staging/pepe2k/package/system, branch v19.07.2

opkg: update to latest Git HEAD

2020-01-29T16:05:35Z

80d161e opkg: Fix -Wformat-overflow warning c09fe20 libopkg: fix skipping of leading whitespace when parsing checksums Fixes: CVE-2020-7982 Signed-off-by: Jo-Philipp Wich (cherry picked from commit c69c20c6670081d1eaab000734d89de57eb64148)

procd: update to version 2020-01-24

2020-01-24T07:42:24Z

Get only fix backports from openwr-19.07 procd branch: 31e4b2dfdbd7 state: fix reboot causing shutdown inside LXC container 557f11b3a20f instance: provide error feedback if ujail binary is missing 0a11aa405d3f instance: Fix instance_config_move_strdup() function 44dd9419812b instance: fix typo in error message 153820c76471 instance: fix pidfile and seccomp attributes double free Signed-off-by: Petr Štetiar

urngd: update to version 2020-01-21

2020-01-21T19:03:43Z

c7f7b6b65b82 Tag version 1.0.2 236b7a0aef21 Fix blocked entropy generation Signed-off-by: Petr Štetiar (cherry picked from commit 3d8edd9bb4759f56df4482b3ed9c7fc26ed86028)

urngd: update to latest Git head

2020-01-21T19:03:39Z

* 40f939d57c67 Tag version 1.0.1 * 9e758e6e6aec jitterentropy-rngd: update to version v1.1.0 + clang compile fix * 193586a25adc Fix wrong types in format strings used in debug build * d474977bb611 Add initial GitLab CI support Signed-off-by: Petr Štetiar (cherry picked from commit ed67b137c748365d7a3be886a2f5309c3bc44c48)

fstools: backport fix from version 2020-01-18

2020-01-20T20:14:08Z

Contains only the FS#2735 fix: 189b41b6b487 libblkid-tiny: fix f2fs labels by increasing label buffer Commit adding new feature wasn't backported (needs patched kernel anyway): f5c7c1813f52 fstools: Add support to read-only MTD partitions (eg. recovery images) Signed-off-by: Petr Štetiar (cherry picked from commit 63000bfaf7163d97ac6feb343c7587e3d339e65e)

ucert: update to version 2019-12-19

2020-01-13T23:21:35Z

14a279411cff fix certificate blob parsing vulnerability by using blob_parse_untrusted 19a7225ac018 fix leaking memory in cert_dump_blob 9dba44ddd4f5 fix possibly garbage value returned in cert_process_revoker 4462ff9dedfa add cram based unit tests 5fe64b5606aa cmake: split usign bits into static library 5d7626a2b6d8 cmake: reindent the file e284ed941972 cmake: enable hardening compiler flags and fix the reported issues 7e5390666347 add initial GitLab CI support fa0bf4ef45b1 cmake: add proper include and library dependencies Signed-off-by: Petr Štetiar (cherry picked from commit 2544cb1ba377149a8663c7ac4a625d5399993e33)

ca-certificates: provide ca-certs by both ca-certificates and ca-bundle

2020-01-05T19:05:33Z

- both packages provide ca-certs - make ca-bundle the default provider This should allow easy transition between these two forms of CA certificates storage Signed-off-by: Maxim Storchak (cherry picked from commit dd299805ad18472a8245b4524a25e4381e166057)

fstools: update to latest Git HEAD

2020-01-05T17:41:25Z

823faa0 block: re-discover mtd devices on extroot mount retry Signed-off-by: Jo-Philipp Wich (cherry picked from commit 22a178e89282c7bd5bb181fc5c2c5cb6ff2403c8)

procd: update to version 2020-01-04

2020-01-05T16:50:10Z

Contains following changes: a5af33ce9a16 instance: strdup string attributes d2e8bf6ef7cf system: watchdog_set: fix misleading indentation 9814807bd71c system: sysupgrade: fix possibly misleading error c7a2db3c1eb6 system: sysupgrade: rework firmware validation ea45c4a0f07c system: fix failing image validation due to EINTR 4fde95506243 cmake: fix lookup of external libraries 5ed190aae1b3 jail: remove accidentally added lines 52c5c1980ba3 jail: set user and group inside jail 3aa051b44177 system: sysupgrade: close input side of pipe before reading f47622e89c4d instance: Warn about unexpected number of parameters 564ecdfd9cc4 instance: ujail: Fix allocated size for no_new_privs parameter 7fb2e1dfa221 procd: simplify code in procd_inittab_run 4a127c3c60af procd: replace exit(-1) with exit(EXIT_FAILURE) bc0a73eaad58 procd: add upgraded binary to .gitignore ba4c4dbbbd65 procd: add start-console support 3e39fe539490 procd: shift arguments for askfirst only once 5d6282906baf procd: skip respawn in case device disappeared d27949f12fd7 procd: guard fork_worker calls 258aa04328a2 procd: Add cached and available to memory table 8e9fb51fa66e procd: Switch to nanosleep c844ace9729a system: Fix possible integer overflows Acked-by: Hauke Mehrtens Signed-off-by: Petr Štetiar

ubus: update to version 2019-12-27

2020-01-05T16:50:10Z

Contains following changes: 041c9d1c052b ubusd/libubus-io: fix socket descriptor passing 8f2292478c57 ci: enable unit testing a1523d76b016 fix blob parsing vulnerability by using blob_parse_untrusted c60583743ccf ubus_monitor: workaround possibly false positive uses of memory after it is freed dac6c7c575ac ubusd_monitor: fix possible null pointer dereference 060dfbb26da3 ubus_common: remove duplicate ARRAY_SIZE and add missing include c5f2053dfcfd workaround possibly false positive uses of memory after it is freed 72be8e93f07d lua: ubus_lua_do_subscribe: fix copy&paste error a995b1e68129 lua: workaround false positive dereference of null pointer 08f17c87a000 add fuzzer and cram based unit tests c413be9b376c refactor ubusd.c into reusable ubusd_library afd47189e864 examples: remove dead increments b2e544238672 add initial GitLab CI support 058f4e9526ed libubus: fix incompatible pointer types assigment d2e026a33df8 iron out all extra compiler warnings 5d7ca8309d0a ubusd/libubus-io: fix variable sized struct position warning d61282db5640 ubusd: fix comparison of integers of different signs 90fb16234c22 cmake: enable extra compiler checks 2e051f628996 ubus: Support static builds 588baa3cd784 ubusd: retry sending messages on EINTR 76ea27a62774 libubus: attempt to receive data before calling poll 4daab27d004f libubus: do not abort recv_retry before completing a message and bumps ABI_VERSION to 20191227. Acked-by: Hauke Mehrtens Signed-off-by: Petr Štetiar