* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 9c148496a169b1650137c0c3a5c500d625d305a9
@ 2026-07-09 15:23 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2026-07-09 15:23 UTC (permalink / raw)
To: ipfire-scm
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 74956 bytes --]
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via 9c148496a169b1650137c0c3a5c500d625d305a9 (commit)
via 7f9f9d9420aa3c4135b364e4482faf90b1551e83 (commit)
via 1e3ae365bf241abf4301b783d70a32a0194b780c (commit)
via 78d375bee34aec53180049c6025334dbda3436bd (commit)
via ea2f610c5073214c2f5f423208dc88b38e3d851b (commit)
via 09dabf0d913de3d3a3a99657239b7a4449d17401 (commit)
via c829b430f270722ebfe2aa0cbffcfa4f6d31bd7a (commit)
via 3d71d781b9cf859585f9c6bb2d331a43577dd02d (commit)
via b35562b1b6241931a09a1974f9a235f0e7d124c1 (commit)
via 212976e4302244744f865f47580a82f10c0691a3 (commit)
via e422eb728840b8a752c4659ff8bd0150efcb6ea4 (commit)
via 1137701934231cd599360eb041f3f726c1a3e0a9 (commit)
via bd605c87793ffde1ca1ad16e39041bd03fdeb7f3 (commit)
via 66449084ec6d568e9b6b02334af7fab5493ddaef (commit)
via a580c63812c8a2795a700a06598e49b1b78eb40e (commit)
from fe7be8636b2b964edb7cd4e0edad40a61577f294 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 9c148496a169b1650137c0c3a5c500d625d305a9
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu Jul 9 15:22:37 2026 +0000
core204: Restart sshd
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 7f9f9d9420aa3c4135b364e4482faf90b1551e83
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Thu Jul 9 17:08:45 2026 +0200
core204: Ship openssh
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 1e3ae365bf241abf4301b783d70a32a0194b780c
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Thu Jul 9 17:08:49 2026 +0200
openssh: Update to version 10.4p1
- Update from version 10.3p1 to 10.4pi
- Update of rootfile
- Changelog
10.4p1
Potentially-incompatible changes
* sshd(8): configuration dump mode ("sshd -G") now writes directives
in mixed case (e.g. "PubkeyAuthentication") whereas previously it
emitted only lower-case names.
* sshd(8): on Linux systems with the seccomp sandbox enabled,
failures to enable SECCOMP or NO_NEW_PRIVS are now fatal.
Previously sshd(8) would log the error but continue operation,
to support systems that lacked these features. Now systems that
lack these should instead disable the sandbox at configure time.
* ssh(1), sshd(8): make the transport protocol stricter by
disconnecting if the peer sends non-KEX messages during a post-
authentication key re-exchange. Previously a malicious peer could
continue sending non-key exchange messages without penalty. These
would be buffered, causing memory to be wasted up until the
connection terminated or the server/client hit a memory limit.
Implementations that do not restrict messages sent during key
exchange as per RFC4253 section 7.1 may be disconnected.
Reported by Marko Jevtic.
Security
* sftp(1): when downloading files on the command-line using
"sftp host:/path .", a malicious server could cause the file to
be downloaded to an unexpected location. This issue was identified
by the Swival Security Scanner.
* scp(1): when copying files between two remote destinations, do
not allow a malicious server to write files to the parent
directory of the intended target directory. This issue was
identified by the Swival Security Scanner.
* sshd(8): when using the "internal-sftp" SFTP server implementation
(this is not the default), long command lines were previously
truncated silently after the 9th argument. If a security-relevant
option was in the 10th or later position, it would be discarded.
Reported by Steve Caffrey.
* sshd(8): add a documentation note to mention that the
GSSAPIStrictAcceptorCheck option is ineffective when the server
is joined to a Windows Active Directory. Reported by Yarin Aharoni
of Safebreach.
* sshd(8): DisableForwarding=yes didn't override PermitTunnel=yes
as it was documented to do. Note that PermitTunnel is not enabled
by default. Reported independently by Huzaifa Sidhpurwala of
Redhat and Marko Jevtic.
* sshd(8): avoid a potential pre-authentication denial of service
when GSSAPIAuthentication was enabled (this feature is off by
default). This was not mitigated by MaxAuthTries, but would be
penalised by PerSourcePenalties. This was reported by Manfred
Kaiser of the milCERT AT (Austrian Ministry of Defence).
* sshd(8): fix a number of cases where the minimum authentication
delay was not being enforced. Reported by the Orange Cyberdefense
Vulnerability Team.
* ssh(1): fix a possible client-side use-after-free if the server
changes its host key during a key reexchange. This was reported by
Zhenpeng (Leo) Lin of Depthfirst.
New features
* All: add experimental support for a composite post-quantum
signature scheme that combines ML-DSA 44 and Ed25519 as specified
in draft-miller-sshm-mldsa44-ed25519-composite-sigs.
This scheme is not enabled by default. To use it, you'll need
to add it to HostKeyAlgorithms, PubkeyAcceptedAlgorithms, etc.
Keys may be generated using "ssh-keygen -t mldsa44-ed25519".
* ssh(1), sshd(8): replace the wildcard pattern matcher with an
implementation based on an NFA. This avoids exponential worst-case
behaviour for the old implementation.
Bugfixes
* ssh-agent(1): fix incorrect reply to "query" SSH_AGENTC_EXTENSION
requests. bz3967
* sshd(8): avoid sending observably different messages for valid vs
invalid users in GSSAPIAuthentication (disabled by default).
* ssh(1), sshd(8): fix several bugs that incorrectly
classified bulk traffic as interactive. bz3972, bz3958
* ssh-keygen(1), ssh-add(1): skip unsupported key types when
downloading resident keys from a FIDO token. Previously, downloads
would abort when one was encountered. GHPR657
* ssh(1): fix a potential use-after-free on an error path if
cipher_init() fails.
* sshd(8): perform stricter encoding and validation of transport
state passed between sshd privilege separation subprocesses. This
somewhat further hardens the server against attacks on sshd-auth
or sshd-session subprocesses.
* ssh-agent(1): avoid possible runtime denial of service by
enforcing some limits on the length of usernames in key use
constraints.
* sftp(1): fix two separate one-byte out-of-bounds reads, in
SSH2_FXP_REALPATH and batch command processing.
* sftp-server(8): disallow use of the copy-data extension to read
and write to the same inode simultaneously.
* ssh(1), sshd(8): avoid strlen(NULL) crash if an X11 channel was
created before the x11-req SSH_MSG_CHANNEL_REQUEST was sent.
GHPR679
* sftp(1), scp(1): avoid a situation where sftp_download() could get
stuck in a loop if a broken server repeatedly returned zero length
while reading a file.
* ssh(1): avoid leaking DNS0x20 case-randomised names into names
canonicalised using CanonicalizePermittedCNAMEs. bz3966
* sftp-server(8): avoid truncation of pathnames passed to lstat()
during SSH_FXP_REALPATH handling on systems where PATH_MAX is not
the actual max. GHPR688
* ssh(1), sshd(8): correct arming of poll(2) event masks for some
socket-type channels. GHPR660
* sshd(8): major refactor of sshd_config parsing and management
code, to allow for more exact serialisation/deserialisation across
privilege separation boundaries.
* ssh-add(1): open connection to the agent only after getopt()
processing has completed, to give options like "-v" a chance to
display debug information about this operation.
* crypto code: fix bounds checking when signing messages of length
greater than will fit in a size_t. In OpenSSH, message sizes are
bounded by SSHBUF_SIZE_MAX so this was unreachable.
* crypto code: add signature malleability and pubkey validity checks
to ed25519 verification. SSH doesn't depend on these properties
* crypto code: fix ECDSA order check for curves with cofactor != 1.
All supported EC curves have cofactor 1, so this was
unreachable.
* sshd(8): differentiate between execution failures and a subsystem
that was not found when logging why a subsystem failed to start.
GHPR637
* All: use safer idioms for timegm(3) and mktime(3) error detection.
* ssh(1), sshd(8): avoid accepting invalid cipher or MAC lists in
config files or command-line arguments. This could cause runtime
failures later.
* ssh(1): fix NULL deref crash during pubkey auth when using a PEM
style private key with no corresponding .pub key adjacent to it.
* sshd(8): don't print an error message when trying to load a host
private key when PKCS#11 keys are in use, as these don't need the
private half on the filesystem. GHPR664
* All: don't use deprecated ERR_load_crypto_strings(). GHPR650
* ssh(1): properly report errors during configuration default
setting. GHPR649
* ssh(1): use correct directive name (Match instead of Host) in
error message. bz3968
* sftp(1): fix "ls -ln" which was not correctly showing numeric
UID/GIDs but rather user and group names. bz3953
* sshd(8): avoid possible NULL dereference if an allocation fails
during config parsing. bz3948
* All: fix ineffective guards against loading overly large public
keys in several places. bz3969 and bz3970
* sftp(1): ensure file descriptors used by sftp to communicate to
its ssh(1) subprocess don't leak into executed subprocesses (e.g.
via "!"). GHPR693
Portability
* Sync fmt_scaled.c with OpenBSD upstream, picking up an exactness
fix for large exponents (GHPR671)
* sshd(8): remove duplicate sandbox entry for clock_gettime64.
* ssh(1), sshd(8): use correct IPTOS_DSCP_VA value if not provided
by the system headers.
* Sync getrrsetbyname.c with OpenBSD upstream, picking up robustness
fixes.
* Disable replacements in openbsd-compat for strvisx(3) and
stravis(3), as these are unused in OpenSSH
* Avoid fortify warnings on Android bz3954
* Fix a number of memory leaks on error paths in the portability
code. GHPR681
* Revise the README.privsep documentation to reflect sshd's recent
switch to a multi-binary model.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 78d375bee34aec53180049c6025334dbda3436bd
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Thu Jul 9 17:08:50 2026 +0200
tshark: Update to version 4.6.7
- Update from version 4.6.6 to 4.6.7
- Update of rootfile
- 12 wnpa-sec security vulnerability fixes implemented
- Changelog
4.6.7
The following vulnerabilities have been fixed:
wnpa-sec-2026-52 Catapult DCT2000 protocol dissector crash. Issue 21270.
wnpa-sec-2026-53 pcapng file parser crash. Issue 21285.
wnpa-sec-2026-54 FMP/NOTIFY protocol dissector large loop. Issue 21347.
wnpa-sec-2026-55 SSH protocol dissector crash. Issue 21378.
wnpa-sec-2026-56 TLS ECH decryption crash. Issue 21390.
wnpa-sec-2026-57 IEEE 802.11 protocol dissector crash. Issue 21391.
wnpa-sec-2026-58 Z39.50 protocol dissector crash. Issue 21397.
wnpa-sec-2026-59 UMTS FP protocol dissector crash. Issue 21398.
wnpa-sec-2026-60 BLF file parser information disclosure. Issue 21361.
wnpa-sec-2026-61 Multiple protocol dissector infinite loops. Issue 21275,
Issue 21277, Issue 21330, Issue 21383.
wnpa-sec-2026-62 DBS Etherwatch file parser crash. Issue 21352.
wnpa-sec-2026-63 Ciscodump extcap crash. Issue 21375.
The following bugs have been fixed:
Wireshark appears in German when the system language is Dutch. Issue 20347.
Qt: Capture filter combo box does not enforce minimum size or expanding size
policy. Issue 21080.
BACapp: Error parsing you-are request. Issue 21260.
Use-After-Free in Ethernet POWERLINK (EPL) Dissector during profile loading error
path. Issue 21267.
Sponsor slides are not properly shown. Issue 21268.
Buffer overlow/segfault in Catapult DCT2000 dissector via not check no_ddi_entries
in header. Issue 21270.
Fuzz job issue: fuzz-2026-05-24-14517548985.pcap. Issue 21272.
Fuzz job UTF-8 encoding issue: fuzz-2026-06-07-14732586286.pcap. Issue 21331.
Memory leak in alp-sample1.pcap. Issue 21343.
Memory leak in nspi.pcap. Issue 21344.
Heap-Buffer-Overflow in Wireshark Logcat Parser. Issue 21346.
IPv6 Ping from Debian (among others) is dissected as "HiPerConTracer" Issue 21349.
HEVC (H.265) dissector: bit_offset not advanced after sub_layer_hrd_parameters()
causes false Malformed Packet. Issue 21362.
dfilter_compile_full: heap-buffer-overflow READ in ws_strptime on a time literal.
Issue 21376.
Wireshark crashes with a HEAP_CORRUPTION error when using the last saved
recent_common file. Issue 21379.
Fuzz job issue: fuzz-2026-06-30-15106674620.pcap. Issue 21381.
New and Updated Features
The Windows installers are now built with Visual Studio 2026.
Updated Protocol Support
ALC, BACapp, C2P, Catapult DCT2000, COTP, CSN.1, DCERPC, DCERPC MAPI, DCERPC NSPI,
DNS, DVB-S2-TABLE, eDonkey, EPL, FC ELS, FMP/NOTIFY, H.265, HiPerConTracer,
IEEE 802.11, LLS, MEGACO, MIH, MPEG DSM-CC, MS-WSP, RELOAD, SGP.32, SSH,
STANAG 4607, UMTS FP, WOWW, and Z39.50
New and Updated Capture File Support
Android Logcat, BLF, DBS Etherwatch, Netlog, and pcapng
Plugin Development Changes
On UN*X systems (excluding macOS when running from an app bundle, as with the
official installer) extcap binaries are now searched for under the libexec
directory by default, e.g., /usr/libexec/wireshark/extcap instead of
/usr/lib64/wireshark/extcap or similar. This is the customary place for helper
binaries, which as opposed to libraries do not need multiarch support. The
location can be overridden via the environment variable WIRESHARK_EXTCAP_DIR.
The extcap binaries shipped with Wireshark are installed in the new location,
but third party extcaps may need packaging changes. This change was effective
in version 4.6.0, but was not explicitly noted in the release notes previously.
Note that some distributions do not use a libexec directory, such as Alpine
Linux, which does not have multilib support. On such systems extcap binaries
should be in the same location as before.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit ea2f610c5073214c2f5f423208dc88b38e3d851b
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Thu Jul 9 17:08:46 2026 +0200
core204: Ship tzdata
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 09dabf0d913de3d3a3a99657239b7a4449d17401
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Thu Jul 9 17:08:51 2026 +0200
tzdata: Update to version 2026c
- Update from version 2026b to 2026c
- No change to rootfile
- Changelog
2026c
Briefly:
Alberta moved to permanent -06 on 2026-06-18.
Morocco moves to permanent +00 on 2026-09-20.
More integer overflow bugs have been fixed in zic.
Changes to future timestamps
Alberta’s 2026-03-08 spring forward was its last foreseeable clock
change, as it moved to permanent -06 thereafter. (Thanks to Roozbeh
Pournader and others.) Model this with its traditional abbreviation
CST. Although the change to permanent -06 legally took place on
2026-06-18, temporarily model the change to occur on 2026-11-01 at
02:00 instead, for the same reason we introduced a similarly
temporary hack for British Columbia in 2026b.
Although another TZDB release will likely be needed soon because
Northwest Territories will likely follow Alberta, the legal
formalities have not yet taken place.
Morocco plans to move back to permanent UTC, without daylight
saving time transitions, on 2026-09-20 at 02:00. This also
affects Western Sahara.
Changes to code
zic no longer overflows integers when processing outlandish input
like ‘Zone Ouch 0 - LMT 9223372036854775807’, ‘Zone Ouch 0
2562047788015215 LMT’, ‘Zone Ouch -2562047788015215:30:08 - LMT’,
and ‘Zone Ouch -2562047788015215:30:08 - %%z’. This avoids
undefined behavior in C. (Problems reported by Naveed Khan.)
On platforms that have EFTYPE, tzalloc now fails with errno set to
EFTYPE, not EINVAL, if it detects that the TZif file has an
invalid format or is not a regular file. Formerly it did this
only on NetBSD, and only when the file was not a regular file.
Unprivileged programs no longer require TZif files to be regular
files or reject relative names containing ".." components. This
reverts to the more-permissive 2025b behavior, as the stricter
behavior did not catch on in FreeBSD.
zic now reports any failure to remove a temporary file when
cleaning up after a previous failure. (Problem reported by Tom
Lane.)
Changes to commentary
Northwest Territories is expected to move to permanent -06 prior to
2026-11-01 02:00, when clocks would otherwise fall back. (Thanks to
Tim Parenti and James Bellaire.) Model this with its traditional
abbreviation CST. Unfortunately the change is not yet official, so
it is currently present only as comments that can be uncommented as
needed.
Changes to build procedure
The undocumented ‘typecheck’ Makefile check rule has been removed.
It stopped working in 2025a and evidently nobody noticed.
The rule was superseded by ‘check_time_t_alternatives’ in 2013d.
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit c829b430f270722ebfe2aa0cbffcfa4f6d31bd7a
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Thu Jul 9 17:08:48 2026 +0200
hwdata: Update to version 0.409
- Update from version 0.408 to 0.409
- No change to rootfile
- Changelog
0.409
Update usb and vendor ids
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 3d71d781b9cf859585f9c6bb2d331a43577dd02d
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Thu Jul 9 17:08:44 2026 +0200
core204: Ship ethtool
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit b35562b1b6241931a09a1974f9a235f0e7d124c1
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Thu Jul 9 17:08:47 2026 +0200
ethtool: Update to version 7.1
- Update from version 7.0 to 7.1
- No change to the rootfile
- Changelog
7.1
* Feature: track TX pause storm events (-I -a)
* Feature: update doc for ETHTOOL_PFC_PREVENTION_TOUT tunable
* Feature: RX CQE coalescing params (-c, -C)
* Feature: allow hex dump of all pages (-m)
* Feature: qsfp: support newer SFF-8636 compliance codes (-m)
* Feature: sfpid: support newer SFF-8636 compliance codes (-m)
* Fix: document --disable-netlink in help output (-h)
* Fix: add missing newlines in FEC output (--show-fec)
* Fix: sfpid: fix 10G Base-ER module detection (-m)
* Misc: clarify 10000baseCR link mode in man page
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 212976e4302244744f865f47580a82f10c0691a3
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Thu Jul 9 15:20:41 2026 +0000
core203: Move it to the correct place
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit e422eb728840b8a752c4659ff8bd0150efcb6ea4
Author: Adolf Belka <adolf.belka@ipfire.org>
Date: Thu Jul 9 17:08:43 2026 +0200
c-ares: Update to version 1.34.8
- Update from version 1.34.5 to 1.34.8
- Update of rootfile
- 1 CVE fix in 1.34.7 and 1 in 1.34.6
- Changelog
1.34.8
Bugfixes:
* Revert "Mark parameters in callbacks as const" which shipped in 1.34.7.
Changing the parameter types of the `ares_callback`, `ares_host_callback`,
and `ares_nameinfo_callback` function pointer typedefs was an unintended
API break: existing applications with the historical non-const callback
signatures no longer compiled, particularly in C++ where function pointer
types must match exactly. The read-only nature of the callback parameters
is now documented instead.
[PR #1244](https://github.com/c-ares/c-ares/pull/1244)
1.34.7
Security:
* CVE-2026-33630. Use-after-free / double-free in c-ares' query-completion
handling, remotely triggerable via ares_getaddrinfo() over TCP. Please see
https://github.com/c-ares/c-ares/security/advisories/GHSA-6wfj-rwm7-3542
* CPU-exhaustion denial of service via unbounded DNS name compression pointer
chains. Please see
https://github.com/c-ares/c-ares/security/advisories/GHSA-pjmc-gx33-gc76
* Memory-amplification denial of service via unvalidated DNS header record
counts. Please see
https://github.com/c-ares/c-ares/security/advisories/GHSA-jv8r-gqr9-68wj
Changes:
* `ares_getaddrinfo()`: handle a NULL node per POSIX and implement
`ARES_AI_PASSIVE`. [PR #1186](https://github.com/c-ares/c-ares/pull/1186)
* Mark parameters in callbacks as const.
[PR #1060](https://github.com/c-ares/c-ares/pull/1060)
* Correct `ARES_CLASS_HESOID` misspelling to `ARES_CLASS_HESIOD`.
[PR #1092](https://github.com/c-ares/c-ares/pull/1092)
Bugfixes:
* Fix sticky server recovery when all servers have failures. [PR #1192]
(https://github.com/c-ares/c-ares/pull/1192)
* Fix UDP socket exhaustion regression: retire connections per-connection,
not via server failure count. [PR #1197]
(https://github.com/c-ares/c-ares/pull/1197)
* Guard DNS record binary length overflow. [PR #1168]
(https://github.com/c-ares/c-ares/pull/1168)
* Prevent integer overflow in allocation size calculations. [PR #1147]
(https://github.com/c-ares/c-ares/pull/1147)
* Prevent overflow in ares_array allocation size calculations. [PR #1117]
(https://github.com/c-ares/c-ares/pull/1117)
* Prevent integer overflow in buffer size calculation. [PR #1116]
(https://github.com/c-ares/c-ares/pull/1116)
* Add overflow checks to ares_buf_ensure_space(). [PR #1094]
(https://github.com/c-ares/c-ares/pull/1094)
* Skip name compression offsets beyond the 14-bit pointer limit. [PR #1159]
(https://github.com/c-ares/c-ares/pull/1159)
* ares_dns_parse: reject name compression in RDATA where not permitted
(RFC 3597). [PR #1190](https://github.com/c-ares/c-ares/pull/1190)
* ares_dns_parse: reject responses with more than one OPT record (RFC 6891).
[PR #1189](https://github.com/c-ares/c-ares/pull/1189)
* Discard oversized UDP datagrams instead of truncating the length frame.
[PR #1161](https://github.com/c-ares/c-ares/pull/1161)
* Route numeric config parsing through range-checked ares_str_parse_uint.
[PR #1158](https://github.com/c-ares/c-ares/pull/1158)
* Replace atoi-based port parsing with validated helper. [PR #1097]
(https://github.com/c-ares/c-ares/pull/1097)
* Defer TCP connection error handling until DNS responses are parsed.
[PR #1138](https://github.com/c-ares/c-ares/pull/1138)
* Prevent undefined-behavior left shift in ares_calc_query_timeout().
[PR #1151](https://github.com/c-ares/c-ares/pull/1151)
* Use unsigned type for ares_round_up_pow2_u64 to avoid undefined behavior.
[PR #1107](https://github.com/c-ares/c-ares/pull/1107)
* Fix undefined behavior in ares_buf_replace() pointer arithmetic. [PR #1099]
(https://github.com/c-ares/c-ares/pull/1099)
* ares_array: reset offset when array becomes empty. [PR #1165]
(https://github.com/c-ares/c-ares/pull/1165)
* ares_iface_ips: add ARES_IFACE_IP_NONE zero enum value. [PR #1187]
(https://github.com/c-ares/c-ares/pull/1187)
* ares_sysconfig_files: recognize AIX netsvc.conf bind4/local4 tokens.
[PR #1188](https://github.com/c-ares/c-ares/pull/1188)
* Use safe string construction in Windows sysconfig join path. [PR #1143]
(https://github.com/c-ares/c-ares/pull/1143)
* Fix zero-length RAW_RR losing type metadata during parsing. [PR #1129]
(https://github.com/c-ares/c-ares/pull/1129)
* Fix RAW_RR type tostr/fromstr roundtrip mismatch. [PR #1123]
(https://github.com/c-ares/c-ares/pull/1123)
* Fix NULL dereference for ifa netmask. [PR #1120]
(https://github.com/c-ares/c-ares/pull/1120)
* adig: fix negated option prefix parsing. [PR #1135]
(https://github.com/c-ares/c-ares/pull/1135)
* Use UnregisterWaitEx to prevent use-after-free on Win32. [PR #1111]
(https://github.com/c-ares/c-ares/pull/1111)
* Add NULL check after ares_malloc_zero in Windows UTF8 conversion. [PR #1121]
(https://github.com/c-ares/c-ares/pull/1121)
* Fix NULL dereference after ares_malloc_zero in Win32 IOCP event add.
[PR #1132](https://github.com/c-ares/c-ares/pull/1132)
* Fix microsecond overflow in ares_queue_wait_empty timeout. [PR #1122]
(https://github.com/c-ares/c-ares/pull/1122)
* Fix NULL dereference in ares_buf_replace() on NULL buf. [PR #1124]
(https://github.com/c-ares/c-ares/pull/1124)
* Initialize *read_bytes in ares_socket_recvfrom(). [PR #1125]
(https://github.com/c-ares/c-ares/pull/1125)
* Fix memory leak of binbuf in ares_buf_parse_dns_binstr_int. [PR #1126]
(https://github.com/c-ares/c-ares/pull/1126)
* Fix memory leak of qcache entry on key allocation failure. [PR #1127]
(https://github.com/c-ares/c-ares/pull/1127)
* Fix memory leak of buf in ares_dns_multistring_combined() on OOM. [PR #1110]
(https://github.com/c-ares/c-ares/pull/1110)
* Fix memory leaks on error paths in two functions. [PR #1109]
(https://github.com/c-ares/c-ares/pull/1109)
* Fix memory leak of buckets in ares_htable_dict_keys() error path. [PR #1108]
(https://github.com/c-ares/c-ares/pull/1108)
* Fix memory leak of bucket->key in ares_htable_dict_insert error path.
[PR #1105](https://github.com/c-ares/c-ares/pull/1105)
* Fix additional memory leaks.
[PR #1091](https://github.com/c-ares/c-ares/pull/1091)
[PR #1078](https://github.com/c-ares/c-ares/pull/1078)
* Prevent corrupt addrinfo nodes on sockaddr allocation failure. [PR #1112]
(https://github.com/c-ares/c-ares/pull/1112)
* Fix two logic bugs in DNS cookie handling. [PR #1103]
(https://github.com/c-ares/c-ares/pull/1103)
* Fix linked list INSERT_BEFORE corruption and array insertdata_first ordering.
[PR #1101](https://github.com/c-ares/c-ares/pull/1101)
* Fix HASH_IDX macro missing parentheses. [PR #1128]
(https://github.com/c-ares/c-ares/pull/1128)
* Fix malloc(0) in ares_htable_all_buckets on empty table. [PR #1131]
(https://github.com/c-ares/c-ares/pull/1131)
* Fix wrong sizeof in QNX confstr() call truncating domain names. [PR #1130]
(https://github.com/c-ares/c-ares/pull/1130)
* Clear probe pending flag after timeout. [PR #1059]
(https://github.com/c-ares/c-ares/pull/1059)
* Fix incorrect check for empty wide string. [PR #1064]
(https://github.com/c-ares/c-ares/pull/1064)
* Handle strdup failure. [PR #1077]
(https://github.com/c-ares/c-ares/pull/1077)
* doc: reference ares_free_string(), not ares_free(). [PR #1084]
(https://github.com/c-ares/c-ares/pull/1084)
1.34.6
Security:
* CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that
was introduced in v1.32.3. Please see
https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5
Changes:
* Ignore Windows IDN Search Domains until proper IDN support is added.
[PR #1034](https://github.com/c-ares/c-ares/pull/1034)
Bugfixes:
* Event Thread could stall when not notified of new queries on existing
connections that are in a bad state
[PR #1032](https://github.com/c-ares/c-ares/pull/1032)
* fix conversion of invalid service to port number in ares_getaddrinfo()
[PR #1029](https://github.com/c-ares/c-ares/pull/1029)
* fix memory leak in ares_uri
[PR #1012](https://github.com/c-ares/c-ares/pull/1012)
* Ignore ares_event_configchg_init failures
[PR #1009](https://github.com/c-ares/c-ares/pull/1009)
* Use XOR for random seed generation on fallback logic.
[PR #994](https://github.com/c-ares/c-ares/pull/994)
* Fix clang build on windows.
[PR #996](https://github.com/c-ares/c-ares/pull/996)
* Fix IPv6 link-local nameservers in /etc/resolv.conf
[PR #996](https://github.com/c-ares/c-ares/pull/997)
* Fix a few build issues on MidnightBSD.
[PR #983](https://github.com/c-ares/c-ares/pull/983)
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 1137701934231cd599360eb041f3f726c1a3e0a9
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed Jul 8 16:20:02 2026 +0000
cmake: Run bootstrap stage in parallel
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit bd605c87793ffde1ca1ad16e39041bd03fdeb7f3
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed Jul 8 16:18:22 2026 +0000
groff: Build in parallel
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 66449084ec6d568e9b6b02334af7fab5493ddaef
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed Jul 8 15:41:15 2026 +0000
make.sh: CFLAGS: Optimise aarch64 for armv8-a generic
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit a580c63812c8a2795a700a06598e49b1b78eb40e
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed Jul 8 14:12:53 2026 +0000
make.sh: CFLAGS: Optimise riscv64 for RVA22/23 OOO
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/common/openssh | 2 ++
.../rootfiles/{oldcore/158 => core/204}/filelists/ethtool | 0
.../rootfiles/{oldcore/100 => core/204}/filelists/openssh | 0
config/rootfiles/{oldcore/100 => core/204}/filelists/tzdata | 0
config/rootfiles/core/204/update.sh | 1 +
config/rootfiles/oldcore/{204 => 203}/exclude | 0
.../rootfiles/oldcore/{204 => 203}/filelists/aarch64/boost | 0
.../rootfiles/oldcore/{204 => 203}/filelists/aarch64/grub | 0
.../oldcore/{204 => 203}/filelists/aarch64/util-linux | 0
config/rootfiles/oldcore/{204 => 203}/filelists/bind | 0
config/rootfiles/oldcore/{204 => 203}/filelists/btrfs-progs | 0
config/rootfiles/oldcore/{204 => 203}/filelists/collectd | 0
config/rootfiles/oldcore/{204 => 203}/filelists/core-files | 0
config/rootfiles/oldcore/{204 => 203}/filelists/coreutils | 0
config/rootfiles/oldcore/{204 => 203}/filelists/dma | 0
config/rootfiles/oldcore/{204 => 203}/filelists/e2fsprogs | 0
config/rootfiles/oldcore/{204 => 203}/filelists/elfutils | 0
config/rootfiles/oldcore/{204 => 203}/filelists/expat | 0
config/rootfiles/oldcore/{204 => 203}/filelists/fcron | 0
config/rootfiles/oldcore/{204 => 203}/filelists/files | 0
config/rootfiles/oldcore/{204 => 203}/filelists/fontconfig | 0
config/rootfiles/oldcore/{204 => 203}/filelists/gdb | 0
config/rootfiles/oldcore/{204 => 203}/filelists/gnupg | 0
config/rootfiles/oldcore/{204 => 203}/filelists/gnutls | 0
config/rootfiles/oldcore/{204 => 203}/filelists/grub-btrfs | 0
config/rootfiles/oldcore/{204 => 203}/filelists/iana-etc | 0
config/rootfiles/oldcore/{204 => 203}/filelists/knot | 0
.../rootfiles/oldcore/{204 => 203}/filelists/knot-resolver | 0
config/rootfiles/oldcore/{204 => 203}/filelists/krb5 | 0
config/rootfiles/oldcore/{204 => 203}/filelists/less | 0
config/rootfiles/oldcore/{204 => 203}/filelists/libedit | 0
config/rootfiles/oldcore/{204 => 203}/filelists/libksba | 0
config/rootfiles/oldcore/{204 => 203}/filelists/libloc | 0
.../rootfiles/oldcore/{204 => 203}/filelists/libunistring | 0
config/rootfiles/oldcore/{204 => 203}/filelists/libusb | 0
config/rootfiles/oldcore/{204 => 203}/filelists/lua-cqueues | 0
config/rootfiles/oldcore/{204 => 203}/filelists/lua-csv | 0
config/rootfiles/oldcore/{204 => 203}/filelists/lua-sqlite3 | 0
config/rootfiles/oldcore/{204 => 203}/filelists/luajit | 0
config/rootfiles/oldcore/{204 => 203}/filelists/luarocks | 0
config/rootfiles/oldcore/{204 => 203}/filelists/lvm2 | 0
config/rootfiles/oldcore/{204 => 203}/filelists/meson | 0
config/rootfiles/oldcore/{204 => 203}/filelists/misc-progs | 0
config/rootfiles/oldcore/{204 => 203}/filelists/nettle | 0
.../rootfiles/oldcore/{204 => 203}/filelists/nss-myhostname | 0
config/rootfiles/oldcore/{204 => 203}/filelists/ntfs-3g | 0
config/rootfiles/oldcore/{204 => 203}/filelists/openvpn | 0
config/rootfiles/oldcore/{204 => 203}/filelists/pakfire | 0
.../rootfiles/oldcore/{204 => 203}/filelists/python3-Jinja2 | 0
.../oldcore/{204 => 203}/filelists/python3-MarkupSafe | 0
.../oldcore/{204 => 203}/filelists/python3-aiohappyeyeballs | 0
.../oldcore/{204 => 203}/filelists/python3-aiohttp | 0
.../oldcore/{204 => 203}/filelists/python3-aiosignal | 0
.../oldcore/{204 => 203}/filelists/python3-async-timeout | 0
.../rootfiles/oldcore/{204 => 203}/filelists/python3-attrs | 0
.../oldcore/{204 => 203}/filelists/python3-expandvars | 0
.../oldcore/{204 => 203}/filelists/python3-frozenlist | 0
.../rootfiles/oldcore/{204 => 203}/filelists/python3-idna | 0
.../oldcore/{204 => 203}/filelists/python3-multidict | 0
.../oldcore/{204 => 203}/filelists/python3-poetry-core | 0
.../oldcore/{204 => 203}/filelists/python3-propcache | 0
.../oldcore/{204 => 203}/filelists/python3-setuptools | 0
.../oldcore/{204 => 203}/filelists/python3-supervisor | 0
.../{204 => 203}/filelists/python3-typing-extensions | 0
.../oldcore/{204 => 203}/filelists/python3-watchdog | 0
.../rootfiles/oldcore/{204 => 203}/filelists/python3-yaml | 0
.../rootfiles/oldcore/{204 => 203}/filelists/python3-yarl | 0
.../rootfiles/oldcore/{204 => 203}/filelists/riscv64/boost | 0
.../rootfiles/oldcore/{204 => 203}/filelists/riscv64/grub | 0
.../oldcore/{204 => 203}/filelists/riscv64/util-linux | 0
config/rootfiles/oldcore/{204 => 203}/filelists/rrdtool | 0
config/rootfiles/oldcore/{204 => 203}/filelists/sqlite | 0
config/rootfiles/oldcore/{204 => 203}/filelists/squid | 0
config/rootfiles/oldcore/{204 => 203}/filelists/strongswan | 0
config/rootfiles/oldcore/{204 => 203}/filelists/vim | 0
.../oldcore/{204 => 203}/filelists/web-user-interface | 0
config/rootfiles/oldcore/{204 => 203}/filelists/which | 0
.../rootfiles/oldcore/{204 => 203}/filelists/x86_64/boost | 0
config/rootfiles/oldcore/{204 => 203}/filelists/x86_64/grub | 0
.../oldcore/{204 => 203}/filelists/x86_64/intel-microcode | 0
.../oldcore/{204 => 203}/filelists/x86_64/util-linux | 0
config/rootfiles/oldcore/{204 => 203}/filelists/xfsprogs | 0
config/rootfiles/oldcore/{204 => 203}/filelists/zone-sync | 0
config/rootfiles/oldcore/{204 => 203}/update.sh | 0
config/rootfiles/packages/c-ares | 2 +-
config/rootfiles/packages/tshark | 4 ++--
lfs/c-ares | 8 ++++----
lfs/cmake | 3 ++-
lfs/ethtool | 4 ++--
lfs/groff | 2 +-
lfs/hwdata | 4 ++--
lfs/openssh | 4 ++--
lfs/tshark | 6 +++---
lfs/tzdata | 6 +++---
make.sh | 13 +++++++++++++
95 files changed, 38 insertions(+), 21 deletions(-)
copy config/rootfiles/{oldcore/158 => core/204}/filelists/ethtool (100%)
copy config/rootfiles/{oldcore/100 => core/204}/filelists/openssh (100%)
copy config/rootfiles/{oldcore/100 => core/204}/filelists/tzdata (100%)
rename config/rootfiles/oldcore/{204 => 203}/exclude (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/aarch64/boost (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/aarch64/grub (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/aarch64/util-linux (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/bind (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/btrfs-progs (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/collectd (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/core-files (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/coreutils (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/dma (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/e2fsprogs (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/elfutils (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/expat (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/fcron (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/files (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/fontconfig (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/gdb (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/gnupg (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/gnutls (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/grub-btrfs (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/iana-etc (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/knot (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/knot-resolver (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/krb5 (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/less (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/libedit (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/libksba (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/libloc (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/libunistring (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/libusb (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/lua-cqueues (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/lua-csv (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/lua-sqlite3 (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/luajit (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/luarocks (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/lvm2 (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/meson (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/misc-progs (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/nettle (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/nss-myhostname (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/ntfs-3g (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/openvpn (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/pakfire (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-Jinja2 (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-MarkupSafe (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-aiohappyeyeballs (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-aiohttp (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-aiosignal (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-async-timeout (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-attrs (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-expandvars (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-frozenlist (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-idna (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-multidict (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-poetry-core (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-propcache (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-setuptools (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-supervisor (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-typing-extensions (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-watchdog (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-yaml (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/python3-yarl (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/riscv64/boost (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/riscv64/grub (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/riscv64/util-linux (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/rrdtool (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/sqlite (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/squid (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/strongswan (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/vim (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/web-user-interface (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/which (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/x86_64/boost (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/x86_64/grub (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/x86_64/intel-microcode (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/x86_64/util-linux (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/xfsprogs (100%)
rename config/rootfiles/oldcore/{204 => 203}/filelists/zone-sync (100%)
rename config/rootfiles/oldcore/{204 => 203}/update.sh (100%)
Difference in files:
diff --git a/config/rootfiles/common/openssh b/config/rootfiles/common/openssh
index 85dd5dd2d..8e7364b07 100644
--- a/config/rootfiles/common/openssh
+++ b/config/rootfiles/common/openssh
@@ -5,6 +5,8 @@ etc/ssh/ssh_config
#etc/ssh/ssh_host_ecdsa_key.pub
#etc/ssh/ssh_host_ed25519_key
#etc/ssh/ssh_host_ed25519_key.pub
+#etc/ssh/ssh_host_mldsa44_ed25519_key
+#etc/ssh/ssh_host_mldsa44_ed25519_key.pub
#etc/ssh/ssh_host_rsa_key
#etc/ssh/ssh_host_rsa_key.pub
etc/ssh/sshd_config
diff --git a/config/rootfiles/core/204/filelists/ethtool b/config/rootfiles/core/204/filelists/ethtool
new file mode 120000
index 000000000..494a53e9d
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/ethtool
@@ -0,0 +1 @@
+../../../common/ethtool
\ No newline at end of file
diff --git a/config/rootfiles/core/204/filelists/openssh b/config/rootfiles/core/204/filelists/openssh
new file mode 120000
index 000000000..d8c77fd8e
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/openssh
@@ -0,0 +1 @@
+../../../common/openssh
\ No newline at end of file
diff --git a/config/rootfiles/core/204/filelists/tzdata b/config/rootfiles/core/204/filelists/tzdata
new file mode 120000
index 000000000..5a6e3252f
--- /dev/null
+++ b/config/rootfiles/core/204/filelists/tzdata
@@ -0,0 +1 @@
+../../../common/tzdata
\ No newline at end of file
diff --git a/config/rootfiles/core/204/update.sh b/config/rootfiles/core/204/update.sh
index 740b48cd2..a1153f73c 100644
--- a/config/rootfiles/core/204/update.sh
+++ b/config/rootfiles/core/204/update.sh
@@ -120,6 +120,7 @@ rm -rfv \
# Start services
/etc/init.d/sysklogd restart
+/etc/init.d/sshd restart
/etc/init.d/apache start
/etc/init.d/suricata restart
/etc/init.d/knot-resolver restart
diff --git a/config/rootfiles/oldcore/204/exclude b/config/rootfiles/oldcore/203/exclude
similarity index 100%
rename from config/rootfiles/oldcore/204/exclude
rename to config/rootfiles/oldcore/203/exclude
diff --git a/config/rootfiles/oldcore/204/filelists/aarch64/boost b/config/rootfiles/oldcore/203/filelists/aarch64/boost
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/aarch64/boost
rename to config/rootfiles/oldcore/203/filelists/aarch64/boost
diff --git a/config/rootfiles/oldcore/204/filelists/aarch64/grub b/config/rootfiles/oldcore/203/filelists/aarch64/grub
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/aarch64/grub
rename to config/rootfiles/oldcore/203/filelists/aarch64/grub
diff --git a/config/rootfiles/oldcore/204/filelists/aarch64/util-linux b/config/rootfiles/oldcore/203/filelists/aarch64/util-linux
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/aarch64/util-linux
rename to config/rootfiles/oldcore/203/filelists/aarch64/util-linux
diff --git a/config/rootfiles/oldcore/204/filelists/bind b/config/rootfiles/oldcore/203/filelists/bind
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/bind
rename to config/rootfiles/oldcore/203/filelists/bind
diff --git a/config/rootfiles/oldcore/204/filelists/btrfs-progs b/config/rootfiles/oldcore/203/filelists/btrfs-progs
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/btrfs-progs
rename to config/rootfiles/oldcore/203/filelists/btrfs-progs
diff --git a/config/rootfiles/oldcore/204/filelists/collectd b/config/rootfiles/oldcore/203/filelists/collectd
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/collectd
rename to config/rootfiles/oldcore/203/filelists/collectd
diff --git a/config/rootfiles/oldcore/204/filelists/core-files b/config/rootfiles/oldcore/203/filelists/core-files
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/core-files
rename to config/rootfiles/oldcore/203/filelists/core-files
diff --git a/config/rootfiles/oldcore/204/filelists/coreutils b/config/rootfiles/oldcore/203/filelists/coreutils
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/coreutils
rename to config/rootfiles/oldcore/203/filelists/coreutils
diff --git a/config/rootfiles/oldcore/204/filelists/dma b/config/rootfiles/oldcore/203/filelists/dma
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/dma
rename to config/rootfiles/oldcore/203/filelists/dma
diff --git a/config/rootfiles/oldcore/204/filelists/e2fsprogs b/config/rootfiles/oldcore/203/filelists/e2fsprogs
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/e2fsprogs
rename to config/rootfiles/oldcore/203/filelists/e2fsprogs
diff --git a/config/rootfiles/oldcore/204/filelists/elfutils b/config/rootfiles/oldcore/203/filelists/elfutils
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/elfutils
rename to config/rootfiles/oldcore/203/filelists/elfutils
diff --git a/config/rootfiles/oldcore/204/filelists/expat b/config/rootfiles/oldcore/203/filelists/expat
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/expat
rename to config/rootfiles/oldcore/203/filelists/expat
diff --git a/config/rootfiles/oldcore/204/filelists/fcron b/config/rootfiles/oldcore/203/filelists/fcron
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/fcron
rename to config/rootfiles/oldcore/203/filelists/fcron
diff --git a/config/rootfiles/oldcore/204/filelists/files b/config/rootfiles/oldcore/203/filelists/files
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/files
rename to config/rootfiles/oldcore/203/filelists/files
diff --git a/config/rootfiles/oldcore/204/filelists/fontconfig b/config/rootfiles/oldcore/203/filelists/fontconfig
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/fontconfig
rename to config/rootfiles/oldcore/203/filelists/fontconfig
diff --git a/config/rootfiles/oldcore/204/filelists/gdb b/config/rootfiles/oldcore/203/filelists/gdb
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/gdb
rename to config/rootfiles/oldcore/203/filelists/gdb
diff --git a/config/rootfiles/oldcore/204/filelists/gnupg b/config/rootfiles/oldcore/203/filelists/gnupg
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/gnupg
rename to config/rootfiles/oldcore/203/filelists/gnupg
diff --git a/config/rootfiles/oldcore/204/filelists/gnutls b/config/rootfiles/oldcore/203/filelists/gnutls
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/gnutls
rename to config/rootfiles/oldcore/203/filelists/gnutls
diff --git a/config/rootfiles/oldcore/204/filelists/grub-btrfs b/config/rootfiles/oldcore/203/filelists/grub-btrfs
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/grub-btrfs
rename to config/rootfiles/oldcore/203/filelists/grub-btrfs
diff --git a/config/rootfiles/oldcore/204/filelists/iana-etc b/config/rootfiles/oldcore/203/filelists/iana-etc
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/iana-etc
rename to config/rootfiles/oldcore/203/filelists/iana-etc
diff --git a/config/rootfiles/oldcore/204/filelists/knot b/config/rootfiles/oldcore/203/filelists/knot
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/knot
rename to config/rootfiles/oldcore/203/filelists/knot
diff --git a/config/rootfiles/oldcore/204/filelists/knot-resolver b/config/rootfiles/oldcore/203/filelists/knot-resolver
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/knot-resolver
rename to config/rootfiles/oldcore/203/filelists/knot-resolver
diff --git a/config/rootfiles/oldcore/204/filelists/krb5 b/config/rootfiles/oldcore/203/filelists/krb5
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/krb5
rename to config/rootfiles/oldcore/203/filelists/krb5
diff --git a/config/rootfiles/oldcore/204/filelists/less b/config/rootfiles/oldcore/203/filelists/less
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/less
rename to config/rootfiles/oldcore/203/filelists/less
diff --git a/config/rootfiles/oldcore/204/filelists/libedit b/config/rootfiles/oldcore/203/filelists/libedit
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/libedit
rename to config/rootfiles/oldcore/203/filelists/libedit
diff --git a/config/rootfiles/oldcore/204/filelists/libksba b/config/rootfiles/oldcore/203/filelists/libksba
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/libksba
rename to config/rootfiles/oldcore/203/filelists/libksba
diff --git a/config/rootfiles/oldcore/204/filelists/libloc b/config/rootfiles/oldcore/203/filelists/libloc
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/libloc
rename to config/rootfiles/oldcore/203/filelists/libloc
diff --git a/config/rootfiles/oldcore/204/filelists/libunistring b/config/rootfiles/oldcore/203/filelists/libunistring
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/libunistring
rename to config/rootfiles/oldcore/203/filelists/libunistring
diff --git a/config/rootfiles/oldcore/204/filelists/libusb b/config/rootfiles/oldcore/203/filelists/libusb
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/libusb
rename to config/rootfiles/oldcore/203/filelists/libusb
diff --git a/config/rootfiles/oldcore/204/filelists/lua-cqueues b/config/rootfiles/oldcore/203/filelists/lua-cqueues
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/lua-cqueues
rename to config/rootfiles/oldcore/203/filelists/lua-cqueues
diff --git a/config/rootfiles/oldcore/204/filelists/lua-csv b/config/rootfiles/oldcore/203/filelists/lua-csv
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/lua-csv
rename to config/rootfiles/oldcore/203/filelists/lua-csv
diff --git a/config/rootfiles/oldcore/204/filelists/lua-sqlite3 b/config/rootfiles/oldcore/203/filelists/lua-sqlite3
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/lua-sqlite3
rename to config/rootfiles/oldcore/203/filelists/lua-sqlite3
diff --git a/config/rootfiles/oldcore/204/filelists/luajit b/config/rootfiles/oldcore/203/filelists/luajit
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/luajit
rename to config/rootfiles/oldcore/203/filelists/luajit
diff --git a/config/rootfiles/oldcore/204/filelists/luarocks b/config/rootfiles/oldcore/203/filelists/luarocks
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/luarocks
rename to config/rootfiles/oldcore/203/filelists/luarocks
diff --git a/config/rootfiles/oldcore/204/filelists/lvm2 b/config/rootfiles/oldcore/203/filelists/lvm2
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/lvm2
rename to config/rootfiles/oldcore/203/filelists/lvm2
diff --git a/config/rootfiles/oldcore/204/filelists/meson b/config/rootfiles/oldcore/203/filelists/meson
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/meson
rename to config/rootfiles/oldcore/203/filelists/meson
diff --git a/config/rootfiles/oldcore/204/filelists/misc-progs b/config/rootfiles/oldcore/203/filelists/misc-progs
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/misc-progs
rename to config/rootfiles/oldcore/203/filelists/misc-progs
diff --git a/config/rootfiles/oldcore/204/filelists/nettle b/config/rootfiles/oldcore/203/filelists/nettle
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/nettle
rename to config/rootfiles/oldcore/203/filelists/nettle
diff --git a/config/rootfiles/oldcore/204/filelists/nss-myhostname b/config/rootfiles/oldcore/203/filelists/nss-myhostname
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/nss-myhostname
rename to config/rootfiles/oldcore/203/filelists/nss-myhostname
diff --git a/config/rootfiles/oldcore/204/filelists/ntfs-3g b/config/rootfiles/oldcore/203/filelists/ntfs-3g
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/ntfs-3g
rename to config/rootfiles/oldcore/203/filelists/ntfs-3g
diff --git a/config/rootfiles/oldcore/204/filelists/openvpn b/config/rootfiles/oldcore/203/filelists/openvpn
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/openvpn
rename to config/rootfiles/oldcore/203/filelists/openvpn
diff --git a/config/rootfiles/oldcore/204/filelists/pakfire b/config/rootfiles/oldcore/203/filelists/pakfire
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/pakfire
rename to config/rootfiles/oldcore/203/filelists/pakfire
diff --git a/config/rootfiles/oldcore/204/filelists/python3-Jinja2 b/config/rootfiles/oldcore/203/filelists/python3-Jinja2
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-Jinja2
rename to config/rootfiles/oldcore/203/filelists/python3-Jinja2
diff --git a/config/rootfiles/oldcore/204/filelists/python3-MarkupSafe b/config/rootfiles/oldcore/203/filelists/python3-MarkupSafe
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-MarkupSafe
rename to config/rootfiles/oldcore/203/filelists/python3-MarkupSafe
diff --git a/config/rootfiles/oldcore/204/filelists/python3-aiohappyeyeballs b/config/rootfiles/oldcore/203/filelists/python3-aiohappyeyeballs
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-aiohappyeyeballs
rename to config/rootfiles/oldcore/203/filelists/python3-aiohappyeyeballs
diff --git a/config/rootfiles/oldcore/204/filelists/python3-aiohttp b/config/rootfiles/oldcore/203/filelists/python3-aiohttp
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-aiohttp
rename to config/rootfiles/oldcore/203/filelists/python3-aiohttp
diff --git a/config/rootfiles/oldcore/204/filelists/python3-aiosignal b/config/rootfiles/oldcore/203/filelists/python3-aiosignal
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-aiosignal
rename to config/rootfiles/oldcore/203/filelists/python3-aiosignal
diff --git a/config/rootfiles/oldcore/204/filelists/python3-async-timeout b/config/rootfiles/oldcore/203/filelists/python3-async-timeout
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-async-timeout
rename to config/rootfiles/oldcore/203/filelists/python3-async-timeout
diff --git a/config/rootfiles/oldcore/204/filelists/python3-attrs b/config/rootfiles/oldcore/203/filelists/python3-attrs
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-attrs
rename to config/rootfiles/oldcore/203/filelists/python3-attrs
diff --git a/config/rootfiles/oldcore/204/filelists/python3-expandvars b/config/rootfiles/oldcore/203/filelists/python3-expandvars
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-expandvars
rename to config/rootfiles/oldcore/203/filelists/python3-expandvars
diff --git a/config/rootfiles/oldcore/204/filelists/python3-frozenlist b/config/rootfiles/oldcore/203/filelists/python3-frozenlist
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-frozenlist
rename to config/rootfiles/oldcore/203/filelists/python3-frozenlist
diff --git a/config/rootfiles/oldcore/204/filelists/python3-idna b/config/rootfiles/oldcore/203/filelists/python3-idna
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-idna
rename to config/rootfiles/oldcore/203/filelists/python3-idna
diff --git a/config/rootfiles/oldcore/204/filelists/python3-multidict b/config/rootfiles/oldcore/203/filelists/python3-multidict
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-multidict
rename to config/rootfiles/oldcore/203/filelists/python3-multidict
diff --git a/config/rootfiles/oldcore/204/filelists/python3-poetry-core b/config/rootfiles/oldcore/203/filelists/python3-poetry-core
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-poetry-core
rename to config/rootfiles/oldcore/203/filelists/python3-poetry-core
diff --git a/config/rootfiles/oldcore/204/filelists/python3-propcache b/config/rootfiles/oldcore/203/filelists/python3-propcache
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-propcache
rename to config/rootfiles/oldcore/203/filelists/python3-propcache
diff --git a/config/rootfiles/oldcore/204/filelists/python3-setuptools b/config/rootfiles/oldcore/203/filelists/python3-setuptools
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-setuptools
rename to config/rootfiles/oldcore/203/filelists/python3-setuptools
diff --git a/config/rootfiles/oldcore/204/filelists/python3-supervisor b/config/rootfiles/oldcore/203/filelists/python3-supervisor
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-supervisor
rename to config/rootfiles/oldcore/203/filelists/python3-supervisor
diff --git a/config/rootfiles/oldcore/204/filelists/python3-typing-extensions b/config/rootfiles/oldcore/203/filelists/python3-typing-extensions
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-typing-extensions
rename to config/rootfiles/oldcore/203/filelists/python3-typing-extensions
diff --git a/config/rootfiles/oldcore/204/filelists/python3-watchdog b/config/rootfiles/oldcore/203/filelists/python3-watchdog
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-watchdog
rename to config/rootfiles/oldcore/203/filelists/python3-watchdog
diff --git a/config/rootfiles/oldcore/204/filelists/python3-yaml b/config/rootfiles/oldcore/203/filelists/python3-yaml
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-yaml
rename to config/rootfiles/oldcore/203/filelists/python3-yaml
diff --git a/config/rootfiles/oldcore/204/filelists/python3-yarl b/config/rootfiles/oldcore/203/filelists/python3-yarl
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/python3-yarl
rename to config/rootfiles/oldcore/203/filelists/python3-yarl
diff --git a/config/rootfiles/oldcore/204/filelists/riscv64/boost b/config/rootfiles/oldcore/203/filelists/riscv64/boost
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/riscv64/boost
rename to config/rootfiles/oldcore/203/filelists/riscv64/boost
diff --git a/config/rootfiles/oldcore/204/filelists/riscv64/grub b/config/rootfiles/oldcore/203/filelists/riscv64/grub
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/riscv64/grub
rename to config/rootfiles/oldcore/203/filelists/riscv64/grub
diff --git a/config/rootfiles/oldcore/204/filelists/riscv64/util-linux b/config/rootfiles/oldcore/203/filelists/riscv64/util-linux
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/riscv64/util-linux
rename to config/rootfiles/oldcore/203/filelists/riscv64/util-linux
diff --git a/config/rootfiles/oldcore/204/filelists/rrdtool b/config/rootfiles/oldcore/203/filelists/rrdtool
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/rrdtool
rename to config/rootfiles/oldcore/203/filelists/rrdtool
diff --git a/config/rootfiles/oldcore/204/filelists/sqlite b/config/rootfiles/oldcore/203/filelists/sqlite
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/sqlite
rename to config/rootfiles/oldcore/203/filelists/sqlite
diff --git a/config/rootfiles/oldcore/204/filelists/squid b/config/rootfiles/oldcore/203/filelists/squid
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/squid
rename to config/rootfiles/oldcore/203/filelists/squid
diff --git a/config/rootfiles/oldcore/204/filelists/strongswan b/config/rootfiles/oldcore/203/filelists/strongswan
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/strongswan
rename to config/rootfiles/oldcore/203/filelists/strongswan
diff --git a/config/rootfiles/oldcore/204/filelists/vim b/config/rootfiles/oldcore/203/filelists/vim
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/vim
rename to config/rootfiles/oldcore/203/filelists/vim
diff --git a/config/rootfiles/oldcore/204/filelists/web-user-interface b/config/rootfiles/oldcore/203/filelists/web-user-interface
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/web-user-interface
rename to config/rootfiles/oldcore/203/filelists/web-user-interface
diff --git a/config/rootfiles/oldcore/204/filelists/which b/config/rootfiles/oldcore/203/filelists/which
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/which
rename to config/rootfiles/oldcore/203/filelists/which
diff --git a/config/rootfiles/oldcore/204/filelists/x86_64/boost b/config/rootfiles/oldcore/203/filelists/x86_64/boost
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/x86_64/boost
rename to config/rootfiles/oldcore/203/filelists/x86_64/boost
diff --git a/config/rootfiles/oldcore/204/filelists/x86_64/grub b/config/rootfiles/oldcore/203/filelists/x86_64/grub
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/x86_64/grub
rename to config/rootfiles/oldcore/203/filelists/x86_64/grub
diff --git a/config/rootfiles/oldcore/204/filelists/x86_64/intel-microcode b/config/rootfiles/oldcore/203/filelists/x86_64/intel-microcode
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/x86_64/intel-microcode
rename to config/rootfiles/oldcore/203/filelists/x86_64/intel-microcode
diff --git a/config/rootfiles/oldcore/204/filelists/x86_64/util-linux b/config/rootfiles/oldcore/203/filelists/x86_64/util-linux
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/x86_64/util-linux
rename to config/rootfiles/oldcore/203/filelists/x86_64/util-linux
diff --git a/config/rootfiles/oldcore/204/filelists/xfsprogs b/config/rootfiles/oldcore/203/filelists/xfsprogs
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/xfsprogs
rename to config/rootfiles/oldcore/203/filelists/xfsprogs
diff --git a/config/rootfiles/oldcore/204/filelists/zone-sync b/config/rootfiles/oldcore/203/filelists/zone-sync
similarity index 100%
rename from config/rootfiles/oldcore/204/filelists/zone-sync
rename to config/rootfiles/oldcore/203/filelists/zone-sync
diff --git a/config/rootfiles/oldcore/204/update.sh b/config/rootfiles/oldcore/203/update.sh
similarity index 100%
rename from config/rootfiles/oldcore/204/update.sh
rename to config/rootfiles/oldcore/203/update.sh
diff --git a/config/rootfiles/packages/c-ares b/config/rootfiles/packages/c-ares
index 38891e2b5..12a246147 100644
--- a/config/rootfiles/packages/c-ares
+++ b/config/rootfiles/packages/c-ares
@@ -7,7 +7,7 @@
#usr/lib/libcares.la
#usr/lib/libcares.so
usr/lib/libcares.so.2
-usr/lib/libcares.so.2.19.4
+usr/lib/libcares.so.2.19.7
#usr/lib/pkgconfig/libcares.pc
#usr/share/man/man3/ares_cancel.3
#usr/share/man/man3/ares_create_query.3
diff --git a/config/rootfiles/packages/tshark b/config/rootfiles/packages/tshark
index 9042f6777..3ade5373d 100644
--- a/config/rootfiles/packages/tshark
+++ b/config/rootfiles/packages/tshark
@@ -11,10 +11,10 @@ usr/bin/dumpcap
usr/bin/tshark
#usr/lib/libwireshark.so
usr/lib/libwireshark.so.19
-usr/lib/libwireshark.so.19.0.6
+usr/lib/libwireshark.so.19.0.7
#usr/lib/libwiretap.so
usr/lib/libwiretap.so.16
-usr/lib/libwiretap.so.16.0.6
+usr/lib/libwiretap.so.16.0.7
#usr/lib/libwsutil.so
usr/lib/libwsutil.so.17
usr/lib/libwsutil.so.17.0.0
diff --git a/lfs/c-ares b/lfs/c-ares
index 612fb54a7..db68a8787 100644
--- a/lfs/c-ares
+++ b/lfs/c-ares
@@ -1,7 +1,7 @@
###############################################################################
# #
# IPFire.org - A linux based firewall #
-# Copyright (C) 2007-2025 IPFire Team <info@ipfire.org> #
+# Copyright (C) 2007-2026 IPFire Team <info@ipfire.org> #
# #
# This program is free software: you can redistribute it and/or modify #
# it under the terms of the GNU General Public License as published by #
@@ -26,7 +26,7 @@ include Config
SUMMARY = Tools for asynchronous name resolves
-VER = 1.34.5
+VER = 1.34.8
THISAPP = c-ares-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -34,7 +34,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = c-ares
-PAK_VER = 5
+PAK_VER = 6
DEPS =
@@ -48,7 +48,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 5e8c262acf07cb387294170bba53618db1768436a3f7bf800eb31cf7b02ef8afc737122126c742424d4675f8c4944c730b8ba84028e6cee6bf65026cd2eeb56c
+$(DL_FILE)_BLAKE2 = b5a88811d8ee6a0c06737746a356bc1fc7c13416b11a0af3a2e6cab092d97adebb93234cf73b97a12b06b764f8562272a793961dc3367024c4322d923ac43f9f
install : $(TARGET)
diff --git a/lfs/cmake b/lfs/cmake
index 4722705dd..17c79bf1e 100644
--- a/lfs/cmake
+++ b/lfs/cmake
@@ -87,7 +87,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
--no-system-jsoncpp \
--no-system-librhash \
--no-system-libuv \
- --docdir=/share/doc/cmake
+ --docdir=/share/doc/cmake \
+ --parallel=$(PARALLELISM)
cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
@rm -rf $(DIR_APP)
diff --git a/lfs/ethtool b/lfs/ethtool
index 006c8ad37..62f0cf50e 100644
--- a/lfs/ethtool
+++ b/lfs/ethtool
@@ -24,7 +24,7 @@
include Config
-VER = 7.0
+VER = 7.1
THISAPP = ethtool-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = c2cfdb3256044dd4e331f8663a87e1b5231d45a693501bfd022c823bdbea950c93f0586e5d61e02d28f7ff87df769a68e1126123429f82899603baa69f153006
+$(DL_FILE)_BLAKE2 = 54b3e8764e0c1ff960a09ad2f321d926a0cd7561066747db639d4167124276cea9d9b7b3e10da6df2d17635f392570f8f151d95433f3029e4d522c935796f719
install : $(TARGET)
diff --git a/lfs/groff b/lfs/groff
index a30cf144c..e0678ca24 100644
--- a/lfs/groff
+++ b/lfs/groff
@@ -72,7 +72,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
cd $(DIR_APP) && PAGE=A4 ./configure \
--prefix=/usr
- cd $(DIR_APP) && make
+ cd $(DIR_APP) && make $(MAKETUNING)
cd $(DIR_APP) && make install
ln -svf eqn /usr/bin/geqn
ln -svf tbl /usr/bin/gtbl
diff --git a/lfs/hwdata b/lfs/hwdata
index a53de632b..bf8447f9a 100644
--- a/lfs/hwdata
+++ b/lfs/hwdata
@@ -24,7 +24,7 @@
include Config
-VER = 0.408
+VER = 0.409
THISAPP = hwdata-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = b5e6e5da6b6da4a1961468390cf86e291f2e3ba9db10cf98426c9619ec756f6cfcd80c0ebe42c4abcf55e70cfda73fbfd3b8fb422adb208d2da35999540580f7
+$(DL_FILE)_BLAKE2 = 49f9d31b7c0d16466e85b5af03d6457a4fd0d79769018d5440801efadb8fb55aa0dc978401141adafadc082b795f6da0f791e9b64c2766439b90e799b3ee7c10
install : $(TARGET)
diff --git a/lfs/openssh b/lfs/openssh
index fdffce8d4..e7acb2058 100644
--- a/lfs/openssh
+++ b/lfs/openssh
@@ -24,7 +24,7 @@
include Config
-VER = 10.3p1
+VER = 10.4p1
THISAPP = openssh-$(VER)
DL_FILE = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 77ff7c3bc943702267d74f6f7cdae44209ab940e42501e8a225761f3c8ab5416f2f0e4e61183e0b4cd79d5a041f4d1600674fcda17d3a2bd172074655cefdcd1
+$(DL_FILE)_BLAKE2 = 3051a345fd24333708277a1de781deca9094dd07cc55e613e93715b1266d80d59043bf5cdb2282d02c797cb9446916020e70fbd4c7a2470da7ab98eb612f6b74
install : $(TARGET)
diff --git a/lfs/tshark b/lfs/tshark
index 84a4ffe23..1965d445e 100644
--- a/lfs/tshark
+++ b/lfs/tshark
@@ -26,7 +26,7 @@ include Config
SUMMARY = A Network Traffic Analyser
-VER = 4.6.6
+VER = 4.6.7
THISAPP = wireshark-$(VER)
DL_FILE = $(THISAPP).tar.xz
@@ -35,7 +35,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = tshark
DEPS = c-ares libxxhash
-PAK_VER = 36
+PAK_VER = 37
SERVICES =
@@ -47,7 +47,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_BLAKE2 = 3ba090394930adbd8649df0b93b65ad68f58964fe2a5b8632450f3f3b7d2f26bbc20f95a825d08082b1c2d25ebb420500b3b58b8cb1f6b88b8326c093f56c83f
+$(DL_FILE)_BLAKE2 = 6c9c9201686a80fd855e589b00efa8be0b34771305981206aa58b345c38e1a9094b701e8067fadacf81787d15ebf9839fd9921322c1ab24ac183963094282b89
install : $(TARGET)
diff --git a/lfs/tzdata b/lfs/tzdata
index e57625765..42b916af0 100644
--- a/lfs/tzdata
+++ b/lfs/tzdata
@@ -24,7 +24,7 @@
include Config
-VER = 2026b
+VER = 2026c
# https://data.iana.org/time-zones/releases/.tar.gx & .asc
TZDATA_VER = $(VER)
@@ -47,8 +47,8 @@ objects = tzdata$(TZDATA_VER).tar.gz tzcode$(TZCODE_VER).tar.gz
tzdata$(TZDATA_VER).tar.gz = $(DL_FROM)/tzdata$(TZDATA_VER).tar.gz
tzcode$(TZCODE_VER).tar.gz = $(DL_FROM)/tzcode$(TZCODE_VER).tar.gz
-tzdata$(TZDATA_VER).tar.gz_BLAKE2 = 3134d88addaa6a53749a4c87aa5c1b9d4632478152c67a26e5d1cfcf97b4eaafac3b16a41e61840360d4bde5aa05701aeb1caaafcc8a006c7f4708cfa2ac686d
-tzcode$(TZCODE_VER).tar.gz_BLAKE2 = 89ac1ee3b79c596a4903b9c25a794b24fa8e6076e61fbd30c09c690bd002f3759c76afd303abb9d716efa08da216b64362ec06be0e2c60ee89fd6a5e7b397f17
+tzdata$(TZDATA_VER).tar.gz_BLAKE2 = 53a759b9081736b5daba8574b2f6a6852fcd0fbb85237d90e5c589f4126a445a9fbbf338383fc14cee09fa4bb38b546a8285adcbdd944d93eb7e1242cae8feda
+tzcode$(TZCODE_VER).tar.gz_BLAKE2 = 09939593ad33e894d7ad62f8a7e1ee09a4490143a4c744551f81e836eb1b63f96926d362e415d1e254d2fe2d52378017c190b027e1d99a00b94014a413e329dd
install : $(TARGET)
diff --git a/make.sh b/make.sh
index 48e6d90cd..3963bc968 100755
--- a/make.sh
+++ b/make.sh
@@ -2436,10 +2436,23 @@ CFLAGS=(
case "${BUILD_ARCH}" in
aarch64)
CFLAGS+=(
+ "-march=armv8-a"
+ "-mtune=generic"
"-mbranch-protection=standard"
)
;;
+ riscv64)
+ CFLAGS+=(
+ # Build for RVA22/23
+ "-march=rv64gc"
+ "-mabi=lp64d"
+
+ # Optimise of out-of-order execution
+ "-mtune=generic-ooo"
+ )
+ ;;
+
x86_64)
CFLAGS+=(
"-m64" "-mtune=generic" "-fcf-protection=full"
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-07-09 15:23 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-09 15:23 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 9c148496a169b1650137c0c3a5c500d625d305a9 Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox