aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* openvpn: update to 2.4.4Magnus Kroken2017-09-282-34/+58
| | | | | | | | | Fixes CVE-2017-12166: out of bounds write in key-method 1. Remove the mirror that was temporarily added during the 2.4.3 release. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
* kernel: update 4.9 to 4.9.52Stijn Tintel2017-09-282-3/+3
| | | | | | | | Refresh patches. Compile-tested on x86/64. Runtime-tested on x86/64. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* hostapd: update wpa_supplicant p2p configLorenzo Santina2017-09-281-91/+278
| | | | | | | | | | | | | | | | Update the config file to the latest version. Added CONFIG_EAP_FAST=y because it was the only missing flag about EAP compared to full config. Removed NEED_80211_COMMON flag because it is not part of config file, it is set by the hostapd upstream Makefile. Other flags are the same as before. Signed-off-by: Lorenzo Santina <lorenzo.santina@edu.unito.it> [add punctuation to commit msg] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* hostapd: update wpa_supplicant mini configLorenzo Santina2017-09-281-100/+292
| | | | | | | | | | | | Update the config file to the latest version. Enabled flags are the same as before. Removed NEED_80211_COMMON flag because it is not part of config file, it is set by the hostapd upstream Makefile. Signed-off-by: Lorenzo Santina <lorenzo.santina@edu.unito.it> [add punctuation to commit msg] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* hostapd: update wpa_supplicant full configLorenzo Santina2017-09-281-93/+280
| | | | | | | | | | | | | | | Update the config file to the latest version. Enabled flags are the same as before. Commented CONFIG_IEEE80211W=y flag because it is set in the Makefile, only if the driver supports it. Removed NEED_80211_COMMON flag because it is not part of config file, it is set by the hostapd upstream Makefile. Signed-off-by: Lorenzo Santina <lorenzo.santina@edu.unito.it> [add punctuation to commit msg] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* hostapd: update hostapd mini configLorenzo Santina2017-09-281-19/+237
| | | | | | | | | Update the config file to the latest version. Enabled flags are the same as before. Signed-off-by: Lorenzo Santina <lorenzo.santina@edu.unito.it> [add punctuation to commit msg] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* hostapd: update hostapd full configLorenzo Santina2017-09-281-27/+235
| | | | | | | | | | | | | | Update the config file to the latest version. Enabled flags are the same as before. Removed flag CONFIG_WPS2 because it is no more needed due to this changelog (2014-06-04 - v2.2): "remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled whenever CONFIG_WPS=y is set". Signed-off-by: Lorenzo Santina <lorenzo.santina@edu.unito.it> [add punctuation to commit msg] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* curl: fix disable threaded resolverHans Dedecker2017-09-271-0/+36
| | | | | | | | | | | Bump to 7.55.1 broke the disable threaded resolver feature as reported in https://github.com/curl/curl/issues/1784. As a result curl is always compiled with the threaded resolver feature enabled which causes a dependency issue on pthread for uclibc. Fix this issue by backporting the upstream curl commit which fixes disable threaded resolver. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* ipset: replace patch that was reverted upstreamStijn Tintel2017-09-262-31/+25
| | | | | | Use the correct prefix for backports while at it. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* Revert "brcm47xx: Fix sysupgrade with E1200v1"Hauke Mehrtens2017-09-251-1/+0
| | | | | | | | | | This reverts commit 31e9445b7e614f54daa0caf3148e223d088311ab. "Linksys E1200 V1" is not a valid board name, as the brcm47xx arch code can not detect this device. Stefan Lippers-Hollmann also found a typo in this patch "cybetran" instead of "cybertan". Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* uboot-mvebu: add OpenSSL compat patchesMarko Ratkaj2017-09-252-0/+249
| | | | | | | | | | | | | | Fixes the following build issue: "undefined reference to `EVP_MD_CTX_create'" From: Jelle van der Waa <jelle@vdwaa.nl> The rsa_st struct has been made opaque in 1.1.x, add forward compatible code to access the n, e, d members of rsa_struct. EVP_MD_CTX_cleanup has been removed in 1.1.x and EVP_MD_CTX_reset should be called to reinitialise an already created structure. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
* uboot-mvebu: fix SETEXPR redefinition warningMarko Ratkaj2017-09-251-12/+8
| | | | Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
* uboot-mvebu: add missing UBOOT_MAKE_FLAGS variableMarko Ratkaj2017-09-251-0/+2
| | | | | | This patch removes "/bin/sh: HOSTCPPFLAGS: command not found" errors douring build. Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
* Revert "toolchain/gdb: update to version 8.0.1"Stijn Tintel2017-09-253-5/+5
| | | | | | | | | | Since version 8.0, gdb requires at least gcc 4.8. Unfortunately some of the buildbot slaves don't meet this requirement, and fail to build LEDE after the gdb upgrade. Revert to the previous gdb version for now. This reverts commit 592abe9ef53f921554d48085d6482d4507b3e142. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* samba36: add Package/samba/DefaultStijn Tintel2017-09-251-12/+12
| | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* ipset: bump to 6.34Stijn Tintel2017-09-252-3/+34
| | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* toolchain/gdb: update to version 8.0.1Ryan Mounce2017-09-253-5/+5
| | | | | | | | Fixes CVE-2017-9778. Signed-off-by: Ryan Mounce <ryan@mounce.com.au> [reference fixed CVE] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* curl: bump to 7.55.1Stijn Tintel2017-09-253-11/+11
| | | | | | | | | | | | Update 200-no_docs_tests.patch. Refresh patches. Fixes the following CVEs: - CVE-2017-1000099 - CVE-2017-1000100 - CVE-2017-1000101 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* iperf: bump to 2.0.10Stijn Tintel2017-09-251-9/+4
| | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* brcm47xx: Fix sysupgrade with E1200v1Rosen Penev2017-09-241-0/+1
| | | | | | Entry was missing for some reason. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* sunxi: add Olimex A20-OLinuXino-LIME2-eMMCLucian Cristian2017-09-244-0/+123
| | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com> [replaced u-boot patch with original version from u-boot git] Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* tools: flex: fix segfault with glibc 2.26+Marko Ratkaj2017-09-241-0/+27
| | | | | | | | | Fix segmentation fault caused by implicit declaration of function 'reallocarray'. Added patch will enable reallocarray() prototype in glibc 2.26+ on Linux systems. This fix will be included in flex 2.6.5. Fixes LEDE issue: FS#1003 (Flex does not build with GCC 7.2) Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
* kernel: don't scrimp on memory on big ironPhilip Prindeville2017-09-242-4/+10
| | | | | | | | | x86_64 platforms typically don't lack memory, so don't needlessly economize memory if fq_codel on capable platforms. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> [Add a comment to the patch] Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: kmod-usb-storage-uasJames Christopher Adduono2017-09-221-0/+19
| | | | | | | | | This will allow you to build and package the uas.ko module. With more routers supporting USB 3.0 host this could help speed up activities like DLNA and Samba, as well as reduce CPU utilization over BOT mass storage drivers. Signed-off-by: James Christopher Adduono <jc@adduono.com>
* ramips: fix missing mediatek wdtKevin Darbyshire-Bryant2017-09-222-2/+2
| | | | | | | | | | | | | | | mediatek MT7621 soc watchdog DTS id was renamed from "mtk,mt7621-wdt" to "mediatek,mt7621-wdt" when driver upstreamed to kernel 4.5 Update mt7621.dtsi & mt7628an.dtsi definitions to match upstreamed kernel. Restores hardward watchdog functionality on mt7621 devices under linux 4.9 Tested on: MIR3G Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* uhttp: update to latest versionAdrian Panella2017-09-211-4/+4
| | | | | | | | | | | | | | 3fd58e9 2017-08-19 uhttpd: add manifest support 88c0b4b 2017-07-09 file: fix basic auth regression 99957f6 2017-07-02 file: remove unused "auth" member from struct path_info c0a569d 2017-07-02 proc: expose HTTP_AUTH_USER and HTTP_AUTH_PASS ad93be7 2017-07-02 auth: store parsed username and password fa51d7f 2017-07-02 proc: do not declare empty process variables a8bf9c0 2017-01-26 uhttpd: Add TCP_FASTOPEN support e6cfc91 2016-10-25 lua: ensure that PATH_INFO starts with a slash Signed-off-by: Adrian Panella <ianchi74@outlook.com>
* libubox: fix uloop race conditionHans Dedecker2017-09-211-3/+3
| | | | | | 7a10576 uloop: Fix race condition in SIGCHLD handling Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* kernel: update 4.9 to 4.9.51Stijn Tintel2017-09-2013-39/+39
| | | | | | | | | | | | Refresh patches. Compile-tested on octeon and x86/64. Runtime-tested on octeon and x86/64. Fixes the following CVEs: - CVE-2017-14106 - CVE-2017-14497 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* arm-trusted-firmware-sunxi: depend on sunxi targetStijn Tintel2017-09-201-0/+1
| | | | | | | | | The arm-trusted-firmware-sunxi package is only used by the Allwinner A64, so only make it selectable for its subtarget sunxi/cortexa53. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be> Acked-by: Hauke Mehrtens <hauke@hauke-m.de> Reviewed-by: Jonas Gorski <jonas.gorski@gmail.com>
* at91bootstrap: New package at91bootstrapSandeep Sheriker Mallikarjun2017-09-202-0/+173
| | | | | | | | | at91bootstrap is a second-level bootloader for Microchip(Atmel AT91) SoCs. It provides a set of algorithms to manage the hardware initialization and to download the main application or a third-level bootloader(i.e. uboot) from specified boot media to main memory and execute it. Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* uboot-at91: Add support for SAMA5D4 Xplained boardSandeep Sheriker Mallikarjun2017-09-201-2/+22
| | | | | | | Add support for SAMA5D4 Xplained board and options to select & build u-boot configs for different media storage. Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* uboot-at91: Add support for SAMA5D2 Xplained boardSandeep Sheriker Mallikarjun2017-09-201-1/+16
| | | | | | | Add support for SAMA5D2 Xplained board and options to select & build u-boot configs for different media storage. Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* uboot-at91: Add support for SAMA5D3 Xplained boardSandeep Sheriker Mallikarjun2017-09-201-1/+15
| | | | | | | Add support for SAMA5D3 Xplained board and options to select & build u-boot configs for different media storage. Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* uboot-at91: move BUILD_SUBTARGET from U-Boot/Default to devicesSandeep Sheriker Mallikarjun2017-09-201-1/+2
| | | | | | | | currenlty U-Boot/Default supports only at91 legacy devices.To add sama5 support, moving BUILD_SUBTARGET from U-Boot/Default to target devices. Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* at91: Add UBI parameters for sama5d4.Sandeep Sheriker Mallikarjun2017-09-201-1/+6
| | | | | | Add UBIFS_OPTS & UBINIZE_OPTS parameters for sama5d4 Xplained board. Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* at91: Add SAMA5D4 deviceSandeep Sheriker Mallikarjun2017-09-202-0/+11
| | | | | | | Add support for SAMA5D4 with target device as at91-sama5d4_xplained in SAMA5 subtarget and build images for SAMA5D4 Xplained board. Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* at91: Add SAMA5D2 deviceSandeep Sheriker Mallikarjun2017-09-202-0/+11
| | | | | | | Add support for SAMA5D2 with target device as at91-sama5d2_xplained in SAMA5 subtarget and build images for SAMA5D2 Xplained board. Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* at91: Install zImage.Sandeep Sheriker Mallikarjun2017-09-201-0/+6
| | | | | | Installing zImage to bin folder of device target. Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* build: add image command for installing zImage file.Sandeep Sheriker Mallikarjun2017-09-201-0/+5
| | | | Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* at91: Renaming subtarget sama5d3 to sama5Sandeep Sheriker Mallikarjun2017-09-205-8/+8
| | | | | | | | | Renaming at91 subtarget sama5d3 to sama5 and using at91-sama5d3_xplained as a target device in sama5 subtarget.This will enable to add other sama5d2 & sama5d4 target devices in sama5 subtraget.This will avoid code duplication when sama5d2 & sama5d4 added as different subtarget. Signed-off-by: Sandeep Sheriker Mallikarjun <sandeepsheriker.mallikarjun@microchip.com>
* build: remove @ as it's causing an errorPhilip Prindeville2017-09-201-1/+1
| | | | | | | | Since $(DownloadMethod/unknown) is being invoked in the expansion of $(call locked ...) anyway, you can't have an @ because the shell doesn't know what to do with it. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* ipq-wifi: fix missing define of PKG_NAMEChen Minqiang2017-09-201-0/+1
| | | | Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* usbutils: avoid duplicating the git revisionPhilip Prindeville2017-09-201-1/+1
| | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* openvpn: add "extra-certs" optionSven Roederer2017-09-192-1/+2
| | | | | | | | This option is used to specify a file containing PEM certs, to complete the local certificate chain. Which is quite usefull for "split-CA" setups. Signed-off-by: Sven Roederer <devel-sven@geroedel.de> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* sunxi: add Olimex A20-OlinuXino-LIME2Lucian Cristian2017-09-182-0/+17
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* hostapd: ft_over_ds supportLorenzo Santina2017-09-181-2/+4
| | | | | | Add support for ft_over_ds flag in ieee80211r Signed-off-by: Lorenzo Santina <lorenzo.santina@edu.unito.it>
* hostapd: ft_psk_generate_local supportLorenzo Santina2017-09-181-2/+4
| | | | | | | | Add support for ft_psk_generate_local flag in ieee80211r Signed-off-by: Lorenzo Santina <lorenzo.santina@edu.unito.it> [original author] Signed-off-by: Sergio <mailbox@sergio.spb.ru>
* ath10k-firmware: use firmware from git instead of extra downloadHauke Mehrtens2017-09-181-28/+3
| | | | | | | | Instead of manually downloading the files again we can also take the same files directly from the ath10k-firmware git which was cloned before. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* sunxi: Add A64 support with cortex53 subtargetHauke Mehrtens2017-09-185-1/+135
| | | | | | | | | | | | This adds initial support for the A64 Allwinner SoC to LEDE. It will be build in the new cortexa53 subtarget. Currently it only supports the pine64 and the image is able to boot on this SoC. Camera, Ethernet, HDMI and other parts are currently not working. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* sunxi: Backport patches from kernel 4.11 for A64Hauke Mehrtens2017-09-1814-0/+640
| | | | | | | This backports some more patches from kernel 4.11 adding more devices to the device tree of the A64 SoC. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>