mtk-20170518/package/libs, branch v17.01.5 MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker ustream-ssl: update to latest git HEAD 2018-06-05T16:50:27+00:00 John Crispin john@phrozen.org 2018-05-22T18:44:34+00:00 0fee4906d5c09b39cfdbe4fa8e6eee7683ba18a9 Upstream commit: 346d4c75eaa7a1d9bc8fcddc5db10a6aca95c005 5322f9d mbedtls: Fix setting allowed cipher suites e8a1469 mbedtls: Add support for a session cache Signed-off-by: John Crispin <john@phrozen.org> 
Upstream commit: 346d4c75eaa7a1d9bc8fcddc5db10a6aca95c005

5322f9d mbedtls: Fix setting allowed cipher suites
e8a1469 mbedtls: Add support for a session cache

Signed-off-by: John Crispin <john@phrozen.org>
ustream-ssl: update to latest git HEAD 2018-06-05T16:49:58+00:00 John Crispin john@phrozen.org 2018-05-01T09:11:16+00:00 f34a0756fd94ba3de389bd4fd3c843aac517d287 Upstream commit: 52ba5760b771d873fe21d260e3b53506663b6144 527e700 ustream-ssl: Remove RC4 from ciphersuite in server mode. 39a6ce2 ustream-ssl: Enable ECDHE with OpenSSL. 45ac930 remove polarssl support Signed-off-by: John Crispin <john@phrozen.org> 
Upstream commit: 52ba5760b771d873fe21d260e3b53506663b6144

527e700 ustream-ssl: Remove RC4 from ciphersuite in server mode.
39a6ce2 ustream-ssl: Enable ECDHE with OpenSSL.
45ac930 remove polarssl support

Signed-off-by: John Crispin <john@phrozen.org>
mbedtls: Activate the session cache 2018-06-05T16:49:02+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-05-21T11:58:53+00:00 98b9d8a3d3fd034a2d370968338e61eb9f5de6c7 Upstream commit: f2c8f6dc3249b506b915741d12905402dfffe162 This make sit possible to store informations about a session and reuse it later. When used by a server it increases the time to create a new TLS session from about 1 second to less than 0.1 seconds. The size of the ipkg file increased by about 800 Bytes. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
Upstream commit: f2c8f6dc3249b506b915741d12905402dfffe162

This make sit possible to store informations about a session and reuse
it later. When used by a server it increases the time to create a new
TLS session from about 1 second to less than 0.1 seconds.

The size of the ipkg file increased by about 800 Bytes.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
mbedtls: update mbedtls to version 2.7.3 2018-06-05T16:48:26+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-06-02T10:07:35+00:00 88ba88e5adc43c1c971abf1cbee1137ed9ad9de8 This fixes some minor security problems and other bugs. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes some minor security problems and other bugs.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
mbedtls: change libmbedcrypto.so soversion back to 0 2018-04-14T12:44:43+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-04-14T12:33:46+00:00 09d95e44fc3d1a9f900b7305b10dc241a12d6f37 mbedtls changed in version 2.7.0 and 2.7.2 the soversion of the libmbedcrypto.so library, use the old version again to be able to use the new library with binaries compiled against the old mbedtls library. Some binaries got rebuild to for the 2.7.0 release and are now using libmbedcrypto.so.1, the older ones are still using libmbedcrypto.so.0. Go back to libmbedcrypto.so.0 and make the system rebuild the binaries which were rebuild for 2.7.0 again. This should make the libmbedcrypto.so library be compatible with the old version shipped with 17.01. Fixes: 3ca1438ae0 ("mbedtls: update to version 2.7.2") Fixes: f609913b5c ("mbedtls: update to version 2.7.0") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
mbedtls changed in version 2.7.0 and 2.7.2 the soversion of the
libmbedcrypto.so library, use the old version again to be able to use
the new library with binaries compiled against the old mbedtls library.

Some binaries got rebuild to for the 2.7.0 release and are now using
libmbedcrypto.so.1, the older ones are still using libmbedcrypto.so.0.
Go back to libmbedcrypto.so.0 and make the system rebuild the binaries
which were rebuild for 2.7.0 again.

This should make the libmbedcrypto.so library be compatible with the old
version shipped with 17.01.

Fixes: 3ca1438ae0 ("mbedtls: update to version 2.7.2")
Fixes: f609913b5c ("mbedtls: update to version 2.7.0")
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
mbedtls: update to version 2.7.2 2018-04-01T13:21:14+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-04-01T13:10:30+00:00 3ca1438ae0f780664e29bf0d102c1c6f9a99ece7 This fixes some minor security problems. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes some minor security problems.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
openssl: update to 1.0.2o 2018-04-01T13:21:14+00:00 Paul Wassi p.wassi@gmx.at 2018-03-30T06:15:00+00:00 c4b382934836231ba73678e7d240e85e8303913a Fixes CVE-2018-0739 Signed-off-by: Paul Wassi <p.wassi@gmx.at> 
Fixes CVE-2018-0739

Signed-off-by: Paul Wassi <p.wassi@gmx.at>
mbedtls: update to version 2.7.0 2018-03-10T17:37:04+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-03-04T19:38:00+00:00 f609913b5c60f7c65c462730993cd1c752083fd6 This fixes the following security problems: * CVE-2018-0488: Risk of remote code execution when truncated HMAC is enabled * CVE-2018-0487: Risk of remote code execution when verifying RSASSA-PSS signatures This release is also ABI incompatible with the previous one, but it is API compatible. Some functions used by a lot of other software was renamed and the old function names are provided as a static inline now, but they are only active when deprecated functions are allowed, deactivate the removal of deprecated functions for now. Also increase the PKG_RELEASE version to force a rebuild and update of packages depending on mbedtls to handle the changed ABI. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes the following security problems:
* CVE-2018-0488: Risk of remote code execution when truncated HMAC is enabled
* CVE-2018-0487: Risk of remote code execution when verifying RSASSA-PSS signatures

This release is also ABI incompatible with the previous one, but it is
API compatible.

Some functions used by a lot of other software was renamed and the old
function names are provided as a static inline now, but they are only
active when deprecated functions are allowed, deactivate the removal of
deprecated functions for now.

Also increase the PKG_RELEASE version to force a rebuild and update of
packages depending on mbedtls to handle the changed ABI.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
libunwind: fix build with musl on PPC 2018-02-25T16:05:15+00:00 Matthias Schiffer mschiffer@universe-factory.net 2018-02-23T15:17:57+00:00 b345cc24892d375746bc63fad73226d1e7844ea1 Works around two incompatiblities between glibc and (POSIX-compliant) musl: - missing register definitions from asm/ptrace.h - non-POSIX-compliant ucontext_t on PPC32 with glibc Compile tested on mpc85xx. Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net> 
Works around two incompatiblities between glibc and (POSIX-compliant) musl:

- missing register definitions from asm/ptrace.h
- non-POSIX-compliant ucontext_t on PPC32 with glibc

Compile tested on mpc85xx.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
libunwind: enable build for arm 2018-02-13T11:37:52+00:00 Maxim Gorbachyov maxim.gorbachyov@gmail.com 2018-01-12T17:42:20+00:00 566ff9e6ee695fbc960f281019bf0d248d09975f Tested with perf on mvebu. Signed-off-by: Maxim Gorbachyov <maxim.gorbachyov@gmail.com> 
Tested with perf on mvebu.

Signed-off-by: Maxim Gorbachyov <maxim.gorbachyov@gmail.com>