mirror/openwrt-packages
1
0
Fork 0
mirror of https://git.openwrt.org/feed/packages.git synced 2024-06-14 11:23:57 +02:00
Code Releases Activity
24,352 Commits 9 Branches 1 Tag 146 MiB
Makefile 54.3%
Shell 30.6%
C 9%
C++ 1.9%
Lua 1.3%
Other 2.5%
c241cb12bb
Go to file
Daniel Golle c241cb12bb
exim: update to version 4.94.2 
Several exploitable vulnerabilities in Exim were reported to us and are
fixed.
Local vulnerabilities
- CVE-2020-28007: Link attack in Exim's log directory
- CVE-2020-28008: Assorted attacks in Exim's spool directory
- CVE-2020-28014: Arbitrary PID file creation
- CVE-2020-28011: Heap buffer overflow in queue_run()
- CVE-2020-28010: Heap out-of-bounds write in main()
- CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
- CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
- CVE-2020-28015: New-line injection into spool header file (local)
- CVE-2020-28012: Missing close-on-exec flag for privileged pipe
- CVE-2020-28009: Integer overflow in get_stdinput()
Remote vulnerabilities
- CVE-2020-28017: Integer overflow in receive_add_recipient()
- CVE-2020-28020: Integer overflow in receive_msg()
- CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
- CVE-2020-28021: New-line injection into spool header file (remote)
- CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
- CVE-2020-28026: Line truncation and injection in spool_read_header()
- CVE-2020-28019: Failure to reset function pointer after BDAT error
- CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
- CVE-2020-28018: Use-after-free in tls-openssl.c
- CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()

The update to 4.94.2 also integrates a fix for a printf format issue
previously addressed by a local patch which is removed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-05-10 04:20:47 +01:00
.circleci circleci: Revert switch to CDN due to breakage 2019-11-22 23:19:56 +01:00
.github CI: revert adding of *depending* packages 2021-03-25 23:28:52 -10:00
.keys build: move gpg keys into .keys directory 2018-04-30 13:14:25 -07:00
admin debian-archive-keyring: update to 2021.1.1 2021-04-29 00:59:15 +01:00
devel gitlab-runner: update to version 13.11.0 2021-04-26 12:13:47 +02:00
fonts/dejavu-fonts-ttf [dejavu-fonts] add license info and myself as maintainer 2017-02-22 18:39:54 +01:00
ipv6 generate-ipv6-address: fix PIC compilation 2021-04-20 20:10:56 +02:00
kernel ksmbd: update to 3.3.9 2021-04-24 02:20:12 -07:00
lang Merge pull request #15552 from mhei/php7-update 2021-05-08 23:11:22 +02:00
libs libmaxminddb: update to version 1.6.0 2021-05-03 18:19:39 +03:00
mail exim: update to version 4.94.2 2021-05-10 04:20:47 +01:00
multimedia gerbera: update to 1.8.0 2021-04-10 17:05:18 -07:00
net Merge pull request #15575 from pprindeville/strongswan-always-generate-var-strongswan 2021-05-07 17:28:37 -06:00
sound umpdcli: update to 1.5.11 2021-04-13 21:38:32 -07:00
utils auc: support queue_position status from server 2021-05-10 04:20:41 +01:00
CONTRIBUTING.md CONTRIBUTING: add CI information 2020-09-30 10:47:12 -10:00
LICENSE Add GPLv2 pro-forma license 2014-06-16 08:14:04 +02:00
README.md Update the SDK URL in the README. 2020-05-24 14:50:30 -07:00

README.md

OpenWrt packages feed

Description

This is the OpenWrt "packages"-feed containing community-maintained build scripts, options and patches for applications, modules and libraries used within OpenWrt.

Installation of pre-built packages is handled directly by the opkg utility within your running OpenWrt system or by using the OpenWrt SDK on a build system.

Usage

This repository is intended to be layered on-top of an OpenWrt buildroot. If you do not have an OpenWrt buildroot installed, see the documentation at: OpenWrt Buildroot – Installation on the OpenWrt support site.

This feed is enabled by default. To install all its package definitions, run:

./scripts/feeds update packages
./scripts/feeds install -a -p packages

License

See LICENSE file.

Package Guidelines

See CONTRIBUTING.md file.