Staging tree of Piotr Dymacz https://git.openwrt.org/openwrt/staging/pepe2k/atom?h=v21.02.3 2022-03-24T08:40:12Z 2022-03-24T08:40:12Z Petr Štetiar 2022-03-24T05:45:04Z urn:sha1:f65edc9b990c2bcc10c9e9fca29253adc6fe316d Tavis has just reported, that he was recently trying to track down a reproducible crash in a compressor. Believe it or not, it really was a bug in zlib-1.2.11 when compressing (not decompressing!) certain inputs. Tavis has reported it upstream, but it turns out the issue has been public since 2018, but the patch never made it into a release. As far as he knows, nobody ever assigned it a CVE. Suggested-by: Tavis Ormandy <taviso@gmail.com> References: https://www.openwall.com/lists/oss-security/2022/03/24/1 Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit b3aa2909a79aeff20d594160b207a89dc807c033) (cherry picked from commit 3965dda0fa70dc9408f1a2e55a3ddefde78bd50e) 2022-03-15T17:50:32Z Daniel Golle 2021-03-01T14:06:33Z urn:sha1:92020d42425090d8e30554c41bed2d650263e06e Don't download all of vim just to build xxd. Use a tight tarball containing only xxd sources instead. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 2b94aac7a128c9d9f4343af2265b362e8b5d5013) 2022-03-15T17:50:26Z Daniel Golle 2021-02-28T19:26:07Z urn:sha1:17e95532842c4d62b30669490eb00b39cf8ff743 U-Boot requires xxd to create the default environment from an external file as done in uboot-mediatek. Build xxd (only, not the rest of vim) as part of tools to make sure it is present on the buildhost. Reported-by: David Bauer <mail@david-bauer.net> Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit c4dd2441e7875c9550820f8380b3e41ca619ef27) 2022-03-06T19:56:23Z Josef Schlehofer 2022-02-23T20:32:41Z urn:sha1:03271046869ec2e681e0732e3ed6460ab1537243 Release notes: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.4.2-relnotes.txt ``` It includes the following security fix * In some situations the X.509 verifier would discard an error on an unverified certificate chain, resulting in an authentication bypass. Thanks to Ilya Shipitsin and Timo Steinlein for reporting. ``` Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com> (cherry picked from commit 495c4f4e197166a6fa997d4620ca6c241e3abd45) 2022-03-06T19:56:23Z Rosen Penev 2021-09-22T07:49:33Z urn:sha1:8ed3b5b04b4983d75f4192bab470c6fb7eb9c50f Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit 03bb3412a2b8bf8ac69e062ea9fd88e2c6c6fb57) 2022-03-06T19:56:23Z Rosen Penev 2021-09-02T02:29:40Z urn:sha1:2736a5df94134fcad19dbd429fa21761536937b7 Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit f78ad901e1ce07c42a9f5e670c39dbdcea15eb87) 2022-03-06T19:56:23Z Rosen Penev 2021-06-19T21:45:11Z urn:sha1:49b2e6365d054aa49c88478ab2000eb2dd439cd8 Fix wrong FPIC variable usage. Fixes compilation under sparc64 host. Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry picked from commit bf4dbbb55e2b8e23f186e1334f1e9ce6a3a8ddfe) 2022-02-16T19:38:47Z Rosen Penev 2021-09-18T07:40:41Z urn:sha1:b7af850bd2a944d01ee2f30b79062fed025e9a02 Signed-off-by: Rosen Penev <rosenp@gmail.com> (cherry-picked from commit aae4bf7c622688281c500c7e193e44bab67713e4) 2022-02-16T19:38:47Z Felix Fietkau 2022-01-27T12:20:15Z urn:sha1:5d553d8767b1f0fd61ac07d6fa98dde790d94bb1 The $INODE64 symbol variants are not present, since the base system always uses 64-bit file offsets Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry-picked from commit 53ebacacf93278c6e71052eb5b3708c599129e55) 2022-02-16T19:38:47Z Sergey V. Lobanov 2021-11-29T16:07:34Z urn:sha1:c8d6a7c84e81d415bad22dd381e7aed236ff6df2 Added patch for MacOS without 32 bit inodes support (__DARWIN_ONLY_64_BIT_INO_T is true) This patch based on discussion https://github.com/archmac/bootstrap/issues/4 Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in> (cherry-picked from commit 8fedc17d01806c8a4bf4ed9e83a9523677d37bbd)