The error in the #24828 patch series left Kconfig recursive depedency
error on zabbix-frontend-server. We fix this by update the database
depedencies on zabbix-frontend-server. Now, you must select the PHP8
database module you want _before_ zabbix-frontend-server will be
visible in menuconfig.
This is not a big problem, because zabbix-frontend-server already
depends on having php8 slected before the frontend can be built.
Closes: #28458 Signed-off-by: Daniel F. Dickinson <redacted>
Due to package renaming the selection of database for the server and
proxy was missing from the Kconfig menu. This caused build failures for
proxy and server.
zabbix: fix compile skipped due to line continuation
Using line continuation (\\) in GNU Make \$(foreach ...) and
\$(call ...) resulted in the install section for many of the packages
not being defined. This resulted in 'skipping [package-name] no install
section' messages and no new package being generated.
We remove the line continuation from the parts foreach and call, in
ordeer to restore compilation and creation of packages.
George Sapkin [Mon, 2 Feb 2026 01:11:01 +0000 (03:11 +0200)]
golang: add option to skip building bootstrap
Introduce a new configuration option - GOLANG_BUILD_BOOTSTRAP - that
defaults to enabled:
- When enabled, build the local bootstrap instead of using an external
one for host Go. If GOLANG_EXTERNAL_BOOTSTRAP_ROOT is set, skip the
initial 1.4 step.
- When disabled, let Go auto-detect the toolchain or use the toolchain
specified in GOLANG_EXTERNAL_BOOTSTRAP_ROOT to skip building the
bootstrap and build host Go using that toolchain directly. Configured
toolchain must be compatible with the current version of Go.
HOST_BUILD_DEPENDS cannot be conditional, so some Makefile juggling is
needed.
Put menu config under bootstrap only.
Remove unnecessary package-related flags from host-only bootstrap.
Since the RFC-1918 in-addr.arpa empty zones are automatically created,
they will exist, but we can't use modzone on them because that's not
how things work.
zabbix: deduplicate and reorganize package defines
In preparation for further changes, deduplicate package definitions,
and reorganize them. At the same time make use of provides to ensure
both existing names are preserved, and that it is possible to be
specific about the variant of the package one wants.
Also, condense the package conffiles, install, postinst, etc handling.
This is more maintainable (less copy and paste and less to modify).
zabbix: drop unwanted file and wrong BUILD_VARIANT
cspell.json was accidentally include in a previous commit, so remove it.
VARIANT is to be used in package definitions, and BUILD_VARIANT
for checking which VARIANT is currently being built. BUILD_VARIANT was
incorrectly used in a package definition, so we fix that.
bind: backport patch replace automatic empty zones
The RFC-1918 zones are automatically synthesized locally by bind
to avoid forwarding queries about them to root nameservers. As
a result, we can't easily replace them with rndc addzone on the
fly. We need this for DHCP integration.
Rosen Penev [Fri, 30 Jan 2026 04:55:29 +0000 (20:55 -0800)]
faad2: update to 2.11.2
Remove no longer used CONFIGURE_ARGS since the conversion to CMake.
Remove patented stuff. Red Hat Legal seems to have approved its
inclusion into Fedora without any flags disabling SBR. If it's good
enough for Red Hat it's good enough for OpenWrt.
Stan Grishin [Wed, 28 Jan 2026 00:19:37 +0000 (00:19 +0000)]
adblock-fast: update to 1.2.1-3
* add an option dnsmasq_validity_check to enable removal of invalid
domains from the final dnsmasq files
* renamed option sanity_check to dnsmasq_sanity_check
* better names for Format Filters and Parse Filters variables
Georgi Valkov [Wed, 28 Jan 2026 18:21:28 +0000 (20:21 +0200)]
libimobiledevice: fix dependency on libtatsu
libtatsu is a dependency only for libimobiledevice-utils
the library itself does not use it during build, and is a
core component for iPhone tethering, while the utils are optional
move the dependency to the utils, to reduce the build size:
libtatsu depends on libcurl, which is compiled with a TLS library,
so users of prebuilt packages are forced to install both
OpenSSL and mbed TLS. This patch removes the unnecessary dependency.
Fixes: https://github.com/openwrt/packages/issues/28427 Signed-off-by: Georgi Valkov <redacted>
Error if shebang to host python interpreter would exceed 127 characters
(124 characters plus shebang and newline). This is used to alert user
when python-installer would fail to correctly set a Python program's
shebang line.
Closes: https://github.com/openwrt/packages/issues/28310 Signed-off-by: Daniel F. Dickinson <redacted>
George Sapkin [Wed, 21 Jan 2026 00:53:04 +0000 (02:53 +0200)]
golang: add generic package definition
Move version definition to a helper file so multiple versions can be
easily defined using it.
Variables HOST_GO_VARS, PKG_GO_ASMFLAGS, PKG_GO_GCFLAGS,
PKG_GO_INSTALL_ARGS, PKG_GO_LDFLAGS, PKG_GO_VARS, and
PKG_GO_ZBOOTSTRAP_MODS are defined using conditional variable
assignment and can be overridden for each go version.
Eugenio Pérez [Sun, 25 Jan 2026 15:20:32 +0000 (17:20 +0200)]
domoticz: fix chown call
Busybox's chown stops reading the username at the dot, so only user was
changed and the group remained as root. Properly use ':' instead of '.'
as the delimeter.
Fixes: a98239c "domoticz: update to 3.9571 and clean up FHS handling" Signed-off-by: Eugenio Pérez <redacted>
[add PKG_RELEASE bump, modify commit message, add Fixes line] Signed-off-by: Hannu Nyman <redacted>
Hannu Nyman [Sun, 25 Jan 2026 10:56:01 +0000 (12:56 +0200)]
irqbalance: update to version 1.9.5
Update to version 1.9.5
* Use upstream meson.build file, as they now support meson
* patch it locally to continue using static glib linking
* Disable numa, systemd and thermal functions via meson options
* Resurrect the patch to silence repetitive EINVAL warnings.
(patch was used with 1.9.3, but was not needed with 1.9.4)
Related discussion in upstream issue 336 and 349
Michal Kazior [Thu, 4 Sep 2025 17:18:47 +0000 (17:18 +0000)]
lxc: fix meson.build on esoteric host systems
When building lxc's meson.build tries to infer
something for the target system out of the host
build OS. This isn't reproducible and can actually
fail on some OS' like NixOS.
The failure looked like this, early in the
building stage of lxc:
> ../../../../build_dir/target-aarch64_cortex-a53_musl/lxc-6.0.5/meson.build:166:8: ERROR: Problem encountered: "distrosysconfdir" is not set
The /etc/default seems to be something that is
derived on most host systems, so use that as the
explicit config.
This fixes building lxc on NixOS and similar.
This also makes the build more pure and
reproducible. Before this commit building the same
set of checkouts, same config would yield
different lxc artifacts on RedHat and Ubuntu.
It was probably harmless though.
This also removes inactive maintainer from the
Makefile.
Michael Heimpold [Sat, 17 Jan 2026 21:15:22 +0000 (22:15 +0100)]
php8: small maintainance cleanups
- align the config option names
- re-order the configuration options
- add some help text
- drop obsolete notes regarding older PHP versions and obsolete CONFLICT
- remove (meanwhile) unrecognized configure options
John Audia [Thu, 22 Jan 2026 21:04:22 +0000 (16:04 -0500)]
snort3: update to 3.10.2.0
New upstream release. Changelog:
appid: configurable midstream service discovery
appid: prefer QUIC client appid over SSL
appid: prevent out-of-bounds read in bootp option parsing
appid: prevent out-of-bounds read in sslv2 server-hello detection
control: refactor connection ownership model and improve thread safety
extractor: avoid reporting default values for missing SSL fields
file_api: coverity fix
flow: refactor dump_flows command to dump flow state in binary format
mime: fix compile issues
react: block flow when packets are not reset candidates
show_flows: implement utility program to convert dump_flows binary files to text Flow state data for each flow
smtp: handle split CRLF in multi-line response parsing
ssl: ssl client hello event is published with empty hostname
% snort --version
,,_ -*> Snort++ <*-
o" )~ Version 3.10.2.0
'''' By Martin Roesch & The Snort Team
http://snort.org/contact#team
Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
Copyright (C) 1998-2013 Sourcefire, Inc., et al.
Using DAQ version 3.0.24
Using Vectorscan version 5.4.12 2026-01-11
Using libpcap version 1.10.5 (with TPACKET_V3)
Using LuaJIT version 2.1.0-beta3
Using LZMA version 5.8.1
Using OpenSSL 3.5.4 30 Sep 2025
Using PCRE2 version 10.47 2025-10-21
Using ZLIB version 1.3.1
John Audia [Thu, 15 Jan 2026 14:42:48 +0000 (09:42 -0500)]
snort3: update to 3.10.1.0
New upstream release. Changelog:
alert_fast: ensure call_once definition doesn't collide in std vs glibc, thanks to krag on GitHub for suggesting this fix
alert_json: add support for logging appid, thanks to ssam18 on GitHub for suggesting this change
appid: add check to avoid setting brute force state for pending sessions that are pruned
appid: allow out-of-order packet inspection in third-party engine
appid: check for Lua table errors during initialization and cleanup
appid: enable out-of-order inspection by default
appid: fix client process regex mapping logic
appid: fix eve process handler event debug logging
appid: fix setting global ssh ignore flag
appid: fix size check in TFTP service detector
appid: mDNS TXT records parsing and deviceinfo event generation
appid: prevent multiple out-of-bounds reads in ssl
build: address compilation warnings
build: fix Coverity warnings in related components
cmake: fix pkg-config path for libdir, thanks to brianmcgillion on GitHub for submitting a similar fix
decoder: adding encode function for TransbridgeCodec
dns: add fix infinite recursion vulnerability
file: use new EVP functions rather than deprecated SHA functions
flow: add logs to show different ways a flow can fail to create
ftp_telnet: fix coverity errors and improve cmd_len configurability
ftp_telnet: fix ftp_cmd_pipe_index handling
ftp_telnet: Handle malformed traffic in ftp to generate alert
hash: update hashes to use new EVP functions, thanks to
http_inspect: add urlencoded to content-type list
http_inspect: fix coverity error
iec104: fix IEC 104 SQ0 bounds checks by removing duplicate asdu_size_map entries and using IO_GROUP sizes, preventing out-of-bounds reads
iec104: validate Type I length to prevent ASDU out-of-bounds read
ips_options: fix cursor position for byte_extract
ips_options: reset PCRE rule counts on new configuration loaded
main: update dioctl daqSnort latency common change
mime: add unit tests for data fitting memory limit
mime: add unit tests for data over memory limit
mime: add unit tests for file logging
mime: fix mime boundary parsing
mime: ignore field collection if not configured
mime: implement content parsing of multipart/form_data
mime: improve form-data collection for incomplete boundaries
mime: leave room for null-character in case of size limit hit
mime: remove unused forward-declaration
mime: rename class field to comply with the style
mime: return error code if cannot add headers for logging
pub_sub: add is_urlencoded method
sip: fix out-of-bounds reads in sip_parse_sdp_m
smb,dlp: update filename,filesize of FileInfo handling to enable dlp evaluation for repeated txns
smtp: usage of config cmds
snort2lua: fix failure in converting patterns containing commas
snort_ml: enable client body scanning by default
snort_ml: scan multipart form data
ssl: free certificate data if certificate length is 0
ssl: tls client hello check out of bounds fix
unified2: use proper API for obtaining VLAN ID from packet
% snort --version
,,_ -*> Snort++ <*-
o" )~ Version 3.10.1.0
'''' By Martin Roesch & The Snort Team
http://snort.org/contact#team
Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
Copyright (C) 1998-2013 Sourcefire, Inc., et al.
Using DAQ version 3.0.24
Using Vectorscan version 5.4.12 2026-01-11
Using libpcap version 1.10.5 (with TPACKET_V3)
Using LuaJIT version 2.1.0-beta3
Using LZMA version 5.8.1
Using OpenSSL 3.5.4 30 Sep 2025
Using PCRE2 version 10.47 2025-10-21
Using ZLIB version 1.3.1
Dirk Brenken [Sat, 24 Jan 2026 13:33:24 +0000 (14:33 +0100)]
adblock: update 4.5.0-2
* rework DNS reporting: more reliable, more information (request type), better performance
* fixed minor issues
* readme update
* LuCI: added new DNS page (incl. Allowed/Blocked canvas)
The last PR (https://github.com/openwrt/packages/pull/28370) missed
including two needed changes, and had a minor packaging Makefile
mistake.
The Zabbix Agent needs to drop privileges to the zabbix-agent user.
Similarly, if run as root (not the default), the Zabbix server needs to
drop privileges to the zabbix-server user.
There are also, in the Makefile, three instances of using BUILD_VARIANT
instead of VARIANT in package definitions.
passlib is unmaintained since 2020 and a maintained fork called libpass,
which is a drop-in replacement (even using the passlib module name), is
now available. https://github.com/Kozea/Radicale/issues/1952 has more
information.
Therefore we remove the python-passlib package from this repo.
This eliminates a dependency on the unmaintained passlib
(python3-passlib) package and add a dependency on libpass, a maintained
fork of passlib: https://github.com/Kozea/Radicale/pull/1953
In addition Radicale auth type 'autodetect' for `htpasswd` auth has
been improved by upstream.
passlib has not be updated since 2020 and is therefore a dead project.
Radicale (used in this repo as radicale3) has updated to use libpass (a
maintained fork of passlib): https://github.com/Kozea/Radicale/pull/1953
therefore add python3-libpass to provide libpass, a drop-in replacement
for passlib, and a dependency for Radicale v3.6.0.
Juan Antonio [Sun, 7 Dec 2025 15:08:50 +0000 (16:08 +0100)]
ddns-scripts: fix luci XHR timeout when restarting ddns service
Redirect stdout and stderr to /dev/null when starting/restarting the ddns
service in the background. Without this redirection, file descriptors are
inherited by the child process, preventing proper process detachment and
causing luci's XHR requests to timeout.
We update the missing sections defaults to match the upstream default,
which are also our defaults when there is an UCI configuration, and
are also the defaults for the LuCI app.
We update the initscript to rebuild the radicale3 target configuration
file and then HUP the radicale3 process to reload it, on a reload
event, rather than the default which does not regenerate the target
configuration.
git.99rst.org / openwrt-packages.git / log