mtk-20170518/package/libs, branch v17.01.6 MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker openssl: update to version 1.0.2p 2018-08-15T20:39:50+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-08-15T20:17:11+00:00 d3b8b5be3455d734e5681f98f22e5705dfe02ba4 This fixes the following security problems: * CVE-2018-0732: Client DoS due to large DH parameter * CVE-2018-0737: Cache timing vulnerability in RSA Key Generation Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes the following security problems:
 * CVE-2018-0732: Client DoS due to large DH parameter
 * CVE-2018-0737: Cache timing vulnerability in RSA Key Generation

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
mbedtls: update to version 2.7.5 2018-08-10T20:56:50+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-08-10T19:54:02+00:00 5886a5060a4cd17e87a60028d878525150075653 This fixes the following security problems: * CVE-2018-0497: Remote plaintext recovery on use of CBC based ciphersuites through a timing side-channel * CVE-2018-0498: Plaintext recovery on use of CBC based ciphersuites through a cache based side-channel Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes the following security problems:
* CVE-2018-0497: Remote plaintext recovery on use of CBC based ciphersuites through a timing side-channel
* CVE-2018-0498: Plaintext recovery on use of CBC based ciphersuites through a cache based side-channel

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
uclient: update to latest git HEAD 2018-08-04T11:48:05+00:00 Jo-Philipp Wich jo@mein.io 2018-08-03T21:50:29+00:00 309414ee8d6cf2e31476133606b2e390b0efbac5 f2573da uclient-fetch: use package name pattern in message for missing SSL library 9fd8070 uclient-fetch: Check for nullpointer returned by uclient_get_url_filename f41ff60 uclient-http: basic auth: Handle memory allocation failure a73b23b uclient-http: auth digest: Handle multiple possible memory allocation failures 66fb58d uclient-http: Handle memory allocation failure 2ac991b uclient: Handle memory allocation failure for url 63beea4 uclient-http: Implement error handling for header-sending eb850df uclient-utils: Handle memory allocation failure for url file name ae1c656 uclient-http: Close ustream file handle only if allocated Signed-off-by: Jo-Philipp Wich <jo@mein.io> (backported from commit e44162ffca448d024fe023944df702c9d3f6b586) 
f2573da uclient-fetch: use package name pattern in message for missing SSL library
9fd8070 uclient-fetch: Check for nullpointer returned by uclient_get_url_filename
f41ff60 uclient-http: basic auth: Handle memory allocation failure
a73b23b uclient-http: auth digest: Handle multiple possible memory allocation failures
66fb58d uclient-http: Handle memory allocation failure
2ac991b uclient: Handle memory allocation failure for url
63beea4 uclient-http: Implement error handling for header-sending
eb850df uclient-utils: Handle memory allocation failure for url file name
ae1c656 uclient-http: Close ustream file handle only if allocated

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(backported from commit e44162ffca448d024fe023944df702c9d3f6b586)
ustream-ssl: update to latest git HEAD 2018-06-05T16:50:27+00:00 John Crispin john@phrozen.org 2018-05-22T18:44:34+00:00 0fee4906d5c09b39cfdbe4fa8e6eee7683ba18a9 Upstream commit: 346d4c75eaa7a1d9bc8fcddc5db10a6aca95c005 5322f9d mbedtls: Fix setting allowed cipher suites e8a1469 mbedtls: Add support for a session cache Signed-off-by: John Crispin <john@phrozen.org> 
Upstream commit: 346d4c75eaa7a1d9bc8fcddc5db10a6aca95c005

5322f9d mbedtls: Fix setting allowed cipher suites
e8a1469 mbedtls: Add support for a session cache

Signed-off-by: John Crispin <john@phrozen.org>
ustream-ssl: update to latest git HEAD 2018-06-05T16:49:58+00:00 John Crispin john@phrozen.org 2018-05-01T09:11:16+00:00 f34a0756fd94ba3de389bd4fd3c843aac517d287 Upstream commit: 52ba5760b771d873fe21d260e3b53506663b6144 527e700 ustream-ssl: Remove RC4 from ciphersuite in server mode. 39a6ce2 ustream-ssl: Enable ECDHE with OpenSSL. 45ac930 remove polarssl support Signed-off-by: John Crispin <john@phrozen.org> 
Upstream commit: 52ba5760b771d873fe21d260e3b53506663b6144

527e700 ustream-ssl: Remove RC4 from ciphersuite in server mode.
39a6ce2 ustream-ssl: Enable ECDHE with OpenSSL.
45ac930 remove polarssl support

Signed-off-by: John Crispin <john@phrozen.org>
mbedtls: Activate the session cache 2018-06-05T16:49:02+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-05-21T11:58:53+00:00 98b9d8a3d3fd034a2d370968338e61eb9f5de6c7 Upstream commit: f2c8f6dc3249b506b915741d12905402dfffe162 This make sit possible to store informations about a session and reuse it later. When used by a server it increases the time to create a new TLS session from about 1 second to less than 0.1 seconds. The size of the ipkg file increased by about 800 Bytes. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
Upstream commit: f2c8f6dc3249b506b915741d12905402dfffe162

This make sit possible to store informations about a session and reuse
it later. When used by a server it increases the time to create a new
TLS session from about 1 second to less than 0.1 seconds.

The size of the ipkg file increased by about 800 Bytes.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
mbedtls: update mbedtls to version 2.7.3 2018-06-05T16:48:26+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-06-02T10:07:35+00:00 88ba88e5adc43c1c971abf1cbee1137ed9ad9de8 This fixes some minor security problems and other bugs. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes some minor security problems and other bugs.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
mbedtls: change libmbedcrypto.so soversion back to 0 2018-04-14T12:44:43+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-04-14T12:33:46+00:00 09d95e44fc3d1a9f900b7305b10dc241a12d6f37 mbedtls changed in version 2.7.0 and 2.7.2 the soversion of the libmbedcrypto.so library, use the old version again to be able to use the new library with binaries compiled against the old mbedtls library. Some binaries got rebuild to for the 2.7.0 release and are now using libmbedcrypto.so.1, the older ones are still using libmbedcrypto.so.0. Go back to libmbedcrypto.so.0 and make the system rebuild the binaries which were rebuild for 2.7.0 again. This should make the libmbedcrypto.so library be compatible with the old version shipped with 17.01. Fixes: 3ca1438ae0 ("mbedtls: update to version 2.7.2") Fixes: f609913b5c ("mbedtls: update to version 2.7.0") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
mbedtls changed in version 2.7.0 and 2.7.2 the soversion of the
libmbedcrypto.so library, use the old version again to be able to use
the new library with binaries compiled against the old mbedtls library.

Some binaries got rebuild to for the 2.7.0 release and are now using
libmbedcrypto.so.1, the older ones are still using libmbedcrypto.so.0.
Go back to libmbedcrypto.so.0 and make the system rebuild the binaries
which were rebuild for 2.7.0 again.

This should make the libmbedcrypto.so library be compatible with the old
version shipped with 17.01.

Fixes: 3ca1438ae0 ("mbedtls: update to version 2.7.2")
Fixes: f609913b5c ("mbedtls: update to version 2.7.0")
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
mbedtls: update to version 2.7.2 2018-04-01T13:21:14+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-04-01T13:10:30+00:00 3ca1438ae0f780664e29bf0d102c1c6f9a99ece7 This fixes some minor security problems. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes some minor security problems.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
openssl: update to 1.0.2o 2018-04-01T13:21:14+00:00 Paul Wassi p.wassi@gmx.at 2018-03-30T06:15:00+00:00 c4b382934836231ba73678e7d240e85e8303913a Fixes CVE-2018-0739 Signed-off-by: Paul Wassi <p.wassi@gmx.at> 
Fixes CVE-2018-0739

Signed-off-by: Paul Wassi <p.wassi@gmx.at>