staging/chunkeey/package/libs, branch v18.06.8

libubox: backport blobmsg_check_array() fix

2020-02-27T21:25:59Z

Fixes: FS#2833 Signed-off-by: Jo-Philipp Wich (backported from commit 955634b473284847e3c8281a6ac85655329d8b06)

libubox: backport security patches

2020-01-27T20:44:28Z

This backports some security relevant patches from libubox master. These patches should not change the existing API and ABI so that old applications still work like before without any recompilation. Application can now also use more secure APIs. The new more secure interfaces are also available, but not used. OpenWrt master and 19.07 already have these patches by using a more recent libubox version. Signed-off-by: Hauke Mehrtens

mbedtls: update to 2.16.4

2020-01-26T19:25:47Z

Fixes side channel vulnerabilities in mbed TLS' implementation of ECDSA. Release announcement: https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.4-and-2.7.13-released Security advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-12 Fixes: * CVE-2019-18222: Side channel attack on ECDSA Signed-off-by: Magnus Kroken (cherry picked from commit 6e96fd90471a49185bcfe9dcb4844d444674ecab)

openssl: update to version 1.0.2u

2020-01-01T15:57:32Z

Fixes CVE-2019-1551 (rsaz_512_sqr overflow bug) on x86_x64 Signed-off-by: Josef Schlehofer

ustream-ssl: backport fix for CVE-2019-5101, CVE-2019-5102

2019-11-05T14:12:18Z

Signed-off-by: Jo-Philipp Wich (cherry picked from commit c5d5cdb759adc890ce6699117b7119acf280ce77)

libpcap: update to 1.9.1

2019-10-19T13:26:19Z

Fixed CVEs: CVE-2018-16301 CVE-2019-15161 CVE-2019-15162 CVE-2019-15163 CVE-2019-15164 CVE-2019-15165 Signed-off-by: DENG Qingfang (cherry picked from commit 44f11353de044834a442d3192b66579b99305720)

libpcap: update to 1.9.0

2019-10-19T13:25:45Z

001-Fix-compiler_state_t.ai-usage-when-INET6-is-not-defi.patch dropped due to upstream 002-Add-missing-compiler_state_t-parameter.patch dropped due to upstream 202-protocol_api.patch dropped due to implemented upstream by another way upstream commit: https://github.com/the-tcpdump-group/libpcap/commit/55c690f6f834b4762697d7a134de439c9096c921 and renamed via: https://github.com/the-tcpdump-group/libpcap/commit/697b1f7e9b1d6f5a5be04f821d7c5dc62458bb3b ead is the only user who use the protocol api, we have to use the new api since libpcap 1.9.0 Signed-off-by: Syrone Wong

mbedtls: update to 2.16.3

2019-09-21T19:11:21Z

Remove 300-bn_mul.h-Use-optimized-MULADDC-code-only-on-ARM-6.patch, the issue has been fixed upstream. Signed-off-by: Magnus Kroken (cherry picked from commit 49d96ffc5c47e40b7f3d99a91a42ea8a54a38bd9)

mbedtls: Update to version 2.16.2

2019-09-21T19:10:44Z

Signed-off-by: Josef Schlehofer (cherry picked from commit a2f54f6d5d98211e9c58420eed8c67f4fca83665)

openssl: bump to 1.0.2t, add maintainer

2019-09-20T18:50:07Z

This version fixes 3 low-severity vulnerabilities: - CVE-2019-1547: ECDSA remote timing attack - CVE-2019-1549: Fork Protection - CVE-2019-1563: Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey Patches were refreshed, and Eneas U de Queiroz added as maintainer. Signed-off-by: Eneas U de Queiroz