<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openwrt/package/utils/bsdiff/Makefile, branch master</title>
<subtitle>OpenWrt Source Repository</subtitle>
<id>http://x-nagi.com/cgit/openwrt/atom?h=master</id>
<link rel='self' href='http://x-nagi.com/cgit/openwrt/atom?h=master'/>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/openwrt/'/>
<updated>2023-10-09T21:42:37Z</updated>
<entry>
<title>bsdiff: Add patches for CVEs</title>
<updated>2023-10-09T21:42:37Z</updated>
<author>
<name>Hauke Mehrtens</name>
<email>hauke@hauke-m.de</email>
</author>
<published>2023-10-07T19:07:20Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/openwrt/commit/?id=cac723e8b8748938b8d80603578c60189fc32b24'/>
<id>urn:sha1:cac723e8b8748938b8d80603578c60189fc32b24</id>
<content type='text'>
Add two patches from Debian fixing CVEs in the bsdiff application.
CVE-2014-9862: Heap vulnerability in bspatch
CVE-2020-14315: Memory Corruption Vulnerability in bspatch

Copied the patches from this location:
https://salsa.debian.org/debian/bsdiff/-/blob/debian/latest/debian/patches/20-CVE-2014-9862.patch
https://salsa.debian.org/debian/bsdiff/-/blob/debian/latest/debian/patches/33-CVE-2020-14315.patch

Signed-off-by: Hauke Mehrtens &lt;hauke@hauke-m.de&gt;
</content>
</entry>
<entry>
<title>packages: assign PKG_CPE_ID for all missing packages</title>
<updated>2023-09-19T18:21:13Z</updated>
<author>
<name>Alexander Couzens</name>
<email>lynxis@fe80.eu</email>
</author>
<published>2023-09-18T20:53:14Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/openwrt/commit/?id=8572007f900746cbe012379b421e258b1b22e4a4'/>
<id>urn:sha1:8572007f900746cbe012379b421e258b1b22e4a4</id>
<content type='text'>
The PKG_CPE_ID links to NIST CPE version 2.2.
Assign PKG_CPE_ID to all remaining package which have a CPE ID.
Not every package has CPE id.

Related: https://github.com/openwrt/packages/issues/8534
Signed-off-by: Alexander Couzens &lt;lynxis@fe80.eu&gt;
</content>
</entry>
<entry>
<title>build: prefer HTTPS if available (for packages)</title>
<updated>2022-10-05T15:37:07Z</updated>
<author>
<name>Daniel Cousens</name>
<email>github@dcousens.com</email>
</author>
<published>2022-09-30T00:13:46Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/openwrt/commit/?id=3bd04767badd215bf4d005f0b997b2cee5b2d8c3'/>
<id>urn:sha1:3bd04767badd215bf4d005f0b997b2cee5b2d8c3</id>
<content type='text'>
Changes PKG_SOURCE_URL's for arptables, bsdiff, dnsmasq,
fortify-headers, ipset, ipset-dns, libaudit, libpcap, libressl,
lua, lua5.3, tcpdump and valgrind, to HTTPS

Signed-off-by: Daniel Cousens &lt;github@dcousens.com&gt;
</content>
</entry>
<entry>
<title>bsdiff: Also pass down TARGET_CPPFLAGS</title>
<updated>2017-03-02T01:19:50Z</updated>
<author>
<name>Florian Fainelli</name>
<email>f.fainelli@gmail.com</email>
</author>
<published>2017-02-12T21:21:01Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/openwrt/commit/?id=562ebe798255a2bb71c6a621d6a70662dfbd63c4'/>
<id>urn:sha1:562ebe798255a2bb71c6a621d6a70662dfbd63c4</id>
<content type='text'>
Fixes build with external toolchains not having STAGING_DIR in their
default search path(s).

Signed-off-by: Florian Fainelli &lt;f.fainelli@gmail.com&gt;
</content>
</entry>
<entry>
<title>package: replace $(STAGING_DIR)/host with $(STAGING_DIR_HOSTPKG)</title>
<updated>2017-01-10T21:15:37Z</updated>
<author>
<name>Matthias Schiffer</name>
<email>mschiffer@universe-factory.net</email>
</author>
<published>2017-01-10T17:43:57Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/openwrt/commit/?id=77beaf2ec91bba0a0202ea63877ed3b399effabf'/>
<id>urn:sha1:77beaf2ec91bba0a0202ea63877ed3b399effabf</id>
<content type='text'>
Cleanup to prepare for changing STAGING_DIR_HOSTPKG. The actual change of
STAGING_DIR_HOSTPKG (i.e., moving the host packages back into a common, not
target-specific directory) will be done after the first LEDE release, but
the cleanup will also be useful for projects like Gluon.

Signed-off-by: Matthias Schiffer &lt;mschiffer@universe-factory.net&gt;
</content>
</entry>
<entry>
<title>treewide: clean up download hashes</title>
<updated>2016-12-16T21:39:22Z</updated>
<author>
<name>Felix Fietkau</name>
<email>nbd@nbd.name</email>
</author>
<published>2016-12-16T16:32:10Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/openwrt/commit/?id=720b99215da295a2e7b4acdef30b58bec6acedc2'/>
<id>urn:sha1:720b99215da295a2e7b4acdef30b58bec6acedc2</id>
<content type='text'>
Replace *MD5SUM with *HASH, replace MD5 hashes with SHA256

Signed-off-by: Felix Fietkau &lt;nbd@nbd.name&gt;
</content>
</entry>
<entry>
<title>bsdiff: add missing host build dependency on bzip2 (fixes #21990)</title>
<updated>2016-03-07T14:34:14Z</updated>
<author>
<name>Felix Fietkau</name>
<email>nbd@openwrt.org</email>
</author>
<published>2016-03-07T14:34:14Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/openwrt/commit/?id=e559de239715f629edc90b9a0afa57cb918b56ca'/>
<id>urn:sha1:e559de239715f629edc90b9a0afa57cb918b56ca</id>
<content type='text'>
Signed-off-by: Felix Fietkau &lt;nbd@openwrt.org&gt;

SVN-Revision: 48950
</content>
</entry>
<entry>
<title>bsdiff: add bsdiff and bspatch tool package</title>
<updated>2016-02-27T22:59:13Z</updated>
<author>
<name>Hauke Mehrtens</name>
<email>hauke@hauke-m.de</email>
</author>
<published>2016-02-27T22:59:13Z</published>
<link rel='alternate' type='text/html' href='http://x-nagi.com/cgit/openwrt/commit/?id=832251a616b626f834a11ca3f81f30c3fec592d0'/>
<id>urn:sha1:832251a616b626f834a11ca3f81f30c3fec592d0</id>
<content type='text'>
This will be used to create a diff between the Lantiq annex A and the
annex B firmware.

Signed-off-by: Hauke Mehrtens &lt;hauke@hauke-m.de&gt;

SVN-Revision: 48810
</content>
</entry>
</feed>
