From patchwork Mon Oct 26 15:59:40 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 10502 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR1" (not verified)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4jCyxj1kmMz3xWb for ; Mon, 26 Oct 2026 15:59:53 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [IPv6:2001:678:b28::201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail02.haj.ipfire.org", Issuer "YE2" (not verified)) by mail01.ipfire.org (Postfix) with ESMTPS id 4jCyxh4MFtz6bS for ; Mon, 26 Oct 2026 15:59:52 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4jCyxf4DCKz30S6 for ; Mon, 26 Oct 2026 15:59:50 +0000 (UTC) X-Original-To: development@lists.ipfire.org Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "YR1" (not verified)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4jCyxb3grgz33gl for ; Mon, 26 Oct 2026 15:59:47 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4jCyxb1JL3z5WM; Mon, 26 Oct 2026 15:59:47 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1793030387; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=c520DEJRoHogeirbxei1Gma01AhDryK7Rj1U5bC9vco=; b=IjUu3yySZGHyAr60+ojiwtHMTHgvcNs2/kc+wODBhBLim2zWobFIWy5PfXLuqmSD+HBGnL t+q/p6HyQpmp5WDQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1793030387; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=c520DEJRoHogeirbxei1Gma01AhDryK7Rj1U5bC9vco=; b=rF6GPhlfLKhshhDYa2CzZQJR4WKY0qM2jK9LE7tAIpkEdz6RdmaXp0beoxyHPqaD0HmGPM WSHaDgBVL4TsBATB4oIC5sGCj6h4NjQMU+Ed5xbb4JT5bL6JuahRM+X83S76WEIda9bI+C qJvjKJejp04KnE61A03JaBqsYjozzHdgrmAi4HTzEIlot+klNjEFIMXaxorJo3JeT2jHzf 6gjhvgjXwlI81VCzhfRdaR2zsk/K/AAiJhgRFRW0xnmO/wS79TjRXIpO1qdx57XnaLglqm liqoW08SW90UvNeSWByXbc8VWgdY59p/bFXhWCXfLJl0YUxoUNclr+/7GhbCDA== From: Adolf Belka To: development@lists.ipfire.org Cc: Adolf Belka Subject: [PATCH] patch: Update to version 2.8.1 Date: Mon, 26 Oct 2026 16:59:40 +0100 Message-ID: <20261026155942.2122609-4-adolf.belka@ipfire.org> In-Reply-To: <20261026155942.2122609-1-adolf.belka@ipfire.org> References: <20261026155942.2122609-1-adolf.belka@ipfire.org> Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 - Update from version 2.8 to 2.8.1 - No change in rootfile - 1 CVE fix - Changelog 2.8.1 * Prevent creation of out-of-tree files (CVE-2026-115207). Signed-off-by: Adolf Belka --- lfs/patch | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/lfs/patch b/lfs/patch index 2569222de..47cd698da 100644 --- a/lfs/patch +++ b/lfs/patch @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2025 IPFire Team # +# Copyright (C) 2007-2026 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.8 +VER = 2.8.1 THISAPP = patch-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -47,7 +47,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 687f566201adb2e32c3832b911adaddd9994aacb25b66886d6315bfe2752e09fd551b3856a39024b8472b2d95efebf412d4a7c085812a13620de811073a397ad +$(DL_FILE)_BLAKE2 = bee49679ca7b823b5d0c8c380402c8a395c64a55f30669344dc645c2566c7bc5ae98aa363e59efe580ed2f1e783bed3b54e34bbd716d70f3f41aae8c8f7c082b install : $(TARGET) @@ -77,7 +77,8 @@ $(subst %,%_BLAKE2,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && ./configure --prefix=$(PREFIX) + cd $(DIR_APP) && ./configure \ + --prefix=$(PREFIX) cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install @rm -rf $(DIR_APP)