Matthias Schiffer
74148a8464
ecdsautils: verify: fix signature verification (CVE-2022-24884)
...
A vulnerability was found in ecdsautils which allows forgery of ECDSA
signatures. An adversary exploiting this vulnerability can create an update
manifest accepted by the autoupdater, which can be used to distribute
malicious firmware updates by spoofing a Gluon node's connection to the
update server.
2022-05-03 18:47:08 +02:00
David Bauer
b1216158dd
modules: bump OpenWrt
...
6bfde67581 OpenWrt v18.06.7: revert to branch defaults
1b5c116233 OpenWrt v18.06.7: adjust config defaults
ca47026b7d opkg: update to latest Git HEAD
cc0a54e332 libubox: backport security patches
ebafb746f0 lantiq: ltq-ptm: vr9: fix skb handling in ptm_hard_start_xmit()
0591348b3d tools/expat: Update to version 2.2.9
f51d1c3b7c mbedtls: update to 2.16.4
153a044c95 kernel: bump 4.14 to 4.14.167
c15a039e62 kernel: bump 4.9 to 4.9.211
02f9582e89 kirkwood: fix HDD LED labels for Zyxel NSA325 in 01_leds
04474c7d22 brcm47xx: fix switch port order for Netgear WN2500RP V1
99ab40c842 brcm47xx: fix switch port order for Netgear WNR3500 V2
3a3ca3230f ramips: fix HiWiFi HC5962 switch configuration
5c7225c26b kernel: bump 4.14 to 4.14.166
8441794f9a kernel: bump 4.14 to 4.14.165
a634830004 kernel: bump 4.9 to 4.9.210
7c42a9b6b1 kernel: bump 4.14 to 4.14.164
891bba8f77 kernel: bump 4.9 to 4.9.209
ab9d1bf608 ethtool: fix PKG_CONFIG_DEPENDS
46c2674225 OpenWrt v18.06.6: revert to branch defaults
8004e3f2c6 OpenWrt v18.06.6: adjust config defaults
d81a8a3e29 ramips: remove duplicate dts nodes of MediaTek LinkIt Smart 7688
e1b62c85f5 sunxi: Turn on CONFIG_PINCTRL_SUN4I_A10 for A20
8c6668f088 kernel: bump 4.9 to 4.9.208
455ae024d5 kernel: bump 4.14 to 4.14.162
b1eeb5dd2a ramips: fix inverted reset button for Ravpower WD03
b72b37d6ff ar71xx: really fix Mikrotik board detection
471baf3f74 ar71xx: fix Mikrotik board detection
336aaedc9c ar71xx: base-files: fix board detect on new MikroTik devices
e838957ad9 ar71xx: fix RB941-2nD detection
6b128326df kernel: bump 4.14 to 4.14.161
97e9be4e3a e2fsprogs: Fix CVE-2019-5094 in libsupport
85c4d374c2 openssl: update to version 1.0.2u
Compile-tested: none
Runtime-tested: none
(cherry picked from commit 61d460ec46
2020-02-02 01:32:02 +01:00
Andreas Ziegler
992e72f207
docs, README: Gluon v2018.2.4
2020-01-03 00:48:52 +01:00
Andreas Ziegler
1e66cd9057
docs: add v2018.2.4 release notes
2020-01-03 00:48:52 +01:00
Andreas Ziegler
d1a98596ff
patches: refresh OpenWrt patches
2020-01-03 00:48:52 +01:00
Andreas Ziegler
f3ab6daa29
modules: update routing packages
...
b3125f0 Merge pull request #537 from ecsv/batadv-for-18.06
0d22982 batman-adv: Merge bugfixes from 2019.5
3610d11 pimbd: update to current git HEAD (#534 )
c52779c Merge pull request #520 from ecsv/batadv-for-18.06
ee3264b batman-adv: Merge bugfixes from 2019.4
049cb8a Merge pull request #511 from adrianschmutzler/babeld1806
e80f582 babeld: Update to version 1.8.5
6e50f8b nodogsplash: Backport Version 4.0.1. (#493 )
a551935 nodogsplash: Backport of Version 4.0.0. (#486 )
bb156bf Merge pull request #455 from BKPepe/bird-openwrt18.06
d3f317b bird: update to version 1.6.6
Compile-tested: ar71xx-generic
Runtime-tested: ar71xx-generic
2020-01-03 00:48:52 +01:00
Andreas Ziegler
9611afd1af
modules: update OpenWrt packages
...
998ef11cb grilo: copy vapi files to versioned vala dir
8f7b6a2bb grilo: update vapi files, copy to unversioned dir
b89a2903b lcdproc: Fix non x86 platforms on musl
6e079e91c Merge pull request #10763 from leonghui/wiki-link-update-18.06
3727d98ce php7: update to 7.2.26
49b5fc001 bind: Update to version 9.11.14
279f4a338 Merge pull request #10855 from BKPepe/python3-18.06
29fe5f91d python3: Updated to version 3.6.10
102c621fc Merge pull request #10846 from cshoredaniel/pr-18.06-fix-nut-cgi-initscript
45c95e862 nut: Fix NUT CGI startup script
d810a3039 Merge pull request #10752 from stangri/18.06-https-dns-proxy
036917465 https-dns-proxy: switch to https-dns-proxy package name
0a3b6465f treewide: update wiki links
44b1f65cc Merge pull request #10744 from luizluca/libvpx-fixcve
98ca3621c libvpx: backport security fixes
cce63a697 luajit: install libluajit-5.1.so.2
c1975f5a1 luajit: add .hpp to InstallDev
6f528c678 nano: update to 4.6
be3ec8bae Merge pull request #10678 from gladiac1337/haproxy-1.8.23-openwrt-18.06
bc37a31b1 haproxy: Update HAProxy to v1.8.23
fff2e26a9 transmission: sync with master branch
2986916b8 tor: update to version 4.1.6
edeac5d3a Merge pull request #9836 from cotequeiroz/grilo-plugins_xml
8794f0956 grilo-plugins: adjust CONFIGURE_ARGS
c3ab7aace grilo-plugins: remove XML::Parser build dependency
86af45302 grilo-plugins: use hostpkg glib-compile-resources
8ef82e962 transmission: Disable webseeding
bd8b4df19 transmission: Fix tracker issue with some firewalls
71969eb04 php7: Update to version 7.2.25
3d409f615 php7: mark /etc/config/php7-fastcgi as conffile
d77c32928 php7-mod-xmlreader: add conditional dependency to php7-mod-dom (fixes #10201 )
8667e35c1 php7: bump to 7.2.23
8dc64ea14 php7: update to 7.2.22
882e46916 php7: update to 7.2.21
bbd4ec6cf Merge pull request #10609 from ja-pa/bind-update
d0726f1f2 bind: update to version 9.11.13 (security fix)
04a8496b7 unbound: Update to version 1.9.5
70a990ac4 Merge pull request #10520 from Kulipator/libmraa_ramips_fix
cf4e50ab7 Compilation fix & upgrade to version 0.8.1
1b64cb83d Libmraa compilation fix
d02965832 Libmraa compilation fix
b83b26c33 perl: fixed host compilation of static perl on MacOS
f496ed58d Merge pull request #9671 from BKPepe/clamav1806
340d5ce71 protobuf-c: Fix typo on build dependency.
e9c2ba68f libgd: Properly disable iconv support
e31213308 wget: provides gnu-wget
9f4f78da1 acme: Bring up-to-date with master
938818ec4 ruby: bump to 2.5.7
0f0c062d3 python-cryptography: fix CVE-2018-10903
5a9d222e5 python-cryptography: Add support for LibreSSL 2.7.x
5edcc9f30 Merge pull request #10324 from jefferyto/python-2.7.17-openwrt-18.06
f184eb5f0 python: Update to 2.7.17, refresh patches
4d9282a4d Merge pull request #10312 from stangri/18.06-vpnbypass
7001d4748 vpnbypass: bugfix: PROCD command not found on stop
7dbad81f8 Merge pull request #10279 from BKPepe/sudo-18.06
4c72f8dd6 sudo: Update to version 1.8.28p1
b504ac553 irssi: update to version 1.2.2 (security fix)
e98bc6874 Merge branch 'pr/10215' into openwrt-18.06
f2812716f Merge pull request #9997 from flyn-org/openldap-18.06
22a272ccf Merge pull request #10237 from jefferyto/gammu-fix-lib-symlinks-openwrt-18.06
6e2b8c2da gammu: Fix lib symlinks
9c7cf9880 bind: Update to version 9.11.11
728edfbdc Merge pull request #10108 from BKPepe/expat-1806
a8ca56684 Merge pull request #10167 from BKPepe/unbound18.06
e84deea05 python3-pip: fix install rule
c4710f780 nano: update to 4.5
cae699fc4 Merge pull request #10164 from stangri/18.06-simple-adblock
c674fa684 unbound: Update to version 1.9.4
0b8eee5fb unbound: update to 1.9.3
dba87ee0c simple-adblock: bugfix: proper dnsmasq reload on stop, rework start/stop logic
5452bb833 Merge pull request #10156 from gladiac1337/haproxy-1.8.21-openwrt-18.06
1bb725133 haproxy: Update HAProxy to v1.8.21
da5a8e596 Merge pull request #10155 from jefferyto/python-bpo-38243-34155-openwrt-18.06
ad7b3c618 Merge pull request #10143 from stangri/18.06-simple-adblock
dad9a1a2a python: Fix CVE-2019-16056, CVE-2019-16935
b677e3eee simple-adblock: bugfix and improvements (check description)
7a8808940 clamav: Remove build hacks
eef89800e clamav: update to version 0.100.3
b60caa494 Merge pull request #10120 from BKPepe/youtubedl-1806
2d822fb62 haveged: convert to procd
4fe703393 haveged: update to 1.9.8
36919e51f youtube-dl: Update to version 2019.9.28
00133e1e0 Merge pull request #10118 from BKPepe/libgcrypt-1806
126cdd7c6 python3: fix CVE-2019-16056 and delete two patches
0d9eeca45 python3: backport three security patches
f19f9ffc9 expat: Update to version 2.2.9
c0dea72f9 expat: update to version 2.2.7 (security fix)
deae9b348 expat: fix host build issue with docbook
fec2709d7 expat: disable docbook
fefe8e1f7 lib/expat: Update to 2.2.6
c64a4e86c Merge pull request #9893 from BKPepe/bind-18.06
d98310a3f Merge pull request #9798 from ja-pa/zmq-security-fix-18.06
03fb174ec net/mosquitto: bump to 1.5.9 for CVE
8eca9c916 python-crypto: Fix two CVEs
7ec22baf1 libgcrypt: backport fix for CVE-2019-13627
6305d09b1 Merge pull request #10063 from stangri/18.06-simple-adblock
fb43709a6 simple-adblock: dnsmasq.ipset option support, better handling of IDNs, updated README
9265be544 zmq: fix CVE-2019-13132
29cd578d6 Merge pull request #10041 from neheb/djj
f29206251 django: Update to 1.8.19
3772cdb3d openldap: update to 2.4.48
bbc22a721 openldap: Add static function declaration
c272beb43 openldap: version update and new build parameters
ec029b9ae openldap: Switch tarball sources to https and http
f587f31ad lighttpd: mark module configuration files
19879284a dovecot: Update to version 2.2.36.4
8f42d4b71 wget: fix CVE-2018-20483
f6e7b56a5 fastd: fix init script for multiple VPN instances
06cc48c49 haveged: update to 1.9.6
6014389c5 Merge pull request #9894 from BKPepe/keepalived-18.06
7a7820fb1 Merge pull request #9904 from RussellSenior/my-18.06
18f9e437c patch: rename CVE-2019-13638 patch to mollify uscan
abe523c57 patch: apply upstream patch for CVE-2019-13638
a3d8698e3 tools/patch: apply upstream patch for CVE-2019-13636
ebb9b3f17 exfat-nofuse: drop BUILD_PATENTED
2d9a3eff4 keepalived: add patch for CVE-2018-19115
e4508a351 keepalived: Update to version 1.4.5
e0af45ff7 bind: Update to version 9.11.10
6d8293801 lighttpd: fix CVE-2018-19052
55dcffd7f Merge pull request #9841 from cshoredaniel/pr-18.06-nut-targetted
bdddb2127 Merge pull request #9703 from BKPepe/squid-18.06
e45c2f206 Merge pull request #9814 from guidosarducci/speedtest-18.06
f01e4171d Merge pull request #9777 from BKPepe/tar_1806
85b1ca7fb Merge pull request #9821 from cotequeiroz/vim_host
c1aa1f784 nut: Bump PKG_RELEASE
361e6aaaa nut: Handle FSD properly
a2ab989c1 nut: Fix init actions (server/driver)
ef0bd0140 nut: Fix extra diver params config
77519cd20 nut: Fix permissions with runas
e97684652 nut: Fix statepath handling
5f69f9a06 nut: Fix unset of runas user (ups server)
ccdec71b5 nut: Fix bad check for conf exists
c963f0c29 nut: Fix upsmon init actions
d06bd2d7e nut: Fix unset of runas user (upsmon)
020dfd454 nut: Remove unecessary libwrap dependency
7fe013ce7 nano: update to 4.4
f50edf52d ttyd: Add dependency for vim
d9b29fe5e vim: Add host build to install xxd
5640d6e68 speedtest-netperf: new package to measure network performance
fded0497e Merge pull request #9789 from ja-pa/libarchive-security-fix-18.06
43f49bdbc apinger: Update to latest git revision
45e38f116 node-serialport: fix i386 build fail
19ee25df6 node-hid: fix i386 build fail
232df2821 libarchive: update to version 3.4.0 (security fix)
3bdadf4d7 Merge branch 'pr/9778' into openwrt-18.06
14219822e fastd: update URL and PKG_SOURCE_URL
41a85be71 libuecc: update URL and PKG_SOURCE_URL
51462b3df Merge pull request #9754 from champtar/openwrt-18.06
23eeeeadc bind: update to 9.11.9
0d7a23418 tar: update to version 1.32
70e3f5d17 tar: Update to 1.31
01466e76e lcdringer: Remove libcheck dependency to fix compilation
502ccc496 Merge pull request #9765 from stangri/18.06-simple-adblock
ddcbf080a dovecot: update to version 2.2.36.3
8e8087706 [18.06] simple-adblock: support for varios DNS resolvers/options
a4314b868 linknx: Fix compilation with libiconv
ca99a333e rp-pppoe: redo glibc patch
5327a95d6 rp-pppoe: Fixed compilation with glibc
19d101bd2 ldbus: Add zip/host build dependency
db85d6ec9 gcc: Do not build on ARC
80742d0da prometheus-node-exporter-lua: add target & system to OpenWrt collector
06e513ba3 prometheus-node-exporter-lua: Add more wifi_station metrics and fix naming according to original wifi_linux.go node exporter
60002eb62 prometheus-node-exporter-lua: Bump PKG_RELEASE
1014b0987 prometheus-node-exporter-lua: Add wifi_station_count
0d224bdfa prometheus-node-exporter-lua: wifi packets should be a counter
a08f5e17f prometheus-node-exporter-lua: Bump PKG_RELEASE
b03545e0b prometheus-node-exporter-lua: fix missing conntrack values
70bd5a36c prometheus-node-exporter-lua: change network metric type to counter
ad34675df prometheus-node-exporter-lua: add lantiq dsl modem collector
d921407d4 openssh: fix pthread functions redefine with pam module
df3d2312c Merge pull request #9403 from BKPepe/yt-18.06
6d55ff558 Merge pull request #9513 from BKPepe/openwrt-18.06_python_shebang
b29ecaa11 libinput: Add missing header to fix compilation
3414ca250 libglog: fix removing libunwind dependency
e41a914bf libseccomp: workaround a recursive dependency
a1eccf223 lxc: Backport uClibc patch
08c0b2949 lxc: hide seccomp support for arc
d3e54adcd lxc: Disable use of unwanted libraries explicity
bb1882d29 boost: Fix compilation with uClibc-ng
ad26261e1 iodine: Fix compilation with uClibc-ng
e42f8da51 mariadb: add dependency on libaio for arc as well
29e7e0619 libudev-fbsd: update to git source as of 2017-12-16
a0e1a7700 Merge pull request #9710 from BKPepe/icu_fix
4bda1ca54 icu: fix patch, which adds big endian ARM support
78bf09b08 golang: update to version 1.10.8
fa384e518 libgee: copy vapi files to versioned vala dir
2d59ec88d libgee: use unversioned vala dir, misc fixes
d7a071f4a icu: Fix patch from faulty backport
1607a5bd8 squid: update to version 3.5.28
983bd0370 protobuf-c: add build time dependency protobuf
87b6ed6b9 jamvm: depends on supported architectures
ca0e429e2 icu: Backport ARMEB support patch
ad43d622e gammu: Really fix compilation under 64-bit
1ad4f3a9b gammu: Fix build under 64-bit targets.
cdbc72464 youtube-dl: update to version 2019.8.2
af975f0f3 python,python3: Fix overridden usr/bin symlinks
421c58a94 python,python3: move shebang handle in install script
243f921ae subversion: update to version 1.10.6
70a1ffdf0 jq: compile with _GNU_SOURCE (fixes #7785 )
fb0566686 libsoc: fix compilation error caused by multiple goals on make
1fec7ea23 rtl-ais: Fix compilation on i386
de750bba0 libdouble-conversion: Update to 3.1.4
49a6444ab libdouble-conversion: Update to 3.1.1
056cad1e0 libaio: Update to 0.3.112
b4e4e5a00 libaio: Backport DESTDIR patch to simplify the Makefile
7ccc104c9 libaio: Update to 0.3.111
d6145ce0c quassel-irssi: Fix compilation with GCC8
47e4537fd quasselc: Fix compilation with uClibc-ng
b26ffad37 Merge pull request #9625 from micmac1/18.06-mariadb10141
e5cc721c7 mariadb: security bump to 10.1.41
1eeea30fd softethervpn: Fix compilation under 64-bit targets
276b7d9b0 Merge pull request #9542 from jefferyto/python-musl-find_library-openwrt-18.06
e1cb7f98d opendkim: Fix compilation with uClibc-ng
bc8fc4fb7 tvheadend: Fix compilation on GCC8
4c1252e9d tvheadend: Fix compilation without deprecated OpenSSL 1.0.2 APIs
bd96e95e3 tvheadend: Fix compilation without OpenSSL deprecated APIs
59f7eb5e1 libartnet: Fix compilation with GCC8
e00521bc7 poco: Do not build on ARC
0662e833e flent-tools: Fix compilation with uClibc-ng
131c9436c oath-toolkit: Fix compilation with uClibc-ng
0524f21ed flashrom: Add ARC support
8923eecd3 elektra: Fix compilation with uClibc-ng
24ad87702 elektra: Fix compilation without deprecated OpenSSL APIs
f30898d3e hfsprogs: Fix compilation with uClibc-ng
02d64a922 dosfsutils: Properly fix iconv linking
f273581e1 dosfstools: Fix compilation with full NLS
4870eab08 loudmouth: Fix compilation with uClibc-ng
b1adbbe5b loudmouth: Disable debug and fix no deprecated API compilation
30ddc8a15 transmission: Fix compilation under uClibc-ng
0cac0b3eb transmission: add PKGARCH:=all for transmission-web
c2860ce2c transmission: Add LTO support to shave off 35KB off of the ipk
b5957aed6 transmission: Allow user to configure web ui home directory
cdc001736 open2300: Switch to GitHub fork
dddcd5d90 softethervpn: Add openssl to host build deps
0a4f88e56 softethervpn: Really fix iconv support
e05f50c12 softethervpn: add package name to build dir
8358aa690 softethervpn: cleanup host/build, pass HOST_*FLAGS
5cb4c348a python,python3: Fix ctypes.util.find_library()
d16a931db python: add patch for CVE-2018-20852
2402c223d python: bump to version 2.7.16
ae21f4990 python3: update to version 3.6.9
12c96eaad diffutils: provide diff, cmp as alternatives
04c9e6708 Merge pull request #9463 from ps790/patch-4
4265311c1 Merge pull request #9461 from ps790/patch-2
93e7b0982 coreutils: add alternatives support
ef44ef698 bridge-utils: fix conflict with busybox brctl
4e93f455a softethervpn: Update to rtm version 4.29-9680
4682d1741 softethervpn: Pass FLAGS to CC for hamcorebuilder
f424f7dfa wifidog: fix getting ip from interface, cleanup
bba8e2c44 irssi: update to version 1.2.1 (security fix)
d10ac7c29 Merge pull request #9396 from stangri/openwrt-18.06-simple-adblock
78b0da469 simple-adblock: options to filter non-ASCII domains, local compressed storage
1e398bbcb ocserv: updated to 0.12.4
43bfa6fe4 Merge pull request #9292 from BKPepe/18.06-youtube
68461c4c5 php7: update to 7.2.19
f9b20e9dd php7: update to 7.2.18
5779614d2 znc: backport fix for CVE-2019-12816
63c532a71 youtube-dl: update to version 2019.06.21
7879bbdb4 Revert "php7: Fix compilation without deprecated OpenSSL APIs"
115f72fc4 Revert "php7: update to 7.2.18"
70e4af441 Revert "php7: update to 7.2.19"
d90a035c1 libxml2: update to 2.9.9
5aa670ed3 libxml2: Fix CVE-2018-14404
8abaf8a30 php7: update to 7.2.19
8e9429f3e php7: update to 7.2.18
a176ffa0a php7: Fix compilation without deprecated OpenSSL APIs
53742f130 php7: update to 7.2.17
81a8e5904 nano: update to 4.3
dd927adce Merge pull request #9272 from gladiac1337/openwrt-18.06
28007a8bd Merge pull request #9268 from EricLuehrsen/unbound_192_1806
1784615d3 haproxy: Update HAProxy to v1.8.20
88a7f98bd unbound: update to 1.9.2 with package bug fixes
7290c123d Merge pull request #9232 from neheb/13
356bb1162 haproxy: Remove unnecessary OpenSSL depends All of these are either not needed or not valid.
3afd61982 lm-sensors: install libsensors using CP instead of INSTALL_DATA
d8ecf9cb7 boost: Release update with minor fix
efa0b885a znc: update my email address
45e1b91ae Merge pull request #9193 from ryzhovau/getdns_lib-18.06
55e357b66 getdns: fix library double packing
810f22da8 nlbwmon: update to latest Git HEAD
Compile-tested: ar71xx-generic
Runtime-tested: ar71xx-generic
2020-01-03 00:48:52 +01:00
Andreas Ziegler
6cd9d01bba
modules: update OpenWrt
...
83ce31d3d8 kernel: bump 4.9 to 4.9.207
c280710d7a kernel: bump 4.14 to 4.14.160
27dddb67c0 kernel: bump 4.14 to 4.14.159
8623b58c1d scripts/dowload.pl: add archive.apache.org to apache mirror list
e242125d71 kernel: fix *-gpio-custom module unloading
84b74bcb0d toolchain/gcc: correct the check expr for newer clang
66ba44c9ec lantiq: fix phys led
b901563611 uhttpd: update to latest Git HEAD
2152722bd3 netifd: add support for suppressing the DHCP request hostname by setting it to *
c3337e8f48 ar71xx: fix MAC address setup for TL-WDR4300 board
d08a63770c ramips: fix number of LAN Ports for Mikrotik RBM33G
022f3898b1 ramips: fix switch port order for TP-Link Archer C20i
5d92949019 kernel: bump 4.14 to 4.14.158
361b555672 kernel: bump 4.9 to 4.9.206
1cbde3eb9c mac80211: Adapt to changes to skb_get_hash_perturb()
bd3b8480ab kernel: bump 4.9 to 4.9.205
2777947a75 kernel: bump 4.14 to 4.14.156
7863a8f302 base-files: config_generate: split macaddr with multiple ifaces
daed78ab55 kernel: nf_conntrack_rtcache: fix WARNING on rmmod
8f6debf633 kernel: nf_conntrack_rtcache: fix WARNING on forward path
72ddeffc09 kernel: nf_conntrack_rtcache: fix cleanup on netns delete and rmmod
70b73f6470 kernel: Add missing configuration option
6e2e5d1bf8 kernel: bump 4.14 to 4.14.155
f6f916b3e5 ar71xx: fix buttons for TP-Link TL-WDR4900 v2
0e85ace840 ar71xx: fix LED setup for TL-WDR4900 v2
45fefa0459 ramips: set uImage name of WeVO 11AC NAS and W2914NS v2
b0d99e32db ar71xx: fix MAC address setup for TL-WDR4900 v2
22fe68643f ar71xx: fix MAC addresses for Archer C5 v1, C7 v1/v2, WDR4900 v2
2219b0258d ipq40xx: fix build error
0a9147be6a kernel: bump 4.14 to 4.14.154
b9e685eed5 kernel: bump 4.9 to 4.9.202
8179ac3dc1 ar71xx: fix WLAN LED names for Archer C7
6962c1e495 ar71xx: fix system LED names on Archer C5/C7
e6a7eacfea mac80211: brcmfmac: fix PCIe reset crash and WARNING
f65330d27d ramips: assign correct key-code to wps buttons
ab6addc95d ramips: rt3833: fix build breakage
f503bc3d25 ramips: add usb-ledtrig-usbport to DEVICE_PACKAGES of CY-SWR1100
506bfaa126 ramips: fix MAC address setup for Samsung CY-SWR1100
c89437e398 gitignore: ignore patches in OpenWrt root directory
ea8f7d74ba ar71xx: fix tl-wdr3320-v2 upgrade
79fd7593a2 ar71xx: update uboot-envtools for Netgear WNR routers
3d3a933315 kernel: bump 4.14 to 4.14.152
862a885103 kernel: bump 4.9 to 4.9.199
05c858ff6a sdk: fix GCC and Python dangling symlinks
c1d19b37d5 build: cleanup possibly dangling Python 3 host symlink
dfd8c3bfdc build: fixup python SetupHostCommand to use python2
69bc68b46b OpenWrt v18.06.5: revert to branch defaults
5e4533cdd4 OpenWrt v18.06.5: adjust config defaults
9d401013fc ustream-ssl: backport fix for CVE-2019-5101, CVE-2019-5102
e70772311d kernel: bump 4.14 to 4.14.151
cdc2937edd kernel: bump 4.9 to 4.9.198
f024b4c83d scripts/ubinize-image.sh: fix buildbot breakage
700f66ae95 kernel: mark kmod-usb-serial-wwan as hidden
c4a2e5102d kernel: add missing symbol
61df1285ce kernel: bump 4.14 to 4.14.150
51431de30d kernel: bump 4.9 to 4.9.197
0880275d5e brcm2708: Add feature flag rootfs-part
b2fba59f10 iptables: bump PKG_RELEASE
a2fe698a40 kernel: Added required dependencies for socket match.
dff0b2104d kernel: netfilter: Add nf_tproxy_ipv{4,6} and nf_socket_ipv{4,6}
3b8db97a52 tcpdump: update to 4.9.3
96a87b90ef libpcap: update to 1.9.1
a857fc2ded libpcap: update to 1.9.0
31181fa062 kernel: bump 4.14 to 4.14.149
9628612abe kernel: bump 4.14 to 4.14.148
1737131c9d kernel: bump 4.9 to 4.9.196
778243b3b4 kernel: bump 4.14 to 4.14.147
d513f28351 kernel: bump 4.9 to 4.9.195
6f1a71c2d0 apm821xx: fix fan control on highest step
491e839262 brcm47xx: sysupgrade: fix device model detection
4acc0db480 kernel: bump 4.14 to 4.14.146
3699327da3 kernel: bump 4.9 to 4.9.194
45a2c0f309 hostapd: Fix AP mode PMF disconnection protection bypass
e289a4133c hostapd: SAE/EAP-pwd side-channel attack update
a63edb4691 mbedtls: update to 2.16.3
2698157d54 mbedtls: Update to version 2.16.2
952bafa03c openssl: bump to 1.0.2t, add maintainer
7e1db8f27c kernel: bump 4.14 to 4.14.145
d32cf52674 kernel: bump 4.14 to 4.14.144
745292ba10 kernel: bump 4.9 to 4.9.193
5880dd48d5 mac80211: brcmfmac: backport the last 5.4 changes
90f6af5108 ar71xx: fix potential IRQ misses during dispatch for qca953x
e545808e89 ar71xx: Fix potentially missed IRQ handling during dispatch
59e42f9e3e kernel: bump 4.14 to 4.14.143
418cf097e7 kernel: bump 4.9 to 4.9.192
6f677d6848 tools: mkimage: fix __u64 typedef conflict with new glibc
c5ed9f4344 kernel: bump 4.14 to 4.14.142
556f86bbfd kernel: bump 4.9 to 4.9.191
2d257351f3 ramips: fix duplicate network setup for dlink, dir-615-h1
2a22e41fe4 ramips: fix D-Link DIR-615 H1 switch port mapping
f9dec32be7 ramips: remove duplicate case for MAC setup of freestation5
7393ce8d87 mac80211: brcmfmac: backport more kernel 5.4 changes
f6de1fa6c6 bzip2: Fix CVE-2019-12900
7ac6044632 ar71xx: WNR2200: remove redundant GPIO for WLAN LED
9d1cd9d098 kernel: bump 4.14 to 4.14.141
4b5c77ca2f ath9k: backport dynack improvements
73bba470a4 kernel: bump 4.14 to 4.14.140
8bc800aa56 kernel: bump 4.9 to 4.9.190
c948a74158 kernel: bump 4.14 to 4.14.139
09d63fb0a6 musl: Fix CVE-2019-14697
564d81e944 iptables: patch CVE-2019-11360 (security fix)
5e3b21c916 musl: ldso/dlsym: fix mips returning undef dlsym
2df2b75208 wolfssl: fixes for CVE-2018-16870 & CVE-2019-13628
09bdc14419 kernel: bump 4.14 to 4.14.138
e058fb3658 kernel: bump 4.9 to 4.9.189
28dc34f249 xfsprogs: Replace valloc with posix_memalign
24967a6c42 libbsd: Fix compilation under ARC
30815d65d2 nftables: Fix compilation with uClibc-ng
dc2f2a16d3 tools/patch: apply upstream patch for cve-2019-13638
c99ceb7030 tools/patch: apply upstream patch for CVE-2019-13636
Compile-tested: ar71xx-generic
Runtime-tested: ar71xx-generic
2020-01-03 00:48:52 +01:00
Andreas Ziegler
34e60e2e10
ar71xx-generic: fix device alias for Ubiquiti UniFi AC LR
...
fixes #1834
fixes #1332
2019-10-03 21:31:30 +02:00
David Bauer
45401b8050
ar71xx-generic: add ath10k packages to OCEDO Koala ( #1838 )
...
The OCEDO Koala was missing the correct package definition. Because of
this, firmware is potentially built with the wrong ath10k firmware /
driver.
2019-10-03 21:29:25 +02:00
bobcanthelpyou
2d829a8602
docs: remove Netgear WNDR3700 v5 ( #1817 )
...
(cherry picked from commit 2792309cd4
2019-09-15 14:37:51 +02:00
Martin Weinelt
e3f2805841
docs, README: Gluon v2018.2.3
2019-09-13 00:07:07 +02:00
Andreas Ziegler
d10c28c81c
docs: add v2018.2.3 release notes
2019-09-13 00:07:07 +02:00
Matthias Schiffer
ad8a51dbea
uboot-fritz4040: add fixes for bootloader image generation
...
This seems to unbreak bootloader image generation with certain shells /
build setups.
Fixes #1766
(cherry picked from commit fdf552e55e
2019-09-04 21:06:26 +02:00
Matthias Schiffer
f584d0ea0b
modules: update Gluon packages
...
a0ab6d6e712f simple-tc: increment PKG_VERSION
2019-09-04 20:59:17 +02:00
Martin Weinelt
9dc1559ba0
modules: update OpenWrt
...
89808e211c kernel: bump 4.14 to 4.14.137
349714a491 kernel: bump 4.9 to 4.9.188
0a4a82a431 config: introduce separate CONFIG_SIGNATURE_CHECK option
8a83892662 packages: apply usign padding workarounds to package indexes if needed
0bce1d0db9 usign: update to latest Git HEAD
958411aa61 kernel: bump 4.14 to 4.14.136
2807f84b62 kernel: bump 4.9 to 4.9.187
7e4ce0c655 ar71xx: wpj531: fix SIG1/RSS1 LED GPIO
Compile-tested: ar71xx, mpc85xx
2019-08-25 04:15:17 +02:00
Simon Terzenbach
cc909fb8ad
docs: add Aerohive HiveAP 121 and HiveAP 330 to Supported Devices List
2019-08-25 04:15:17 +02:00
Simon Terzenbach
68c2b7bb32
mcp85xx-p1020: add support for Aerohive HiveAP 330
2019-08-25 04:15:17 +02:00
Simon Terzenbach
d8479d1b38
ar71xx-nand: add support for Aerohive HiveAP 121
2019-08-25 04:15:14 +02:00
Martin Weinelt
3f071ad439
modules: update OpenWrt
...
b7e7d220e7 ar71xx: fix HiveAP 121 PLL for 1000M
2019-08-24 19:42:58 +02:00
Martin Weinelt
7bc056786b
modules: update OpenWrt
...
df53824f46 kernel: bump 4.14 to 4.14.134
76d1e8a0c2 kernel: bump 4.9 to 4.9.186
ef9c13fb5d imx6: bump SDMA firmware to 3.5
41e3f12e00 imx6: bump sdma firmware to 3.4
f51e2d031e mac80211: brcm: improve brcmfmac debugging of firmware crashes
95745e26b3 mac80211: brcm: update brcmfmac 5.4 patches
65a405382b omcproxy: fix compilation on little-endian CPUs
a68be42f99 scripts: ipkg-make-index.sh: dereference symbolic links
8231f67218 mac80211: brcmfmac: backport fixes from kernel 5.4
627bb0b8dc busybox: strip off ALTERNATIVES spec
e6af9c017b opkg: bump to version 2019-06-14
33e7beeb31 base-files: Fix path check in get_mac_binary
687977bfc9 kernel: bump 4.14 to 4.14.132
6ee6c97ded base-files: Really check path in get_mac_binary
aced9de9a4 wireguard: bump to 0.0.20190601
3bbd16da46 ramips: fix mt7620 pinmux for second SPI
b84f761d91 OpenWrt v18.06.4: revert to branch defaults
f6429577c5 OpenWrt v18.06.4: adjust config defaults
Compile-tested: ar71xx-generic, ipq40xx, mpc85xx-generic, ramips-mt7621
Runtime-tested: mpc85xx-generic (WDR4900v1), ramips-mt761 (DIR-860L-B1)
2019-08-24 19:42:43 +02:00
Matthias Schiffer
7698887017
docs: improve note on targets without IBSS support ( #1788 )
...
Fixes #1718
2019-08-24 19:42:36 +02:00
bobcanthelpyou
c96df27852
CONTRIBUTING.md: fix link to list of rejected features ( #1785 )
2019-08-24 19:40:35 +02:00
Andreas Ziegler
8e51a64cf0
ramips-mt76x8: add support for TP-Link TL-MR3420 v5
2019-08-24 19:40:12 +02:00
Chrissi^ (Chris Fiege)
838d4b931c
doc/dev/package: Fix path to gluon.mk ( #1774 )
...
$(TOPDIR) does not contain a trailing slash.
Thus the 'gluon.mk'-include must include
the trailing slash. (Just like the link to
$(INCLUDE_DIR)/package.mk does.)
Signed-off-by: Chris Fiege <chris@tinyhost.de>
2019-08-24 19:38:55 +02:00
Adrian Schmutzler
15a96691ff
ar71xx-generic: Add support for TP-Link CPE210 V3 ( #1696 )
...
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2019-08-24 19:38:03 +02:00
Martin Weinelt
4458b79433
modules: update OpenWrt
...
ef686b7292 uqmi: bump to latest git HEAD
3dc740257b uqmi: inherit firewall zone membership to virtual sub interfaces
a2c22b8776 uqmi: fix PIN_STATUS_FAILED error with MC7455 WCDMA/LTE modem
d5ff0897cb kernel: bump 4.14 to 4.14.131
18266fc6c0 kernel: bump 4.9 to 4.9.184
Compile-tested: mpc85xx-generic, ramips-mt7621
Runtime-tested: mpc85xx-generic (TP-Link WDR4900 v1), ramips-mt7621 (D-Link DIR-860L B1)
2019-08-24 19:34:05 +02:00
Martin Weinelt
74bb239d25
gluon-core: fix primary mac selection on tp-link archer c25 v1
...
Fixes #1771
2019-08-24 19:33:56 +02:00
Martin Weinelt
2894d541ea
modules: update OpenWrt
...
5e771160b8 kernel: bump 4.14 to 4.14.130
9c6fb1d67a kernel: bump 4.14 to 4.14.129
6c1bef833d kernel: bump 4.9 to 4.9.183
467adaf6c5 OpenWrt v18.06.3: revert to branch defaults
4382d4ce19 OpenWrt v18.06.3: adjust config defaults
97ae9e0ccb fstools: block-mount: fix restart of fstab service
25fc20db8b fstools: update to the latest master branch
fc39d5fc45 fstools: media change detection (eg:sdcard) using kernel polling
b463a13881 hostapd: fix multiple security problems
Compile-tested: ramips-mt7621
Runtime-tested: ramips-mt7621 (D-Link DIR-860L B1)
2019-08-24 19:33:46 +02:00
rubo77
ade7ae77e0
docs: fix troubleshooting link from markdown to RST
2019-08-24 19:33:32 +02:00
rubo77
9538ecb8de
docs: Add example how to build all targets
2019-08-24 19:30:29 +02:00
rubo77
498c638be5
docs: link to Wiki Troubleshooting page in Getting Started
2019-08-24 19:30:18 +02:00
Chrissi^
aa2c0dc3f9
gluon-mesh-vpn-core: Add dependency for KERNEL_NET_ACT_POLICE
...
This is a fix for the broken ingress traffic-shaping in gluon v2018.2.2
and possibly earlier.
For ingress traffic shaping the kernel option NET_ACT_POLICE is needed.
Before this patch there was no dependency to this. Neither in
gluon_core, gluon-mesh-vpn-core nor in the package.
This patch adds this dependency.
[Matthias Schiffer: move dependency from GLUON_CORE to gluon-mesh-vpn-core]
Fixes #1790
(cherry picked from commit dc8149abc4
2019-08-21 18:53:51 +02:00
Matthias Schiffer
106b87b24a
modules: update Gluon packages
...
d4c87ce6b06e simple-tc: depend on KERNEL_NET_ACT_POLICE or kmod-sched
73b301911d2d simple-tc: fix confusing program names in error messages
2019-08-21 18:53:38 +02:00
Vincent Wiemann
92ecb316a5
ar71xx-generic: Fix packages for GL.iNet AR750 ( #1792 )
...
The profile for GL.iNet AR750 currently selects ATH10K_PACKAGES, but this device actually has a QCA9887 which needs another driver.
This commit fixes the issue by setting ATH10K_PACKAGES_QCA9887 instead.
(cherry picked from commit 0a22218304
2019-08-18 12:41:08 +02:00
Sven Eckelmann
2280cb3a09
gluon-authorized-keys: Force installation of gluon-lock-password
...
The gluon-authorized-keys is usually installed to use SSH keys to
authenticate a user against the device. To make this useful, it is also
required to disable passwordless SSH access to the device.
This new dependency is only required when the user doesn't have
gluon-setup-mode enabled already.
Fixes : #1777
Reported-by: yanosz <github@yanosz.net>
Fixes: a753fa79e32eb15bac0e
2019-07-02 12:36:55 +02:00
Martin Weinelt
800c3b2bac
docs, README: Gluon v2018.2.2
2019-06-24 14:23:42 +02:00
Martin Weinelt
ea5d3f01f6
docs: Add v2018.2.2 release notes
2019-06-24 14:23:42 +02:00
bobcanthelpyou
c63346fa6e
docs: update links (moved permanently)
...
(cherry picked from commit 8549438063
2019-06-24 14:18:39 +02:00
bobcanthelpyou
75c8e00f83
docs: remove unavailable devices ( #1667 )
...
- A Picostation M5 never existed
- TL-WR710N v1 and v2.1 are part of ar71xx-generic not ar71xx-tiny
(cherry picked from commit e8b37b2d7c
2019-06-24 14:18:24 +02:00
bobcanthelpyou
0986ec7e9b
docs: fix typos and common misspellings ( #1668 )
...
(cherry picked from commit 170c494f40
2019-06-24 14:18:16 +02:00
bobcanthelpyou
eb46e5a9f1
docs: add new <%| tag for escaped expressions ( #1683 )
...
the tag was added by dd23a805c2cae79eb074
2019-06-24 14:17:54 +02:00
bobcanthelpyou
04f6d0a261
docs: fix typos and small text improvements
...
(cherry picked from commit ff7aeafad2
2019-06-24 14:17:29 +02:00
Vincent Wiemann
c98580946d
docs: faq: add note for supported hardware ( #1665 )
...
A table with hardware supported by Gluon can be found on the OpenWrt Wiki. This commit adds a corresponding FAQ entry.
(cherry picked from commit deb020d3ef
2019-06-24 14:15:37 +02:00
Martin Weinelt
3ae816d38d
docs: fix reference to #noibss in v2018.2.1 release notes
...
Uncovered by sphinx-build:
docs/releases/v2018.2.1.rst:19: WARNING: Too many autonumbered footnote references: only 0 corresponding footnotes available.
docs/releases/v2018.2.1.rst:19: WARNING: Unknown target name: "noibss".
docs/releases/v2018.2.1.rst:26: WARNING: Unknown target name: "noibss".
docs/releases/v2018.2.1.rst:30: WARNING: Unknown target name: "noibss".
docs/releases/v2018.2.1.rst:34: WARNING: Unknown target name: "noibss".
docs/releases/v2018.2.1.rst:35: WARNING: Unknown target name: "noibss".
2019-06-21 00:45:58 +02:00
Matthias Schiffer
5cb69254cc
modules: update OpenWrt
...
fc1dae5be797 brcm2708: Revert "staging: vc04_services: prevent integer overflow in create_pagelist()"
84aba5796ea2 gemini: 4.14: Fix up DNS-313 compatible string
9656f49ea009 base-files: fix uci led oneshot/timer trigger
bd0c3988e742 kernel: bump 4.14 to 4.14.128
(cherry picked from commit 99f344bac3
2019-06-21 00:22:03 +02:00
Martin Weinelt
bc55bb1db1
modules: update OpenWrt
...
2999c342aa kernel: bump 4.14 to 4.14.127
9de2f4d4ce kernel: bump 4.9 to 4.9.182
5fe809d718 Revert "ipq806x: fix EA8500 switch control"
e493230e84 kernel: bump 4.14 to 4.14.126
c449130bb2 mvebu: fixes commit f63a1caf22cb
6fa6f74e37 kernel: backport 4.18 patch adding DMI_PRODUCT_SKU
2cd234d96b mac80211: brcmfmac: backport important fixes from kernel 5.2
85eda6f61e kernel: mt29f_spinand: fix memory leak during page program
a0543d8e70 uboot-fritz4040: update PKG_MIRROR_HASH
f63a1caf22 kernel: bump 4.14 to 4.14.125
40b1e899ba kernel: bump 4.9 to 4.9.181
5dbac47426 kernel: re-add bridge allow reception on disabled port
5d27e87de7 rpcd: fix init script reload action
1867f10807 kernel: bump 4.14 to 4.14.123
7fe1b4a4b2 kernel: bump 4.9 to 4.9.180
6563e494a0 kernel: bump 4.14 to 4.14.122
e3408d09b0 kernel: bump 4.9 to 4.9.179
b2b1265a1d apm821xx: backport accepted linux-crypto patches
Fixes: CVE-2019-11477, CVE-2019-11478, CVE-2019-11479
Compile-tested: x86_64
Runtime-tested: x86_64
(cherry picked from commit 1b06a15bbd
2019-06-21 00:22:02 +02:00
Matthias Schiffer
b7bca40423
gluon-mesh-vpn-core: move common VPN config to gluon UCI package
...
We now keep the VPN enable state, bandwidth limit enable and actual limits
in the core config to avoid having to recover "user intent" from different
config files when the used VPN packages change.
Fixes #1736
(cherry picked from commit 818c31afdd
2019-06-20 20:57:23 +02:00
Matthias Schiffer
4ddde78b86
gluon-mesh-vpn-core: don't consider tunneldigger when fastd is installed
...
None of our scripts can handle fastd and tunneldigger running at the same
time. When both are installed, ignore tunneldigger.
(cherry picked from commit f6df3b0541
2019-06-20 20:57:23 +02:00
Martin Weinelt
be967d8f04
modules: update Gluon packages
...
524ae77 tunneldigger: update to newest upstream commit (#216 )
2019-06-18 15:43:01 +02:00
