3 Commits

Author	SHA1	Message	Date
Paul Spooren	7a991c8d88	treewide: use HTTPS for PKG_SOURCE_URL where possible ... Switch http:// (and redundant ftp://) PKG_SOURCE_URL entries to https:// across tools/ and package/. PKG_HASH alone does not protect against an attacker tampering with insecure downloads when a maintainer regenerates the hash via `make ... FIXUP=1`: HTTPS authenticates the upstream so the captured hash reflects real upstream content. In-place http -> https (HTTPS reachability verified per host): - tools/elftosb, tools/lzop, tools/liblzo, tools/mpfr, tools/dosfstools, tools/libressl, tools/xz - package/libs/mpfr, package/libs/libmnl, package/libs/libnfnetlink Replaced with @OPENWRT (HTTPS-only mirror) where the upstream HTTPS host is dead or has a broken certificate: - package/libs/popt (ftp.rpm.org cert mismatch) - package/firmware/ixp4xx-microcode (was http://downloads.openwrt.org) - package/boot/imx-bootlets (trabant.uid0.hu cert mismatch) - package/boot/kobs-ng (freescale.com URL is dead, redirects to nxp.com root) Dropped redundant ftp://ftp.denx.de fallback (https://ftp.denx.de is already listed): - package/boot/uboot-tools, tools/mkimage Signed-off-by: Paul Spooren <mail@aparcar.org>	2026-04-20 11:58:37 +08:00
Nick Hainke	d74dce45ef	mpfr: update to 4.2.2 ... Release Notes: https://www.mpfr.org/mpfr-current/ Link: https://github.com/openwrt/openwrt/pull/20898 Signed-off-by: Nick Hainke <vincent@systemli.org>	2025-11-23 23:53:50 +01:00
Hannu Nyman	309c2cd4fb	mpfr: import from packages feed ... Import mpfr from the packages feed to the main OpenWrt repo, as gdb 14 requires mpfr. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>	2024-01-04 22:40:05 +01:00