* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 9e27ea51c08e4f2ff523d737361cdf9894fd1409
@ 2026-07-01 19:18 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2026-07-01 19:18 UTC (permalink / raw)
To: ipfire-scm
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 82998 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via 9e27ea51c08e4f2ff523d737361cdf9894fd1409 (commit)
via 8bcd6f4fe4fa0b0503528a928f91b983edc886b0 (commit)
via eecec62b793e2fec3fbf3d8f31bdf73a28e50c76 (commit)
via 4b6ef0f27c9621a4713d12fda4a4724399bccad2 (commit)
via 9a69d33cc4742efe0b958ae29dce9c61d60d7a32 (commit)
via d820db01de0f6ec5bec02ec5a55ab4aad7400509 (commit)
via b7dca1d402d9ef4012cd42f4c0314920f5f00265 (commit)
via f96a549bb6abd5b454ed2c8f17d137ce6e4af7f5 (commit)
via 8808e35b585a78c1e6fe16f244d735ce7d191490 (commit)
via 99534ca0e12762680a3f0a9facb0770177d28eab (commit)
via 5d9325bfc11bcf601a38b25f19522db025c94b79 (commit)
via 2d5438d78df53baca30918e8e95a50770a53cb44 (commit)
via 5620746b41a215f4099adc75476aa29af5600d3f (commit)
via fb2c3efdf13a0ed828e3cc55c6ce5c1c08e26115 (commit)
via e34525e3aa155ea87cd62f82a3dcf29df9ac7e07 (commit)
via 34c79cfb71ebccdbfd8fe5dd390e2b045233fa64 (commit)
via 08f5a04bcc1c37035dd46addb0d32c74fc1cdb48 (commit)
via 468dcf249398f8bb7beb7f6a2fc1a2ddb755e0ca (commit)
from 0d8071449430e608ccf9586f844ec8c02f2b5c6d (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 9e27ea51c08e4f2ff523d737361cdf9894fd1409
Author: Matthias Fischer <matthias.fischer@ipfire.org>
Date: Wed Jul 1 16:11:06 2026 +0200
tmux: Update to 3.7a
Bugfix-Release - for details see:
https://raw.githubusercontent.com/tmux/tmux/3.7a/CHANGES
"CHANGES FROM 3.7 to 3.7a
* Fix crash in break-pane when no name is provided.
* Scrollbar options are now cached rather than being looked up for every redraw
(issue 5298).
* Only forbid #( in names, allow #[, empty names, : and ."
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 8bcd6f4fe4fa0b0503528a928f91b983edc886b0
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Wed Jul 1 13:34:44 2026 +0200
transmission: Update to version 4.1.3
- Update from version 4.1.1 to 4.1.3
- Update of rootfile
- Changelog
4.1.3
All Platforms
Fixed a CORS bug that leaked the anti-CSRF nonce. (#8938)
Fixed a use-after-free bug in peer code. (#8921)
Fixed build error when compiling with fmt 12.2.0. (#8942)
Everything Else
Fixed a 4.1.2 build error in tests. (#8881)
4.1.2
Highlights
Fixed 4.1.0 bug that could cause duplicate HTTP announces to be sent to trackers.
(#8639)
All Platforms
Reject benc data that has invalid characters. (#8577)
Fixed a bug during the startup sequence where if one torrent failed to parse,
subsequent torrents would also fail. (#8605)
Fixed a bug that stalled some downloads at 99%. (#8654)
Fixed a 4.1.0 upgrade bug that could overwrite utp_enabled and
tcp_enabled settings. (#8658)
Fixed a 4.1.0 crash that could happen when a peer supplied reqq value smaller
than 32 in LTEP handshake. (#8713)
Fixed a 4.1.0 regression that periodically wrote upload & download stats to disk
even when Transmission had been idle since the last write, preventing the
stats file's disk from hibernating while idle. (#8722)
Fixed a 4.1.0 bug that prevented TCP peer connections on some systems. (#8748)
Added safeguards to HTTP responses to prevent clickjacking. (#8749)
Fixed edge case that didn't preserve the order of a batch of torrents when moving
their queue position up or down. (#8782)
Added sanitization for UTF-8 client names provided by peers during handshake. (#8809)
Stopped appending redundant zeros to blocklist files when downloaded from a
remote URL. (#8819)
Fixed a build failure that occurred when building with link-time optimization.
(#8540)
macOS Client
Fixed a 4.1.0 memory leak. (#8613)
Fixed navigation focus issues in the Inspector. (#8792, #8810)
Improved UI code to use less CPU. (#8832, #8833, #8835, #8836, #8842, #8846, #8851)
Qt Client
Fixed a 4.1.0 crash when parsing some RPC responses from older Transmission
servers. (#8618)
Fixed a 4.1.0 bug that saved both deprecated and current settings names to
settings.json. (#8623)
GTK Client
Fixed a 4.1.0 bug that did not show translated logging level strings. (#8611)
Fixed a 4.1.0 crash when toggling alternative speed limits. (#8709)
Web Client
Fixed a 4.1.0 bug that displayed timestamps in some dropdowns as 6.75:45 instead
of 6:45. (#8624)
Fixed a bug that could show incorrect torrent status when reconnecting to the
server after a lost connection. (#8780, #8783)
transmission-remote
Improved transmission-remote console output for JSON-RPC 2. (#8799, #8805)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit eecec62b793e2fec3fbf3d8f31bdf73a28e50c76
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Wed Jul 1 13:34:43 2026 +0200
netsnmpd: Update to version 5.9.5.2
- Update from version 5.9.3 to 5.9.5.2
- Update of rootfile
- Move the symlink generation and removal from the lfs to the instal/uninstall pak
file to be aligned with the majority of packages.
- Version 5.9.4 has the note
IMPORTANT: SNMP over TLS and/or DTLS are not functioning properly
in this release with various versions of OpenSSL and will be fixed
in a future release.
- This issue has been in place since Aug 2023 and does not look to have been fixed as
far as I have been able to tell. The developers also say that this tool should only
be used on trusted local networks anyway. Additionally version 5.9.5 has a CVE fix.
Based on this I am submitting the update patch for review and decision. I think it is
better to do the update because it does not look like the OpenSSL issue will be
fixed anytime soon. It doesn't appear that anyone is working on it.
https://github.com/net-snmp/net-snmp/issues/828
- Changelog
5.9.5.2
building:
- Fix an issue with needing limits.h included.
- update to autoconf 2.72
5.9.5.1
Only a version numbering fix.
5.9.5
snmptrapd:
- fixed a critical vulnerability (CVE-2025-68615) which can be triggered
by a specially crafted trap
snmplib:
- Add support for IPV6_RECVPKTINFO
- Port the SSH domain transport to FreeBSD
- Improve error handling in parse_enumlist and other parsing functions
- Filter out non-ASCII characters from output
- Fix multiple memory leaks in MIB parsing, OID handling, and transport filters
- Fix multiple buffer overflows triggered when creating ASN packets
- Fix handling of large/negative values (integer underflows/overflows)
- Fix segmentation faults when `varbind` cannot be constructed or buf is null
- Fix crash in netsnmp_parse_args when passing invalid argument lists
- Fix SNMPv3 multithreading support for snmp_sess_open()
snmpd:
- Make UCD-SNMP::dskTable dynamic if includeAllDisks is set.") added
a verification that drops all filesystems not present in other_fs[]
table. So add 'ubifs' in other_fs[] to fix it.
- Fix SIGHUP handling for engineID changes and agent port changes
- Fix a use-after-free in unregister_mib_context()
- Fix regression of memory leak when using RPMDB macros
- Improve cache management: clear timer_id on stop, keep cache flags unchanged
- Always open libkvm in "safe mode" on FreeBSD
- Fix crash when snmptrapd subagent terminates the TCP connection
apps:
- snmpusm: Improve error handling and fix memory leaks
- sshtosnmp: Avoid EINVAL when passing credentials over SSH unix domain socket
- snmptest: Plug a possible memory leak
- snmpget: Avoid leak if parsing OID fails
MIBs:
- EtherLike-MIB: Optimize Linux implementation to use netlink statistics
- IP-MIB: Add Linux 6.7 compatibility for parsing /proc/net/snmp
- LM-SENSORS-MIB: Support negative temperatures
- SNMP-TLS-TM-MIB: Update to RFC 9456 and allow TLS protocols higher than TLS1.0
- HOST-RESOURCES-MIB: Add support for RPM SQLite DB background
building:
- Add support for Windows on ARM
- Support OpenBSD 8, FreeBSD 15/16, and DragonflyBSD
- Fix build for OS/X versions prior to 10.6.0
- Windows: Bump OpenSSL version and fix library paths
- MinGW64: Switch from pkg-config to pkgconf
- Add --with-wolfssl Add support for building and linking with the
wolfSSL library instead of OpenSSL. Other changes that have been
included in this patch are: - Only enable AES support if
EVP_aes_128_cfb() is available. - Add support for detecting SSL
functions if these have been defined as macros.
5.9.4
IMPORTANT: SNMP over TLS and/or DTLS are not functioning properly
in this release with various versions of OpenSSL and will be fixed
in a future release.
libsnmp:
- Remove the SNMP_SWIPE_MEM() macro Remove this macro since it is not
used in the Net-SNMP code base.
- DISPLAY-HINT fixes
- Miscellanious improvements to the transports
- Handle multiple oldEngineID configuration lines
- fixes for DNS names longer than 63 characters
agent:
- Added a ignoremount configuration option for the HOST-MIB
- disallow SETs with a NULL varbind
- fix the --enable-minimalist build
apps:
- snmpset: allow SET with NULL varbind for testing
- snmptrapd: improved MySQL logging code
general:
- configure: Remove -Wno-deprecated as it is no longer needed
- miscellanious ther bug fixes, build fixes and cleanups
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 4b6ef0f27c9621a4713d12fda4a4724399bccad2
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Wed Jul 1 13:34:42 2026 +0200
ltrace: Update to version 0.8.1
- Update from version 0.7.3 to 0.8.1
- Update of rootfile
- ltrace now supports aarch64 (full support) and riscv64 (initial support) since
version 0.8.0
- Changelog
0.8.1
Bugfixes
- include config.h in more cases to fix LTO builds
0.8.0
Prototype libraries
- Each DSO can now ship an ltrace config file (called prototype
library) that ltrace will open when that DSO is loaded to process
image. See ltrace(1) for details.
- ltrace.conf is no longer part of installation tarball. Instead,
we now ship libc.so.conf, libm.so.conf, libacl.so.conf, and
syscalls.conf. Those are now istalled to /usr/share/ltrace by
default. /etc/ltrace.conf and $HOME/.ltrace.conf are still
loaded if present, and can contain arbitrary user configuration.
- The option -F was retrofitted to be a colon-separated list of
prototype libraries, and directories to look for prototype
libraries in. On Linux, ltrace looks into XDG_CONFIG_HOME,
XDG_CONFIG_DIRS, and /usr/share/ltrace as well.
- Wide character strings are supported in prototypes. Use "string"
lens as usual, but use array of integers as underlying type.
libc.so.conf now contains prototypes of wide character functions.
- Sole void function parameter such as in the following example, is
now considered obsolete:
| int fork(void); |
This use is still accepted, taken to mean "hide(int)", but
produces a warning, and will be removed in future.
- Prototypes are now read from DWARF debug info, if available. This
complements the data available in config files
Architectural support
- RISC-V initial support included.
- MIPS and MIPSel are now handled by the same backend.
- ARMv6, ARMv7 and ARMv8 (AArch64) are supported, including full
fetch backend. ARMv8 backend doesn't support tracing of 32-bit
binaries, as currently there's no 32-bit userspace available for
ARM64 processors.
- Imagination Technologies Meta is now supported.
- PowerPC64 ELFv2 little-endian ABI is now supported including full
fetch backend.
- Cadence Tensilica Xtensa is now supported.
- LoongArch is now supported.
- On Linux, tracing of IFUNC symbols is supported. On i386,
x86_64, ppc32 with secure PLT and ppc64, IRELATIVE PLT slots are
traced as well.
-w output now shows full library path
The output format is similar to glibc's backtrace_symbols, e.g.:
> /bin/ls(_init+0x19be) [0x40398e]
> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f50cbc3676d]
> /bin/ls(_init+0x25fd) [0x4045cd]
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 9a69d33cc4742efe0b958ae29dce9c61d60d7a32
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Wed Jul 1 13:34:40 2026 +0200
core204: Ship lsof
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit d820db01de0f6ec5bec02ec5a55ab4aad7400509
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Wed Jul 1 13:34:41 2026 +0200
lsof: Update to version 4.99.7
- Update from version 4.99.5 to 4.99.7
- No change to rootfile
- Changelog
4.99.7
lsof_free_result(): handle result == NULL by @neek78 (#349)
[linux] Fix missing parenthesis in lstat error message format by
@cuiweixie (#350)
Fix use-after-free in lsof_select_process_regex by @cuiweixie (#351)
Fix truncated fd numbers in -F field output by @kurok (#352)
Add -J/-j options for JSON and JSON Lines output format. -J outputs a
JSON envelope with process and file information; -j outputs JSON Lines
format where each line is a JSON object representing a file descriptor.
by @kurok (#353)
Document non-UTF-8 encoding behavior in JSON output by @kurok (#355)
Follow autoconf conventions for --enable/--disable help output
by @kurok (#356)
Skip building liblsof when --disable-liblsof is given by @kurok (#357)
[linux] Display connection state for UDP sockets with -T option by
@kurok (#358)
Add more information to the tutorial about debugging busy
mounts by @jakobcornell (#360)
Fix case sensitivity in INSTALL commands by @AngelofVerdant (#361)
[netbsd] Fix support for NetBSD 10/11 by @jiegec (#363)
4.99.6
[darwin] parse and print NETPOLICY FDTYPE properly by @neek78 (#347)
[linux] Treat NFS ESTALE fds as unlinked for +L selection by @x-lugoo
(#345)
[solaris] Update dlsof.h for Solaris NFS rnode4.h issues by
@nic-kulowiec (#342)
[doc] fix minor doc errors in 00README by @nic-kulowiec (#340)
[aix] Add AIX platform-specific process_file() with filename capture by
@uptycs-rmack (#339)
[aix] Fix AIX dialect to work with context refactor by @uptycs-rmack
(#338)
[freebsd] Update supported FreeBSD versions by @yasuhirokimura (#337)
Fix null pointer exception by @admardare-cyber (#336)
[freebsd] Fix freebsd 15 compat due to rpc and sysctl changes in kernel
headers
[darwin] File name is now properly saved in liblsof (#348)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit b7dca1d402d9ef4012cd42f4c0314920f5f00265
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:22 2026 +0200
stunnel: Update to version 5.78
- Update from version 5.72 to 5.78
- No change to rootfile
- Changelog
5.78
* Security bugfixes
- OpenSSL DLLs updated to version 3.5.6.
* Bugfixes
- Fixed WIN32 transfer() loop errors with OOB TCP.
- Fixed a memory leak introduced in version 5.73.
- Build fix for systems without timegm()
(thanks to Jose A. Diaz and Shubham Gupta).
- Fixed a startup crash when both global (default)
and service-level lists of values are configured
for an option.
* Features
- Support for zstd and brotli compression with OpenSSL 3.2
and TLS 1.2 or older.
- WIN32 OpenSSL build with zlib and zstd support.
- Support for new "options" parameter values.
- Less bloated errors on an invalid configuration file.
- Documentation updated from Pod to Pandoc Markdown.
- Removed support for OpenSSL versions older than 0.9.8.
The final update for the OpenSSL 0.9.7 branch
(0.9.7m) was issed on 23 Feb 2007.
5.77
* Security bugfixes
- OpenSSL DLLs updated to version 3.5.5.
* Bugfixes
- Avoid attempting to fetch OCSP stapling for PSK-only
configuration sections.
* Features
- Merged applicable patches from Fedora and Debian:
- Use SOURCE_DATE_EPOCH for reproducible builds.
- Skip the OpenSSL version check when AUTOPKGTEST_TMP is set.
- Enable PrivateTmp in the stunnel.service template.
- Clarify the manual page for the "curves" option.
- Log client IP addresses on TLS errors.
5.76
* Security bugfixes
- OpenSSL DLLs updated to version 3.5.4.
- Service-level multivalued options now override (rather than
append to) global defaults, preventing unintended configurations.
* Bugfixes
- Fixed enabling/disabling of the default fips=yes property.
- Missing OCSP stapling is no longer logged as an error.
- Fixed a crash when a PIN was required due to the PKCS#11
CKA_ALWAYS_AUTHENTICATE attribute.
* Features
- Quantum-resistant hybrid key agreement X25519+ML-KEM-768
(X25519MLKEM768) used by default with OpenSSL 3.5+ and TLS 1.3.
- Multiple cert sources are supported, allowing a certificate to
be fetched from a provider while loading the chain from a file.
- Android build switched to a 16 KB page size.
5.75
* Security bugfixes
- OpenSSL DLLs updated to version 3.4.1.
- OpenSSL FIPS Provider updated to version 3.1.2.
* Bugfixes
- Fixed infinite loop triggered by OCSP URL parsing errors
(thanks to Richard Könning for reporting).
- Fixed OPENSSL_NO_OCSP build issues
(thanks to Dmitry Mostovoy for reporting).
- Fixed default curve selection in FIPS mode with OpenSSL 3.4+.
- Fixed tests with modern Python versions.
- Fixed tests with multiple OpenSSL versions installed.
* Features
- Added provider URI support for "cert" and "key" options.
- Added new "CAstore" service-level option (OpenSSL 3.0+).
- Added "provider" (OpenSSL 3.0+), "providerParameter"
(OpenSSL 3.5+), and "setEnv" global options.
- Key file/URI path added to passphrase prompt on Unix.
- PKCS#11 provider installed on Windows.
5.74
* Bugfixes
- Fixed a stapling cache deallocation crash.
- Fixed "redirect" with protocol negotiation.
* Features
- "protocolHost" support for "socks" protocol clients.
- More detailed logs in OpenSSL 3.0 or later.
5.73
* Security bugfixes
- OpenSSL DLLs updated to version 3.3.2.
- OpenSSL FIPS Provider updated to version 3.0.9.
* Bugfixes
- Fixed a memory leak while reloading stunnel.conf
sections with "client=yes" and "delay=no".
- Fixed TIMEOUTocsp with values greater than 4.
- Fix the IPv6 test on a non-IPv6 machine.
* Features
- HELO replaced with EHLO in the post-STARTTLS SMTP
protocol negotiation (thanks to Peter Pentchev).
- OCSP stapling fetches moved away from server threads.
- Improved client-side session resumption.
- Added support for the mimalloc allocator.
- Check for protocolHost moved to configuration file
processing for the client-side CONNECT protocol.
- Clarified some confusing OpenSSL's certificate
verification error messages.
- stunnel.nsi updated for Debian 13 and Fedora.
- Improved NetBSD compatibility.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit f96a549bb6abd5b454ed2c8f17d137ce6e4af7f5
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:21 2026 +0200
strace: Update to version 7.1
- Update from version 6.18 to 7.1
- No change to rootfile
- Changelog
7.1
* Improvements
* Implemented wall-clock-aware columns (wall-total, wall-min, wall-max,
wall-avg) for the -c/--summary-only report, allowing wall-clock and
system CPU times to be displayed side by side in a single run.
* Included out-of-range syscalls in the -c/--summary-only report.
* Updated decoding of sched_getattr syscall.
* Implemented decoding of FS_IOC_SHUTDOWN, PIDFD_GET_INFO, and
PIDFD_GET_*_NAMESPACE ioctl commands.
* Implemented decoding of IFLA_BR_FDB_N_LEARNED, IFLA_BR_FDB_MAX_LEARNED,
and IFLA_BR_STP_MODE netlink attributes.
* Updated lists of CLONE_*, FSMOUNT_*, KT_*, KVM_*, LANDLOCK_*, NETDEV_*,
NL80211_*, and PIDFD_* constants.
* Updated lists of ioctl commands from Linux 7.1.
7.0
* Improvements
* Implemented optional colorized trace output.
* Implemented decoding of rseq and rseq_slice_yield syscalls.
* Implemented decoding of BPF_TRACE_FSESSION bpf attach type.
* Implemented decoding of BPF_PROG_ASSOC_STRUCT_OPS bpf command.
* Implemented decoding of UDMABUF_CREATE, UDMABUF_CREATE_LIST,
and VIDIOC_QUERYMENU ioctl commands.
* Updated decoding of statmount syscall flags.
* Updated lists of BPF_*, BTRFS_*, FS_*, IORING_*, KEY_*, KVM_*, NT_*,
OPEN_TREE_*, PR_*, V4L2_*, and *_MAGIC constants.
* Updated lists of ioctl commands from Linux 7.0.
6.19
* Improvements
* Implemented decoding of listns syscall.
* Implemented decoding of F_GET_RW_HINT, F_SET_RW_HINT, F_GET_FILE_RW_HINT,
F_SET_FILE_RW_HINT, F_GETDELEG, and F_SETDELEG fcntl commands.
* Implemented decoding of IORING_REGISTER_SEND_MSG_RING,
IORING_REGISTER_ZCRX_IFQ, IORING_REGISTER_RESIZE_RINGS,
IORING_REGISTER_MEM_REGION, IORING_REGISTER_QUERY, and
IORING_REGISTER_ZCRX_CTRL opcodes of io_uring_register syscall.
* Implemented decoding of extended argument structures for io_uring_enter
syscall when IORING_ENTER_EXT_ARG or IORING_ENTER_EXT_ARG_REG flags are set.
* Implemented decoding of attr_ptr and attr_type_mask fields of
struct io_uring_sqe for io_uring_register syscall.
* Implemented opcode-specific decoding of flags union and ioprio fields
of struct io_uring_sqe for io_uring_register syscall.
* Implemented decoding of 128-byte SQEs for io_uring_register syscall.
* Implemented decoding of socket operations (SOCKET_URING_OP_*) for
io_uring URING_CMD and URING_CMD128 operations when the file descriptor
is a socket.
* Updated decoding of struct mnt_id_req and struct perf_event_attr.
* Updated lists of ABS_*, BPF_*, ETHTOOL_*, ETH_P_*, IORING_*, KVM_*, PERF_*,
TLS_*, V4L2_*, and *_MAGIC constants.
* Updated lists of ioctl commands from Linux 6.19.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 8808e35b585a78c1e6fe16f244d735ce7d191490
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:20 2026 +0200
postfix: Update to version 3.11.4
- Update from version 3.11.3 to 3.11.4
- No change to rootfile
- Changelog
3.11.4
Major changes - database
[Incompat 20260220] The alias_maps and alias_database parameter
default values have changed from hash:/path/to/aliases (or
dbm:/path/to/aliases) to $default_database_type:/path/to/aliases.
This simplifies the migration away from Berkeley DB.
[Infrastructure 20260219] Support to migrate a Postfix configuration
that uses Berkeley DB hash: or btree: tables, to a configuration
that uses lmdb: or a combination of cdb: and lmdb:. This is needed
for (Linux) OS distributions that have removed Berkeley DB support.
See NON_BERKELEYDB_README for manual and automatic migration support.
Postfix already supports CDB and LMDB for more than 10 years. It
may be a good idea to do the migration before you need to upgrade
to an OS distribution that no longer supports Berkeley DB.
[Infrastructure 20251226] Tooling to help with the migration away
from Berkeley DB.
The new parameter default_cache_db_type controls the default database
type for address_verify_map, postscreen_cache_map, and
smtp_sasl_auth_cache_name, previously hard-coded as 'btree'.
[Feature 20250321] Safety: the SQLite client now logs a warning
when a query uses double quotes instead of the Postfix-recommended
single quotes. Only the recommended form is protected against SQL
injection.
[Feature 20250509] Support to run all memcache lookup keys through
an OpenSSL digest function. This prevents a database access error
when lookup keys may exceed the memcache server's key length limit
(usually, 250 bytes).
[Feature 20250624] Support for a new "debug:" pseudo lookup table.
Specify debug:maptype:mapname to encapsulate a maptype:mapname
lookup table and log all access. This builds on existing but unused
code to log table access. Contributed by Richard Hansen.
[Infrastructure 20250626] Overhauled in-memory lookup table life-cycle
management; overhauled sharing/isolation for proxied lookup tables.
Major changes - deprecation
[Feature 20250609] smtp_tls_enforce_peername and lmtp_tls_enforce_peername
are now officially deprecated. Postfix will log a warning until the
features are deleted. See DEPRECATION_README for a summary of
deprecated and deleted features.
[Feature 20251027] This adds 12 more deprecation warnings for
parameters that have been renamed in the past, and that still provide
a backwards-compatible default value for their replacement. The
parameters deprecated by this change are: authorized_verp_clients,
fallback_relay, lmtp_per_record_deadline, postscreen_blacklist_action,
postscreen_dnsbl_ttl, postscreen_dnsbl_whitelist_threshold,
postscreen_whitelist_interfaces, smtpd_client_connection_limit_exceptions,
smtp_per_record_deadline, tlsproxy_client_level, tlsproxy_client_policy,
virtual_maps.
[Feature 20251028] Deprecate the smtp_cname_overrides_servername
and lmtp_cname_overrides_servername parameters, and delete documentation
that has been obsolete since Postfix 2.11.
Major changes - logging
[Feature 20250910] TLS feature policy status summary in delivery
status logging. This shows the desired and actual TLS security level
enforcement status and, if a message requests REQUIRETLS, the
REQUIRETLS policy enforcement status. For a list of examples see
https://www.postfix.org/postconf.5.html#smtp_log_tls_feature_status
[Feature 20251216] After a delivery failure, the bounce daemon
logged "<old-queue-id>: sender non-delivery notification: <new-queue-id>"
only if the notification was queued successfully. The bounce daemon
now always logs this, making Postfix behavior easier to understand.
Visible changes for logfile analyzers:
- The bounce daemon now logs "<old-queue-id>: sender non-delivery
notification: <new-queue-id>" BEFORE the cleanup daemon logs activity
with "<new-queue-id>". Previously, the bounce daemon logged the
old<=>new queue ID connection later, which made logfile analysis
more difficult.
- The bounce daemon now logs a logfile record "<old-queue-id>:
sender notification failed to <address>: <reason>" when the
notification was not queued. In some cases it will log "<old-queue-id>:
sender notification failed to <address>" (without the reason). In
those cases the failure reason was already logged by lower-level
code, but without the queue ID.
Major changes - management tool integration
[Feature 20251124] Basic JSON output support with "postconf
-j|-jM|-jF|-jP", "postalias -jq|-js", "postmap -jq|-js", and
"postmulti -jl". No support is planned for JSON input support.
Major changes - milter support
[Feature 20251208] Improved Milter error handling for messages that
arrive over a long-lived SMTP connection, by changing the default
milter_default_action from "tempfail" to the new "shutdown" action
(i.e. disconnect the remote SMTP client).
This avoids a worst-case scenario where after a single Milter error,
Postfix would tempfail all messages that the client sends over a
long-lived connection, even if the Milter error was only temporary.
Major changes - mime support
[Feature 20251104] New non_empty_end_of_header_action parameter
with the cleanup(8) server action when a primary message header is
terminated with a non-empty line:
1) fix_quietly: Insert an empty line before the offending text (the
backwards-compatible default),
2) add_header: Insert a MIME-Error: header before inserting an empty
line, or
3) reject: Log a "mime-error" and reject the message.
Note that the 'empty line' separator is not used for DKIM signature
checks. Therefore, adding a missing separator does not break DKIM.
Major changes - mta-sts
[Feature 20250906] Workaround for an interface mis-match between
the Postfix SMTP client and MTA-STS policy plugins. This introduces
a new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes").
The MTA-STS plugin configuration needs to enable TLSRPT support,
so that it forwards STS policy attributes to Postfix. This works
even if Postfix TLSRPT support is disabled at build time or at
runtime.
With the above two configurations, the Postfix SMTP client will
connect to an MX host only if its name matches any STS policy MX
host pattern, and will match a server certificate against the MX
hostname. Otherwise, the old behavior stays in effect: connect to
any MX host listed in DNS, and match a server certificate against
any STS policy MX host pattern.
This code was published first in Postfix 3.11, and later back-ported
to Postfix 3.10.5.
Major changes - portability
[Feature 20241201] Support for the C23 built-in bool type. Older
Postfix releases have been updated with a makedefs script that
disables C23 built-in bool support.
Major changes - postqueue
[Feature 20251218] the postqueue (and mailq) command now also lists
recipients in bounce logfiles (in JSON output, this uses a new
object member 'bounce_reason' instead of the existing 'delay_reason').
Such recipients have already been deleted from the message queue
file, but they are still pending the creation of a non-delivery
status notification message that will be returned to the sender.
Major changes - relocated_maps
[Feature 20250608] Specify "relocated_prefix_enable = no" to disable
the hard-coded prefix "5.1.6 User has moved to " that is by default
prepended to all relocated_maps lookup results. This setting requires
that the table contains responses with both custom enhanced status
code (X.Y.Z) and text. For details, see "man 5 relocated" or
https://www.postfix.org/relocated.5.html .
Major changes - requiretls
[Feature 20241111] Support for the REQUIRETLS verb in SMTP. This,
and everything that was added later through 2025, is described in
REQUIRETLS_README.
[Feature 20250120] After a certificate check fails, or a remote
SMTP server does not announce REQUIRETLS support, the Postfix SMTP
client will override the RFC 8689 5.x.x. status and treat it as a
soft error, until there are no more alternate MX servers to try.
[Feature 20250827] New parameter requiretls_redact_dsn (default:
yes) to redact bounce messages as described in RFC 8689 section 5,
so that they don't need REQUIRETLS support on every hop in the
return path.
[Feature 20250827] smtp_requiretls_policy and lmtp_requiretls_policy
for responsible REQUIRETLS policy enforcement. REQUIRETLS must be
enforced with care, because at this time most domains do not publish
DANE or MTA-STS policies, and most MTAs and content filters do not
support REQUIRETLS.
[Feature 20250916] support for a "Require-TLS-ESMTP: yes" header
to propagate an ESMTP REQUIRETLS request through a FILTER_README
or SMTPD_PROXY_README style content filter. This header is detected
or added by the cleanup daemon and by the before-proxy-filter Postfix
SMTP server. This feature is enabled by default with
"requiretls_esmtp_header = yes". The Require-TLS-ESMTP header will
be visible to local and remote recipients. This feature can safely
be disabled when a configuration does not use REQUIRETLS, or does
not use FILTER_README or SMTPD_PROXY_README style content filters.
Major changes - smtp server
[Feature 20250801] smtpd_reject_filter_maps support to selectively
replace a reject response from the Postfix SMTP server, or from a
program that replies through the Postfix SMTP server.
Major changes - smtputf8
[Feature 20250122] New Postfix sendmail command option "-O smtputf8"
to request that deliveries over SMTP use the SMTPUTF8 extension.
This reuses logic that was introduced for REQUIRETLS.
[Feature 20250824] When a message needs to be delivered with SMTPUTF8,
but a remote server does not support it, the Postfix SMTP client
may now try alternate servers instead of returning the message
immediately. This reuses code that was implemented for REQUIRETLS.
Major changes - tls support
[Feature 20250623] This changes the Postfix SMTP client
smtp_tls_security_level default value to "may" if Postfix was built
with TLS support, and the compatibility_level is 3.11 or higher.
There is no change to the default lmtp_tls_security_level value.
It remains empty, because there is no default TLS security level
that makes sense for connections over UNIX-domain and loopback TCP
and non-loopback TCP sockets.
There also is no equivalent change for Postfix SMTP server TLS
security levels, because changing smtpd_tls_security_level is not
sufficient. Server-side TLS requires that at least one private key
and corresponding public-key certificate chain are configured.
[Feature 20251029] Debugging: depending on OpenSSL build options,
"posttls-finger -L ssl-debug" will decode TLS handshake messages.
[Feature 20251102] Post-quantum cryptography support: with OpenSSL
3.5 and later, change the tls_eecdh_auto_curves default value to
avoid problems with network infrastructure that mis-handles TLS
hello messages larger than one (Ethernet) TCP segment. This problem
is more generally known as "protocol ossification".
Major changes - tlsrpt
[Incompat 20250601] the default smtp_tlsrpt_skip_reused_handshakes
setting was changed from "yes" to "no". The new default is enabled
with compatibility level >= 3.11.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 99534ca0e12762680a3f0a9facb0770177d28eab
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:15 2026 +0200
core204: Ship sysstat
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 5d9325bfc11bcf601a38b25f19522db025c94b79
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:23 2026 +0200
sysstat: Update to version 12.7.9
- Update from version 12.7.6 to 12.7.9
- Update of rootfile
- Changelog
12.7.9
* sar: Fix pgsteal/s double value with recent kernels.
* Allow Truecolor (RGB) SGR codes in sysstat commands output.
* Don't display newline character within SGR-formatted text.
* Rework several functions based on Mistral AI Le Chat's suggestions.
* [Jun Lyu]: Fix missing dependencies in Makefile.in.
* mpstat: No longer call get_HZ() function.
* sar: Close file descriptors on fork() error.
* Fix version number in sysstat.xsd document.
* Check passed args in some functions.
* common.c: Include ioconf.h header file only if SOURCE_SADC is
defined.
* Mark various variables as constant.
* Improve code clarity and readability.
* Exit if calling sysconf() function fails.
* Create format strings using string's real max value.
* simtest: Fix gcc warning in legacy sar version.
* Update sar and sadf manual page.
* Update FAQ.
* NLS: Translations updated.
* Update non regression tests.
12.7.8
* sar/sadf: Add new metric kbshmem.
* sar/sadf: Now compute used memory as total memory - available memory.
* sadf: Set availablekb to frmkb during conversion.
* cifsiostat, iostat, mpstat, tapestat: Add new option -U to display
timestamps in seconds since the Epoch.
* Trap SIGTERM with all sysstat commands.
* mpstat: Go to next line when Ctrl/C is pressed.
* Add support for out-of-tree building and testing.
* sar: A_PWR_BAT: Fix wrong size used in memory initialization.
* Makefile.in: Update dependencies for install_man target.
* Makefile.in: Remove unused TFLAGS variable.
* Makefile.in: Remove old references to nfsiostat.
* DTD and XSD documents updated.
* NLS translations updated.
* sar, mpstat, iostat, cifsiostat and tapestat manual pages updated.
* Various cosmetic changes in code and Makefile.
* do_test: Add test target for out-of-tree build.
* systest: Explicitly set signal to SIGINT.
* Non regression tests: Remove root symlink in tests directory.
* Non regression tests updated.
12.7.7
* Rework overflow check function.
* pidstat: Add JSON output format (option "-o JSON").
* [Siddhi Katage]: pidstat: Fix bogus %usr values in pidstat output.
* pidstat: Free structures before exiting.
* pidstat: Make sure interval is specified when option -e is used.
* pidstat: Create separate functions to display data for current task.
* pidstat: Various cosmetic changes.
* cifsiostat: Add JSON output format (option "-o JSON").
* cifsiostat: Display error message when no CIFS fs are found.
* cifsiostat: Add new option -y to tell cifsiostat to omit the first
report with statistics since system restart.
* tapestat: Add JSON output format (option "-o JSON").
* tapestat: Set handler for SIGALRM in rw_tape_stat_loop() function.
* tapestat: Call write_sample_timestamp() to display timestamp.
* mpstat: Properly terminate JSON output when ^C entered on first
interval.
* iostat: Remove extra blank line when omitting first report.
* cifsiostat, tapestat and pidstat manual pages updated.
* Use the binary units (kibibytes, mebibytes...) instead of kilobytes,
megabytes... in all manual pages.
* FAQ updated.
* [Peter Portante]: Slight changes to compile on Mac OS X.
* [Peter Portante]: Add missing "void" parameter to
init_custom_color_palette() function.
* Use xflags variable for options used by multiple commands.
* Move write_sample_timestamp() function to common.c file.
* Update headers files included.
* Add new non regression tests.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 2d5438d78df53baca30918e8e95a50770a53cb44
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:14 2026 +0200
core204: Ship file
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 5620746b41a215f4099adc75476aa29af5600d3f
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:19 2026 +0200
file: Update to version 5.48
- Update from version 5.47 to 5.48
- No change to rootfile
- Changelog
5.48
* add landlock support (valoq)
* add BE/LE GUID
* multiple fixes to prevent integer overflow in 32 bits (kerwin)
* PR/745: streamout: Don't flush when trying to set negative offsets
on pipes, just continue, fixes 'cat file.zip | file -'
* PR/753: vmihalko: Fix race is magic_getpath()
* PR/728: Anton Monroe: Reinstate regex/c
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit fb2c3efdf13a0ed828e3cc55c6ce5c1c08e26115
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:18 2026 +0200
fetchmail: Update to version 6.6.5
- Update from version 6.6.0 to 6.6.5
- No chyange to rootfile
- Changelog
6.6.5
SECURITY BUGFIX
* POP3 with RPA: fix calculation of buffer sizes to avoid buffer overflow
on long service challenges with long user IDs, which would smash our stack.
Triggering this requires that 1. RPA is enabled at compile time
(non-default, which is discouraged in autotools, and possible but not
documented nor supported in meson), and the username (--user option, or user
in the rcfile) contains @compuserve.com anywhere, and the server supports an
AUTH command without arguments (which is a non-standard local extension), and
that it offers RPA authentication in response to that command.
This was reported based on an incomplete semi-wrong AI report with an
incomplete fix "recommendation" by zhangph12138@outlook.com via
fetchmail-devel@. The fix suggested in that AI report was wrong, and
would happily crash a few lines later again. The fix deployed calculates
the buffer size of "workarea" variables based on the sizeof() of constituent
components.
BUGFIX
* Robustness: If RPA is enabled at compile time and POP3 is in use,
do not barf if @compuserve.com is in the remote site's username (what you'd
pass as --user, or user in the rcfile) and the remote site either does not
support an "AUTH" command without parameters (normally, one is required, but
some servers such as jpop and Cyrus allow AUTH to request the list of
supported authentication types as an extension; the standard way would be
a "CAPA" request instead), but try other authentication methods.
Found by code auditing in response to a bug report against rpa.c.
Note that enabling RPA is discouraged because it is based on the weak
MD5 crypto algorithm.
6.6.4
BUGFIX
* The IMAP client will now properly quote the folder name given with the
moveto rcfile option, or --moveto command-line option.
Report and bugfix contributed by Corben Dallas.
BUILD IMPROVEMENTS
* meson-based builds with wolfSSL should now also work when meson finds
the wolfssl package through cmake, instead of pkgconfig. This is unsupported
and depends on internal set(_wolfssl_includedir "...") in wolfSSL's
lib/cmake/*.cmake files, and works as of wolfSSL 5.9.1.
The supported way to build fetchmail with wolfSSL with meson is
to make sure that wolfSSL is found with pkgconfig, as in (change /path/to!)
meson setup --pkg-config-path /path/to/wolfssl/lib/pkgconfig
EXPERIMENTAL CHANGES - these are not documented anywhere else, only here:
* fetchmail supports AWS-LC 1.71 or newer, since its relicensing to
the Apache license v2.0. Note this requires you to distribute fetchmail
under terms of the GPLv3 because the GPLv2 is claimed incompatible
with Apache license (this is no different for OpenSSL 3 or newer,
or the one wolfSSL version that was GPLv3 licensed).
* fetchmail supports a FETCHMAIL_SSL_SECLEVEL environment variable
(since 6.5.0, except when using AWS-LC where it is silently ignored),
which can be used to override the OpenSSL security level.
Fetchmail by default raises the security level to 2 if lower.
This variable can be used to lower it.
Use with extreme caution. Note that levels 3 or higher will frequently cause
incompabilities with servers because server-side data sizes are often too low.
Valid range: 0 to 5 for OpenSSL 1.1.1 and 3.0.
* fetchmail supports a FETCHMAIL_SSL_CIPHERS environment variable
(since 6.5.0) that sets the cipher string (through two different OpenSSL
functions) for SSL and TLS versions up to TLSv1.2.
If setting the ciphers fails, fetchmail will not connect.
If not given, defaults to "HIGH:MEDIUM:+RC4:@STRENGTH:!aNULL" - note
that +RC4 is supposed to move the RC4 to the end of the list, not add it.
* fetchmail supports a FETCHMAIL_TLS13_CIPHERSUITES environment variable
(since 6.5.0) that sets the ciphersuites (a colon-separated list,
without + ! -) for TLSv1.3. If not given, defaults to the SSL library's
built-in list. If setting the ciphersuites fails, fetchmail refuses to
connect.
* NOTE the features above are simplistic. For instance, even though you
configure --sslproto tls1.3, a failure to set tls1.2 ciphers could cause
a connection abort.
6.6.3
COMPATIBILITY:
* fetchmail can now be built with OpenSSL 4.0.0 (tested as of -beta1).
6.6.2
BUGFIX:
* fetchmail 6.6.0 and 6.6.1 could not be configured without SSL, it would break
compiling sink.c. Fix compilation. Report by Toralf Förster, analysis and
different patch suggested by Holger Hoffstätte, fixes #86.
https://bugs.gentoo.org/967258 and
https://gitlab.com/fetchmail/fetchmail/-/issues/86
6.6.1
TRANSLATIONS were updated by these fine people (randomized order):
* sr: Мирослав Николић [Serbian]
* es: Cristian Othón Martínez Vera [Spanish]
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit e34525e3aa155ea87cd62f82a3dcf29df9ac7e07
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:13 2026 +0200
core204: Ship expat
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 34c79cfb71ebccdbfd8fe5dd390e2b045233fa64
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:17 2026 +0200
expat: Update to version 2.8.2
- Update from version 2.8.1 to 2.8.2
- Update of rootfile
- 13 CVE fixes
- Changelog
2.8.2
Security fixes:
#1246 CVE-2026-50219 -- Disallow calls to functions
`XML_GetBuffer`, `XML_Parse`, `XML_ParseBuffer`,
`XML_ParserFree`, `XML_ParserReset` to guard e.g.
Expat bindings from memory corruption;
this CPython issue is related:
https://github.com/python/cpython/issues/146169
#1267 CVE-2026-56131 -- Protect XML_ResumeParser from being called
from a handler, plugging a hole in the fix
to CVE-2026-50219
#1272 CVE-2026-56132 -- Fix out-of-bound scaffolding index store
in `doProlog`
#1229 #1232 CVE-2026-56403 -- Integer overflow in `storeAtts`
#1249 CVE-2026-56404 -- Integer overflow in `addBinding`
#1251 CVE-2026-56405 -- Integer overflow in `getAttributeId`
#1255 CVE-2026-56406 -- Integer overflow in `XML_ParseBuffer`
#1262 CVE-2026-56407 -- Integer overflow in `textLen` handling
#565 CVE-2026-56408 -- Integer overflow in `copyString`
(commit 16e2efd867ea8567ffa012210b52ef5918e20817)
#1259 CVE-2026-56409 -- xmlwf: Integer overflow in output path join
#1252 CVE-2026-56410 -- xmlwf: Integer overflow in
`resolveSystemId`
#1263 CVE-2026-56411 -- xmlwf: Integer overflow in notation list
allocation
#1278 CVE-2026-56412 -- Guard XML_TOK_DATA_CHARS handler calls in
`doCdataSection`, plugging a hole in the fix to
CVE-2026-50219
Bug fixes:
#1260 xmlwf: Escape names and base URI in meta output
#1266 xmlwf: Pick a safe quote for notation system and public IDs
Other changes:
#1257 CMake|Autotools: Stop using /dev/urandom by default
#1244 #1254 CMake: Fix guard for Unix sources of entropy
#1183 #1270 CMake|Windows: Add missing export for symbol
`XML_SetHashSalt16Bytes`
#1236 CMake: Mark option EXPAT_OSSFUZZ_BUILD as advanced
#1283 Limit output indentation for EXPAT_ENTITY_DEBUG=1 and
allow unlimited indentation via EXPAT_ENTITY_DEBUG=2
#565 Replace some loops by use of `memcpy`, `strlen`, `wcslen`
#1220 lib: Use a size_t for group sizes
#1221 lib: Fix too-conservative integer overflow check when
appending raw name
#1222 lib: Simplify attribute allocation/management logic
#1224 Update fallthrough annotations to satisfy Clang and GCC
#1226 lib: Remove unnecessary void * casts in random code
#1228 lib: Reduce scope of locals in storeAtts
#1230 lib: Count attributes with size_t variables
#1238 Minor get-buffer improvements
#1239 #1240 lib|tests: Include header expat_config.h first
#1241 lib: Shrink size of XML_GetBuffer
#1242 lib: Remove a legacy comment
#1243 lib: XML_ParserReset: Extract repeated linked-list move logic
#1243 lib: Unify entity free lists
#1247 lib: Fix use of '0' as boolean literal
#1248 lib: Make XML_Index overflow check more intuitive
#1256 lib: Use size_t for counting string/URI lengths
#1258 lib: XML_GetInputContext: Remove use of 0 for NULL
#1261 Comment typo fixes
#1275 Teach Memory Sanitizer semantics of randomization functions
#1276 #1281 Version info bumped from 13:1:12 (libexpat*.so.1.12.1)
to 13:2:12 (libexpat*.so.1.12.2); see https://verbump.de/
for what these numbers do
Infrastructure:
#1231 perl-integration.yml: Bump to XML::Parser 2.59
#1237 emscripten.yml: Bump from Ubuntu 22.04 to 24.04
#1183 #1271 windows-build.yml: Cover completeness of file
libexpat.def.cmake
#1274 linux.yml: Make llvm-symbolizer available in CI
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 08f5a04bcc1c37035dd46addb0d32c74fc1cdb48
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:12 2026 +0200
core204: Ship elinks
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 468dcf249398f8bb7beb7f6a2fc1a2ddb755e0ca
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Tue Jun 30 13:15:16 2026 +0200
elinks: Update to version 0.19.1
- Update from version 0.19.0 to 0.19.1
- No change to rootfile
- Changelog
0.19.1
* compilation fixes for Ruby scripting #410
* Disable poll on macOS < 10.6
* bookmarks xbel did not restore positions. #415
* use after free in forms code
* NULL dereference in iframes code (crash at github) #418
* Add action move-cursor-line-end. #416
* bool option document.browse.wrap. #420
* bool options ui.clipboard.remove_leading_spaces and
ui.clipboard.remove_trailing_spaces #416
* Serbian translation update
* fix in gopher #421
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/common/expat | 20 +++++------
config/rootfiles/common/sysstat | 12 +++----
.../{oldcore/141 => core/204}/filelists/elinks | 0
.../{oldcore/106 => core/204}/filelists/expat | 0
.../{oldcore/106 => core/204}/filelists/file | 0
.../{oldcore/170 => core/204}/filelists/lsof | 0
.../{oldcore/160 => core/204}/filelists/sysstat | 0
config/rootfiles/packages/ltrace | 9 ++++-
config/rootfiles/packages/netsnmpd | 26 +++++++-------
config/rootfiles/packages/transmission | 4 +--
lfs/elinks | 4 +--
lfs/expat | 4 +--
lfs/fetchmail | 8 ++---
lfs/file | 4 +--
lfs/lsof | 6 ++--
lfs/ltrace | 18 +++++-----
lfs/netsnmpd | 42 ++++++++++------------
lfs/postfix | 6 ++--
lfs/strace | 6 ++--
lfs/stunnel | 8 ++---
lfs/sysstat | 9 ++---
lfs/tmux | 6 ++--
lfs/transmission | 6 ++--
src/paks/netsnmpd/install.sh | 8 ++++-
src/paks/netsnmpd/uninstall.sh | 5 ++-
25 files changed, 112 insertions(+), 99 deletions(-)
copy config/rootfiles/{oldcore/141 => core/204}/filelists/elinks (100%)
copy config/rootfiles/{oldcore/106 => core/204}/filelists/expat (100%)
copy config/rootfiles/{oldcore/106 => core/204}/filelists/file (100%)
copy config/rootfiles/{oldcore/170 => core/204}/filelists/lsof (100%)
copy config/rootfiles/{oldcore/160 => core/204}/filelists/sysstat (100%)
Difference in files:
diff --git a/config/rootfiles/common/expat b/config/rootfiles/common/expat
index b13257ddb9..0f15469d35 100644
--- a/config/rootfiles/common/expat
+++ b/config/rootfiles/common/expat
@@ -2,21 +2,21 @@
#usr/include/expat.h
#usr/include/expat_config.h
#usr/include/expat_external.h
-#usr/lib/cmake/expat-2.8.1
-#usr/lib/cmake/expat-2.8.1/expat-config-version.cmake
-#usr/lib/cmake/expat-2.8.1/expat-config.cmake
-#usr/lib/cmake/expat-2.8.1/expat-noconfig.cmake
-#usr/lib/cmake/expat-2.8.1/expat.cmake
+#usr/lib/cmake/expat-2.8.2
+#usr/lib/cmake/expat-2.8.2/expat-config-version.cmake
+#usr/lib/cmake/expat-2.8.2/expat-config.cmake
+#usr/lib/cmake/expat-2.8.2/expat-noconfig.cmake
+#usr/lib/cmake/expat-2.8.2/expat.cmake
#usr/lib/libexpat.la
#usr/lib/libexpat.so
usr/lib/libexpat.so.1
-usr/lib/libexpat.so.1.12.1
+usr/lib/libexpat.so.1.12.2
#usr/lib/pkgconfig/expat.pc
#usr/share/doc/expat
-#usr/share/doc/expat-2.8.1
-#usr/share/doc/expat-2.8.1/ok.min.css
-#usr/share/doc/expat-2.8.1/reference.html
-#usr/share/doc/expat-2.8.1/style.css
+#usr/share/doc/expat-2.8.2
+#usr/share/doc/expat-2.8.2/ok.min.css
+#usr/share/doc/expat-2.8.2/reference.html
+#usr/share/doc/expat-2.8.2/style.css
#usr/share/doc/expat/AUTHORS
#usr/share/doc/expat/changelog
#usr/share/man/man1/xmlwf.1
diff --git a/config/rootfiles/common/sysstat b/config/rootfiles/common/sysstat
index b2cb2277b3..acf034b1d3 100644
--- a/config/rootfiles/common/sysstat
+++ b/config/rootfiles/common/sysstat
@@ -11,12 +11,12 @@ usr/bin/sar
usr/lib/sa/sa1
usr/lib/sa/sa2
usr/lib/sa/sadc
-#usr/share/doc/sysstat-12.7.6
-#usr/share/doc/sysstat-12.7.6/CHANGES
-#usr/share/doc/sysstat-12.7.6/COPYING
-#usr/share/doc/sysstat-12.7.6/CREDITS
-#usr/share/doc/sysstat-12.7.6/FAQ.md
-#usr/share/doc/sysstat-12.7.6/README.md
+#usr/share/doc/sysstat-12.7.9
+#usr/share/doc/sysstat-12.7.9/CHANGES
+#usr/share/doc/sysstat-12.7.9/COPYING
+#usr/share/doc/sysstat-12.7.9/CREDITS
+#usr/share/doc/sysstat-12.7.9/FAQ.md
+#usr/share/doc/sysstat-12.7.9/README.md
#usr/share/locale/af/LC_MESSAGES/sysstat.mo
#usr/share/locale/be/LC_MESSAGES/sysstat.mo
#usr/share/locale/cs/LC_MESSAGES/sysstat.mo
diff --git a/config/rootfiles/core/204/filelists/elinks b/config/rootfiles/core/204/filelists/elinks
new file mode 120000
index 0000000000..10db4dd8f7
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/elinks
@@ -0,0 +1 @@
+../../../common/elinks
\ No newline at end of file
diff --git a/config/rootfiles/core/204/filelists/expat b/config/rootfiles/core/204/filelists/expat
new file mode 120000
index 0000000000..e1923cf639
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/expat
@@ -0,0 +1 @@
+../../../common/expat
\ No newline at end of file
diff --git a/config/rootfiles/core/204/filelists/file b/config/rootfiles/core/204/filelists/file
new file mode 120000
index 0000000000..0c60e43aa5
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/file
@@ -0,0 +1 @@
+../../../common/file
\ No newline at end of file
diff --git a/config/rootfiles/core/204/filelists/lsof b/config/rootfiles/core/204/filelists/lsof
new file mode 120000
index 0000000000..1353d33e58
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/lsof
@@ -0,0 +1 @@
+../../../common/lsof
\ No newline at end of file
diff --git a/config/rootfiles/core/204/filelists/sysstat b/config/rootfiles/core/204/filelists/sysstat
new file mode 120000
index 0000000000..cec8f445fd
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/sysstat
@@ -0,0 +1 @@
+../../../common/sysstat
\ No newline at end of file
diff --git a/config/rootfiles/packages/ltrace b/config/rootfiles/packages/ltrace
index 9964a70ca6..58a4857a1b 100644
--- a/config/rootfiles/packages/ltrace
+++ b/config/rootfiles/packages/ltrace
@@ -1,4 +1,3 @@
-etc/ltrace.conf
usr/bin/ltrace
#usr/share/doc/ltrace
#usr/share/doc/ltrace/COPYING
@@ -6,5 +5,13 @@ usr/bin/ltrace
#usr/share/doc/ltrace/INSTALL
#usr/share/doc/ltrace/README
#usr/share/doc/ltrace/TODO
+#usr/share/ltrace
+usr/share/ltrace/libacl.so.conf
+usr/share/ltrace/libc.so-types.conf
+usr/share/ltrace/libc.so.conf
+usr/share/ltrace/libm.so.conf
+usr/share/ltrace/libpthread.so-types.conf
+usr/share/ltrace/libpthread.so.conf
+usr/share/ltrace/syscalls.conf
#usr/share/man/man1/ltrace.1
#usr/share/man/man5/ltrace.conf.5
diff --git a/config/rootfiles/packages/netsnmpd b/config/rootfiles/packages/netsnmpd
index 510f4a0cfb..34e4eb30a6 100644
--- a/config/rootfiles/packages/netsnmpd
+++ b/config/rootfiles/packages/netsnmpd
@@ -1,7 +1,4 @@
etc/rc.d/init.d/netsnmpd
-etc/rc.d/rc0.d/K02netsnmpd
-etc/rc.d/rc3.d/S65netsnmpd
-etc/rc.d/rc6.d/K02netsnmpd
etc/snmpd.conf
usr/bin/agentxtrap
usr/bin/checkbandwidth
@@ -130,7 +127,6 @@ usr/bin/traptoemail
#usr/include/net-snmp/library/snmp.h
#usr/include/net-snmp/library/snmpAliasDomain.h
#usr/include/net-snmp/library/snmpCallbackDomain.h
-#usr/include/net-snmp/library/snmpIPBaseDomain.h
#usr/include/net-snmp/library/snmpIPv4BaseDomain.h
#usr/include/net-snmp/library/snmpIPv6BaseDomain.h
#usr/include/net-snmp/library/snmpSocketBaseDomain.h
@@ -214,6 +210,8 @@ usr/bin/traptoemail
#usr/include/net-snmp/system/openbsd4.h
#usr/include/net-snmp/system/openbsd5.h
#usr/include/net-snmp/system/openbsd6.h
+#usr/include/net-snmp/system/openbsd7.h
+#usr/include/net-snmp/system/openbsd8.h
#usr/include/net-snmp/system/osf5.h
#usr/include/net-snmp/system/solaris.h
#usr/include/net-snmp/system/solaris2.3.h
@@ -231,28 +229,28 @@ usr/bin/traptoemail
#usr/lib/libnetsnmp.a
#usr/lib/libnetsnmp.la
#usr/lib/libnetsnmp.so
-usr/lib/libnetsnmp.so.40
-usr/lib/libnetsnmp.so.40.2.0
+usr/lib/libnetsnmp.so.45
+usr/lib/libnetsnmp.so.45.0.0
#usr/lib/libnetsnmpagent.a
#usr/lib/libnetsnmpagent.la
#usr/lib/libnetsnmpagent.so
-usr/lib/libnetsnmpagent.so.40
-usr/lib/libnetsnmpagent.so.40.2.0
+usr/lib/libnetsnmpagent.so.45
+usr/lib/libnetsnmpagent.so.45.0.0
#usr/lib/libnetsnmphelpers.a
#usr/lib/libnetsnmphelpers.la
#usr/lib/libnetsnmphelpers.so
-usr/lib/libnetsnmphelpers.so.40
-usr/lib/libnetsnmphelpers.so.40.2.0
+usr/lib/libnetsnmphelpers.so.45
+usr/lib/libnetsnmphelpers.so.45.0.0
#usr/lib/libnetsnmpmibs.a
#usr/lib/libnetsnmpmibs.la
#usr/lib/libnetsnmpmibs.so
-usr/lib/libnetsnmpmibs.so.40
-usr/lib/libnetsnmpmibs.so.40.2.0
+usr/lib/libnetsnmpmibs.so.45
+usr/lib/libnetsnmpmibs.so.45.0.0
#usr/lib/libnetsnmptrapd.a
#usr/lib/libnetsnmptrapd.la
#usr/lib/libnetsnmptrapd.so
-usr/lib/libnetsnmptrapd.so.40
-usr/lib/libnetsnmptrapd.so.40.2.0
+usr/lib/libnetsnmptrapd.so.45
+usr/lib/libnetsnmptrapd.so.45.0.0
#usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/Bundle
usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/Bundle/MakefileSubs.pm
#usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/NetSNMP
diff --git a/config/rootfiles/packages/transmission b/config/rootfiles/packages/transmission
index a248aea20f..7ed9094ee0 100644
--- a/config/rootfiles/packages/transmission
+++ b/config/rootfiles/packages/transmission
@@ -10,9 +10,9 @@ usr/lib/systemd/system/transmission-daemon.service
usr/share/transmission
#usr/share/transmission/public_html
#usr/share/transmission/public_html/images
+#usr/share/transmission/public_html/images/apple-touch-icon.png
#usr/share/transmission/public_html/images/favicon.ico
-#usr/share/transmission/public_html/images/favicon.png
-#usr/share/transmission/public_html/images/webclip-icon.png
+#usr/share/transmission/public_html/images/favicon.svg
#usr/share/transmission/public_html/index.html
#usr/share/transmission/public_html/transmission-app.css
#usr/share/transmission/public_html/transmission-app.css.LEGAL.txt
diff --git a/lfs/elinks b/lfs/elinks
index 9c7912d15f..298a011b91 100644
--- a/lfs/elinks
+++ b/lfs/elinks
@@ -26,7 +26,7 @@ include Config
SUMMARY = An advanced and well-established feature-rich text mode web browser
-VER = 0.19.0
+VER = 0.19.1
THISAPP = elinks-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 98dc66268239f70539df1c8a4de3221d0be175d1f2dc7ed44ced24dc1265b7b43db929c1d2ac530b268d1509a4e94a2f08725b442e508c1f827b54f54a72cb99
+$(DL_FILE)_BLAKE2 = a61494a8641c5021220cf7cd17ba117a50c146ced3427e9c6e1120e4764e596ded191f224b79560399c63a03e3a3b836c62ad2c1ad54971ef0b553ed13a23eb5
install : $(TARGET)
diff --git a/lfs/expat b/lfs/expat
index 2ba04ca09f..480d98b658 100644
--- a/lfs/expat
+++ b/lfs/expat
@@ -24,7 +24,7 @@
include Config
-VER = 2.8.1
+VER = 2.8.2
THISAPP = expat-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 529551f960a1e611be6a0e9ff579e136ccad676d7e99ef8183bbee83969bf4cd37177444759ccbccc48c1bd49d2b0c3bd8f1f91862f272b54a23ad1b932d2f9d
+$(DL_FILE)_BLAKE2 = f037cb75f86652fbddd3474f2b7a1293e9b77b540475fa34432a8304ddc58b3eafbab5150a5b591fc4a889d895507b0d379032cdd0c474445ac0aa9e518bef18
install : $(TARGET)
diff --git a/lfs/fetchmail b/lfs/fetchmail
index d88907db01..e3d4e1dd06 100644
--- a/lfs/fetchmail
+++ b/lfs/fetchmail
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -26,7 +26,7 @@ include Config
SUMMARY = Full-Featured POP and IMAP Mail Retrieval Daemon
-VER = 6.6.0
+VER = 6.6.5
THISAPP = fetchmail-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = fetchmail
-PAK_VER = 24
+PAK_VER = 25
DEPS =
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = bf308bfd1769b7092585d3af32aaef91206b315d87bd81794c9f04b65980e3cadd6a6c7ff1f5fd2c7ada0620dccecb14c3022224e17c5d075ea21e391408bdb8
+$(DL_FILE)_BLAKE2 = cceb7a0673f6aea76fe5619c0b6a4cd25566adc31b8d9a8e574b3abf8584107b882f71a63d5690ce76822044cc8a2dd431e44813002740ebcbd3cc55b4e9105f
install : $(TARGET)
diff --git a/lfs/file b/lfs/file
index d347b37ba8..333532a1dd 100644
--- a/lfs/file
+++ b/lfs/file
@@ -24,7 +24,7 @@
include Config
-VER = 5.47
+VER = 5.48
THISAPP = file-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 52b91ee7868a9b75431e00fca7f7db1362b3d39eb065f52434ea73d9ccd7497f3371f7e0a455644c56df3e6acee247208edc47bf8004fa922dba32786cc3e10c
+$(DL_FILE)_BLAKE2 = d8ca86ec79db28c59d7c5da9282fb5fa03a0775147856cb4d35528f12d2eb4293aca3336cb0e5108ce56c2f6a255e5b36957ba826b185575531508176f2af06a
install : $(TARGET)
diff --git a/lfs/lsof b/lfs/lsof
index 9bae577882..5867c3ecb7 100644
--- a/lfs/lsof
+++ b/lfs/lsof
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 4.99.5
+VER = 4.99.7
THISAPP = lsof-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 998ce85c7a0e742e6f7696d00ee3b6bb8aa6b6e5c30d5c76ac1fc74ea7d8062d73da4de54f433147b74ef4a6d6ac168f70ee68773c82269e07ec3f90bd9b8a8c
+$(DL_FILE)_BLAKE2 = 73279d59bf7f86cb287dc3e9209903a58d9aa8ff409b0907b51658262baaad68cede04a863706ca28e1f170e80e9184e7dab0f578430086e023d467ee4ed68a4
install : $(TARGET)
diff --git a/lfs/ltrace b/lfs/ltrace
index f3f07c0b1a..a49a1c4552 100644
--- a/lfs/ltrace
+++ b/lfs/ltrace
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -26,16 +26,15 @@ include Config
SUMMARY = Library and system call tracer for programs
-VER = 0.7.3
-SUP_ARCHES = x86_64
+VER = 0.8.1
THISAPP = ltrace-$(VER)
-DL_FILE = ltrace_$(VER).orig.tar.bz2
+DL_FILE = ltrace-$(VER).tar.bz2
DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = ltrace
-PAK_VER = 3
+PAK_VER = 4
DEPS =
@@ -49,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 30d1dbb178a41043e4bbbac17a23676db202b64327c9bb4393ae7ace9f5e1a1e2a5ded56cabc7faf2ea55b22ed17126a94c121147aeefb40250710b7307a50d3
+$(DL_FILE)_BLAKE2 = 4fb938f3511668f836f7f9cd3d3ab88b9e46a749bce9f506609c1ebfced552c71f868272766be7d902c0151eba55061d6aa9f5c88b0f40cf040cc6f4a43d9ce6
install : $(TARGET)
@@ -82,8 +81,11 @@ $(subst %,%_BLAKE2,$(objects)) :
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
- cd $(DIR_APP) && ./configure --prefix=/usr --sysconfdir=/etc \
- --disable-werror
+ cd $(DIR_APP) && ./autogen.sh
+ cd $(DIR_APP) && ./configure \
+ --prefix=/usr
+ --sysconfdir=/etc \
+ --disable-werror
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
@rm -rf $(DIR_APP)
diff --git a/lfs/netsnmpd b/lfs/netsnmpd
index 5605d6307c..a27440cff5 100644
--- a/lfs/netsnmpd
+++ b/lfs/netsnmpd
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -26,7 +26,7 @@ include Config
SUMMARY = SNMP Daemon
-VER = 5.9.3
+VER = 5.9.5.2
THISAPP = net-snmp-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = netsnmpd
-PAK_VER = 15
+PAK_VER = 16
DEPS =
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = b8e3de60e178ec16ad2848ad77f3bd4cbd35eaa9be103c0fa5d17514c29df4e69015ac53b54c9e565e3032b0c0bb47c19729e65310a6acefae901e101ea49451
+$(DL_FILE)_BLAKE2 = 417b337ac32d19db55494b97742fab6f28fc64d488896efd943d6f65ca563b0385d6160923d064e3bf04e3197790c7834d7b644973a426dfa3cb7e81f6465c4c
install : $(TARGET)
@@ -84,22 +84,21 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
$(UPDATE_AUTOMAKE)
cd $(DIR_APP) && ./configure \
- --prefix=/usr \
- --with-default-snmp-version="2" \
- --with-sys-contact="root@" \
- --with-sys-location="localhost" \
- --with-logfile="/var/log/snmpd.log" \
- --with-persistent-directory="/var/net-snmp" \
- --with-mib-modules="host agentx smux \
- ucd-snmp/diskio tcp-mib udp-mib mibII/mta_sendmail \
- ip-mib/ipv4InterfaceTable ip-mib/ipv6InterfaceTable \
- ip-mib/ipAddressPrefixTable/ipAddressPrefixTable \
- ip-mib/ipDefaultRouterTable/ipDefaultRouterTable \
- ip-mib/ipv6ScopeZoneIndexTable ip-mib/ipIfStatsTable \
- sctp-mib rmon-mib etherlike-mib ucd-snmp/lmsensorsMib"
- --libdir=/usr/lib \
- --sysconfdir="/etc"
-
+ --prefix=/usr \
+ --with-default-snmp-version="2" \
+ --with-sys-contact="root@" \
+ --with-sys-location="localhost" \
+ --with-logfile="/var/log/snmpd.log" \
+ --with-persistent-directory="/var/net-snmp" \
+ --with-mib-modules="host agentx smux \
+ ucd-snmp/diskio tcp-mib udp-mib mibII/mta_sendmail \
+ ip-mib/ipv4InterfaceTable ip-mib/ipv6InterfaceTable \
+ ip-mib/ipAddressPrefixTable/ipAddressPrefixTable \
+ ip-mib/ipDefaultRouterTable/ipDefaultRouterTable \
+ ip-mib/ipv6ScopeZoneIndexTable ip-mib/ipIfStatsTable \
+ sctp-mib rmon-mib etherlike-mib ucd-snmp/lmsensorsMib"
+ --libdir=/usr/lib \
+ --sysconfdir="/etc"
cd $(DIR_APP) && make #$(MAKETUNING)
cd $(DIR_APP) && make install
install -v -m 644 $(DIR_SRC)/config/netsnmpd/snmpd.conf /etc/snmpd.conf
@@ -109,8 +108,5 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
# install initscripts
$(call INSTALL_INITSCRIPTS,$(SERVICES))
- ln -sf ../init.d/netsnmpd /etc/rc.d/rc3.d/S65netsnmpd
- ln -sf ../init.d/netsnmpd /etc/rc.d/rc0.d/K02netsnmpd
- ln -sf ../init.d/netsnmpd /etc/rc.d/rc6.d/K02netsnmpd
@rm -rf $(DIR_APP)
@$(POSTBUILD)
diff --git a/lfs/postfix b/lfs/postfix
index 46de2c8e95..7715881258 100644
--- a/lfs/postfix
+++ b/lfs/postfix
@@ -26,7 +26,7 @@ include Config
SUMMARY = A fast, secure, and flexible mailer
-VER = 3.11.3
+VER = 3.11.4
THISAPP = postfix-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = postfix
-PAK_VER = 53
+PAK_VER = 54
DEPS =
@@ -72,7 +72,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = f88dd4e4b607ef729892ba3843c08b9d54864a2cc6605d9578eee85291be9918bf7f0d69cb2cff0b7e756de540c63c6ede1244557eb0027ca978484460085f6b
+$(DL_FILE)_BLAKE2 = 7c41d43987949076d45507372cce748b6bd1a8a1407fa032ecaf91ab1ad086068e7920d43df0c8b8c47f415c8ccbeaeb7862470aa322f51176e197fbe941ca4f
install : $(TARGET)
diff --git a/lfs/strace b/lfs/strace
index 5144bb6c94..e3ba4cf765 100644
--- a/lfs/strace
+++ b/lfs/strace
@@ -26,7 +26,7 @@ include Config
SUMMARY = A utility to trace the system calls of a program
-VER = 6.18
+VER = 7.1
SUP_ARCHES = x86_64 aarch64
THISAPP = strace-$(VER)
@@ -35,7 +35,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = strace
-PAK_VER = 15
+PAK_VER = 16
DEPS =
@@ -49,7 +49,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = ba9798496102c2c1d2310d9dea746d9517d58c2e9ad7e630beee294806d24a617c8a8950d0e118d6190b61ab17f5d8020d02b0a56c4740df62104dd2906206c0
+$(DL_FILE)_BLAKE2 = 755ebf184008896bbb8537918b54ca00a7206a6e553a70b19d46554cada314315d3dc92ebef53c661634bd270a7b51e2131d524134a7a76cd93e40d0ec294380
install : $(TARGET)
diff --git a/lfs/stunnel b/lfs/stunnel
index 977b1ae71f..c69af28737 100644
--- a/lfs/stunnel
+++ b/lfs/stunnel
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 5.72
+VER = 5.78
SUMMARY = Universal TLS Tunnel
THISAPP = stunnel-$(VER)
@@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = stunnel
-PAK_VER = 13
+PAK_VER = 14
DEPS =
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 2b4c6400cf25522592e237f35700f81c0092a827526155cb02f503a9b3af50242aea63c3b5389a62d002d6a2ec9e852f80cc9c48318f23d3f9d12ff42cbe5978
+$(DL_FILE)_BLAKE2 = 44538336d9f7075ebead1ae85c8c8609b54041565d076370b988b1c157a0a44533c03e1602cf3b055fab6a5ef0ce223a20a8fc0d7d1a59942bfde098db422442
install : $(TARGET)
diff --git a/lfs/sysstat b/lfs/sysstat
index 7887123753..ea7f0d6655 100644
--- a/lfs/sysstat
+++ b/lfs/sysstat
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -24,7 +24,7 @@
include Config
-VER = 12.7.6
+VER = 12.7.9
THISAPP = sysstat-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 5cb015dfad2b26a922862416d779ac26df18df0b4689ae1ad1b9f3dc3922dd577741bf019ebc979154d7bc708dbb7e9d21ce4c2e2c2a4896badf3847c06e82a7
+$(DL_FILE)_BLAKE2 = 8bbe38b98d85c8193578b8f5f5bb5d6296564e16d5af793d4bae4ed2b5de44b041e2651d247b612910ac8d033574a2e7f651b0f4dfacbcae1dc2146ecebd6094
install : $(TARGET)
@@ -70,7 +70,8 @@ $(subst %,%_BLAKE2,$(objects)) :
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@$(PREBUILD)
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
- cd $(DIR_APP) && ./configure --prefix=/usr
+ cd $(DIR_APP) && ./configure \
+ --prefix=/usr
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
@rm -rf $(DIR_APP)
diff --git a/lfs/tmux b/lfs/tmux
index 952b8805ad..38c8725686 100644
--- a/lfs/tmux
+++ b/lfs/tmux
@@ -26,7 +26,7 @@ include Config
SUMMARY = Terminal multiplexer
-VER = 3.7
+VER = 3.7a
THISAPP = tmux-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = tmux
-PAK_VER = 16
+PAK_VER = 17
DEPS =
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 741bca6529dee6355af3d94c931d52b2ff22b5e9f126b4a44c9bbc96649b3324ccb0976bf2a84d8ecacc45a7d2cb3cad5ac6da369f38c89f1b3d9cce8c803b78
+$(DL_FILE)_BLAKE2 = 04632a169a33b9c60a84c05c3a6dd66b61d911059c563cb0b6bb967b32ec29e6082e127caf8e110a930dcf08a37e7498278498903806140ff3d87575ced8437a
install : $(TARGET)
diff --git a/lfs/transmission b/lfs/transmission
index 10e2bf2716..5584a97f35 100644
--- a/lfs/transmission
+++ b/lfs/transmission
@@ -26,7 +26,7 @@ include Config
SUMMARY = A BitTorrent client with multiple UIs
-VER = 4.1.1
+VER = 4.1.3
THISAPP = transmission-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = transmission
-PAK_VER = 28
+PAK_VER = 29
DEPS =
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = ad0062b1838662a023dec0872154193e1e548f6e88d4939b3ce4c31714b91692674aa6918d10b451e4a72dbb869473292b3120de70d2d8d594697e5e9812b477
+$(DL_FILE)_BLAKE2 = 289afb0057654e53833df748e10c6e9bb8bdd95320d5dd1af40734e130895c444df9f4bae923b976a599d76ce7e1dc6685b7974cf9fdfd3b2a585a8a94935efe
install : $(TARGET)
diff --git a/src/paks/netsnmpd/install.sh b/src/paks/netsnmpd/install.sh
index 31c5fecae2..5baa2ffeeb 100644
--- a/src/paks/netsnmpd/install.sh
+++ b/src/paks/netsnmpd/install.sh
@@ -17,11 +17,17 @@
# along with IPFire; if not, write to the Free Software #
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
# #
-# Copyright (C) 2007 IPFire-Team <info@ipfire.org>. #
+# Copyright (C) 2007-2026 IPFire-Team <info@ipfire.org>. #
# #
############################################################################
#
. /opt/pakfire/lib/functions.sh
extract_files
restore_backup ${NAME}
+
+# Create symlinks for runlevel interaction.
+ln -sf ../init.d/netsnmpd /etc/rc.d/rc3.d/S65netsnmpd
+ln -sf ../init.d/netsnmpd /etc/rc.d/rc0.d/K02netsnmpd
+ln -sf ../init.d/netsnmpd /etc/rc.d/rc6.d/K02zabbix_agentd
+
start_service --background ${NAME}
diff --git a/src/paks/netsnmpd/uninstall.sh b/src/paks/netsnmpd/uninstall.sh
index a7b8a5370f..ffd74217b9 100644
--- a/src/paks/netsnmpd/uninstall.sh
+++ b/src/paks/netsnmpd/uninstall.sh
@@ -17,7 +17,7 @@
# along with IPFire; if not, write to the Free Software #
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
# #
-# Copyright (C) 2007 IPFire-Team <info@ipfire.org>. #
+# Copyright (C) 2007-2026 IPFire-Team <info@ipfire.org>. #
# #
############################################################################
#
@@ -25,3 +25,6 @@
stop_service ${NAME}
make_backup ${NAME}
remove_files
+
+# Remove init-scripts and symlinks
+rm -rfv /etc/rc.d/rc*.d/*netsnmpd
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-07-01 19:18 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-01 19:18 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 9e27ea51c08e4f2ff523d737361cdf9894fd1409 Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox