Florian Eckert
f9e7e2db94
unzip: add valid patche headers and missing CVE informations
...
This commit adds a valid git patch header for each patch, so that
additional information can be stored. This is in this case and 'CVE:' tag.
This can be used by CVE scanner to find out if the patch fixes a CVE.
Signed-off-by: Florian Eckert <fe@dev.tdt.de >
2025-09-08 09:23:42 +02:00
Tan Zien
d3a2fb39a7
unzip: fix build GCC 15.1
...
refer to:
b7410ac718/main/unzip/gcc15.patch
fix this:
unix/unxcfg.h:120:15: error: conflicting types for 'gmtime'; have 'struct tm *(void)'
120 | struct tm *gmtime(), *localtime();
| ^~~~~~
In file included from unix/unxcfg.h:119:
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:59:12: note: previous declaration of 'gmtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
59 | struct tm *gmtime (const time_t *);
| ^~~~~~
unix/unxcfg.h:120:26: error: conflicting types for 'localtime'; have 'struct tm *(void)'
120 | struct tm *gmtime(), *localtime();
| ^~~~~~~~~
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:60:12: note: previous declaration of 'localtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
60 | struct tm *localtime (const time_t *);
| ^~~~~~~~~
Signed-off-by: Tan Zien <nabsdh9@gmail.com >
2025-07-09 18:52:06 +08:00
Ilya Lipnitskiy
5d8d4fbbcb
treewide: Run refresh on all packages
...
The crude loop I wrote to come up with this changeset:
find -L package/feeds/packages/ -name patches | \
sed 's/patches$/refresh/' | sort | xargs make
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com >
2021-02-20 16:02:15 -08:00
Jan Pavlinec
1bf4e7ddf2
unzip: fix PKG_CPE_ID
...
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
2019-01-17 21:58:54 +08:00
Jan Pavlinec
cb24d1022b
unzip: patch CVE-2018-1000035 and add PKG_CPE_IDE
...
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
2019-01-15 20:35:52 +08:00
Alexander Couzens
5f4c455c7a
unzip: remove build timestamp
...
Build timestamps prevent reproducible builds [0].
Thanks to debian for the patch.
[0] https://reproducible-builds.org/docs/timestamps/
Signed-off-by: Alexander Couzens <lynxis@fe80.eu >
2017-11-17 13:39:30 +01:00
Etienne Champetier
4006865ae8
treewide: run "make check FIXUP=1"
...
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git
(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com >
2017-08-29 21:41:14 -07:00
Álvaro Fernández Rojas
b1f3d7e7b2
unzip: patch CVE-2014-9913 and CVE-2016-9844 vulnerabilities
...
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com >
2017-01-23 17:53:03 +01:00
Alexander Ryzhov
fc2a2dadb1
unzip: enable unicode support and avoid packing the same binary twice
...
Closes https://github.com/openwrt/packages/pull/2081 .
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru >
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com >
2015-12-16 23:01:51 +01:00
Álvaro Fernández Rojas
b88213b3a7
unzip: patch CVE-2015-7696, CVE-2015-7697 and integer underflow
...
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com >
2015-11-01 16:19:56 +01:00
Álvaro Fernández Rojas
857def5d1a
unzip: patch CVE-2014-8139, CVE-2014-8140, CVE-2014-8141 and CVE-2014-9636
...
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com >
2015-02-16 15:04:23 +01:00
Etienne CHAMPETIER
e598af5f99
PKG_CHECK_FORMAT_SECURITY: disable it for the failing packages (for now)
...
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr >
2014-06-24 23:01:14 +02:00
Steven Barth
e61b36871d
unzip: fix cross-compilation and skip target checks
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org >
Signed-off-by: Steven Barth <steven@midlink.org >
2014-06-14 20:13:49 +02:00
Álvaro Fernández Rojas
81dfa3c04f
unzip: Import 5.52 from packages and update to 6.0.
...
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com >
2014-06-12 14:49:48 +02:00