Jan Pavlinec [Thu, 27 May 2021 08:54:44 +0000 (10:54 +0200)]
curl: update to version 7.77.0 (security fix)
Fixes:
CVE-2021-22897
CVE-2021-22898
CVE-2021-22901
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Dobroslaw Kijowski [Mon, 24 May 2021 14:50:42 +0000 (16:50 +0200)]
adguardhome: bump to 0.106.3
* Full changelog available at:
* https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.3
Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
ekathva advaita [Fri, 21 May 2021 09:06:28 +0000 (12:06 +0300)]
gpsd: Add a new package gpsd-utils to add gpsdctl
gpsd-utils include management tools for GPS daemon - and this commmit
particularly introduces gpsdctl to add/remove device from the GPS
daemon's device list over control socket.
Signed-off-by: ekathva advaita <ekathva@hotmail.com>
David Bauer [Tue, 25 May 2021 20:57:08 +0000 (22:57 +0200)]
Merge pull request #15687 from blocktrron/xr-usb-serial-fix
xr_usb_serial_common: fix kernel 5.10 builds
David Bauer [Sat, 22 May 2021 08:39:53 +0000 (10:39 +0200)]
xr_usb_serial_common: fix kernel 5.10 builds
Building the xr_usb_serial module fails for Kenel 5.10 with CONFIG_PM
enabled:
xr_usb_serial_common.c:1574:15: error: 'ASYNCB_INITIALIZED' undeclared
(first use in this function); did you mean 'RCU_INITIALIZER'?
Use tty_port_initialized in order to determine the status of the TTY
port. This is compatible with Kernel 5.10 and at least Kernel 5.4.
Signed-off-by: David Bauer <mail@david-bauer.net>
Josef Schlehofer [Tue, 25 May 2021 19:00:09 +0000 (21:00 +0200)]
Merge pull request #15625 from ja-pa/python-cryptodomex-update
python-cryptodomex: update to version 3.10.1
Josef Schlehofer [Tue, 25 May 2021 18:59:02 +0000 (20:59 +0200)]
Merge pull request #15690 from ja-pa/gitlab-runner-13.12.0
gitlab-runner: update to version 13.12.0
Jan Pavlinec [Tue, 25 May 2021 08:19:47 +0000 (10:19 +0200)]
gitlab-runner: update to version 13.12.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Tianling Shen [Mon, 24 May 2021 08:05:48 +0000 (16:05 +0800)]
yq: Update to 4.9.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Darryl Sokoloski [Fri, 21 May 2021 23:51:10 +0000 (19:51 -0400)]
netifyd: update to 3.07
Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
W. Michael Petullo [Fri, 21 May 2021 02:55:13 +0000 (21:55 -0500)]
podman: change permissions on /etc/containers
Running podman as users other than root seems to require that those
users can read the configuration files in /etc/containers. This change
sets the permissions of /etc/containers and its contents to match those
used on Fedora.
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Alexander Egorenkov [Thu, 13 May 2021 08:53:23 +0000 (10:53 +0200)]
libassuan: remove gpgrt-config workaround
After the recent libgpg-error update, the workaround for gpgrt-config
is no more necessary.
Reverts
63481e619 ("libassuan: fix linking of host's libgpg-error").
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
Michael Heimpold [Fri, 21 May 2021 21:07:44 +0000 (23:07 +0200)]
Merge pull request #15678 from mhei/libxml-update
libxml2: update to 2.9.12
Stijn Tintel [Thu, 13 May 2021 14:35:06 +0000 (17:35 +0300)]
miniupnpd: bump to 2.2.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Stijn Tintel [Thu, 13 May 2021 14:08:34 +0000 (17:08 +0300)]
miniupnpd: add missing dependencies
Fixes the build problem below.
Package miniupnpd is missing dependencies for the following libraries:
libmnl.so.0
libnetfilter_conntrack.so.3
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Stijn Tintel [Thu, 13 May 2021 14:05:10 +0000 (17:05 +0300)]
miniupnpd: reformat dependencies
Use multiple lines and order alphabetically for improved readability.
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Lucian Cristian [Thu, 20 May 2021 21:08:09 +0000 (00:08 +0300)]
libreswan: update to 4.4
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
Lucian Cristian [Thu, 20 May 2021 21:06:23 +0000 (00:06 +0300)]
nss: update to 3.65
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
Lucian Cristian [Thu, 20 May 2021 21:04:11 +0000 (00:04 +0300)]
nspr: update to 4.30
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
Florian Eckert [Thu, 20 May 2021 06:28:21 +0000 (08:28 +0200)]
Merge pull request #15664 from looi/fix_ddns_dash
ddns-scripts: Fix for domains with dash
Wenli Looi [Wed, 19 May 2021 18:42:25 +0000 (11:42 -0700)]
ddns-scripts: Fix for domains with dash
Signed-off-by: Wenli Looi <wlooi@ucalgary.ca>
Jan Pavlinec [Wed, 19 May 2021 10:55:53 +0000 (12:55 +0200)]
tor: update to version 0.4.5.8
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Oskari Rauta [Tue, 18 May 2021 23:53:33 +0000 (02:53 +0300)]
crun: bumb to version 0.19.1
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
Florian Eckert [Wed, 19 May 2021 06:50:35 +0000 (08:50 +0200)]
Merge pull request #15657 from looi/fix_ddns_wildcard
ddns-scripts: Fix for wildcard subdomain
Wenli Looi [Wed, 19 May 2021 06:08:52 +0000 (23:08 -0700)]
ddns-scripts: Fix for wildcard subdomain
Signed-off-by: Wenli Looi <wlooi@ucalgary.ca>
Michael Heimpold [Tue, 18 May 2021 22:12:32 +0000 (00:12 +0200)]
libxml2: update to 2.9.12
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Jan Hoffmann [Sun, 16 May 2021 16:22:56 +0000 (18:22 +0200)]
vnstat2: update to version 2.7
Signed-off-by: Jan Hoffmann <jan@3e8.eu>
Alexandru Ardelean [Tue, 18 May 2021 12:40:16 +0000 (15:40 +0300)]
sudo: bump to version 1.9.7
Refresh patch 010-cross-compile-fixes.patch
Re-apply patch 020-no-owner-change.patch
Also we need to explicitly disable OpenSSL support.
We may enable it later if needed/requested.
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
Oskari Rauta [Tue, 18 May 2021 00:35:01 +0000 (03:35 +0300)]
podman: bumb version to 3.1.2
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
Tianling Shen [Tue, 18 May 2021 04:15:53 +0000 (12:15 +0800)]
yq: Update to 4.9.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Alexandru Ardelean [Wed, 12 May 2021 12:30:40 +0000 (15:30 +0300)]
django: bump to version 3.2.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
Alexandru Ardelean [Wed, 12 May 2021 08:36:57 +0000 (11:36 +0300)]
et_xmlfile: bump to version 1.1.0
Updating Eneas' email as requested on Github:
https://github.com/openwrt/packages/pull/15622
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
Alexandru Ardelean [Wed, 12 May 2021 08:16:40 +0000 (11:16 +0300)]
python-six: bump to version 1.16.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
Christian Lachner [Fri, 14 May 2021 15:33:42 +0000 (17:33 +0200)]
haproxy: Update HAProxy to v2.4.0
- New upstream major release with tons of new features and LTS (see: https://www.haproxy.com/blog/announcing-haproxy-2-4/)
- Update haproxy download URL and hash
- Activate promtheus exporter support the new way (using USE_PROMEX=1)
- Cleaned up haproxy-specific CFLAGS
- Changed the halog build to make use of the new Makefile target (admin/halog/halog)
Signed-off-by: Christian Lachner <gladiac@gmail.com>
Rosen Penev [Sat, 15 May 2021 08:22:05 +0000 (01:22 -0700)]
Merge pull request #15630 from nxhack/node_14170
node: bump to v14.17.0
Philip Prindeville [Fri, 14 May 2021 17:49:35 +0000 (11:49 -0600)]
Merge pull request #15601 from pprindeville/strongswan-make-swanctl-default
strongswan: make default bundle use swanctl
Matt Reeve [Wed, 12 May 2021 13:28:22 +0000 (14:28 +0100)]
rsync: Add rrsync script
Rrsync is a perl script that is supplied as an extra with the rsync program.
It must be used in conjunction with openssh-server or openssh-server-pam
as it requires ~/.ssh/authorized_keys which is not supported by dropbear.
Rrsync allows selective access to subdirectories in either read-only, write-only or read-write,
depending on settings in authorized_keys. This allows for safe, restrictive access.
It's particularly useful for automated backup purposes.
An example usage would be this entry:
command="/usr/bin/rrsync -ro /home" <public key here>
This would allow a system connecting with this public key to be able to rsync FROM the
/home directory tree only. It could not write to this directory, nor read from any other directory.
Signed-off-by: Matt Reeve <matt@mreeve.com>
Igor Bezzubchenko [Thu, 13 May 2021 05:52:40 +0000 (08:52 +0300)]
libpqxx: update to version 7.5.2
Signed-off-by: Igor Bezzubchenko <garikello@gmail.com>
Jan Pavlinec [Fri, 14 May 2021 10:18:46 +0000 (12:18 +0200)]
python-cryptodomex: update to version 3.10.1
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Ansuel Smith [Tue, 11 May 2021 22:27:31 +0000 (00:27 +0200)]
atlas-sw-probe: fix missing link on sysupgrade
Recreate symbolic link if it's missing after a sysupgrade with a private and public key present in /etc/atlas/
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
Miroslav Lichvar [Thu, 13 May 2021 15:54:32 +0000 (17:54 +0200)]
chrony: update to 4.1
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
Josef Schlehofer [Thu, 13 May 2021 15:02:23 +0000 (17:02 +0200)]
Merge pull request #15618 from Payne-X6/master
knot: update to version 3.0.6
Stijn Tintel [Thu, 13 May 2021 12:25:05 +0000 (15:25 +0300)]
Merge pull request #15615 from flyn-org/libgpg-error
libgpg-error: patch to fix cross-compile
Fixes #15621
Jan Hak [Thu, 13 May 2021 07:32:01 +0000 (09:32 +0200)]
knot: update to version 3.0.6
Signed-off-by: Jan Hak <jan.hak@nic.cz>
Javier Marcet [Tue, 11 May 2021 12:20:26 +0000 (12:20 +0000)]
docker-compose: Update to version 1.29.2
Miscellaneous:
- Remove prompt to use docker compose in the up command
- Bump py to 1.10.0 in requirements-indirect.txt
Signed-off-by: Javier Marcet <javier@marcet.info>
Hirokazu MORIKAWA [Thu, 13 May 2021 04:19:24 +0000 (13:19 +0900)]
node: bump to v14.17.0
Notable Changes:
Diagnostics channel (experimental module)
UUID support in the crypto module
Experimental support for AbortController and AbortSignal
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
W. Michael Petullo [Thu, 13 May 2021 03:15:50 +0000 (22:15 -0500)]
libgpg-error: patch to fix cross-compile
Paul Blazejowski discovered that the recent update to this package broke
cross-compiling for some OpenWrt platforms. This backports commit
33593864
(March 26, 2021) from the upstream libgpg-error project to fix this
problem.
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Rosen Penev [Tue, 11 May 2021 18:25:13 +0000 (11:25 -0700)]
Merge pull request #15593 from flyn-org/snort3
Update snort3 and libdaq3 packages
Rosen Penev [Tue, 11 May 2021 18:24:25 +0000 (11:24 -0700)]
Merge pull request #15590 from flyn-org/gstreamer
Gstreamer: update to 1.18.4
W. Michael Petullo [Tue, 11 May 2021 03:22:23 +0000 (22:22 -0500)]
snort3: update to 3.1.4.0
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Rosen Penev [Tue, 11 May 2021 17:29:24 +0000 (10:29 -0700)]
Merge pull request #15608 from dobo90/adguardhome_v0.106.2
adguardhome: bump to 0.106.2
Rosen Penev [Tue, 11 May 2021 17:28:57 +0000 (10:28 -0700)]
Merge pull request #15603 from ja-pa/knot-resolver-5.3.2
knot-resolver: update to version 5.3.2
Rosen Penev [Tue, 11 May 2021 17:28:25 +0000 (10:28 -0700)]
Merge pull request #15605 from
1715173329/yq
yq: Update to 4.8.0
Rosen Penev [Tue, 11 May 2021 17:28:03 +0000 (10:28 -0700)]
Merge pull request #15586 from commodo/python3-update
python3: bump version to 3.9.5
Rosen Penev [Tue, 11 May 2021 17:27:40 +0000 (10:27 -0700)]
Merge pull request #15591 from flyn-org/grilo-plugins
grilo-plugins: update to 0.3.13
Alexander Egorenkov [Sat, 8 May 2021 10:44:45 +0000 (12:44 +0200)]
libassuan: fix linking of host's libgpg-error
gpgrt-config is trying to use the host's /usr/lib path when looking for
libgpg-error. Therefore, disable it and gpg-error-config will be used
as a fallback.
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
Dobroslaw Kijowski [Mon, 10 May 2021 10:41:39 +0000 (12:41 +0200)]
adguardhome: bump to 0.106.2
* Full changelog available at:
* https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.2
Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
W. Michael Petullo [Tue, 11 May 2021 15:17:20 +0000 (10:17 -0500)]
gst1-libav: update to 1.18.4
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Tue, 11 May 2021 15:17:09 +0000 (10:17 -0500)]
gst1-plugins-ugly: update to 1.18.4
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Tue, 11 May 2021 15:17:00 +0000 (10:17 -0500)]
gst1-plugins-bad: update to 1.18.4
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Tue, 11 May 2021 15:16:51 +0000 (10:16 -0500)]
gst1-plugins-good: update to 1.18.4
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Tue, 11 May 2021 15:16:32 +0000 (10:16 -0500)]
gst1-plugins-base: update to 1.18.4
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Tue, 11 May 2021 15:16:18 +0000 (10:16 -0500)]
gstreamer1: update to 1.18.4
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Tianling Shen [Tue, 11 May 2021 13:38:31 +0000 (21:38 +0800)]
yq: Update to 4.8.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Josef Schlehofer [Tue, 11 May 2021 13:05:53 +0000 (15:05 +0200)]
Merge pull request #15602 from ja-pa/redis-6.2.3
redis: update to version 6.2.3
Josef Schlehofer [Tue, 11 May 2021 13:05:39 +0000 (15:05 +0200)]
Merge pull request #15604 from ja-pa/lmdb-0.9.29
lmbd: update to version 0.9.29
Jan Pavlinec [Tue, 11 May 2021 08:14:43 +0000 (10:14 +0200)]
lmbd: update to version 0.9.29
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Jan Pavlinec [Tue, 11 May 2021 07:58:54 +0000 (09:58 +0200)]
redis: update to version 6.2.3
Fixes CVE-2021-29477
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Alexandru Ardelean [Mon, 10 May 2021 07:10:17 +0000 (10:10 +0300)]
python3: bump version to 3.9.5
Refreshed Python patches.
Updated pip & setuptools version.
For pip, patch '001-pep517-pyc-fix.patch' was reworked.
Also, the current version of the bundled pip (21.1.1) no longer supports
Python2, so the 'py2.py3' suffix gets replaced with just py3.
For setuptools, there is no longer a script/module:
https://github.com/pypa/setuptools/pull/2544
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
Jan Pavlinec [Tue, 11 May 2021 08:28:09 +0000 (10:28 +0200)]
knot-resolver: update to version 5.3.2
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Michael Heimpold [Tue, 11 May 2021 05:59:07 +0000 (07:59 +0200)]
Merge pull request #15599 from mhei/php8-update
php8: update to 8.0.6
Michael Heimpold [Tue, 11 May 2021 05:58:54 +0000 (07:58 +0200)]
Merge pull request #15600 from mhei/php7-update
php7: update to 7.4.19
Philip Prindeville [Tue, 11 May 2021 04:04:01 +0000 (22:04 -0600)]
strongswan: make default bundle use swanctl
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
W. Michael Petullo [Mon, 10 May 2021 17:39:39 +0000 (12:39 -0500)]
grilo-plugins: update to 0.3.13
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Tue, 11 May 2021 02:44:23 +0000 (21:44 -0500)]
libdaq3: update to 3.0.3
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Mon, 10 May 2021 17:59:28 +0000 (12:59 -0500)]
syslog-ng: update to 3.32.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Rosen Penev [Mon, 10 May 2021 21:29:32 +0000 (14:29 -0700)]
Merge pull request #15594 from flyn-org/snort
snort: update 2.9.17.1
Rosen Penev [Mon, 10 May 2021 21:27:13 +0000 (14:27 -0700)]
Merge pull request #15589 from flyn-org/krb5
krb5: update to 1.19.1
Rosen Penev [Mon, 10 May 2021 21:26:17 +0000 (14:26 -0700)]
Merge pull request #15595 from flyn-org/libgcrypt
Update libgpg-error and libgcrypt
Rosen Penev [Mon, 10 May 2021 21:25:51 +0000 (14:25 -0700)]
Merge pull request #15596 from flyn-org/openldap
openldap: update to 2.4.58
Rosen Penev [Mon, 10 May 2021 21:25:41 +0000 (14:25 -0700)]
Merge pull request #15597 from flyn-org/scapy
scapy: update to 2.4.5
Rosen Penev [Mon, 10 May 2021 21:25:19 +0000 (14:25 -0700)]
Merge pull request #15588 from flyn-org/nfdump
nfdump: update to 1.6.23
Rosen Penev [Mon, 10 May 2021 21:25:05 +0000 (14:25 -0700)]
Merge pull request #15585 from ja-pa/tailscale-1.8.1
tailscale: update to version 1.8.1
Michael Heimpold [Mon, 10 May 2021 20:37:12 +0000 (22:37 +0200)]
php7: update to 7.4.19
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Rosen Penev [Mon, 10 May 2021 20:36:13 +0000 (13:36 -0700)]
Merge pull request #15587 from flyn-org/libgee
libgee: update to 0.20.4
Michael Heimpold [Mon, 10 May 2021 19:24:53 +0000 (21:24 +0200)]
php8: update to 8.0.6
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
W. Michael Petullo [Mon, 10 May 2021 18:19:47 +0000 (13:19 -0500)]
libgcrypt: update to 1.9.3
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Mon, 10 May 2021 18:19:34 +0000 (13:19 -0500)]
libgpg-error: update to 1.42
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Mon, 10 May 2021 17:57:47 +0000 (12:57 -0500)]
scapy: update to 2.4.5
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Mon, 10 May 2021 17:56:18 +0000 (12:56 -0500)]
openldap: update to 2.4.58
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Mon, 10 May 2021 17:50:01 +0000 (12:50 -0500)]
snort: update 2.9.17.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Mon, 10 May 2021 16:58:11 +0000 (11:58 -0500)]
krb5: update to 1.19.1
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Mon, 10 May 2021 16:54:30 +0000 (11:54 -0500)]
nfdump: update to 1.6.23
Signed-off-by: W. Michael Petullo <mike@flyn.org>
W. Michael Petullo [Mon, 10 May 2021 16:52:32 +0000 (11:52 -0500)]
libgee: update to 0.20.4
Signed-off-by: W. Michael Petullo <mike@flyn.org>
Jan Pavlinec [Fri, 7 May 2021 16:53:58 +0000 (18:53 +0200)]
tailscale: update to version 1.8.1
Add readme with simple tailscale howto.
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
Daniel Golle [Mon, 10 May 2021 02:42:01 +0000 (03:42 +0100)]
lvm2: update to version 2.03.12
Two notable changes are devices file and metadata based autoactivation.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Mon, 10 May 2021 02:17:25 +0000 (03:17 +0100)]
exim: update to version 4.94.2
Several exploitable vulnerabilities in Exim were reported to us and are
fixed.
Local vulnerabilities
- CVE-2020-28007: Link attack in Exim's log directory
- CVE-2020-28008: Assorted attacks in Exim's spool directory
- CVE-2020-28014: Arbitrary PID file creation
- CVE-2020-28011: Heap buffer overflow in queue_run()
- CVE-2020-28010: Heap out-of-bounds write in main()
- CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
- CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
- CVE-2020-28015: New-line injection into spool header file (local)
- CVE-2020-28012: Missing close-on-exec flag for privileged pipe
- CVE-2020-28009: Integer overflow in get_stdinput()
Remote vulnerabilities
- CVE-2020-28017: Integer overflow in receive_add_recipient()
- CVE-2020-28020: Integer overflow in receive_msg()
- CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
- CVE-2020-28021: New-line injection into spool header file (remote)
- CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
- CVE-2020-28026: Line truncation and injection in spool_read_header()
- CVE-2020-28019: Failure to reset function pointer after BDAT error
- CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
- CVE-2020-28018: Use-after-free in tls-openssl.c
- CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()
The update to 4.94.2 also integrates a fix for a printf format issue
previously addressed by a local patch which is removed.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Daniel Golle [Wed, 17 Mar 2021 21:09:50 +0000 (21:09 +0000)]
auc: support queue_position status from server
Display position in queue while waiting for build.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Michael Heimpold [Sat, 8 May 2021 21:11:22 +0000 (23:11 +0200)]
Merge pull request #15552 from mhei/php7-update
php7: update to 7.4.18
Philip Prindeville [Fri, 7 May 2021 23:28:37 +0000 (17:28 -0600)]
Merge pull request #15575 from pprindeville/strongswan-always-generate-var-strongswan
strongswan: swanctl init script doesn't load connections
projects / feed / packages.git / log