289 Commits

Author SHA1 Message Date
Zoltan HERPAI
7967aa9315 CC: tcpdump: upgrade to 4.9.2
Fixes:
CVE-2017-11541
CVE-2017-11541
CVE-2017-11542
CVE-2017-11542
CVE-2017-11543
CVE-2017-11543
CVE-2017-12893
CVE-2017-12894
CVE-2017-12895
CVE-2017-12896
CVE-2017-12897
CVE-2017-12898
CVE-2017-12899
CVE-2017-12900
CVE-2017-12901
CVE-2017-12902
CVE-2017-12985
CVE-2017-12986
CVE-2017-12987
CVE-2017-12988
CVE-2017-12989
CVE-2017-12990
CVE-2017-12991
CVE-2017-12992
CVE-2017-12993
CVE-2017-12994
CVE-2017-12995
CVE-2017-12996
CVE-2017-12997
CVE-2017-12998
CVE-2017-12999
CVE-2017-13000
CVE-2017-13001
CVE-2017-13002
CVE-2017-13003
CVE-2017-13004
CVE-2017-13005
CVE-2017-13006
CVE-2017-13007
CVE-2017-13008
CVE-2017-13009
CVE-2017-13010
CVE-2017-13011
CVE-2017-13012
CVE-2017-13013
CVE-2017-13014
CVE-2017-13015
CVE-2017-13016
CVE-2017-13017
CVE-2017-13018
CVE-2017-13019
CVE-2017-13020
CVE-2017-13021
CVE-2017-13022
CVE-2017-13023
CVE-2017-13024
CVE-2017-13025
CVE-2017-13026
CVE-2017-13027
CVE-2017-13028
CVE-2017-13029
CVE-2017-13030
CVE-2017-13031
CVE-2017-13032
CVE-2017-13033
CVE-2017-13034
CVE-2017-13035
CVE-2017-13036
CVE-2017-13037
CVE-2017-13038
CVE-2017-13039
CVE-2017-13040
CVE-2017-13041
CVE-2017-13042
CVE-2017-13043
CVE-2017-13044
CVE-2017-13045
CVE-2017-13046
CVE-2017-13047
CVE-2017-13048
CVE-2017-13049
CVE-2017-13050
CVE-2017-13051
CVE-2017-13052
CVE-2017-13053
CVE-2017-13054
CVE-2017-13055
CVE-2017-13687
CVE-2017-13688
CVE-2017-13689
CVE-2017-13690
CVE-2017-13725
[thanks to Stijn Tintel for listing the CVEs in LEDE 2375e27.]

Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
2017-09-18 20:11:38 +02:00
Felix Fietkau
2437f1b68c tcpdump: fix tcpdump-mini build on glibc 2.25
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-09-18 19:55:11 +02:00
Daniel Engberg
2919526df4 tcpdump: Update to 4.9.1
Update tcpdump to 4.9.1

Fixes:
 * CVE-2017-11108: Fix bounds checking for STP.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-09-18 15:28:54 +02:00
Hauke Mehrtens
229ff30873 tcpdump: update to version 4.9.0
This fixes the following 41 security problems:
 + CVE-2016-7922: buffer overflow in print-ah.c:ah_print().
 + CVE-2016-7923: buffer overflow in print-arp.c:arp_print().
 + CVE-2016-7924: buffer overflow in print-atm.c:oam_print().
 + CVE-2016-7925: buffer overflow in print-sl.c:sl_if_print().
 + CVE-2016-7926: buffer overflow in print-ether.c:ethertype_print().
 + CVE-2016-7927: buffer overflow in print-802_11.c:ieee802_11_radio_print().
 + CVE-2016-7928: buffer overflow in print-ipcomp.c:ipcomp_print().
 + CVE-2016-7929: buffer overflow in print-juniper.c:juniper_parse_header().
 + CVE-2016-7930: buffer overflow in print-llc.c:llc_print().
 + CVE-2016-7931: buffer overflow in print-mpls.c:mpls_print().
 + CVE-2016-7932: buffer overflow in print-pim.c:pimv2_check_checksum().
 + CVE-2016-7933: buffer overflow in print-ppp.c:ppp_hdlc_if_print().
 + CVE-2016-7934: buffer overflow in print-udp.c:rtcp_print().
 + CVE-2016-7935: buffer overflow in print-udp.c:rtp_print().
 + CVE-2016-7936: buffer overflow in print-udp.c:udp_print().
 + CVE-2016-7937: buffer overflow in print-udp.c:vat_print().
 + CVE-2016-7938: integer overflow in print-zeromq.c:zmtp1_print_frame().
 + CVE-2016-7939: buffer overflow in print-gre.c, multiple functions.
 + CVE-2016-7940: buffer overflow in print-stp.c, multiple functions.
 + CVE-2016-7973: buffer overflow in print-atalk.c, multiple functions.
 + CVE-2016-7974: buffer overflow in print-ip.c, multiple functions.
 + CVE-2016-7975: buffer overflow in print-tcp.c:tcp_print().
 + CVE-2016-7983: buffer overflow in print-bootp.c:bootp_print().
 + CVE-2016-7984: buffer overflow in print-tftp.c:tftp_print().
 + CVE-2016-7985: buffer overflow in print-calm-fast.c:calm_fast_print().
 + CVE-2016-7986: buffer overflow in print-geonet.c, multiple functions.
 + CVE-2016-7992: buffer overflow in print-cip.c:cip_if_print().
 + CVE-2016-7993: a bug in util-print.c:relts_print() could cause a
      buffer overflow in multiple protocol parsers (DNS, DVMRP, HSRP, IGMP,
      lightweight resolver protocol, PIM).
 + CVE-2016-8574: buffer overflow in print-fr.c:frf15_print().
 + CVE-2016-8575: buffer overflow in print-fr.c:q933_print().
 + CVE-2017-5202: buffer overflow in print-isoclns.c:clnp_print().
 + CVE-2017-5203: buffer overflow in print-bootp.c:bootp_print().
 + CVE-2017-5204: buffer overflow in print-ip6.c:ip6_print().
 + CVE-2017-5205: buffer overflow in print-isakmp.c:ikev2_e_print().
 + CVE-2017-5341: buffer overflow in print-otv.c:otv_print().
 + CVE-2017-5342: a bug in multiple protocol parsers (Geneve, GRE, NSH,
      OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in
      print-ether.c:ether_print().
 + CVE-2017-5482: buffer overflow in print-fr.c:q933_print().
 + CVE-2017-5483: buffer overflow in print-snmp.c:asn1_parse().
 + CVE-2017-5484: buffer overflow in print-atm.c:sig_print().
 + CVE-2017-5485: buffer overflow in addrtoname.c:lookup_nsap().
 + CVE-2017-5486: buffer overflow in print-isoclns.c:clnp_print().

The size of the package is only incread very little:
new size:
306430 tcpdump_4.9.0-1_mips_24kc.ipk
130324 tcpdump-mini_4.9.0-1_mips_24kc.ipk

old size:
302782 tcpdump_4.8.1-1_mips_24kc.ipk
129033 tcpdump-mini_4.8.1-1_mips_24kc.ipk

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-09-18 15:26:45 +02:00
Felix Fietkau
c9690f5764 tcpdump: reduce size of -mini by removing more infrequently used protocols
This removes:
- BGP
- CDP
- SCTP

MIPS binary .ipk size is reduced from ~150k to ~130k

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-09-18 15:24:13 +02:00
Paul Wassi
714dc85e8b CC: net/utils/tcpdump: update to 4.8.1
Update tcpdump to upstream release 4.8.1

Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2017-09-18 14:51:15 +02:00
Rafał Miłecki
cb4f0719a5 iw: backport support for "channels" command
Signed-off-by: Rafał Miłecki <zajec5@gmail.com>

Backport of r49388

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@49389 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-06-19 19:56:13 +02:00
Hauke Mehrtens
af131d792e CC: curl: detect the library as renamed wolfssl
Without this patch curl does not detect the new cyassl/wolfssl version
and would be build without ssl support instead when cyassl was selected.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>


git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@48900 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-03-03 22:30:22 +00:00
Jo-Philipp Wich
805193d361 curl: bump pkg revision
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@48875 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-03-02 09:51:47 +00:00
Hauke Mehrtens
ceaedb643a CC: curl: fix CVE-2016-0755
This fixes the following security problem:
CVE-2016-0755: NTLM credentials not-checked for proxy connection re-use
http://curl.haxx.se/docs/adv_20160127B.html

backport of r48614.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>


git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@48872 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-03-01 22:42:51 +00:00
Felix Fietkau
4537d45ae8 iw: update to version 4.3, sync with trunk r47782
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@48870 3c298f89-4303-0410-b956-a3cf2f4a3e73
2016-03-01 21:32:22 +00:00
Hauke Mehrtens
db9be1fa75 CC: curl: fix some security vulnerabilities
This fixes the following security vulnerabilities in curl:
* CVE-2015-3143
* CVE-2015-3144
* CVE-2015-3145
* CVE-2015-3148
* CVE-2015-3153
* CVE-2015-3236
* CVE-2015-3237

This was fixed in trunk with update to version 7.43.0 in r46169.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>


git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@46312 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-07-12 16:03:51 +00:00
Felix Fietkau
51a243f3c1 ebtables: remove partially broken musl fix
See http://patchwork.ozlabs.org/patch/493573/ for more information

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/branches/chaos_calmer@46293 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-07-10 11:37:36 +00:00
Jo-Philipp Wich
3196465dca iwinfo: fix segfault in mtd parsing code (#19768)
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45863 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-06-01 04:31:45 +00:00
Jo-Philipp Wich
17c4ddb6b9 iwinfo: fix hostapd status query (#19662)
* Rework hostapd and wpa_supplicant status parsing code
 * Add support for querying available HT rates
 * Relax definition of restricted channels

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45766 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-05-26 11:50:04 +00:00
Jo-Philipp Wich
8182400cd3 iptables: reduce binary size
* drop unused lenient restore patch
 * instead of statically linking core extensions, build shared libraries
   for reuse in fw3
 * strip outdated match revisions and aliases to trim down library size

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45758 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-05-26 09:16:50 +00:00
John Crispin
f535cc952d comgt: the package contained too many files
fixes #19698

Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45741 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-05-23 15:29:46 +00:00
John Crispin
d5eaa13084 conntrack-tools: add init script for conntrackd
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45737 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-05-23 15:28:56 +00:00
Felix Fietkau
ad6c82948f iptables: disable unused xml support to save some space
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45617 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-05-06 00:59:41 +00:00
Felix Fietkau
fe0ecbfd95 curl: replace polarssl run-time version check with a compile-time one
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45609 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-05-05 10:12:49 +00:00
John Crispin
86a65a43fe uqmi: auto retry when bringup fails
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45556 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-21 13:18:46 +00:00
John Crispin
2549c08bb2 umbim: auto retry when bringup fails
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45555 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-21 13:18:40 +00:00
Steven Barth
8f5b903b1f nftables: bump version
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45513 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-20 06:30:34 +00:00
Steven Barth
439090c6c9 iproute2: update to v4.0.0
The most significant change from the previous version is the trimming of
the 300-ip_tiny.patch to lib/utils.c where a section previously patched
had vanished.  That section of the patch was removed.

Built and lightly tested on ar71xx against uClibc and musl.

Signed-off-by: Russell Senior <russell@personaltelco.net>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45512 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-20 06:26:09 +00:00
Felix Fietkau
6cbee90d4d iptables: remove obsolete files
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45494 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-18 17:59:31 +00:00
Felix Fietkau
61c2a3ada1 iptables: remove layer7 leftovers (#19506)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45481 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-17 18:52:24 +00:00
Steven Barth
0699cfb2e5 network: also shorten virtual interface names of ppp and 3g/4g connections
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45479 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-17 14:47:12 +00:00
Felix Fietkau
250b325fe3 iptables: remove layer7 support
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45424 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-13 22:23:19 +00:00
John Crispin
927fd29673 iptables: revert r40916
it causes problems with newer iptables when ipv6 is disabled as iptc uncoditionally links ip6tc

Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45350 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-10 08:31:06 +00:00
John Crispin
e45f5fecf6 wpan-tools: adds wpan-tools utility
This patch adds the wpan-tools (iwpan) utility to OpenWRT
build system. This utility required to manage IEE-802.15.4
devices.

Signed-off-by: Varka Bhadram <varkab@cdac.in>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45349 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-10 08:30:11 +00:00
John Crispin
5531c0bb18 umbim: update to latest git HEAD
merge patches from Bjørn Mork

http://patchwork.ozlabs.org/patch/459277/

Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45327 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-09 10:32:01 +00:00
Nicolas Thill
9456cf255e packages: use $(LN) macro, make symlinks relative
Signed-off-by: Nicolas Thill <nico@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45250 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-04-03 00:07:43 +00:00
Steven Barth
32a01e24cb nftables: bump to 2015-03-24
Signed-off-by: Steven Barth <steven@midlink.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45158 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-30 17:04:14 +00:00
Felix Fietkau
df4ff466d6 iputils: fix musl compile errors
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45111 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-29 04:30:12 +00:00
Felix Fietkau
1e80ec959a arptables: fix musl build issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45109 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-29 04:29:56 +00:00
Felix Fietkau
f19ffb31b5 ebtables: fix musl build issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45108 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-29 04:29:44 +00:00
Felix Fietkau
522de0a73a iperf3: use -D_GNU_SOURCE to fix build error on musl
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45103 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-29 04:26:57 +00:00
Felix Fietkau
109ce79745 conntrack-tools: add a build dependency on librpc (fixes #19342)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-29 01:44:14 +00:00
Felix Fietkau
51cb25f2bd conntrack-tools: add more missing include statements
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45096 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-28 18:26:24 +00:00
Felix Fietkau
372e356767 conntrack-tools: update package (along with associated libraries) to the latest version, fix musl build issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@45077 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-28 10:19:26 +00:00
Felix Fietkau
5c1980b7d7 iproute2: fix build error with musl (#19302)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44973 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-25 00:11:07 +00:00
Felix Fietkau
658472564b build: remove obsolete references to cris and avr32
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-24 10:07:40 +00:00
Felix Fietkau
8c110bd8ba iwinfo: update to the latest version, fixes 802.11ac capability reporting
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44948 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-23 12:31:28 +00:00
John Crispin
06f50f14fd curl: fix PKG_CONFIG_DEPENDS
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44925 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-21 21:47:41 +00:00
Felix Fietkau
1f2abeb61b ifenslave: remove package, as it depends on obsolete kernels
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44891 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-19 11:59:09 +00:00
Felix Fietkau
2b33958d70 ipset: use in-tree kernel modules to fix crash issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44883 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-19 11:58:17 +00:00
Nicolas Thill
7105a54bcb packages: some (e)glibc fixes after r44701
Signed-off-by: Nicolas Thill <nico@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44842 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-16 12:25:06 +00:00
John Crispin
568a27b077 ipset: add ipmark support
Below you'll find a patch to add ipmark module support to ipset.
Changeset 44671 already bumped ipset to version 6.24, but it's still
compiled without ipmark support. This is a requirement for mwan3 v1.6.

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44742 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-13 08:38:17 +00:00
John Crispin
335f082662 ipset: Bump to 6.24
Included you'll find a patch to bump ipset to version 6.24. This
version supports the ip,fwmark set, which is needed for mwan3 1.6.

Signed-off-by: Jeroen Louwes <jeroen.louwes@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44671 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-11 16:41:58 +00:00
Felix Fietkau
61cd5ce994 iw: update to 3.17
Patch by Bryan Forbes <bryan@reigndropsfall.net>

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@44654 3c298f89-4303-0410-b956-a3cf2f4a3e73
2015-03-11 15:02:32 +00:00