From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4gr8tm3gffz2xxR for ; Wed, 01 Jul 2026 19:18:24 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4gr8tm3Gz9z2xLl for ; Wed, 01 Jul 2026 19:18:24 +0000 (UTC) Received: from people01.haj.ipfire.org (people01.haj.ipfire.org [172.28.1.161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bit raw public key) server-digest SHA256 client-signature ECDSA (secp384r1) client-digest SHA384) (Client CN "people01.haj.ipfire.org", Issuer "YE2" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4gr8tl4nbRz1Fr for ; Wed, 01 Jul 2026 19:18:23 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1782933503; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=CeEZxxUuz9wEDtRpHI3+WydwTe1M+Rveo8Ezz22EpNc=; b=qtps/PAMrIaM+txQeug4bx4+q6MRI+SZjVEoZ8uPo00LpPou/yQahQH+79Vbx3twMVp9l6 hBWn2DOkjq3zckc2vB1JpBMkeCiXbyhnrm7u+vSzMcicZJ/Uhji9vcg2ZSaA0fue6TtSKr gIVMFqtfy25ct4B2TjFfRfu5KbUaaat/28F7fyiQsqJNNOva4jv8oShN7tMD7P25lnjHT8 XjJvwBITF/T6atw5UNykpzBrrj6eYPmY8fLueKUZuX5qqlzjfj/kzwiBsEBcQLKNqIU95k G/vaviWjVbquQsbP1HtLFMijsw9MBzHEv93ToULJ4vpWv/u4EhBbgj17YZjHxA== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1782933503; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=CeEZxxUuz9wEDtRpHI3+WydwTe1M+Rveo8Ezz22EpNc=; b=ZtCNrulmBsyqyVPwdD5UeJLZi9MYSvgbZzX2vZ1UsxwnNKx6nZhFmKH9fzoqAgsuv+YA4U mtdSTwG+yXQQrbDA== Received: by people01.haj.ipfire.org (Postfix, from userid 1000) id 4gr8tl3dQDz2xMh; Wed, 01 Jul 2026 19:18:23 +0000 (UTC) To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 9e27ea51c08e4f2ff523d737361cdf9894fd1409 X-Git-Refname: refs/heads/next X-Git-Reftype: branch X-Git-Oldrev: 0d8071449430e608ccf9586f844ec8c02f2b5c6d X-Git-Newrev: 9e27ea51c08e4f2ff523d737361cdf9894fd1409 Message-Id: <4gr8tl3dQDz2xMh@people01.haj.ipfire.org> Date: Wed, 01 Jul 2026 19:18:23 +0000 (UTC) From: Michael Tremer Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 9e27ea51c08e4f2ff523d737361cdf9894fd1409 (commit) via 8bcd6f4fe4fa0b0503528a928f91b983edc886b0 (commit) via eecec62b793e2fec3fbf3d8f31bdf73a28e50c76 (commit) via 4b6ef0f27c9621a4713d12fda4a4724399bccad2 (commit) via 9a69d33cc4742efe0b958ae29dce9c61d60d7a32 (commit) via d820db01de0f6ec5bec02ec5a55ab4aad7400509 (commit) via b7dca1d402d9ef4012cd42f4c0314920f5f00265 (commit) via f96a549bb6abd5b454ed2c8f17d137ce6e4af7f5 (commit) via 8808e35b585a78c1e6fe16f244d735ce7d191490 (commit) via 99534ca0e12762680a3f0a9facb0770177d28eab (commit) via 5d9325bfc11bcf601a38b25f19522db025c94b79 (commit) via 2d5438d78df53baca30918e8e95a50770a53cb44 (commit) via 5620746b41a215f4099adc75476aa29af5600d3f (commit) via fb2c3efdf13a0ed828e3cc55c6ce5c1c08e26115 (commit) via e34525e3aa155ea87cd62f82a3dcf29df9ac7e07 (commit) via 34c79cfb71ebccdbfd8fe5dd390e2b045233fa64 (commit) via 08f5a04bcc1c37035dd46addb0d32c74fc1cdb48 (commit) via 468dcf249398f8bb7beb7f6a2fc1a2ddb755e0ca (commit) from 0d8071449430e608ccf9586f844ec8c02f2b5c6d (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 9e27ea51c08e4f2ff523d737361cdf9894fd1409 Author: Matthias Fischer Date: Wed Jul 1 16:11:06 2026 +0200 tmux: Update to 3.7a Bugfix-Release - for details see: https://raw.githubusercontent.com/tmux/tmux/3.7a/CHANGES "CHANGES FROM 3.7 to 3.7a * Fix crash in break-pane when no name is provided. * Scrollbar options are now cached rather than being looked up for every redraw (issue 5298). * Only forbid #( in names, allow #[, empty names, : and ." Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer commit 8bcd6f4fe4fa0b0503528a928f91b983edc886b0 Author: Adolf Belka Date: Wed Jul 1 13:34:44 2026 +0200 transmission: Update to version 4.1.3 - Update from version 4.1.1 to 4.1.3 - Update of rootfile - Changelog 4.1.3 All Platforms Fixed a CORS bug that leaked the anti-CSRF nonce. (#8938) Fixed a use-after-free bug in peer code. (#8921) Fixed build error when compiling with fmt 12.2.0. (#8942) Everything Else Fixed a 4.1.2 build error in tests. (#8881) 4.1.2 Highlights Fixed 4.1.0 bug that could cause duplicate HTTP announces to be sent to trackers. (#8639) All Platforms Reject benc data that has invalid characters. (#8577) Fixed a bug during the startup sequence where if one torrent failed to parse, subsequent torrents would also fail. (#8605) Fixed a bug that stalled some downloads at 99%. (#8654) Fixed a 4.1.0 upgrade bug that could overwrite utp_enabled and tcp_enabled settings. (#8658) Fixed a 4.1.0 crash that could happen when a peer supplied reqq value smaller than 32 in LTEP handshake. (#8713) Fixed a 4.1.0 regression that periodically wrote upload & download stats to disk even when Transmission had been idle since the last write, preventing the stats file's disk from hibernating while idle. (#8722) Fixed a 4.1.0 bug that prevented TCP peer connections on some systems. (#8748) Added safeguards to HTTP responses to prevent clickjacking. (#8749) Fixed edge case that didn't preserve the order of a batch of torrents when moving their queue position up or down. (#8782) Added sanitization for UTF-8 client names provided by peers during handshake. (#8809) Stopped appending redundant zeros to blocklist files when downloaded from a remote URL. (#8819) Fixed a build failure that occurred when building with link-time optimization. (#8540) macOS Client Fixed a 4.1.0 memory leak. (#8613) Fixed navigation focus issues in the Inspector. (#8792, #8810) Improved UI code to use less CPU. (#8832, #8833, #8835, #8836, #8842, #8846, #8851) Qt Client Fixed a 4.1.0 crash when parsing some RPC responses from older Transmission servers. (#8618) Fixed a 4.1.0 bug that saved both deprecated and current settings names to settings.json. (#8623) GTK Client Fixed a 4.1.0 bug that did not show translated logging level strings. (#8611) Fixed a 4.1.0 crash when toggling alternative speed limits. (#8709) Web Client Fixed a 4.1.0 bug that displayed timestamps in some dropdowns as 6.75:45 instead of 6:45. (#8624) Fixed a bug that could show incorrect torrent status when reconnecting to the server after a lost connection. (#8780, #8783) transmission-remote Improved transmission-remote console output for JSON-RPC 2. (#8799, #8805) Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit eecec62b793e2fec3fbf3d8f31bdf73a28e50c76 Author: Adolf Belka Date: Wed Jul 1 13:34:43 2026 +0200 netsnmpd: Update to version 5.9.5.2 - Update from version 5.9.3 to 5.9.5.2 - Update of rootfile - Move the symlink generation and removal from the lfs to the instal/uninstall pak file to be aligned with the majority of packages. - Version 5.9.4 has the note IMPORTANT: SNMP over TLS and/or DTLS are not functioning properly in this release with various versions of OpenSSL and will be fixed in a future release. - This issue has been in place since Aug 2023 and does not look to have been fixed as far as I have been able to tell. The developers also say that this tool should only be used on trusted local networks anyway. Additionally version 5.9.5 has a CVE fix. Based on this I am submitting the update patch for review and decision. I think it is better to do the update because it does not look like the OpenSSL issue will be fixed anytime soon. It doesn't appear that anyone is working on it. https://github.com/net-snmp/net-snmp/issues/828 - Changelog 5.9.5.2 building: - Fix an issue with needing limits.h included. - update to autoconf 2.72 5.9.5.1 Only a version numbering fix. 5.9.5 snmptrapd: - fixed a critical vulnerability (CVE-2025-68615) which can be triggered by a specially crafted trap snmplib: - Add support for IPV6_RECVPKTINFO - Port the SSH domain transport to FreeBSD - Improve error handling in parse_enumlist and other parsing functions - Filter out non-ASCII characters from output - Fix multiple memory leaks in MIB parsing, OID handling, and transport filters - Fix multiple buffer overflows triggered when creating ASN packets - Fix handling of large/negative values (integer underflows/overflows) - Fix segmentation faults when `varbind` cannot be constructed or buf is null - Fix crash in netsnmp_parse_args when passing invalid argument lists - Fix SNMPv3 multithreading support for snmp_sess_open() snmpd: - Make UCD-SNMP::dskTable dynamic if includeAllDisks is set.") added a verification that drops all filesystems not present in other_fs[] table. So add 'ubifs' in other_fs[] to fix it. - Fix SIGHUP handling for engineID changes and agent port changes - Fix a use-after-free in unregister_mib_context() - Fix regression of memory leak when using RPMDB macros - Improve cache management: clear timer_id on stop, keep cache flags unchanged - Always open libkvm in "safe mode" on FreeBSD - Fix crash when snmptrapd subagent terminates the TCP connection apps: - snmpusm: Improve error handling and fix memory leaks - sshtosnmp: Avoid EINVAL when passing credentials over SSH unix domain socket - snmptest: Plug a possible memory leak - snmpget: Avoid leak if parsing OID fails MIBs: - EtherLike-MIB: Optimize Linux implementation to use netlink statistics - IP-MIB: Add Linux 6.7 compatibility for parsing /proc/net/snmp - LM-SENSORS-MIB: Support negative temperatures - SNMP-TLS-TM-MIB: Update to RFC 9456 and allow TLS protocols higher than TLS1.0 - HOST-RESOURCES-MIB: Add support for RPM SQLite DB background building: - Add support for Windows on ARM - Support OpenBSD 8, FreeBSD 15/16, and DragonflyBSD - Fix build for OS/X versions prior to 10.6.0 - Windows: Bump OpenSSL version and fix library paths - MinGW64: Switch from pkg-config to pkgconf - Add --with-wolfssl Add support for building and linking with the wolfSSL library instead of OpenSSL. Other changes that have been included in this patch are: - Only enable AES support if EVP_aes_128_cfb() is available. - Add support for detecting SSL functions if these have been defined as macros. 5.9.4 IMPORTANT: SNMP over TLS and/or DTLS are not functioning properly in this release with various versions of OpenSSL and will be fixed in a future release. libsnmp: - Remove the SNMP_SWIPE_MEM() macro Remove this macro since it is not used in the Net-SNMP code base. - DISPLAY-HINT fixes - Miscellanious improvements to the transports - Handle multiple oldEngineID configuration lines - fixes for DNS names longer than 63 characters agent: - Added a ignoremount configuration option for the HOST-MIB - disallow SETs with a NULL varbind - fix the --enable-minimalist build apps: - snmpset: allow SET with NULL varbind for testing - snmptrapd: improved MySQL logging code general: - configure: Remove -Wno-deprecated as it is no longer needed - miscellanious ther bug fixes, build fixes and cleanups Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 4b6ef0f27c9621a4713d12fda4a4724399bccad2 Author: Adolf Belka Date: Wed Jul 1 13:34:42 2026 +0200 ltrace: Update to version 0.8.1 - Update from version 0.7.3 to 0.8.1 - Update of rootfile - ltrace now supports aarch64 (full support) and riscv64 (initial support) since version 0.8.0 - Changelog 0.8.1 Bugfixes - include config.h in more cases to fix LTO builds 0.8.0 Prototype libraries - Each DSO can now ship an ltrace config file (called prototype library) that ltrace will open when that DSO is loaded to process image. See ltrace(1) for details. - ltrace.conf is no longer part of installation tarball. Instead, we now ship libc.so.conf, libm.so.conf, libacl.so.conf, and syscalls.conf. Those are now istalled to /usr/share/ltrace by default. /etc/ltrace.conf and $HOME/.ltrace.conf are still loaded if present, and can contain arbitrary user configuration. - The option -F was retrofitted to be a colon-separated list of prototype libraries, and directories to look for prototype libraries in. On Linux, ltrace looks into XDG_CONFIG_HOME, XDG_CONFIG_DIRS, and /usr/share/ltrace as well. - Wide character strings are supported in prototypes. Use "string" lens as usual, but use array of integers as underlying type. libc.so.conf now contains prototypes of wide character functions. - Sole void function parameter such as in the following example, is now considered obsolete: | int fork(void); | This use is still accepted, taken to mean "hide(int)", but produces a warning, and will be removed in future. - Prototypes are now read from DWARF debug info, if available. This complements the data available in config files Architectural support - RISC-V initial support included. - MIPS and MIPSel are now handled by the same backend. - ARMv6, ARMv7 and ARMv8 (AArch64) are supported, including full fetch backend. ARMv8 backend doesn't support tracing of 32-bit binaries, as currently there's no 32-bit userspace available for ARM64 processors. - Imagination Technologies Meta is now supported. - PowerPC64 ELFv2 little-endian ABI is now supported including full fetch backend. - Cadence Tensilica Xtensa is now supported. - LoongArch is now supported. - On Linux, tracing of IFUNC symbols is supported. On i386, x86_64, ppc32 with secure PLT and ppc64, IRELATIVE PLT slots are traced as well. -w output now shows full library path The output format is similar to glibc's backtrace_symbols, e.g.: > /bin/ls(_init+0x19be) [0x40398e] > /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed) [0x7f50cbc3676d] > /bin/ls(_init+0x25fd) [0x4045cd] Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 9a69d33cc4742efe0b958ae29dce9c61d60d7a32 Author: Adolf Belka Date: Wed Jul 1 13:34:40 2026 +0200 core204: Ship lsof Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit d820db01de0f6ec5bec02ec5a55ab4aad7400509 Author: Adolf Belka Date: Wed Jul 1 13:34:41 2026 +0200 lsof: Update to version 4.99.7 - Update from version 4.99.5 to 4.99.7 - No change to rootfile - Changelog 4.99.7 lsof_free_result(): handle result == NULL by @neek78 (#349) [linux] Fix missing parenthesis in lstat error message format by @cuiweixie (#350) Fix use-after-free in lsof_select_process_regex by @cuiweixie (#351) Fix truncated fd numbers in -F field output by @kurok (#352) Add -J/-j options for JSON and JSON Lines output format. -J outputs a JSON envelope with process and file information; -j outputs JSON Lines format where each line is a JSON object representing a file descriptor. by @kurok (#353) Document non-UTF-8 encoding behavior in JSON output by @kurok (#355) Follow autoconf conventions for --enable/--disable help output by @kurok (#356) Skip building liblsof when --disable-liblsof is given by @kurok (#357) [linux] Display connection state for UDP sockets with -T option by @kurok (#358) Add more information to the tutorial about debugging busy mounts by @jakobcornell (#360) Fix case sensitivity in INSTALL commands by @AngelofVerdant (#361) [netbsd] Fix support for NetBSD 10/11 by @jiegec (#363) 4.99.6 [darwin] parse and print NETPOLICY FDTYPE properly by @neek78 (#347) [linux] Treat NFS ESTALE fds as unlinked for +L selection by @x-lugoo (#345) [solaris] Update dlsof.h for Solaris NFS rnode4.h issues by @nic-kulowiec (#342) [doc] fix minor doc errors in 00README by @nic-kulowiec (#340) [aix] Add AIX platform-specific process_file() with filename capture by @uptycs-rmack (#339) [aix] Fix AIX dialect to work with context refactor by @uptycs-rmack (#338) [freebsd] Update supported FreeBSD versions by @yasuhirokimura (#337) Fix null pointer exception by @admardare-cyber (#336) [freebsd] Fix freebsd 15 compat due to rpc and sysctl changes in kernel headers [darwin] File name is now properly saved in liblsof (#348) Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit b7dca1d402d9ef4012cd42f4c0314920f5f00265 Author: Adolf Belka Date: Tue Jun 30 13:15:22 2026 +0200 stunnel: Update to version 5.78 - Update from version 5.72 to 5.78 - No change to rootfile - Changelog 5.78 * Security bugfixes - OpenSSL DLLs updated to version 3.5.6. * Bugfixes - Fixed WIN32 transfer() loop errors with OOB TCP. - Fixed a memory leak introduced in version 5.73. - Build fix for systems without timegm() (thanks to Jose A. Diaz and Shubham Gupta). - Fixed a startup crash when both global (default) and service-level lists of values are configured for an option. * Features - Support for zstd and brotli compression with OpenSSL 3.2 and TLS 1.2 or older. - WIN32 OpenSSL build with zlib and zstd support. - Support for new "options" parameter values. - Less bloated errors on an invalid configuration file. - Documentation updated from Pod to Pandoc Markdown. - Removed support for OpenSSL versions older than 0.9.8. The final update for the OpenSSL 0.9.7 branch (0.9.7m) was issed on 23 Feb 2007. 5.77 * Security bugfixes - OpenSSL DLLs updated to version 3.5.5. * Bugfixes - Avoid attempting to fetch OCSP stapling for PSK-only configuration sections. * Features - Merged applicable patches from Fedora and Debian: - Use SOURCE_DATE_EPOCH for reproducible builds. - Skip the OpenSSL version check when AUTOPKGTEST_TMP is set. - Enable PrivateTmp in the stunnel.service template. - Clarify the manual page for the "curves" option. - Log client IP addresses on TLS errors. 5.76 * Security bugfixes - OpenSSL DLLs updated to version 3.5.4. - Service-level multivalued options now override (rather than append to) global defaults, preventing unintended configurations. * Bugfixes - Fixed enabling/disabling of the default fips=yes property. - Missing OCSP stapling is no longer logged as an error. - Fixed a crash when a PIN was required due to the PKCS#11 CKA_ALWAYS_AUTHENTICATE attribute. * Features - Quantum-resistant hybrid key agreement X25519+ML-KEM-768 (X25519MLKEM768) used by default with OpenSSL 3.5+ and TLS 1.3. - Multiple cert sources are supported, allowing a certificate to be fetched from a provider while loading the chain from a file. - Android build switched to a 16 KB page size. 5.75 * Security bugfixes - OpenSSL DLLs updated to version 3.4.1. - OpenSSL FIPS Provider updated to version 3.1.2. * Bugfixes - Fixed infinite loop triggered by OCSP URL parsing errors (thanks to Richard Könning for reporting). - Fixed OPENSSL_NO_OCSP build issues (thanks to Dmitry Mostovoy for reporting). - Fixed default curve selection in FIPS mode with OpenSSL 3.4+. - Fixed tests with modern Python versions. - Fixed tests with multiple OpenSSL versions installed. * Features - Added provider URI support for "cert" and "key" options. - Added new "CAstore" service-level option (OpenSSL 3.0+). - Added "provider" (OpenSSL 3.0+), "providerParameter" (OpenSSL 3.5+), and "setEnv" global options. - Key file/URI path added to passphrase prompt on Unix. - PKCS#11 provider installed on Windows. 5.74 * Bugfixes - Fixed a stapling cache deallocation crash. - Fixed "redirect" with protocol negotiation. * Features - "protocolHost" support for "socks" protocol clients. - More detailed logs in OpenSSL 3.0 or later. 5.73 * Security bugfixes - OpenSSL DLLs updated to version 3.3.2. - OpenSSL FIPS Provider updated to version 3.0.9. * Bugfixes - Fixed a memory leak while reloading stunnel.conf sections with "client=yes" and "delay=no". - Fixed TIMEOUTocsp with values greater than 4. - Fix the IPv6 test on a non-IPv6 machine. * Features - HELO replaced with EHLO in the post-STARTTLS SMTP protocol negotiation (thanks to Peter Pentchev). - OCSP stapling fetches moved away from server threads. - Improved client-side session resumption. - Added support for the mimalloc allocator. - Check for protocolHost moved to configuration file processing for the client-side CONNECT protocol. - Clarified some confusing OpenSSL's certificate verification error messages. - stunnel.nsi updated for Debian 13 and Fedora. - Improved NetBSD compatibility. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit f96a549bb6abd5b454ed2c8f17d137ce6e4af7f5 Author: Adolf Belka Date: Tue Jun 30 13:15:21 2026 +0200 strace: Update to version 7.1 - Update from version 6.18 to 7.1 - No change to rootfile - Changelog 7.1 * Improvements * Implemented wall-clock-aware columns (wall-total, wall-min, wall-max, wall-avg) for the -c/--summary-only report, allowing wall-clock and system CPU times to be displayed side by side in a single run. * Included out-of-range syscalls in the -c/--summary-only report. * Updated decoding of sched_getattr syscall. * Implemented decoding of FS_IOC_SHUTDOWN, PIDFD_GET_INFO, and PIDFD_GET_*_NAMESPACE ioctl commands. * Implemented decoding of IFLA_BR_FDB_N_LEARNED, IFLA_BR_FDB_MAX_LEARNED, and IFLA_BR_STP_MODE netlink attributes. * Updated lists of CLONE_*, FSMOUNT_*, KT_*, KVM_*, LANDLOCK_*, NETDEV_*, NL80211_*, and PIDFD_* constants. * Updated lists of ioctl commands from Linux 7.1. 7.0 * Improvements * Implemented optional colorized trace output. * Implemented decoding of rseq and rseq_slice_yield syscalls. * Implemented decoding of BPF_TRACE_FSESSION bpf attach type. * Implemented decoding of BPF_PROG_ASSOC_STRUCT_OPS bpf command. * Implemented decoding of UDMABUF_CREATE, UDMABUF_CREATE_LIST, and VIDIOC_QUERYMENU ioctl commands. * Updated decoding of statmount syscall flags. * Updated lists of BPF_*, BTRFS_*, FS_*, IORING_*, KEY_*, KVM_*, NT_*, OPEN_TREE_*, PR_*, V4L2_*, and *_MAGIC constants. * Updated lists of ioctl commands from Linux 7.0. 6.19 * Improvements * Implemented decoding of listns syscall. * Implemented decoding of F_GET_RW_HINT, F_SET_RW_HINT, F_GET_FILE_RW_HINT, F_SET_FILE_RW_HINT, F_GETDELEG, and F_SETDELEG fcntl commands. * Implemented decoding of IORING_REGISTER_SEND_MSG_RING, IORING_REGISTER_ZCRX_IFQ, IORING_REGISTER_RESIZE_RINGS, IORING_REGISTER_MEM_REGION, IORING_REGISTER_QUERY, and IORING_REGISTER_ZCRX_CTRL opcodes of io_uring_register syscall. * Implemented decoding of extended argument structures for io_uring_enter syscall when IORING_ENTER_EXT_ARG or IORING_ENTER_EXT_ARG_REG flags are set. * Implemented decoding of attr_ptr and attr_type_mask fields of struct io_uring_sqe for io_uring_register syscall. * Implemented opcode-specific decoding of flags union and ioprio fields of struct io_uring_sqe for io_uring_register syscall. * Implemented decoding of 128-byte SQEs for io_uring_register syscall. * Implemented decoding of socket operations (SOCKET_URING_OP_*) for io_uring URING_CMD and URING_CMD128 operations when the file descriptor is a socket. * Updated decoding of struct mnt_id_req and struct perf_event_attr. * Updated lists of ABS_*, BPF_*, ETHTOOL_*, ETH_P_*, IORING_*, KVM_*, PERF_*, TLS_*, V4L2_*, and *_MAGIC constants. * Updated lists of ioctl commands from Linux 6.19. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 8808e35b585a78c1e6fe16f244d735ce7d191490 Author: Adolf Belka Date: Tue Jun 30 13:15:20 2026 +0200 postfix: Update to version 3.11.4 - Update from version 3.11.3 to 3.11.4 - No change to rootfile - Changelog 3.11.4 Major changes - database [Incompat 20260220] The alias_maps and alias_database parameter default values have changed from hash:/path/to/aliases (or dbm:/path/to/aliases) to $default_database_type:/path/to/aliases. This simplifies the migration away from Berkeley DB. [Infrastructure 20260219] Support to migrate a Postfix configuration that uses Berkeley DB hash: or btree: tables, to a configuration that uses lmdb: or a combination of cdb: and lmdb:. This is needed for (Linux) OS distributions that have removed Berkeley DB support. See NON_BERKELEYDB_README for manual and automatic migration support. Postfix already supports CDB and LMDB for more than 10 years. It may be a good idea to do the migration before you need to upgrade to an OS distribution that no longer supports Berkeley DB. [Infrastructure 20251226] Tooling to help with the migration away from Berkeley DB. The new parameter default_cache_db_type controls the default database type for address_verify_map, postscreen_cache_map, and smtp_sasl_auth_cache_name, previously hard-coded as 'btree'. [Feature 20250321] Safety: the SQLite client now logs a warning when a query uses double quotes instead of the Postfix-recommended single quotes. Only the recommended form is protected against SQL injection. [Feature 20250509] Support to run all memcache lookup keys through an OpenSSL digest function. This prevents a database access error when lookup keys may exceed the memcache server's key length limit (usually, 250 bytes). [Feature 20250624] Support for a new "debug:" pseudo lookup table. Specify debug:maptype:mapname to encapsulate a maptype:mapname lookup table and log all access. This builds on existing but unused code to log table access. Contributed by Richard Hansen. [Infrastructure 20250626] Overhauled in-memory lookup table life-cycle management; overhauled sharing/isolation for proxied lookup tables. Major changes - deprecation [Feature 20250609] smtp_tls_enforce_peername and lmtp_tls_enforce_peername are now officially deprecated. Postfix will log a warning until the features are deleted. See DEPRECATION_README for a summary of deprecated and deleted features. [Feature 20251027] This adds 12 more deprecation warnings for parameters that have been renamed in the past, and that still provide a backwards-compatible default value for their replacement. The parameters deprecated by this change are: authorized_verp_clients, fallback_relay, lmtp_per_record_deadline, postscreen_blacklist_action, postscreen_dnsbl_ttl, postscreen_dnsbl_whitelist_threshold, postscreen_whitelist_interfaces, smtpd_client_connection_limit_exceptions, smtp_per_record_deadline, tlsproxy_client_level, tlsproxy_client_policy, virtual_maps. [Feature 20251028] Deprecate the smtp_cname_overrides_servername and lmtp_cname_overrides_servername parameters, and delete documentation that has been obsolete since Postfix 2.11. Major changes - logging [Feature 20250910] TLS feature policy status summary in delivery status logging. This shows the desired and actual TLS security level enforcement status and, if a message requests REQUIRETLS, the REQUIRETLS policy enforcement status. For a list of examples see https://www.postfix.org/postconf.5.html#smtp_log_tls_feature_status [Feature 20251216] After a delivery failure, the bounce daemon logged ": sender non-delivery notification: " only if the notification was queued successfully. The bounce daemon now always logs this, making Postfix behavior easier to understand. Visible changes for logfile analyzers: - The bounce daemon now logs ": sender non-delivery notification: " BEFORE the cleanup daemon logs activity with "". Previously, the bounce daemon logged the old<=>new queue ID connection later, which made logfile analysis more difficult. - The bounce daemon now logs a logfile record ": sender notification failed to
: " when the notification was not queued. In some cases it will log ": sender notification failed to
" (without the reason). In those cases the failure reason was already logged by lower-level code, but without the queue ID. Major changes - management tool integration [Feature 20251124] Basic JSON output support with "postconf -j|-jM|-jF|-jP", "postalias -jq|-js", "postmap -jq|-js", and "postmulti -jl". No support is planned for JSON input support. Major changes - milter support [Feature 20251208] Improved Milter error handling for messages that arrive over a long-lived SMTP connection, by changing the default milter_default_action from "tempfail" to the new "shutdown" action (i.e. disconnect the remote SMTP client). This avoids a worst-case scenario where after a single Milter error, Postfix would tempfail all messages that the client sends over a long-lived connection, even if the Milter error was only temporary. Major changes - mime support [Feature 20251104] New non_empty_end_of_header_action parameter with the cleanup(8) server action when a primary message header is terminated with a non-empty line: 1) fix_quietly: Insert an empty line before the offending text (the backwards-compatible default), 2) add_header: Insert a MIME-Error: header before inserting an empty line, or 3) reject: Log a "mime-error" and reject the message. Note that the 'empty line' separator is not used for DKIM signature checks. Therefore, adding a missing separator does not break DKIM. Major changes - mta-sts [Feature 20250906] Workaround for an interface mis-match between the Postfix SMTP client and MTA-STS policy plugins. This introduces a new parameter "smtp_tls_enforce_sts_mx_patterns" (default: "yes"). The MTA-STS plugin configuration needs to enable TLSRPT support, so that it forwards STS policy attributes to Postfix. This works even if Postfix TLSRPT support is disabled at build time or at runtime. With the above two configurations, the Postfix SMTP client will connect to an MX host only if its name matches any STS policy MX host pattern, and will match a server certificate against the MX hostname. Otherwise, the old behavior stays in effect: connect to any MX host listed in DNS, and match a server certificate against any STS policy MX host pattern. This code was published first in Postfix 3.11, and later back-ported to Postfix 3.10.5. Major changes - portability [Feature 20241201] Support for the C23 built-in bool type. Older Postfix releases have been updated with a makedefs script that disables C23 built-in bool support. Major changes - postqueue [Feature 20251218] the postqueue (and mailq) command now also lists recipients in bounce logfiles (in JSON output, this uses a new object member 'bounce_reason' instead of the existing 'delay_reason'). Such recipients have already been deleted from the message queue file, but they are still pending the creation of a non-delivery status notification message that will be returned to the sender. Major changes - relocated_maps [Feature 20250608] Specify "relocated_prefix_enable = no" to disable the hard-coded prefix "5.1.6 User has moved to " that is by default prepended to all relocated_maps lookup results. This setting requires that the table contains responses with both custom enhanced status code (X.Y.Z) and text. For details, see "man 5 relocated" or https://www.postfix.org/relocated.5.html . Major changes - requiretls [Feature 20241111] Support for the REQUIRETLS verb in SMTP. This, and everything that was added later through 2025, is described in REQUIRETLS_README. [Feature 20250120] After a certificate check fails, or a remote SMTP server does not announce REQUIRETLS support, the Postfix SMTP client will override the RFC 8689 5.x.x. status and treat it as a soft error, until there are no more alternate MX servers to try. [Feature 20250827] New parameter requiretls_redact_dsn (default: yes) to redact bounce messages as described in RFC 8689 section 5, so that they don't need REQUIRETLS support on every hop in the return path. [Feature 20250827] smtp_requiretls_policy and lmtp_requiretls_policy for responsible REQUIRETLS policy enforcement. REQUIRETLS must be enforced with care, because at this time most domains do not publish DANE or MTA-STS policies, and most MTAs and content filters do not support REQUIRETLS. [Feature 20250916] support for a "Require-TLS-ESMTP: yes" header to propagate an ESMTP REQUIRETLS request through a FILTER_README or SMTPD_PROXY_README style content filter. This header is detected or added by the cleanup daemon and by the before-proxy-filter Postfix SMTP server. This feature is enabled by default with "requiretls_esmtp_header = yes". The Require-TLS-ESMTP header will be visible to local and remote recipients. This feature can safely be disabled when a configuration does not use REQUIRETLS, or does not use FILTER_README or SMTPD_PROXY_README style content filters. Major changes - smtp server [Feature 20250801] smtpd_reject_filter_maps support to selectively replace a reject response from the Postfix SMTP server, or from a program that replies through the Postfix SMTP server. Major changes - smtputf8 [Feature 20250122] New Postfix sendmail command option "-O smtputf8" to request that deliveries over SMTP use the SMTPUTF8 extension. This reuses logic that was introduced for REQUIRETLS. [Feature 20250824] When a message needs to be delivered with SMTPUTF8, but a remote server does not support it, the Postfix SMTP client may now try alternate servers instead of returning the message immediately. This reuses code that was implemented for REQUIRETLS. Major changes - tls support [Feature 20250623] This changes the Postfix SMTP client smtp_tls_security_level default value to "may" if Postfix was built with TLS support, and the compatibility_level is 3.11 or higher. There is no change to the default lmtp_tls_security_level value. It remains empty, because there is no default TLS security level that makes sense for connections over UNIX-domain and loopback TCP and non-loopback TCP sockets. There also is no equivalent change for Postfix SMTP server TLS security levels, because changing smtpd_tls_security_level is not sufficient. Server-side TLS requires that at least one private key and corresponding public-key certificate chain are configured. [Feature 20251029] Debugging: depending on OpenSSL build options, "posttls-finger -L ssl-debug" will decode TLS handshake messages. [Feature 20251102] Post-quantum cryptography support: with OpenSSL 3.5 and later, change the tls_eecdh_auto_curves default value to avoid problems with network infrastructure that mis-handles TLS hello messages larger than one (Ethernet) TCP segment. This problem is more generally known as "protocol ossification". Major changes - tlsrpt [Incompat 20250601] the default smtp_tlsrpt_skip_reused_handshakes setting was changed from "yes" to "no". The new default is enabled with compatibility level >= 3.11. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 99534ca0e12762680a3f0a9facb0770177d28eab Author: Adolf Belka Date: Tue Jun 30 13:15:15 2026 +0200 core204: Ship sysstat Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 5d9325bfc11bcf601a38b25f19522db025c94b79 Author: Adolf Belka Date: Tue Jun 30 13:15:23 2026 +0200 sysstat: Update to version 12.7.9 - Update from version 12.7.6 to 12.7.9 - Update of rootfile - Changelog 12.7.9 * sar: Fix pgsteal/s double value with recent kernels. * Allow Truecolor (RGB) SGR codes in sysstat commands output. * Don't display newline character within SGR-formatted text. * Rework several functions based on Mistral AI Le Chat's suggestions. * [Jun Lyu]: Fix missing dependencies in Makefile.in. * mpstat: No longer call get_HZ() function. * sar: Close file descriptors on fork() error. * Fix version number in sysstat.xsd document. * Check passed args in some functions. * common.c: Include ioconf.h header file only if SOURCE_SADC is defined. * Mark various variables as constant. * Improve code clarity and readability. * Exit if calling sysconf() function fails. * Create format strings using string's real max value. * simtest: Fix gcc warning in legacy sar version. * Update sar and sadf manual page. * Update FAQ. * NLS: Translations updated. * Update non regression tests. 12.7.8 * sar/sadf: Add new metric kbshmem. * sar/sadf: Now compute used memory as total memory - available memory. * sadf: Set availablekb to frmkb during conversion. * cifsiostat, iostat, mpstat, tapestat: Add new option -U to display timestamps in seconds since the Epoch. * Trap SIGTERM with all sysstat commands. * mpstat: Go to next line when Ctrl/C is pressed. * Add support for out-of-tree building and testing. * sar: A_PWR_BAT: Fix wrong size used in memory initialization. * Makefile.in: Update dependencies for install_man target. * Makefile.in: Remove unused TFLAGS variable. * Makefile.in: Remove old references to nfsiostat. * DTD and XSD documents updated. * NLS translations updated. * sar, mpstat, iostat, cifsiostat and tapestat manual pages updated. * Various cosmetic changes in code and Makefile. * do_test: Add test target for out-of-tree build. * systest: Explicitly set signal to SIGINT. * Non regression tests: Remove root symlink in tests directory. * Non regression tests updated. 12.7.7 * Rework overflow check function. * pidstat: Add JSON output format (option "-o JSON"). * [Siddhi Katage]: pidstat: Fix bogus %usr values in pidstat output. * pidstat: Free structures before exiting. * pidstat: Make sure interval is specified when option -e is used. * pidstat: Create separate functions to display data for current task. * pidstat: Various cosmetic changes. * cifsiostat: Add JSON output format (option "-o JSON"). * cifsiostat: Display error message when no CIFS fs are found. * cifsiostat: Add new option -y to tell cifsiostat to omit the first report with statistics since system restart. * tapestat: Add JSON output format (option "-o JSON"). * tapestat: Set handler for SIGALRM in rw_tape_stat_loop() function. * tapestat: Call write_sample_timestamp() to display timestamp. * mpstat: Properly terminate JSON output when ^C entered on first interval. * iostat: Remove extra blank line when omitting first report. * cifsiostat, tapestat and pidstat manual pages updated. * Use the binary units (kibibytes, mebibytes...) instead of kilobytes, megabytes... in all manual pages. * FAQ updated. * [Peter Portante]: Slight changes to compile on Mac OS X. * [Peter Portante]: Add missing "void" parameter to init_custom_color_palette() function. * Use xflags variable for options used by multiple commands. * Move write_sample_timestamp() function to common.c file. * Update headers files included. * Add new non regression tests. Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 2d5438d78df53baca30918e8e95a50770a53cb44 Author: Adolf Belka Date: Tue Jun 30 13:15:14 2026 +0200 core204: Ship file Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 5620746b41a215f4099adc75476aa29af5600d3f Author: Adolf Belka Date: Tue Jun 30 13:15:19 2026 +0200 file: Update to version 5.48 - Update from version 5.47 to 5.48 - No change to rootfile - Changelog 5.48 * add landlock support (valoq) * add BE/LE GUID * multiple fixes to prevent integer overflow in 32 bits (kerwin) * PR/745: streamout: Don't flush when trying to set negative offsets on pipes, just continue, fixes 'cat file.zip | file -' * PR/753: vmihalko: Fix race is magic_getpath() * PR/728: Anton Monroe: Reinstate regex/c Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit fb2c3efdf13a0ed828e3cc55c6ce5c1c08e26115 Author: Adolf Belka Date: Tue Jun 30 13:15:18 2026 +0200 fetchmail: Update to version 6.6.5 - Update from version 6.6.0 to 6.6.5 - No chyange to rootfile - Changelog 6.6.5 SECURITY BUGFIX * POP3 with RPA: fix calculation of buffer sizes to avoid buffer overflow on long service challenges with long user IDs, which would smash our stack. Triggering this requires that 1. RPA is enabled at compile time (non-default, which is discouraged in autotools, and possible but not documented nor supported in meson), and the username (--user option, or user in the rcfile) contains @compuserve.com anywhere, and the server supports an AUTH command without arguments (which is a non-standard local extension), and that it offers RPA authentication in response to that command. This was reported based on an incomplete semi-wrong AI report with an incomplete fix "recommendation" by zhangph12138@outlook.com via fetchmail-devel@. The fix suggested in that AI report was wrong, and would happily crash a few lines later again. The fix deployed calculates the buffer size of "workarea" variables based on the sizeof() of constituent components. BUGFIX * Robustness: If RPA is enabled at compile time and POP3 is in use, do not barf if @compuserve.com is in the remote site's username (what you'd pass as --user, or user in the rcfile) and the remote site either does not support an "AUTH" command without parameters (normally, one is required, but some servers such as jpop and Cyrus allow AUTH to request the list of supported authentication types as an extension; the standard way would be a "CAPA" request instead), but try other authentication methods. Found by code auditing in response to a bug report against rpa.c. Note that enabling RPA is discouraged because it is based on the weak MD5 crypto algorithm. 6.6.4 BUGFIX * The IMAP client will now properly quote the folder name given with the moveto rcfile option, or --moveto command-line option. Report and bugfix contributed by Corben Dallas. BUILD IMPROVEMENTS * meson-based builds with wolfSSL should now also work when meson finds the wolfssl package through cmake, instead of pkgconfig. This is unsupported and depends on internal set(_wolfssl_includedir "...") in wolfSSL's lib/cmake/*.cmake files, and works as of wolfSSL 5.9.1. The supported way to build fetchmail with wolfSSL with meson is to make sure that wolfSSL is found with pkgconfig, as in (change /path/to!) meson setup --pkg-config-path /path/to/wolfssl/lib/pkgconfig EXPERIMENTAL CHANGES - these are not documented anywhere else, only here: * fetchmail supports AWS-LC 1.71 or newer, since its relicensing to the Apache license v2.0. Note this requires you to distribute fetchmail under terms of the GPLv3 because the GPLv2 is claimed incompatible with Apache license (this is no different for OpenSSL 3 or newer, or the one wolfSSL version that was GPLv3 licensed). * fetchmail supports a FETCHMAIL_SSL_SECLEVEL environment variable (since 6.5.0, except when using AWS-LC where it is silently ignored), which can be used to override the OpenSSL security level. Fetchmail by default raises the security level to 2 if lower. This variable can be used to lower it. Use with extreme caution. Note that levels 3 or higher will frequently cause incompabilities with servers because server-side data sizes are often too low. Valid range: 0 to 5 for OpenSSL 1.1.1 and 3.0. * fetchmail supports a FETCHMAIL_SSL_CIPHERS environment variable (since 6.5.0) that sets the cipher string (through two different OpenSSL functions) for SSL and TLS versions up to TLSv1.2. If setting the ciphers fails, fetchmail will not connect. If not given, defaults to "HIGH:MEDIUM:+RC4:@STRENGTH:!aNULL" - note that +RC4 is supposed to move the RC4 to the end of the list, not add it. * fetchmail supports a FETCHMAIL_TLS13_CIPHERSUITES environment variable (since 6.5.0) that sets the ciphersuites (a colon-separated list, without + ! -) for TLSv1.3. If not given, defaults to the SSL library's built-in list. If setting the ciphersuites fails, fetchmail refuses to connect. * NOTE the features above are simplistic. For instance, even though you configure --sslproto tls1.3, a failure to set tls1.2 ciphers could cause a connection abort. 6.6.3 COMPATIBILITY: * fetchmail can now be built with OpenSSL 4.0.0 (tested as of -beta1). 6.6.2 BUGFIX: * fetchmail 6.6.0 and 6.6.1 could not be configured without SSL, it would break compiling sink.c. Fix compilation. Report by Toralf Förster, analysis and different patch suggested by Holger Hoffstätte, fixes #86. https://bugs.gentoo.org/967258 and https://gitlab.com/fetchmail/fetchmail/-/issues/86 6.6.1 TRANSLATIONS were updated by these fine people (randomized order): * sr: Мирослав Николић [Serbian] * es: Cristian Othón Martínez Vera [Spanish] Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit e34525e3aa155ea87cd62f82a3dcf29df9ac7e07 Author: Adolf Belka Date: Tue Jun 30 13:15:13 2026 +0200 core204: Ship expat Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 34c79cfb71ebccdbfd8fe5dd390e2b045233fa64 Author: Adolf Belka Date: Tue Jun 30 13:15:17 2026 +0200 expat: Update to version 2.8.2 - Update from version 2.8.1 to 2.8.2 - Update of rootfile - 13 CVE fixes - Changelog 2.8.2 Security fixes: #1246 CVE-2026-50219 -- Disallow calls to functions `XML_GetBuffer`, `XML_Parse`, `XML_ParseBuffer`, `XML_ParserFree`, `XML_ParserReset` to guard e.g. Expat bindings from memory corruption; this CPython issue is related: https://github.com/python/cpython/issues/146169 #1267 CVE-2026-56131 -- Protect XML_ResumeParser from being called from a handler, plugging a hole in the fix to CVE-2026-50219 #1272 CVE-2026-56132 -- Fix out-of-bound scaffolding index store in `doProlog` #1229 #1232 CVE-2026-56403 -- Integer overflow in `storeAtts` #1249 CVE-2026-56404 -- Integer overflow in `addBinding` #1251 CVE-2026-56405 -- Integer overflow in `getAttributeId` #1255 CVE-2026-56406 -- Integer overflow in `XML_ParseBuffer` #1262 CVE-2026-56407 -- Integer overflow in `textLen` handling #565 CVE-2026-56408 -- Integer overflow in `copyString` (commit 16e2efd867ea8567ffa012210b52ef5918e20817) #1259 CVE-2026-56409 -- xmlwf: Integer overflow in output path join #1252 CVE-2026-56410 -- xmlwf: Integer overflow in `resolveSystemId` #1263 CVE-2026-56411 -- xmlwf: Integer overflow in notation list allocation #1278 CVE-2026-56412 -- Guard XML_TOK_DATA_CHARS handler calls in `doCdataSection`, plugging a hole in the fix to CVE-2026-50219 Bug fixes: #1260 xmlwf: Escape names and base URI in meta output #1266 xmlwf: Pick a safe quote for notation system and public IDs Other changes: #1257 CMake|Autotools: Stop using /dev/urandom by default #1244 #1254 CMake: Fix guard for Unix sources of entropy #1183 #1270 CMake|Windows: Add missing export for symbol `XML_SetHashSalt16Bytes` #1236 CMake: Mark option EXPAT_OSSFUZZ_BUILD as advanced #1283 Limit output indentation for EXPAT_ENTITY_DEBUG=1 and allow unlimited indentation via EXPAT_ENTITY_DEBUG=2 #565 Replace some loops by use of `memcpy`, `strlen`, `wcslen` #1220 lib: Use a size_t for group sizes #1221 lib: Fix too-conservative integer overflow check when appending raw name #1222 lib: Simplify attribute allocation/management logic #1224 Update fallthrough annotations to satisfy Clang and GCC #1226 lib: Remove unnecessary void * casts in random code #1228 lib: Reduce scope of locals in storeAtts #1230 lib: Count attributes with size_t variables #1238 Minor get-buffer improvements #1239 #1240 lib|tests: Include header expat_config.h first #1241 lib: Shrink size of XML_GetBuffer #1242 lib: Remove a legacy comment #1243 lib: XML_ParserReset: Extract repeated linked-list move logic #1243 lib: Unify entity free lists #1247 lib: Fix use of '0' as boolean literal #1248 lib: Make XML_Index overflow check more intuitive #1256 lib: Use size_t for counting string/URI lengths #1258 lib: XML_GetInputContext: Remove use of 0 for NULL #1261 Comment typo fixes #1275 Teach Memory Sanitizer semantics of randomization functions #1276 #1281 Version info bumped from 13:1:12 (libexpat*.so.1.12.1) to 13:2:12 (libexpat*.so.1.12.2); see https://verbump.de/ for what these numbers do Infrastructure: #1231 perl-integration.yml: Bump to XML::Parser 2.59 #1237 emscripten.yml: Bump from Ubuntu 22.04 to 24.04 #1183 #1271 windows-build.yml: Cover completeness of file libexpat.def.cmake #1274 linux.yml: Make llvm-symbolizer available in CI Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 08f5a04bcc1c37035dd46addb0d32c74fc1cdb48 Author: Adolf Belka Date: Tue Jun 30 13:15:12 2026 +0200 core204: Ship elinks Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 468dcf249398f8bb7beb7f6a2fc1a2ddb755e0ca Author: Adolf Belka Date: Tue Jun 30 13:15:16 2026 +0200 elinks: Update to version 0.19.1 - Update from version 0.19.0 to 0.19.1 - No change to rootfile - Changelog 0.19.1 * compilation fixes for Ruby scripting #410 * Disable poll on macOS < 10.6 * bookmarks xbel did not restore positions. #415 * use after free in forms code * NULL dereference in iframes code (crash at github) #418 * Add action move-cursor-line-end. #416 * bool option document.browse.wrap. #420 * bool options ui.clipboard.remove_leading_spaces and ui.clipboard.remove_trailing_spaces #416 * Serbian translation update * fix in gopher #421 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/expat | 20 +++++------ config/rootfiles/common/sysstat | 12 +++---- .../{oldcore/141 => core/204}/filelists/elinks | 0 .../{oldcore/106 => core/204}/filelists/expat | 0 .../{oldcore/106 => core/204}/filelists/file | 0 .../{oldcore/170 => core/204}/filelists/lsof | 0 .../{oldcore/160 => core/204}/filelists/sysstat | 0 config/rootfiles/packages/ltrace | 9 ++++- config/rootfiles/packages/netsnmpd | 26 +++++++------- config/rootfiles/packages/transmission | 4 +-- lfs/elinks | 4 +-- lfs/expat | 4 +-- lfs/fetchmail | 8 ++--- lfs/file | 4 +-- lfs/lsof | 6 ++-- lfs/ltrace | 18 +++++----- lfs/netsnmpd | 42 ++++++++++------------ lfs/postfix | 6 ++-- lfs/strace | 6 ++-- lfs/stunnel | 8 ++--- lfs/sysstat | 9 ++--- lfs/tmux | 6 ++-- lfs/transmission | 6 ++-- src/paks/netsnmpd/install.sh | 8 ++++- src/paks/netsnmpd/uninstall.sh | 5 ++- 25 files changed, 112 insertions(+), 99 deletions(-) copy config/rootfiles/{oldcore/141 => core/204}/filelists/elinks (100%) copy config/rootfiles/{oldcore/106 => core/204}/filelists/expat (100%) copy config/rootfiles/{oldcore/106 => core/204}/filelists/file (100%) copy config/rootfiles/{oldcore/170 => core/204}/filelists/lsof (100%) copy config/rootfiles/{oldcore/160 => core/204}/filelists/sysstat (100%) Difference in files: diff --git a/config/rootfiles/common/expat b/config/rootfiles/common/expat index b13257ddb9..0f15469d35 100644 --- a/config/rootfiles/common/expat +++ b/config/rootfiles/common/expat @@ -2,21 +2,21 @@ #usr/include/expat.h #usr/include/expat_config.h #usr/include/expat_external.h -#usr/lib/cmake/expat-2.8.1 -#usr/lib/cmake/expat-2.8.1/expat-config-version.cmake -#usr/lib/cmake/expat-2.8.1/expat-config.cmake -#usr/lib/cmake/expat-2.8.1/expat-noconfig.cmake -#usr/lib/cmake/expat-2.8.1/expat.cmake +#usr/lib/cmake/expat-2.8.2 +#usr/lib/cmake/expat-2.8.2/expat-config-version.cmake +#usr/lib/cmake/expat-2.8.2/expat-config.cmake +#usr/lib/cmake/expat-2.8.2/expat-noconfig.cmake +#usr/lib/cmake/expat-2.8.2/expat.cmake #usr/lib/libexpat.la #usr/lib/libexpat.so usr/lib/libexpat.so.1 -usr/lib/libexpat.so.1.12.1 +usr/lib/libexpat.so.1.12.2 #usr/lib/pkgconfig/expat.pc #usr/share/doc/expat -#usr/share/doc/expat-2.8.1 -#usr/share/doc/expat-2.8.1/ok.min.css -#usr/share/doc/expat-2.8.1/reference.html -#usr/share/doc/expat-2.8.1/style.css +#usr/share/doc/expat-2.8.2 +#usr/share/doc/expat-2.8.2/ok.min.css +#usr/share/doc/expat-2.8.2/reference.html +#usr/share/doc/expat-2.8.2/style.css #usr/share/doc/expat/AUTHORS #usr/share/doc/expat/changelog #usr/share/man/man1/xmlwf.1 diff --git a/config/rootfiles/common/sysstat b/config/rootfiles/common/sysstat index b2cb2277b3..acf034b1d3 100644 --- a/config/rootfiles/common/sysstat +++ b/config/rootfiles/common/sysstat @@ -11,12 +11,12 @@ usr/bin/sar usr/lib/sa/sa1 usr/lib/sa/sa2 usr/lib/sa/sadc -#usr/share/doc/sysstat-12.7.6 -#usr/share/doc/sysstat-12.7.6/CHANGES -#usr/share/doc/sysstat-12.7.6/COPYING -#usr/share/doc/sysstat-12.7.6/CREDITS -#usr/share/doc/sysstat-12.7.6/FAQ.md -#usr/share/doc/sysstat-12.7.6/README.md +#usr/share/doc/sysstat-12.7.9 +#usr/share/doc/sysstat-12.7.9/CHANGES +#usr/share/doc/sysstat-12.7.9/COPYING +#usr/share/doc/sysstat-12.7.9/CREDITS +#usr/share/doc/sysstat-12.7.9/FAQ.md +#usr/share/doc/sysstat-12.7.9/README.md #usr/share/locale/af/LC_MESSAGES/sysstat.mo #usr/share/locale/be/LC_MESSAGES/sysstat.mo #usr/share/locale/cs/LC_MESSAGES/sysstat.mo diff --git a/config/rootfiles/core/204/filelists/elinks b/config/rootfiles/core/204/filelists/elinks new file mode 120000 index 0000000000..10db4dd8f7 --- /dev/null +++ b/config/rootfiles/core/204/filelists/elinks @@ -0,0 +1 @@ +../../../common/elinks \ No newline at end of file diff --git a/config/rootfiles/core/204/filelists/expat b/config/rootfiles/core/204/filelists/expat new file mode 120000 index 0000000000..e1923cf639 --- /dev/null +++ b/config/rootfiles/core/204/filelists/expat @@ -0,0 +1 @@ +../../../common/expat \ No newline at end of file diff --git a/config/rootfiles/core/204/filelists/file b/config/rootfiles/core/204/filelists/file new file mode 120000 index 0000000000..0c60e43aa5 --- /dev/null +++ b/config/rootfiles/core/204/filelists/file @@ -0,0 +1 @@ +../../../common/file \ No newline at end of file diff --git a/config/rootfiles/core/204/filelists/lsof b/config/rootfiles/core/204/filelists/lsof new file mode 120000 index 0000000000..1353d33e58 --- /dev/null +++ b/config/rootfiles/core/204/filelists/lsof @@ -0,0 +1 @@ +../../../common/lsof \ No newline at end of file diff --git a/config/rootfiles/core/204/filelists/sysstat b/config/rootfiles/core/204/filelists/sysstat new file mode 120000 index 0000000000..cec8f445fd --- /dev/null +++ b/config/rootfiles/core/204/filelists/sysstat @@ -0,0 +1 @@ +../../../common/sysstat \ No newline at end of file diff --git a/config/rootfiles/packages/ltrace b/config/rootfiles/packages/ltrace index 9964a70ca6..58a4857a1b 100644 --- a/config/rootfiles/packages/ltrace +++ b/config/rootfiles/packages/ltrace @@ -1,4 +1,3 @@ -etc/ltrace.conf usr/bin/ltrace #usr/share/doc/ltrace #usr/share/doc/ltrace/COPYING @@ -6,5 +5,13 @@ usr/bin/ltrace #usr/share/doc/ltrace/INSTALL #usr/share/doc/ltrace/README #usr/share/doc/ltrace/TODO +#usr/share/ltrace +usr/share/ltrace/libacl.so.conf +usr/share/ltrace/libc.so-types.conf +usr/share/ltrace/libc.so.conf +usr/share/ltrace/libm.so.conf +usr/share/ltrace/libpthread.so-types.conf +usr/share/ltrace/libpthread.so.conf +usr/share/ltrace/syscalls.conf #usr/share/man/man1/ltrace.1 #usr/share/man/man5/ltrace.conf.5 diff --git a/config/rootfiles/packages/netsnmpd b/config/rootfiles/packages/netsnmpd index 510f4a0cfb..34e4eb30a6 100644 --- a/config/rootfiles/packages/netsnmpd +++ b/config/rootfiles/packages/netsnmpd @@ -1,7 +1,4 @@ etc/rc.d/init.d/netsnmpd -etc/rc.d/rc0.d/K02netsnmpd -etc/rc.d/rc3.d/S65netsnmpd -etc/rc.d/rc6.d/K02netsnmpd etc/snmpd.conf usr/bin/agentxtrap usr/bin/checkbandwidth @@ -130,7 +127,6 @@ usr/bin/traptoemail #usr/include/net-snmp/library/snmp.h #usr/include/net-snmp/library/snmpAliasDomain.h #usr/include/net-snmp/library/snmpCallbackDomain.h -#usr/include/net-snmp/library/snmpIPBaseDomain.h #usr/include/net-snmp/library/snmpIPv4BaseDomain.h #usr/include/net-snmp/library/snmpIPv6BaseDomain.h #usr/include/net-snmp/library/snmpSocketBaseDomain.h @@ -214,6 +210,8 @@ usr/bin/traptoemail #usr/include/net-snmp/system/openbsd4.h #usr/include/net-snmp/system/openbsd5.h #usr/include/net-snmp/system/openbsd6.h +#usr/include/net-snmp/system/openbsd7.h +#usr/include/net-snmp/system/openbsd8.h #usr/include/net-snmp/system/osf5.h #usr/include/net-snmp/system/solaris.h #usr/include/net-snmp/system/solaris2.3.h @@ -231,28 +229,28 @@ usr/bin/traptoemail #usr/lib/libnetsnmp.a #usr/lib/libnetsnmp.la #usr/lib/libnetsnmp.so -usr/lib/libnetsnmp.so.40 -usr/lib/libnetsnmp.so.40.2.0 +usr/lib/libnetsnmp.so.45 +usr/lib/libnetsnmp.so.45.0.0 #usr/lib/libnetsnmpagent.a #usr/lib/libnetsnmpagent.la #usr/lib/libnetsnmpagent.so -usr/lib/libnetsnmpagent.so.40 -usr/lib/libnetsnmpagent.so.40.2.0 +usr/lib/libnetsnmpagent.so.45 +usr/lib/libnetsnmpagent.so.45.0.0 #usr/lib/libnetsnmphelpers.a #usr/lib/libnetsnmphelpers.la #usr/lib/libnetsnmphelpers.so -usr/lib/libnetsnmphelpers.so.40 -usr/lib/libnetsnmphelpers.so.40.2.0 +usr/lib/libnetsnmphelpers.so.45 +usr/lib/libnetsnmphelpers.so.45.0.0 #usr/lib/libnetsnmpmibs.a #usr/lib/libnetsnmpmibs.la #usr/lib/libnetsnmpmibs.so -usr/lib/libnetsnmpmibs.so.40 -usr/lib/libnetsnmpmibs.so.40.2.0 +usr/lib/libnetsnmpmibs.so.45 +usr/lib/libnetsnmpmibs.so.45.0.0 #usr/lib/libnetsnmptrapd.a #usr/lib/libnetsnmptrapd.la #usr/lib/libnetsnmptrapd.so -usr/lib/libnetsnmptrapd.so.40 -usr/lib/libnetsnmptrapd.so.40.2.0 +usr/lib/libnetsnmptrapd.so.45 +usr/lib/libnetsnmptrapd.so.45.0.0 #usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/Bundle usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/Bundle/MakefileSubs.pm #usr/lib/perl5/site_perl/5.36.0/xxxMACHINExxx-linux-thread-multi/NetSNMP diff --git a/config/rootfiles/packages/transmission b/config/rootfiles/packages/transmission index a248aea20f..7ed9094ee0 100644 --- a/config/rootfiles/packages/transmission +++ b/config/rootfiles/packages/transmission @@ -10,9 +10,9 @@ usr/lib/systemd/system/transmission-daemon.service usr/share/transmission #usr/share/transmission/public_html #usr/share/transmission/public_html/images +#usr/share/transmission/public_html/images/apple-touch-icon.png #usr/share/transmission/public_html/images/favicon.ico -#usr/share/transmission/public_html/images/favicon.png -#usr/share/transmission/public_html/images/webclip-icon.png +#usr/share/transmission/public_html/images/favicon.svg #usr/share/transmission/public_html/index.html #usr/share/transmission/public_html/transmission-app.css #usr/share/transmission/public_html/transmission-app.css.LEGAL.txt diff --git a/lfs/elinks b/lfs/elinks index 9c7912d15f..298a011b91 100644 --- a/lfs/elinks +++ b/lfs/elinks @@ -26,7 +26,7 @@ include Config SUMMARY = An advanced and well-established feature-rich text mode web browser -VER = 0.19.0 +VER = 0.19.1 THISAPP = elinks-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -42,7 +42,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 98dc66268239f70539df1c8a4de3221d0be175d1f2dc7ed44ced24dc1265b7b43db929c1d2ac530b268d1509a4e94a2f08725b442e508c1f827b54f54a72cb99 +$(DL_FILE)_BLAKE2 = a61494a8641c5021220cf7cd17ba117a50c146ced3427e9c6e1120e4764e596ded191f224b79560399c63a03e3a3b836c62ad2c1ad54971ef0b553ed13a23eb5 install : $(TARGET) diff --git a/lfs/expat b/lfs/expat index 2ba04ca09f..480d98b658 100644 --- a/lfs/expat +++ b/lfs/expat @@ -24,7 +24,7 @@ include Config -VER = 2.8.1 +VER = 2.8.2 THISAPP = expat-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 529551f960a1e611be6a0e9ff579e136ccad676d7e99ef8183bbee83969bf4cd37177444759ccbccc48c1bd49d2b0c3bd8f1f91862f272b54a23ad1b932d2f9d +$(DL_FILE)_BLAKE2 = f037cb75f86652fbddd3474f2b7a1293e9b77b540475fa34432a8304ddc58b3eafbab5150a5b591fc4a889d895507b0d379032cdd0c474445ac0aa9e518bef18 install : $(TARGET) diff --git a/lfs/fetchmail b/lfs/fetchmail index d88907db01..e3d4e1dd06 100644 --- a/lfs/fetchmail +++ b/lfs/fetchmail @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2025 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = Full-Featured POP and IMAP Mail Retrieval Daemon -VER = 6.6.0 +VER = 6.6.5 THISAPP = fetchmail-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = fetchmail -PAK_VER = 24 +PAK_VER = 25 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = bf308bfd1769b7092585d3af32aaef91206b315d87bd81794c9f04b65980e3cadd6a6c7ff1f5fd2c7ada0620dccecb14c3022224e17c5d075ea21e391408bdb8 +$(DL_FILE)_BLAKE2 = cceb7a0673f6aea76fe5619c0b6a4cd25566adc31b8d9a8e574b3abf8584107b882f71a63d5690ce76822044cc8a2dd431e44813002740ebcbd3cc55b4e9105f install : $(TARGET) diff --git a/lfs/file b/lfs/file index d347b37ba8..333532a1dd 100644 --- a/lfs/file +++ b/lfs/file @@ -24,7 +24,7 @@ include Config -VER = 5.47 +VER = 5.48 THISAPP = file-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 52b91ee7868a9b75431e00fca7f7db1362b3d39eb065f52434ea73d9ccd7497f3371f7e0a455644c56df3e6acee247208edc47bf8004fa922dba32786cc3e10c +$(DL_FILE)_BLAKE2 = d8ca86ec79db28c59d7c5da9282fb5fa03a0775147856cb4d35528f12d2eb4293aca3336cb0e5108ce56c2f6a255e5b36957ba826b185575531508176f2af06a install : $(TARGET) diff --git a/lfs/lsof b/lfs/lsof index 9bae577882..5867c3ecb7 100644 --- a/lfs/lsof +++ b/lfs/lsof @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2025 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 4.99.5 +VER = 4.99.7 THISAPP = lsof-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 998ce85c7a0e742e6f7696d00ee3b6bb8aa6b6e5c30d5c76ac1fc74ea7d8062d73da4de54f433147b74ef4a6d6ac168f70ee68773c82269e07ec3f90bd9b8a8c +$(DL_FILE)_BLAKE2 = 73279d59bf7f86cb287dc3e9209903a58d9aa8ff409b0907b51658262baaad68cede04a863706ca28e1f170e80e9184e7dab0f578430086e023d467ee4ed68a4 install : $(TARGET) diff --git a/lfs/ltrace b/lfs/ltrace index f3f07c0b1a..a49a1c4552 100644 --- a/lfs/ltrace +++ b/lfs/ltrace @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,16 +26,15 @@ include Config SUMMARY = Library and system call tracer for programs -VER = 0.7.3 -SUP_ARCHES = x86_64 +VER = 0.8.1 THISAPP = ltrace-$(VER) -DL_FILE = ltrace_$(VER).orig.tar.bz2 +DL_FILE = ltrace-$(VER).tar.bz2 DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = ltrace -PAK_VER = 3 +PAK_VER = 4 DEPS = @@ -49,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 30d1dbb178a41043e4bbbac17a23676db202b64327c9bb4393ae7ace9f5e1a1e2a5ded56cabc7faf2ea55b22ed17126a94c121147aeefb40250710b7307a50d3 +$(DL_FILE)_BLAKE2 = 4fb938f3511668f836f7f9cd3d3ab88b9e46a749bce9f506609c1ebfced552c71f868272766be7d902c0151eba55061d6aa9f5c88b0f40cf040cc6f4a43d9ce6 install : $(TARGET) @@ -82,8 +81,11 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && ./configure --prefix=/usr --sysconfdir=/etc \ - --disable-werror + cd $(DIR_APP) && ./autogen.sh + cd $(DIR_APP) && ./configure \ + --prefix=/usr + --sysconfdir=/etc \ + --disable-werror cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install @rm -rf $(DIR_APP) diff --git a/lfs/netsnmpd b/lfs/netsnmpd index 5605d6307c..a27440cff5 100644 --- a/lfs/netsnmpd +++ b/lfs/netsnmpd @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -26,7 +26,7 @@ include Config SUMMARY = SNMP Daemon -VER = 5.9.3 +VER = 5.9.5.2 THISAPP = net-snmp-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = netsnmpd -PAK_VER = 15 +PAK_VER = 16 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b8e3de60e178ec16ad2848ad77f3bd4cbd35eaa9be103c0fa5d17514c29df4e69015ac53b54c9e565e3032b0c0bb47c19729e65310a6acefae901e101ea49451 +$(DL_FILE)_BLAKE2 = 417b337ac32d19db55494b97742fab6f28fc64d488896efd943d6f65ca563b0385d6160923d064e3bf04e3197790c7834d7b644973a426dfa3cb7e81f6465c4c install : $(TARGET) @@ -84,22 +84,21 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) $(UPDATE_AUTOMAKE) cd $(DIR_APP) && ./configure \ - --prefix=/usr \ - --with-default-snmp-version="2" \ - --with-sys-contact="root@" \ - --with-sys-location="localhost" \ - --with-logfile="/var/log/snmpd.log" \ - --with-persistent-directory="/var/net-snmp" \ - --with-mib-modules="host agentx smux \ - ucd-snmp/diskio tcp-mib udp-mib mibII/mta_sendmail \ - ip-mib/ipv4InterfaceTable ip-mib/ipv6InterfaceTable \ - ip-mib/ipAddressPrefixTable/ipAddressPrefixTable \ - ip-mib/ipDefaultRouterTable/ipDefaultRouterTable \ - ip-mib/ipv6ScopeZoneIndexTable ip-mib/ipIfStatsTable \ - sctp-mib rmon-mib etherlike-mib ucd-snmp/lmsensorsMib" - --libdir=/usr/lib \ - --sysconfdir="/etc" - + --prefix=/usr \ + --with-default-snmp-version="2" \ + --with-sys-contact="root@" \ + --with-sys-location="localhost" \ + --with-logfile="/var/log/snmpd.log" \ + --with-persistent-directory="/var/net-snmp" \ + --with-mib-modules="host agentx smux \ + ucd-snmp/diskio tcp-mib udp-mib mibII/mta_sendmail \ + ip-mib/ipv4InterfaceTable ip-mib/ipv6InterfaceTable \ + ip-mib/ipAddressPrefixTable/ipAddressPrefixTable \ + ip-mib/ipDefaultRouterTable/ipDefaultRouterTable \ + ip-mib/ipv6ScopeZoneIndexTable ip-mib/ipIfStatsTable \ + sctp-mib rmon-mib etherlike-mib ucd-snmp/lmsensorsMib" + --libdir=/usr/lib \ + --sysconfdir="/etc" cd $(DIR_APP) && make #$(MAKETUNING) cd $(DIR_APP) && make install install -v -m 644 $(DIR_SRC)/config/netsnmpd/snmpd.conf /etc/snmpd.conf @@ -109,8 +108,5 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) # install initscripts $(call INSTALL_INITSCRIPTS,$(SERVICES)) - ln -sf ../init.d/netsnmpd /etc/rc.d/rc3.d/S65netsnmpd - ln -sf ../init.d/netsnmpd /etc/rc.d/rc0.d/K02netsnmpd - ln -sf ../init.d/netsnmpd /etc/rc.d/rc6.d/K02netsnmpd @rm -rf $(DIR_APP) @$(POSTBUILD) diff --git a/lfs/postfix b/lfs/postfix index 46de2c8e95..7715881258 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -26,7 +26,7 @@ include Config SUMMARY = A fast, secure, and flexible mailer -VER = 3.11.3 +VER = 3.11.4 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 53 +PAK_VER = 54 DEPS = @@ -72,7 +72,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = f88dd4e4b607ef729892ba3843c08b9d54864a2cc6605d9578eee85291be9918bf7f0d69cb2cff0b7e756de540c63c6ede1244557eb0027ca978484460085f6b +$(DL_FILE)_BLAKE2 = 7c41d43987949076d45507372cce748b6bd1a8a1407fa032ecaf91ab1ad086068e7920d43df0c8b8c47f415c8ccbeaeb7862470aa322f51176e197fbe941ca4f install : $(TARGET) diff --git a/lfs/strace b/lfs/strace index 5144bb6c94..e3ba4cf765 100644 --- a/lfs/strace +++ b/lfs/strace @@ -26,7 +26,7 @@ include Config SUMMARY = A utility to trace the system calls of a program -VER = 6.18 +VER = 7.1 SUP_ARCHES = x86_64 aarch64 THISAPP = strace-$(VER) @@ -35,7 +35,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = strace -PAK_VER = 15 +PAK_VER = 16 DEPS = @@ -49,7 +49,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = ba9798496102c2c1d2310d9dea746d9517d58c2e9ad7e630beee294806d24a617c8a8950d0e118d6190b61ab17f5d8020d02b0a56c4740df62104dd2906206c0 +$(DL_FILE)_BLAKE2 = 755ebf184008896bbb8537918b54ca00a7206a6e553a70b19d46554cada314315d3dc92ebef53c661634bd270a7b51e2131d524134a7a76cd93e40d0ec294380 install : $(TARGET) diff --git a/lfs/stunnel b/lfs/stunnel index 977b1ae71f..c69af28737 100644 --- a/lfs/stunnel +++ b/lfs/stunnel @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 5.72 +VER = 5.78 SUMMARY = Universal TLS Tunnel THISAPP = stunnel-$(VER) @@ -33,7 +33,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = stunnel -PAK_VER = 13 +PAK_VER = 14 DEPS = @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 2b4c6400cf25522592e237f35700f81c0092a827526155cb02f503a9b3af50242aea63c3b5389a62d002d6a2ec9e852f80cc9c48318f23d3f9d12ff42cbe5978 +$(DL_FILE)_BLAKE2 = 44538336d9f7075ebead1ae85c8c8609b54041565d076370b988b1c157a0a44533c03e1602cf3b055fab6a5ef0ce223a20a8fc0d7d1a59942bfde098db422442 install : $(TARGET) diff --git a/lfs/sysstat b/lfs/sysstat index 7887123753..ea7f0d6655 100644 --- a/lfs/sysstat +++ b/lfs/sysstat @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 12.7.6 +VER = 12.7.9 THISAPP = sysstat-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 5cb015dfad2b26a922862416d779ac26df18df0b4689ae1ad1b9f3dc3922dd577741bf019ebc979154d7bc708dbb7e9d21ce4c2e2c2a4896badf3847c06e82a7 +$(DL_FILE)_BLAKE2 = 8bbe38b98d85c8193578b8f5f5bb5d6296564e16d5af793d4bae4ed2b5de44b041e2651d247b612910ac8d033574a2e7f651b0f4dfacbcae1dc2146ecebd6094 install : $(TARGET) @@ -70,7 +70,8 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && ./configure --prefix=/usr + cd $(DIR_APP) && ./configure \ + --prefix=/usr cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install @rm -rf $(DIR_APP) diff --git a/lfs/tmux b/lfs/tmux index 952b8805ad..38c8725686 100644 --- a/lfs/tmux +++ b/lfs/tmux @@ -26,7 +26,7 @@ include Config SUMMARY = Terminal multiplexer -VER = 3.7 +VER = 3.7a THISAPP = tmux-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tmux -PAK_VER = 16 +PAK_VER = 17 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 741bca6529dee6355af3d94c931d52b2ff22b5e9f126b4a44c9bbc96649b3324ccb0976bf2a84d8ecacc45a7d2cb3cad5ac6da369f38c89f1b3d9cce8c803b78 +$(DL_FILE)_BLAKE2 = 04632a169a33b9c60a84c05c3a6dd66b61d911059c563cb0b6bb967b32ec29e6082e127caf8e110a930dcf08a37e7498278498903806140ff3d87575ced8437a install : $(TARGET) diff --git a/lfs/transmission b/lfs/transmission index 10e2bf2716..5584a97f35 100644 --- a/lfs/transmission +++ b/lfs/transmission @@ -26,7 +26,7 @@ include Config SUMMARY = A BitTorrent client with multiple UIs -VER = 4.1.1 +VER = 4.1.3 THISAPP = transmission-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = transmission -PAK_VER = 28 +PAK_VER = 29 DEPS = @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = ad0062b1838662a023dec0872154193e1e548f6e88d4939b3ce4c31714b91692674aa6918d10b451e4a72dbb869473292b3120de70d2d8d594697e5e9812b477 +$(DL_FILE)_BLAKE2 = 289afb0057654e53833df748e10c6e9bb8bdd95320d5dd1af40734e130895c444df9f4bae923b976a599d76ce7e1dc6685b7974cf9fdfd3b2a585a8a94935efe install : $(TARGET) diff --git a/src/paks/netsnmpd/install.sh b/src/paks/netsnmpd/install.sh index 31c5fecae2..5baa2ffeeb 100644 --- a/src/paks/netsnmpd/install.sh +++ b/src/paks/netsnmpd/install.sh @@ -17,11 +17,17 @@ # along with IPFire; if not, write to the Free Software # # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # # # -# Copyright (C) 2007 IPFire-Team . # +# Copyright (C) 2007-2026 IPFire-Team . # # # ############################################################################ # . /opt/pakfire/lib/functions.sh extract_files restore_backup ${NAME} + +# Create symlinks for runlevel interaction. +ln -sf ../init.d/netsnmpd /etc/rc.d/rc3.d/S65netsnmpd +ln -sf ../init.d/netsnmpd /etc/rc.d/rc0.d/K02netsnmpd +ln -sf ../init.d/netsnmpd /etc/rc.d/rc6.d/K02zabbix_agentd + start_service --background ${NAME} diff --git a/src/paks/netsnmpd/uninstall.sh b/src/paks/netsnmpd/uninstall.sh index a7b8a5370f..ffd74217b9 100644 --- a/src/paks/netsnmpd/uninstall.sh +++ b/src/paks/netsnmpd/uninstall.sh @@ -17,7 +17,7 @@ # along with IPFire; if not, write to the Free Software # # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # # # -# Copyright (C) 2007 IPFire-Team . # +# Copyright (C) 2007-2026 IPFire-Team . # # # ############################################################################ # @@ -25,3 +25,6 @@ stop_service ${NAME} make_backup ${NAME} remove_files + +# Remove init-scripts and symlinks +rm -rfv /etc/rc.d/rc*.d/*netsnmpd hooks/post-receive -- IPFire 2.x development tree