staging/linusw/package/libs, branch master

uclient: update to Git HEAD (2026-01-31)

2026-01-31T14:03:33Z

b3ee1209a3d0 uclient-http: reset fd to -1 after close in disconnect 9c2ad269c42b uclient-http: fix seq field check to use correct field 80c9bd29c233 uclient-http: fix hang on HTTP to HTTPS redirect 931bbfeb2c92 ucode: fix memory leak when using ssl context Fixes: https://github.com/openwrt/uclient/issues/11 Fixes: https://github.com/openwrt/uclient/issues/13 Signed-off-by: Felix Fietkau

openssl: update to 3.5.5

2026-01-28T22:52:54Z

This release incorporates the following bug fixes and mitigations: fixed Improper validation of PBMAC1 parameters in PKCS#12 MAC verification. (CVE-2025-11187) fixed Stack buffer overflow in CMS AuthEnvelopedData parsing. (CVE-2025-15467) fixed NULL dereference in SSL_CIPHER_find () function on unknown cipher ID. (CVE-2025-15468) fixed openssl dgst one-shot codepath silently truncates inputs >16 MiB. (CVE-2025-15469) fixed TLS 1.3 CompressedCertificate excessive memory allocation. (CVE-2025-66199) fixed Heap out-of-bounds write in BIO_f_linebuffer on short writes. (CVE-2025-68160) fixed Unauthenticated/unencrypted trailing bytes with low-level OCB function calls. (CVE-2025-69418) fixed Out of bounds write in PKCS12_get_friendlyname () UTF-8 conversion. (CVE-2025-69419) fixed Missing ASN1_TYPE validation in TS_RESP_verify_response () function. (CVE-2025-69420) fixed NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex () function. (CVE-2025-69421) fixed Missing ASN1_TYPE validation in PKCS#12 parsing. (CVE-2026-22795) fixed ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes () function. (CVE-2026-22796) Adjust patches due to formatting changes. Signed-off-by: Ivan Pavlov Link: https://github.com/openwrt/openwrt/pull/21752 Signed-off-by: Hauke Mehrtens

libpcap: update to 1.10.6

2026-01-28T22:41:32Z

Vulnerabilities fixed: CVE-2025-11961 and CVE-2025-11964 Various improvements and bug fixes. Changelog: https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.10.6/CHANGES Upstreamed patches removed: 001-Add-support-for-Realtek-Ethertype-DSA-data.patch 002-Linux-handle-other-DSA-tags.patch Signed-off-by: Ivan Pavlov Link: https://github.com/openwrt/openwrt/pull/21744 Signed-off-by: Hauke Mehrtens

udebug: update to Git HEAD (2026-01-16)

2026-01-22T10:20:17Z

c5c493ed5787 udebug-cli: fix reference to invalid variable in error message 875e1a7af6ca udebug-cli: add logdump command Signed-off-by: Felix Fietkau

elfutils: drop libelf1 provide

2026-01-12T13:28:52Z

ABI version is added to a package name during packaging, so there's no need to specify it manually. And nothing explicitly depends on libelf1. Fixes: d7bf089 ("elfutils: rename libelf1 to libelf") Signed-off-by: George Sapkin Link: https://github.com/openwrt/openwrt/pull/21369 Signed-off-by: Robert Marko

uclient: provide virtual wget-any

2026-01-12T13:28:52Z

Packages shouldn't provide a package that another package, in this case wget from packages provides. Explicitly provide a virtual @wget-any instead to match the implicit wget provide and switch the only consumer to use the new provider. Set uclient-fetch as the default variant for wget-any. Signed-off-by: George Sapkin Link: https://github.com/openwrt/openwrt/pull/21369 Signed-off-by: Robert Marko

readline: add $(FPIC) to LDFLAGS

2026-01-11T17:49:55Z

Ensure -fPIC is passed during the linking stage to fix LTO build failures (relocation errors) on MIPS and other architectures. Fixes: #20436 Signed-off-by: Anari Jalakas Link: https://github.com/openwrt/openwrt/pull/21455 Signed-off-by: Hauke Mehrtens

openssl: add kTLS support option

2026-01-02T23:30:27Z

This commit add option to enable kTLS support, improving performance by offloading TLS encryption and decryption to kernel space. - Reduced CPU usage by minimizing data copying between user space and kernel space. - Enables the use of the sendfile() system call with encrypted sockets for zero-copy data transmission. - Leverages hardware-accelerated NIC that support TLS offloading. Signed-off-by: Tan Zien Link: https://github.com/openwrt/openwrt/pull/21306 Signed-off-by: Hauke Mehrtens

treewide: switch to HTTPS URL

2026-01-02T17:07:02Z

Avoids insecure plain HTTP. Signed-off-by: Yanase Yuki Link: https://github.com/openwrt/openwrt/pull/21279 Signed-off-by: Robert Marko

sysfsutils: update project URL

2026-01-02T17:07:02Z

Project has been moved to GitHub. Signed-off-by: Yanase Yuki Link: https://github.com/openwrt/openwrt/pull/21279 Signed-off-by: Robert Marko