fish/immortalwrt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8,007 Commits 6 Branches 17 Tags 782 MiB
a0f8ab71f2
Commit Graph

349 Commits

Author SHA1 Message Date
Eneas U de Queiroz
3d41bf5ca5 wolfssl: update to 4.4.0-stable 
This version adds many bugfixes, including a couple of security
vulnerabilities:
 - For fast math (enabled by wpa_supplicant option), use a constant time
   modular inverse when mapping to affine when operation involves a
   private key - keygen, calc shared secret, sign.
 - Change constant time and cache resistant ECC mulmod. Ensure points
   being operated on change to make constant time.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
 2020-05-21 12:02:44 +08:00
Robert Marko
7e4ff1091d libjson-c: backport security fixes 
This backports upstream fixes for the out of bounds write vulnerability in json-c.
It was reported and patches in this upstream PR: https://github.com/json-c/json-c/pull/592

Addresses CVE-2020-12762

Signed-off-by: Robert Marko <robert.marko@sartura.hr>
Signed-off-by: Luka Perkov <luka.perkov@sartura.hr>
[bump PKG_RELEASE]
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2020-05-13 18:15:24 +08:00
ElonH
6cc3e77a2d
libpcap: fix prefix path 2020-04-23 14:24:08 +08:00
CN_SZTL
f69260725e
libubox: backport fixes 
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
 2020-04-23 04:28:58 +08:00
Petr Štetiar
725e595526 openssl: bump to 1.1.1g 
Fixes NULL dereference in SSL_check_chain() for TLS 1.3, marked with
high severity, assigned CVE-2020-1967.

Ref: https://www.openssl.org/news/secadv/20200421.txt
Signed-off-by: Petr Štetiar <ynezz@true.cz>
 2020-04-22 22:26:01 +08:00
ElonH
7fc016b1d2
elfutils: fix build on powerpc musl 
This commit fixed https://github.com/project-openwrt/openwrt-kisco/issues/41
 2020-04-21 19:54:32 +08:00
Magnus Kroken
aad709ab60
mbedtls: update to 2.16.6 
Security fixes for:
* CVE-2020-10932
* a potentially remotely exploitable buffer overread in a DTLS client
* bug in DTLS handling of new associations with the same parameters

Full release announement:
https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.6-and-2.7.15-released

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
 2020-04-18 12:20:56 +08:00
Lucian Cristian
ae5bb65cc6
elfutils: aarch64 fix build on musl 
aarch64_initreg.c: In function 'aarch64_set_initial_registers_tid':
aarch64_initreg.c:85:37: error: invalid operands to binary & (have 'long double' and 'unsigned int')
     dwarf_fregs[r] = fregs.vregs[r] & 0xFFFFFFFF;
                      ~~~~~~~~~~~~~~ ^

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2020-04-17 21:06:56 +08:00
Rosen Penev
d4a6de1eb7
elfutils: update to 0.179 
Removed sys/cdefs usage. The header is deprecated.

Removed canonicalize_file_name define. It's already fixed upstream.

Added --disable-debuginfod. Seems to be needed.

Modified patch 005 to build more stuff. It was failing before. It still
only builds libraries.

Modified patch 100 to use strerror under non-glibc. It is used under
glibc as strerror is not thread safe. It is under musl and uClibc-ng.
strerror_l is not available under uClibc-ng.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2020-04-14 20:28:43 +08:00
CN_SZTL
b2760e89d5
openssl: refresh download urls 2020-04-09 06:51:56 +08:00
Kevin Darbyshire-Bryant
4c9afddf51
jansson: convert to cmake 
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
 2020-04-05 21:26:51 +08:00
CN_SZTL
03d7119e7a
Merge Lean's source 2020-04-03 23:50:50 +08:00
CN_SZTL
78bec3e9f0
openssl: bump to 1.1.1f (#4153) 2020-04-03 09:10:54 +08:00
CN_SZTL
33733198bf
openssl: bump to 1.1.1f 2020-04-01 04:37:25 +08:00
CN_SZTL
f8bd6e09a0
openssl: revert EOF detection change in 1.1.1 (#4127) 
This adds patches to avoid possible application breakage caused by a
change in behavior introduced in 1.1.1e.  It affects at least nginx,
which logs error messages such as:
nginx[16652]: [crit] 16675#0: *358 SSL_read() failed (SSL: error:
4095126:SSL routines:ssl3_read_n:unexpected eof while reading) while
keepalive, client: xxxx, server: [::]:443

Openssl commits db943f4 (Detect EOF while reading in libssl), and
22623e0 (Teach more BIOs how to handle BIO_CTRL_EOF) changed the
behavior when encountering an EOF in SSL_read().  Previous behavior was
to return SSL_ERROR_SYSCALL, but errno would still be 0.  The commits
being reverted changed it to SSL_ERRO_SSL, and add an error to the
stack, which is correct.  Unfortunately this affects a number of
applications that counted on the old behavior, including nginx.

The reversion was discussed in openssl/openssl#11378, and implemented as
PR openssl/openssl#11400.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

Co-authored-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
 2020-03-31 23:14:35 +08:00
Kevin Darbyshire-Bryant
9de293c406
jansson: import jansson from packages 
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
 2020-03-30 19:50:14 +08:00
Eneas U de Queiroz
bf035d50fc
openssl: revert EOF detection change in 1.1.1 
This adds patches to avoid possible application breakage caused by a
change in behavior introduced in 1.1.1e.  It affects at least nginx,
which logs error messages such as:
nginx[16652]: [crit] 16675#0: *358 SSL_read() failed (SSL: error:
4095126:SSL routines:ssl3_read_n:unexpected eof while reading) while
keepalive, client: xxxx, server: [::]:443

Openssl commits db943f4 (Detect EOF while reading in libssl), and
22623e0 (Teach more BIOs how to handle BIO_CTRL_EOF) changed the
behavior when encountering an EOF in SSL_read().  Previous behavior was
to return SSL_ERROR_SYSCALL, but errno would still be 0.  The commits
being reverted changed it to SSL_ERRO_SSL, and add an error to the
stack, which is correct.  Unfortunately this affects a number of
applications that counted on the old behavior, including nginx.

The reversion was discussed in openssl/openssl#11378, and implemented as
PR openssl/openssl#11400.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
 2020-03-29 16:17:31 +08:00
CN_SZTL
a68db5f2df
treewide: sync with upstream source 2020-03-28 23:37:17 +08:00
Jo-Philipp Wich
23251fcd9b
ustream-ssl: bump to latest Git HEAD 
5e1bc34 ustream-openssl: clear error stack before SSL_read/SSL_write
f7f93ad add support for specifying usable ciphers

Also bump the ABI version since the layout of `struct ustream_ssl_ops`
changed.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
 2020-03-26 20:04:32 +08:00
CN_SZTL
a696ac5392
System: revert some packages for OpenWrt-18.06 2020-03-25 20:16:17 +08:00
lean
5ee7b8ac82 Revert "libubox:fix array out of bounds GCC 10 warning" 
This reverts commit 2c95a9f5e6.
 2020-03-25 20:13:16 +08:00
CN_SZTL
983bd2d46f
Merge Lean's source 2020-03-25 19:11:35 +08:00
lean
334f365c2b rpcd: activate PIE ASLR by default 2020-03-25 12:59:53 +08:00
lean
2c95a9f5e6 libubox:fix array out of bounds GCC 10 warning 2020-03-25 12:17:48 +08:00
CN_SZTL
fbc565c228
Merge Lean's source 2020-03-24 20:20:12 +08:00
lean
b4eaefa54e libmnl: update ABI version 2020-03-24 18:24:26 +08:00
CN_SZTL
ca4a82b31a
Merge Lean's source 2020-03-23 12:09:22 +08:00
lean
8aabd4ef4f libnftnl: bump version 2020-03-23 11:23:46 +08:00
CN_SZTL
a225a908b2
Merge Lean's source 2020-03-22 19:07:54 +08:00
CN_SZTL
fd6d1b0700
openssl: update to 1.1.1e (#3926) 
This version includes bug and security fixes, including medium-severity
CVE-2019-1551, affecting RSA1024, RSA1536, DSA1024 & DH512 on x86_64.

Ref: openwrt/openwrt@dcef8d6

Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
 2020-03-22 10:08:58 +08:00
CN_SZTL
f296fec6f4
openssl: refresh patches 2020-03-22 02:06:59 +08:00
CN_SZTL
b2e5d40aeb
readline: needs host depend on ncurses to build 2020-03-21 01:28:18 +08:00
CN_SZTL
c0e6fa94e0
openssl: adjust download url 2020-03-17 23:32:39 +08:00
CN_SZTL
cf20b1b002
openssl: bump to 1.1.1e release 2020-03-17 23:24:36 +08:00
CN_SZTL
e17aca712d
Merge Lean' ssource 2020-03-13 18:34:46 +08:00
lean
dd6ccb9c18 openssl: update config 2020-03-13 09:42:50 +08:00
AmadeusGhost
53872fe931
elfutils: bump to 0.177 (#3648) 
commit:
  40de4c0 elfutils: bump to 0.176
  4760541 elfutils: Fix compile with uClibc-ng
  0851ce4 elfutils: bump to 0.177
  f4da28c elfutils: Add host build
 2020-03-08 12:49:24 +08:00
CN_SZTL
b1d9a3a548
libubox: backport blobmsg_check_array() fix 2020-03-08 04:18:18 +08:00
CN_SZTL
68509769b0
ncurses: update to 6.2 2020-03-08 01:28:54 +08:00
CN_SZTL
d6934dceba
elfutils: bump to 0.177 2020-03-05 23:22:49 +08:00
CN_SZTL
6d0259e28e
libpcap: activate PIE ASLR by default 2020-03-02 17:53:14 +08:00
CN_SZTL
50ba6569a7
mbedtls: update to version 2.16.5 2020-02-27 17:44:49 +08:00
CN_SZTL
8af8db5ede
openssl: refresh patches 2020-02-25 17:37:20 +08:00
CN_SZTL
b5f7ee1e4d
openssl: bump to 1.1.1e-dev 2020-02-24 16:53:07 +08:00
CN_SZTL
9b7267a672
libbsd: update to 0.10.0 2020-02-23 15:26:25 +08:00
CN_SZTL
98c564de49
Merge Lean's source 2020-02-22 16:06:32 +08:00
coolsnowwolf
b67976c246 readline: curses link 2020-02-22 16:00:57 +08:00
coolsnowwolf
e5a18fdcf6 ncurses: Do not pass both -fPIC and -fpic 2020-02-22 12:03:35 +08:00
CN_SZTL
0f68fb6e82
libubox: fix ABI_VERSION 2020-02-21 03:04:58 +08:00
CN_SZTL
14609a8f8a
Merge Lean's source 2020-02-21 02:50:38 +08:00
coolsnowwolf
9f8000a6d6 sync build script for OpenWrt 19.07 2020-02-21 02:41:00 +08:00
CN_SZTL
e81bf32a9f
ncurses: sync with upstream source 2020-02-20 04:35:50 +08:00
CN_SZTL
be016107a0
Merge Lean's source 2020-02-10 17:05:21 +08:00
AmadeusGhost
23519895ff package: update ipv6 to latest (#3021) 2020-02-10 15:40:14 +08:00
CN_SZTL
c20320321e
zlib: update 2020-02-05 15:35:01 +08:00
CN_SZTL
835195d153
libubox: backport security patches 2020-02-01 21:41:36 +08:00
CN_SZTL
83fd5f8701
mbedtls: update to 2.16.4 2020-01-27 22:02:13 +08:00
CN_SZTL
9f7ceb37ed
nettle: Disable ARMEB assembly 2020-01-15 02:12:04 +08:00
CN_SZTL
70d9ab2cdc
libcxx: add package 2020-01-15 02:09:46 +08:00
CN_SZTL
c9a8c533c1
ustream-ssl: Update to version 2020-01-05 2020-01-15 02:06:38 +08:00
CN_SZTL
bb01e1f30c
wolfssl: bump to 4.3.0-stable 2020-01-01 16:03:12 +08:00
CN_SZTL
536abab985
Revert "Revert "libubox: downgrade to 2018-07-25 (refer #14)"" 
This reverts commit f7140937b2.
 2019-12-22 10:24:13 +08:00
CN_SZTL
f7140937b2
Revert "libubox: downgrade to 2018-07-25 (refer #14)" 
This reverts commit 9f1a339276.
 2019-12-22 10:04:25 +08:00
CN_SZTL
9f1a339276
libubox: downgrade to 2018-07-25 (refer #14) 2019-12-22 09:53:24 +08:00
LEAN-ESX
dd576fa6ab nghttp2: bump to new version 2019-12-09 06:09:44 -08:00
CN_SZTL
992a3f2244 OpenSSL: bump to v1.1.1d (#2332) 
* openssl: bump to v1.1.1d

* trojan: compile with native openssl utils

* qt5: fix compile with openssl v1.1.x
 2019-12-09 21:08:27 +08:00
LEAN-ESX
7655ad367f fstool: mount/umount fs without reboot 2019-12-08 09:30:10 -08:00
CN_SZTL
c207ba7a8d
libubox: update to latest Git HEAD 2019-11-30 19:25:46 +08:00
CN_SZTL
e571c38c19
openssl: bump to 1.1.1 2019-11-29 11:32:06 +08:00
CN_SZTL
33e2da894f
qBittorrent: update 2019-11-28 17:58:37 +08:00
CN_SZTL
95e66c8e4b
Merge Lean's source 2019-11-25 12:46:54 +08:00
LEAN-ESX
3376f50203 Revert "netifd: bump to latest version" 
This reverts commit d6ce485de7.
 2019-11-24 19:57:24 -08:00
CN_SZTL
d63b7e2b15
nghttp2: bump to 1.40.0 2019-11-24 16:40:40 +08:00
LEAN-ESX
d6ce485de7 netifd: bump to latest version 2019-11-23 10:39:08 -08:00
LEAN-ESX
707e1186ca libnl: update to lastest version 2019-11-23 09:58:26 -08:00
CN_SZTL
47c7838a77
libnl-tiny: update to latest Git head 2019-11-16 08:34:47 +08:00
CN_SZTL
ccc16e4fda
Revert "Merge Lean's source" 
This reverts commit 39767afab9, reversing
changes made to 40f5298a3b.
 2019-11-09 18:53:21 +08:00
CN_SZTL
39767afab9
Merge Lean's source 2019-11-09 18:52:36 +08:00
LEAN-ESX
c235f68028 qBittorrent: rollback qt5 and openssl 2019-11-09 02:16:08 -08:00
CN_SZTL
a3b66c602f
libubox: bump to version 2019-10-29 2019-11-08 21:17:24 +08:00
CN_SZTL
3a9b2811f5
ustream-ssl: update to latest Git HEAD 2019-11-08 21:09:08 +08:00
CN_SZTL
99725191a2
libnl-tiny: update to latest Git head 2019-11-08 21:08:43 +08:00
CN_SZTL
83b146f858
wolfssl: update to v4.2.0-stable 2019-11-08 21:06:36 +08:00
CN_SZTL
3699c4d150
libnl: update to 3.5.0 2019-11-02 07:56:05 +08:00
CN_SZTL
e2373ba648
Merge Lean's source 2019-10-28 22:18:48 +08:00
LEAN-ESX
217cc81b58 Revert "ustream-ssl: bump version" 
This reverts commit cd903a7e25.
 2019-10-28 01:22:20 -07:00
LEAN-ESX
177d33049e "libjson-c: bump version" 
This reverts commit 438f06ab11.
 2019-10-28 01:21:22 -07:00
CN_SZTL
660b868d70
Merge Lean's source 2019-10-28 09:51:49 +08:00
LEAN-ESX
438f06ab11 libjson-c: bump version 2019-10-27 09:05:05 -07:00
LEAN-ESX
cd903a7e25 ustream-ssl: bump version 2019-10-27 05:15:04 -07:00
CN_SZTL
c46c67ea8f
Merge Lean's source 2019-10-27 16:31:59 +08:00
LEAN-ESX
08ddbd586a libevent2: Make it build using OpenSSL 1.1 2019-10-27 00:05:18 -07:00
CN_SZTL
3340b4333b
libpcap: build with cmake 2019-10-26 08:47:26 +08:00
CN_SZTL
c73de2249f
libubox: update to latest git HEAD 2019-10-26 08:43:31 +08:00
CN_SZTL
328d62eca6
toolchain: gcc: enable sanitizers for glibc toolchain 2019-10-26 08:30:05 +08:00
CN_SZTL
f3aa0eac48
Merge Lean's source 2019-10-26 07:44:31 +08:00
LEAN-ESX
b9e5d69777 openssl: OPENSSL_WITH_ASM default 2019-10-25 06:51:09 -07:00
LEAN-ESX
f339b00c7a openssl: bump to v1.1.1d 2019-10-25 06:49:04 -07:00
CN_SZTL
d218fced9a
Merge Lean's source 2019-10-20 08:14:12 +08:00
LEAN-ESX
ed8c0532b4 mbedtls: enable x86 32bit SSE2 support (Atom N270 etc.) 2019-10-19 09:24:38 -07:00
LEAN-ESX
d4ecf90f67 mbedtls: enable x86 32bit SSE2 support (Atom N270 etc.) 2019-10-19 09:23:20 -07:00
CN_SZTL
d5e48834e4
Merge Lean's source 2019-10-17 18:04:31 +08:00
LEAN-ESX
223cd21383 mbedtls: add support for x64 SSE2/AES-NI speedup 2019-10-16 21:57:28 -07:00
LEAN-ESX
540fe95b29 openssl: optimization speed for x64 （Compile with SSE2 and optimized assembly code) 2019-10-14 03:18:50 -07:00
CN_SZTL
1b162f3a50
adjust for gcc-7 2019-10-13 13:39:08 +08:00
CN_SZTL
0ebb9fa5f5
uclibc++: bump to 0.2.5 2019-10-13 11:55:06 +08:00
CN_SZTL
8bf622495d
libpcap: update to 1.9.1 2019-10-13 11:53:42 +08:00
CN_SZTL
c4ac79c64b
openssl: add gcc-8 -ffile-prefix-map filter 2019-10-12 15:48:43 +08:00
CN_SZTL
9f00ef69ae
fix permission 2019-09-30 14:27:46 +08:00
CN_SZTL
2e2284d6fe
fix permission 2019-09-30 13:52:50 +08:00
CN_SZTL
ba512e29ce
fix permission 2019-09-30 13:42:16 +08:00
CN_SZTL
76a3cd7f74
fix & merge 2019-09-30 13:21:19 +08:00
CN_SZTL
c7ac0b68a0
openssl: bump to 1.1.1d 2019-09-21 14:36:58 +08:00
CN_SZTL
8369591d88
mbedtls: update to 2.16.3 2019-09-21 14:32:42 +08:00
CN_SZTL
f07d2f549c
wolfssl: fixes for CVE-2018-16870 & CVE-2019-13628 2019-08-20 15:15:30 +08:00
CN_SZTL
332f3cf5d1
libbsd: Fix compilation under ARC 2019-08-16 13:31:21 +08:00
CN_SZTL
ce8ed9121b
add luci-app-haproxy & luci-app-udpspeederv2 2019-05-25 21:05:51 +08:00
coolsnowwolf
a52f85c70f iproute2: add cake fwmark support 2019-03-20 14:30:49 +08:00
coolsnowwolf
712b9794e6 openssl: revert 1.0.2 2019-02-13 23:15:34 +08:00
coolsnowwolf
ed9daec69e openssl: optimizations based on ARCH/small flash 2019-02-13 23:09:22 +08:00
coolsnowwolf
347daa04b2 Merge branch master of https://github.com/coolsnowwolf/lede 2019-01-03 19:29:28 +08:00
coolsnowwolf
ac7c76d45a mbedtls:bump to 2.14.1 2018-12-18 17:52:50 +08:00
coolsnowwolf
20d6f26fc8 openssl:enable openssl multiple threads by default 2018-10-22 15:18:31 +08:00
coolsnowwolf
3b9a77b9b0 Enable optimization for openssl speed instead of size 2018-10-14 19:22:50 +08:00
coolsnowwolf
806f5db174 sync with OpenWrt trunk 2018-09-07 13:43:55 +08:00
coolsnowwolf
9ba04fd0d7 sync with OpenWrt v18.06.1 stable new R8.1 version 2018-08-23 17:40:23 +08:00
coolsnowwolf
730605bea8 revert livevent2 and remove wifidog 2018-05-17 13:36:19 +08:00
coolsnowwolf
29f2ced3e6 fix apfree wifidog with libevent2 2018-05-13 11:49:52 +08:00
coolsnowwolf
8fe0636b8a Merge branch 'master' of github.com:lede-project/source 2018-04-23 18:50:49 +08:00
aooom
75d75c1722 20180409 2018-04-09 14:06:38 +08:00
coolsnowwolf
f5a44efb25 update toolchain GCC to 7.3.0 2018-02-08 22:08:32 +08:00
aooom
5efa8647e5 20180113 2018-01-18 18:17:35 +08:00
coolsnowwolf
20f7e75789 update to R7.5.4 2018-01-15 18:26:41 +08:00
coolsnowwolf
5d5ba500e6 fix gettext path for gdbm 2018-01-11 21:19:53 +08:00
coolsnowwolf
b0f643aa87 update to R7.5.3 stable to fix firewall freeze 2018-01-10 20:55:06 +08:00
coolsnowwolf
229cde62a4 Merge branch 'master' of https://github.com/lede-project/source 2018-01-09 14:38:15 +08:00
coolsnowwolf
b780d3bfb6 Add ARM and NEON optimizations 2018-01-08 18:19:57 +08:00
coolsnowwolf
03e969ff38 update kernel 4.4/4.9 to the lastest version 2017-12-25 10:45:33 +08:00
aooom
595ebacd6d Merge remote-tracking branch 'upstream/master' 
Conflicts:
	package/kernel/mac80211/files/lib/wifi/mac80211.sh
 2017-11-02 22:53:42 +08:00
coolsnowwolf
506faec99a openssl: Enable assembler optimizations for x64/arm8 2017-10-31 15:23:13 +08:00
coolsnowwolf
5d1a43f782 squashfs: use host cflags and fix for x86/x64 vmware firstboot 2017-10-24 23:23:45 +08:00
aooom
ca1c449a69 Merge https://github.com/coolsnowwolf/lede 2017-10-16 21:03:24 +08:00
coolsnowwolf
47c9f16b45 hostapd: CERT case ID: VU#228519 for WPA packet number reuse with key reinstallation and CVE fixes 2017-10-16 20:55:05 +08:00
coolsnowwolf
7284f410aa move package to lean folder 2017-10-09 23:13:30 +08:00
mltao
06bd77942f ‘解决amule编译通不过的bug 
git commit -a -m ‘解决amule编译通不过的bug
 2017-10-08 19:19:08 +08:00
aooom
9dcde4fc39 add wifidog SSID修复 CPU信息显示 2017-10-07 20:19:36 +08:00
coolsnowwolf
e3656a3e9a openssl multiple threads optimization 2017-09-13 22:02:37 +08:00
coolsnowwolf
03efb03919 Merge branch 'master' of https://github.com/lede-project/source 2017-09-12 01:07:20 +08:00
coolsnowwolf
97a4ffcc12 update source 2017-09-06 19:19:45 +08:00