b0d8a3d384
treewide: cleanup URLs
...
This commit converts plain HTTP URLs to HTTPS, and updates
old or outdated URLs.
Signed-off-by: Yanase Yuki <dev@zpc.st >
2026-05-08 22:28:27 +02:00
459ceca657
unzip: refresh patches
...
Fixes:
```
2026-04-28T14:55:09.6675796Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0001-fix-heap-based-buffer-overflow-in-the-CRC32-verifica.patch' -> '/feed/utils/unzip/patches/0001-fix-heap-based-buffer-overflow-in-the-CRC32-verifica.patch'
2026-04-28T14:55:09.6707616Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0002-fix-heap-based-buffer-overflow-in-the-test_compr_eb-.patch' -> '/feed/utils/unzip/patches/0002-fix-heap-based-buffer-overflow-in-the-test_compr_eb-.patch'
2026-04-28T14:55:09.6739766Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0003-fix-heap-based-buffer-overflow-in-the-getZip64Data-f.patch' -> '/feed/utils/unzip/patches/0003-fix-heap-based-buffer-overflow-in-the-getZip64Data-f.patch'
2026-04-28T14:55:09.6770773Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0004-fix-out-of-bounds-read-or-write-and-crash.patch' -> '/feed/utils/unzip/patches/0004-fix-out-of-bounds-read-or-write-and-crash.patch'
2026-04-28T14:55:09.6802381Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0005-fix-heap-based-buffer-over-read-and-application-cras.patch' -> '/feed/utils/unzip/patches/0005-fix-heap-based-buffer-over-read-and-application-cras.patch'
2026-04-28T14:55:09.6832719Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0006-fix-infinite-loop-because-of-an-empty-bzip2-data.patch' -> '/feed/utils/unzip/patches/0006-fix-infinite-loop-because-of-an-empty-bzip2-data.patch'
2026-04-28T14:55:09.6863943Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0007-fix-error-to-prevent-unsigned-overflow.patch' -> '/feed/utils/unzip/patches/0007-fix-error-to-prevent-unsigned-overflow.patch'
2026-04-28T14:55:09.6895530Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0008-fix-buffer-overflow-in-the-list_files-function.patch' -> '/feed/utils/unzip/patches/0008-fix-buffer-overflow-in-the-list_files-function.patch'
2026-04-28T14:55:09.6926806Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0009-fix-buffer-overflow-in-the-zi_short-function.patch' -> '/feed/utils/unzip/patches/0009-fix-buffer-overflow-in-the-zi_short-function.patch'
2026-04-28T14:55:09.6958683Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0010-unix.c-Remove-build-date.patch' -> '/feed/utils/unzip/patches/0010-unix.c-Remove-build-date.patch'
2026-04-28T14:55:09.6990350Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/0011-fix-heap-based-buffer-overflow-in-the-password-prote.patch' -> '/feed/utils/unzip/patches/0011-fix-heap-based-buffer-overflow-in-the-password-prote.patch'
2026-04-28T14:55:09.7023549Z '/builder/build_dir/target-aarch64_generic_musl/unzip-6.0/unzip60/patches/012-fix-gcc15-build.patch' -> '/feed/utils/unzip/patches/012-fix-gcc15-build.patch'
2026-04-28T14:55:09.7047649Z make[2]: Leaving directory '/feed/utils/unzip'
2026-04-28T14:55:09.7051724Z time: package/feeds/packages_ci/unzip/refresh#1.41#1.81#2.76
2026-04-28T14:55:09.7059428Z make[1]: Leaving directory '/builder'
2026-04-28T14:55:09.7071281Z ##[endgroup]
2026-04-28T14:55:09.7104892Z Dirty patches detected, please refresh and review the diff
```
Fixes: f9e7e2db94pepe.schlehofer@gmail.com >
2026-04-29 08:41:42 +02:00
f9e7e2db94
unzip: add valid patche headers and missing CVE informations
...
This commit adds a valid git patch header for each patch, so that
additional information can be stored. This is in this case and 'CVE:' tag.
This can be used by CVE scanner to find out if the patch fixes a CVE.
Signed-off-by: Florian Eckert <fe@dev.tdt.de >
2025-09-08 09:23:42 +02:00
d3a2fb39a7
unzip: fix build GCC 15.1
...
refer to:
https://gitlab.alpinelinux.org/alpine/aports/-/blob/b7410ac718d5eeae21001de5cae9159f597bb517/main/unzip/gcc15.patch
fix this:
unix/unxcfg.h:120:15: error: conflicting types for 'gmtime'; have 'struct tm *(void)'
120 | struct tm *gmtime(), *localtime();
| ^~~~~~
In file included from unix/unxcfg.h:119:
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:59:12: note: previous declaration of 'gmtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
59 | struct tm *gmtime (const time_t *);
| ^~~~~~
unix/unxcfg.h:120:26: error: conflicting types for 'localtime'; have 'struct tm *(void)'
120 | struct tm *gmtime(), *localtime();
| ^~~~~~~~~
/home/nasbdh9/openwrt/staging_dir/toolchain-x86_64_gcc-15.1.0_musl/include/time.h:60:12: note: previous declaration of 'localtime' with type 'struct tm *(const time_t *)' {aka 'struct tm *(const long int *)'}
60 | struct tm *localtime (const time_t *);
| ^~~~~~~~~
Signed-off-by: Tan Zien <nabsdh9@gmail.com >
2025-07-09 18:52:06 +08:00
5d8d4fbbcb
treewide: Run refresh on all packages
...
The crude loop I wrote to come up with this changeset:
find -L package/feeds/packages/ -name patches | \
sed 's/patches$/refresh/' | sort | xargs make
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com >
2021-02-20 16:02:15 -08:00
1bf4e7ddf2
unzip: fix PKG_CPE_ID
...
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
2019-01-17 21:58:54 +08:00
cb24d1022b
unzip: patch CVE-2018-1000035 and add PKG_CPE_IDE
...
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz >
2019-01-15 20:35:52 +08:00
5f4c455c7a
unzip: remove build timestamp
...
Build timestamps prevent reproducible builds [0].
Thanks to debian for the patch.
[0] https://reproducible-builds.org/docs/timestamps/
Signed-off-by: Alexander Couzens <lynxis@fe80.eu >
2017-11-17 13:39:30 +01:00
4006865ae8
treewide: run "make check FIXUP=1"
...
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git
(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com >
2017-08-29 21:41:14 -07:00
b1f3d7e7b2
unzip: patch CVE-2014-9913 and CVE-2016-9844 vulnerabilities
...
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com >
2017-01-23 17:53:03 +01:00
fc2a2dadb1
unzip: enable unicode support and avoid packing the same binary twice
...
Closes https://github.com/openwrt/packages/pull/2081 .
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru >
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com >
2015-12-16 23:01:51 +01:00
b88213b3a7
unzip: patch CVE-2015-7696, CVE-2015-7697 and integer underflow
...
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com >
2015-11-01 16:19:56 +01:00
857def5d1a
unzip: patch CVE-2014-8139, CVE-2014-8140, CVE-2014-8141 and CVE-2014-9636
...
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com >
2015-02-16 15:04:23 +01:00
e598af5f99
PKG_CHECK_FORMAT_SECURITY: disable it for the failing packages (for now)
...
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr >
2014-06-24 23:01:14 +02:00
e61b36871d
unzip: fix cross-compilation and skip target checks
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org >
Signed-off-by: Steven Barth <steven@midlink.org >
2014-06-14 20:13:49 +02:00
81dfa3c04f
unzip: Import 5.52 from packages and update to 6.0.
...
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com >
2014-06-12 14:49:48 +02:00
Yanase Yuki