summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Merge pull request #6077 from MikePetullo/lede-17.01-lighttpdHannu Nyman2018-05-211-2/+7
|\ | | | | lighttpd: CONFIG_LIGHTTPD_SSL includes mod_openssl
| * lighttpd: CONFIG_LIGHTTPD_SSL includes mod_opensslPhilip Prindeville2018-05-201-2/+7
|/ | | | | | | If we're built with CONFIG_LIGHTTPD_SSL then mod_openssl.so should be included into the base package. Fixes issue #5343. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* usbip: remove upstreamed musl compatibility patch (#5983)Hannu Nyman2018-04-292-12/+1
| | | | | | | | | Remove musl compatibility patch that is now included in the upstream Linux kernel and backported to stable kernels. Commit in 4.4: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/tools/usb/usbip?h=linux-4.4.y&id=6638091f1b1623db8b2338ef5a5f26d9ec870444 Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* Merge pull request #5803 from VincentRiou/lighttpd_1_4_48_with_wstunnelHannu Nyman2018-04-255-251/+4
|\ | | | | Lighttpd 1.4.48 with wstunnel
| * lighttpd: add mod-wstunnelVincent Riou2018-03-231-1/+1
| | | | | | | | | | Exposes the mod-wstunnel plugin which implements websocket proxying over http Signed-off-by: Vincent Riou <vincent@invizbox.com>
| * lighttpd: update to 1.4.48Philip Prindeville2018-03-235-250/+3
| | | | | | | | | | | | | | | | | | | | All of the bugs for which we had patches have been fixed upstream in 1.4.46, so the patches can be dropped. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> Conflicts: net/lighttpd/Makefile
* | Merge pull request #5848 from luizluca/ruby-2.4.4Luiz Angelo Daros de Luca2018-03-291-3/+3
|\ \ | | | | | | [17.01] ruby: bump to 2.4.4
| * | ruby: bump to 2.4.4Luiz Angelo Daros de Luca2018-03-291-3/+3
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release includes some bug fixes and some security fixes. * CVE-2017-17742: HTTP response splitting in WEBrick * CVE-2018-6914: Unintentional file and directory creation with directory traversal in tempfile and tmpdir * CVE-2018-8777: DoS by large request in WEBrick * CVE-2018-8778: Buffer under-read in String#unpack * CVE-2018-8779: Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket * CVE-2018-8780: Unintentional directory traversal by poisoned NUL byte in Dir * Multiple vulnerabilities in RubyGems There are also some bug fixes Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | Merge pull request #5839 from nxhack/lede-17_01_icu_CVE-2017-15422Hannu Nyman2018-03-272-1/+107
|\ \ | |/ |/| icu: fix CVE-2017-15422
| * icu: fix CVE-2017-15422Hirokazu MORIKAWA2018-03-272-1/+107
|/ | | | | | | | | | | | | | [lede-17.01] Maintainer: me
 Compile tested: ar71xx, mips_24kc_gcc-5.4.0_musl-1.1.16, lede-17.01 r3863-fad29d2 Run tested: NONE Description: CVE-2017-15422 : integer overflow in icu https://security-tracker.debian.org/tracker/CVE-2017-15422 Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
* sqm-scripts: Fix return value bug in postrm scriptTony Ambardar2018-03-031-2/+2
| | | | | | | | | The script removes the UCI option ucitrack.@sqm[0] if present and then returns success. If that UCI option is already absent however, the script incorrectly returns failure, which blocks upgrade of the luci-app-sqm package. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* mosqitto: bump to 1.4.15 for CVE fixes.Karl Palsson2018-03-011-2/+2
| | | | | | | See https://mosquitto.org/blog/2018/02/security-advisory-cve-2017-7651-cve-2017-7652/ for full details. Signed-off-by: Karl Palsson <karlp@etactica.com>
* minidlna: exclude "po" directory to fix CONFIG_BUILD_NLS=y buildsRafał Miłecki2018-02-193-3/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes: *** error: gettext infrastructure mismatch: using a Makefile.in.in from gettext version 0.18 but the autoconf macros are from gettext version 0.19 Makefile of minidlna package specifies PKG_FIXUP:=autoreconf. That results in calling autoreconf with multiple arguments, including many -I ones. One of autoreconf steps is calling aclocal with the same set of -I arguments. All of that results in: 1) aclocal using staging_dir's /usr/share/aclocal and its po.m4 2) not using minidlna's po.m4 3) not updating Makefile.in.in If staging_dir's po.m4 has different GETTEXT_MACRO_VERSION than the minidlna's one it'll result in a mismatch in the Makefile.in. Ideally we should take care of regenerating Makefile.in.in but this isn't currentlly supported. As localization isn't properly supported anyway (no shipping .mo files) it's safe to just disable building po files. Added patch comes from the master branch commit d5fcc972ba57d ("multimedia/minidlna: Update to 1.2.0"). Fixes: 72928442614d9 ("minidlna: backport fixes from 1.1.6 and 1.2.0 releases") Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* Merge pull request #5492 from micmac1/fix-sqlite3-on-uclibcchamptar2018-01-311-2/+5
|\ | | | | sqlite3 [lede-17.01]: fix uClibc builds
| * sqlite3: fix uClibc buildsSebastian Kemper2018-01-301-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When compiling against uClibc on lede-17.01 it's detected in the linking phase that '__isnan' is nowhere to be found: sqlite3-sqlite3.o: In function `serialGet': sqlite3.c:(.text+0x6364): undefined reference to `__isnan' sqlite3-sqlite3.o: In function `sqlite3_result_double': sqlite3.c:(.text+0x10faa): undefined reference to `__isnan' sqlite3-sqlite3.o: In function `sqlite3VXPrintf': sqlite3.c:(.text+0x175ca): undefined reference to `__isnan' sqlite3-sqlite3.o: In function `sqlite3_bind_double': sqlite3.c:(.text+0x1b0ac): undefined reference to `__isnan' sqlite3-sqlite3.o: In function `sqlite3VdbeExec': sqlite3.c:(.text+0x3b77e): undefined reference to `__isnan' collect2: error: ld returned 1 exit status To fix this libm needs to be linked in as well in the uClibc case. So add libm ('-lm') to the TARGET_LDFLAGS accordingly. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | p11-kit: disable trust moduleNikos Mavrogiannopoulos2018-01-301-2/+3
| | | | | | | | | | | | | | | | | | This allows prevents build error due to trust-paths not being specified. The trust module was not being used in openwrt. Resolves #5528 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | Merge pull request #5541 from micmac1/jiri-lede-17.01Jiri Slachta2018-01-3026-413/+1169
|\ \ | | | | | | libssh2, libxslt, tiff: security bumps + fix (for lede-17.01)
| * | tiff: version bump to address open CVEsSebastian Kemper2018-01-307-406/+156
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Version bump to 4.0.9, as otherwise ca. a dozen patches would need to be added to fix the open CVEs. There have been no API/ABI changes between 4.0.6 and 4.0.9, so this is OK. - Adds patches copied from Debian for CVE-2017-18013 and CVE-2017-9935 on top. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | libxslt: add patches copied from Debian to fix CVEsSebastian Kemper2018-01-3018-2/+1007
| | | | | | | | | | | | | | | | | | | | | - there are multiple open CVEs, this adds patches for them - adds --disable-silent-rules for verbose build output Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
| * | libssh: fix zlib detectionSebastian Kemper2018-01-301-5/+6
|/ / | | | | | | | | | | | | | | - currently zlib is never detected, although there is a dependency on it, fix that. - change links from http to https Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #5493 from micmac1/fix-alsa-lib-on-uclibctripolar2018-01-272-2/+34
|\ \ | | | | | | alsa-lib [lede-17.01]: fix build on uclibc
| * | alsa-lib: fix uClibc buildsSebastian Kemper2018-01-272-2/+34
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently alsa-lib fails to build on uClibc: parser.c: In function 'snd_tplg_build_file': parser.c:262:35: error: 'S_IRUSR' undeclared (first use in this function) open(outfile, O_RDWR | O_CREAT, S_IRUSR | S_IWUSR); ^ parser.c:262:35: note: each undeclared identifier is reported only once for each function it appears in parser.c:262:45: error: 'S_IWUSR' undeclared (first use in this function) open(outfile, O_RDWR | O_CREAT, S_IRUSR | S_IWUSR); ^ parser.c: In function 'snd_tplg_build': parser.c:330:35: error: 'S_IRUSR' undeclared (first use in this function) open(outfile, O_RDWR | O_CREAT, S_IRUSR | S_IWUSR); ^ parser.c:330:45: error: 'S_IWUSR' undeclared (first use in this function) open(outfile, O_RDWR | O_CREAT, S_IRUSR | S_IWUSR); ^ Makefile:390: recipe for target 'parser.lo' failed Fix this by adding an upstream fix as a backport. Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
* | Merge pull request #5497 from daztucker/lede-17.01Hannu Nyman2018-01-261-4/+5
|\ \ | |/ |/| net/https-dns-proxy: Update to 2018-01-24.
| * net/https-dns-proxy: Update to 2018-01-24.Darren Tucker2018-01-251-4/+5
|/ | | | | | | | | | Add dependency on ca-bundle without which the HTTPS fetches fail. Add "-x" option to force HTTP/1.1 instead of HTTP/2.0 Add a workaround for bug in libcurl <7.530 that prevents it from working at all when built with mbedtls. Signed-off-by: Darren Tucker <dtucker@dtucker.net> Acked-by: Aaron Drew <aarond10@gmail.com>
* Merge pull request #5317 from luizluca/17.01/ruby-2.4.3Luiz Angelo Daros de Luca2018-01-222-42/+2
|\ | | | | [17.01] ruby: bump to 2.4.3
| * ruby: bump to 2.4.3Luiz Angelo Daros de Luca2017-12-232-42/+2
| | | | | | | | | | | | | | | | | | This release includes some bug fixes and a security fix. CVE-2017-17405: Command injection vulnerability in Net::FTP Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com> (cherry picked from commit fc0105391766404699330e455bc028d8a52a2553)
* | Merge pull request #5479 from EricLuehrsen/lede-17.01-unbound-168Hannu Nyman2018-01-202-5/+4
|\ \ | | | | | | [lede-17.01] unbound: update to 1.6.8 for CVE-2017-15105
| * | unbound: update to 1.6.8 for CVE-2017-15105Eric Luehrsen2018-01-192-5/+4
|/ / | | | | | | | | | | | | | | | | | | A vulnerability was discovered in the processing of wildcard synthesized NSEC records. While synthesis of NSEC records is allowed by RFC4592, these synthesized owner names should not be used in the NSEC processing. This does, however, happen in Unbound 1.6.7 and earlier versions. (see https://unbound.net/downloads/CVE-2017-15105.txt) Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
* | Merge pull request #5477 from dibdot/travelmate-17.01Hannu Nyman2018-01-195-156/+335
|\ \ | | | | | | [17.01] travelmate: release 1.0.2
| * | [17.01] travelmate: release 1.0.2Dirk Brenken2018-01-195-156/+335
| | | | | | | | | | | | | | | * bump travelmate version in stable tree Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #5476 from dibdot/adblock-17.01Hannu Nyman2018-01-196-477/+989
|\ \ \ | | | | | | | | [17.01] adblock: release 3.4.3
| * | | [17.01] adblock: release 3.4.3Dirk Brenken2018-01-196-477/+989
| |/ / | | | | | | | | | | | | | | | * bump adblock version in stable tree Signed-off-by: Dirk Brenken <dev@brenken.org>
* / / vpnc: fix using proto_add_host_dependencyYousong Zhou2018-01-192-2/+2
|/ / | | | | | | | | | | Fixes #4343 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | ulogd: use strncpy instead of memcpyAlexandru Ardelean2018-01-122-1/+32
| | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> (cherry picked from commit 953f951c5eb3841e619a18b3aeb95a652dbb9a93)
* | wget: backport 1.19.2 from masterHannu Nyman2018-01-061-4/+5
| | | | | | | | | | | | | | | | | | Backport the update to 1.19.2 from master. Fixes e.g. CVE-2017-13089 and CVE-2017-13090 (tested in my own ipq806x and ar71xx lede-17.01 builds) Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | tree: backport from masterBanglang Huang2018-01-061-0/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tree is a recursive directory listing command that produces a depth indented listing of files, which is colorized ala dircolors if the LS_COLORS environment variable is set and output is to tty. root@lede:/# tree -L 1 . ├── bin ├── dev ├── etc ├── lib ├── mnt ├── overlay ├── proc ├── rom ├── root ├── sbin ├── sys ├── tmp ├── usr ├── var -> /tmp └── www 15 directories, 0 files http://mama.indstate.edu/users/ice/tree/ Signed-off-by: BangLang Huang <banglang.huang@foxmail.com> (cherry picked from commit b6ff884d4570e5f522ad97bbd481362ee1ebeff7) Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | postgresql: update to version 9.5.10Daniel Golle2018-01-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains fixes for * CVE-2017-15099 * CVE-2017-15098 * CVE-2017-12172 * CVE-2017-7548 * CVE-2017-7547 * CVE-2017-7546 * CVE-2017-7486 * CVE-2017-7485 * CVE-2017-7484 Note that some fixes apply for newly created databases only! To mitigate CVE-2017-7486 and CVE-2017-7547 in existing databases, a procedure described in the the release notes of PostgreSQL 9.5.8 is necessary! Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | gnutls: Use HTTPS instead of FTPRosen Penev2017-12-301-1/+1
|/ | | | | | While recently building asterisk, the make system stalled on gnutls. On my install of Ubuntu 16.04 on WSL, it seems curl can't download from ftp and doesn't even time out properly. Easiest solution is to switch the gnutls Makefile to use HTTPS instead. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* python: declare explicit Host/Compile to fix pgen tool installation errorArturo Rinaldi2017-12-121-1/+5
| | | | | | Signed-off-by: Arturo Rinaldi arty.net2@gmail.com [squash commits, fix commit title] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* Merge pull request #5012 from TDT-AG/20171025-luci-app-mwan3-fix-iface_statechamptar2017-12-112-2/+3
|\ | | | | net/mwan3-luci: fix iface_state on on status page for 17.01
| * net/mwan3-luci: fix iface_state on on status pageFlorian Eckert2017-12-112-2/+3
| | | | | | | | | | | | | | | | | | | | Since commit 4739584c2434fda6c4f14b0ef3d38fa055352c0e the status of the interface is not reported correctly anymore. To fix this issue do not test if the routing table is presented use instead the "/var/run/iface_state/[iface]" to get the interface state because the routing table will not get deleted anymore if the interface is offline. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | Merge pull request #5228 from commodo/python-2.7.14-17.01Jo-Philipp Wich2017-12-0513-50/+92
|\ \ | | | | | | python: update to version 2.7.14 for branch 17.01
| * | python: update to version 2.7.14 for branch 17.01Alexandru Ardelean2017-12-0513-50/+92
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bump version and overwrite patches from master, since those were refreshed (at some point). I got an email notification about some CVEs for branch 17.01, so I decided to update Python. Technically, one seems to be for SolidWorks from what I can tell, but upgrading should be easy. ``` Hello Alexandru Ardelean, The package python is vulnerable to the following CVEs: CVE-2014-4616 https://nvd.nist.gov/vuln/detail/CVE-2014-4616 CVE-2017-100015 https://nvd.nist.gov/vuln/detail/CVE-2017-100015 Please consider updating or patching the package. ``` Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | attendedsysupgrade-common: add packageDaniel Golle2017-11-202-0/+73
| | | | | | | | | | | | | | This package provides the UCI config shared by both, the CLI and Web clients used for attended-sysupgrade. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | tinc: version bump 1.0.33Saverio Proto2017-11-051-2/+2
| | | | | | | | Signed-off-by: Saverio Proto <saverio.proto@switch.ch>
* | gnutls: updated to 3.5.16Nikos Mavrogiannopoulos2017-11-041-2/+2
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* | jool: fix PKG_BUILD_DIR to avoid kernel ABI mismatchMatthias Schiffer2017-10-291-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | As jool builds a kernel module, a PKG_BUILD_DIR under KERNEL_BUILD_DIR must be used to avoid reusing build artifacts when switching to a different target of the same architecture. Otherwise, kernel ABI mismatches may result, leading to an unusuable module, or build failures like the following: Package kmod-jool is missing dependencies for the following libraries: crypto_hash.ko Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* | monit: update to 5.24, use https download urlEtienne Champetier2017-10-251-4/+4
| | | | | | | | Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | monit: update to 5.23Etienne Champetier2017-10-252-3/+3
| | | | | | | | Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | monit: update to 5.20, use PKG_HASHEtienne CHAMPETIER2017-10-252-4/+4
| | | | | | | | | | | | this adds zlib as dependency Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
generated by cgit (git 2.46.0) at 2026-10-12 01:08:51 +0000