14 Commits

Author SHA1 Message Date
Florian Eckert
f9e7e2db94 unzip: add valid patche headers and missing CVE informations
This commit adds a valid git patch header for each patch, so that
additional information can be stored. This is in this case and 'CVE:' tag.
This can be used by CVE scanner to find out if the patch fixes a CVE.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2025-09-08 09:23:42 +02:00
Tan Zien
d3a2fb39a7 unzip: fix build GCC 15.1
refer to:

b7410ac718/main/unzip/gcc15.patch

fix this:

unix/unxcfg.h:120:15: error: conflicting types for 'gmtime'; have 'struct tm *(void)'
  120 |    struct tm *gmtime(), *localtime();
      |               ^~~~~~
In file included from unix/unxcfg.h:119:
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:59:12: note: previous declaration of 'gmtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
   59 | struct tm *gmtime (const time_t *);
      |            ^~~~~~
unix/unxcfg.h:120:26: error: conflicting types for 'localtime'; have 'struct tm *(void)'
  120 |    struct tm *gmtime(), *localtime();
      |                          ^~~~~~~~~
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:60:12: note: previous declaration of 'localtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
   60 | struct tm *localtime (const time_t *);
      |            ^~~~~~~~~

Signed-off-by: Tan Zien <nabsdh9@gmail.com>
2025-07-09 18:52:06 +08:00
Ilya Lipnitskiy
5d8d4fbbcb treewide: Run refresh on all packages
The crude loop I wrote to come up with this changeset:

  find -L package/feeds/packages/ -name patches | \
  sed 's/patches$/refresh/' | sort | xargs make

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-20 16:02:15 -08:00
Jan Pavlinec
1bf4e7ddf2 unzip: fix PKG_CPE_ID
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-01-17 21:58:54 +08:00
Jan Pavlinec
cb24d1022b unzip: patch CVE-2018-1000035 and add PKG_CPE_IDE
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-01-15 20:35:52 +08:00
Alexander Couzens
5f4c455c7a unzip: remove build timestamp
Build timestamps prevent reproducible builds [0].
Thanks to debian for the patch.

[0] https://reproducible-builds.org/docs/timestamps/

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-11-17 13:39:30 +01:00
Etienne Champetier
4006865ae8 treewide: run "make check FIXUP=1"
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2017-08-29 21:41:14 -07:00
Álvaro Fernández Rojas
b1f3d7e7b2 unzip: patch CVE-2014-9913 and CVE-2016-9844 vulnerabilities
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2017-01-23 17:53:03 +01:00
Alexander Ryzhov
fc2a2dadb1 unzip: enable unicode support and avoid packing the same binary twice
Closes https://github.com/openwrt/packages/pull/2081.

Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2015-12-16 23:01:51 +01:00
Álvaro Fernández Rojas
b88213b3a7 unzip: patch CVE-2015-7696, CVE-2015-7697 and integer underflow
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2015-11-01 16:19:56 +01:00
Álvaro Fernández Rojas
857def5d1a unzip: patch CVE-2014-8139, CVE-2014-8140, CVE-2014-8141 and CVE-2014-9636
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2015-02-16 15:04:23 +01:00
Etienne CHAMPETIER
e598af5f99 PKG_CHECK_FORMAT_SECURITY: disable it for the failing packages (for now)
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
2014-06-24 23:01:14 +02:00
Steven Barth
e61b36871d unzip: fix cross-compilation and skip target checks
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
Signed-off-by: Steven Barth <steven@midlink.org>
2014-06-14 20:13:49 +02:00
Álvaro Fernández Rojas
81dfa3c04f unzip: Import 5.52 from packages and update to 6.0.
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2014-06-12 14:49:48 +02:00