Commit Graph
5577 Commits
Author SHA1 Message Date
Hirokazu MORIKAWA fc8b2fec0b nghttp2: bump to 1.70.0
Various Updates (1.66.0 to 1.70.0)

Notable Changes:
Fixes CVE-2026-27135 (1.68.1)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit fade4013e0)
2026-08-13 16:25:49 +02:00
Josef Schlehofer 7025def82b gperftools: allow building for powerpc
Add pending patches submitted upstream, which fix the build failures
discovered on powerpc with musl, and drop the powerpc exclusion from
DEPENDS.

Patches are from https://github.com/gperftools/gperftools/pull/1616

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit efbd9b9820)
2026-07-29 00:04:07 +02:00
Alexandru Ardelean 7834bdc7fa avahi: fix typo in version check override
Fix the misspelled "shellckeck" directive so shellcheck actually lints
test-version.sh as busybox sh. Backport of the avahi portion of the
treewide commit; the other 12 packages it touches do not exist on this
branch.

(cherry picked from commit 6a20260a1e94e0c3d84cbc98d1f6c78a9265ebfe)
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-07-09 20:41:23 +03:00
Mario Andrés Pérez 5c12bb5066 avahi: define missing DEFAULT_VARIANT and add conflicts
- Add DEFAULT_VARIANT to "avahi-daemon" and "libavahi" virtual packages;
set to "dbus" variant because it is more compatible.
When some package depends on one of these virtual packages an arbitrarily
variant it is selected. This avoids that.

- Add conflicts in order to avoid mixing packages with different variants
(when defining a DEFAULT_VARIANT the conflicts definition should be on
that side of the dependency to avoid recursive dependencies).

- Avoid building unused "dbus" dependency.

Fixes: ASU sysupgrade problem with avahi packages https://forum.openwrt.org/t/luci-attended-sysupgrade-support-thread/230552/137
Fixes: https://github.com/openwrt/packages/commit/9bc03b9d9971c2f1e146f7c2d287d1fc16e776f0

Signed-off-by: Mario Andrés Pérez <mapb_@outlook.com>
(cherry picked from commit d6facf284c)
2026-07-09 20:41:23 +03:00
Alexandru Ardelean 70ccf20cca avahi: update to 0.9-rc5 / 0.9_rc5
Bump from the 0.9-rc4 pre-release to 0.9-rc5. Update PKG_VERSION,
PKG_SOURCE, PKG_SOURCE_URL, PKG_BUILD_DIR and PKG_HASH accordingly.

The two carried patches (010-pkgconfig, 020-no-po-subdir) still apply
unchanged, and test-version.sh already normalises the underscore in the
apk version (0.9_rc5) back to the upstream 0.9-rc5 string.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit dc11dc66d2)
2026-07-09 20:41:23 +03:00
George Sapkin 9d2da95d62 avahi: move version checks to override
Move existing version checks into override and add explicit package checks.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit f2ff06a648)
2026-07-09 20:41:23 +03:00
Wei-Ting Yang 182d7e14bd expat: update to 2.8.2
This version bump includes fixes for the following CVEs:
- CVE-2026-50219
- CVE-2026-56131
- CVE-2026-56132
- CVE-2026-56403
- CVE-2026-56404
- CVE-2026-56405
- CVE-2026-56406
- CVE-2026-56407
- CVE-2026-56408
- CVE-2026-56409
- CVE-2026-56410
- CVE-2026-56411
- CVE-2026-56412

Full release notes:
https://github.com/libexpat/libexpat/blob/R_2_8_2/expat/Changes

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 62bff8c182)
2026-06-30 23:08:25 +02:00
Wei-Ting Yang 1df6112aef expat: update to 2.8.1
This version bump includes fixes for the following CVEs:
- CVE-2026-32776
- CVE-2026-32777
- CVE-2026-32778
- CVE-2026-41080
- CVE-2026-45186

Full release notes:
https://github.com/libexpat/libexpat/blob/master/expat/Changes

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 7c642716c6)
2026-06-24 12:22:41 +02:00
Michael Heimpold 69b9214dce libzip: add version check override
zipmerge and zipcmp prints version on -V,
but ziptool does not offer version number in any output.

Co-authored-by: George Sapkin <george@sapk.in>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fa6c9463ad)
2026-06-04 21:45:24 +02:00
Alexandru Ardelean 4b080e6351 libtheora: disable ARM assembly on pre-ARMv7 targets only
libtheora's configure probes the host assembler for NEON support
rather than the target CPU, so on pre-ARMv7 (arm926ej-s, etc.) it
falsely succeeds and the build emits NEON the CPU can't execute.
Force --disable-asm only when the ARM target's TARGET_CFLAGS does
not advertise armv7 or armv8, so cortex-a* keeps the NEON path.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 214b265f4a)
2026-05-31 12:22:57 +03:00
Wei-Ting Yang c30b579dfc treewide: fix licenses
Fix licenses.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit f7e3317515)
2026-05-28 11:44:16 +02:00
Alexandru Ardelean 1cfb07ed3c libudev-zero: update to 1.0.4
First upstream release since 2023-07. All four locally-carried patches
are merged in 1.0.4 and can be dropped:

- 0001 (PR #57): udev_device.c TOCTOU race fix
- 0002 (PR #62): avoid OOM on small systems
- 0003 (PR #66): correct touchpad detection
- 0004 (PR #80): hwdb USB ID lookup from usb.ids

The release also pulls in PR #79 (do not assume EV_REL and EV_ABS are
mutually exclusive in udev_device.c).

Release notes:
https://github.com/illiliti/libudev-zero/releases/tag/1.0.4

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit f10dfca2ba)
2026-05-28 11:23:35 +02:00
Alexandru Ardelean 5d048515a1 libudev-zero: backport hwdb USB ID lookup from upstream master
Replace the four stub udev_hwdb_*() functions with a working
implementation that looks up vendor and product names from
/usr/share/hwdata/usb.ids, so callers using the standard libudev
hwdb API benefit without needing package-specific patches.

The patch is a clean backport of upstream commit 2bebebc9e0444
("udev: implement hwdb USB ID lookup from usb.ids (#80)") merged
to illiliti/libudev-zero master on 2026-05-19, post-1.0.3. Drop
when the package is bumped to the next libudev-zero release.

Upstream now defaults USB_IDS_PATH to ${SHAREDIR}/hwdata/usb.ids
with SHAREDIR=${PREFIX}/share, so the explicit
USB_IDS_PATH=/usr/share/hwdata/usb.ids in MAKE_FLAGS is no longer
needed and is dropped.

Fixes: https://github.com/openwrt/packages/issues/29386

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 93759026fd)
2026-05-28 11:23:29 +02:00
Daniel Golle 5c7efd6113 libx264: update to git HEAD of 2025-09-10
Changes since 2024-05-13:
 c24e06c2 configure: Check for SVE support in MS armasm64 via as_check
 3a8b5be2 aarch64: Use elf_aux_info() for CPU feature detection on FreeBSD/OpenBSD
 1243d9ff Provide x264_getauxval() wrapper for getauxvaul() and elf_aux_info()
 80c1c47c configure: Add DragonFly support
 3a21e97b Fix build with Android NDK and API < 24 for 32-bit targets
 b1d2de88 Use getauxval() on Linux and elf_aux_info() on FreeBSD/OpenBSD on arm/ppc
 da14df55 Make use of sysconf(3) _SC_NPROCESSORS_ONLN and _SC_NPROCESSORS_CONF
 023112c6 aarch64: defines involving bit shifts should be unsigned
 938601b9 Use sysctlbyname(3) hw.logicalcpu on macOS
 a64111b1 Enable use of __sync_fetch_and_add() wherever detected instead of just X86
 450946f9 ci: Test compiling for Android
 52f7694d Use sched_getaffinity on Android
 373697b4 Bump dates to 2025
 c80f8a28 msvsdepend: Allow using the script for .S sources too
 27d83708 Makefile: Generate dependency information implicitly while compiling
 a0191bd8 configure: Use as_check for checking for aarch64 features
 72ce1cde configure: Use as_check for the main check for whether NEON is supported
 f87ca183 configure: Check for .arch and .arch_extension for enabling aarch64 extensions
 87044b21 aarch64: Use configure detected directives for enabling SVE/SVE2
 fc4012fb configure: Check for the dotprod and i8mm aarch64 extensions
 0e48d072 aarch64: Add flags for runtime detection of dotprod and i8mm
 570f6c70 aarch64: Add runtime detection of extensions on Windows and macOS
 fe9e4a7f Provide implementations for functions using the instructions SDOT/UDOT in the DotProd Armv8 extension.
 32c3b801 lavf: Update the code to work with the latest libavutil API
 4360ac37 ci: Fix ffmpeg build
 40617ddb ci: Remove vlc-contrib dependency
 85b5ccea Update gas-preprocessor.pl to the latest upstream version
 ff620d0c configure: Use MSYSTEM_CARCH for default arch on msys2
 714e07b4 arm: Don't test x264_cpu_fast_neon_mrc_test on Windows
 291476d7 windows: Fix named pipes detection
 b35605ac i8mm & neon hpel_filter optimization
 0480cb05 riscv64: add compile support

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 775c87e364)
2026-05-28 11:21:17 +02:00
Hannu Nyman e849732017 modbus: update to 3.1.12
Update modbus to version 3.1.12

https://github.com/stephane/libmodbus/releases/tag/v3.1.12
 Fix FD_SET overflow when socket fd >= FD_SETSIZE.
 Check dest pointer not null and nb in read functions.
 NULL check for src and nb < 1 validation in write functions.
 modbus_reply: don't compute address for FC 0x07/0x11.
 Use O_NONBLOCK instead of deprecated O_NDELAY.
 Explicit cast for Coverity CID 416366.
 Document required buffer size of modbus_receive.
 Document macros for error codes corresponding to Modbus exceptions.
 Fix example of modbus_rtu_set_serial_mode.
 Test filesystem provides symlink in autogen.sh.
 Sync API signatures with the documentation.
 Many documentation fixes and typo corrections.
 Add coverage target and helper script.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b19cb351e2)
2026-05-24 09:28:03 +02:00
Michael Heimpold 4f3a7a17ab libmodbus: update hash for v3.1.11 tarball
Upstream modified the tarball and re-uploaded, so the hash changed.
See: https://github.com/stephane/libmodbus/issues/829#issuecomment-3898494353

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c10e3a2cf1)
2026-05-24 09:27:58 +02:00
Stefan Hellermann 5238987687 libmodbus: update to 3.1.11
fixes float endianness issues in 3.1.8.

I use a small, custom application to convert data from my
electricity meter into Modbus format for my inverter and wallbox.
I developed this program against an earlier version of libmodbus
on x86, and it ran flawlessly on my ath79 router (big endian).
After migrating to a Mediatek router (little endian), the program
only outputted huge, meaningless values. However, it ran perfectly
fine on my x86 system (little endian), which is running Fedora
with libmodbus v3.1.11.

I then found several bug reports and the changelogs for libmodbus 3.1.11
that described and resolved my problem. So update openwrt to 3.1.11.

Signed-off-by: Stefan Hellermann <stefan@the2masters.de>
(cherry picked from commit 534ca8e397)
2026-05-24 09:27:52 +02:00
Josef Schlehofer c927952003 treewide: fix dangling SONAME symlinks when using ABI_VERSION
A previous commit attempted to introduce proper SONAME symlinks for
packages utilizing ABI_VERSION. However, it incorrectly copied only
the symlink without the underlying physical library file, resulting
in broken packages with dangling symlinks.

Before:
```
tar -Oxzf bin/packages/arm_cortex-a9_vfpv3-d16/packages/oniguruma_6.9.9-r1_arm_cortex-a9_vfpv3-d16.ipk ./data.tar.gz | tar -tzvf -
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./usr/
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./usr/lib/
lrwxrwxrwx  0 0      0           0 Feb  5  2024 ./usr/lib/libonig.so.5 -> libonig.so.5.4.0
```

After:
```
tar -Oxzf bin/packages/arm_cortex-a9_vfpv3-d16/packages/oniguruma_6.9.9-r1_arm_cortex-a9_vfpv3-d16.ipk ./data.tar.gz | tar -tzvf -
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./usr/
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./usr/lib/
lrwxrwxrwx  0 0      0           0 Feb  5  2024 ./usr/lib/libonig.so.5 -> libonig.so.5.4.0
-rwxr-xr-x  0 0      0      526493 Feb  5  2024 ./usr/lib/libonig.so.5.4.0
```

This properly standardizes shared library packaging, prevents shipping
duplicate full-sized files (as seen previously in packages like libre2),
and aligns the packages feed with core OpenWrt practices.
As you could see in the previous commit (see it in the ``Fixes`` tag):

Before:
```
tar -Oxzf bin/packages/arm_cortex-a9_vfpv3-d16/packages/re2_2023.02.01\~b025c6a3-r1_arm_cortex-a9_vfpv3-d16.ipk ./data.tar.gz | tar -tzvf -
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./usr/
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./usr/lib/
-rw-r--r--  0 0      0      331875 Aug 18  2024 ./usr/lib/libre2.so
-rw-r--r--  0 0      0      331875 Aug 18  2024 ./usr/lib/libre2.so.10
-rw-r--r--  0 0      0      331875 Aug 18  2024 ./usr/lib/libre2.so.10.0.0
```

After:
```
tar -Oxzf bin/packages/arm_cortex-a9_vfpv3-d16/packages/re2_2023.02.01\~b025c6a3-r1_arm_cortex-a9_vfpv3-d16.ipk ./data.tar.gz | tar -tzvf -
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./usr/
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./usr/lib/
lrwxrwxrwx  0 0      0           0 Aug 18  2024 ./usr/lib/libre2.so -> libre2.so.10
lrwxrwxrwx  0 0      0           0 Aug 18  2024 ./usr/lib/libre2.so.10 -> libre2.so.10.0.0
-rwxr-xr-x  0 0      0      331875 Aug 18  2024 ./usr/lib/libre2.so.10.0.0
```

Fixes: 537c2a631d ("treewide: avoid deref symlinks when installing .so")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1bf4bd3856)
2026-05-24 09:08:58 +02:00
Eneas U de Queiroz dabd101ec7 onigumura: fix library installation
Commit 537c2a631 ("treewide: avoid deref symlinks when installing .so")
intended to avoid duplicating .so* files, but this package actually
relies on install dereferencing the file that matches the SONAME
version, to avoid installing unnecessary symlinks.

Fixes: https://github.com/openwrt/packages/issues/29387
Fixes: 537c2a631 ("treewide: avoid deref symlinks when installing .so")
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8a9b1e95fd)
2026-05-24 09:08:58 +02:00
George Sapkin 4750f58657 sqlite3: bump to 3.53.1
Changes: https://sqlite.org/releaselog/3_53_1.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit eae7a125f7)
2026-05-24 03:25:12 +03:00
Josef Schlehofer decd737cfe gots_engine: fix PKG_MIRROR_HASH
It was discovered by CI/CD that it is no longer valid.

Fixes:
```
2026-04-29T13:04:58.0170130Z SHELL= flock /builder/tmp/.gost_engine-3.0.3.tar.zst.flock -c '  	/builder/scripts/download.pl "/builder/dl" "gost_engine-3.0.3.tar.zst" "ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" "" || (  /builder/scripts/dl_github_archive.py --dl-dir="/builder/dl" --url="https://github.com/gost-engine/engine" --version="v3.0.3" --subdir="gost_engine-3.0.3" --source="gost_engine-3.0.3.tar.zst" --hash="ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" --submodules  || ( 	echo "Checking out files from the git repository..."; mkdir -p /builder/tmp/dl && cd /builder/tmp/dl && rm -rf gost_engine-3.0.3 && [ \! -d gost_engine-3.0.3 ] && git clone  https://github.com/gost-engine/engine gost_engine-3.0.3 && (cd gost_engine-3.0.3 && git checkout v3.0.3) && export TAR_TIMESTAMP=`cd gost_engine-3.0.3 && git log -1 --no-show-signature --format='\''@%ct'\''` && echo "Generating formal git archive (apply .gitattributes rules)" && (cd gost_engine-3.0.3 && git config core.abbrev 8 && git archive --format=tar HEAD --output=../gost_engine-3.0.3.tar.git) &&  tar --numeric-owner --owner=0 --group=0 --ignore-failed-read -C gost_engine-3.0.3 -f gost_engine-3.0.3.tar.git -r .git .gitmodules 2>/dev/null  && rm -rf gost_engine-3.0.3 && mkdir gost_engine-3.0.3 && tar -C gost_engine-3.0.3 -xf gost_engine-3.0.3.tar.git && (cd gost_engine-3.0.3 && git submodule update --init --recursive --  && rm -rf .git .gitmodules) && echo "Packing checkout..." && 	tar --numeric-owner --owner=0 --group=0 --mode=a-s --sort=name ${TAR_TIMESTAMP:+--mtime="$TAR_TIMESTAMP"} -c gost_engine-3.0.3 | 	zstd -T0 --ultra -20 -c > /builder/tmp/dl/gost_engine-3.0.3.tar.zst && mv /builder/tmp/dl/gost_engine-3.0.3.tar.zst /builder/dl/ && rm -rf gost_engine-3.0.3; );  )  && ( file_hash="$(/builder/staging_dir/host/bin/mkhash sha256 "/builder/dl/gost_engine-3.0.3.tar.zst")"; [ "$file_hash" = "ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" ] || [ "ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" = "skip" ] || { echo "Hash mismatch for file gost_engine-3.0.3.tar.zst: expected ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88, got $file_hash"; false; }; )    '
2026-04-29T13:04:58.0559677Z + curl -f --connect-timeout 5 --retry 3 --location https://sources.cdn.openwrt.org/gost_engine-3.0.3.tar.zst
2026-04-29T13:04:58.0616240Z   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
2026-04-29T13:04:58.0616964Z                                  Dload  Upload   Total   Spent    Left  Speed
2026-04-29T13:04:58.0617618Z
2026-04-29T13:04:58.1364520Z   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
2026-04-29T13:04:58.1365467Z 100  977k  100  977k    0     0  12.8M      0 --:--:-- --:--:-- --:--:-- 12.8M
2026-04-29T13:04:58.1453386Z Hash of the downloaded file does not match (file: b3a6701cd97e4db4f3e0f4b356c991075c6157dd3941d34851c8f36baa1d2721, requested: ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88) - deleting download.
```

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cba772d955)
2026-05-21 15:53:50 +08:00
Daniel Golle 9bb8d0994a libb64: update to 2.0.0.1
Patch release fixing build system issues with the 2.0.0 release.
2.0.0 introduced API changes including:
 * Version macros for detection of incompatible API / version
 * size_t as argument to allow longer base64 encoded strings
 * Configurable line break functionality
 * Flags field for encoder
 * Helpers to calculate required output buffer maximum lengths
 * Switched in-/out-pointers to void*

Link: https://github.com/libb64/libb64/blob/v2.0.0.1/CHANGELOG.md
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3650172e26)
2026-05-14 10:17:29 +02:00
Alexandru Ardelean eb041d2fe6 avahi: update to 0.9-rc4
Fixes https://github.com/openwrt/packages/issues/27952

Update avahi from 0.8 to 0.9-rc4. The 0.9 development line accumulates
four years of bug and security fixes since the 0.8 release (2020-02-18).

Notable improvements in 0.9-rc4 over 0.8:

Security (all CVEs previously backported as patches, now removed):
  - CVE-2023-38469: reject TXT records whose total rdata exceeds
    AVAHI_DNS_RDATA_MAX, preventing heap-buffer reads under crafted mDNS
  - CVE-2023-38470: ensure each DNS label is at least one byte, preventing
    an infinite loop on malformed packets
  - CVE-2023-38471: extract host name via avahi_unescape_label() before
    generating an alternative to avoid operating on a raw escaped string
  - CVE-2023-38472: check that rdata pointer is non-NULL before passing to
    avahi_rdata_parse() from dbus-entry-group
  - CVE-2023-38473: derive alternative host name from its unescaped form,
    fixing incorrect hostname collision resolution with escaped labels

Bug fixes (previously backported):
  - Fix NULL-pointer crashes in avahi_s_*_browser_new() (#175)
  - Avoid infinite loop in avahi-daemon simple-protocol by handling
    AVAHI_WATCH_HUP event in client_work
  - Fix potential undefined behaviour in avahi_dns_packet_consume_uint32:
    cast uint8_t operands to uint32_t before shifting
  - Fix memory/CPU leak in the simple event loop: cleanup_watches() was
    zeroing timeout_req_cleanup instead of watch_req_cleanup, so completed
    watches were never removed from the linked list
  - Emit D-Bus error reply when avahi-daemon cannot resolve a hostname or
    service, rather than crashing with a NULL dereference
  - Increase ini-file-parser line buffer from 256 to 1024 bytes to handle
    longer configuration values without silent truncation

Other changes:
  - P2P tunnel support: IFF_MULTICAST is no longer required for
    point-to-point interfaces when allow-point-to-point=yes
  - Runtime directory: configure.ac now derives the socket path from
    ${runstatedir} (defaults to ${localstatedir}/run), so the
    explicit patch reverting the /run hardcoding is no longer needed
  - Patch 010-pkgconfig.patch (pkgconfig prefix alignment) is retained
    as it has not been merged upstream

Dropped patches (all merged upstream):
  020-revert-runtime-dir-systemd-change.patch
  100-p2p-no-iff_multicast-required.patch
  200-Fix-NULL-pointer-crashes-from-175.patch
  201-Avoid-infinite-loop-in-avahi-daemon-by-handling-HUP-event.patch
  202-avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch
  203-Do-not-disable-timeout-cleanup-on-watch-cleanup.patch
  204-Emit-error-if-requested-service-is-not-found.patch
  205-conf-file-line-lengths.patch
  300-CVE-2023-38469.patch through 304-CVE-2023-38473.patch

Library SONAMES unchanged: libavahi-common.so.3, libavahi-core.so.7,
libavahi-client.so.3 — no reverse dependency rebuilds required.

Disable libsystemd (not available on OpenWrt)
avahi 0.9-rc4 added --enable-libsystemd which defaults to enabled and
fails configure when libsystemd is not found via pkg-config.  OpenWrt
does not provide libsystemd; disable it explicitly.
Also pass --with-systemdsystemunitdir=no to suppress the pkg-config
lookup for the systemd unit directory.

Drop po/ subdir from build
The 0.9-rc4 tarball is a raw git archive; po/Makefile.in.in is not
pre-generated as it was in the 0.8 release tarball.  autopoint (from
gettext) is needed to install it, but is not available in the OpenWrt
SDK.  Since OpenWrt does not use NLS translations, remove po/ from
SUBDIRS in Makefile.am to avoid the missing po/Makefile.in.in error
during configure.

In 0.9-rc4 the D-Bus system.d directory changed from
$(sysconfdir)/dbus-1/system.d to $(datadir)/dbus-1/system.d,
so avahi-dbus.conf is now installed under usr/share/dbus-1/system.d.
Update the install rule source path accordingly; keep the on-device
destination at /etc/dbus-1/system.d for compatibility.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 24c3026f94)
2026-05-07 12:05:27 +03:00
Josef Schlehofer 8fdef0edb7 treewide: avoid deref symlinks when installing .so
Deduplicate files

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 537c2a631d)
2026-04-28 23:17:41 +02:00
John Audia 5187d85eaf libmariadb: update to 3.4.8
This release is needed in order to build against the 6.18 kernel.

Removed upstreamed: 020-gcc15.patch

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 0e0c742d81)
2026-04-28 23:17:39 +02:00
George Sapkin 12327d1d16 sqlite3: bump to 3.53.0
Changes: https://sqlite.org/releaselog/3_53_0.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 7e99a65d72)
2026-04-19 22:41:44 +03:00
Nick Hainke dc416cc9ef expat: update to 2.7.4
Changelog:
https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes

Fixes: CVE-2026-24515 CVE-2026-25210
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e87bcf506c)
2026-04-07 13:56:24 +02:00
Michał Kępień 0881b913eb lmdb: update to 0.9.35
Changelog: https://git.openldap.org/openldap/openldap/-/raw/LMDB_0.9.35/libraries/liblmdb/CHANGES

Signed-off-by: Michał Kępień <michal@isc.org>
(cherry picked from commit aa102d6ba8)
2026-04-07 13:27:58 +02:00
Michał Kępień 5091c0d9da lmdb: set SONAME for liblmdb.so
The LMDB shared library (liblmdb.so) does not currently have a SONAME
set, which can cause issues when linking against it.  Specifically, when
an object is linked against the library using its absolute path (for
example, in Meson builds), that path (as seen in the build environment)
is stored in the resulting object's DT_NEEDED entry.  This can prevent
the library from being found during runtime linking.  Set the SONAME to
liblmdb.so to ensure proper runtime linking.

Signed-off-by: Michał Kępień <michal@isc.org>
(cherry picked from commit 8aa78ebebf)
2026-04-07 13:27:58 +02:00
Daniel Golle 1166ca0380 libutp: update to 2024-11-16
transmission/libutp@490874c Merge pull request #17 from tearfur/malformed-logs
 transmission/libutp@2d29ce9 Merge pull request #18 from tearfur/ftbfs-log
 transmission/libutp@6c7ee3f Merge pull request #16 from brad0/openbsd_monotonic
 transmission/libutp@1e7e6c6 fix: FTBFS when `UTP_DEBUG_LOGGING` is defined
 transmission/libutp@eedd8b9 fix: malformed logs produced by `struct_utp_context::log()`
 transmission/libutp@14d6f57 Use monotonic clock on OpenBSD
 transmission/libutp@52645d6 chore: remove invalid assertion
 transmission/libutp@4ed4d43 refactor: use std::unordered_map instead of bespoke utpHashTable
 transmission/libutp@13545a9 fixup! chore: savepoint
 transmission/libutp@d0f70e6 chore: add code comments for new code that needs it
 transmission/libutp@b109597 chore: remove extra include string.h
 transmission/libutp@13b5cb4 chore: remove unnecessary #include utp_hash.h
 transmission/libutp@958758b copyediting: tab damage, constify
 transmission/libutp@165a316 refactor: replace UTPSocketHT method with one more narrowly-scoped
 transmission/libutp@9bbf6b3 perf: do not rebuild UTPSocketKey in LookupAdjacent
 transmission/libutp@a271636 chore: savepoint
 transmission/libutp@d339167 feat: make UTPSocketKey std::hash-friendly
 transmission/libutp@1354618 refactor: use std::min(), std::max() instead of bespoke
 transmission/libutp@7480820 chore: remove redundant explicit types when invoking std::min, std::max
 transmission/libutp@3189aba chore: restore undefs
 transmission/libutp@1849bd1 chore: make vsc happy
 transmission/libutp@24c967b refactor: make explicit type for std::min, std::max
 transmission/libutp@1862df0 refactor: make explicit type for std::min, std::max
 transmission/libutp@8080115 refactor: use std::min(), std::max() instead of bespoke
 transmission/libutp@2589200 refactor: use std::vector instead of bespoke Array class
 transmission/libutp@09ef1be Fix build on *BSD (#10)
 transmission/libutp@4d4a3ce fixup! refactor: use std::vector instead of bespoke Array class
 transmission/libutp@1320d78 Merge branch 'post-3.4-transmission' into refactor/replace-bespoke-to-std-pt-1
 transmission/libutp@8bdf5e8 Try to reduce the number of CI builds
 transmission/libutp@4ec3c96 Merge branch 'post-3.4-transmission' into refactor/replace-bespoke-to-std-pt-1
 transmission/libutp@5820d8e Bump minimum CMake version to 3.12 to match Transmission (#9)
 transmission/libutp@d9d3754 refactor: use std::vector instead of bespoke Array class
 transmission/libutp@9cb9f9c build: Require C11 (#5)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 91e85bbbee)
2026-04-07 13:27:58 +02:00
Daniel Golle d3be7f3d72 libdht: update to 2023-03-18
jech/dht@0bbb8f4 Full declaration of dht_uninit

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ea3ec746aa)
2026-04-07 13:27:57 +02:00
Daniel Golle 00fe338beb libdeflate: update to 1.25
ebiggers/libdeflate@c8c56a2 (tag: v1.25) v1.25
 ebiggers/libdeflate@095bcab cmake: make installed package relocatable
 ebiggers/libdeflate@7b9232c ci.yml: Use windows-latest for windows-visualstudio-build-and-test
 ebiggers/libdeflate@d65d5db Add link to SwiftDeflate wrapper
 ebiggers/libdeflate@6bb4936 lib/x86: drop any mention of `evex512`
 ebiggers/libdeflate@2a3762c lib/x86/cpu_features.h: drop evex512 on gcc-16

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 69620ea785)
2026-04-07 13:27:57 +02:00
Tianling Shen 6ebed1eadc libtorrent-rasterbar: add boost as dependency for python package
`boost-python3` will be only selectable after `boost` is selected,
so add `boost` to dependencies as well.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f35120face)
2026-04-02 09:37:19 +08:00
George Sapkin d38b91001b sqlite3: bump to 3.52.0
Changes: https://sqlite.org/releaselog/3_52_0.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 04f5991451)
2026-03-20 04:34:52 +02:00
Aleksey Vasilenko a57d4eb786 krant: drop maintainership
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit dfd0245f19)
2026-03-15 12:25:21 +02:00
Maxim Storchak c37cf848d0 linenoise: update to 2026-01-08 (dc83cc3)
Add UTF-8 and grapheme cluster support

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
(cherry picked from commit 8f0c236a92)
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2026-03-14 05:32:36 +02:00
Hauke Mehrtens 7844f3ba86 libutp: deactivate -Werror
With fortify sources libutp fails to compile because the fortify sources
for musl use the GNU extension include_next. Do not fail when the
compiler issues a warning.

Fixes the following compile error:
```
In file included from libutp-2023.02.14~c95738b1/utp_utils.cpp:23:
/include/fortify/stdlib.h:22:2: error: #include_next is a GCC extension [-Werror]
   22 | #include_next <stdlib.h>
      |  ^~~~~~~~~~~~
```

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 0814aba3b0)
2026-02-22 14:28:17 +02:00
Georgi Valkov 3d9a66b93f libimobiledevice: fix dependency on libtatsu
libtatsu is a dependency only for libimobiledevice-utils
the library itself does not use it during build, and is a
core component for iPhone tethering, while the utils are optional

move the dependency to the utils, to reduce the build size:
libtatsu depends on libcurl, which is compiled with a TLS library,
so users of prebuilt packages are forced to install both
OpenSSL and mbed TLS. This patch removes the unnecessary dependency.

Fixes: https://github.com/openwrt/packages/issues/28427

Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
2026-01-29 18:25:46 +02:00
Yanase Yuki 1237669c0c liboil: remove package
This software seems no longer maintained by upstream.
The latest upstream release is 16 years ago,
and no package depends on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
(cherry picked from commit 260378b731)
2026-01-28 20:59:53 +02:00
George Sapkin 2f14570b85 boringssl: drop package
Package is not being used anywhere and the version in the repo has not
been updated in over four years.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit ac5a4f132a)
2026-01-25 18:49:30 +02:00
Hirokazu MORIKAWA 1e0e7e8d3e icu: bump to 78.2
We are pleased to announce the release of Unicode® ICU 78.2. It updates to CLDR 48.1. These are maintenance releases for ICU 78 and CLDR 48, with limited sets of bug fixes and no API or structural changes.

ICU 78.2 also includes a small number of bug fixes, as well as a minor update for time zone data (tzdata) version 2025c (2025-dec) ICU-23296.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit 1305fa9b58)
2026-01-18 07:32:33 +02:00
George Sapkin 09d842e8a3 sqlite3: bump to 3.51.2
Changelog: https://sqlite.org/releaselog/3_51_2.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 8392630a2f)
2026-01-16 06:22:16 +02:00
Daniel F. Dickinson a6a63bd110 tree-wide: remove obsolete SDK in conditionals
Obsolete use of $(SDK) in configure conditionals can result in
dependency errors when building a subset of packages for packages which
have multiple sub-packages.

The reason it causes dependency issues is that (using libdbi-drivers as
an example) lines like:

ifneq ($(SDK)$(CONFIG_PACKAGE_libdbd-sqlite3),)

always evaluate to true if you are compiling in the SDK. So for a user
compiling from the SDK, the configure arguments are always added to the package build.

In the case of libdbi-drivers:

CONFIGURE_ARGS += \
  --with-sqlite3 \
  --with-sqlite3-incdir=$(STAGING_DIR)/usr/include \
  -with-sqlite3-libdir=$(STAGING_DIR)/usr/lib

is always added even if PACKAGE_libdbd-sqlite3 is deselected. When
libdbd-sqlite3 is deselected, this dependency:

DEPENDS:=libdbi +libsqlite3

is not present, so when configure tries to find sqlite3 it fails.

Closes #28173 "tree-wide: obsolete $(SDK) in conditionals"

See also:

* "include: remove SDK exception from package install targets"
  openwrt/openwrt@28f44a4

Performed tree-wide to ease revert if necessary, per:
https://github.com/openwrt/packages/issues/28173#issuecomment-3694615980

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 73d8b6c6f3)
2025-12-30 01:08:33 +01:00
Jordan Ngako 216dae1275 libopen62541: preserve symlinks on install
$(INSTALL_BIN) follows symlinks, causing the .so to be copied multiple times.
Use $(CP) instead to preserve symlinks and cut package size by ~2/3.
OpenWrt libraries don’t need to be executable, so $(INSTALL_BIN) isn’t required.

Signed-off-by: Jordan Ngako <jordanfalken@gmx.de>
(cherry picked from commit 1c1af85fc5)
2025-12-29 23:39:39 +01:00
George Sapkin 24dad746aa uw-imap: drop package
Project URL doesn't load and the source hasn't received any updates in 7
years.

Fixes: https://github.com/openwrt/packages/issues/17097
Fixes: https://github.com/openwrt/packages/issues/28101
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 139154c6e2)
2025-12-20 21:21:30 +02:00
Daniel F. Dickinson 0e0c1f2630 postgresql: fix missing symbols at runtime
Fixes pgsql-server: the setup fails for any folder
Fixes #27228

Sets postgresql-specific configure flags that configure cannot run-test
to determine their value. This fixes improperly linked files that
prevent database initialization (at least) from working on the device.

Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
(cherry picked from commit 0bb3db019a)
2025-12-17 11:22:58 +01:00
Hirokazu MORIKAWA f3a0387ac7 c-ares: bump to 1.34.6
This is a security release.

Security:
* CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see GHSA-6hxc-62jh-p29v
* CVE-2025-62408. A use-after-free bug has been uncovered in read_answers() that
was introduced in v1.32.3. Please see GHSA-jq53-42q6-pqr5

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit ebdb9536a9)
2025-12-15 15:46:18 +01:00
George Sapkin 944166fa47 sqlite3: bump to 3.51.1
Changelog: https://sqlite.org/releaselog/3_51_1.html
Signed-off-by: George Sapkin <george@sapk.in>
2025-12-05 16:49:44 +08:00
Daniel Golle 404d74febc cyrus-sasl: fix build with glibc
Add missing dependency +USE_GLIBC:libcrypt-compat to express dependency
on libcrypto.so.1 when building with GNU glibc.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-12-02 17:15:38 +02:00
Hannu Nyman 8a51592569 tdb: update for compatibility, remove absent maintainer
Update to 1.4.14 for compatibility with the current packages infra
(python etc.)

* Refresh patches. Remove old upstream patch
* Remove absent maintainer

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2025-11-30 14:48:39 +01:00