mtk-20170518/package, branch v17.01.6 MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker LEDE v17.01.6: adjust config defaults 2018-09-02T13:16:09+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-09-02T13:16:09+00:00 9a96ec08a953a409b76b1d5f90de183c51937547 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
grub2: rebase patches 2018-08-30T12:10:54+00:00 Jo-Philipp Wich jo@mein.io 2018-08-23T17:08:58+00:00 2252731af43d0be32deff42ab77aed7458cee34d Patch 300-CVE-2015-8370.patch was added without proper rebasing on the version used by OpenWrt, make it apply and refresh the patch to fix compilation. Fixes: 7e73e9128f ("grub2: Fix CVE-2015-8370") Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 9ffbe84ea49fc643f41bfdf687de99aee17c9154) 
Patch 300-CVE-2015-8370.patch was added without proper rebasing on the
version used by OpenWrt, make it apply and refresh the patch to fix
compilation.

Fixes: 7e73e9128f ("grub2: Fix CVE-2015-8370")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 9ffbe84ea49fc643f41bfdf687de99aee17c9154)
bzip2: Fix CVE-2016-3189 2018-08-30T11:15:06+00:00 Rosen Penev rosenp@gmail.com 2018-08-23T02:07:56+00:00 d3e325dfeffd0b407972e6716d5fd5c8acb6c962 Issue causes a crash with specially crafted bzip2 files. More info: https://nvd.nist.gov/vuln/detail/CVE-2016-3189 Taken from Fedora. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit f9469efbfa7ce892651f9a6da713eacbef66f177) 
Issue causes a crash with specially crafted bzip2 files.

More info: https://nvd.nist.gov/vuln/detail/CVE-2016-3189

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f9469efbfa7ce892651f9a6da713eacbef66f177)
grub2: Fix CVE-2015-8370 2018-08-30T11:15:02+00:00 Rosen Penev rosenp@gmail.com 2018-08-23T02:07:57+00:00 6aae528cc3b71819aafdbfe179e1f7ce2a87ea64 This CVE is a culmination of multiple integer overflow issues that cause multiple issues like Denial of Service and authentication bypass. More info: https://nvd.nist.gov/vuln/detail/CVE-2015-8370 Taken from Fedora. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit 7e73e9128f6a63b9198c88eea97c267810447be4) 
This CVE is a culmination of multiple integer overflow issues that cause
multiple issues like Denial of Service and authentication bypass.

More info: https://nvd.nist.gov/vuln/detail/CVE-2015-8370

Taken from Fedora.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7e73e9128f6a63b9198c88eea97c267810447be4)
mt76: Fix mirror hash 2018-08-30T09:55:30+00:00 Hauke Mehrtens hauke@hauke-m.de 2018-08-30T09:55:30+00:00 55840040dfcce33ca6a00da53f0345bd7e227cff The mirror hash added in this commit was wrong. The file on the mirror server and the newly generated file from git have a different hash value, use that one. Fixes: 4b5861c47 ("mt76: update to the latest version") Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
The mirror hash added in this commit was wrong.
The file on the mirror server and the newly generated file from git have
a different hash value, use that one.

Fixes: 4b5861c47 ("mt76: update to the latest version")
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
dropbear: backport upstream fix for CVE-2018-15599 2018-08-27T12:14:57+00:00 Hans Dedecker dedeckeh@gmail.com 2018-08-24T13:02:24+00:00 bb7c4cff2086fffddf5cb20e40cfe4979ba1a7e6 CVE description : The recv_msg_userauth_request function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSH_MSG_USERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> 
CVE description :
The recv_msg_userauth_request function in svr-auth.c in Dropbear through
2018.76 is prone to a user enumeration vulnerability because username
validity affects how fields in SSH_MSG_USERAUTH messages are handled,
a similar issue to CVE-2018-15473 in an unrelated codebase.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
mac80211: brcmfmac: fix compilation with SDIO support 2018-08-17T10:28:08+00:00 Rafał Miłecki rafal@milecki.pl 2018-08-17T10:26:53+00:00 9e864bfccea5919e5d5bf258fd37074fb7adf741 This fixes following error when compiling with CONFIG_BRCMFMAC_SDIO=y: drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c:1100:23: error: 'sdiod' undeclared (first use in this function) brcmf_dev_coredump(&sdiod->func1->dev); Fixes: 9d8940c5b92f ("mac80211: brcmfmac: backport important changes from the 4.18") Signed-off-by: Rafał Miłecki <rafal@milecki.pl> 
This fixes following error when compiling with CONFIG_BRCMFMAC_SDIO=y:
drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c:1100:23: error: 'sdiod' undeclared (first use in this function)
   brcmf_dev_coredump(&sdiod->func1->dev);

Fixes: 9d8940c5b92f ("mac80211: brcmfmac: backport important changes from the 4.18")
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
mac80211: brcmfmac: backport patch setting WIPHY_FLAG_HAVE_AP_SME 2018-08-16T14:52:09+00:00 Rafał Miłecki rafal@milecki.pl 2018-08-16T14:34:21+00:00 13f219569d4c7d470e235d62bc61afa992ae7119 It's an important hint for authenticator (e.g. hostapd) about hardware capabilities. Signed-off-by: Rafał Miłecki <rafal@milecki.pl> 
It's an important hint for authenticator (e.g. hostapd) about hardware
capabilities.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
mac80211: brcmfmac: backport important changes from the 4.19 2018-08-16T11:15:06+00:00 Rafał Miłecki rafal@milecki.pl 2018-08-16T09:38:30+00:00 0c76265d0819e16a256707b8c357a4cdbb1464f3 Signed-off-by: Rafał Miłecki <rafal@milecki.pl> 
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
mac80211: brcmfmac: backport important changes from the 4.18 2018-08-16T11:15:06+00:00 Rafał Miłecki rafal@milecki.pl 2018-08-16T09:26:10+00:00 9d8940c5b92fda3385112264c808127b8047f159 Signed-off-by: Rafał Miłecki <rafal@milecki.pl> 
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>