openwrt, branch openwrt-19.07OpenWrt Source Repositoryhttp://x-nagi.com/cgit/openwrt/atom?h=openwrt-19.072023-09-27T20:20:26Ztreewide: Add extra CPE identifier2023-09-27T20:20:26ZHauke Mehrtenshauke@hauke-m.de2023-09-24T18:16:21Zurn:sha1:1da2e82c1182a3fd681da5760be96821213afadd
This adds some Common Platform Enumerations (CPE) identifiers which I
found.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
toolchain: musl: add PKG_CPE_ID2023-09-27T14:15:16ZArne Zachlodarne@nerdkeller.org2023-09-13T16:20:03Zurn:sha1:b110a094021e8a5316392fa19a8261e032dd1c7d
Vulnerabilities of musl libc are tracked as
cpe:/a:musl-libc:musl
Signed-off-by: Arne Zachlod <arne@nerdkeller.org>
toolchain: assign PKG_CPE_ID2023-09-27T14:15:16ZAlexander Couzenslynxis@fe80.eu2023-09-18T22:23:40Zurn:sha1:1e1d3e4eff5fdd48a1efaf5f6923a0d9d82e28a8
The PKG_CPE_ID links to NIST CPE version 2.2.
Assign PKG_CPE_ID to all remaining package which have a CPE ID.
Not every package has a CPE id.
Related: https://github.com/openwrt/packages/issues/8534
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
tools: assign PKG_CPE_ID2023-09-27T14:15:16ZAlexander Couzenslynxis@fe80.eu2023-09-18T22:10:03Zurn:sha1:9a3ea10d96d8382b49036197d7712ff32260556b
The PKG_CPE_ID links to NIST CPE version 2.2.
Assign PKG_CPE_ID to all remaining tools which have a CPE ID.
Not every tool has CPE id.
Related: https://github.com/openwrt/packages/issues/8534
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
packages: assign PKG_CPE_ID for all missing packages2023-09-27T14:14:45ZAlexander Couzenslynxis@fe80.eu2023-09-18T20:53:14Zurn:sha1:21d852083dd017aa4fa814275da1c4868fea43ba
The PKG_CPE_ID links to NIST CPE version 2.2.
Assign PKG_CPE_ID to all remaining package which have a CPE ID.
Not every package has CPE id.
Related: https://github.com/openwrt/packages/issues/8534
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Signed-off-by: Arne Zachlod <arne@nerdkeller.org>
ramips: fix RT-AC57U button level2022-06-18T20:14:29ZDavid Bauermail@david-bauer.net2022-06-18T18:46:33Zurn:sha1:83b0e20711ee4a927634b3c2a018c93527e84a2b
Both buttons on the RT-AC57U are active-low. Fix the GPIO flag for the
WPS cutton to fix button behavior.
Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 535b0c70b1c466733b009144f81f5207f1ecd311)
wolfssl: fix compilation with /dev/crypto2022-04-20T10:38:55ZEneas U de Queirozcotequeiroz@gmail.com2022-04-13T13:30:15Zurn:sha1:ecbbb373edf7be017e546be2443e6c422cb9c220
This is trivial fix of a duplicate definition of 'int ret'.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit df622768da10f36ceeb20346b4c4ee4eb9a8a9ad)
(cherry picked from commit 75cbd8de006698a766126da682d8ae621bc7b0d4)
OpenWrt v19.07.10: revert to branch defaults2022-04-17T17:35:44ZHauke Mehrtenshauke@hauke-m.de2022-04-17T17:35:44Zurn:sha1:f6e22f0956a1d6ad28d007f80fc9cf4dec51d462
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
OpenWrt v19.07.10: adjust config defaults2022-04-17T17:35:25ZHauke Mehrtenshauke@hauke-m.de2022-04-17T17:35:25Zurn:sha1:d03dc49943db1d02ff89e056a18eefe5e2d51dec
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
wolfssl: bump to 5.2.02022-04-16T13:13:32ZEneas U de Queirozcotequeiroz@gmail.com2022-04-08T13:27:25Zurn:sha1:9ce6aa9d8d8a1147dcf03cb509cafb5fa7339a91
Fixes two high-severity vulnerabilities:
- CVE-2022-25640: A TLS v1.3 server who requires mutual authentication
can be bypassed. If a malicious client does not send the
certificate_verify message a client can connect without presenting a
certificate even if the server requires one.
- CVE-2022-25638: A TLS v1.3 client attempting to authenticate a TLS
v1.3 server can have its certificate heck bypassed. If the sig_algo in
the certificate_verify message is different than the certificate
message checking may be bypassed.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [ABI version change]
(cherry picked from commit e89f3e85eb1c1d81294e5d430a91b0ba625e2ec0)
(cherry picked from commit 2393b09b5906014047a14a79c03292429afcf408)