mirror/openwrt-packages
1
0
Fork 0
mirror of https://git.openwrt.org/feed/packages.git synced 2024-06-14 11:23:57 +02:00
Code Releases Activity
24,823 Commits 9 Branches 1 Tag 146 MiB
Makefile 54.3%
Shell 30.6%
C 9%
C++ 1.9%
Lua 1.3%
Other 2.5%
c8447b8a38
Go to file
Petr Štetiar c8447b8a38 treewide: fix security issues by bumping all packages using libwolfssl 
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.

Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 845d81ca09)
(cherry picked from commit f624e41f38)
2022-10-05 21:37:47 +02:00
.circleci CircleCI: Add 21.02 GPG and usign public keys and update to Debian 10 2022-06-06 09:47:14 +02:00
.github CI: checkout HEAD commit rather than merge commit 2022-08-21 23:33:12 +02:00
.keys build: move gpg keys into .keys directory 2018-04-30 13:14:25 -07:00
admin syslog-ng: update to version 3.38.1 2022-09-08 09:58:34 +02:00
devel gcc: update to allow compiling different versions 2022-08-09 23:06:39 +02:00
fonts/dejavu-fonts-ttf [dejavu-fonts] add license info and myself as maintainer 2017-02-22 18:39:54 +01:00
ipv6 generate-ipv6-address: fix PIC compilation 2021-10-27 16:28:52 +02:00
kernel ksmbd: update to 3.4.5 2022-08-02 11:01:06 +02:00
lang Merge pull request #19518 from mhei/21.02-php8-update-8.0.24 2022-10-04 17:35:32 +02:00
libs treewide: fix security issues by bumping all packages using libwolfssl 2022-10-05 21:37:47 +02:00
mail postfix: fix download failure 2022-07-17 15:03:54 +02:00
multimedia youtube-dl: update to 2021.12.17 2022-05-06 19:10:20 +02:00
net treewide: fix security issues by bumping all packages using libwolfssl 2022-10-05 21:37:47 +02:00
sound Pulseaudio: update to 14.2; avahi-variant: Restore Bluez functionality 2022-08-07 19:00:12 -07:00
utils treewide: fix security issues by bumping all packages using libwolfssl 2022-10-05 21:37:47 +02:00
.travis_do.sh travis: use mpc85xx-p2020 sdk instead of ar71xx 2020-06-18 13:58:09 +02:00
.travis.yml travis: improve build config 2020-06-19 21:16:52 +02:00
CONTRIBUTING.md CONTRIBUTING: add CI information 2020-09-30 10:47:12 -10:00
LICENSE Add GPLv2 pro-forma license 2014-06-16 08:14:04 +02:00
README.md Update the SDK URL in the README. 2020-05-24 14:50:30 -07:00

README.md

OpenWrt packages feed

Description

This is the OpenWrt "packages"-feed containing community-maintained build scripts, options and patches for applications, modules and libraries used within OpenWrt.

Installation of pre-built packages is handled directly by the opkg utility within your running OpenWrt system or by using the OpenWrt SDK on a build system.

Usage

This repository is intended to be layered on-top of an OpenWrt buildroot. If you do not have an OpenWrt buildroot installed, see the documentation at: OpenWrt Buildroot – Installation on the OpenWrt support site.

This feed is enabled by default. To install all its package definitions, run:

./scripts/feeds update packages
./scripts/feeds install -a -p packages

License

See LICENSE file.

Package Guidelines

See CONTRIBUTING.md file.