
-VER = 1.10.2
+VER = 1.10.3
THISAPP = rrdtool-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 3d197fdf0f495870f19d1997d9e44779aa4154e00fdf06948148927d34842a714bd24131afd9368528e035ca536fdd71cbde716fbc96444d889916885a5edb6b
+$(DL_FILE)_BLAKE2 = 5ceacdeb3c653db27516f65ea1748bc1e50c1b4a44ec2bdfe4375e34807654eff29d0c14e350a2b95b1b59da61e159d5cbadfb5bedcd44ab0ce79ee250e41733
install : $(TARGET)
diff --git a/lfs/sqlite b/lfs/sqlite
index 2db5e5a09..cd0445cbd 100644
--- a/lfs/sqlite
+++ b/lfs/sqlite
@@ -24,7 +24,7 @@
include Config
-VER = 3530000
+VER = 3530100
THISAPP = sqlite-autoconf-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = bf09ac0ba5b2950de6f0467e564898759d40ab73b11fcc2fd1310d5de42dbb0473d92842c10c2c5f886bb91c06b89bfed074956d442a61ba604c970977924958
+$(DL_FILE)_BLAKE2 = 1bfb5252bd541f4b7ae11ae2466b5656189bda7e677aa3cd53360f2ed7984ba5bbc20a3c04fa796d82a444b14baf801d9732c8c3a73eeadd8a8c9b9b7527bfa7
install : $(TARGET)
diff --git a/lfs/squid b/lfs/squid
index a4de8adb4..0271328ff 100644
--- a/lfs/squid
+++ b/lfs/squid
@@ -172,9 +172,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
chown -R nobody:nobody /var/ipfire/updatexlrator
chown -R root:root /var/ipfire/updatexlrator/bin
chown root:root /var/ipfire/updatexlrator/updxlrator-lib.pl
- chown nobody.squid /var/updatecache
- chown nobody.squid /var/updatecache/download
- chown nobody.squid /var/updatecache/metadata
+ chown nobody:squid /var/updatecache
+ chown nobody:squid /var/updatecache/download
+ chown nobody:squid /var/updatecache/metadata
chmod 775 /var/updatecache
chmod 775 /var/updatecache/download
chmod 775 /var/updatecache/metadata
@@ -184,7 +184,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
chown squid:squid /var/log/squid
ln -sf /usr/lib/squid /usr/lib/squid/auth
cp -f $(DIR_SRC)/config/proxy/proxy.pac /srv/web/ipfire/html/proxy.pac
- chown nobody.nobody /srv/web/ipfire/html/proxy.pac
+ chown nobody:nobody /srv/web/ipfire/html/proxy.pac
ln -sf /srv/web/ipfire/html/proxy.pac /srv/web/ipfire/html/wpad.dat
# Copy stylesheets for the errorpages
diff --git a/lfs/stage2 b/lfs/stage2
index c5130e961..1cb983e5f 100644
--- a/lfs/stage2
+++ b/lfs/stage2
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2022 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -131,7 +131,7 @@ endif
-mkdir -v /var/{lock,log,mail,spool,empty}
-mkdir -pv /var/{opt,cache,lib/misc,local}
-mkdir -pv /var/log/{counter,calamaris}
- chown nobody.nobody /var/log/calamaris
+ chown nobody:nobody /var/log/calamaris
touch /var/log/{btmp,lastlog,wtmp}
chmod -v 600 /var/log/btmp
chgrp -v utmp /var/log/lastlog
diff --git a/lfs/transmission b/lfs/transmission
index e93bca069..10e2bf271 100644
--- a/lfs/transmission
+++ b/lfs/transmission
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = transmission
-PAK_VER = 27
+PAK_VER = 28
DEPS =
@@ -91,7 +91,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
# Install configuration files.
-mkdir -pv /etc/transmission
cp -vf $(DIR_SRC)/config/transmission/* /etc/transmission/
- chown -Rv nobody.nobody /etc/transmission
+ chown -Rv nobody:nobody /etc/transmission
#install initscripts
$(call INSTALL_INITSCRIPTS,$(SERVICES))
diff --git a/lfs/vim b/lfs/vim
index 2f53dce1d..8d232a1a8 100644
--- a/lfs/vim
+++ b/lfs/vim
@@ -24,7 +24,7 @@
include Config
-VER = 9.2.0305
+VER = 9.2.0526
THISAPP = vim-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = cdd1146ac0f761ce7530ec823620a06e529224799c18eb404d251df7bdbb4ea3be86a38bc4d11d6ac02dc6b60d4a5281d5ac9db71e72cd45fa06cdfd50097761
+$(DL_FILE)_BLAKE2 = 0768ae9f4649bd3f5629138505e35f9aa16a6b70977abd0ef1f1398141dca8ce5b0912dbbc5f5d87bc179ff67c542aed8ec1f751da49633b2066a2b973a1f4e9
install : $(TARGET)
diff --git a/lfs/xfsprogs b/lfs/xfsprogs
index c84b0ca82..0b30980dd 100644
--- a/lfs/xfsprogs
+++ b/lfs/xfsprogs
@@ -24,7 +24,7 @@
include Config
-VER = 7.0.0
+VER = 7.0.1
# https://www.kernel.org/pub/linux/utils/fs/xfs/xfsprogs/
THISAPP = xfsprogs-$(VER)
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 7819801338316eb7ec9362710f9a98a6d0e5a20caae7493fef8430716c599746d79b49bef9bf1ece8c540a259918808f51818f2a4d37b684e007affe7be4affa
+$(DL_FILE)_BLAKE2 = 0834beee30b6f4d6cf16c4e34d2daff0720d1f620d75f1794eb8c8f8d822768f48e8d6d51e51ec8c1eeb73a0e3123a8baa6647cf3215f9d25254cc13d6cf02ba
install : $(TARGET)
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-05-26 9:21 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-05-26 9:21 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. f63045c6583e7478f8d2e3c58f6ad2d378058f55 Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox