Commit Graph

82097 Commits

Author SHA1 Message Date
John Ernberg
7a5b27453f package/mpd: Disable sidplay support
Commit 25af5a3b3a ("package/mpd: update version to 0.24") from March 2025
bumped mpd to a version that dropped support for the libsidplay2 library in
favor of libsidplayfp. [1]

Since libsidplayfp is not provided by buildroot and no one has complained
yet the sidplay feature is likely unused, as enabling it breaks the build.

Drop support. If someone needs it it can be re-added along with the
dependency.

Link: https://raw.githubusercontent.com/MusicPlayerDaemon/MPD/v0.24/NEWS [1]
Cc: Andreas Ziegler <br025@umbiko.net>
Signed-off-by: John Ernberg <j@j-ernberg.se>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-05-18 21:18:46 +02:00
John Ernberg
7bb6e399d9 package/libselinux: Adjust fstab during TARGET_FINALIZE
Doing so in the INSTALL_CMD makes the fstab adjustment subject to
overwrites by other packages during a per-package build.

Currently since per-package directories are populated using hardlinks
this adjustment propagates backwards into the skeleton package, but this
should not be relied upon.

Cc: Antoine Tenart <atenart@kernel.org>
Cc: Marcus Folkesson <marcus.folkesson@gmail.com>
Signed-off-by: John Ernberg <j@j-ernberg.se>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-05-18 21:16:22 +02:00
John Ernberg
319eeda6fa package/{clang, llvm}: Move removal of opt-viewer to the correct package
The files are installed by llvm but deleted by clang, this causes a
mismatch in the packaging.

Remove the files from the correct package.

Cc: Daniel Lang <dalang@gmx.at>
Cc: Joseph Kogut <joseph.kogut@gmail.com>
Cc: Romain Naour <romain.naour@gmail.com>
Cc: Valentin Korenblit <valentinkorenblit@gmail.com>
Signed-off-by: John Ernberg <j@j-ernberg.se>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-05-18 21:10:58 +02:00
John Ernberg
418ee5a2b6 linux: Only run depmod during the finalize hook
Commit 82e7656400 ("linux: Allow modprobe for out-of-tre modules") added
support for running depmod as part of the target finalize hook.

However, it also originally set DEPMOD to /dev/null, a hunk that was
removed upon apply. The kernel depmod wrapper script uses `command` to
verify that whatever is passed into DEPMOD is known to the shell.
These days if the DEPMOD tool is set to something incorrect the depmod
script will just warn [1], but there are trees where the depmod script will
stop with a hard error. [2]

Running depmod as part of out-of-tree module installations causes
unnecessary files to be generated and installed.

Since we're already running depmod in the finalize hook, stub this call to
`true` as it's definitely a shell callable, and it will always succeed.
This is what is done for other packaging scripts in the kernel tree. [3]

Link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/scripts/depmod.sh?id=914b087ff9e0e9a399a4927fa30793064afc0178 [1]
Link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/scripts/depmod.sh?id=934193a654c1f4d0643ddbf4b2529b508cae926e [2]
Link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/scripts/package/PKGBUILD?id=8bdd53e066012bed431667393676d1b5e8cce153#n70 [3]
Signed-off-by: John Ernberg <j@j-ernberg.se>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-05-18 21:09:10 +02:00
Jack Rubacha
9a1fc8176e package/qt6/qt6grpc: new package
Adds the QT GRPC module (containing Qt Protobuf as well).

Signed-off-by: Jack Rubacha <rubacha.jack03@gmail.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-05-18 20:45:02 +02:00
Thomas Devoogdt
c4cd1d5240 package/mesa3d: add option to enable patented video codecs
By default, mesa uses -Dvideo-codecs=all_free which only includes
royalty-free codecs (AV1, VP9, MPEG-1/2, JPEG).

Add a new BR2_PACKAGE_MESA3D_PATENTED_VIDEO_CODECS option to set
-Dvideo-codecs=all, which additionally enables patent-encumbered
codecs (H.264, H.265, VC-1) for both Gallium VA-API and Vulkan
video decode/encode.

Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>
[Arnout: add PATENTED to the config symbol name]
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-05-18 20:28:59 +02:00
Thomas Devoogdt
460700d38e package/mesa3d: add Gallium VA-API support
Since commit 361bfbc70b (package/mesa3d: disable libva support),
VA-API has been unconditionally disabled in mesa3d due to a circular
dependency between mesa3d, libva and libgl.

The circular dependency only occurs when mesa3d is the libgl provider,
i.e. when GLX is enabled without libglvnd. In that case:
  mesa3d -> libva -> libgl -> mesa3d

Re-enable VA-API support as a new BR2_PACKAGE_MESA3D_GALLIUM_VA option,
guarded by a dependency that prevents the circular case. This allows
hardware video acceleration on AMD, Intel and other GPUs with Gallium
drivers.

Signed-off-by: Thomas Devoogdt <thomas.devoogdt@barco.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
2026-05-18 20:19:36 +02:00
Romain Naour
b5124a6ab3 Config.in.legacy: fix release where BR2_PACKAGE_QEMU_TARGET_MICROBLAZEEL was removed
Commit 9a5369effd which removed the
BR2_PACKAGE_QEMU_TARGET_MICROBLAZEEL symbol but forgot to introduce the
new "Legacy options removed in 2026.08" comment.

So the legacy symbol was incorrectly placed under
"Legacy options removed in 2026.05" comment.

Fix that.

Reported-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-16 17:40:27 +02:00
Giulio Benetti
4ed01e7ed3 packge/swupdate: bump to version 2025.12
* backport locally patch [1] to fix build failure due to missing crypto
  backend
* libconfig is required by default[2] so let's select it
* align swupdate.config to the most basic one with openssl crypto
  backend enabled by default
* drop HAVE_LIBCRYPTO since it's not used anymore by swupdate even if
  present
* add libgpgme support

[1]: 10334fb217
[2]: 4b9a71476c

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2026-05-15 17:13:41 +02:00
Joseph Kogut
9a5369effd package/qemu: bump to version 11.0.0
Changelog:
https://wiki.qemu.org/ChangeLog/11.0

Note:
  - Support for all 32-bit host systems has been removed.
  - Support for microblazeel has been folded into the microblaze target

Qemu v11.0.0 drops 32-bit support for hosts, all qemu builds must now be
64-bit. Hosts running 64-bit qemu builds can still emulate 32-bit
targets.

Confusingly, the qemu package is also capable of being built and running
on buildroot hosts, and targets. In any case, qemu only supports running
on 64-bit hosts (which may be buildroot targets), so adjust
BR2_PACKAGE_QEMU_ARCH_SUPPORTS_TARGET to indicate no support for 32-bit
buildroot targets, and drop configs for architectures like BR2_arm that
are implicitly 32-bit only.

Separately, the qemu microblazeel target was removed with commit
46a25ae3f0e75e230c06e21435850b1cd1c44f07, as the microblaze (qemu)
target supports both endiannesses, so that's fixed up in the package
Makefile as well.

Signed-off-by: Joseph Kogut <joseph@anodize.com>
[Romain: remove duplicate --disable-download from QEMU_CONFIGURE_CMDS]
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2026-05-15 15:36:14 +02:00
Xukai Wang
85a3edc0ba package/python-gymnasium: bump version to 1.3.0
https://github.com/Farama-Foundation/Gymnasium/releases/tag/v1.3.0

Signed-off-by: Xukai Wang <kingxukai@zohomail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 15:13:56 +02:00
Xukai Wang
0c73553d84 package/python-farama-notifications: bump version to 0.0.6
https://github.com/Farama-Foundation/Farama-Notifications/releases/tag/0.0.6

Signed-off-by: Xukai Wang <kingxukai@zohomail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 15:13:56 +02:00
Xukai Wang
40ceef2781 package/python-gymnasium: add missing toolchain dependencies for numpy
python-gymnasium selects python-numpy, but does not inherit the toolchain
requirements of numpy, which can lead to automatic selection of numpy
without proper toolchain support (C++, gcc >= 9, glibc/musl).

Fix this by adding all necessary toolchain dependencies that numpy
requires. Also update the help URL and add a comment explaining the
toolchain requirements.

Signed-off-by: Xukai Wang <kingxukai@zohomail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 15:13:56 +02:00
Joseph Kogut
2195c46d2d DEVELOPERS: add package/mesa3d for Joseph Kogut
Add mesa3d package to the list of files I maintain.

Signed-off-by: Joseph Kogut <joseph.kogut@gmail.com>
Reviewed-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2026-05-15 13:21:35 +02:00
Joseph Kogut
4dd918fab6 package/mesa3d: add freedreno vulkan driver config
Signed-off-by: Joseph Kogut <joseph@anodize.com>
Reviewed-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2026-05-15 13:21:32 +02:00
Joseph Kogut
84dd56f072 package/mesa3d: add freedreno-virtio config
Add a config for enabling the freedreno virtio KMD backend, in the same
pattern as amdgpu-virtio.

Signed-off-by: Joseph Kogut <joseph@anodize.com>
Reviewed-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2026-05-15 13:21:29 +02:00
Joseph Kogut
ab1de2ec7f package/mesa3d: add amdgpu-virtio config
Add a config section for host native context drivers, which currently
use virtio-gpu as a backend to mediate access to the host kernel's DRM
uAPI.

https://www.collabora.com/news-and-blog/blog/2025/01/15/the-state-of-gfx-virtualization-using-virglrenderer/

Signed-off-by: Joseph Kogut <joseph@anodize.com>
Reviewed-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2026-05-15 13:21:25 +02:00
Joseph Kogut
a24698054b package/mesa3d: make LLVM optional for radeonsi
Since mesa3d v26.0 [0], the ACO compiler has been the default over LLVM.
This shader compiler backend has been used for even longer by the RADV
vulkan driver.

Let's make LLVM optional.

Users who wish to continue using LLVM must enable support in Mesa, and
override the default ACO compiler at runtime using an env var. [1]

Users who only want to use the default compiler backend may disable LLVM
support, and save a lot of time during the build.

[0] e26c28f311
[1] https://docs.mesa3d.org/envvars.html#envvar-AMD_DEBUG

Signed-off-by: Joseph Kogut <joseph@anodize.com>
Reviewed-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Romain Naour <romain.naour@smile.fr>
2026-05-15 13:06:31 +02:00
Andreas Mohr
30c34bdef3 package/cryptsetup: add Mbed-TLS crypto backend support
cryptsetup support Mbed-TLS/mbedtls since 2.8.0:
cb7b7fd863

Signed-off-by: Andreas Mohr <and@gmx.li>
[Julien: add link in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 12:48:22 +02:00
Bernd Kuhls
7c941cb88b package/libmbim: bump version to 1.34.0
https://gitlab.freedesktop.org/mobile-broadband/libmbim/-/blob/1.34.0/NEWS

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:39:43 +02:00
Bernd Kuhls
4e05cde652 package/libmediaart: bump version to 1.9.7
https://download.gnome.org/sources/libmediaart/1.9/libmediaart-1.9.7.news

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:39:43 +02:00
Bernd Kuhls
73594f1d0e package/libcoap: bump version to 4.3.5b
https://github.com/obgm/libcoap/blob/v4.3.5b/ChangeLog

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:39:43 +02:00
Bernd Kuhls
372f0ea9ce package/libatomic_ops: bump version to 7.10.0
https://github.com/bdwgc/libatomic_ops/blob/v7.10.0/ChangeLog

Switch to tarball provided by upstream which also contains autoconf'ed
files so we can remove autoreconf.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:39:43 +02:00
Bernd Kuhls
4f92439320 package/libdecor: bump version to 0.2.5
https://gitlab.freedesktop.org/libdecor/libdecor/-/commits/0.2.5

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:39:43 +02:00
Bernd Kuhls
20275000f3 package/libunwind: bump to version 1.8.3
https://github.com/libunwind/libunwind/releases/tag/v1.8.2
https://github.com/libunwind/libunwind/releases/tag/v1.8.3

Switched to tarball hash provided by upstream.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:39:43 +02:00
Bernd Kuhls
c522110685 package/libssh: bump version to 0.12.0
https://gitlab.com/libssh/libssh-mirror/-/tags/libssh-0.12.0
https://www.libssh.org/2026/02/10/libssh-0-12-0-and-0-11-4-security-releases/

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:39:43 +02:00
Bernd Kuhls
b77485f201 package/libv4l: bump version to 1.32.0
https://git.linuxtv.org/v4l-utils.git/tree/ChangeLog?h=v4l-utils-1.32.0

Removed patches which are included in this release.

Updated license hashes due to upstream commit
https://git.linuxtv.org/v4l-utils.git/diff/?h=v4l-utils-1.32.0&id=dc81a361e22ce71a454ad63a6ede725b97cc26ce

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:39:43 +02:00
Bernd Kuhls
b335d2237c package/libxmlb: bump version to 0.3.26
https://github.com/hughsie/libxmlb/blob/0.3.26/NEWS

Switched to xz tarball and tarball hash provided by upstream.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:39:43 +02:00
Bernd Kuhls
1c5730ebb5 package/taglib: bump version to 2.3
https://github.com/taglib/taglib/blob/v2.3/CHANGELOG.md

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:13:42 +02:00
Bernd Kuhls
1254fd5c0e package/lm-sensors: bump version to 3.6.2
https://github.com/lm-sensors/lm-sensors/blob/V3-6-2/CHANGES

Removed patch 0002 which is included in this release:
e31cb3b2f8

Rebased and renumbered remaining patch.

Updated license hash due to upstream commit
6128b9e8eb

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 11:12:36 +02:00
Bernd Kuhls
e125a47fab package/elfutils: bump version to 0.195
https://sourceware.org/pipermail/elfutils-devel/2026q2/009226.html

Rebased patch 0002 due to upstream commits:
https://sourceware.org/git/?p=elfutils.git;a=commitdiff;h=1fb2723c504588b60c3f796d91b535b50e0f4fd0
https://sourceware.org/git/?p=elfutils.git;a=commitdiff;h=45bf7360166b30465d5aebb7822f93c26f370b1b

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-15 10:40:06 +02:00
Bernd Kuhls
17aa65ebda package/semodule-utils: bump version to 3.10
https://github.com/SELinuxProject/selinux/releases/tag/3.10

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 15:44:48 +02:00
Bernd Kuhls
7e0c02b091 package/selinux-python: bump version to 3.10
https://github.com/SELinuxProject/selinux/releases/tag/3.10

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 15:44:48 +02:00
Bernd Kuhls
e07f0eba7e package/restorecond: bump version to 3.10
https://github.com/SELinuxProject/selinux/releases/tag/3.10

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 15:44:48 +02:00
Bernd Kuhls
ec210e7c87 package/policycoreutils: bump version to 3.10
https://github.com/SELinuxProject/selinux/releases/tag/3.10

Added comment for license hash.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 15:44:48 +02:00
Bernd Kuhls
54ddc1e991 package/libsepol: bump version to 3.10
https://github.com/SELinuxProject/selinux/releases/download/3.10/RELEASE-3.10.txt

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 15:44:48 +02:00
Bernd Kuhls
9f85051519 package/libsemanage: bump version to 3.10
https://github.com/SELinuxProject/selinux/releases/tag/3.10

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 15:44:48 +02:00
Bernd Kuhls
a9b08e522c package/checkpolicy: bump version to 3.10
https://github.com/SELinuxProject/selinux/releases/tag/3.10

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 15:44:48 +02:00
Bernd Kuhls
768f16502a package/libselinux: bump version to 3.10
https://github.com/SELinuxProject/selinux/releases/tag/3.10

Rebased patch 0001 due to inclusion of patch 0003 in this release.
Removed patch 0003 which is included in this release.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 15:44:48 +02:00
Daniel Crowe
11e5c1ffdf package/python-cachelib: bump version to 0.14.0
Signed-off-by: Daniel Crowe <daniel.crowe@maxmine.com.au>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 15:27:38 +02:00
Yann E. MORIN
0452451195 package/skopeo: bump to version 1.22.2
Release notes, since 1.22.0:
https://github.com/containers/skopeo/releases/tag/v1.22.1
https://github.com/containers/skopeo/releases/tag/v1.22.2

Signed-off-by: Yann E. MORIN <yann.morin@orange.com>
[Julien: add links to release notes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 15:14:39 +02:00
Mattias Walström
62afff3baa package/frr: Bump version to 10.5.4
For change log, see:
https://github.com/FRRouting/frr/releases/tag/frr-10.5.4

Summary of Changes:

bfdd:
    - cap IPv6 echo reflection to declared length
    - account for FP offset in echo length checks
    - fix recv errno filter logic in a few places
    - tighten SBFD reflector packet sanity checks
    - gate IPv6 echo reflection on known sessions
    - tighten auth header parsing skeleton
    - validate control packet length before session lookup

bgpd:
    - Fix memleak when configuring rd
    - Validate if NHC BGPID TLV value is non-zero
    - Avoid having a dangling pointer after we free NHC attribute
    - Check if BGPID NHC TLV exists when IPv6 next-hop is link-local
    - Do not allocate NHC TLV with an extra trailer
    - migrate timers during peer_xfer_conn to fix stale route cleanup
    - honor 'no activate' for dynamic neighbors in peer-group
    - Return immediately when dynamic capability action is not valid
    - Validate BGP role capability when handling it dynamically
    - fix neighbor IP comparison for IPv6 memcmp return values
    - Don't mark nexthop as changed if a set next-hop unchanged is applied
    - Return BGP_PEER_INTERNAL when first peer's as type is set to auto
    - Update peer sort cache when remote-as auto is used and AS number changed
    - Check dynamic capability action before validating ENHE capability
    - Do not allocate stream if route-refresh capability is not received
    - Move rpki strict check to bgp_accept()
    - Fix memory leak for nhc attribute if ipv6 is link-local address
    - Fix compilation for Debian 11 when printing uint64 values
    - Return zero labels if no BOS found and it's not a withdraw label
    - Fix signed overflow in hexstr2num()
    - Check the length also when parsing ENCAP attr sub-TLVs
    - Validate prefixlen before subtracting when parsing labeled unicast NLRI
    - Reset the stream to attr_start + attribute_len when WITHDRAWN
    - Revalidate locally originated routes against RPKI changes
    - Check if prefixlen is not 0 when parsing flowspec stuff
    - Prevent len_string going negative when trying to display flowspec entries
    - fix import vrf on non existing vrf
    - fix no vrf import command
    - Free hostname for FQDN capability if the parsing goes wrong
    - Validate MP_REACH_NLRI attribute against incorrect next-hop
    - Fix dynamic FQDN capability handling
    - Check if the remaining length for subtracting TLV length is enough
    - Fix the end pointer boundaries for dynamic graceful restart capability
    - Add missing returns when parsing enhanced route-refresh
    - Return original as-path when reconciling AS versus AS4
    - Do not process route-refresh for AFI/SAFI if it's not negotiated
    - Check if we are not overusing error_data buffer when unknown cap received
    - fix NHT for explicit link-local BGP peers
    - improve packet parsing for EVPN and ENCAP/VNC
    - Prevent heap use-after-free for tunnel encapsulation attribute
    - Return 0 if AS4 capability is malformed
    - close dynamic peer socket in ttl error path
    - fix logic handling EVPN_FLAG_DEFAULT_GW
    - avoid early return in MPLSVPN NLRI processing
    - remove unneeded asserts in packet reads

eigrpd:
    - fix byte order in Hello TLV decode functions
    - Handling for malformed update packets
    - enforce minimum TLV length in Hello handler
    - reject invalid prefix mask len
    - skip unknown and ignored TLVs
    - Improve packet validation

isisd:
    - Reject SRv6 Locator TLV with Loc-Size of zero
    - consume leftover bytes after FAD sub-sub-TLV loop
    - use correct min size values for srv6 subtlvs
    - improve validation of flex-algo decoder
    - Fix missing neighbor address Sub-TLVs after link-params change
    - add unit test for remove_excess_adjs() memory leak fix
    - fix memory leak in remove_excess_adjs()
    - fix edge condition in max_lsp_count computation

ldpd:
    - improve tlv validation in several places

lib:
    - Report IPv6 MTU and not IPv4 for if_update_state_mtu6
    - disable warning in zlog.c to match master

nhrpd:
    - stop debugging auth credentials
    - fix byte-order when comparing error code in shortcut path
    - guard against zbuf_pulln NULL on truncated packets
    - require auth for all received packet types
    - harden debug packet parsing against malformed input
    - validate AFI index in extension replies

ospf6d:
    - move log call out of priv block
    - remove asserts in packet-handling paths
    - fix issues in ospf6 auth trailer code

ospfd:
    - add LSA validation in the apiserver path
    - add validation in several places before accessing

pceplib:
    - validate during of_list TLV decoding

pimd:
    - fix NOCACHE MFC resync detection log, add vrf name too
    - use upstream-owned pim pointer in register and upstream timers
    - use upstream-owned pim pointer in MSDP update paths
    - avoid JP build deref through channel OIL
    - guard RP RPF-failure mroute delete on detached OIL
    - avoid null deref in upstream delete debug path
    - guard channel OIL detach against stale pointers
    - fix crash due to double free
    - Ensure igmp message is of proper size
    - Reject pim packets with a malformed header length
    - Fix out of bounds read in AutoRP code
    - igmpv3 never checks packet length and trusts the num-sources field
    - Do not allow a register-stop message if not received from the RP
    - Prevent received msg length from being larger than buffer
    - Remove unnecessary asserts
    - When receiving a register stop ensure we have enough data to read
    - Ensure a register packet has enough space to read S,G data
    - Ensure that header has space on packet

ripngd:
    - fix data handling in several places

tests:
    - Check if route-map with set nexthop unchanged does not prevent outgoing
    - Check if mixed peer-group remote-as types can be used with auto
    - Verify neighbor addr Sub-TLVs after link-params reset
    - Expect return code being 0, not -1 when AS4 is empty or ASN is 0

vrrpd:
    - replace some asserts
    - only support ethernet in GARP code
    - limit advertised timers to 12-bits

Signed-off-by: Mattias Walström <lazzer@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 14:57:09 +02:00
Nicolas Cavallari
a562b8c3aa package/libgit2: bump version to 1.9.3
Release notes:
https://github.com/libgit2/libgit2/releases/tag/v1.9.3

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 12:42:37 +02:00
José Luis Salvador Rufo
e27d105dde package/zfs: bump version to 2.4.2
For release note, see:
https://github.com/openzfs/zfs/releases/tag/zfs-2.4.2

Signed-off-by: José Luis Salvador Rufo <salvador.joseluis@gmail.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-14 10:40:41 +02:00
Bernd Kuhls
c6be4815e4 package/mutt: bump version to 2.3.2
http://www.mutt.org/news.html
http://www.mutt.org/relnotes/2.3/
https://gitlab.com/muttmua/mutt/raw/stable/UPDATING

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-12 22:22:24 +02:00
Peter Korsgaard
9684cb9b44 Update for 2026.05-rc1
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2026.05-rc1
2026-05-12 15:53:05 +02:00
Shubham Chakraborty
44f60e9f70 package/dos2unix: update upstream URLs
The old upstream page [1] is being deprecated. It currently shows:
"""
This page will go offline on 1 July 2026. Go to the new page at
https://waterlander.net/dos2unix/
"""

This commit updates the homepage, download site and hash file URL
to the new upstream location [2].

[1] http://waterlan.home.xs4all.nl/dos2unix.html
[2] https://waterlander.net/dos2unix/

Signed-off-by: Shubham Chakraborty <chakrabortyshubham66@gmail.com>
[Julien: add info in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-11 21:33:52 +02:00
Julien Olivain
262db97f12 package/dash: fix hash file
Buildroot commit 3563ae9586
introduced an incorrectly formatted hash file. This commit
fixes the issue.

Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-11 21:32:28 +02:00
Giulio Benetti
3563ae9586 package/dash: bump to version 0.5.13.4
For change log, see:
https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?h=6a1533f24b646364ad514c542292b5c85b2adabf

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-11 21:16:53 +02:00
Bernd Kuhls
6be9c7e9cf package/dnsmasq: security bump version to 2.92rel2
https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2026q2/018471.html
https://thekelleys.org.uk/dnsmasq/CVE/

Fixes CVE-2026-2291, CVE-2026-4890, CVE-2026-4891, CVE-2026-4892,
CVE-2026-4893 & CVE-2026-5172.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-05-11 21:09:02 +02:00