routing, branch openwrt-22.03

nodogsplash: explicit file copy

2023-10-23T15:03:00Z

Signed-off-by: Moritz Warning (cherry picked from commit 2a725e7cbec6645f55d6104dee17b673b142cba8)

nodogsplash: update to version 5.0.2

2023-10-23T15:03:00Z

Fix a buffer overflow in case the query string is too long. Signed-off-by: Moritz Warning (cherry picked from commit fe1c67fb3d83089210d5b45bc35eb7d7393aeb1f)

bmx6: drop package

2023-09-29T10:26:56Z

This package is no longer maintained by us or by upstream developers. The last version in the GitHub repository is from 2020 with no activity so far. We are using version 0.1-alpha. Because LuCI app is vulnerable to several CVEs and DependencyBot still sends emails about it, let's drop it. If anyone wants, they can use bmx7. Signed-off-by: Josef Schlehofer (cherry picked from commit 9fb9d9343ea27d6dbb5008ece10c0c843dd2c781)

luci-app-bmx6: drop this because of security vulnerabilities

2023-09-29T10:26:42Z

DependencyBot, which are using is sending us emails about these CVEs: CVE-2012-6708 CVE-2020-23064 CVE-2019-11358 This was reported to maintainer in April 2023, but no one stepped it to fix that, so let's drop this. Replacement could be luci-app-bmx7. Signed-off-by: Josef Schlehofer (cherry picked from commit c2124dd2ad542f526ee84e1984f03dd2f5b34dfe)

opennds: update to version 10.1.3

2023-09-03T07:48:17Z

Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 Description: opennds (10.1.3) Security Advisory. This version contains fixes for multiple potential security vulnerabilities Credit - Stanislav Dashevskyi - standash.github.io [standash] It also contains some minor bug fixes * Fix - Buffer overflow causing segfault - CVE-2023-41101 [bluewavenet] * Fix - Memory leaks due to passing allocated buffer into safe_asprintf() - CVE-2023-41102 [bluewavenet] * Fix - Remove deprecated preauth option [bluewavenet] * Fix - missing free in show_preauth_page if MHD does not respond [bluewavenet] * Fix - more safe_asprintf memory leaks [bluewavenet] * Fix - missing free for mark_auth [bluewavenet] * Fix - memory leak after starting authmon daemon [bluewavenet] * Fix - memory leak in encode_and_redirect_to_splashpage [bluewavenet] * Fix - Community themespec, voucher css and logo image [bluewavenet] * Fix - ThemeSpec, path to logo in page footer [bluewavenet] * Fix - ensure gatewayurl is urldecoded to fix broken css and images in themespec [bluewavenet] * Add - set default fas remote fqdn to disabled [bluewavenet] Signed-off-by: Rob White (cherry picked from commit 88c98c910acccab694b3afb6d36d70ca429118a6)

CI: Sort build architectures in alphabetical order

2023-09-01T19:57:33Z

Signed-off-by: Jeffery To (cherry picked from commit 06b7d9b665d6299571a305b49e1bc159290d16cd)

CI: add concurrency rules to skip redundant build

2023-09-01T19:57:23Z

Add concurrency rules to skip redundant build to skip extra build test on force push on pull request. Signed-off-by: Christian Marangi (cherry picked from commit 5aa683be13c9b1f4a2bdb09ec0481b7cd546dd77)

CI: Do package run-tests only if target packages were built

2023-09-01T19:57:15Z

Currently, the package run-test phase will fail for PRs that only add/update host-only packages, as no target packages (*.ipk) are built. This checks if any target packages are built before attempting the run-tests. Signed-off-by: Jeffery To (cherry picked from commit 299ee2b1cfd20a7c9d31e8024b4333e8da035af3)

CI: Run "apt-get update" before installing signify-openbsd

2023-09-01T19:56:58Z

Signed-off-by: Jeffery To (cherry picked from commit 89cf0d561977c028b45e5ab6db1b34dab27b9a11)

CI: Enable runtime_test for mips_24kc

2023-09-01T19:56:47Z

Signed-off-by: Van Waholtz (cherry picked from commit 28d204148a7cad8f1ee903bf6af4dae234b28119)