Security fixes:
- Fix MSL/SVG parsers to use libxml2 SAX handlers, removing archaic
cruft with potential security issues
- Fix JP2 Jasper max_samples calculation to avoid DoS via huge images
- Apply image dimension resource limits and fix heap write overflow in JXL
- Fix WPG palette buffer allocation (SF bug #750)
- Fix ColorFloodfillImage() to error when clip-mask is present
Bug fixes:
- Fix JPEG CMYK inversion regression introduced in 1.3.43
- Re-implement PNG8 writer with correct indexed-color and binary transparency
- Re-write HEIF reader (AVIF, HEIC) based on heif_image_get_plane_readonly2(),
adding deep image support and YCbCr/monochrome output
- Fix Hull transform arithmetic overflow regression from Oct 2023
- Fix -crop percentage tiling regression
- Re-enable EXPERIMENTAL_EXIF_TAGS by default with known issues fixed
- Fix Magick++ thread safety regression since 2003 (pthreads support)
New features:
- Add support for newer Artifex urw-base35-fonts (OpenType and Type 1)
- Add ImagesResource limit to control simultaneous loaded images
- Add EXIF Version 3.0 decoding and validation
- Add preliminary MP4 coder with HEIF sequence support
- Require C99 compiler compatibility in build infrastructure
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Seems a lot of packages are just getting abandoned by people.
Will pick these up and see them through.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
I could not reproduce the bug reported, but the update should fix it
anyway. Tested on Turris Omnia, OpenWrt r31111.
Signed-off-by: Marius Dinu <m95d+git at psihoexpert.ro>
[imported from mailing list]
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
As we're seeing in various test.sh scrip runs, importing 'email' fails
with not finding 'urllib' and vice-versa.
Then via a7e96ec91 ("python3-email: add python3-urllib as dependency")
I created a circular dependency.
So, might as well merge the two packages into one (named python3-urllib)
and updates all dependencies to pull python3-urllib.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Add a note indicating that patented codecs and technologies are
available when CONFIG_BUILD_PATENTED=y.
Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
With mjpg-streamer pending removal [1], it would be nice if we add
a compatible replacement which is under active development.
ustreamer offers a better performance, especially when the
camera supports MJPEG encoding in hardware.
The package already includes OpenWRT support files ./pkg/openwrt
but they needed heavy editing, so it is more efficient to copy
the scripts and configuration, instead of using patches.
Notable changes:
While the init.d script can run in the background when no camera is
connected, it is more efficient to indicate no active instances.
A hotplug script is introduced to start and stop the service when
cameras are added or removed.
If the configured format or encoding are unsupported, a compatible
alternative is automatically selected, so I changed the default
configuration to use MJPEG encoding in hardware for better performance.
HACKS:
MAKE_FLAGS += WITH_SETPROCTITLE=0
is added to workaround the following linker error:
undefined reference to setproctitle_init
This symbol is defined in libbsd, however adding the build dependency
does not resolve the error, because -lbsd is added conditionally, only
when uname -s contains linux. This is unreliable and fails when
cross-compiling on a macOS host. An upstream fix is needed.
An alternative is to use
PKG_UNPACK=$(HOST_TAR) -C $(PKG_BUILD_DIR) --strip=2 -xf $(DL_DIR)/$(PKG_SOURCE)
however this modifies the directory structure, so patches would need
path editing to maintain upstream compatibility.
TODO:
luci-app-mjpg-streamer which is also pending removal [2] is able to
open the HTTP stream from ustreamer. It would be nice to create
luci-app-ustreamer based on that.
[1] https://github.com/openwrt/packages/pull/28344
[2] https://github.com/openwrt/luci/pull/8221
Signed-off-by: Georgi Valkov <gvalkov@gmail.com>
Remove warning disable. The issue was fixed in 7.1 and backported to
6.1.3
Remove atrac3 from patented list. It's no longer true and is already in
the non patented list.
Add missing upstream patch in 6.1.4 to fix x86 build.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Bump rtpmidid to version 24.12. The new release fix support for CMake >=
4.0 version and permit to drop all patch (everything is upstream)
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Add pending patch for v4l2tools for CMake >= 4.0 support.
Also backport a patch for the v4l2wrapper library.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
An external JavaScript runtime (e.g. QuickJS) is now required for full
YouTube support.
Add QuickJS as a dependency and use it as an external runtime.
Move cache to /var/cache.
Changelog: https://github.com/yt-dlp/yt-dlp/releases/tag/2025.11.12
Signed-off-by: George Sapkin <george@sapk.in>
- Update version
- Remove unneded patches
- Add patch to drop codegen in alsa module
- Rebase & refresh patches
Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
- Add UCI configuration to be able to switch user/group and set ulimit.
- Place daemon into jail by default, to allow bind on lower ports, such as 554 (RTSP)
- Add option to allow or deny config.yaml editing from the web interface.
- Connect stdout/err to log
Signed-off-by: Vladimir Ermakov <vooon341@gmail.com>
The codecparsers package was accidentally added another time.
Sort libraries alphabetically to avoid this kind of mistake in the
future.
Fixes: a014537e0 ("gstreamer: update to 1.26.4")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Update GStreamer packages release 1.26.4.
While at it, package v4l2codecs to make use of stateless video
encoding and decoding features typical for embedded devices.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Yanase Yuki