Commit Graph

154 Commits

Author SHA1 Message Date
jow 179d925d85 BB: polarssl: update to v1.3.9 and patch CVE-2015-1182
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@44061 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-20 13:02:38 +00:00
cyrus 3a2fa00474 map: backport fixes from trunk
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43962 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-13 19:02:32 +00:00
jow 0da41e430e BB: openssl: update to v1.0.1k (8 CVEs)
Fixes CVE-2014-3571, CVE-2015-0206, CVE-2014-3569, CVE-2014-3572,
CVE-2015-0204, CVE-2015-0205, CVE-2014-8275 and CVE-2014-3570.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43889 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-09 00:10:55 +00:00
jow 4cbedb56ae BB: qos-scripts: bump PKG_REVISION and copyright year
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43860

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43862 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-06 12:43:49 +00:00
jow 4d84b8624b BB: openvpn: bump PKG_REVISION and copyright year
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43859

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43861 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-06 12:43:44 +00:00
nbd c2a8bebec3 openvpn: backport an upstream fix for a regression in using --cipher none (fixes #18676)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43823

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43824 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-01-04 12:03:51 +00:00
nbd 331ecb083c mac80211: fix HT mode selection for ad-hoc
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43769

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43770 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-22 21:46:52 +00:00
nbd e623b19d84 ubi-utils: add mirror md5sum
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43761

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43764 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-22 17:43:21 +00:00
nbd be76d04ca4 uclient: update to the latest version, fixes HTTP digest auth processing
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43600

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43601 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-10 16:04:08 +00:00
cyrus 66e21465bb odhcp6c: correctly handle renew-replies with short lease times
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43593 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-10 10:42:41 +00:00
nbd 938c6b4242 qos-scripts: fix insmod commands
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43562

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43566 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-08 12:06:02 +00:00
nbd 678b8b53a3 openvpn: update to 2.3.6, fixes CVE-2014-8104
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43482

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43483 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-12-01 19:50:45 +00:00
nbd 6ff5f0a977 ath9k: fix hardware tx queue allocation order
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43438

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43439 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-30 19:45:37 +00:00
cyrus cb902a80c8 odhcp6c: backport from trunk to fix busyloop
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43416 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-28 00:42:24 +00:00
nbd 3818debcd0 Revert "ath9k: fix crashes when using shared IRQs"
This backport seems to be incomplete and causing some IRQ related
issues.

This reverts commit r43240

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43276 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-15 21:17:21 +00:00
nbd fa74ff9964 ath9k: fix crashes when using shared IRQs
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43239

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43240 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-13 18:26:27 +00:00
cyrus 83a67bc701 netifd: fix default ORO for 6rd
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43215 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-08 12:27:41 +00:00
nbd 2a003f0bbb mac80211: merge a few pending upstream fixes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43208

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43209 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-07 11:17:41 +00:00
blogic 47b1ff965b BB: lantiq: vr9: - fix vmmc build
(required not-distributable firmware blob - dump it by yourself from original firmware)

Signed-off-by: Eddi De Pieri <eddi@depieri.net>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43161 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-03 08:32:50 +00:00
blogic 73c3df0afe BB: lantiq: vr9: - fix tapi build
(required not-distributable firmware blob - dump it by yourself from original firmware)

Signed-off-by: Eddi De Pieri <eddi@depieri.net>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43160 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-03 08:32:46 +00:00
blogic ea9e61b8eb BB: lantiq: ltq-vmmc add support for ar9-vr9
(required not-distributable firmware blob - dump it by yourself from original firmware)

Signed-off-by: Eddi De Pieri <eddi@depieri.net>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43156 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-11-03 08:32:30 +00:00
jow f27e8004a0 BB: busybox: make high ASCII chars printable (#7993)
Currently busybox utils like "ls" fail to display filenames containing UTF-8
characters, replacing any special characters with "?".

Change libbb's printable_string() function to allow high ASCII characters so
that unicode filenames are displayed correctls.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43084

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43085 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-27 11:22:41 +00:00
jow c7ae6947ca BB: px5g-standalone: use /dev/urandom to initialize serial (#18232)
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43080

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43083 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-27 11:09:37 +00:00
jow 071e09e698 BB: uhttpd: fix HTTP incompatibilities in file handler
* Fixes sending an extraneous message body for 204 and 304 resoponses which
   breaks Chrome in keep-alive mode.

 * Adds mimetypes for JSON and JSONP.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r43078

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43082 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-27 11:09:09 +00:00
nbd 5c953af45e mac80211: fix key flush handling in AP+STA
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r43079

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43081 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-27 11:07:45 +00:00
nbd 42cd4e3de9 base-files: add /etc/shadow to list of essential files to keep in sysupgrade (bug 18206)
Based on bug #18206 sysupgrade can lead to loss of password information in
certain situations. Most likely all users who will upgrade from versions
r43017-43040, will lose their current passwords. :-(
https://dev.openwrt.org/ticket/18206

Currently /etc/shadow is defined as a conffile in base-files:
https://dev.openwrt.org/browser/trunk/package/base-files/Makefile#L37

But it is not defined in the default list of essential files to keep in
sysupgrade:
https://dev.openwrt.org/browser/trunk/package/base-files/files/lib/upgrade/keep.d/base-files-essential

If exporting conffiles info fails, /etc/shadow can get lost.

Shadow passwords are now the default, so saying that preserving /etc/passwd
is essential while /etc/shadow is not, makes no sense.

The attached patch adds /etc/shadow to the list of essential files.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Backport of r43061

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43062 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 17:23:14 +00:00
cyrus f34834fe36 odhcp6c: avoid some unnecessary big mallocs
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43057 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 10:39:31 +00:00
nbd e3da990876 ath9k: fix regulatory notifier calls with CONFIG_ATH_USER_REGD=y (#18211)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43055 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 09:31:04 +00:00
nbd fdbd75e036 mac80211: refresh patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43054 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 09:31:01 +00:00
nbd 66a76be5c1 ath9k: backport tx power reporting fix
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@43053 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-25 09:30:59 +00:00
nbd 22808d019d openssl: add ABI_VERSION to fix package rebuild issues (fixes #18169)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42963

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42964 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-19 16:54:33 +00:00
nbd 31e8fdda0e polarssl: do not build the unused programs
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42960

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42961 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-19 09:43:49 +00:00
nbd 9a5b2585d3 polarssl: add missing version bump
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42949

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42950 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-18 09:20:57 +00:00
nbd e44e52157d polarssl: disable SSLv3 support, fixes CVE-2014-3566 (POODLE)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42947

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42948 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-18 09:19:51 +00:00
cyrus 249857af0e hostapd: CVE-2014-3686 fixes
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42943 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-17 06:16:07 +00:00
jow fb6b39b78c BB: openssl: update to v1.0.1j (CVE-2014-3513, CVE-2014-3567, CVE-2014-3568)
Also refresh patches and bump copyright year in Makefile.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

Backport of r42929

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42930 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-16 08:34:38 +00:00
blogic 543ede0f1f lantiq: mac80211: add support for rf5362 (needed by vgv7519 wifi)
Signed-off-by: Eddi De Pieri <eddi@depieri.net>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42903 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-14 11:03:30 +00:00
nbd 038578cac7 procd: fix initial nand sysupgrade
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42884

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42887 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-12 15:51:35 +00:00
nbd 0273133e34 procd: fix parsing of the has_env parameter
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42883

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42886 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-12 15:51:33 +00:00
nbd f2ee60ca8b mac80211: remove NO-IR from channel 36-48
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42882

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42885 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-12 15:51:31 +00:00
cyrus 60012ae40e odhcp6c: fix parse errors with some dhcpv6 servers
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42870 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-12 12:18:58 +00:00
cyrus 6f93bcd13b odhcp6c: fix typo in last commit
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42853 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-08 15:27:38 +00:00
cyrus 58b855cae6 odhcp6c: don't assign addresses or prefixes prematurely
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42851 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-08 15:16:41 +00:00
cyrus a292e3b8bc odhcp6c: ensure signal-safety of signal handlers
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42843 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-08 10:00:40 +00:00
cyrus 28c47a66d9 odhcp6c: add route-workaround for broken IPv6-ISPs
Some ISP seem to only do stateful DHCPv6 and not sending RAs.
This is technically broken because plain DHCPv6 doesn't carry routes.

We work around here by faking a default route to the DHCPv6 server
if we do not receive a useful RA from the ISP.

This workaround can be turned off with: option fakeroutes 0

Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42842 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-08 10:00:36 +00:00
nbd 059675c34f hostapd: merge an upstream patch for pmksa cache
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

Backport of r42762

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42763 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-05 10:39:52 +00:00
cyrus d26726dbc7 map: fix portsets starting with 0 and use regular NAT for 1:1 MAP
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42742 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-10-02 19:16:17 +00:00
florian b3f82943e9 brcm2708-gpu-fw: update to Sep. 27 2014 snapshot
Backport of r42676

Signed-off-by: Florian Fainelli <florian@openwrt.org>



git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42677 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-27 17:43:54 +00:00
cyrus a397aa16aa odhcp6c: work around weird ISP RS behaviour
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42675 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-27 16:58:15 +00:00
cyrus b03d43d551 odhcpd: fix segfault when parsing domain options in UCI
git-svn-id: svn://svn.openwrt.org/openwrt/branches/barrier_breaker@42664 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-09-25 11:54:08 +00:00