<feed xmlns='http://www.w3.org/2005/Atom'>
<title>staging/pepe2k/package/utils, branch v21.02.4</title>
<subtitle>Staging tree of Piotr Dymacz</subtitle>
<id>https://git.openwrt.org/openwrt/staging/pepe2k/atom?h=v21.02.4</id>
<link rel='self' href='https://git.openwrt.org/openwrt/staging/pepe2k/atom?h=v21.02.4'/>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/'/>
<updated>2022-10-05T19:09:50Z</updated>
<entry>
<title>treewide: fix security issues by bumping all packages using libwolfssl</title>
<updated>2022-10-05T19:09:50Z</updated>
<author>
<name>Petr Štetiar</name>
</author>
<published>2022-09-29T16:45:40Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/commit/?id=8444302a92e601a1e05cb8468aaffa140d5a5b80'/>
<id>urn:sha1:8444302a92e601a1e05cb8468aaffa140d5a5b80</id>
<content type='text'>
As wolfSSL is having hard time maintaining ABI compatibility between
releases, we need to manually force rebuild of packages depending on
libwolfssl and thus force their upgrade. Otherwise due to the ABI
handling we would endup with possibly two libwolfssl libraries in the
system, including the patched libwolfssl-5.5.1, but still have
vulnerable services running using the vulnerable libwolfssl-5.4.0.

So in order to propagate update of libwolfssl to latest stable release
done in commit ec8fb542ec3e4 ("wolfssl: fix TLSv1.3 RCE in uhttpd by
using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely
exploitable vulnerabilities, we need to bump PKG_RELEASE of all
packages using wolfSSL library.

Signed-off-by: Petr Štetiar &lt;ynezz@true.cz&gt;
(cherry picked from commit f1b7e1434f66a3cb09cb9e70b40add354a22e458)
(cherry picked from commit 562894b39da381264a34ce31e9334c8a036fa139)
</content>
</entry>
<entry>
<title>sdk: add spidev-test to the bundle of userspace sources</title>
<updated>2022-07-19T18:27:06Z</updated>
<author>
<name>Christian Lamparter</name>
</author>
<published>2022-07-15T23:34:44Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/commit/?id=41e0dc5db9c508d794714f6bc1f2d0fbeb3e0e70'/>
<id>urn:sha1:41e0dc5db9c508d794714f6bc1f2d0fbeb3e0e70</id>
<content type='text'>
moves and extends the current facilities, which have been
added some time ago for the the usbip utility, to support
more utilites that are shipped with the Linux kernel tree
to the SDK.

this allows to drop all the hand-waving and code for
failed previous attempts to mitigate the SDK build failures.

Fixes: bdaaf66e28bd ("utils/spidev_test: build package directly from Linux")
Signed-off-by: Christian Lamparter &lt;chunkeey@gmail.com&gt;
(cherry picked from commit b479db9062b721776be44b976961a1031c1344ea)
(cherry picked from commit eb8d0da88a0dcf7f10f05ad10c48e3a691f5a8d1)
</content>
</entry>
<entry>
<title>busybox: backport dd support for iflag=count_bytes</title>
<updated>2022-01-03T13:28:13Z</updated>
<author>
<name>Rafał Miłecki</name>
</author>
<published>2021-12-16T11:36:16Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/commit/?id=b6ed2641df3c679eced6b51e5aad2e3df1761de1'/>
<id>urn:sha1:b6ed2641df3c679eced6b51e5aad2e3df1761de1</id>
<content type='text'>
It's very useful flag for handling various formats in sysupgrade. This
commit comes from the 1.34.0 release.

Signed-off-by: Rafał Miłecki &lt;rafal@milecki.pl&gt;
</content>
</entry>
<entry>
<title>dtc: support printing binary data with fdtget</title>
<updated>2022-01-03T13:28:13Z</updated>
<author>
<name>Rafał Miłecki</name>
</author>
<published>2021-12-07T12:00:02Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/commit/?id=1d4a28d5e10702f2b46b1fc1808c5613cc706db4'/>
<id>urn:sha1:1d4a28d5e10702f2b46b1fc1808c5613cc706db4</id>
<content type='text'>
It's needed for extracting binary images.

Cc: Yousong Zhou &lt;yszhou4tech@gmail.com&gt;
Signed-off-by: Rafał Miłecki &lt;rafal@milecki.pl&gt;
(cherry picked from commit a2cf659ad8ecbc5be6b0fca4efd29441e1a13be1)
</content>
</entry>
<entry>
<title>dtc: import package for dtc &amp; fdt from packages feed</title>
<updated>2022-01-03T13:28:06Z</updated>
<author>
<name>Rafał Miłecki</name>
</author>
<published>2021-12-07T12:00:01Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/commit/?id=ce5d0378bf03b3b890ccec0cc3fc62d44fecd536'/>
<id>urn:sha1:ce5d0378bf03b3b890ccec0cc3fc62d44fecd536</id>
<content type='text'>
fdt* utils are needed by targets that use U-Boot FIT images for
sysupgrade. It includes all recent BCM4908 SoC routers as Broadcom
switched from CFE to U-Boot.

fdtget is required for extracting images (bootfs &amp; rootfs) from
Broadcom's ITB. Extracted images can be then flashed to UBI volumes.

sysupgrade is core functionality so it needs dtc as part of base code
base.

Cc: Yousong Zhou &lt;yszhou4tech@gmail.com&gt;
Signed-off-by: Rafał Miłecki &lt;rafal@milecki.pl&gt;
</content>
</entry>
<entry>
<title>bcm4908img: detect Linksys images</title>
<updated>2021-12-13T13:33:06Z</updated>
<author>
<name>Rafał Miłecki</name>
</author>
<published>2021-09-10T14:34:48Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/commit/?id=2c1f27bf4bb2b2a90a326c2ae75ac5bdc6b47074'/>
<id>urn:sha1:2c1f27bf4bb2b2a90a326c2ae75ac5bdc6b47074</id>
<content type='text'>
Linksys uses an extra 0x100 bytes long tail for BCM4908 images.

Signed-off-by: Rafał Miłecki &lt;rafal@milecki.pl&gt;
(cherry picked from commit c4d5e60f6115b9a97318774533ea764bf938c2a9)
</content>
</entry>
<entry>
<title>bcm4908img: store offset of tail data</title>
<updated>2021-12-13T13:33:06Z</updated>
<author>
<name>Rafał Miłecki</name>
</author>
<published>2021-09-10T14:34:47Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/commit/?id=1d1c695273880d8da7f56be459b406ff550eb0ea'/>
<id>urn:sha1:1d1c695273880d8da7f56be459b406ff550eb0ea</id>
<content type='text'>
This simplifies some operations as it doesn't have to be caculated over
and over. It will also allow adding support for more vendor formats.

Signed-off-by: Rafał Miłecki &lt;rafal@milecki.pl&gt;
(cherry picked from commit 063038bcef39802aa65c196a162067f66e5c8621)
</content>
</entry>
<entry>
<title>otrx: update to the latest master</title>
<updated>2021-12-13T13:01:11Z</updated>
<author>
<name>Rafał Miłecki</name>
</author>
<published>2021-12-13T12:47:39Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/commit/?id=2912bba4cb8278ec175ed4aafca97b05ef53c96f'/>
<id>urn:sha1:2912bba4cb8278ec175ed4aafca97b05ef53c96f</id>
<content type='text'>
56e8e19 otrx: support TRX from stdin when extracting
a37ccaf otrx: support unsorted partitions offsets
1fa145e otrx: extract shared code opening &amp; parsing TRX format
4ecefda otrx: allow validating TRX from stdin
cf01e69 otrx: avoid unneeded fseek() when calculating CRC32

Signed-off-by: Rafał Miłecki &lt;rafal@milecki.pl&gt;
(cherry picked from commit 942facd14f0a13fa3aeb4238d866e764f5caec8c)
</content>
</entry>
<entry>
<title>otrx: use firmware-utils.git to avoid code duplication</title>
<updated>2021-12-13T12:57:28Z</updated>
<author>
<name>Rafał Miłecki</name>
</author>
<published>2021-07-30T11:02:41Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/commit/?id=3d05cd40a635d706604999b6a262597044e148b2'/>
<id>urn:sha1:3d05cd40a635d706604999b6a262597044e148b2</id>
<content type='text'>
Signed-off-by: Rafał Miłecki &lt;rafal@milecki.pl&gt;
(cherry picked from commit 7c4d79aa1c3595e2be36d1449cf63404f301f748)
</content>
</entry>
<entry>
<title>busybox: update to 1.33.2 bugfix release</title>
<updated>2021-12-04T19:20:06Z</updated>
<author>
<name>Hannu Nyman</name>
</author>
<published>2021-12-04T14:49:42Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/pepe2k/commit/?id=5124b96e7235af834b18c98651267bf7baffcb02'/>
<id>urn:sha1:5124b96e7235af834b18c98651267bf7baffcb02</id>
<content type='text'>
Update busybox to 1.33.2, which includes only 5 commits after 1.33.1

  Bug fix release. 1.33.2 has fixes for hush and ash (parsing fixes)
  and unlzma (fix where we could read before beginning of buffer).

https://git.busybox.net/busybox/log/?h=1_33_2

Signed-off-by: Hannu Nyman &lt;hannu.nyman@iki.fi&gt;
</content>
</entry>
</feed>
