routing, branch openwrt-23.05

Merge pull request #1039 from ecsv/batadv-for-23.05

2023-12-23T17:05:49Z

openwrt-23.05: batman-adv: compat: Fix skb_vlan_eth_hdr conflict in stable kernels

batman-adv: compat: Fix skb_vlan_eth_hdr conflict in stable kernels

2023-12-23T14:34:41Z

The newest Linux stable kernel releases: * v5.10.205 * v5.15.144 * v6.1.69 received a backported version of commit 1f5020acb33f ("net: vlan: introduce skb_vlan_eth_hdr()"). batman-adv must therefore not provide this function any longer for these kernel versions. Signed-off-by: Sven Eckelmann

opennds: update to version 10.2.0

2023-11-29T04:01:25Z

Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 Description: opennds (10.2.0) - This version is a minor upgrade that introduces some significant additional functionality. In addition it includes numerous enhancements bug fixes and cosmetic fixes. Additional functionality includes: * Pre-emptive Client Lists * Autonomous Block Lists * Internet hosted https FAS support for resource limited routers * Fair Usage Policy Details can be found here: https://github.com/openNDS/openNDS/releases/tag/v10.2.0 Signed-off-by: Rob White (cherry picked from commit a5ec54aee3df6aa400e454ef0468127dcd0c6b25)

nodogsplash: explicit file copy

2023-10-23T11:21:02Z

Signed-off-by: Moritz Warning (cherry picked from commit 2a725e7cbec6645f55d6104dee17b673b142cba8)

nodogsplash: update to version 5.0.2

2023-10-23T11:21:02Z

Fix a buffer overflow in case the query string is too long. Signed-off-by: Moritz Warning (cherry picked from commit fe1c67fb3d83089210d5b45bc35eb7d7393aeb1f)

luci-app-bmx6: drop this because of security vulnerabilities

2023-09-29T10:26:25Z

DependencyBot, which are using is sending us emails about these CVEs: CVE-2012-6708 CVE-2020-23064 CVE-2019-11358 This was reported to maintainer in April 2023, but no one stepped it to fix that, so let's drop this. Replacement could be luci-app-bmx7. Signed-off-by: Josef Schlehofer (cherry picked from commit c2124dd2ad542f526ee84e1984f03dd2f5b34dfe)

bmx6: drop package

2023-09-29T10:26:15Z

This package is no longer maintained by us or by upstream developers. The last version in the GitHub repository is from 2020 with no activity so far. We are using version 0.1-alpha. Because LuCI app is vulnerable to several CVEs and DependencyBot still sends emails about it, let's drop it. If anyone wants, they can use bmx7. Signed-off-by: Josef Schlehofer (cherry picked from commit 9fb9d9343ea27d6dbb5008ece10c0c843dd2c781)

opennds: update to version 10.1.3

2023-08-31T16:10:50Z

Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 Description: opennds (10.1.3) Security Advisory. This version contains fixes for multiple potential security vulnerabilities Credit - Stanislav Dashevskyi - standash.github.io [standash] It also contains some minor bug fixes * Fix - Buffer overflow causing segfault - CVE-2023-41101 [bluewavenet] * Fix - Memory leaks due to passing allocated buffer into safe_asprintf() - CVE-2023-41102 [bluewavenet] * Fix - Remove deprecated preauth option [bluewavenet] * Fix - missing free in show_preauth_page if MHD does not respond [bluewavenet] * Fix - more safe_asprintf memory leaks [bluewavenet] * Fix - missing free for mark_auth [bluewavenet] * Fix - memory leak after starting authmon daemon [bluewavenet] * Fix - memory leak in encode_and_redirect_to_splashpage [bluewavenet] * Fix - Community themespec, voucher css and logo image [bluewavenet] * Fix - ThemeSpec, path to logo in page footer [bluewavenet] * Fix - ensure gatewayurl is urldecoded to fix broken css and images in themespec [bluewavenet] * Add - set default fas remote fqdn to disabled [bluewavenet] Signed-off-by: Rob White (cherry picked from commit 88c98c910acccab694b3afb6d36d70ca429118a6)

Merge pull request #1016 from ecsv/batadv-for-23.05

2023-08-23T07:24:08Z

openwrt-23.05: batman-adv: Fix lock assert after fragmentation change

batman-adv: Fix lock assert after fragmentation change

2023-08-22T16:53:57Z

The automatic recalculation of the maximum allowed MTU is usually triggered by code sections which are already rtnl lock protected by callers outside of batman-adv. But when the fragmentation setting is changed via batman-adv's own batadv genl family, then the rtnl lock is not yet taken. But dev_set_mtu requires that the caller holds the rtnl lock because it uses netdevice notifiers. And this code will then fail the check for this lock: RTNL: assertion failed at net/core/dev.c (1953) Fixes: c738e4751e82 ("batman-adv: Merge bugfixes from 2023.2") Signed-off-by: Sven Eckelmann