openwrt, branch v18.06.3

OpenWrt v18.06.3: adjust config defaults

2019-06-21T12:26:22Z

Signed-off-by: Jo-Philipp Wich

fstools: block-mount: fix restart of fstab service

2019-06-21T12:17:25Z

Restarting service causes file-systems to be unmounted without being mounted back. When this service was obsoleted it should have been implemented in a way that all actions are ignored. Up to this commit default handler was called when restart was requested. This default handler just simply calls stop and start. That means that stop called unmount but start just printed that this service is obsoleted. This instead implements restart that just prints same message like start does. It just calls start in reality. This makes restart unavailable for call. Signed-off-by: Karel Kočí (cherry picked from commit 3ead9e7b743b1fbd3b07f5a72a16999abbec9347)

fstools: update to the latest master branch

2019-06-21T12:17:23Z

ff1ded6 libfstools: Fix overflow of F2FS_MINSIZE constant bc2c876 libfstools: Print error in case of loop blkdev failure Signed-off-by: Petr Štetiar (cherry picked from commit 1e55171a1213472e180e9320d8b1d08621d2b8d5)

fstools: media change detection (eg:sdcard) using kernel polling

2019-06-21T12:17:22Z

Linux kernel has a polling mechanism that can be activated by changing the parameter /sys/module/block/parameters/events_dfl_poll_msecs which is deactivated by default or the /sys/block/[device]/events_poll_msecs for one device. This patch set the events_poll_msecs when a disk is inserted. Once the media disk change event is sent by the kernel then we force a re-read of the devices using /sbin/block info. With this patch, insertion and ejection of sd card will automatically generate partition devices in /dev. Signed-off-by: Matthias Badaire [rewrap commit message, fix bashisms, fix non-matching condition, bump pkg release] Signed-off-by: Jo-Philipp Wich (cherry picked from commit cf8483cb4ffc99bf3f512bb134860ccc8c099abe)

hostapd: fix multiple security problems

2019-06-21T08:29:23Z

This fixes the following security problems: * CVE-2019-9494: cache attack against SAE * CVE-2019-9495: cache attack against EAP-pwd * CVE-2019-9496: SAE confirm missing state validation in hostapd/AP * CVE-2019-9497: EAP-pwd server not checking for reflection attack) * CVE-2019-9498: EAP-pwd server missing commit validation for scalar/element * CVE-2019-9499: EAP-pwd peer missing commit validation for scalar/element * CVE-2019-11555: EAP-pwd message reassembly issue with unexpected fragment Most of these problems are not relevant for normal users, SAE is only used in ieee80211s mesh mode and EAP-pwd is normally not activated. Signed-off-by: Hauke Mehrtens

brcm2708: Revert "staging: vc04_services: prevent integer overflow in create_pagelist()"

2019-06-20T21:46:01Z

The bump to 4.9.181 broke build for bcm2708 and bcm2709. Revert the offending patch. The same revert is also queued for the next upstream 4.9.y release. Signed-off-by: Matthias Schiffer

gemini: 4.14: Fix up DNS-313 compatible string

2019-06-20T15:42:17Z

It's a simple typo in the DNS file, which was pretty serious. No scripts were working properly. Fix it up. Signed-off-by: Linus Walleij Signed-off-by: Christian Lamparter [integrate into openwrt target]

base-files: fix uci led oneshot/timer trigger

2019-06-20T15:41:42Z

This patch adds a missing type property which prevented the creation of oneshot and timer led triggers when they are specified in the /etc/board.d/01_leds files. i.e.: ucidef_set_led_timer "system" "system" "zhuotk:green:system" "1000" "1000" Fixes: b06a286a4861 ("base-files: cleanup led functions in uci-defaults.sh") Signed-off-by: Robinson Wu Signed-off-by: Christian Lamparter [also fix oneshot as well]

kernel: bump 4.14 to 4.14.128

2019-06-20T13:51:03Z

Refreshed all patches. Compile-tested on: cns3xxx Runtime-tested on: cns3xxx Signed-off-by: Koen Vandeputte

kernel: bump 4.14 to 4.14.127

2019-06-18T13:49:37Z

Refreshed all patches. Fixes: - CVE-2019-11479 - CVE-2019-11478 - CVE-2019-11477 Compile-tested on: cns3xxx Runtime-tested on: cns3xxx Signed-off-by: Koen Vandeputte