public inbox for ipfire-scm@lists.ipfire.org
 help / color / mirror / Atom feed
From: Michael Tremer <git@ipfire.org>
To: ipfire-scm@lists.ipfire.org
Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. 545449d7e0cc3cf102a9e9de9e01266c73ff0fee
Date: Tue, 08 Sep 2026 20:14:11 +0000 (UTC)	[thread overview]
Message-ID: <4hfZsH2Ff9z2xS7@people01.haj.ipfire.org> (raw)

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  545449d7e0cc3cf102a9e9de9e01266c73ff0fee (commit)
       via  1eb8a776c797f92a758e33571083cfc42ab5b765 (commit)
       via  66b3b0d25efcf689b6bcc7cca99ada066b3a6141 (commit)
       via  040729f4665d939bd34da396076d8e41395d03bf (commit)
       via  e1cf1d8f90c4c4fc2f1241511a23da3c1addece1 (commit)
       via  970701e9df54136a6a824dee92811b760a41363f (commit)
       via  dff9ea1ef86738e15e4cad1dddd230990aba9728 (commit)
       via  ad5507cccdcc03518fc83636f602e11f6368352f (commit)
       via  a99091715cf518db3a30fe147e4551988c053e46 (commit)
       via  362baa5eb72802e6278ea4abc4169ede2c868f02 (commit)
       via  6762dd49533a83f3a8036a9c3a91998b6c45ec6c (commit)
       via  53aba2428c731d7be4a8568b057f76b1c0b599f2 (commit)
       via  21dfdd857edaa3442840a565a01561151a5d40d2 (commit)
       via  ad85790a62a4deb58d38fc7d5f6d88a1da38c287 (commit)
       via  74ce1a45f5cb5b78df6cd5ee75a644e8bcc93e3e (commit)
      from  5721bf799f80ba69f10b41db6caa26866081a6ff (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 545449d7e0cc3cf102a9e9de9e01266c73ff0fee
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:32 2026 +0200

    core205: Ship openssl
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 1eb8a776c797f92a758e33571083cfc42ab5b765
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:40 2026 +0200

    openssl: Update to version 3.6.4
    
    - Update from version 3.6.3 to 3.6.4
    - Update of rootfile
    - 11 CVE fixes
    - Changelog
    3.6.4
    OpenSSL 3.6.4 is a security patch release.  The most severe CVE fixed
    in this release is Moderate.
    This release incorporates the following bug fixes and mitigations:
      * Fixed QUIC server being able to trigger double free when processing
        `INITIAL` packet.
        ([CVE-2026-18798])
      * Fixed heap buffer overflow in CMS key unwrapping.
        ([CVE-2026-63072])
      * Fixed invalid pointer dereference in CMP server via crafted `protectionAlg`.
        ([CVE-2026-63076])
      * Fixed unbounded memory growth in QUIC server incoming channel queue.
        ([CVE-2026-14456])
      * Fixed RPK server signature algorithm selection being able to dereference
        a missing certificate.
        ([CVE-2026-14457])
      * Fixed excessive memory use buffering DTLS records for a future epoch.
        ([CVE-2026-54874])
      * Fixed client-side nemory leak in OCSP response checking.
        ([CVE-2026-54876])
      * Fixed untrusted Sender DN being used as a format string in CMP response
        validation.
        ([CVE-2026-63073])
      * Fixed CMP indefinite cache growth of `extraCerts`.
        ([CVE-2026-63074])
      * Fixed QUIC ACK-only packet retention being able to cause memory exhaustion.
        ([CVE-2026-63075])
      * Fixed possibility of AEAD forgeries with empty ciphertext when using
        `EVP_Cipher()`.
        ([CVE-2026-75803])
      * Fixed checking of authentication tags for empty ciphertexts for AEAD ciphers
        in CCM cipher mode.
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 66b3b0d25efcf689b6bcc7cca99ada066b3a6141
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:41 2026 +0200

    protobuf: Update to version 36.1
    
    - Update from version 35.1 to 36.1
    - Update of rootfile
    - Changelog
    36.1
    Csharp
        Allow later enum aliases to overwrite in C# custom JSON enum mapping. (cc7e6bd)
    Rust
        Update README files for each crate. (e64a176)
        Include runtime version details in assertion error messages. (fecb404)
        Drop special treatment of rust versions below 4.33. (1312f3b)
        Invert the relationship between rust crates (fbf3069)
    Python
        Optimize pure Python parse path for custom JSON enum names. (333846a)
        Additional unit tests for Python handling of custom JSON enum names. (210324c)
    36.0
    Bazel
        Add Bazel9 test (90ad7e9)
        Bazel 9 tests for csharp, hpb, objc, php, python, rust and upb (f9e028f)
    Compiler
        Make default_symbol_visibility STRICT in edition 2026 (fcd68c5)
        Add deprecation warnings for (py|cc|java)_generic_service. (517be42)
        Disallow reserving field number INT_MAX. (933c522)
        Add bazel targets for standalone plugin binaries (#23919) (81880fa)
        Feat: --<lang>_prefix cli option (#24824) (92dd27c)
        Enforce proto limits in the descriptor by default for EDITION_2026. (d8520d9)
        Fix: Apply path traversal guard to WriteAllToZip() matching WriteAllToDisk() (#27171) (28bef98)
        Add an enforce_proto_limits feature which will be implemented in Edition 2026. (5ddd524)
    C++
        Disable option sub-location mapping in open-source builds. (1d8a656)
        Add json_options.proto and json_enumvalue_options.proto and/or gencode derived from them to release artifacts (15e9334)
        Add deprecation warning for Reflection::GetEnum() and Reflection::GetRepeatedEnum(). (0bca288)
        Migrate top-level protobuf unittest protos from Edition 2024 to Edition 2026. (271ca53)
        Util: validate Duration/Timestamp in TimeUtil::FromString against spec limits (#27443) (e337495)
        Make default_symbol_visibility STRICT in edition 2026 (fcd68c5)
        Use the direct map reflection API when converting message to JSON, if the repeated field reflection is not valid. (e75aac3)
        Add bazel targets for standalone plugin binaries (#23919) (81880fa)
        Fix(cpp): stop TextFormat iteration if output stream fails (#26237) (2718dd5)
        Enforce proto limits in the descriptor by default for EDITION_2026. (d8520d9)
        Add an enforce_proto_limits feature which will be implemented in Edition 2026. (5ddd524)
        Workaround for attribute handling bug in gcc < 13 (ba10a4e)
        Fix confusing error message for map value type name conflicts (7864b85)
        C++Proto JSON: Align behavior on the type.proto path with the descriptor.proto path (0bc1f14)
    Java
    With this release JavaProto no longer uses sun.misc.Unsafe as long as you are utilizing the standard generated code. You should no longer see warnings printed about sun.misc.Unsafe. If you see any issues, please let us know on #20760
    Note that the runtime itself still contains references to sun.misc.Unsafe in paths which are exclusively to support Lite generated code. Lite is emitted by a separate code generator which creates generated code optimized for mobile clientside contexts, especially alongside R8 optimizations. Android does not have a timeline to removing sun.misc.Unsafe, and we have found the performance regression too significant to consider removing these paths at this time. It is still TBD for how we can best navigate this mobile vs JVM split on this topic.
        Add json_options.proto and json_enumvalue_options.proto and/or gencode derived from them to release artifacts (15e9334)
        Json/java: add json_name enumval support (bff6ed1)
        Make Timestamps.parse() attempt non-lenient parsing first and warning if this fails. (d5e039a)
        Add a warning for potential OneofDescriptor collisions prior to Q1 2027 breaking changes. (ab69831)
        Make default_symbol_visibility STRICT in edition 2026 (fcd68c5)
        Reject negative size in mergeDelimitedFrom (#28097) (c56cd5b)
        Add deprecation warnings for (py|cc|java)_generic_service. (517be42)
        Update Java protobuf generator to use Objects.requireNonNull (31ef11c)
        Use natural String comparison instead of UTF-8 ByteString comparison for sorting map keys in JsonFormat. (ae1faee)
        Add option to enable strict JSON parsing in Protobuf Java JsonFormat. (40825a1)
        Add bazel targets for standalone plugin binaries (#23919) (81880fa)
        Remove experimental FieldOrder enum. (ec52338)
        Optimize GeneratedMessage.ExtendableBuilder to avoid temporary allocations when merging empty extendable messages. (a37dbd6)
        Stop using sun.misc.Unsafe in isValidUtf8 paths. (421d745)
        Use String#encodedLength on JDK versions that support it (efca121)
        Add an enforce_proto_limits feature which will be implemented in Edition 2026. (5ddd524)
        Java: limit numeric string length before BigDecimal parsing (#26908) (25e7005)
        Validate java package and class against injection risks. (f8514d8)
    Csharp
        Cache custom JSON enum names in JsonParser using Lazy. (156d42d)
        Csharp: add support for custom json strings for enum values (f11aac4)
        Validate language-specific namespace options in code generators (#28667) (34e959b)
        Make default_symbol_visibility STRICT in edition 2026 (fcd68c5)
        Advertise that C# supports Edition 2026, and move C# Nullable Reference Type support into that edition. (a1f718c)
        First implementation of C# nullable reference types enablement using the current (unreleased) edition. (7a732d1)
        Add bazel targets for standalone plugin binaries (#23919) (81880fa)
        Csharp: propagate recursion depth into JsonReplayTokenizer to honor Any nesting limit (#26835) (cee45bf)
        Fix csharp string interpolation in Timestamp.ToDateTime() exception message (#26341) (a298282)
    Objective-C
        [ObjC] Carry recursion depth across MessageSet item parsing (#27571) (f89baed)
        Add bazel targets for standalone plugin binaries (#23919) (81880fa)
        [ObjC] Add DEBUG-only validations to extension values in GPBMessage, along with tests. (290a537)
    Rust
        Re-export to google-protobuf crate in 0.x.y for 36.0 and above (96e772f)
        Remove -release suffix from Rust Crates.io release if minor version >= 36 (e7b3391)
        Add bazel targets for standalone plugin binaries (#23919) (81880fa)
        RustProto: Add the ability to iterate over the muts of a repeated message-typed field. (70590a5)
        See also UPB changes below, which may affect Rust.
    Python
        Add json_options.proto and json_enumvalue_options.proto and/or gencode derived from them to release artifacts (15e9334)
        Emit future warning when mutating GetOptions() in OSS (2255541)
        Emit deprecation warning when comparing descriptor containers with unrecognized types in OSS (5865e6b)
        Migrate top-level protobuf unittest protos from Edition 2024 to Edition 2026. (271ca53)
        Configure extra compile args in setup.py (#28264) (3aa022a)
        Python: fix heap-use-after-free in MapIterator after map.clear() (#27257) (9e9dbae)
        Add PyDescriptorPool_FromSharedPool(std::shared_ptr) API (abdf212)
        Fix memory leak in PyUpb_Descriptor_GetExtensionRanges (3d31b0f)
        Warn on out-of-range pop index in upb repeated fields. (a70d121)
        Support assigning repeated scalar fields using Python Buffer API. (ea40f1d)
        Fix Pure Python map<string, ...> key handling for bytes lookups. (156a0b8)
        Change Python DescriptorDatabase FindFileContainingSymbol() to accept leading "." to match DescriptorPool and other languages (e86e536)
        Faster Python cpp protos assignment to bytes/string fields. (593ab17)
        Serialize length-prefixed protos once (#27252) (e090f8a)
        [py/upb] Make GetOptions() return immutable options for scalar type. UPB will raise a TypeError when options returned GetOptions() by is mutated. (403d429)
        Add bazel targets for standalone plugin binaries (#23919) (81880fa)
        Add mutex protection to DescriptorPool caches. (cecbbf4)
        Refactor container comparison function in py/C++ and py/upb to return enum instead of integer. (c857f49)
        Py JSON: Fix issue with depth enforcement on Struct/Value WKT paths. (cfcc433)
        Fix RepeatedContainer_pop to raise IndexError for out-of-bounds indices. (78a09ad)
    PHP
        Support custom JSON enum names in PHP (49b3b18)
        Remove total_bytes_limit from pure PHP CodedInputStream. (e171c67)
        Validate language-specific namespace options in code generators (#28667) (34e959b)
        Fix PHP update_reserved_words.sh formatting and CI idempotency test (eff2323)
        Feat(php): script for updating php reserved words (#27456) (47c8651)
        [PHP] - Add configurable recursion_limit to mergeFromString / serializeToString (#27874) (5c5ee3c)
        Add bazel targets for standalone plugin binaries (#23919) (81880fa)
        Clarify FieldMask JSON warnings/errors in the situation of fields which aren't round-trip representable in JSON format. (0488596)
        Add an enforce_proto_limits feature which will be implemented in Edition 2026. (5ddd524)
    PHP C-Extension
        Support custom JSON enum names in PHP (49b3b18)
        Feat(php): script for updating php reserved words (#27456) (47c8651)
        [PHP] - Add configurable recursion_limit to mergeFromString / serializeToString (#27874) (5c5ee3c)
        See also UPB changes below, which may affect PHP C-Extension.
    Ruby
        Validate language-specific namespace options in code generators (#28667) (34e959b)
        Drop support for Ruby 3.1 (7008dd1)
        Add bazel targets for standalone plugin binaries (#23919) (81880fa)
    UPB (Python/PHP/Ruby C-Extension)
        Json/upb: Implement json EnumValueName for upb (0e8519e)
        Avoid UB in upb by switching to the XCT section, which will run our constructors before the compiler-generated initializers. (58e5ac8)
        [py/upb] Make GetOptions() return immutable options for scalar type. UPB will raise a TypeError when options returned GetOptions() by is mutated. (403d429)
        Clarify FieldMask JSON warnings/errors in the situation of fields which aren't round-trip representable in JSON format. (0488596)
        Add Bazel9 test (90ad7e9)
        Fixed two GCC-only issues around upb's generated extension registry. (d56b385)
        Fix RepeatedContainer_pop to raise IndexError for out-of-bounds indices. (78a09ad)
    Other
        Fix typo in legacy_rust (daf4964)
        Add JSON and CPP option protos to C++ toolchain blacklisted_protos (c4846de)
        Remove fallback behavior (2d3c0d3)
        Add deprecation warning for internal_py_proto_library prior to Q1 2027 breaking changes. (a8d0be3)
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 040729f4665d939bd34da396076d8e41395d03bf
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:39 2026 +0200

    meson: Update to version 1.12.0
    
    - Update from version 1.11.2 to 1.12.0
    - Update of rootfile
    - Changelog
    meson only creates changelogs at the 1.x level and does not indicate what is new between
       1.x.a and 1.x.b
    The changlog details for 1.12.0 are available at
    https://mesonbuild.com/Release-notes-for-1-12-0.html
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit e1cf1d8f90c4c4fc2f1241511a23da3c1addece1
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:31 2026 +0200

    core205: Ship libgcrypt
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 970701e9df54136a6a824dee92811b760a41363f
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:38 2026 +0200

    libgcrypt: Update to version 1.12.3
    
    - Update from version 1.12.2 to 1.12.3
    - Update of rootfile
    - Changelog
    1.12.3
     * Bug fixes:
       - Avoid theoretical drive-by loading of netapi32.dll and
         shell32.dll.  [T8375]
       - Validate hash algorithm for use with RSA modulus.  [T8376]
       - Validate parameters of Balloon KDF.  [T8374,T8383]
       - Validate parallelism of Argon2 KDF.  [T8373,T8382]
       - Fix parsing quoted parts and CRLF/LFCR in s-expression.  [T8371]
       - Support BUFLEN check for GCRYMPI_FMT_SSH.  [T8371]
       - Fix RSA PSS verify message length checking.  [rC0d64fc228f]
       - Avoid a NULL ptr deref due to a unsupported genkey flag for
         ECC.  [rC3b259530bc]
       - Assert 32 KiB input cap in gcm_ctr_encrypt.  [T8387]
       - Fix assertion failure in OCB when a buffered block becomes block
         65536.  [TT8389]
       - Fix OOB read in IMIT MAC verify of GOST28147.  [T8388]
       - Fix CMAC block-count truncation for 64 GiB writes.  [T8384]
       - Fix AEAD spurious byte-counter carry for 4 GiB adds.  [T8381]
       - Validate all KEM input lengths.  [T8259]
       - Add length check of DATALEN when parsing s-expression.  [T8267]
       - Only accept canonical value for S with EdDSA.  [T8386]
       - Only accept canonical signatures for RSA.  [T8392]
       - Fix an assertion failure for invalid small-order Ed25519 public
         keys.  [T8380]
       - Validate length of supplied receiver public-key length in DHKEM
         decapsulation.  [T8385]
       - Use a more strict value for the PKCS#1 minimal frame length.
         [T8393,T8394]
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit dff9ea1ef86738e15e4cad1dddd230990aba9728
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:30 2026 +0200

    core205: Ship libcap-ng
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit ad5507cccdcc03518fc83636f602e11f6368352f
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:37 2026 +0200

    libcap-ng: Update to version 0.9.5
    
    - Update from version 0.9.3 to 0.9.5
    - Update of rootfile
    - Changelog
    0.9.5
    - Fix broken utility_logic_test when run as a 32 bit app
    - Install the cap-audit man page conditionally
    - Fix V3 file capability usage
    - Preserve existing securebits in capng_lock
    - Make python configuration a little more strict
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit a99091715cf518db3a30fe147e4551988c053e46
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:29 2026 +0200

    core205: Ship iproute2
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 362baa5eb72802e6278ea4abc4169ede2c868f02
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:36 2026 +0200

    iproute2: Update to version 7.2.0
    
    - Update from version 7.0.0 to 7.2.0
    - No change in rootfile
    - Changelog is not provided. Details of changes for versions 7.0.1 and 7.2.0
       can be found from the git commit changes
       https://git.kernel.org/pub/scm/network/iproute2/iproute2.git
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 6762dd49533a83f3a8036a9c3a91998b6c45ec6c
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:35 2026 +0200

    harfbuzz: Update to version 14.4.0
    
    - Update from version 14.3.0 to 14.4.0
    - Update of rootfile
    - Changelog
    14.4.0
    - Glyph positions and extents now saturate instead of overflowing.
    - Arabic Windows-1256 fallback shaping is now enabled on all platforms.
    - Fix cluster values and a dropped glyph advance in the Graphite shaper.
    - Fix `avar` axis value mapping in fonts that repeat the boundary entries.
    - Fix `avar` version 2 partial instancing.
    - Fix `COLR` sweep gradient truncation and unbounded memory use.
    - Faster subsetting, especially for large `GSUB`/`GPOS` and `CFF` tables.
    - Faster extraction of the experimental glyph dependency graph.
    - Various shaping speedups.
    - Various fixes for crashes and hangs with malformed fonts.
    - Various fixes to the experimental raster, vector, and GPU libraries.
    - Various improvements to the HarfRust integration shaper.
    - The DirectWrite backend no longer uses the C++ runtime.
    - Various build, portability, and fuzzing fixes.
    - New API:
      +hb_set_intersects()
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 53aba2428c731d7be4a8568b057f76b1c0b599f2
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:34 2026 +0200

    expat: Update to version 2.8.4
    
    - Update from version 2.8.3 to 2.8.4
    - Update of rootfile
    - 4 CVE fixes
    - Changelog
    2.8.4
    Security fixes:
         #1321 #1331  CVE-2026-66046, CVE-2026-76641 -- Fix quadratic runtime from
                        "attribute isCdata lookups" that allowed denial of service
                        attacks through moderately sized crafted XML input
                        (CWE-407).
                        The vulnerability is closely related to past CVE-2026-45186
                        that was fixed with Expat 2.8.1.
                        Please note that a layer of compression around XML can
                        significantly reduce the minimum attack payload size.
                        Upstream CVSS 3.1 vector:
                        AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (CVSS score: 7.5)
                        (Note the "AV:N" for network/remote.)
               #1322  CVE-2026-76957 -- Protect custom encoding callbacks from
                        parser re-entry. The vulnerability is closely related to
                        past issues CVE-2026-50219, CVE-2026-56131 and
                        CVE-2026-56412 that were all fixed with Expat 2.8.2.
               #1326  CVE-2026-76956 -- Fix inverted getentropy() return handling
                        Allows for hash flooding denial of services in
                        configurations where getentropy is configured or detected
                        as the only high quality entropy extractor.
                        Upstream CVSS 3.1 vector:
                        AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (CVSS score: 5.9)
                        (Note the "AV:N" for network/remote.)
    Other changes:
         #1332 #1333  CMake: Only add `/source-charset:utf-8` when `/utf-8` is not
                        present
               #1315  lib: Resolve (currently unreachable) undefined behavior from
                        overshifting a signed int to the left
         #1325 #1334  lib: Support read-only hash table lookup with keys that are
                        not zero-terminated
               #1340  lib: Use a C99 bool for `ENTITY.open`
               #1319  Fix typo in comment
               #1320  Sync file headers
         #1328 #1329  Version info bumped from 13:3:12 (libexpat*.so.1.12.3)
                        to 13:4:12 (libexpat*.so.1.12.4); see https://verbump.de/
                        for what these numbers do
    Infrastructure:
         #1317 #1335  CI: Cover compilation and execution with Fil-C
               #1337  CI: Cover compilation and execution on riscv64
               #1338  CI: Cover compilation and execution with Clang-based MinGW
               #1339  CI: Cover compilation and execution on (big-endian) s390x
               #1316  CI: Run test suite with musl, also
               #1336  CI: Bump WASI SDK from 33 to 34
               #1345  CI: Bump Clang from 22 to 23
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 21dfdd857edaa3442840a565a01561151a5d40d2
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:28 2026 +0200

    core205: Ship elfutils
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit ad85790a62a4deb58d38fc7d5f6d88a1da38c287
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:33 2026 +0200

    elfutils: Update to version 0.196
    
    - Update from version 0.195 to 0.196
    - Update of rootfile
    - Changelog
    0.196
    debuginfod: The $DEBUGINFOD_TIMEOUT environment variable is now enforced
                when establishing a connection to a server.
    libdw: New functions dwarf_begin_type, dwarf_begin_elf_type and
           dwarf_get_type plus new enum Dwarf_Type.  Used to select between
           plain DWARF, split DWARF (.dwo/.dwp) and GNU LTO when opening a
           file.
           Added support for DWARF5 supplementary files (.debug_sup) and
           associated DW_FORM_ref_sup4/8 and DW_FORM_strp_sup forms.
           Added support for split DWARF debug data when contained in the
           same file as the skeleton.
    libdwelf: New functions dwelf_dwarf_debug_sup and dwelf_dwarf_debug_dwp
              for querying .debug_sup and .debug_dwp section data.
    libdwfl: Now correctly handles Linux kernel module sections that are
             not present in sysfs.
    libdwfl_stacktrace: New functions dwflst_arch_from_uname,
                        dwflst_arch_expected_frame_nregs,
                        dwflst_arch_sp_dwarf_reg and dwflst_arch_sp_perf_reg
                        providing per-architecture constants.  The
                        libdwfl_stacktrace interface is experimental and may
                        be subject to API/ABI changes.
    stackprof: New profiling tool for collecting systemwide stacktrace
               profiles.  Replaces the eu-stacktrace tool.  Requires
               a C++20 capable compiler.
    stacktrace: This experimental tool has been removed and replaced with
                eu-stackprof.
    srcfiles: Now handles CU names and files from split DWARF.
    strip: Fixed bug where a section's sh_link or sh_info reference could
           be missing from the debug file.
    version.h: New macro _ELFUTILS_THREAD_SAFE added to <elfutils/version.h>.
               Defined to 1 when the elfutils libraries are built with thread
               safety support enabled.  Otherwise it is left undefined.
               Thread safety support is experimental and is not yet officially
               supported.
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

commit 74ce1a45f5cb5b78df6cd5ee75a644e8bcc93e3e
Author: Adolf Belka <adolf.belka@ipfire.org>
Date:   Tue Sep 8 21:52:27 2026 +0200

    abseil-cpp: Update to version 20260817.0
    
    - Update from version 20260526.0 to 20260817.0
    - Update of rootfile
    - Chyangelog
    20260817.0
    What's New
        Added URL escaping utilities
        Many bug fixes and optimizations
    Breaking Changes
        absl::void_t is now deprecated; users should use C++17 std::void_t directly.
        Hashtable iterators returned from insert/emplace are now non-iterable (any prior
    	use of iteration was likely a bug).
    
    Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/rootfiles/common/abseil-cpp                 | 15 +++++----
 config/rootfiles/common/elfutils                   |  8 +++--
 config/rootfiles/common/expat                      | 20 +++++------
 config/rootfiles/common/harfbuzz                   | 14 ++++----
 config/rootfiles/common/libcap-ng                  |  4 +++
 config/rootfiles/common/libgcrypt                  |  2 +-
 config/rootfiles/common/meson                      | 15 +++++----
 config/rootfiles/common/openssl                    |  6 ++++
 config/rootfiles/common/protobuf                   | 39 ++++++++++++++++------
 .../{oldcore/185 => core/205}/filelists/elfutils   |  0
 .../{oldcore/106 => core/205}/filelists/iproute2   |  0
 .../{oldcore/131 => core/205}/filelists/libcap-ng  |  0
 .../{oldcore/105 => core/205}/filelists/libgcrypt  |  0
 .../{oldcore/100 => core/205}/filelists/openssl    |  0
 lfs/abseil-cpp                                     |  4 +--
 lfs/elfutils                                       |  4 +--
 lfs/expat                                          |  4 +--
 lfs/harfbuzz                                       |  4 +--
 lfs/iproute2                                       |  4 +--
 lfs/libcap-ng                                      |  4 +--
 lfs/libgcrypt                                      |  4 +--
 lfs/meson                                          |  4 +--
 lfs/openssl                                        |  4 +--
 lfs/protobuf                                       |  6 ++--
 24 files changed, 100 insertions(+), 65 deletions(-)
 copy config/rootfiles/{oldcore/185 => core/205}/filelists/elfutils (100%)
 copy config/rootfiles/{oldcore/106 => core/205}/filelists/iproute2 (100%)
 copy config/rootfiles/{oldcore/131 => core/205}/filelists/libcap-ng (100%)
 copy config/rootfiles/{oldcore/105 => core/205}/filelists/libgcrypt (100%)
 copy config/rootfiles/{oldcore/100 => core/205}/filelists/openssl (100%)

Difference in files:
diff --git a/config/rootfiles/common/abseil-cpp b/config/rootfiles/common/abseil-cpp
index e90e6cb6c..1da561133 100644
--- a/config/rootfiles/common/abseil-cpp
+++ b/config/rootfiles/common/abseil-cpp
@@ -8,6 +8,10 @@
 #usr/include/absl/base/CMakeFiles
 #usr/include/absl/base/CMakeFiles/base.dir
 #usr/include/absl/base/CMakeFiles/base.dir/internal
+#usr/include/absl/base/CMakeFiles/base_cpu_detect.dir
+#usr/include/absl/base/CMakeFiles/base_cpu_detect.dir/internal
+#usr/include/absl/base/CMakeFiles/hardening.dir
+#usr/include/absl/base/CMakeFiles/hardening.dir/internal
 #usr/include/absl/base/CMakeFiles/log_severity.dir
 #usr/include/absl/base/CMakeFiles/malloc_internal.dir
 #usr/include/absl/base/CMakeFiles/malloc_internal.dir/internal
@@ -34,6 +38,7 @@
 #usr/include/absl/base/internal
 #usr/include/absl/base/internal/atomic_hook.h
 #usr/include/absl/base/internal/atomic_hook_test_helper.h
+#usr/include/absl/base/internal/cpu_detect.h
 #usr/include/absl/base/internal/cycleclock.h
 #usr/include/absl/base/internal/cycleclock_config.h
 #usr/include/absl/base/internal/direct_mmap.h
@@ -144,13 +149,10 @@
 #usr/include/absl/crc/CMakeFiles/crc32c.dir/internal
 #usr/include/absl/crc/CMakeFiles/crc_cord_state.dir
 #usr/include/absl/crc/CMakeFiles/crc_cord_state.dir/internal
-#usr/include/absl/crc/CMakeFiles/crc_cpu_detect.dir
-#usr/include/absl/crc/CMakeFiles/crc_cpu_detect.dir/internal
 #usr/include/absl/crc/CMakeFiles/crc_internal.dir
 #usr/include/absl/crc/CMakeFiles/crc_internal.dir/internal
 #usr/include/absl/crc/crc32c.h
 #usr/include/absl/crc/internal
-#usr/include/absl/crc/internal/cpu_detect.h
 #usr/include/absl/crc/internal/crc.h
 #usr/include/absl/crc/internal/crc32_x86_arm_combined_simd.h
 #usr/include/absl/crc/internal/crc32c.h
@@ -250,6 +252,7 @@
 #usr/include/absl/functional
 #usr/include/absl/functional/CMakeFiles
 #usr/include/absl/functional/any_invocable.h
+#usr/include/absl/functional/any_invocable_test.h
 #usr/include/absl/functional/bind_back.h
 #usr/include/absl/functional/bind_front.h
 #usr/include/absl/functional/function_ref.h
@@ -527,7 +530,6 @@
 #usr/include/absl/strings/internal/ostringstream.h
 #usr/include/absl/strings/internal/pow10_helper.h
 #usr/include/absl/strings/internal/resize_uninitialized.h
-#usr/include/absl/strings/internal/stl_type_traits.h
 #usr/include/absl/strings/internal/str_format
 #usr/include/absl/strings/internal/str_format/arg.h
 #usr/include/absl/strings/internal/str_format/bind.h
@@ -641,6 +643,7 @@
 #usr/lib/cmake/absl/abslTargets-noconfig.cmake
 #usr/lib/cmake/absl/abslTargets.cmake
 #usr/lib/libabsl_base.a
+#usr/lib/libabsl_base_cpu_detect.a
 #usr/lib/libabsl_city.a
 #usr/lib/libabsl_civil_time.a
 #usr/lib/libabsl_clock_interface.a
@@ -652,7 +655,6 @@
 #usr/lib/libabsl_cordz_sample_token.a
 #usr/lib/libabsl_crc32c.a
 #usr/lib/libabsl_crc_cord_state.a
-#usr/lib/libabsl_crc_cpu_detect.a
 #usr/lib/libabsl_crc_internal.a
 #usr/lib/libabsl_debugging_internal.a
 #usr/lib/libabsl_decode_rust_punycode.a
@@ -675,6 +677,7 @@
 #usr/lib/libabsl_flags_usage_internal.a
 #usr/lib/libabsl_generic_printer_internal.a
 #usr/lib/libabsl_graphcycles_internal.a
+#usr/lib/libabsl_hardening.a
 #usr/lib/libabsl_hash.a
 #usr/lib/libabsl_hashtable_profiler.a
 #usr/lib/libabsl_hashtablez_sampler.a
@@ -746,6 +749,7 @@
 #usr/lib/pkgconfig/absl_bad_optional_access.pc
 #usr/lib/pkgconfig/absl_bad_variant_access.pc
 #usr/lib/pkgconfig/absl_base.pc
+#usr/lib/pkgconfig/absl_base_cpu_detect.pc
 #usr/lib/pkgconfig/absl_base_internal.pc
 #usr/lib/pkgconfig/absl_bind_back.pc
 #usr/lib/pkgconfig/absl_bind_front.pc
@@ -779,7 +783,6 @@
 #usr/lib/pkgconfig/absl_core_headers.pc
 #usr/lib/pkgconfig/absl_crc32c.pc
 #usr/lib/pkgconfig/absl_crc_cord_state.pc
-#usr/lib/pkgconfig/absl_crc_cpu_detect.pc
 #usr/lib/pkgconfig/absl_crc_internal.pc
 #usr/lib/pkgconfig/absl_debugging.pc
 #usr/lib/pkgconfig/absl_debugging_internal.pc
diff --git a/config/rootfiles/common/elfutils b/config/rootfiles/common/elfutils
index 14f00d035..7db569486 100644
--- a/config/rootfiles/common/elfutils
+++ b/config/rootfiles/common/elfutils
@@ -29,15 +29,15 @@ usr/include/elfutils/libdwfl_stacktrace.h
 #usr/include/gelf.h
 #usr/include/libelf.h
 #usr/include/nlist.h
-usr/lib/libasm-0.195.so
+usr/lib/libasm-0.196.so
 #usr/lib/libasm.a
 #usr/lib/libasm.so
 usr/lib/libasm.so.1
-usr/lib/libdw-0.195.so
+usr/lib/libdw-0.196.so
 #usr/lib/libdw.a
 #usr/lib/libdw.so
 usr/lib/libdw.so.1
-usr/lib/libelf-0.195.so
+usr/lib/libelf-0.196.so
 #usr/lib/libelf.a
 #usr/lib/libelf.so
 usr/lib/libelf.so.1
@@ -48,12 +48,14 @@ usr/lib/libelf.so.1
 #usr/share/locale/en@quot/LC_MESSAGES/elfutils.mo
 #usr/share/locale/es/LC_MESSAGES/elfutils.mo
 #usr/share/locale/ja/LC_MESSAGES/elfutils.mo
+#usr/share/locale/ka/LC_MESSAGES/elfutils.mo
 #usr/share/locale/pl/LC_MESSAGES/elfutils.mo
 #usr/share/locale/uk/LC_MESSAGES/elfutils.mo
 #usr/share/man/man1/debuginfod-find.1
 #usr/share/man/man1/eu-elfclassify.1
 #usr/share/man/man1/eu-readelf.1
 #usr/share/man/man1/eu-srcfiles.1
+#usr/share/man/man1/eu-stackprof.1
 #usr/share/man/man3/debuginfod_add_http_header.3
 #usr/share/man/man3/debuginfod_begin.3
 #usr/share/man/man3/debuginfod_end.3
diff --git a/config/rootfiles/common/expat b/config/rootfiles/common/expat
index 298882d6e..575cbe1cb 100644
--- a/config/rootfiles/common/expat
+++ b/config/rootfiles/common/expat
@@ -2,21 +2,21 @@
 #usr/include/expat.h
 #usr/include/expat_config.h
 #usr/include/expat_external.h
-#usr/lib/cmake/expat-2.8.3
-#usr/lib/cmake/expat-2.8.3/expat-config-version.cmake
-#usr/lib/cmake/expat-2.8.3/expat-config.cmake
-#usr/lib/cmake/expat-2.8.3/expat-noconfig.cmake
-#usr/lib/cmake/expat-2.8.3/expat.cmake
+#usr/lib/cmake/expat-2.8.4
+#usr/lib/cmake/expat-2.8.4/expat-config-version.cmake
+#usr/lib/cmake/expat-2.8.4/expat-config.cmake
+#usr/lib/cmake/expat-2.8.4/expat-noconfig.cmake
+#usr/lib/cmake/expat-2.8.4/expat.cmake
 #usr/lib/libexpat.la
 #usr/lib/libexpat.so
 usr/lib/libexpat.so.1
-usr/lib/libexpat.so.1.12.3
+usr/lib/libexpat.so.1.12.4
 #usr/lib/pkgconfig/expat.pc
 #usr/share/doc/expat
-#usr/share/doc/expat-2.8.3
-#usr/share/doc/expat-2.8.3/ok.min.css
-#usr/share/doc/expat-2.8.3/reference.html
-#usr/share/doc/expat-2.8.3/style.css
+#usr/share/doc/expat-2.8.4
+#usr/share/doc/expat-2.8.4/ok.min.css
+#usr/share/doc/expat-2.8.4/reference.html
+#usr/share/doc/expat-2.8.4/style.css
 #usr/share/doc/expat/AUTHORS
 #usr/share/doc/expat/changelog
 #usr/share/man/man1/xmlwf.1
diff --git a/config/rootfiles/common/harfbuzz b/config/rootfiles/common/harfbuzz
index abba2c36d..67ab2fe3e 100644
--- a/config/rootfiles/common/harfbuzz
+++ b/config/rootfiles/common/harfbuzz
@@ -54,25 +54,25 @@ usr/include/harfbuzz/hb-script-list.h
 #usr/lib/cmake/harfbuzz/harfbuzz-config.cmake
 #usr/lib/libharfbuzz-cairo.so
 usr/lib/libharfbuzz-cairo.so.0
-usr/lib/libharfbuzz-cairo.so.0.61430.0
+usr/lib/libharfbuzz-cairo.so.0.61440.0
 #usr/lib/libharfbuzz-gobject.so
 usr/lib/libharfbuzz-gobject.so.0
-usr/lib/libharfbuzz-gobject.so.0.61430.0
+usr/lib/libharfbuzz-gobject.so.0.61440.0
 #usr/lib/libharfbuzz-gpu.so
 usr/lib/libharfbuzz-gpu.so.0
-usr/lib/libharfbuzz-gpu.so.0.61430.0
+usr/lib/libharfbuzz-gpu.so.0.61440.0
 #usr/lib/libharfbuzz-raster.so
 usr/lib/libharfbuzz-raster.so.0
-usr/lib/libharfbuzz-raster.so.0.61430.0
+usr/lib/libharfbuzz-raster.so.0.61440.0
 #usr/lib/libharfbuzz-subset.so
 usr/lib/libharfbuzz-subset.so.0
-usr/lib/libharfbuzz-subset.so.0.61430.0
+usr/lib/libharfbuzz-subset.so.0.61440.0
 #usr/lib/libharfbuzz-vector.so
 usr/lib/libharfbuzz-vector.so.0
-usr/lib/libharfbuzz-vector.so.0.61430.0
+usr/lib/libharfbuzz-vector.so.0.61440.0
 #usr/lib/libharfbuzz.so
 usr/lib/libharfbuzz.so.0
-usr/lib/libharfbuzz.so.0.61430.0
+usr/lib/libharfbuzz.so.0.61440.0
 #usr/lib/pkgconfig/harfbuzz-cairo.pc
 #usr/lib/pkgconfig/harfbuzz-gobject.pc
 #usr/lib/pkgconfig/harfbuzz-gpu.pc
diff --git a/config/rootfiles/common/libcap-ng b/config/rootfiles/common/libcap-ng
index 8677e42ab..cbd0c7b22 100644
--- a/config/rootfiles/common/libcap-ng
+++ b/config/rootfiles/common/libcap-ng
@@ -14,7 +14,11 @@ usr/lib/libdrop_ambient.so.0.0.0
 #usr/share/aclocal/cap-ng.m4
 #usr/share/bash-completion
 #usr/share/bash-completion/completions
+#usr/share/bash-completion/completions/cap-audit
+#usr/share/bash-completion/completions/filecap
 #usr/share/bash-completion/completions/libcap-ng.bash_completion
+#usr/share/bash-completion/completions/netcap
+#usr/share/bash-completion/completions/pscap
 #usr/share/man/man3/capng_apply.3
 #usr/share/man/man3/capng_apply_caps_fd.3
 #usr/share/man/man3/capng_capability_to_name.3
diff --git a/config/rootfiles/common/libgcrypt b/config/rootfiles/common/libgcrypt
index 5dc013833..1825a29bf 100644
--- a/config/rootfiles/common/libgcrypt
+++ b/config/rootfiles/common/libgcrypt
@@ -5,7 +5,7 @@
 #usr/lib/libgcrypt.la
 #usr/lib/libgcrypt.so
 usr/lib/libgcrypt.so.20
-usr/lib/libgcrypt.so.20.7.2
+usr/lib/libgcrypt.so.20.8.8
 #usr/lib/pkgconfig/libgcrypt.pc
 #usr/share/aclocal/libgcrypt.m4
 #usr/share/info/gcrypt.info
diff --git a/config/rootfiles/common/meson b/config/rootfiles/common/meson
index c3d7221ee..a3d885285 100644
--- a/config/rootfiles/common/meson
+++ b/config/rootfiles/common/meson
@@ -1,11 +1,11 @@
 #usr/bin/meson
-#usr/lib/python3.10/site-packages/meson-1.11.2-py3.10.egg-info
-#usr/lib/python3.10/site-packages/meson-1.11.2-py3.10.egg-info/PKG-INFO
-#usr/lib/python3.10/site-packages/meson-1.11.2-py3.10.egg-info/SOURCES.txt
-#usr/lib/python3.10/site-packages/meson-1.11.2-py3.10.egg-info/dependency_links.txt
-#usr/lib/python3.10/site-packages/meson-1.11.2-py3.10.egg-info/entry_points.txt
-#usr/lib/python3.10/site-packages/meson-1.11.2-py3.10.egg-info/requires.txt
-#usr/lib/python3.10/site-packages/meson-1.11.2-py3.10.egg-info/top_level.txt
+#usr/lib/python3.10/site-packages/meson-1.12.0-py3.10.egg-info
+#usr/lib/python3.10/site-packages/meson-1.12.0-py3.10.egg-info/PKG-INFO
+#usr/lib/python3.10/site-packages/meson-1.12.0-py3.10.egg-info/SOURCES.txt
+#usr/lib/python3.10/site-packages/meson-1.12.0-py3.10.egg-info/dependency_links.txt
+#usr/lib/python3.10/site-packages/meson-1.12.0-py3.10.egg-info/entry_points.txt
+#usr/lib/python3.10/site-packages/meson-1.12.0-py3.10.egg-info/requires.txt
+#usr/lib/python3.10/site-packages/meson-1.12.0-py3.10.egg-info/top_level.txt
 #usr/lib/python3.10/site-packages/mesonbuild
 #usr/lib/python3.10/site-packages/mesonbuild/__init__.py
 #usr/lib/python3.10/site-packages/mesonbuild/_pathlib.py
@@ -128,6 +128,7 @@
 #usr/lib/python3.10/site-packages/mesonbuild/interpreter
 #usr/lib/python3.10/site-packages/mesonbuild/interpreter/__init__.py
 #usr/lib/python3.10/site-packages/mesonbuild/interpreter/compiler.py
+#usr/lib/python3.10/site-packages/mesonbuild/interpreter/decorators.py
 #usr/lib/python3.10/site-packages/mesonbuild/interpreter/dependencyfallbacks.py
 #usr/lib/python3.10/site-packages/mesonbuild/interpreter/interpreter.py
 #usr/lib/python3.10/site-packages/mesonbuild/interpreter/interpreterobjects.py
diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl
index 9b07e091d..cda9b5571 100644
--- a/config/rootfiles/common/openssl
+++ b/config/rootfiles/common/openssl
@@ -503,6 +503,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/HMAC.html
 #usr/share/doc/openssl/html/man3/MD5.html
 #usr/share/doc/openssl/html/man3/MDC2_Init.html
+#usr/share/doc/openssl/html/man3/NAME_CONSTRAINTS_check.html
 #usr/share/doc/openssl/html/man3/NCONF_new_ex.html
 #usr/share/doc/openssl/html/man3/OBJ_nid2obj.html
 #usr/share/doc/openssl/html/man3/OCSP_REQUEST_new.html
@@ -515,6 +516,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/OPENSSL_FILE.html
 #usr/share/doc/openssl/html/man3/OPENSSL_LH_COMPFUNC.html
 #usr/share/doc/openssl/html/man3/OPENSSL_LH_stats.html
+#usr/share/doc/openssl/html/man3/OPENSSL_armcap.html
 #usr/share/doc/openssl/html/man3/OPENSSL_config.html
 #usr/share/doc/openssl/html/man3/OPENSSL_fork_prepare.html
 #usr/share/doc/openssl/html/man3/OPENSSL_gmtime.html
@@ -3620,6 +3622,8 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/MDC2_Final.3ossl
 #usr/share/man/man3/MDC2_Init.3ossl
 #usr/share/man/man3/MDC2_Update.3ossl
+#usr/share/man/man3/NAME_CONSTRAINTS_check.3ossl
+#usr/share/man/man3/NAME_CONSTRAINTS_check_CN.3ossl
 #usr/share/man/man3/NAME_CONSTRAINTS_free.3ossl
 #usr/share/man/man3/NAME_CONSTRAINTS_new.3ossl
 #usr/share/man/man3/NAMING_AUTHORITY.3ossl
@@ -3790,6 +3794,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_VERSION_TEXT.3ossl
 #usr/share/man/man3/OPENSSL_aligned_alloc.3ossl
 #usr/share/man/man3/OPENSSL_aligned_alloc_array.3ossl
+#usr/share/man/man3/OPENSSL_armcap.3ossl
 #usr/share/man/man3/OPENSSL_atexit.3ossl
 #usr/share/man/man3/OPENSSL_buf2hexstr.3ossl
 #usr/share/man/man3/OPENSSL_buf2hexstr_ex.3ossl
@@ -5676,6 +5681,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT.3ossl
 #usr/share/man/man3/SSL_VALUE_EVENT_HANDLING_MODE_INHERIT.3ossl
 #usr/share/man/man3/SSL_VALUE_QUIC_IDLE_TIMEOUT.3ossl
+#usr/share/man/man3/SSL_VALUE_QUIC_MAX_PENDING_CONNS.3ossl
 #usr/share/man/man3/SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL.3ossl
 #usr/share/man/man3/SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL.3ossl
 #usr/share/man/man3/SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL.3ossl
diff --git a/config/rootfiles/common/protobuf b/config/rootfiles/common/protobuf
index 04491f21f..746525692 100644
--- a/config/rootfiles/common/protobuf
+++ b/config/rootfiles/common/protobuf
@@ -1,11 +1,11 @@
 #usr/bin/protoc
-#usr/bin/protoc-35.1.0
+#usr/bin/protoc-36.1.0
 #usr/bin/protoc-gen-upb
-#usr/bin/protoc-gen-upb-35.1.0
+#usr/bin/protoc-gen-upb-36.1.0
 #usr/bin/protoc-gen-upb_minitable
-#usr/bin/protoc-gen-upb_minitable-35.1.0
+#usr/bin/protoc-gen-upb_minitable-36.1.0
 #usr/bin/protoc-gen-upbdefs
-#usr/bin/protoc-gen-upbdefs-35.1.0
+#usr/bin/protoc-gen-upbdefs-36.1.0
 #usr/include/google
 #usr/include/google/protobuf
 #usr/include/google/protobuf/any.h
@@ -20,6 +20,7 @@
 #usr/include/google/protobuf/arenastring.h
 #usr/include/google/protobuf/arenaz_sampler.h
 #usr/include/google/protobuf/c_sharp_features.proto
+#usr/include/google/protobuf/class_data.h
 #usr/include/google/protobuf/compiler
 #usr/include/google/protobuf/compiler/code_generator.h
 #usr/include/google/protobuf/compiler/code_generator_lite.h
@@ -59,11 +60,15 @@
 #usr/include/google/protobuf/cpp_edition_defaults.h
 #usr/include/google/protobuf/cpp_features.pb.h
 #usr/include/google/protobuf/cpp_features.proto
+#usr/include/google/protobuf/cpp_file_options.pb.h
+#usr/include/google/protobuf/cpp_file_options.proto
+#usr/include/google/protobuf/cpp_options.proto
 #usr/include/google/protobuf/descriptor.h
 #usr/include/google/protobuf/descriptor.pb.h
 #usr/include/google/protobuf/descriptor.proto
 #usr/include/google/protobuf/descriptor.upb.h
 #usr/include/google/protobuf/descriptor.upb_minitable.h
+#usr/include/google/protobuf/descriptor_builder.h
 #usr/include/google/protobuf/descriptor_database.h
 #usr/include/google/protobuf/descriptor_legacy.h
 #usr/include/google/protobuf/descriptor_lite.h
@@ -122,6 +127,11 @@
 #usr/include/google/protobuf/json/internal/writer.h
 #usr/include/google/protobuf/json/internal/zero_copy_buffered_stream.h
 #usr/include/google/protobuf/json/json.h
+#usr/include/google/protobuf/json_enumvalue_options.pb.h
+#usr/include/google/protobuf/json_enumvalue_options.proto
+#usr/include/google/protobuf/json_enumvalue_options.upb.h
+#usr/include/google/protobuf/json_enumvalue_options.upb_minitable.h
+#usr/include/google/protobuf/json_options.proto
 #usr/include/google/protobuf/map.h
 #usr/include/google/protobuf/map_entry.h
 #usr/include/google/protobuf/map_field.h
@@ -129,9 +139,11 @@
 #usr/include/google/protobuf/map_type_handler.h
 #usr/include/google/protobuf/message.h
 #usr/include/google/protobuf/message_lite.h
+#usr/include/google/protobuf/message_traits.h
 #usr/include/google/protobuf/metadata.h
 #usr/include/google/protobuf/metadata_lite.h
 #usr/include/google/protobuf/micro_string.h
+#usr/include/google/protobuf/naming_style.h
 #usr/include/google/protobuf/os_macros_restore.inc
 #usr/include/google/protobuf/os_macros_undef.inc
 #usr/include/google/protobuf/parse_context.h
@@ -164,6 +176,7 @@
 #usr/include/google/protobuf/stubs/platform_macros.h
 #usr/include/google/protobuf/stubs/port.h
 #usr/include/google/protobuf/stubs/status_macros.h
+#usr/include/google/protobuf/symbol.h
 #usr/include/google/protobuf/symbol_checker.h
 #usr/include/google/protobuf/text_format.h
 #usr/include/google/protobuf/thread_safe_arena.h
@@ -171,6 +184,7 @@
 #usr/include/google/protobuf/timestamp.proto
 #usr/include/google/protobuf/type.pb.h
 #usr/include/google/protobuf/type.proto
+#usr/include/google/protobuf/type_id.h
 #usr/include/google/protobuf/unknown_field_set.h
 #usr/include/google/protobuf/util
 #usr/include/google/protobuf/util/delimited_message_util.h
@@ -210,7 +224,6 @@
 #usr/include/upb/lex
 #usr/include/upb/lex/atoi.h
 #usr/include/upb/lex/round_trip.h
-#usr/include/upb/lex/strtod.h
 #usr/include/upb/lex/unicode.h
 #usr/include/upb/mem
 #usr/include/upb/mem/alloc.h
@@ -223,6 +236,7 @@
 #usr/include/upb/message/array.h
 #usr/include/upb/message/compare.h
 #usr/include/upb/message/compat.h
+#usr/include/upb/message/convert.h
 #usr/include/upb/message/copy.h
 #usr/include/upb/message/internal
 #usr/include/upb/message/internal/accessors.h
@@ -239,6 +253,7 @@
 #usr/include/upb/message/map_gencode_util.h
 #usr/include/upb/message/merge.h
 #usr/include/upb/message/message.h
+#usr/include/upb/message/unknown_fields.h
 #usr/include/upb/message/value.h
 #usr/include/upb/mini_descriptor
 #usr/include/upb/mini_descriptor/build_enum.h
@@ -305,6 +320,7 @@
 #usr/include/upb/reflection/internal/oneof_def.h
 #usr/include/upb/reflection/internal/service_def.h
 #usr/include/upb/reflection/internal/upb_edition_defaults.h
+#usr/include/upb/reflection/json_enumvalue_options_bootstrap.h
 #usr/include/upb/reflection/message.h
 #usr/include/upb/reflection/message.hpp
 #usr/include/upb/reflection/message_def.h
@@ -331,7 +347,10 @@
 #usr/include/upb/wire/encode.h
 #usr/include/upb/wire/eps_copy_input_stream.h
 #usr/include/upb/wire/internal
+#usr/include/upb/wire/internal/back_alloc.h
+#usr/include/upb/wire/internal/constants.h
 #usr/include/upb/wire/internal/decoder.h
+#usr/include/upb/wire/internal/encoder.h
 #usr/include/upb/wire/internal/eps_copy_input_stream.h
 #usr/include/upb/wire/internal/reader.h
 #usr/include/upb/wire/reader.h
@@ -352,16 +371,16 @@
 #usr/lib/cmake/utf8_range/utf8_range-targets-release.cmake
 #usr/lib/cmake/utf8_range/utf8_range-targets.cmake
 #usr/lib/libprotobuf-lite.so
-usr/lib/libprotobuf-lite.so.35.1.0
+usr/lib/libprotobuf-lite.so.36.1.0
 #usr/lib/libprotobuf.so
-usr/lib/libprotobuf.so.35.1.0
+usr/lib/libprotobuf.so.36.1.0
 #usr/lib/libprotoc.so
-usr/lib/libprotoc.so.35.1.0
+usr/lib/libprotoc.so.36.1.0
 #usr/lib/libupb.a
 usr/lib/libutf8_range.so
-usr/lib/libutf8_range.so.35.1.0
+usr/lib/libutf8_range.so.36.1.0
 usr/lib/libutf8_validity.so
-usr/lib/libutf8_validity.so.35.1.0
+usr/lib/libutf8_validity.so.36.1.0
 #usr/lib/pkgconfig/protobuf-lite.pc
 #usr/lib/pkgconfig/protobuf.pc
 #usr/lib/pkgconfig/upb.pc
diff --git a/config/rootfiles/core/205/filelists/elfutils b/config/rootfiles/core/205/filelists/elfutils
new file mode 120000
index 000000000..8367974bb
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/elfutils
@@ -0,0 +1 @@
+../../../common/elfutils
\ No newline at end of file
diff --git a/config/rootfiles/core/205/filelists/iproute2 b/config/rootfiles/core/205/filelists/iproute2
new file mode 120000
index 000000000..05f0f71fb
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/iproute2
@@ -0,0 +1 @@
+../../../common/iproute2
\ No newline at end of file
diff --git a/config/rootfiles/core/205/filelists/libcap-ng b/config/rootfiles/core/205/filelists/libcap-ng
new file mode 120000
index 000000000..f58b21141
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/libcap-ng
@@ -0,0 +1 @@
+../../../common/libcap-ng
\ No newline at end of file
diff --git a/config/rootfiles/core/205/filelists/libgcrypt b/config/rootfiles/core/205/filelists/libgcrypt
new file mode 120000
index 000000000..2df12a20e
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/libgcrypt
@@ -0,0 +1 @@
+../../../common/libgcrypt
\ No newline at end of file
diff --git a/config/rootfiles/core/205/filelists/openssl b/config/rootfiles/core/205/filelists/openssl
new file mode 120000
index 000000000..e011a9266
--- /dev/null
+++ b/config/rootfiles/core/205/filelists/openssl
@@ -0,0 +1 @@
+../../../common/openssl
\ No newline at end of file
diff --git a/lfs/abseil-cpp b/lfs/abseil-cpp
index c13db1f82..709f84728 100644
--- a/lfs/abseil-cpp
+++ b/lfs/abseil-cpp
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 20260526.0
+VER        = 20260817.0
 
 THISAPP    = abseil-cpp-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = f12ee822019a10749611cc5a3f044c74f83a4bcc7c51322444011ff60a090254c9b15896276c728b374479e02e45eeca91c1d73f8838a26e337d856a197d2006
+$(DL_FILE)_BLAKE2 = 90a2dba1f88ef2ba16fe7f8ea19b5ae8895edb52b241baba987f246b9c5ef12b9012ee6c085aa89f4b86d1809b5ee74fc43aa846a9b075d4fb0b97ac2d3bbcd2
 
 install : $(TARGET)
 
diff --git a/lfs/elfutils b/lfs/elfutils
index bda9bf829..25038fad8 100644
--- a/lfs/elfutils
+++ b/lfs/elfutils
@@ -26,7 +26,7 @@ include Config
 
 SUMMARY    = Higher-level library to access ELF files
 
-VER        = 0.195
+VER        = 0.196
 
 THISAPP    = elfutils-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -42,7 +42,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 7ad84f87ba24a0edd3d1885a232e63f454509f3d229952d2c9b85dd76baa6b150e022bbce70fc3e89b57f5c606ed3862178c693e3638bf22b891c5798e7c624a
+$(DL_FILE)_BLAKE2 = 13e5aa27b839b02962a45cae1b9b603e7e95d428a16f9bdf15d04201529a9c714a53701cacc65c65fa32082d121a7e196bd242739d4cfd1f40a69efd0f1252f6
 
 install : $(TARGET)
 
diff --git a/lfs/expat b/lfs/expat
index 2fb5e7a72..512cb5a76 100644
--- a/lfs/expat
+++ b/lfs/expat
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.8.3
+VER        = 2.8.4
 
 THISAPP    = expat-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 4dc1173f3458320278b6776aa9342aec4eec3e2e5d8806e52dec59b9a40d5fdad5b8930708bace06a5c9a33fd7451df67c5c822954fa3d7f763babab62989390
+$(DL_FILE)_BLAKE2 = bec06d3c3179115692edb5e9366412361abae5355b131a005ef91aaa041bf4ebf74a86cc2fac29c44730a07cba6fbda988a6bfdafafc9eeba25a00fb98e43d24
 
 install : $(TARGET)
 
diff --git a/lfs/harfbuzz b/lfs/harfbuzz
index e2de3e475..115601310 100644
--- a/lfs/harfbuzz
+++ b/lfs/harfbuzz
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 14.3.0
+VER        = 14.4.0
 
 THISAPP    = harfbuzz-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = e4cce203054d98bae061f7baeee2a13f0e71138601f355d8e149296df6ac04f02edfa3bdf14daee2c5a723024caac28c677c09089061f9bb7dc3d179ca8a3e38
+$(DL_FILE)_BLAKE2 = bca47aa5bc12e865529c031d34559978bc4d098f9e09a586e21c6631535a49f7b6c0c217bb03952e141df3a083465d2a811c27a9d136d0ae23e150d9a75ae9bb
 
 install : $(TARGET)
 
diff --git a/lfs/iproute2 b/lfs/iproute2
index 01682c576..c0881fc28 100644
--- a/lfs/iproute2
+++ b/lfs/iproute2
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 7.0.0
+VER        = 7.2.0
 #          https://mirrors.edge.kernel.org/pub/linux/utils/net/iproute2/
 
 THISAPP    = iproute2-$(VER)
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE)             = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 1edec3088a16657ee85c1799bf911c6cd75a359efc75fc23ac922474b1e10e9410454d6e6930b58ebe047a8b5fa4f522e9fb7f53a4d9a4e3b84b8979c5aaa926
+$(DL_FILE)_BLAKE2 = e03cb92aa6c1f092b144614a44b013b91573099a08f32a25b3fa894470d5940fd7737a5bb0add58c1227ad53a4db159574f4fcded128d2ef219aa55a213bc6c7
 
 install : $(TARGET)
 
diff --git a/lfs/libcap-ng b/lfs/libcap-ng
index 85b2dda85..f08ad5ab9 100644
--- a/lfs/libcap-ng
+++ b/lfs/libcap-ng
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 0.9.3
+VER        = 0.9.5
 
 THISAPP    = libcap-ng-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 8050f69c91a8c5214d718d3ad750cf50db25690b9b8d59f37db32d33d5a0fe864afe8064ca4261f27f49f65064926c816a627a9c1c7a28e268a1a459409c59d8
+$(DL_FILE)_BLAKE2 = ddfe7b6975747963a2eb53485481c55f5638a06f119260e34619336445321d41b1531e4b78593aab9267a463e08641eb666f58ca6dc19fabf776995a4579e072
 
 install : $(TARGET)
 
diff --git a/lfs/libgcrypt b/lfs/libgcrypt
index 75ef9e8ff..f574c63db 100644
--- a/lfs/libgcrypt
+++ b/lfs/libgcrypt
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.12.2
+VER        = 1.12.3
 
 THISAPP    = libgcrypt-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = f52a10acdbf56a5adc927e22508a30d131a001e8f559d55c72d4ccfea4a514ef7983ab3f985af798c06a9c188639f21c54f1cc0ec6cba968172ddc6bd21ae0bd
+$(DL_FILE)_BLAKE2 = 52043c1defdbaf3ed0618bfbac13f4186dd28a4b2507a93bc24f08a7b2e66bb77014ff875801a3e39fcfbc905224f6ff1bcee43dcd53c555c32940305cfa92fe
 
 install : $(TARGET)
 
diff --git a/lfs/meson b/lfs/meson
index 3d0bf7fad..621b0090a 100644
--- a/lfs/meson
+++ b/lfs/meson
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.11.2
+VER        = 1.12.0
 
 THISAPP    = meson-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = c4ad77fe543b555d23f511dd2de43f6ee259384b6a753ecfe6142793fc0a9d7bc3cdd2d1e48d2b8dae35b96870e55c5d33df40c4b0284ea1bedef5f76b3a0214
+$(DL_FILE)_BLAKE2 = 41d06e300bd549958179e81c0ba3c494912652f8851ef34214de05db42e32fe793cd42f09ef08a8f44e4340649508ed9dc5071daba9dda81df0efa9669022251
 
 install : $(TARGET)
 
diff --git a/lfs/openssl b/lfs/openssl
index ef2e5891c..3eb2c85b5 100644
--- a/lfs/openssl
+++ b/lfs/openssl
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.6.3
+VER        = 3.6.4
 
 THISAPP    = openssl-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -72,7 +72,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 12dcbd977c3ccbeefd0310c23a8398d91395896b0d23e3e630d1318e96d650ee7dadd91c8ea1876458076b2d19d1fa72c70ae76669ce97d315aa813a0b826745
+$(DL_FILE)_BLAKE2 = 93d5fcd284a52963b476f98e9915359a1025a9487cb2d15d7437e9b9a8058050ae249f0b76b5627f589036cecda62c69aebfab6c8be2ddcf82ae7e3a6ff87804
 
 install : $(TARGET)
 
diff --git a/lfs/protobuf b/lfs/protobuf
index 6b510de34..2dde650a9 100644
--- a/lfs/protobuf
+++ b/lfs/protobuf
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2025  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 35.1
+VER        = 36.1
 
 THISAPP    = protobuf-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = d18d5c73537c0c08a729ebc91039d77a6e939c17f41c2a73c14cd165eb10113758e0dee812482045c19d34a1e839f6a316801ca367d971d43d13cb4403a27997
+$(DL_FILE)_BLAKE2 = ba7311ba4398d050b46ef9be5f622e93d5a6d6f58c6aafa55c038468ed03d44bffef94fb9a7381b0d7b87faad08295ea858d8a41102bc19796e7105f1c1ea366
 
 install : $(TARGET)
 


hooks/post-receive
--
IPFire 2.x development tree


                 reply	other threads:[~2026-09-08 20:14 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4hfZsH2Ff9z2xS7@people01.haj.ipfire.org \
    --to=git@ipfire.org \
    --cc=ipfire-scm@lists.ipfire.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox