Commit Graph
5590 Commits
Author SHA1 Message Date
Josef Schlehofer d7978609ec tree-wide: rename version check test.sh to test-version.sh
In actions-shared-workflows the version is now checked in
test-version.sh, while test.sh is left for the generic tests.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7cb0c183a9)
2026-10-04 09:45:32 +02:00
Alexandru Ardelean e255d83c54 alsa-lib: add version check override
alsa-lib ships only a shared library and aserver has no --version, so
neither can satisfy the generic version probe. Add a test-version.sh
that exits 0 for both arms and exits 1 for unknown subpackages.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit c9f4980023)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-10-04 09:45:32 +02:00
Alexandru Ardelean 1a7b286dae alsa-lib: add test.sh for aserver without --version
aserver does not implement --version so the generic CI version check
fails for it. Add a test.sh case that verifies it is present and
executable instead.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 0f34c18d65)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-10-04 09:45:32 +02:00
Seo Suchan c3d309efab libxslt: add test-version.sh
xsltproc doesn't say it's own version but only dependcies it compiled on

Signed-off-by: Seo Suchan <tjtncks@gmail.com>
(cherry picked from commit 14d197418d)
2026-09-29 08:46:15 +02:00
Josef Schlehofer fe94ae1556 giflib: add version check override
The giflib-utils executables (gif2rgb, gifbuild, gifclrmp, giffix,
giftext, giftool) do not report the package version when run, which
causes the generic version probe to fail.

Add a test-version.sh to skip the version check for the giflib and
giflib-utils packages.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 093c05cdc1)
2026-09-28 16:18:48 +02:00
Daniel Golle 409f2d51a9 libssh: fix big-endian -R forwarding and crash without entropy source
On big-endian hosts the server parsed every tcpip-forward bind port as
zero and bound an ephemeral port, so -R remote forwarding never carried
a connection. With no usable entropy source the library crashed inside
mbedtls instead of failing cleanly.

Patches 2-4 were sent upstream to the libssh mailing list:
https://archive.libssh.org/libssh/2026-08/0000000.html
https://archive.libssh.org/libssh/2026-08/0000001.html
Patch 1 backports the seed-failure error path they depend on from
upstream master commit ac4b723c.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit bdcd738a1b)
2026-09-28 11:41:57 +03:00
Daniel Golle fc2e81e948 libssh: update to 0.12.2
Release notes: https://git.libssh.org/projects/libssh.git/tree/CHANGELOG?h=libssh-0.12.2
Fixes CVE-2026-59843 (denial of service via zero advertised channel
packet size).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 29a148ba4b)
2026-09-28 11:41:57 +03:00
Alexandru Ardelean 0a1417d8f1 libssh: update to 0.12.1
Update to the latest upstream stable release.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit ee996e4c93)
2026-09-28 11:41:57 +03:00
Alexandru Ardelean ff8477fe30 libssh: update to 0.12.0
Changelog:
- Add quantum-resistant hybrid key exchange (sntrup761x25519, mlkem
  variants)
- Add FIDO/U2F key support with libfido2 integration
- Add host-bound public key authentication and GSSAPI key exchange
- Add sshsig signing support (e.g. for git commit signing)
- Fix SFTP reliability when status messages lack error data
- Security fixes: path traversal in SCP and buffer management issues

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 58369e0a5d)
2026-09-28 11:41:57 +03:00
Wei-Ting Yang 3fd8ff8bcc expat: update to 2.8.4
This version bump includes fixes for the following CVEs:
- CVE-2026-66046
- CVE-2026-72522
- CVE-2026-76641
- CVE-2026-76956
- CVE-2026-76957

Full release notes:
https://github.com/libexpat/libexpat/blob/master/expat/Changes

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit dbe9f7c5e1)
2026-09-18 22:23:48 +02:00
Karen Khachatryan 5691561615 c-ares: bump to 1.34.8
Update c-ares from 1.34.6 to 1.34.8.

Version 1.34.7 includes the following security fixes:

* CVE-2026-33630 (GHSA-6wfj-rwm7-3542): fix a use-after-free /
  double-free issue in query-completion handling.
* CVE-2026-69184 (GHSA-pjmc-gx33-gc76): limit DNS name compression
  pointer traversal to prevent CPU-exhaustion denial of service.
* CVE-2026-69186 (GHSA-jv8r-gqr9-68wj): validate DNS record counts
  before allocation to prevent memory-amplification denial of service.

It also fixes the UDP socket exhaustion regression introduced in 1.34.6.

Version 1.34.8 reverts an unintended API break introduced in 1.34.7 by
the callback parameter const changes.

Signed-off-by: Karen Khachatryan <karen0734@gmail.com>

(cherry picked from commit f3bc744d83)
2026-09-07 13:55:47 +02:00
Aditya Nugraha f46934b820 libucontext: bump to 1.5.1 & glibc support
Changelog:
Changes from 1.5 to 1.5.1
-------------------------
* Rename public register definitions on x86 and x86_64 to avoid clashing
  with glibc definitions when built in freestanding mode.
  Patch contributed by Daan De Meyer.

Changes from 1.4 to 1.5
-----------------------

* Workaround various header compatibility issues in glibc and bionic.

* Allow ppc64 target to be built in freestanding mode.

Changes from 1.3.3 to 1.4
-------------------------

* Add hard-float support to most architectures where relevant.
  Some patches contributed by Richard Campbell.

Changes from 1.3.2 to 1.3.3
---------------------------

* Use `bl` instruction instead of explicit GOT lookup for `exit`
  in 64-bit PowerPC assembly.

* Fix installation path for standalone libucontext headers.
  Patch contributed by Marian Buschsieweke.

* Fix missing includes for freestanding builds.
  Patch contributed by David Leeds.

Makefile:
  Disabled documents.
  Added glibc supports, and remove hardcoded musl dependency.
  Put test_libucontext_posix only available in musl runtime.

Build system: x86/64
Build-tested: x86/64-glibc
Build-tested: x86/64-musl
Run-tested: x86/64-glibc

Signed-off-by: Aditya Nugraha <vortexilation@gmail.com>
(cherry picked from commit c3cc59102c)
2026-08-19 16:38:14 +02:00
George Sapkin 82e5891783 libucontext: add version check override
Skip version checks as none of the executables seem to report their
versions.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit f596c12885)
2026-08-19 16:38:09 +02:00
Hirokazu MORIKAWA fc8b2fec0b nghttp2: bump to 1.70.0
Various Updates (1.66.0 to 1.70.0)

Notable Changes:
Fixes CVE-2026-27135 (1.68.1)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
(cherry picked from commit fade4013e0)
2026-08-13 16:25:49 +02:00
Josef Schlehofer 7025def82b gperftools: allow building for powerpc
Add pending patches submitted upstream, which fix the build failures
discovered on powerpc with musl, and drop the powerpc exclusion from
DEPENDS.

Patches are from https://github.com/gperftools/gperftools/pull/1616

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit efbd9b9820)
2026-07-29 00:04:07 +02:00
Alexandru Ardelean 7834bdc7fa avahi: fix typo in version check override
Fix the misspelled "shellckeck" directive so shellcheck actually lints
test-version.sh as busybox sh. Backport of the avahi portion of the
treewide commit; the other 12 packages it touches do not exist on this
branch.

(cherry picked from commit 6a20260a1e94e0c3d84cbc98d1f6c78a9265ebfe)
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-07-09 20:41:23 +03:00
Mario Andrés Pérez 5c12bb5066 avahi: define missing DEFAULT_VARIANT and add conflicts
- Add DEFAULT_VARIANT to "avahi-daemon" and "libavahi" virtual packages;
set to "dbus" variant because it is more compatible.
When some package depends on one of these virtual packages an arbitrarily
variant it is selected. This avoids that.

- Add conflicts in order to avoid mixing packages with different variants
(when defining a DEFAULT_VARIANT the conflicts definition should be on
that side of the dependency to avoid recursive dependencies).

- Avoid building unused "dbus" dependency.

Fixes: ASU sysupgrade problem with avahi packages https://forum.openwrt.org/t/luci-attended-sysupgrade-support-thread/230552/137
Fixes: https://github.com/openwrt/packages/commit/9bc03b9d9971c2f1e146f7c2d287d1fc16e776f0

Signed-off-by: Mario Andrés Pérez <mapb_@outlook.com>
(cherry picked from commit d6facf284c)
2026-07-09 20:41:23 +03:00
Alexandru Ardelean 70ccf20cca avahi: update to 0.9-rc5 / 0.9_rc5
Bump from the 0.9-rc4 pre-release to 0.9-rc5. Update PKG_VERSION,
PKG_SOURCE, PKG_SOURCE_URL, PKG_BUILD_DIR and PKG_HASH accordingly.

The two carried patches (010-pkgconfig, 020-no-po-subdir) still apply
unchanged, and test-version.sh already normalises the underscore in the
apk version (0.9_rc5) back to the upstream 0.9-rc5 string.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit dc11dc66d2)
2026-07-09 20:41:23 +03:00
George Sapkin 9d2da95d62 avahi: move version checks to override
Move existing version checks into override and add explicit package checks.

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit f2ff06a648)
2026-07-09 20:41:23 +03:00
Wei-Ting Yang 182d7e14bd expat: update to 2.8.2
This version bump includes fixes for the following CVEs:
- CVE-2026-50219
- CVE-2026-56131
- CVE-2026-56132
- CVE-2026-56403
- CVE-2026-56404
- CVE-2026-56405
- CVE-2026-56406
- CVE-2026-56407
- CVE-2026-56408
- CVE-2026-56409
- CVE-2026-56410
- CVE-2026-56411
- CVE-2026-56412

Full release notes:
https://github.com/libexpat/libexpat/blob/R_2_8_2/expat/Changes

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 62bff8c182)
2026-06-30 23:08:25 +02:00
Wei-Ting Yang 1df6112aef expat: update to 2.8.1
This version bump includes fixes for the following CVEs:
- CVE-2026-32776
- CVE-2026-32777
- CVE-2026-32778
- CVE-2026-41080
- CVE-2026-45186

Full release notes:
https://github.com/libexpat/libexpat/blob/master/expat/Changes

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 7c642716c6)
2026-06-24 12:22:41 +02:00
Michael Heimpold 69b9214dce libzip: add version check override
zipmerge and zipcmp prints version on -V,
but ziptool does not offer version number in any output.

Co-authored-by: George Sapkin <george@sapk.in>
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit fa6c9463ad)
2026-06-04 21:45:24 +02:00
Alexandru Ardelean 4b080e6351 libtheora: disable ARM assembly on pre-ARMv7 targets only
libtheora's configure probes the host assembler for NEON support
rather than the target CPU, so on pre-ARMv7 (arm926ej-s, etc.) it
falsely succeeds and the build emits NEON the CPU can't execute.
Force --disable-asm only when the ARM target's TARGET_CFLAGS does
not advertise armv7 or armv8, so cortex-a* keeps the NEON path.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 214b265f4a)
2026-05-31 12:22:57 +03:00
Wei-Ting Yang c30b579dfc treewide: fix licenses
Fix licenses.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit f7e3317515)
2026-05-28 11:44:16 +02:00
Alexandru Ardelean 1cfb07ed3c libudev-zero: update to 1.0.4
First upstream release since 2023-07. All four locally-carried patches
are merged in 1.0.4 and can be dropped:

- 0001 (PR #57): udev_device.c TOCTOU race fix
- 0002 (PR #62): avoid OOM on small systems
- 0003 (PR #66): correct touchpad detection
- 0004 (PR #80): hwdb USB ID lookup from usb.ids

The release also pulls in PR #79 (do not assume EV_REL and EV_ABS are
mutually exclusive in udev_device.c).

Release notes:
https://github.com/illiliti/libudev-zero/releases/tag/1.0.4

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit f10dfca2ba)
2026-05-28 11:23:35 +02:00
Alexandru Ardelean 5d048515a1 libudev-zero: backport hwdb USB ID lookup from upstream master
Replace the four stub udev_hwdb_*() functions with a working
implementation that looks up vendor and product names from
/usr/share/hwdata/usb.ids, so callers using the standard libudev
hwdb API benefit without needing package-specific patches.

The patch is a clean backport of upstream commit 2bebebc9e0444
("udev: implement hwdb USB ID lookup from usb.ids (#80)") merged
to illiliti/libudev-zero master on 2026-05-19, post-1.0.3. Drop
when the package is bumped to the next libudev-zero release.

Upstream now defaults USB_IDS_PATH to ${SHAREDIR}/hwdata/usb.ids
with SHAREDIR=${PREFIX}/share, so the explicit
USB_IDS_PATH=/usr/share/hwdata/usb.ids in MAKE_FLAGS is no longer
needed and is dropped.

Fixes: https://github.com/openwrt/packages/issues/29386

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 93759026fd)
2026-05-28 11:23:29 +02:00
Daniel Golle 5c7efd6113 libx264: update to git HEAD of 2025-09-10
Changes since 2024-05-13:
 c24e06c2 configure: Check for SVE support in MS armasm64 via as_check
 3a8b5be2 aarch64: Use elf_aux_info() for CPU feature detection on FreeBSD/OpenBSD
 1243d9ff Provide x264_getauxval() wrapper for getauxvaul() and elf_aux_info()
 80c1c47c configure: Add DragonFly support
 3a21e97b Fix build with Android NDK and API < 24 for 32-bit targets
 b1d2de88 Use getauxval() on Linux and elf_aux_info() on FreeBSD/OpenBSD on arm/ppc
 da14df55 Make use of sysconf(3) _SC_NPROCESSORS_ONLN and _SC_NPROCESSORS_CONF
 023112c6 aarch64: defines involving bit shifts should be unsigned
 938601b9 Use sysctlbyname(3) hw.logicalcpu on macOS
 a64111b1 Enable use of __sync_fetch_and_add() wherever detected instead of just X86
 450946f9 ci: Test compiling for Android
 52f7694d Use sched_getaffinity on Android
 373697b4 Bump dates to 2025
 c80f8a28 msvsdepend: Allow using the script for .S sources too
 27d83708 Makefile: Generate dependency information implicitly while compiling
 a0191bd8 configure: Use as_check for checking for aarch64 features
 72ce1cde configure: Use as_check for the main check for whether NEON is supported
 f87ca183 configure: Check for .arch and .arch_extension for enabling aarch64 extensions
 87044b21 aarch64: Use configure detected directives for enabling SVE/SVE2
 fc4012fb configure: Check for the dotprod and i8mm aarch64 extensions
 0e48d072 aarch64: Add flags for runtime detection of dotprod and i8mm
 570f6c70 aarch64: Add runtime detection of extensions on Windows and macOS
 fe9e4a7f Provide implementations for functions using the instructions SDOT/UDOT in the DotProd Armv8 extension.
 32c3b801 lavf: Update the code to work with the latest libavutil API
 4360ac37 ci: Fix ffmpeg build
 40617ddb ci: Remove vlc-contrib dependency
 85b5ccea Update gas-preprocessor.pl to the latest upstream version
 ff620d0c configure: Use MSYSTEM_CARCH for default arch on msys2
 714e07b4 arm: Don't test x264_cpu_fast_neon_mrc_test on Windows
 291476d7 windows: Fix named pipes detection
 b35605ac i8mm & neon hpel_filter optimization
 0480cb05 riscv64: add compile support

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 775c87e364)
2026-05-28 11:21:17 +02:00
Hannu Nyman e849732017 modbus: update to 3.1.12
Update modbus to version 3.1.12

https://github.com/stephane/libmodbus/releases/tag/v3.1.12
 Fix FD_SET overflow when socket fd >= FD_SETSIZE.
 Check dest pointer not null and nb in read functions.
 NULL check for src and nb < 1 validation in write functions.
 modbus_reply: don't compute address for FC 0x07/0x11.
 Use O_NONBLOCK instead of deprecated O_NDELAY.
 Explicit cast for Coverity CID 416366.
 Document required buffer size of modbus_receive.
 Document macros for error codes corresponding to Modbus exceptions.
 Fix example of modbus_rtu_set_serial_mode.
 Test filesystem provides symlink in autogen.sh.
 Sync API signatures with the documentation.
 Many documentation fixes and typo corrections.
 Add coverage target and helper script.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit b19cb351e2)
2026-05-24 09:28:03 +02:00
Michael Heimpold 4f3a7a17ab libmodbus: update hash for v3.1.11 tarball
Upstream modified the tarball and re-uploaded, so the hash changed.
See: https://github.com/stephane/libmodbus/issues/829#issuecomment-3898494353

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c10e3a2cf1)
2026-05-24 09:27:58 +02:00
Stefan Hellermann 5238987687 libmodbus: update to 3.1.11
fixes float endianness issues in 3.1.8.

I use a small, custom application to convert data from my
electricity meter into Modbus format for my inverter and wallbox.
I developed this program against an earlier version of libmodbus
on x86, and it ran flawlessly on my ath79 router (big endian).
After migrating to a Mediatek router (little endian), the program
only outputted huge, meaningless values. However, it ran perfectly
fine on my x86 system (little endian), which is running Fedora
with libmodbus v3.1.11.

I then found several bug reports and the changelogs for libmodbus 3.1.11
that described and resolved my problem. So update openwrt to 3.1.11.

Signed-off-by: Stefan Hellermann <stefan@the2masters.de>
(cherry picked from commit 534ca8e397)
2026-05-24 09:27:52 +02:00
Josef Schlehofer c927952003 treewide: fix dangling SONAME symlinks when using ABI_VERSION
A previous commit attempted to introduce proper SONAME symlinks for
packages utilizing ABI_VERSION. However, it incorrectly copied only
the symlink without the underlying physical library file, resulting
in broken packages with dangling symlinks.

Before:
```
tar -Oxzf bin/packages/arm_cortex-a9_vfpv3-d16/packages/oniguruma_6.9.9-r1_arm_cortex-a9_vfpv3-d16.ipk ./data.tar.gz | tar -tzvf -
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./usr/
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./usr/lib/
lrwxrwxrwx  0 0      0           0 Feb  5  2024 ./usr/lib/libonig.so.5 -> libonig.so.5.4.0
```

After:
```
tar -Oxzf bin/packages/arm_cortex-a9_vfpv3-d16/packages/oniguruma_6.9.9-r1_arm_cortex-a9_vfpv3-d16.ipk ./data.tar.gz | tar -tzvf -
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./usr/
drwxr-xr-x  0 0      0           0 Feb  5  2024 ./usr/lib/
lrwxrwxrwx  0 0      0           0 Feb  5  2024 ./usr/lib/libonig.so.5 -> libonig.so.5.4.0
-rwxr-xr-x  0 0      0      526493 Feb  5  2024 ./usr/lib/libonig.so.5.4.0
```

This properly standardizes shared library packaging, prevents shipping
duplicate full-sized files (as seen previously in packages like libre2),
and aligns the packages feed with core OpenWrt practices.
As you could see in the previous commit (see it in the ``Fixes`` tag):

Before:
```
tar -Oxzf bin/packages/arm_cortex-a9_vfpv3-d16/packages/re2_2023.02.01\~b025c6a3-r1_arm_cortex-a9_vfpv3-d16.ipk ./data.tar.gz | tar -tzvf -
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./usr/
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./usr/lib/
-rw-r--r--  0 0      0      331875 Aug 18  2024 ./usr/lib/libre2.so
-rw-r--r--  0 0      0      331875 Aug 18  2024 ./usr/lib/libre2.so.10
-rw-r--r--  0 0      0      331875 Aug 18  2024 ./usr/lib/libre2.so.10.0.0
```

After:
```
tar -Oxzf bin/packages/arm_cortex-a9_vfpv3-d16/packages/re2_2023.02.01\~b025c6a3-r1_arm_cortex-a9_vfpv3-d16.ipk ./data.tar.gz | tar -tzvf -
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./usr/
drwxr-xr-x  0 0      0           0 Aug 18  2024 ./usr/lib/
lrwxrwxrwx  0 0      0           0 Aug 18  2024 ./usr/lib/libre2.so -> libre2.so.10
lrwxrwxrwx  0 0      0           0 Aug 18  2024 ./usr/lib/libre2.so.10 -> libre2.so.10.0.0
-rwxr-xr-x  0 0      0      331875 Aug 18  2024 ./usr/lib/libre2.so.10.0.0
```

Fixes: 537c2a631d ("treewide: avoid deref symlinks when installing .so")

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1bf4bd3856)
2026-05-24 09:08:58 +02:00
Eneas U de Queiroz dabd101ec7 onigumura: fix library installation
Commit 537c2a631 ("treewide: avoid deref symlinks when installing .so")
intended to avoid duplicating .so* files, but this package actually
relies on install dereferencing the file that matches the SONAME
version, to avoid installing unnecessary symlinks.

Fixes: https://github.com/openwrt/packages/issues/29387
Fixes: 537c2a631 ("treewide: avoid deref symlinks when installing .so")
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 8a9b1e95fd)
2026-05-24 09:08:58 +02:00
George Sapkin 4750f58657 sqlite3: bump to 3.53.1
Changes: https://sqlite.org/releaselog/3_53_1.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit eae7a125f7)
2026-05-24 03:25:12 +03:00
Josef Schlehofer decd737cfe gots_engine: fix PKG_MIRROR_HASH
It was discovered by CI/CD that it is no longer valid.

Fixes:
```
2026-04-29T13:04:58.0170130Z SHELL= flock /builder/tmp/.gost_engine-3.0.3.tar.zst.flock -c '  	/builder/scripts/download.pl "/builder/dl" "gost_engine-3.0.3.tar.zst" "ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" "" || (  /builder/scripts/dl_github_archive.py --dl-dir="/builder/dl" --url="https://github.com/gost-engine/engine" --version="v3.0.3" --subdir="gost_engine-3.0.3" --source="gost_engine-3.0.3.tar.zst" --hash="ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" --submodules  || ( 	echo "Checking out files from the git repository..."; mkdir -p /builder/tmp/dl && cd /builder/tmp/dl && rm -rf gost_engine-3.0.3 && [ \! -d gost_engine-3.0.3 ] && git clone  https://github.com/gost-engine/engine gost_engine-3.0.3 && (cd gost_engine-3.0.3 && git checkout v3.0.3) && export TAR_TIMESTAMP=`cd gost_engine-3.0.3 && git log -1 --no-show-signature --format='\''@%ct'\''` && echo "Generating formal git archive (apply .gitattributes rules)" && (cd gost_engine-3.0.3 && git config core.abbrev 8 && git archive --format=tar HEAD --output=../gost_engine-3.0.3.tar.git) &&  tar --numeric-owner --owner=0 --group=0 --ignore-failed-read -C gost_engine-3.0.3 -f gost_engine-3.0.3.tar.git -r .git .gitmodules 2>/dev/null  && rm -rf gost_engine-3.0.3 && mkdir gost_engine-3.0.3 && tar -C gost_engine-3.0.3 -xf gost_engine-3.0.3.tar.git && (cd gost_engine-3.0.3 && git submodule update --init --recursive --  && rm -rf .git .gitmodules) && echo "Packing checkout..." && 	tar --numeric-owner --owner=0 --group=0 --mode=a-s --sort=name ${TAR_TIMESTAMP:+--mtime="$TAR_TIMESTAMP"} -c gost_engine-3.0.3 | 	zstd -T0 --ultra -20 -c > /builder/tmp/dl/gost_engine-3.0.3.tar.zst && mv /builder/tmp/dl/gost_engine-3.0.3.tar.zst /builder/dl/ && rm -rf gost_engine-3.0.3; );  )  && ( file_hash="$(/builder/staging_dir/host/bin/mkhash sha256 "/builder/dl/gost_engine-3.0.3.tar.zst")"; [ "$file_hash" = "ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" ] || [ "ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88" = "skip" ] || { echo "Hash mismatch for file gost_engine-3.0.3.tar.zst: expected ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88, got $file_hash"; false; }; )    '
2026-04-29T13:04:58.0559677Z + curl -f --connect-timeout 5 --retry 3 --location https://sources.cdn.openwrt.org/gost_engine-3.0.3.tar.zst
2026-04-29T13:04:58.0616240Z   % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
2026-04-29T13:04:58.0616964Z                                  Dload  Upload   Total   Spent    Left  Speed
2026-04-29T13:04:58.0617618Z
2026-04-29T13:04:58.1364520Z   0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
2026-04-29T13:04:58.1365467Z 100  977k  100  977k    0     0  12.8M      0 --:--:-- --:--:-- --:--:-- 12.8M
2026-04-29T13:04:58.1453386Z Hash of the downloaded file does not match (file: b3a6701cd97e4db4f3e0f4b356c991075c6157dd3941d34851c8f36baa1d2721, requested: ad88b0bc4ede265bc91757f0bb9777a381f8e271faa43992a054ddd5f435ad88) - deleting download.
```

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit cba772d955)
2026-05-21 15:53:50 +08:00
Daniel Golle 9bb8d0994a libb64: update to 2.0.0.1
Patch release fixing build system issues with the 2.0.0 release.
2.0.0 introduced API changes including:
 * Version macros for detection of incompatible API / version
 * size_t as argument to allow longer base64 encoded strings
 * Configurable line break functionality
 * Flags field for encoder
 * Helpers to calculate required output buffer maximum lengths
 * Switched in-/out-pointers to void*

Link: https://github.com/libb64/libb64/blob/v2.0.0.1/CHANGELOG.md
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3650172e26)
2026-05-14 10:17:29 +02:00
Alexandru Ardelean eb041d2fe6 avahi: update to 0.9-rc4
Fixes https://github.com/openwrt/packages/issues/27952

Update avahi from 0.8 to 0.9-rc4. The 0.9 development line accumulates
four years of bug and security fixes since the 0.8 release (2020-02-18).

Notable improvements in 0.9-rc4 over 0.8:

Security (all CVEs previously backported as patches, now removed):
  - CVE-2023-38469: reject TXT records whose total rdata exceeds
    AVAHI_DNS_RDATA_MAX, preventing heap-buffer reads under crafted mDNS
  - CVE-2023-38470: ensure each DNS label is at least one byte, preventing
    an infinite loop on malformed packets
  - CVE-2023-38471: extract host name via avahi_unescape_label() before
    generating an alternative to avoid operating on a raw escaped string
  - CVE-2023-38472: check that rdata pointer is non-NULL before passing to
    avahi_rdata_parse() from dbus-entry-group
  - CVE-2023-38473: derive alternative host name from its unescaped form,
    fixing incorrect hostname collision resolution with escaped labels

Bug fixes (previously backported):
  - Fix NULL-pointer crashes in avahi_s_*_browser_new() (#175)
  - Avoid infinite loop in avahi-daemon simple-protocol by handling
    AVAHI_WATCH_HUP event in client_work
  - Fix potential undefined behaviour in avahi_dns_packet_consume_uint32:
    cast uint8_t operands to uint32_t before shifting
  - Fix memory/CPU leak in the simple event loop: cleanup_watches() was
    zeroing timeout_req_cleanup instead of watch_req_cleanup, so completed
    watches were never removed from the linked list
  - Emit D-Bus error reply when avahi-daemon cannot resolve a hostname or
    service, rather than crashing with a NULL dereference
  - Increase ini-file-parser line buffer from 256 to 1024 bytes to handle
    longer configuration values without silent truncation

Other changes:
  - P2P tunnel support: IFF_MULTICAST is no longer required for
    point-to-point interfaces when allow-point-to-point=yes
  - Runtime directory: configure.ac now derives the socket path from
    ${runstatedir} (defaults to ${localstatedir}/run), so the
    explicit patch reverting the /run hardcoding is no longer needed
  - Patch 010-pkgconfig.patch (pkgconfig prefix alignment) is retained
    as it has not been merged upstream

Dropped patches (all merged upstream):
  020-revert-runtime-dir-systemd-change.patch
  100-p2p-no-iff_multicast-required.patch
  200-Fix-NULL-pointer-crashes-from-175.patch
  201-Avoid-infinite-loop-in-avahi-daemon-by-handling-HUP-event.patch
  202-avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch
  203-Do-not-disable-timeout-cleanup-on-watch-cleanup.patch
  204-Emit-error-if-requested-service-is-not-found.patch
  205-conf-file-line-lengths.patch
  300-CVE-2023-38469.patch through 304-CVE-2023-38473.patch

Library SONAMES unchanged: libavahi-common.so.3, libavahi-core.so.7,
libavahi-client.so.3 — no reverse dependency rebuilds required.

Disable libsystemd (not available on OpenWrt)
avahi 0.9-rc4 added --enable-libsystemd which defaults to enabled and
fails configure when libsystemd is not found via pkg-config.  OpenWrt
does not provide libsystemd; disable it explicitly.
Also pass --with-systemdsystemunitdir=no to suppress the pkg-config
lookup for the systemd unit directory.

Drop po/ subdir from build
The 0.9-rc4 tarball is a raw git archive; po/Makefile.in.in is not
pre-generated as it was in the 0.8 release tarball.  autopoint (from
gettext) is needed to install it, but is not available in the OpenWrt
SDK.  Since OpenWrt does not use NLS translations, remove po/ from
SUBDIRS in Makefile.am to avoid the missing po/Makefile.in.in error
during configure.

In 0.9-rc4 the D-Bus system.d directory changed from
$(sysconfdir)/dbus-1/system.d to $(datadir)/dbus-1/system.d,
so avahi-dbus.conf is now installed under usr/share/dbus-1/system.d.
Update the install rule source path accordingly; keep the on-device
destination at /etc/dbus-1/system.d for compatibility.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 24c3026f94)
2026-05-07 12:05:27 +03:00
Josef Schlehofer 8fdef0edb7 treewide: avoid deref symlinks when installing .so
Deduplicate files

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 537c2a631d)
2026-04-28 23:17:41 +02:00
John Audia 5187d85eaf libmariadb: update to 3.4.8
This release is needed in order to build against the 6.18 kernel.

Removed upstreamed: 020-gcc15.patch

Signed-off-by: John Audia <therealgraysky@proton.me>
(cherry picked from commit 0e0c742d81)
2026-04-28 23:17:39 +02:00
George Sapkin 12327d1d16 sqlite3: bump to 3.53.0
Changes: https://sqlite.org/releaselog/3_53_0.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 7e99a65d72)
2026-04-19 22:41:44 +03:00
Nick Hainke dc416cc9ef expat: update to 2.7.4
Changelog:
https://github.com/libexpat/libexpat/blob/R_2_7_4/expat/Changes

Fixes: CVE-2026-24515 CVE-2026-25210
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit e87bcf506c)
2026-04-07 13:56:24 +02:00
Michał Kępień 0881b913eb lmdb: update to 0.9.35
Changelog: https://git.openldap.org/openldap/openldap/-/raw/LMDB_0.9.35/libraries/liblmdb/CHANGES

Signed-off-by: Michał Kępień <michal@isc.org>
(cherry picked from commit aa102d6ba8)
2026-04-07 13:27:58 +02:00
Michał Kępień 5091c0d9da lmdb: set SONAME for liblmdb.so
The LMDB shared library (liblmdb.so) does not currently have a SONAME
set, which can cause issues when linking against it.  Specifically, when
an object is linked against the library using its absolute path (for
example, in Meson builds), that path (as seen in the build environment)
is stored in the resulting object's DT_NEEDED entry.  This can prevent
the library from being found during runtime linking.  Set the SONAME to
liblmdb.so to ensure proper runtime linking.

Signed-off-by: Michał Kępień <michal@isc.org>
(cherry picked from commit 8aa78ebebf)
2026-04-07 13:27:58 +02:00
Daniel Golle 1166ca0380 libutp: update to 2024-11-16
transmission/libutp@490874c Merge pull request #17 from tearfur/malformed-logs
 transmission/libutp@2d29ce9 Merge pull request #18 from tearfur/ftbfs-log
 transmission/libutp@6c7ee3f Merge pull request #16 from brad0/openbsd_monotonic
 transmission/libutp@1e7e6c6 fix: FTBFS when `UTP_DEBUG_LOGGING` is defined
 transmission/libutp@eedd8b9 fix: malformed logs produced by `struct_utp_context::log()`
 transmission/libutp@14d6f57 Use monotonic clock on OpenBSD
 transmission/libutp@52645d6 chore: remove invalid assertion
 transmission/libutp@4ed4d43 refactor: use std::unordered_map instead of bespoke utpHashTable
 transmission/libutp@13545a9 fixup! chore: savepoint
 transmission/libutp@d0f70e6 chore: add code comments for new code that needs it
 transmission/libutp@b109597 chore: remove extra include string.h
 transmission/libutp@13b5cb4 chore: remove unnecessary #include utp_hash.h
 transmission/libutp@958758b copyediting: tab damage, constify
 transmission/libutp@165a316 refactor: replace UTPSocketHT method with one more narrowly-scoped
 transmission/libutp@9bbf6b3 perf: do not rebuild UTPSocketKey in LookupAdjacent
 transmission/libutp@a271636 chore: savepoint
 transmission/libutp@d339167 feat: make UTPSocketKey std::hash-friendly
 transmission/libutp@1354618 refactor: use std::min(), std::max() instead of bespoke
 transmission/libutp@7480820 chore: remove redundant explicit types when invoking std::min, std::max
 transmission/libutp@3189aba chore: restore undefs
 transmission/libutp@1849bd1 chore: make vsc happy
 transmission/libutp@24c967b refactor: make explicit type for std::min, std::max
 transmission/libutp@1862df0 refactor: make explicit type for std::min, std::max
 transmission/libutp@8080115 refactor: use std::min(), std::max() instead of bespoke
 transmission/libutp@2589200 refactor: use std::vector instead of bespoke Array class
 transmission/libutp@09ef1be Fix build on *BSD (#10)
 transmission/libutp@4d4a3ce fixup! refactor: use std::vector instead of bespoke Array class
 transmission/libutp@1320d78 Merge branch 'post-3.4-transmission' into refactor/replace-bespoke-to-std-pt-1
 transmission/libutp@8bdf5e8 Try to reduce the number of CI builds
 transmission/libutp@4ec3c96 Merge branch 'post-3.4-transmission' into refactor/replace-bespoke-to-std-pt-1
 transmission/libutp@5820d8e Bump minimum CMake version to 3.12 to match Transmission (#9)
 transmission/libutp@d9d3754 refactor: use std::vector instead of bespoke Array class
 transmission/libutp@9cb9f9c build: Require C11 (#5)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 91e85bbbee)
2026-04-07 13:27:58 +02:00
Daniel Golle d3be7f3d72 libdht: update to 2023-03-18
jech/dht@0bbb8f4 Full declaration of dht_uninit

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit ea3ec746aa)
2026-04-07 13:27:57 +02:00
Daniel Golle 00fe338beb libdeflate: update to 1.25
ebiggers/libdeflate@c8c56a2 (tag: v1.25) v1.25
 ebiggers/libdeflate@095bcab cmake: make installed package relocatable
 ebiggers/libdeflate@7b9232c ci.yml: Use windows-latest for windows-visualstudio-build-and-test
 ebiggers/libdeflate@d65d5db Add link to SwiftDeflate wrapper
 ebiggers/libdeflate@6bb4936 lib/x86: drop any mention of `evex512`
 ebiggers/libdeflate@2a3762c lib/x86/cpu_features.h: drop evex512 on gcc-16

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 69620ea785)
2026-04-07 13:27:57 +02:00
Tianling Shen 6ebed1eadc libtorrent-rasterbar: add boost as dependency for python package
`boost-python3` will be only selectable after `boost` is selected,
so add `boost` to dependencies as well.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f35120face)
2026-04-02 09:37:19 +08:00
George Sapkin d38b91001b sqlite3: bump to 3.52.0
Changes: https://sqlite.org/releaselog/3_52_0.html
Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit 04f5991451)
2026-03-20 04:34:52 +02:00
Aleksey Vasilenko a57d4eb786 krant: drop maintainership
Signed-off-by: Aleksey Vasilenko <aleksey.vasilenko@gmail.com>
(cherry picked from commit dfd0245f19)
2026-03-15 12:25:21 +02:00
Maxim Storchak c37cf848d0 linenoise: update to 2026-01-08 (dc83cc3)
Add UTF-8 and grapheme cluster support

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
(cherry picked from commit 8f0c236a92)
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2026-03-14 05:32:36 +02:00
Hauke Mehrtens 7844f3ba86 libutp: deactivate -Werror
With fortify sources libutp fails to compile because the fortify sources
for musl use the GNU extension include_next. Do not fail when the
compiler issues a warning.

Fixes the following compile error:
```
In file included from libutp-2023.02.14~c95738b1/utp_utils.cpp:23:
/include/fortify/stdlib.h:22:2: error: #include_next is a GCC extension [-Werror]
   22 | #include_next <stdlib.h>
      |  ^~~~~~~~~~~~
```

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 0814aba3b0)
2026-02-22 14:28:17 +02:00