mtk-20170518, branch v17.01.6 MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker LEDE v17.01.6: adjust config defaults 2018-09-02T13:16:09+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-09-02T13:16:09+00:00 9a96ec08a953a409b76b1d5f90de183c51937547 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
grub2: rebase patches 2018-08-30T12:10:54+00:00 Jo-Philipp Wich jo@mein.io 2018-08-23T17:08:58+00:00 2252731af43d0be32deff42ab77aed7458cee34d Patch 300-CVE-2015-8370.patch was added without proper rebasing on the version used by OpenWrt, make it apply and refresh the patch to fix compilation. Fixes: 7e73e9128f ("grub2: Fix CVE-2015-8370") Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 9ffbe84ea49fc643f41bfdf687de99aee17c9154) 
Patch 300-CVE-2015-8370.patch was added without proper rebasing on the
version used by OpenWrt, make it apply and refresh the patch to fix
compilation.

Fixes: 7e73e9128f ("grub2: Fix CVE-2015-8370")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9ffbe84ea49fc643f41bfdf687de99aee17c9154)
bzip2: Fix CVE-2016-3189 2018-08-30T11:15:06+00:00 Rosen Penev rosenp@gmail.com 2018-08-23T02:07:56+00:00 d3e325dfeffd0b407972e6716d5fd5c8acb6c962 Issue causes a crash with specially crafted bzip2 files. More info: https://nvd.nist.gov/vuln/detail/CVE-2016-3189 Taken from Fedora. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit f9469efbfa7ce892651f9a6da713eacbef66f177) 
Issue causes a crash with specially crafted bzip2 files.

More info: https://nvd.nist.gov/vuln/detail/CVE-2016-3189

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f9469efbfa7ce892651f9a6da713eacbef66f177)
grub2: Fix CVE-2015-8370 2018-08-30T11:15:02+00:00 Rosen Penev rosenp@gmail.com 2018-08-23T02:07:57+00:00 6aae528cc3b71819aafdbfe179e1f7ce2a87ea64 This CVE is a culmination of multiple integer overflow issues that cause multiple issues like Denial of Service and authentication bypass. More info: https://nvd.nist.gov/vuln/detail/CVE-2015-8370 Taken from Fedora. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit 7e73e9128f6a63b9198c88eea97c267810447be4) 
This CVE is a culmination of multiple integer overflow issues that cause
multiple issues like Denial of Service and authentication bypass.

More info: https://nvd.nist.gov/vuln/detail/CVE-2015-8370

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7e73e9128f6a63b9198c88eea97c267810447be4)
scripts: bundle-libraries: fix logic flaw 2018-08-30T11:11:42+00:00 Jo-Philipp Wich jo@mein.io 2018-08-29T11:16:34+00:00 9d3825a0279a9c70fb16179731f212abf961693e Previous refactoring of the script moved the LDSO detection into a file-not-exists condition, causing onyl the very first executable to get bundled. Solve the problem by unconditionally checking for LDSO again. Fixes: 9030a78a71 ("scripts: bundle-libraries: prevent loading host locales") Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 5ebcd32997b6d10abcd29c8795a598fdcaf4521d) 
Previous refactoring of the script moved the LDSO detection into a
file-not-exists condition, causing onyl the very first executable to
get bundled.

Solve the problem by unconditionally checking for LDSO again.

Fixes: 9030a78a71 ("scripts: bundle-libraries: prevent loading host locales")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 5ebcd32997b6d10abcd29c8795a598fdcaf4521d)
scripts: bundle-libraries: prevent loading host locales (FS#1803) 2018-08-30T11:11:42+00:00 Jo-Philipp Wich jo@mein.io 2018-08-25T12:46:57+00:00 6e8f1c387892b845fddf052fb8e612d4f26ffdd3 Binary patch the bundled glibc library to inhibit loading of host locale archives in order to avoid triggering internal libc assertions when invoking shipped, bundled executables. The problem has been solved with upstream Glibc commit 0062ace229 ("Gracefully handle incompatible locale data") but we still need to deal with older Glibc binaries for some time to come. Fixes FS#1803 Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 9030a78a716b0a2eeed4510d4a314393262255c2) 
Binary patch the bundled glibc library to inhibit loading of host locale
archives in order to avoid triggering internal libc assertions when
invoking shipped, bundled executables.

The problem has been solved with upstream Glibc commit
0062ace229 ("Gracefully handle incompatible locale data") but we still
need to deal with older Glibc binaries for some time to come.

Fixes FS#1803
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9030a78a716b0a2eeed4510d4a314393262255c2)
kernel: bump kernel 4.4 to version 4.4.153 2018-08-30T11:07:40+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-08-30T10:47:44+00:00 f712db9df6320b296849378030a66372255ffca2 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
mt76: Fix mirror hash 2018-08-30T09:55:30+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-08-30T09:55:30+00:00 55840040dfcce33ca6a00da53f0345bd7e227cff The mirror hash added in this commit was wrong. The file on the mirror server and the newly generated file from git have a different hash value, use that one. Fixes: 4b5861c47 ("mt76: update to the latest version") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
The mirror hash added in this commit was wrong.
The file on the mirror server and the newly generated file from git have
a different hash value, use that one.

Fixes: 4b5861c47 ("mt76: update to the latest version")
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
dropbear: backport upstream fix for CVE-2018-15599 2018-08-27T12:14:57+00:00 Hans Dedecker dedeckeh@gmail.com 2018-08-24T13:02:24+00:00 bb7c4cff2086fffddf5cb20e40cfe4979ba1a7e6 CVE description : The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> 
CVE description :
The recv_msg_userauth_request function in svr-auth.c in Dropbear through
2018.76 is prone to a user enumeration vulnerability because username
validity affects how fields in SSH_MSG_USERAUTH messages are handled,
a similar issue to CVE-2018-15473 in an unrelated codebase.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
kernel: bump kernel 4.4 to version 4.4.151 2018-08-22T18:41:10+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-08-22T18:40:53+00:00 8a72a868fd8000b826d5337fc413a51b01f39b5d Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>