staging/pepe2k, branch v18.06.7

OpenWrt v18.06.7: adjust config defaults

2020-01-29T16:13:21Z

Signed-off-by: Jo-Philipp Wich

opkg: update to latest Git HEAD

2020-01-29T16:06:05Z

80d161e opkg: Fix -Wformat-overflow warning c09fe20 libopkg: fix skipping of leading whitespace when parsing checksums Fixes: CVE-2020-7982 Signed-off-by: Jo-Philipp Wich (cherry picked from commit c69c20c6670081d1eaab000734d89de57eb64148)

libubox: backport security patches

2020-01-27T20:44:28Z

This backports some security relevant patches from libubox master. These patches should not change the existing API and ABI so that old applications still work like before without any recompilation. Application can now also use more secure APIs. The new more secure interfaces are also available, but not used. OpenWrt master and 19.07 already have these patches by using a more recent libubox version. Signed-off-by: Hauke Mehrtens

lantiq: ltq-ptm: vr9: fix skb handling in ptm_hard_start_xmit()

2020-01-26T21:12:54Z

Call skb_orphan(skb) to call the owner's destructor function and make the skb unowned. This is necessary to prevent sk_wmem_alloc of a socket from overflowing, which leads to ENOBUFS errors on application level. Signed-off-by: Martin Schiller (cherry picked from commit 996f02e5bafad2815e72821c19d41fb5297e4dad)

tools/expat: Update to version 2.2.9

2020-01-26T21:12:50Z

Fixes two CVEs: - CVE-2019-15903 (Fix heap overflow triggered by XML_GetCurrentLineNumber) - CVE-2018-20843 (Fix extraction of namespace prefixes from XML names) Signed-off-by: Josef Schlehofer (cherry picked from commit b4af2c689fc8736777940b7bbf009bb1672296ec)

mbedtls: update to 2.16.4

2020-01-26T19:25:47Z

Fixes side channel vulnerabilities in mbed TLS' implementation of ECDSA. Release announcement: https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.4-and-2.7.13-released Security advisory: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2019-12 Fixes: * CVE-2019-18222: Side channel attack on ECDSA Signed-off-by: Magnus Kroken (cherry picked from commit 6e96fd90471a49185bcfe9dcb4844d444674ecab)

kernel: bump 4.14 to 4.14.167

2020-01-24T12:18:01Z

Refreshed all patches. Compile-tested on: cns3xxx Runtime-tested on: cns3xxx Signed-off-by: Koen Vandeputte

kernel: bump 4.9 to 4.9.211

2020-01-24T12:18:01Z

Refreshed all patches. Compile-tested on: ar71xx Runtime-tested on: ar71xx Signed-off-by: Koen Vandeputte

kirkwood: fix HDD LED labels for Zyxel NSA325 in 01_leds

2020-01-21T13:06:24Z

Change the LED labels for hdd1/hdd2 in 01_leds to match their counterpart in DTS. Signed-off-by: Stephan Knauss [improve commit title and message] Signed-off-by: Adrian Schmutzler (cherry picked from commit fbf297be38a93b9ca1119e5aaffecd2299087aa5)

brcm47xx: fix switch port order for Netgear WN2500RP V1

2020-01-21T13:04:55Z

The Netgear WN2500RP V1 switch0 already works for LAN however the port order for the LAN ports is inverted. Correct physical port order watched from the back of the device is: 4 / 3 / 2 / 1 WAN port is absent on this device and therefore removed from switch config. Signed-off-by: Walter Sonius [move block to maintain alphabetic sorting] Signed-off-by: Adrian Schmutzler (cherry picked from commit 098cbc68ee23db589ed6f0d081fe26cc385462f2)