aboutsummaryrefslogtreecommitdiffstats
path: root/package/libs
Commit message (Collapse)AuthorAgeFilesLines
* BB: openssl: update to v1.0.2d (CVE-2015-1793)Jo-Philipp Wich2015-07-095-30/+25
| | | | | | | | | | | | | | | | | | During certificate verification, OpenSSL (starting from version 1.0.1n and 1.0.2b) will attempt to find an alternative certificate chain if the first attempt to build such a chain fails. An error in the implementation of this logic can mean that an attacker could cause certain checks on untrusted certificates to be bypassed, such as the CA flag, enabling them to use a valid leaf certificate to act as a CA and "issue" an invalid certificate. This issue will impact any application that verifies certificates including SSL/TLS/DTLS clients and SSL/TLS/DTLS servers using client authentication. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> Backport of r46285 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@46287 3c298f89-4303-0410-b956-a3cf2f4a3e73
* BB: uclibc++: make g++-uc* wrappers relocatableJo-Philipp Wich2015-07-031-2/+3
| | | | | | | | | | | | | | | | | | The g++-uc wrapper hardcodes $(STAGING_DIR) and $(TOOLCHAIN_DIR) paths which will not work outside of the original build environment. Replace the hardcoded staging_dir occurences with paths relative to the $STAGING_DIR environment variable to make the g++-uc* wrappers usable in an SDK environment. Fixes the libdb47 build failure reported at https://lists.openwrt.org/pipermail/openwrt-devel/2015-April/032455.html Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> Backport of r46162 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@46164 3c298f89-4303-0410-b956-a3cf2f4a3e73
* openssl: bump to 1.0.2cSteven Barth2015-06-127-32/+18
| | | | | | | | fixes CVE-2015-4000 CVE-2015-1788 CVE-2015-1789 CVE-2015-1790 CVE-2015-1792 CVE-2015-1791 Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@45951 3c298f89-4303-0410-b956-a3cf2f4a3e73
* BB: openssl: update to v1.0.2a (14 CVEs)Jo-Philipp Wich2015-03-235-174/+20
| | | | | | | | | | Fixes CVE-2015-0204, CVE-2015-0207, CVE-2015-0208, CVE-2015-0209, CVE-2015-0285, CVE-2015-0286, CVE-2015-0287, CVE-2015-0288, CVE-2015-0289, CVE-2015-0290, CVE-2015-0291, CVE-2015-0292, CVE-2015-0293, CVE-2015-1787. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44952 3c298f89-4303-0410-b956-a3cf2f4a3e73
* openssl: fix upstream regression for non-ec buildsSteven Barth2015-02-092-1/+15
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44365 3c298f89-4303-0410-b956-a3cf2f4a3e73
* openssl: bump to 1.0.2Steven Barth2015-02-099-29/+29
| | | | | | | | Fixes CVE-2014-3513, CVE-2014-3567, CVE-2014-3568, CVE-2014-3566 Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44347 3c298f89-4303-0410-b956-a3cf2f4a3e73
* BB: gmp: use http instead of ftp download (#18805)Jo-Philipp Wich2015-01-241-1/+1
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> Backport of r44082 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44095 3c298f89-4303-0410-b956-a3cf2f4a3e73
* BB: polarssl: update to v1.3.9 and patch CVE-2015-1182Jo-Philipp Wich2015-01-203-41/+15
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44061 3c298f89-4303-0410-b956-a3cf2f4a3e73
* BB: openssl: update to v1.0.1k (8 CVEs)Jo-Philipp Wich2015-01-093-16/+16
| | | | | | | | | Fixes CVE-2014-3571, CVE-2015-0206, CVE-2014-3569, CVE-2014-3572, CVE-2015-0204, CVE-2015-0205, CVE-2014-8275 and CVE-2014-3570. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43889 3c298f89-4303-0410-b956-a3cf2f4a3e73
* uclient: update to the latest version, fixes HTTP digest auth processingFelix Fietkau2014-12-101-2/+2
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> Backport of r43600 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43601 3c298f89-4303-0410-b956-a3cf2f4a3e73
* openssl: add ABI_VERSION to fix package rebuild issues (fixes #18169)Felix Fietkau2014-10-191-0/+1
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> Backport of r42963 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42964 3c298f89-4303-0410-b956-a3cf2f4a3e73
* polarssl: do not build the unused programsFelix Fietkau2014-10-191-0/+1
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> Backport of r42960 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42961 3c298f89-4303-0410-b956-a3cf2f4a3e73
* polarssl: add missing version bumpFelix Fietkau2014-10-181-1/+1
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> Backport of r42949 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42950 3c298f89-4303-0410-b956-a3cf2f4a3e73
* polarssl: disable SSLv3 support, fixes CVE-2014-3566 (POODLE)Felix Fietkau2014-10-181-0/+12
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> Backport of r42947 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42948 3c298f89-4303-0410-b956-a3cf2f4a3e73
* BB: openssl: update to v1.0.1j (CVE-2014-3513, CVE-2014-3567, CVE-2014-3568)Jo-Philipp Wich2014-10-163-13/+13
| | | | | | | | | | Also refresh patches and bump copyright year in Makefile. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> Backport of r42929 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42930 3c298f89-4303-0410-b956-a3cf2f4a3e73
* cyassl: update to version 3.2.0John Crispin2014-09-182-3/+3
| | | | | | | | | | | This fixes a security problem: Security fix for RSA Padding check vulnerability Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> Backport of r42526 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42614 3c298f89-4303-0410-b956-a3cf2f4a3e73
* uclient: update to the latest version, fixes some crash issuesFelix Fietkau2014-09-041-2/+2
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> Backport of r42419 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42420 3c298f89-4303-0410-b956-a3cf2f4a3e73
* libubox: update to latest git revisionJohn Crispin2014-09-011-3/+3
| | | | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> Backport of r42230 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42373 3c298f89-4303-0410-b956-a3cf2f4a3e73
* gmp: add host compileJohn Crispin2014-09-011-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | Currently, any package that uses host compile and depends on libgmp.so will fail. This is because gmp is not compile for host machine. So, staging_dir/host has only static lib for gmp $ ls staging_dir/host/lib/libgmp* -1 staging_dir/host/lib/libgmp.a staging_dir/host/lib/libgmp.la staging_dir/host/lib/libgmpxx.a staging_dir/host/lib/libgmpxx.la Addind host compile in gmp, the dependent package can use: PKG_BUILD_DEPENDS:=gmp/host That will compile gmp to staging_dir/host with *.so files Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com> Backport of r42196 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42369 3c298f89-4303-0410-b956-a3cf2f4a3e73
* nettle: disable mips16 support to improve performanceFelix Fietkau2014-08-311-0/+1
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> Backport of r42341 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42342 3c298f89-4303-0410-b956-a3cf2f4a3e73
* uclient: update to latest version, fixes HTTP keepalive issuesFelix Fietkau2014-08-211-2/+2
| | | | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> Backport of r42257 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42258 3c298f89-4303-0410-b956-a3cf2f4a3e73
* cyassl: update to 3.1.0Steven Barth2014-08-082-3/+3
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42064 3c298f89-4303-0410-b956-a3cf2f4a3e73
* polarssl: bump to 1.3.8Steven Barth2014-08-083-35/+31
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42062 3c298f89-4303-0410-b956-a3cf2f4a3e73
* openssl: another day another bug fix updateJohn Crispin2014-08-071-2/+2
| | | | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> Backport of r42055 git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42056 3c298f89-4303-0410-b956-a3cf2f4a3e73
* lzo: enable parallel buildFelix Fietkau2014-07-181-0/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41734 3c298f89-4303-0410-b956-a3cf2f4a3e73
* lzo: Update to version 2.08Hauke Mehrtens2014-07-171-2/+2
| | | | | | | | | lzo: Update to 2.08, fixes CVE-2014-4607 Signed-off-by: Luis Dallos <ld@nkvd.ignorelist.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41707 3c298f89-4303-0410-b956-a3cf2f4a3e73
* libubox: update to the latest version, fixes a jshn parsing error (#17128)Felix Fietkau2014-07-161-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41674 3c298f89-4303-0410-b956-a3cf2f4a3e73
* build: disable the PKG_CHECK_FORMAT_SECURITY check for the failing packagesFelix Fietkau2014-06-301-0/+1
| | | | | | | | The idea is to gradually fix the packages Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41411 3c298f89-4303-0410-b956-a3cf2f4a3e73
* librpc: fix compile errors with muslFelix Fietkau2014-06-291-0/+330
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41400 3c298f89-4303-0410-b956-a3cf2f4a3e73
* gettext-full: use uclibc workarounds for musl as wellFelix Fietkau2014-06-291-0/+3
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41397 3c298f89-4303-0410-b956-a3cf2f4a3e73
* toolchain: only take last found libgcc* fileJo-Philipp Wich2014-06-271-3/+3
| | | | | | | | | | | | | The current $(wildcard ...) match might return multiple files which will break subsequent cp commands with an error like: cp: target `/home/user/openwrt/staging_dir/target-mips_34kc_uClibc-0.9.33.2/root-ar71xx/tmp-libc/lib/libgcc_s_pic.a' is not a directory Prevent this issue by only taking the last path returned by globbing. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41357 3c298f89-4303-0410-b956-a3cf2f4a3e73
* libubox: update to latest git headJohn Crispin2014-06-241-2/+2
| | | | | | | | this adds 5 lua fixes to the tree Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41328 3c298f89-4303-0410-b956-a3cf2f4a3e73
* nettle: downgrade to 2.7.1 since gnutls is incompatible with 3.0Steven Barth2014-06-186-88/+1915
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41263 3c298f89-4303-0410-b956-a3cf2f4a3e73
* nettle: import from packages, update to 3.0Steven Barth2014-06-186-0/+1843
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41248 3c298f89-4303-0410-b956-a3cf2f4a3e73
* gmp: import from packages, update and reduce sizeSteven Barth2014-06-181-0/+68
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41247 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ncurses: Install xterm-256colorSteven Barth2014-06-161-1/+1
| | | | | | Based on a patch by Jonathan Bennett <jbscience87@gmail.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41212 3c298f89-4303-0410-b956-a3cf2f4a3e73
* libubox: update to latest gitJohn Crispin2014-06-111-2/+2
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41123 3c298f89-4303-0410-b956-a3cf2f4a3e73
* libnfnetlink: fix musl compile errorsFelix Fietkau2014-06-091-0/+10
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41061 3c298f89-4303-0410-b956-a3cf2f4a3e73
* openssl: version bump to 1.0.1hHauke Mehrtens2014-06-051-2/+2
| | | | | | | | | | | | today appeared another serious vulnerability in openssl. More info is here http://ccsinjection.lepidum.co.jp. Users are advised to update to openssl 1.0.1h. Signed-off-by: Martin Strbacka <martin.strbacka@nic.cz> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41026 3c298f89-4303-0410-b956-a3cf2f4a3e73
* libubox: update to the latest version, adds static vlist initializer macrosFelix Fietkau2014-06-051-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41013 3c298f89-4303-0410-b956-a3cf2f4a3e73
* libusb-compat: create directory for libusb-configJohn Crispin2014-06-041-0/+2
| | | | | | | | | | | Fix a build regression caused by r39975 by making sure $(STAGING_DIR)/host directory exists before trying to copy files to it. Cc: Florian Fainelli <florian@openwrt.org> Signed-off-by: Tim Harvey <tharvey@gateworks.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40998 3c298f89-4303-0410-b956-a3cf2f4a3e73
* polarssl: enable parallel buildFelix Fietkau2014-06-021-0/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40950 3c298f89-4303-0410-b956-a3cf2f4a3e73
* polarssl: remove polarssl-progs, it is just a random collection of test programsFelix Fietkau2014-06-021-19/+0
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40949 3c298f89-4303-0410-b956-a3cf2f4a3e73
* polarssl: bump to 1.3.7Steven Barth2014-06-014-55/+39
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40892 3c298f89-4303-0410-b956-a3cf2f4a3e73
* uclient: update to the latest version, fixes an issue with http ↵Felix Fietkau2014-05-281-2/+2
| | | | | | | | authentication handling Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40867 3c298f89-4303-0410-b956-a3cf2f4a3e73
* libubox: update to latest version, fixes a segfault on json_script cleanupFelix Fietkau2014-05-261-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40861 3c298f89-4303-0410-b956-a3cf2f4a3e73
* uclient: fix uclient-fetch permissionsFelix Fietkau2014-05-091-1/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40742 3c298f89-4303-0410-b956-a3cf2f4a3e73
* libubox: update to the latest version, adds minor enhancements/fixes for ↵Felix Fietkau2014-05-091-2/+2
| | | | | | | | uloop, blobmsg, kvlist and json_script Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40739 3c298f89-4303-0410-b956-a3cf2f4a3e73
* add uclient, a small HTTP/1.1 client library (+ utility), using ustream-sslFelix Fietkau2014-05-091-0/+51
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40738 3c298f89-4303-0410-b956-a3cf2f4a3e73
* cyassl: update to version 3.0.0Hauke Mehrtens2014-05-013-6/+6
| | | | | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40621 3c298f89-4303-0410-b956-a3cf2f4a3e73