mirror/openwrt-packages
1
0
Fork 0
mirror of https://git.openwrt.org/feed/packages.git synced 2024-06-15 03:43:53 +02:00
Code Releases Activity
27,905 Commits 9 Branches 1 Tag 146 MiB
Makefile 54.3%
Shell 30.6%
C 9%
C++ 1.9%
Lua 1.3%
Other 2.5%
845d81ca09
Go to file
Petr Štetiar 845d81ca09 treewide: fix security issues by bumping all packages using libwolfssl 
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.

Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2022-10-04 00:58:29 -07:00
.circleci CircleCI: Add 22.03 public keys, 18.06 v2 gpg key, 18.06 usign key 2022-05-11 16:40:55 +08:00
.github ci: Use openwrt/gh-action-sdk@v5 2022-05-31 09:47:35 +02:00
.keys build: move gpg keys into .keys directory 2018-04-30 13:14:25 -07:00
admin zabbix: update to 6.2.3 2022-09-26 09:41:21 -06:00
devel patch: do not patch automake Makefile template 2022-09-09 15:20:58 -07:00
fonts/dejavu-fonts-ttf [dejavu-fonts] add license info and myself as maintainer 2017-02-22 18:39:54 +01:00
ipv6 generate-ipv6-address: fix PIC compilation 2021-04-20 20:10:56 +02:00
kernel mdio-tools: update to 1.2.0 2022-09-19 19:50:16 +02:00
lang treewide: fix security issues by bumping all packages using libwolfssl 2022-10-04 00:58:29 -07:00
libs treewide: fix security issues by bumping all packages using libwolfssl 2022-10-04 00:58:29 -07:00
mail exim: update to version 4.96 2022-09-07 22:56:26 +01:00
multimedia ffmpeg: update to 5.1.2 2022-09-25 11:41:03 -07:00
net treewide: fix security issues by bumping all packages using libwolfssl 2022-10-04 00:58:29 -07:00
sound mpd: update to 0.23.9 2022-08-19 16:13:53 -07:00
utils treewide: fix security issues by bumping all packages using libwolfssl 2022-10-04 00:58:29 -07:00
CONTRIBUTING.md CONTRIBUTING: add CI information 2020-09-30 10:47:12 -10:00
LICENSE Add GPLv2 pro-forma license 2014-06-16 08:14:04 +02:00
README.md Update the SDK URL in the README. 2020-05-24 14:50:30 -07:00

README.md

OpenWrt packages feed

Description

This is the OpenWrt "packages"-feed containing community-maintained build scripts, options and patches for applications, modules and libraries used within OpenWrt.

Installation of pre-built packages is handled directly by the opkg utility within your running OpenWrt system or by using the OpenWrt SDK on a build system.

Usage

This repository is intended to be layered on-top of an OpenWrt buildroot. If you do not have an OpenWrt buildroot installed, see the documentation at: OpenWrt Buildroot – Installation on the OpenWrt support site.

This feed is enabled by default. To install all its package definitions, run:

./scripts/feeds update packages
./scripts/feeds install -a -p packages

License

See LICENSE file.

Package Guidelines

See CONTRIBUTING.md file.