summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* libwebsockets: fix recursive dependencyopenwrt-18.06Josef Schlehofer2022-10-271-2/+2
| | | | | | | | | | | | | | | | | | | While running `make menuconfig`, it was discovered then there is a recursive dependency like this: tmp/.config-package.in:59138:error: recursive dependency detected! tmp/.config-package.in:59138: symbol PACKAGE_libwebsockets-openssl is selected by PACKAGE_libwebsockets-mbedtls tmp/.config-package.in:59122: symbol PACKAGE_libwebsockets-mbedtls depends on PACKAGE_libwebsockets-openssl It is not possible with the recently added conflicts that two packages (OpenSSL and full variant, which uses OpenSSL as well), which are almost the same provides the same named package libwebsockets as their conflict - Mbed TLS. Fixes: 676c5c72b5eeb583da2603e399fac085fa442c59 ("libwebsockets: OpenSSL and mbedTLS variants should conflict") Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit a4e8cbb89a48729b3c3ad615765549628d495b0f)
* libwebsockets: OpenSSL and mbedTLS variants should conflictJosef Schlehofer2022-10-251-0/+1
| | | | | | | | They provide the same files, but they don't conflict to each other, this means that users can install them side by side. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 676c5c72b5eeb583da2603e399fac085fa442c59)
* libwebsockets: full variant provides OpenSSLJosef Schlehofer2022-10-251-0/+2
| | | | | | | | | | | | | | For some time, it is not possible to install ttyd and mosquitto-ssl at the same time, so let's solve it that libwebsockets-full provides libwebsockets-openssl. This allows to install ttyd and mosquitto at the same time. Also, we need to add conflict, because we should not have installed libwebsockets-openssl and libwebsockets-full at the same time as they provides the same files. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 77e682a11c53f4dcd0e76bdea5ee82de77eaacfe)
* bind: update to 9.11.37Noah Meyerhans2022-03-181-2/+2
| | | | | | | | | | | | | | | | Fixes security issues: * CVE-2021-25220 -- The rules for acceptance of records into the cache have been tightened to prevent the possibility of poisoning if forwarders send records outside the configured bailiwick. * CVE-2021-25219 -- The "lame-ttl" option is now forcibly set to 0. This effectively disables the lame server cache, as it could previously be abused by an attacker to significantly degrade resolver performance. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* htpdate: drop www.freebsd.org from default server listJo-Philipp Wich2022-02-232-2/+1
| | | | | | | | | | | The FreeBSD project stopped publishing HTTP date headers and seeks to limit further resource taxing by distributed htpdate clients using the www.freebsd.org host as default time source. Fixes: #17924 Reported-by: Allan Jude <allanjude@freebsd.org> Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit e8713180026e0cf1c9d1421e3b664fee3fa4df12)
* bind: Bump to version 9.11.36Noah Meyerhans2021-10-291-2/+2
| | | | | | | | | | | | | | | | | | | | The following security issues are addressed with this change: CVE-2020-8619 CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 CVE-2020-8625 CVE-2021-25214 CVE-2021-25215 CVE-2021-25216 CVE-2021-25219 A complete description of the changes with this BIND release is available in the release notes at https://ftp.isc.org/isc/bind9/9.11.36/RELEASE-NOTES-bind-9.11.36.html Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* python3: Update to 3.6.15Jeffery To2021-09-082-2/+2
| | | | | | Includes fix for CVE-2013-0340 ("Billion Laughs" vulnerability). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* perl: perlmod.mk: use 'install' for host binariesEneas U de Queiroz2021-08-151-2/+2
| | | | | | | | | | | When installing a host perl module, the host perl binary in the staging dir is replaced by using 'cp'. However, if the binary is running in a parallel job, cp will fail with a text file busy error. Use $(INSTALL_BIN), which unliks the file first to avoid the error. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com> (cherry picked from commit 19c7496648cb25500ca7007a7c1578a426c23a09) (cherry picked from commit 67f403b5e6afba14cbf6742833426faad796bfd9)
* Merge pull request #16086 from turris-cz/lxc-update-keyserverJosef Schlehofer2021-07-112-1/+48
|\ | | | | lxc: add patch to switch GPG server
| * lxc: add patch to switch GPG serverJosef Schlehofer2021-07-102-1/+48
| | | | | | | | | | | | | | | | | | | | | | By default, there was used sks-keyservers.net pool, which has invalid SSL certificate and they also announced that their service is deprecate and no longer maintained. Use the same GPG server as LXC is using by default in the newer releases. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | Merge pull request #16056 from jefferyto/python3-3.6.14-openwrt-18.06Josef Schlehofer2021-07-072-2/+2
|\ \ | |/ |/| [openwrt-18.06] python3: Update to 3.6.14
| * python3: Update to 3.6.14Jeffery To2021-07-072-2/+2
|/ | | | | | Includes fix for CVE-2021-3426 (Information disclosure via pydoc). Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Merge pull request #15415 from luizluca/18.06/ruby-2.5.9Luiz Angelo Daros de Luca2021-04-131-2/+2
|\ | | | | [18.06] ruby: update to 2.5.9
| * ruby: update to 2.5.9Luiz Angelo Daros de Luca2021-04-121-2/+2
|/ | | | | | | | | | | Fixes two CVEs: CVE-2020-25613: Potential HTTP Request Smuggling Vulnerability in WEBrick CVE-2021-28965: XML round-trip vulnerability in REXML After this release, Ruby 2.5 reaches EOL. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* Merge pull request #15166 from gladiac1337/haproxy-1.8.29-18.06Rosen Penev2021-03-192-3/+3
|\ | | | | [openwrt-18.06] haproxy: Update HAProxy to v1.8.29
| * haproxy: Update HAProxy to v1.8.29Christian Lachner2021-03-192-3/+3
|/ | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* Merge pull request #14843 from jefferyto/python-3.6.13-openwrt-18.06Josef Schlehofer2021-02-222-3/+3
|\ | | | | [openwrt-18.06] python3: Update to 3.6.13
| * python3: Update to 3.6.13Jeffery To2021-02-222-3/+3
|/ | | | | | | | | Includes fixes for: * CVE-2021-3177 - ctypes: Buffer overflow in PyCArg_repr * CVE-2021-23336 - urllib parse_qsl(): Web cache poisoning - semicolon as a query args separator Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* Merge pull request #14502 from stangri/18.06-https-dns-proxyRosen Penev2021-01-222-8/+8
|\ | | | | [18.06] https-dns-proxy: bugfix: high CPU utilization
| * https-dns-proxy: bugfix: high CPU utilizationStan Grishin2021-01-182-8/+8
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* Merge pull request #14428 from stangri/18.06-https-dns-proxyRosen Penev2021-01-062-14/+16
|\ | | | | [18.06] https-dns-proxy: update to 2020-11-25: add HTTP auth and DSCP support
| * https-dns-proxy: update to 2020-11-25: add HTTP auth and DSCP codepoint supportStan Grishin2021-01-062-14/+16
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* Merge pull request #14272 from stangri/18.06-simple-adblockRosen Penev2020-12-192-4/+1
|\ | | | | [18.06] simple-adblock: config update
| * simple-adblock: config updateStan Grishin2020-12-182-4/+1
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* Merge pull request #14214 from stangri/18.06-simple-adblockRosen Penev2020-12-144-19/+20
|\ | | | | [18.06] simple-adblock: bugfix - config update
| * simple-adblock: bugfix - config updateStan Grishin2020-12-124-19/+20
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* https-dns-proxy: update binary to 2020-08-21Stan Grishin2020-12-094-106/+27
| | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* python3: fix host compilation with clangRosen Penev2020-12-074-4/+4
| | | | | | | Matched rpath parameter with Makefile. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry-picked from commit b40c40151c2ac3dd11d908a0548ac97e6b5c8455)
* Merge pull request #13918 from cartender/pr_stm32flashRosen Penev2020-11-192-1/+48
|\ | | | | stm32flash: Added patch to lock serial device
| * stm32flash: Added patch to lock serial deviceGiovanni Giacobbi2020-11-142-1/+48
|/ | | | | | Patch backported from upstream master Signed-off-by: Giovanni Giacobbi <giovanni@giacobbi.net>
* haproxy: Update HAProxy to v1.8.27Christian Lachner2020-11-083-10/+10
| | | | | | | - Update haproxy download URL and hash - Fix ssl compat patch offsets Signed-off-by: Christian Lachner <gladiac@gmail.com>
* php7: update to 7.2.34Michael Heimpold2020-11-071-2/+2
| | | | | | | | | This fixes: - CVE-2020-7069 - CVE-2020-7070 Signed-off-by: Michael Heimpold <mhei@heimpold.de> (cherry picked from commit 5b3870890d9b55c51ed034bfbe7620654021c452)
* fastd: fix buffer leak when receiving invalid packetsMatthias Schiffer2020-10-192-1/+43
| | | | Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
* Merge pull request #13685 from jefferyto/python-3.6.12-openwrt-18.06Rosen Penev2020-10-166-346/+3
|\ | | | | [openwrt-18.06] python3: Update to 3.6.12, remove backported patches
| * python3: Update to 3.6.12, remove backported patchesJeffery To2020-10-176-346/+3
|/ | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* simple-adblock: config update file fixStan Grishin2020-10-096-220/+23
| | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* nano: update to 5.3Hannu Nyman2020-10-071-2/+2
| | | | | | | Update nano editor to version 5.3. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit 4690a1f1c98c12f74a882eb2fc256c1f98957e55)
* Merge pull request #13550 from gladiac1337/haproxy-1.8.26-openwrt-18.06Rosen Penev2020-10-023-9/+9
|\ | | | | [openwrt-18.06] haproxy: Update HAProxy to v1.8.26
| * haproxy: Update HAProxy to v1.8.26Christian Lachner2020-10-023-9/+9
|/ | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* vpnbypass: README update, code cleanupStan Grishin2020-09-214-14/+31
| | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.net> update Signed-off-by: Stan Grishin <stangri@melmac.net>
* Merge pull request #13435 from stangri/18.06-simple-adblockRosen Penev2020-09-204-2/+35
|\ | | | | [18.06] simple-adblock: add config auto-update feature
| * simple-adblock: add config auto-update featureStan Grishin2020-09-204-2/+35
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* php7: update to 7.2.33Michael Heimpold2020-09-101-2/+2
| | | | | | | | This fixes: - CVE-2020-7068 Signed-off-by: Michael Heimpold <mhei@heimpold.de> (cherry picked from commit 473ca554f5cdd6f3bbed44d563b041ac7edf4557)
* nano: update to 5.2Hannu Nyman2020-08-251-2/+2
| | | | | | | Update nano editor to version 5.2. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit 3ce75951360c675cec86548f2cb19cfca2ee1c89)
* Merge pull request #13188 from stangri/18.06-simple-adblockRosen Penev2020-08-214-4/+5
|\ | | | | [18.06] simple-adblock: bugfix: update config; use command -v
| * simple-adblock: bugfix: update config; use command -vStan Grishin2020-08-214-4/+5
|/ | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* freeradius3: Fix proxy.conf file conflict.Robby K2020-08-171-1/+0
| | | | | | | | | It was provided by both the freeradius3 and freeradius3-mod-realm packages. Now provided by the freeradius3 package only. Signed-off-by: Robby K <robbyke@gmail.com> Fixes: #13149 (cherry picked from commit c81d176e805122469216c8eac42081e91ca7304c)
* Merge pull request #13123 from jjm2473/lvm2-fix-mac-sh-for-1806Rosen Penev2020-08-151-0/+5
|\ | | | | lvm2: fix CE in mac (backport)
| * lvm2: fix CE in macLiangbin Lian2020-08-141-0/+5
|/ | | | | | | | | command-count.h generated by makefile was wrong when using default shell in mac, set shell to bash to fix it. Signed-off-by: Liangbin Lian <jjm2473@gmail.com> (cherry picked from commit 9bb0962d6e3a2d5faf28a9624da82a936d961f19)
* nano: update to 5.1Hannu Nyman2020-08-121-2/+2
| | | | | | | Update nano to version 5.1. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> (cherry picked from commit 02f9ec4adc22a80e2adf57f868b080a2934af8bc)
generated by cgit (git 2.46.0) at 2026-10-12 00:20:08 +0000