Add the required changes to make it compile for 4.1 again.

Signed-off-by: Jonas Gorski <jogo@op...

ar7-atm will require modifications to build on 4.1.

Signed-off-by: Jonas Gorski <[email protected]...

Remove the usage of the __TIME__ and __DATE__ macro.

Signed-off-by: Hauke Mehrtens <hauke@hauke...

Update to "latest" HEAD and update it to match latest API changes.

Signed-off-by: Jonas Gorski ...

Fixes:
CVE-2017-3737
CVE-2017-3738

Signed-off-by: Zoltan HERPAI <[email protected]>

CC: upgrade libpcap to 1.8.1

Add patches provided upstream [1] by Fabio Berton to fix error:

> ./gencode.c: In function 'pca...

Update libpcap to upstream release 1.8.1
Change the name from libpcap.so.1.3 to libpcap.so.1
Rem...

There seems to be a situation in which a rebuild of libpcap.so is triggered
in the install step ...

Signed-off-by: Dirk Neukirchen <[email protected]>

If building usbmon support then you'll likely want to have
USB support in libpcap as well.

Sign...

Signed-off-by: Felix Fietkau <[email protected]>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@...

Signed-off-by: Steven Barth <[email protected]>

git-svn-id: svn://svn.openwrt.org/openwrt/trun...

CC: brcm2708-gpu-fw: update md5sum in Makefile

Compile-tested: ar71xx, sunxi, mvebu, ramips/rt305x, lantiq
Runtime-tested: ar71xx, sunxi

Signe...

Update the MD5 of the firmware for Raspberry Pi to enable build on the Chaos Calmer / 15.05.1 ta...

Compile-tested: ar71xx, sunxi, mvebu, ppc44x
Runtime-tested: ar71xx, sunxi

Signed-off-by: Zolta...

Signed-off-by: Zoltan HERPAI <[email protected]>

Signed-off-by: Christian Schoenebeck <[email protected]>

Signed-off-by: Stanislav Izmalkov <[email protected]>

Some packages don't use /etc/ssl/certs but instead use /etc/ssl/certs/ca-certificates.crt.
For t...

- update to latest version 20160104
- remove cpu dependency (PKGARCH:=all)
- set myself as packa...

update to version 20151214

Signed-off-by: Christian Schoenebeck <[email protected]...

Fixes:
CVE-2017-3735
CVE-2017-3736

Signed-off-by: Zoltan HERPAI <[email protected]>

Signed-off-by: Zoltan HERPAI <[email protected]>

Runtime-tested on ar71xx.

Fixes:
CVE-2016-2543
CVE-2017-12190
CVE-2017-15265
CVE-2017-15649
CVE...

Drop hardcoded URL and use the @KERNEL alias.

Signed-off-by: Zoltan HERPAI <[email protected]>

CC15.05: scripts/getver.sh: Fix revision numbering (for Github-based repo)

CC: add download facilities

Define a new alias (@GITHUB) for downloading raw github repository files

Signed-off-by: Álvaro ...

The Apache Software Foundation offers diverse download mirros.

For packaging Apache software a ...

More info at https://www.kernel.org/introducing-fastly-cdn.html

Signed-off-by: Petr Štetiar <yn...

CC: upgrade openssl, fix ugps compilation

wireguard: simple version bump [for chaos_calmer]

This is a simple version bump.

Signed-off-by: Jason A. Donenfeld <[email protected]>

Signed-off-by: Zoltan HERPAI <[email protected]>

Thanks to alex <[email protected]> for reporting a fix.

Signed-off-by: Zoltan HERPAI <wigyo...

wireguard: add wireguard to base packages [chaos branch]

CC: upgrade hostapd to 2016-06-15, include KRACK fix

Move wireguard from openwrt/packages to openwrt/openwrt. This has already
been done with lede/so...

CC: mbedtls fixes

Signed-off-by: Zoltan HERPAI <[email protected]>

luci using ustream-mbedtls is extremely slow vs ustream-polarssl.
polarssl alias mbedtls v1 is c...

Fixes:
- CERT case ID: VU#228519
- CVE-2017-13077
- CVE-2017-13078
- CVE-2017-13079
- CVE-2017-1...

Signed-off-by: Felix Fietkau <[email protected]>

Fixes CVE-2016-4476 and few possible memory leaks.

Signed-off-by: Michal Hrusecky <Michal.Hruse...

Signed-off-by: Felix Fietkau <[email protected]>

SVN-Revision: 48529

Signed-off-by: Felix Fietkau <[email protected]>

SVN-Revision: 48528

As the OpenWrt build system only resolves build dependencies per directory,
all hostapd variants...

Signed-off-by: Felix Fietkau <[email protected]>
[Drop 014 - Zoltan HERPAI <[email protected]>]

r46861 introduced a new option eapol_version to hostapd, but did not
provide a default value. Wh...

Add eapol_version to the openwrt wireless config ssid section.
Only eapol_version=1 and 2 will g...

CC: sec upgrade for openvpn, polarssl, lzo

CC: kernel: upgrade to 3.18.75

This fixes 3 minor security problems.
SSLv3 is deactivated by default now.

Signed-off-by: Hauke...

Recent versions of Chrome require this ciphers to successfully handshake with
a TLS enabled uhtt...

Signed-off-by: Felix Fietkau <[email protected]>

SVN-Revision: 48257

This is a minor version update which fixes some small bugs. None of
these bugs were exploitable ...

Signed-off-by: Zoltan HERPAI <[email protected]>

Updates lzo to version 2.09 and changes copyright to 2016.

Signed-off-by: Daniel Engberg <danie...

Fixes (above various bugs):
CVE-2017-7478
CVE-2017-7479
CVE-2017-7521

Signed-off-by: Zoltan HER...

OpenVPN requires arguments to --push to be enclosed in double quotes.
One set of quotes is strip...

Changelog: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.13

Signed-o...

cacert is really called ca and already in the script

Signed-off-by: John Crispin <john@phrozen....

Signed-off-by: John Crispin <[email protected]>

300-upstream-fix-polarssl-mbedtls-builds.patch has been applied upstream.
Replaced 101-remove_po...

Upstream OpenSSL hardening work introduced a change in shared code that
causes polarssl / mbedtl...

Security fixes:
* Fixed port-share bug with DoS potential
* Fix buffer overflow by user supplied...

Currently, the uci data model does not provide support for specifying
the minimum TLS version su...

removed upstream in
https://github.com/OpenVPN/openvpn/commit/9ffd00e7541d83571b9eec087c6b3545ff...

x509-username-field was added in OpenVPN 2.2, and verify-x509-name was
added in 2.3. This fixes ...

Signed-off-by: Felix Fietkau <[email protected]>

SVN-Revision: 48201

Follow up of #21469
This patch enables autoreloading openvpn via procd.

Signed-off-by: Federico...

- eurephia:
commit: Remove the --disable-eurephia configure option

- fix option name:
http prox...

Only costs about 3k compressed, but significantly improves handling of
configuration mismatch

S...

OpenVPN 2.3 added a route-pre-down option, to run a command before
routes are removed upon disco...

Two patches are dropped as they were already applied upstream.

Signed-off-by: Yousong Zhou <ysz...

Runtime-tested on ar71xx.

Signed-off-by: Zoltan HERPAI <[email protected]>

CC: dnsmasq: bump to v2.78

Fixes CVE-2017-14491, CVE-2017-14492, CVE-2017-14493, CVE-2017-14494, 2017-CVE-14495, 2017-CVE-1...

Security upgrade for CC

Fixes:
CVE-2017-11541
CVE-2017-11541
CVE-2017-11542
CVE-2017-11542
CVE-2017-11543
CVE-2017-11543...

Signed-off-by: Felix Fietkau <[email protected]>

Update tcpdump to 4.9.1

Fixes:
* CVE-2017-11108: Fix bounds checking for STP.

Signed-off-by: ...

This fixes the following 41 security problems:
+ CVE-2016-7922: buffer overflow in print-ah.c:a...

This removes:
- BGP
- CDP
- SCTP

MIPS binary .ipk size is reduced from ~150k to ~130k

Signed-o...

Update tcpdump to upstream release 4.8.1

Signed-off-by: Paul Wassi <[email protected]>

- refresh patches
- fix patches for UML
- runtime-tested on ar71xx, imx6, sunxi

Signed-off-b...

- compile tested on sunxi, imx6
- runtime tested on sunxi, imx6
- refresh patches
- remove un...

Signed-off-by: Stijn Tintel <[email protected]>

- Security: Fix double-free in server TCP listener cleanup A double-free
in the server could be ...

The only HMACs currently available use MD5 and SHA1, both of which have known
weaknesses. We alr...

As security precaution and to limit the attack surface based on
the version reported by tools li...

Fix SIGSEGV in rfc1035.c answer_request() line 1228 where memset()
is called with header & limit...

Bump to the 2.77 release after quite a few test & release candidates.

Signed-off-by: Kevin Darb...

Some small tweaks and improvements :

9828ab1 Fix compiler warning.
f77700a Fix compiler warning...

Permit users of the full variant to disable the NO_ID *.bind pseudo
domain masking.

Defaulted '...

Don't expose dnsmasq version & other data to clients via the *.bind
pseudo domain. This uses a ...

Fix [FS#766] Intermittent SIGSEGV crash of dnsmasq-full

Signed-off-by: Kevin Darbyshire-Bryant ...

A number of small tweaks & improvements on the way to a final release.
Most notable:

Improve DH...