From: Daniel Golle <redacted>
Date: Fri, 21 Aug 2026 05:55:04 +0000 (+0100)
Subject: libextractor: update to 1.19
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=45cb8e6cd51721a5762674a37bc54486d4c4cbad;p=openwrt-packages.git

libextractor: update to 1.19

1.15: fix potential 4 MB on-stack allocation / stack-based buffer overflow
in the OLE2 plugin.

1.16: security fix to not honour LIBEXTRACTOR_PREFIX when linked into a
SUID binary running as root; fix tIME chunk parser in PNG plugin, QT
mime-type detection, wrong constant in REAL plugin, multi-chunked
decompression in DEB plugin, GIF plugin memory leak, W32 IPC error
handling, gzip-compressed header bit-flags.

1.17: fix various minor issues, including a missing 0 terminator in ZIP
handling under particular circumstances.

1.18: detect secure execution mode properly when deciding whether to
honour LIBEXTRACTOR_PREFIX (use secure_getenv()/issetugid()/real vs
effective UID-GID instead of only checking for root).

1.19: add RTF and msoffice plugins; fix bugs and performance issues in
the unzip logic, an offset calculation issue in the WAV extractor, and
minor memory leaks in the ELF extractor; add OSS-Fuzz support.

Add the two new plugins to PLUGINS so they actually get built and
packaged rather than compiled and silently dropped. Per
src/plugins/Makefile.am upstream, neither needs a new dependency:
libextractor_rtf is unconditional (same group as the already-packaged
riff/ps plugins), and libextractor_msoffice only requires HAVE_ZLIB
(same group as the already-packaged deb/odf/zip plugins), which is
already satisfied.

Not build-verified: a pre-existing host python3/ncurses build failure
affecting every package in this feed blocks the build well before it
reaches libextractor's own compile step.

Signed-off-by: Daniel Golle <redacted>
---

diff --git a/libs/libextractor/Makefile b/libs/libextractor/Makefile
index a9d2b9f25..36985f6e1 100644
--- a/libs/libextractor/Makefile
+++ b/libs/libextractor/Makefile
@@ -6,15 +6,15 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=libextractor
-PKG_VERSION:=1.14
-PKG_RELEASE:=2
+PKG_VERSION:=1.19
+PKG_RELEASE:=1
 
 # ToDo:
 # - package missing optional dependencies: libexiv2, gsf, librpm, smf, tidy
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=@GNU/$(PKG_NAME)
-PKG_HASH:=1a3a55433fcafc4a32c64dc37b175458e35d6f4e9b8f9f4bf11b2c23cc6b4680
+PKG_HASH:=2d5b33cbdb21c88ae9360994d4e216627413ee9cb11b31b033c2d0cf42ef2700
 
 PKG_LICENSE:=GPL-3.0-or-later
 PKG_LICENSE_FILES:=COPYING
@@ -39,6 +39,7 @@ PLUGINS:= \
 	man \
 	mime:+libmagic \
 	mpeg:+libmpeg2 \
+	msoffice \
 	nsf \
 	nsfe \
 	odf \
@@ -46,6 +47,7 @@ PLUGINS:= \
 	png \
 	ps \
 	riff \
+	rtf \
 	s3m \
 	sid \
 	tiff:+libtiff \