Rtools: all versions and old releases

Distributed as rtools45-6768-6492.exe and rtools45-aarch64-6768-6492.exe.
Package muparser has been added and muparser support has been enabled in gdal (thanks to Chris Toney).
Upsteam MXE changesd hav been merged from 9e83f9c12e0f9e3de2d3f90bc2656cd7cce1cf0b and additional packages have been updated as below:
armadillo 15.0.3 to 15.2.3
brotli 1.1.0 to 1.2.0
c-ares 1.34.5 to 1.34.6
curl 8.16.0 to 8.18.0
freeglut 3.6.0 to 3.8.0
gdal 3.11.4 to 3.12.1
gdk-pixbuf 2.44.3 to 2.44.4
geos 3.13.1 to 3.14.1
glib 2.86.0 to 2.86.3
gnutls 3.8.10 to 3.8.11
harfbuzz 12.1.0 to 12.3.0
lcms 2.17 to 2.18
libarchive 3.8.1 to 3.8.5
libdeflate 1.24 to 1.25
libgit2 1.9.1 to 1.9.2
libgpg_error 1.56 to 1.58
libgsf 1.14.53 to 1.14.55
libpng 1.6.50 to 1.6.54
libsodium 1.0.20 to 1.0.21
libtasn1 4.20.0 to 4.21.0
libzmq 7a7bfa1 to 900a548
nettle 3.9.1 to 3.10.2
nghttp2 1.67.1 to 1.68.0
openblas 0.3.30 to 0.3.31
pcre2 10.46 to 10.47
poppler 25.10.0 to 26.01.0
proj 9.7.0 to 9.7.1
quantlib 1.39 to 1.41
sqlite 3500400 to 3510200
xz 5.8.1 to 5.8.2
zstd 1.5.7 to 1.5.7-kernel
These packages have been added:
muparser 2.3.5

Distributed as rtools45-6691-6492.exe and rtools45-aarch64-6691-6492.exe.
GCC has been updated to version 14.3 (from 14.2). Gdal has been fixed to really include blosc support. Cmake files for gdal and several other packages have been fixed.
Curl has a new dependency, secur32 (from Windows), hence packages using curl need to be updated, unless they are already using pkg-config. No CRAN packages are affected, maintainers of two Bioconductor packages have been provided with patches.
The Tcl/Tk bundle has been updated to version 8.16.17 (and BWidget to 1.10.1).
Upstream MXE changes have been merged from 2ffe7bb05ce08a036cc1e39bdd6962e19e0f6321. and additional packages have been updated as detailed below:
armadillo 12.8.4 to 15.0.3
cmake-host 3.30.4 to 3.31.8
curl 8.13.0 to 8.16.0
eigen 3.4.0 to 5.0.0
expat 2.7.1 to 2.7.3
ffmpeg 7.1.1 to 7.1.2
flint 3.2.2 to 3.3.1
fluidsynth 2.4.6 to 2.4.8
fontconfig 2.16.0 to 2.17.1
freetype 2.13.3 to 2.14.1
freetype-bootstrap 2.13.3 to 2.14.1
gcc 14.2.0 to 14.3.0
gcc-host 14.2.0 to 14.3.0
gdal 3.11.0 to 3.11.4
gdk-pixbuf 2.42.12 to 2.44.3
gettext 0.25 to 0.26
glib 2.85.0 to 2.86.0
gnutls 3.8.9 to 3.8.10
grpc 1.70.1 to 1.70.2
harfbuzz 11.2.1 to 12.1.0
imagemagick 7.1.1-47 to 7.1.2-5
intel-tbb 2022.1.0 to 2022.2.0
jasper 4.2.5 to 4.2.8
libarchive 3.8.0 to 3.8.1
libffi 3.4.8 to 3.5.2
libgcrypt 1.11.1 to 1.11.2
libgit2 1.9.0 to 1.9.1
libgpg_error 1.55 to 1.56
libheif 1.19.8 to 1.20.2
libidn 1.42 to 1.43
libpng 1.6.48 to 1.6.50
libssh 0.11.1 to 0.11.3
libunistring 1.3 to 1.4.1
libvpx 1.15.1 to 1.15.2
libwebp 1.5.0 to 1.6.0
libzmq 34f7fa2 to 7a7bfa1
nghttp2 1.65.0 to 1.67.1
ogg 1.3.5 to 1.3.6
openblas 0.3.29 to 0.3.30
opencv 4.11.0 to 4.12.0
openjpeg 2.5.3 to 2.5.4
openssl 3.5.0 to 3.6.0
pango 1.56.3 to 1.57.0
pcre2 10.45 to 10.46
pixman 0.46.0 to 0.46.4
poppler 25.05.0 to 25.10.0
postgresql 16.9 to 16.10
proj 9.6.0 to 9.7.0
protobuf 29.3 to 29.5
quantlib 1.38 to 1.39
re2 2024-07-02 to 2025-08-12
readline 8.2 to 8.3
sqlite 3490200 to 3500400
tiff 4.7.0 to 4.7.1
x264 373697b4 to b35605ac
Package opusfile 0.11 has been added.

Distributed as rtools45-6608-6492.exe and rtools45-aarch64-6608-6492.exe.
In this Rtools release, package quantlib 1.38 has been added. Upstream MXE changes have been merged from 53a0021aec08cda84c26eb0bb603961eb84f91dc. and additional packages have been updated as detailed below:
boost 1.87.0 to 1.88.0
cairo 1.18.2 to 1.18.4
c-ares 1.34.4 to 1.34.5
curl 8.12.1 to 8.13.0
dlfcn-win32 1.4.1 to 1.4.2
expat 2.6.4 to 2.7.1
ffmpeg 7.1 to 7.1.1
flint 3.1.3-p1 to 3.2.2
fluidsynth 2.4.3 to 2.4.6
gdal 3.10.2 to 3.11.0
gettext 0.24 to 0.25
glib 2.83.4 to 2.85.0
gpgme 1.24.2 to 1.24.3
harfbuzz 10.3.0 to 11.2.1
hiredis 1.2.0 to 1.3.0
icu4c 76.1 to 77.1
imagemagick 7.1.1-44 to 7.1.1-47
intel-tbb 2022.0.0 to 2022.1.0
jasper 4.2.4 to 4.2.5
kealib 1.6.1 to 1.6.2
libarchive 3.7.7 to 3.8.0
libde265 1.0.15 to 1.0.16
libdeflate 1.23 to 1.24
libffi 3.4.7 to 3.4.8
libgcrypt 1.11.0 to 1.11.1
libgpg_error 1.51 to 1.55
libheif 1.19.5 to 1.19.8
libidn2 2.3.7 to 2.3.8
libpng 1.6.47 to 1.6.48
libraw 0.21.3 to 0.21.4
libsbml 5.20.4 to 5.20.5
libuv 1.50.0 to 1.51.0
libvpx 1.15.0 to 1.15.1
libxml2 2.12.9 to 2.12.10
libxslt 1.1.42 to 1.1.43
minizip 4.0.8 to 4.0.10
mpfr 4.2.1 to 4.2.2
nghttp2 1.64.0 to 1.65.0
openssl 3.4.1 to 3.5.0
pango 1.56.1 to 1.56.3
pixman 0.44.2 to 0.46.0
poppler 25.02.0 to 25.05.0
postgresql 13.20 to 16.9
proj 9.5.1 to 9.6.0
sqlite 3490100 to 3490200
theora 1.1.1 to 1.2.0
xz 5.6.4 to 5.8.1

Distributed as rtools44-6459-6401.exe and rtools44-aarch64-6459-6401.exe.
Package postgresql has been updated from version 13.18 to 13.20. This fixes security vulnerability CVE-2025-1094 in PostgreSQL. The vulnerability allows SQL injection and arbitrary code execution via crafted input data, involving strategically placed invalid UTF-8 characters. It could happen when input quoted by PostgreSQL is passed to the interactive PostgreSQL terminal tool, psql.exe, which is part of Rtools.
To safely avoid these atacks, R packages linking to PostgreSQL libraries can be re-installed using this version of Rtools. While probably unlikely, if any application directly used psql.exe from Rtools, this update can be installed to be on the safe side.
There is no other change in the toolchain nor libraries provided in this update. Like any update of Rtools, also this one includes the current build tools from Msys2, and those can be easily updated via pacman directly without installing an update of Rtools.

Distributed as rtools43-5958-5975.exe.
This is a correction release which fixes a problem in the build of the Msys2 part of release 5948.
A typical symptom of the problem in 5948 is that Msys2 packages cannot be installed or upgraded using pacman.
Users who have already upgraded to 5948 and wish to avoid another upgrade may choose to fix the problem by running update-ca-trust in the Rtools (Msys2) shell, this will allow installation/upgrading of packages.
A more complete fixup is to run:
for F in /var/lib/pacman/local/*/install ; do
bash -c "cd / ; . $F ; [[ \$(type -t post_install) == function ]] && post_install"
done
At the time of this correction release, the corresponding experimental build for aarch64 has been updated. It has several improvements allowing more of CRAN packages to be built for aarch64 than with 5948.

• tweak start menu