From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4hpWCt18rtz2xfT for ; Mon, 21 Sep 2026 17:57:46 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1 raw public key) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "YR2" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4hpWCt0p35z2xLl for ; Mon, 21 Sep 2026 17:57:46 +0000 (UTC) Received: from people01.haj.ipfire.org (people01.haj.ipfire.org [172.28.1.161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bit raw public key) server-digest SHA256 client-signature ECDSA (secp384r1) client-digest SHA384) (Client CN "people01.haj.ipfire.org", Issuer "YE1" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4hpWCl4N57z7R for ; Mon, 21 Sep 2026 17:57:39 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1790013459; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=P5BcssBx4alQIvX8TpUpI6dDj4izN/NbOeZHQRcUHZ0=; b=zI909LcaTqJsRpTBNFQ+P2qHxVIxkN+wDhlXbU0mAKBuTXMJiTPeWkEUWq8paSW0ys3blG baYmfoAa/aJ4PsCg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1790013459; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=P5BcssBx4alQIvX8TpUpI6dDj4izN/NbOeZHQRcUHZ0=; b=Ex7IfP1Dg+NGnMr4YxKfEm0wglzHLFasVcJIMEJYU8PJekCoFAIGoiL1UMy45mYEfQ3al4 o4DdaD+kMNpvaaGr2xitZwcpdSUfFoTtK1c334RjeOvRVlfPEjXZHAcTtoJs0neF11RPel RqHlmGr99hz/pj998QW/Lv+pQn4wLfgDu4+0OZ26Fvr8azCceqYXtPujfZ0v0QYKWmNHWl Cv2OcRDFLVDBitCv+AW9u1DKwTL6rC0CCHm6iTZrqZvIlaKZ2Vk8fa1x8+I9rCKGiJOW0p JP/fTx+OnqQU/kGjQoVzD4/qkuPYvt2taJZaYJ0o0FAWLpSFZ0LVAbaL2E2bhw== Received: by people01.haj.ipfire.org (Postfix, from userid 1000) id 4hpWCl133hz2xdl; Mon, 21 Sep 2026 17:57:39 +0000 (UTC) To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, next, updated. d37e21502c70e7644fb797a7828c27adc4a0d95e X-Git-Refname: refs/heads/next X-Git-Reftype: branch X-Git-Oldrev: 95e6cc2c652c9df0b2f9096f862602224bc52447 X-Git-Newrev: d37e21502c70e7644fb797a7828c27adc4a0d95e Message-Id: <4hpWCl133hz2xdl@people01.haj.ipfire.org> Date: Mon, 21 Sep 2026 17:57:38 +0000 (UTC) From: Michael Tremer Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via d37e21502c70e7644fb797a7828c27adc4a0d95e (commit) via 958b450c17f84e6e037338d92bdc1f70ebaf3642 (commit) via 907800f45bb5d6121484dac304c6f261f96bddff (commit) via a5fc59c90a254946cd4dc423e1a2583a6c6ac89b (commit) via a7aa435240ba9186d2b78e5cd8076e43a91a0517 (commit) via 180b975665afbc0c93157dd1e172e60d2a0986ac (commit) via fdda27bf797111f9305df23acd96e51096423331 (commit) via bc9ef43b068c389fe8ccf22179587509cd763b85 (commit) via a57959b28f3528f438176faaa3e324ca1ae1dcb3 (commit) via 89ec32123a060a9e57f4c1f6f01fb6050ccb4f4c (commit) from 95e6cc2c652c9df0b2f9096f862602224bc52447 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit d37e21502c70e7644fb797a7828c27adc4a0d95e Author: Adolf Belka Date: Mon Sep 21 16:09:53 2026 +0200 core205: Ship pixman Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 958b450c17f84e6e037338d92bdc1f70ebaf3642 Author: Adolf Belka Date: Mon Sep 21 16:09:58 2026 +0200 pixman: Update to version 0.46.4 - Update from version 0.46.2 to 0.46.4 - Update of rootfile - Changelog 0.46.4 RISC-V: Use hwprobe interface to check for RVV 1.0 Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 907800f45bb5d6121484dac304c6f261f96bddff Author: Adolf Belka Date: Mon Sep 21 16:09:52 2026 +0200 core205: Ship ntfs-3g Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit a5fc59c90a254946cd4dc423e1a2583a6c6ac89b Author: Adolf Belka Date: Mon Sep 21 16:09:57 2026 +0200 ntfs-3g: Update to version 2026.7.7 - Update from version 2026.2.25 to 2026.7.7 - Update of rootfile - Fixes for 9 CVE's - Changelog 2026.7.7 (ntfscat) Fix heap memory corruption when processing a corrupt or maliciously crafted filesystem. (CVE-2026-42616) Fix heap memory corruption when copying index data from root to an index block in a corrupt or maliciously crafted filesystem. (CVE-2026-42617) Fix single-byte heap buffer overflow when decompressing maliciously crafted compressed file data. (CVE-2026-42618) Fix heap buffer overflow when copying the tail data of an index block to a freshly allocated block. (CVE-2026-46569) Fix out-of-bounds read when processing symlink reparse data in a corrupt or maliciously crafted filesystem. (CVE-2026-46571) Fix heap memory corruption for maliciously crafted or corrupt index data descending to an out-of-bounds tree depth. (CVE-2026-46570) Fix heap buffer overflow for maliciously crafted or corrupt index data during a node split. (CVE-2026-46572) Fix heap buffer overflow when building inherited ACL data. (CVE-2026-56135) Fix out of bounds access when clearing an index root in maliciously crafted or corrupt index data. (CVE-2026-56136) Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit a7aa435240ba9186d2b78e5cd8076e43a91a0517 Author: Adolf Belka Date: Mon Sep 21 16:09:51 2026 +0200 core205: Ship logwatch Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 180b975665afbc0c93157dd1e172e60d2a0986ac Author: Adolf Belka Date: Mon Sep 21 16:09:56 2026 +0200 logwatch: Update to version 7.15 - Update from version 7.11 to 7.15 - Patch for openssh-9.8 has been removed as fixes are part of tarball now. - Location for symlink for logwatch changed from /usr/sbin/ to /usr/bin/. Patch added to revert this as there are saeveral places in IPFire that will have the location hardcoded. - No changelog provided. Only option is to review the git commits. https://sourceforge.net/p/logwatch/git/ci/master/tree/ Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit fdda27bf797111f9305df23acd96e51096423331 Author: Adolf Belka Date: Mon Sep 21 16:09:50 2026 +0200 core205: Ship fuse Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit bc9ef43b068c389fe8ccf22179587509cd763b85 Author: Adolf Belka Date: Mon Sep 21 16:09:55 2026 +0200 fuse: Update to version 3.18.3 - Update from version 3.18.1 to 3.18.3 - Update of rootfile - Changelog 3.18.3 Security Fixes * ``fuse_session_custom_io()`` is disabled unless libfuse is built with ``-Denable-custom-io=true``, and returns ``-ENOTSUP`` otherwise. The ``hello_ll_uds`` example is built only with that option, and enabling it warns at configure time. Reason is a custom io peer might not be a kernel and can forge requests that libfuse parses without bounds checks, crashing or corrupting the filesystem process. See ``doc/README.custom-io``. * fusermount3: resolve the mountpoint once, through an ``O_PATH|O_NOFOLLOW`` descriptor. A symlink swapped in between the type check and the second lookup could redirect the mount. * fusermount3: run the auto-unmount probe as the calling user. It opened the caller-supplied mountpoint with elevated privileges before, so a symlink could get an attacker-chosen path opened as root. * mount_util: terminate the ``/bin/mount`` and ``/bin/umount`` argument vectors with ``--``. ``fsname`` reaches them straight from ``-ofsname=`` in setuid-root fusermount3, and the child raises the real uid to 0 before ``execle()``, so an unprivileged caller controlled a positional operand of a mount(8) that was not in restricted mode. * mount_util: skip the mtab update entirely for option-like mount arguments. BusyBox mount(8) does not honour ``--``. * fusermount3: unmount through ``unmount_fuse()`` when passing the device descriptor to the caller fails, so that path drops privileges and runs the ``fusermount3 -u`` checks instead of calling ``umount2()`` as root on a caller-supplied path. * fusermount3 and lib: pass ``UMOUNT_NOFOLLOW`` on the kernel and non-setuid unmount paths. * fusermount3: check the ``fstat()`` return value when validating the communication file descriptor. * fusermount3: fix an out-of-bounds read at index -1 in ``get_mnt_opts()`` when the option string is empty, which a read-only mount with no further options reaches. * util: avoid a pointer underflow when trimming ``fuse.conf`` lines. * fusermount3: reject a negative ``mount_max`` other than the documented -1. A typo such as -2 made the limit comparison always true and blocked every non-root mount. * lib: relay the KILLPRIV_V2 kill-suidgid flags to the filesystem in the new ``fuse_file_info::kill_suidgid``. Only ``setattr`` saw them before, so a filesystem that had taken over clearing suid/sgid never learned of it on ``O_TRUNC`` open and on write, and the bits survived. Note: ``fuse_file_info::kill_suidgid`` is new in 3.18.3 and ``FUSE_VERSION`` carries no patch level. A filesystem built against these headers but running against an older 3.18 library finds the field permanently zero, so require 3.18.3 at run time as well. Important Fixes * Fixed a hang on ``statx`` in builds without ``HAVE_STATX``: ``_do_statx()`` never replied, so the kernel waited forever. * io-uring: the CQE dispatch validated the opcode against ``fuse_ll_ops[]`` but called through ``fuse_ll_ops2[]``, so an opcode with no handler there was called as a null function pointer. * io-uring: fixed the notify-retrieve reply buffer handling. The ``fuse_notify_retrieve_in`` header sits at the start of the payload buffer, not in the ring header. * io-uring: fixed the ``req_header_sz`` calculation, which sized the header buffer from the wrong struct. * io-uring: create the rings with ``IORING_SETUP_SUBMIT_ALL``, so one failing commit SQE no longer leaves the rest of the batch unsubmitted. * io-uring: ``fuse_reply_none()`` commits the ring entry. A FORGET answered that way leaked the entry and left the kernel-side request outstanding. * fusermount3: treat ``ECONNABORTED`` like ``ENOTCONN`` when deciding whether to auto-unmount, so a daemon that dies with io-uring registered no longer leaves the mount behind. * ``receive_fd()``: check ``CMSG_FIRSTHDR()`` for NULL before dereferencing it. * ``fuse_session_loop_mt_312()`` no longer destroys ``se->mt_lock`` before ``fuse_session_destroy()`` destroys it again, which was undefined behaviour on every multi-threaded shutdown. * ``fuse_loop_cfg_create()`` returning NULL is checked before the config is dereferenced in ``fuse_session_loop_mt_312()`` and ``fuse_session_loop_mt_31()``. * iconv: the error check after opening the ``fromfs`` descriptor tested ``tofs``, so a failed ``iconv_open()`` was ignored and left an invalid descriptor behind. * mount.fuse: a failure to clear ``FD_CLOEXEC`` went undetected, because the result was compared against 1 rather than -1. * ``grow_pipe_to_max()`` opens ``/proc/sys/fs/pipe-max-size`` with ``O_CLOEXEC``; a concurrent fork+exec leaked the descriptor into the child. * Fixed a build failure for ``FUSE_USE_VERSION`` 312 and newer without symbol versioning, where ``fuse_loop_mt()`` expanded to an undeclared ``fuse_loop_mt_312()``. * Fixed a Clang 21 build failure in ``ST_MTIM_NSEC``. * Fixed leaks: the pipe when its size cannot be grown, the mountpoint in ``fuse_session_mount()`` and ``fuse_session_destroy()``, the pipe descriptors when ``fork()`` or ``setsid()`` fail in ``fuse_daemonize()``, the context when ``pthread_setspecific()`` fails, ``print_module_help()``, and a ``fuse_pollhandle`` in ``fuse_lib_poll()``. * Examples: ``update_fs()`` uses ``localtime_r()``. ``localtime()`` returns a shared static ``struct tm``, so it raced with the session threads and ``strftime()`` could format a half-overwritten time. * Examples: ``cuse_client`` caps the transfer size at 16 MiB. ``do_rw()`` passed the SIZE argument straight to ``calloc()``. * Examples: memfs_ll locking, refcounting and bounds fixes, including a use-after-free on rename overwrite and on a concurrent forget. * Examples: passthrough_hp lock-order and lifetime fixes. The directory stream is protected by a per-handle lock, ``fs.mutex`` is taken before ``Inode::m`` and when ``link()`` raises nlookup, and no inode lock is held across a syscall or a reply. Documentation * The fuse-devel mailing list moved to lists.linux.dev. * Man page and README corrections. 3.18.2 * Fix two io-uring issues that might be security critical * fuse-io-uring: Fix UAF and NULL deref in startup error path * fuse-io-uring: Fix NULL deref and memory leak in fuse_uring_init_queue Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit a57959b28f3528f438176faaa3e324ca1ae1dcb3 Author: Adolf Belka Date: Mon Sep 21 16:09:49 2026 +0200 core205: Ship fribidi Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer commit 89ec32123a060a9e57f4c1f6f01fb6050ccb4f4c Author: Adolf Belka Date: Mon Sep 21 16:09:54 2026 +0200 fribidi: Update to version 1.0.17 - Update from version 1.0.16 to 1.0.17 - Update of rootfile - Changelog 1.0.17 * Update Unicode character databases to v18.0.0 * Significant performance improvements: FSI base direction resolution, N0 bracket pairing, embedding-level resolution, and fribidi_reorder_line() no longer have quadratic worst-case behavior, giving large speedups on long paragraphs/lines. * Fixed fribidi_set_reorder_nsm() and fribidi_set_mirroring() not taking effect when called before fribidi_log2vis(). * Fixed bracket pairing (N0) to match brackets by canonical equivalence only, per UAX #9 BD16. * Fixed a stack buffer overflow when parsing character-set equivalence tables, and an out-of-bounds read on trailing '_' in charset data. * fribidi-main: fixed truncation of lines/output containing embedded NUL bytes. * Generate and install the fribidi(1) man page. * Various build fixes (MSVC, MinGW, GCC 14 warnings). Signed-off-by: Adolf Belka Signed-off-by: Michael Tremer ----------------------------------------------------------------------- Summary of changes: config/rootfiles/common/fribidi | 1 + config/rootfiles/common/fuse | 2 +- config/rootfiles/common/logwatch | 7 ++++ config/rootfiles/common/ntfs-3g | 9 ++--- config/rootfiles/common/pixman | 2 +- .../{oldcore/163 => core/205}/filelists/fribidi | 0 .../{oldcore/112 => core/205}/filelists/fuse | 0 .../{oldcore/111 => core/205}/filelists/logwatch | 0 .../{oldcore/125 => core/205}/filelists/ntfs-3g | 0 .../{oldcore/110 => core/205}/filelists/pixman | 0 lfs/fribidi | 6 ++-- lfs/fuse | 4 +-- lfs/logwatch | 8 ++--- lfs/ntfs-3g | 4 +-- lfs/pixman | 6 ++-- ...-OpenSSH-9.8-sshd-session-and-port-number.patch | 39 ---------------------- .../logwatch-7.15-Revert_sbin_to_bin_change.patch | 13 ++++++++ 17 files changed, 39 insertions(+), 62 deletions(-) copy config/rootfiles/{oldcore/163 => core/205}/filelists/fribidi (100%) copy config/rootfiles/{oldcore/112 => core/205}/filelists/fuse (100%) copy config/rootfiles/{oldcore/111 => core/205}/filelists/logwatch (100%) copy config/rootfiles/{oldcore/125 => core/205}/filelists/ntfs-3g (100%) copy config/rootfiles/{oldcore/110 => core/205}/filelists/pixman (100%) delete mode 100644 src/patches/logwatch/logwatch-7.11-Added-support-for-OpenSSH-9.8-sshd-session-and-port-number.patch create mode 100644 src/patches/logwatch/logwatch-7.15-Revert_sbin_to_bin_change.patch Difference in files: diff --git a/config/rootfiles/common/fribidi b/config/rootfiles/common/fribidi index c19632203d..d9b06140fa 100644 --- a/config/rootfiles/common/fribidi +++ b/config/rootfiles/common/fribidi @@ -26,6 +26,7 @@ usr/lib/libfribidi.so.0 usr/lib/libfribidi.so.0.4.0 #usr/lib/pkgconfig/fribidi.pc +#usr/share/man/man1/fribidi.1 #usr/share/man/man3/fribidi_charset_to_unicode.3 #usr/share/man/man3/fribidi_debug_status.3 #usr/share/man/man3/fribidi_get_bidi_type.3 diff --git a/config/rootfiles/common/fuse b/config/rootfiles/common/fuse index db16cea635..19f90b618b 100644 --- a/config/rootfiles/common/fuse +++ b/config/rootfiles/common/fuse @@ -11,7 +11,7 @@ usr/bin/fusermount3 #usr/include/fuse3/fuse_opt.h #usr/include/fuse3/libfuse_config.h #usr/lib/libfuse3.so -usr/lib/libfuse3.so.3.18.1 +usr/lib/libfuse3.so.3.18.3 usr/lib/libfuse3.so.4 #usr/lib/pkgconfig/fuse3.pc usr/lib/udev/rules.d/99-fuse3.rules diff --git a/config/rootfiles/common/logwatch b/config/rootfiles/common/logwatch index 026757b52b..adacb6b6a6 100644 --- a/config/rootfiles/common/logwatch +++ b/config/rootfiles/common/logwatch @@ -82,6 +82,7 @@ usr/share/logwatch/default.conf/services/amavis.conf #usr/share/logwatch/default.conf/services/autorpm.conf #usr/share/logwatch/default.conf/services/barracuda.conf #usr/share/logwatch/default.conf/services/bfd.conf +#usr/share/logwatch/default.conf/services/chronyd.conf #usr/share/logwatch/default.conf/services/cisco.conf #usr/share/logwatch/default.conf/services/citadel.conf usr/share/logwatch/default.conf/services/clam-update.conf @@ -92,7 +93,9 @@ usr/share/logwatch/default.conf/services/cron.conf #usr/share/logwatch/default.conf/services/denyhosts.conf usr/share/logwatch/default.conf/services/dhcpd.conf #usr/share/logwatch/default.conf/services/dirsrv.conf +#usr/share/logwatch/default.conf/services/dnf-automatic.conf #usr/share/logwatch/default.conf/services/dnf-rpm.conf +#usr/share/logwatch/default.conf/services/dnf5.conf #usr/share/logwatch/default.conf/services/dnssec.conf #usr/share/logwatch/default.conf/services/dovecot.conf #usr/share/logwatch/default.conf/services/dpkg.conf @@ -123,6 +126,7 @@ usr/share/logwatch/default.conf/services/kernel.conf #usr/share/logwatch/default.conf/services/lvm.conf #usr/share/logwatch/default.conf/services/mailscanner.conf usr/share/logwatch/default.conf/services/mdadm.conf +#usr/share/logwatch/default.conf/services/mdadm.conf.orig #usr/share/logwatch/default.conf/services/mod_security2.conf usr/share/logwatch/default.conf/services/modprobe.conf #usr/share/logwatch/default.conf/services/mountd.conf @@ -231,6 +235,7 @@ usr/share/logwatch/scripts/services/amavis #usr/share/logwatch/scripts/services/autorpm #usr/share/logwatch/scripts/services/barracuda #usr/share/logwatch/scripts/services/bfd +#usr/share/logwatch/scripts/services/chronyd #usr/share/logwatch/scripts/services/cisco #usr/share/logwatch/scripts/services/citadel usr/share/logwatch/scripts/services/clam-update @@ -242,7 +247,9 @@ usr/share/logwatch/scripts/services/cron usr/share/logwatch/scripts/services/dhcpd usr/share/logwatch/scripts/services/dialup #usr/share/logwatch/scripts/services/dirsrv +#usr/share/logwatch/scripts/services/dnf-automatic #usr/share/logwatch/scripts/services/dnf-rpm +#usr/share/logwatch/scripts/services/dnf5 #usr/share/logwatch/scripts/services/dnssec #usr/share/logwatch/scripts/services/dovecot #usr/share/logwatch/scripts/services/dpkg diff --git a/config/rootfiles/common/ntfs-3g b/config/rootfiles/common/ntfs-3g index e187cbfaa7..65d958495b 100644 --- a/config/rootfiles/common/ntfs-3g +++ b/config/rootfiles/common/ntfs-3g @@ -1,8 +1,8 @@ bin/lowntfs-3g bin/ntfs-3g #lib/libntfs-3g.so -lib/libntfs-3g.so.89 -lib/libntfs-3g.so.89.0.0 +lib/libntfs-3g.so.90 +lib/libntfs-3g.so.90.0.0 sbin/mkfs.ntfs sbin/mount.lowntfs-3g sbin/mount.ntfs-3g @@ -84,10 +84,5 @@ usr/sbin/ntfsundelete #usr/share/man/man8/ntfslabel.8 #usr/share/man/man8/ntfsls.8 #usr/share/man/man8/ntfsprogs.8 -#usr/share/man/man8/ntfsrecover.8 #usr/share/man/man8/ntfsresize.8 -#usr/share/man/man8/ntfssecaudit.8 -#usr/share/man/man8/ntfstruncate.8 #usr/share/man/man8/ntfsundelete.8 -#usr/share/man/man8/ntfsusermap.8 -#usr/share/man/man8/ntfswipe.8 diff --git a/config/rootfiles/common/pixman b/config/rootfiles/common/pixman index 913b860eb9..5aa676077c 100644 --- a/config/rootfiles/common/pixman +++ b/config/rootfiles/common/pixman @@ -3,5 +3,5 @@ #usr/include/pixman-1/pixman.h #usr/lib/libpixman-1.so usr/lib/libpixman-1.so.0 -usr/lib/libpixman-1.so.0.46.2 +usr/lib/libpixman-1.so.0.46.4 #usr/lib/pkgconfig/pixman-1.pc diff --git a/config/rootfiles/core/205/filelists/fribidi b/config/rootfiles/core/205/filelists/fribidi new file mode 120000 index 0000000000..1a17a37c9a --- /dev/null +++ b/config/rootfiles/core/205/filelists/fribidi @@ -0,0 +1 @@ +../../../common/fribidi \ No newline at end of file diff --git a/config/rootfiles/core/205/filelists/fuse b/config/rootfiles/core/205/filelists/fuse new file mode 120000 index 0000000000..570edaadef --- /dev/null +++ b/config/rootfiles/core/205/filelists/fuse @@ -0,0 +1 @@ +../../../common/fuse \ No newline at end of file diff --git a/config/rootfiles/core/205/filelists/logwatch b/config/rootfiles/core/205/filelists/logwatch new file mode 120000 index 0000000000..f14eabda99 --- /dev/null +++ b/config/rootfiles/core/205/filelists/logwatch @@ -0,0 +1 @@ +../../../common/logwatch \ No newline at end of file diff --git a/config/rootfiles/core/205/filelists/ntfs-3g b/config/rootfiles/core/205/filelists/ntfs-3g new file mode 120000 index 0000000000..d93adc2a18 --- /dev/null +++ b/config/rootfiles/core/205/filelists/ntfs-3g @@ -0,0 +1 @@ +../../../common/ntfs-3g \ No newline at end of file diff --git a/config/rootfiles/core/205/filelists/pixman b/config/rootfiles/core/205/filelists/pixman new file mode 120000 index 0000000000..fdb6346ae8 --- /dev/null +++ b/config/rootfiles/core/205/filelists/pixman @@ -0,0 +1 @@ +../../../common/pixman \ No newline at end of file diff --git a/lfs/fribidi b/lfs/fribidi index 9e32b79d71..f215cc0ce9 100644 --- a/lfs/fribidi +++ b/lfs/fribidi @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.0.16 +VER = 1.0.17 THISAPP = fribidi-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 9a0dce6152ba0f0ca4a42a83ca0f6d234fb9fef2a681d274aab6922e3394b70430e677fd549b17b13d928d733c0e72a7e3527cfb461971bbfd155ec1bd5e738c +$(DL_FILE)_BLAKE2 = 5e2fdef3c47e12af85b2e8d7a9d421a3e9a0f1a92e36bee267a45960c8f3cdc0628011d301d9f0f02ce68bf7007ad14fa4520a41da4a8e3d09483b5e50e83a57 install : $(TARGET) diff --git a/lfs/fuse b/lfs/fuse index aa6e3103c2..cb393f06d6 100644 --- a/lfs/fuse +++ b/lfs/fuse @@ -24,7 +24,7 @@ include Config -VER = 3.18.1 +VER = 3.18.3 THISAPP = fuse-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = b0a38794b8eb932f7b23314afdaeacbdd302e9f9037794f5dceb87b22f19de8d125ec0112ee28751b94063324c872e03c26e3128c6cd817858245f7df5acd7ef +$(DL_FILE)_BLAKE2 = d6d1312484bce853b8ad3df2be9ddc4fb9be237948cac48f4d76c1a303d2cc7dcc2c98faf1ca51093d663512040f12cd73376ec92e3f6974eaf0206f853abea3 install : $(TARGET) diff --git a/lfs/logwatch b/lfs/logwatch index b2452e21e3..cbfa139f18 100644 --- a/lfs/logwatch +++ b/lfs/logwatch @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2024 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 7.11 +VER = 7.15 THISAPP = logwatch-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 074b9b1d58bd199c82edc6fb40703b71f9488966e2acb8afc015fde93806740d11a3c8705303139716bbc50c353f3e8c3f4c0e9cf1d5f870cbb8599fbdd526d1 +$(DL_FILE)_BLAKE2 = 25e0b84301a6a7e2011fe107bb87b2deddeda9b263ff83c96fe5d65f67c8a7cecd304c1e10c4b5b11eca83be604201235ee1b4c54ec789385bd966c23e9990cb install : $(TARGET) @@ -75,7 +75,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP)/lib && patch -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.11-date_manip6.patch cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.11-disable_iptables.patch cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.11-enable-mdadm-sudo.patch - cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.11-Added-support-for-OpenSSH-9.8-sshd-session-and-port-number.patch + cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/logwatch/logwatch-7.15-Revert_sbin_to_bin_change.patch @cd $(DIR_APP) && chmod 755 install_logwatch.sh cd $(DIR_APP) && yes "" | ./install_logwatch.sh diff --git a/lfs/ntfs-3g b/lfs/ntfs-3g index fa8dcaf522..d7c4eb20c6 100644 --- a/lfs/ntfs-3g +++ b/lfs/ntfs-3g @@ -24,7 +24,7 @@ include Config -VER = 2026.2.25 +VER = 2026.7.7 THISAPP = ntfs-3g-$(VER) DL_FILE = ntfs-3g_ntfsprogs-$(VER).tgz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = e7f7a47ef8178e26dae04a1b8943756629f562d6e98a3500402958b952d21f9f9306070eccf9940b4070454a60883c521f55932f4bccaebe723dafe11d189d8f +$(DL_FILE)_BLAKE2 = 2cdeeeb00a9274282e3455bd2827f388b11a5f69b06f85c7655e175e493269b4e9447843de4ef69748d406e58df5d3bf5832086337d74dfd5a9bcf3e47e49b2f install : $(TARGET) diff --git a/lfs/pixman b/lfs/pixman index ca195cec36..cd520eee51 100644 --- a/lfs/pixman +++ b/lfs/pixman @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2025 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 0.46.2 +VER = 0.46.4 THISAPP = pixman-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 6d51d4f33f48a1cc991085b5e62e7537b738df78c4efcbce15c37533f24a1d87263401550530d123de86bd72a856d3fd0b1543188c76f074ea3e44d384f1116f +$(DL_FILE)_BLAKE2 = b00041009aeed3cd2548251489df6fcb5efb0415a8279451306558b2e736e2b012b11335b4ed3361e0126cad861873c0675dae24eb031b2434e45a7d39e087d8 install : $(TARGET) diff --git a/src/patches/logwatch/logwatch-7.11-Added-support-for-OpenSSH-9.8-sshd-session-and-port-number.patch b/src/patches/logwatch/logwatch-7.11-Added-support-for-OpenSSH-9.8-sshd-session-and-port-number.patch deleted file mode 100644 index 816f6b4e80..0000000000 --- a/src/patches/logwatch/logwatch-7.11-Added-support-for-OpenSSH-9.8-sshd-session-and-port-number.patch +++ /dev/null @@ -1,39 +0,0 @@ -diff -Naur logwatch-7.11.orig/conf/services/secure.conf logwatch-7.11/conf/services/secure.conf ---- logwatch-7.11.orig/conf/services/secure.conf 2016-03-09 21:14:35.000000000 +0100 -+++ logwatch-7.11/conf/services/secure.conf 2024-08-27 14:48:48.453853293 +0200 -@@ -24,7 +24,7 @@ - # Use this to ignore certain services in the secure log. - # You can ignore as many services as you would like. - # (we ignore sshd because its entries are processed by the sshd script) --$ignore_services = sshd Pluto stunnel proftpd saslauthd imapd postfix/smtpd -+$ignore_services = sshd sshd-session Pluto stunnel proftpd saslauthd imapd postfix/smtpd - - # For these services, summarize only (i.e. don't least each IP, just - # list the number of connections total) -diff -Naur logwatch-7.11.orig/conf/services/sshd.conf logwatch-7.11/conf/services/sshd.conf ---- logwatch-7.11.orig/conf/services/sshd.conf 2020-09-20 23:38:32.000000000 +0200 -+++ logwatch-7.11/conf/services/sshd.conf 2024-08-27 14:49:08.077782387 +0200 -@@ -19,7 +19,7 @@ - LogFile = messages - - # Only give lines pertaining to the sshd service... --*OnlyService = sshd -+*OnlyService = (sshd|sshd-session) - *RemoveHeaders - - # Variable $sshd_ignore_host is used to filter out hosts that login -diff -Naur logwatch-7.11.orig/scripts/services/sshd logwatch-7.11/scripts/services/sshd ---- logwatch-7.11.orig/scripts/services/sshd 2022-12-29 01:34:28.000000000 +0100 -+++ logwatch-7.11/scripts/services/sshd 2024-08-27 14:49:21.908202288 +0200 -@@ -246,9 +246,9 @@ - $NoIdent{$name}++; - } elsif ( - ($ThisLine =~ m/^(?:error:.*|fatal:) Connection closed by remote host/ ) or -- ($ThisLine =~ m/^(|fatal: )Read error from remote host(| [^ ]+): Connection reset by peer/ ) or -+ ($ThisLine =~ m/^(|fatal: )Read error from remote host(| [^ ]+)(| port \d+): Connection reset by peer/ ) or - ($ThisLine =~ m/^error: .*: read: Connection reset by peer/ ) or -- ($ThisLine =~ m/^Read error from remote host [^ ]+: (Connection timed out|No route to host)/ ) or -+ ($ThisLine =~ m/^Read error from remote host [^ ]+(| port \d+): (Connection timed out|No route to host)/ ) or - ($ThisLine =~ m/^fatal: Read from socket failed: No route to host/) or - ($ThisLine =~ m/^fatal: Write failed: Network is unreachable/ ) or - ($ThisLine =~ m/^fatal: Write failed: Broken pipe/) or diff --git a/src/patches/logwatch/logwatch-7.15-Revert_sbin_to_bin_change.patch b/src/patches/logwatch/logwatch-7.15-Revert_sbin_to_bin_change.patch new file mode 100644 index 0000000000..55f0b2cda8 --- /dev/null +++ b/src/patches/logwatch/logwatch-7.15-Revert_sbin_to_bin_change.patch @@ -0,0 +1,13 @@ +--- logwatch-7.15/install_logwatch.sh.orig 2026-09-21 12:24:58.939788088 +0200 ++++ logwatch-7.15/install_logwatch.sh 2026-09-21 12:27:56.745789515 +0200 +@@ -326,8 +326,8 @@ + fi + + #Symlink +-ln -f -s $BASEDIR/scripts/logwatch.pl /usr/bin/logwatch +-printf "Created symlink for /usr/bin/logwatch \n" ++ln -f -s $BASEDIR/scripts/logwatch.pl /usr/sbin/logwatch ++printf "Created symlink for /usr/sbin/logwatch \n" + + #Cron or Systemd timer + if [ $systemd -eq 1 ]; then hooks/post-receive -- IPFire 2.x development tree