| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
| |
* Reported-by: Chen Minqiang <ptpt52@gmail.com>
* details [here](https://github.com/openwrt/packages/commit/88009b2d5e394c1822ec55734b63b434981a2a9d#commitcomment-88604318)
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
| |
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
|
|
|
| |
* update to 7.86.0: https://curl.se/changes.html#7_86_0
* remove 300-curl-wolfssl.m4-error-out-if-wolfSSL-is-not-usable.patch as
it was fixed upstream: https://github.com/curl/curl/pull/9682
* update configure options for OpenSSL as --without-ssl is breaking build
* remove --without-libidn configure arg as it's no longer recognized
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.
So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages
using wolfSSL library.
Same bump has been done in buildroot in commit f1b7e1434f66 ("treewide:
fix security issues by bumping all packages using libwolfssl").
Signed-off-by: Petr Štetiar <ynezz@true.cz>
|
|
|
|
|
|
| |
* fixes https://github.com/openwrt/packages/issues/19456
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
| |
* https://curl.se/changes.html#7_85_0
* add GitHub to PKG_SOURCE_URL
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
| |
This reverts commit 312ab68be498f0d895d8d4dc5b2f0fc857e45eb9.
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
| |
* https://curl.se/changes.html#7_85_0
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
| |
* https://curl.se/changes.html#7_83_1
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
| |
* changelog: https://curl.se/changes.html#7_82_0
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
| |
* changes: https://curl.se/changes.html#7_81_0
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|
|
|
|
|
|
| |
* bump version to 7.80.0
* update maintainer email address
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
|
|
| |
* update to [7.79.1](https://curl.se/changes.html#7_79_1)
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
|
|
| |
* update to [7.79.0](https://curl.se/changes.html#7_79_0)
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
|
|
|
|
|
| |
* update to 7.78.0
* change maintainer
* remove obsolete mirror (curl.mirror.anstey.ca)
* update main curl URLs
Signed-off-by: Stan Grishin <stangri@melmac.net>
|
|
|
|
|
|
|
|
|
| |
Fixes:
CVE-2021-22897
CVE-2021-22898
CVE-2021-22901
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
|
|
|
|
|
|
| |
Fixes CVE-2021-22876 and CVE-2021-22890
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
|
|
|
|
|
|
| |
Switch to AUTORELEASE for simplicity.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|
|
|
|
|
|
|
| |
depending on it
Fixes ABI_VERSION handling issues
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
|
|
|
|
|
|
|
|
| |
Fixes:
CVE-2020-8286
CVE-2020-8285
CVE-2020-8284
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
|
|
|
|
|
|
|
|
| |
Fix the prefix instead.
Replace custom Compile section with PKG_INSTALL.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|
|
|
|
|
|
|
| |
Remove upstream patch.
Refresh other one.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Package libcurl is missing dependencies for the following libraries:
libzstd.so.1
Previous patch by Hans Dedecker <dedeckeh@gmail.com> took the easy way
out :)
Suggested-by: Syrone Wong <wong.syrone@gmail.com>
Signed-off-by: Tony Butler <spudz76@gmail.com>
[fixed title]
Signed-off-by: Paul Spooren <mail@aparcar.org>
|
|
Move package over from openwrt.git based on the Hamburg 2019 decision
that non essential packages should be maintained in packages.git
Signed-off-by: Paul Spooren <mail@aparcar.org>
|