Skip to content
Snippets Groups Projects
  1. Aug 28, 2018
  2. Aug 26, 2018
  3. Aug 24, 2018
  4. Aug 23, 2018
  5. Aug 21, 2018
    • Matthias Schiffer's avatar
      modules: update OpenWrt · 2b19266a
      Matthias Schiffer authored
      24984b07e8ef tools/bison: Update to 3.0.5
      50dbaee55c4d cns3xxx: fix mtu setting with kernel 4.14
      705262f4d305 kernel: bump 4.14 to 4.14.65
      c3be3c0e1d14 kernel: bump 4.9 to 4.9.122
      4b4a6308e711 OpenWrt v18.06.1: revert to branch defaults
      70255e3d624c OpenWrt v18.06.1: adjust config defaults
      5eb055306fc6 rpcd: update to latest git HEAD
      e11df1eac62f openssl: update to version 1.0.2p
      033472e1bd9c kernel: bump kernel 4.9 to version 4.9.120
      bfc9a4401bbe kernel: bump kernel 4.14 to version 4.14.63
      75e4d2d18c0c ramips: add missing USB packages into ASL26555-16M
      5b1c6570ca6f brcm47xx: cosmetic fix in model detection
      1fe7a17aed63 ath25: Do not build images for ubnt2 and ubnt5
      9cc774f91abb at91: do not build image for at91-q5xr5
      508adbd871df uci: bump to source date 2018-08-11
      ec1c66f53fff mwlwifi: update to version 10.3.8.0-20180615
      9866622d8179 tools: findutils: fix compilation with glibc 2.28
      c448f798404a tools: m4: fix compilation with glibc 2.28
      67f91dfa5150 kernel: bump 4.14 to 4.14.62
      e4a57509311e kernel: bump 4.9 to 4.9.119
      433c94f29688 wpa_supplicant: fix CVE-2018-14526
      2a8d8adfb0a9 Revert "libevent2: Don't build tests and samples"
      9fe68b436947 kernel: move e1000e patches to backports
      bd451d46a695 kernel: add pending e1000e fixes
      aeec1dd7bab6 firmware: intel-microcode: bump to 20180703
      8d903be35ad0 curl: Fix CVE-2018-0500
      1e4b5c8b1f18 ustream-ssl: update to version 2018-05-22
      ea22e3df3eb0 mbedtls: Update to 2.12.0
      0d5a041095a1 mbedtls: Activate the session cache
      69c75f076a08 mbedtls: cleanup config patch
      6603a0c23274 mbedtls: Deactivate platform abstraction
      ae1ae0751332 kernel: remove stray 4.4 references
      fb5f02616084 kernel: backport upstream fix for CVE-2018-5390
      16d89ef291f7 kernel: bump 4.14 to 4.14.61
      ca3174e4e9de kernel: bump 4.9 to 4.9.118
      0990dfc9cebe Revert "kernel: usb: dwc2 DMA alignment fixes"
      be4ab7e178a9 brcm2708: fix w1 patch
      6a27c2f4b1a4 base-files: drop fwtool_pre_upgrade
      fe90d14880ad libevent2: Don't build tests and samples
      eb06fa6cf73a kernel: generic: fix problem with w1-gpio-custom
      25cb85abe7f3 wwan: Fix teardown for sierra_net driver
      7e03be7e2e32 kernel: leds-apu2 remove boardname check
      8139438fc036 dropbear: close all active clients on shutdown
      c3df07ab3b2b kernel: gpio-nct5104d remove boardname check
      5a430bd13f7a build: README punctuation pendantry
      888cc05cf578 build: Update README & github help
      da9a7a9a51b3 basefiles: Reword sysupgrade message
      d10189939549 linux: update license tag to use correct SPDX tag
      1e5bd42d63e5 kernel: usb: dwc2 DMA alignment fixes
      c61f543532a6 firmware: amd64-microcode: update to 20180524
      4017c528ca9e kernel: remove linux 4.4 support
      e3ab280e4700 kernel: remove linux 3.18 support
      5742a2ba35e2 libubox: fix mirror hash
      23d4f663e33a netifd: update to latest git HEAD
      cb043ad8dada Revert "mt7620: gsw: make IntPHY and ExtPHY share mdio addr 4 possible"
      6c075777d5af kernel: add missing ARM64_SSBD symbol
      b40316c21a96 mt7620: gsw: make IntPHY and ExtPHY share mdio addr 4 possible
      f63463591b9f ramips: fix gigabit switch PHY access on MDIO
      9ce7aa325ebd kernel: bump 4.14 to 4.14.60 for 18.06
      9e1530b2a35e kernel: bump 4.9 to 4.9.117 for 18.06
      
      Fixes build with glibc 2.28.
      2b19266a
  6. Aug 19, 2018
  7. Aug 15, 2018
  8. Aug 10, 2018
  9. Aug 07, 2018
  10. Aug 06, 2018
    • Ruben Barkow's avatar
    • Andreas Ziegler's avatar
      modules: update OpenWrt · f6dee438
      Andreas Ziegler authored
      8be3af93b4 uclient: update to latest git HEAD
      2589f8589c sdk: include arch/arm/ Linux includes along with arch/arm64/ ones
      7d15f96eaf iperf: bump to 2.0.12
      4f3082583a sdk: bundle usbip userspace sources
      5f23d0f3db include/feeds.mk: fix distfeeds.conf without per-feed repos
      5828113986 bcm53xx: backport BCM5301X/BCM53573 dts commits from 4.19+
      f7e647ca7b bcm53xx: switch USB 3.0 PHY DT description to use MDIO bus
      9c110b97c6 bcm53xx: backport DT fix for I2C controller interrupt
      b5b5f5dfa6 kernel: backport mtd support for subpartitions in DT
      f8e57f450d kernel: backport mtd patches with Broadcom of_match_table-s
      f7668334a8 Re-enable arbitrary IPv6 addresses as outer ip4-in-ip6 tunnel source address
      d700eb187b kernel: remove duplicate #define's in at803x Ethernet PHY driver
      20c64dabb6 kernel: re-add patch for AT8032 Ethernet PHY
      93782d5e8e ca-certificates[18.06]]: remove myself as PKG_MAINTAINER
      ce234299bc OpenWrt v18.06.0: revert to branch defaults
      03b693064b OpenWrt v18.06.0: adjust config defaults
      b0b5c64c22 Revert "ar71xx: define switch for rb-952ui-5ac2nd"
      3442ec5d57 ar71xx: define switch for rb-952ui-5ac2nd
      f4798d37f1 imagebuilder: add function to show manifest
      a3dd6c939d ar71xx:add support for E750G v8
      11a5128b98 ar71xx:add support for E750A v4
      21ad5fb1ea ar71xx:add support for E558 v2
      4dc0ff8183 brcm2708: split sdcard.img.gz into a sysupgrade and factory image
      f24e012997 base-files: network.sh: gracefully handle missing network.interface ubus ns
      d4a4f06589 iwinfo: update to version 2018-07-24
      4a39d8cfd0 iwinfo: bump to latest git HEAD
      cb73dd21a3 ar71xx: rbspi: fix RB wAP AC gpio conflict and LED
      bb06f6d3ba ar71xx: add missing diag LED support for RB wAP 2nD
      c8e8ff1c9f brcm47xx: rework model detection
      ca0c649a38 bcm53xx: revert SPI controller commit breaking flash reads
      cf5a892430 dnsmasq: bump to dnsmasq v2.80test3
      bf1b0fad2b dnsmasq: don't use network functions at boottime (FS#1542)
      cb9d5f0a7c dnsmasq: bump to latest patches on 2.80rc2
      962e86d9af brcm47xx: revert upstream commit breaking BCM4718A1
      29aab93ea2 mac80211: backport brcmfmac fixes & debugging helpers from 4.18
      4e7f4777b0 odhcpd: update to latest git HEAD
      da0dd6adc2 ubus: update to latest git HEAD
      3f0d44b8de firewall: update to latest git HEAD and build with LTO
      69021e9b89 ubus: update to latest git HEAD
      6302f0161b libubox: update to latest git HEAD
      f91a0f3b1a wireguard-tools: add wireguard_watchdog script
      f1dbfa1937 wireguard: bump to 0.0.20180718
      ff91b32d26 wireguard: bump to 0.0.20180708
      b84a1c56f3 build: do not alter global default package selection from profiles
      90b15b00a2 WDR4900v1 remove dt node for absent hw crypto.
      a80276235a iproute2: tc: backport canonical cake support
      5b12057d7c build: fix compile error when a package includes itself in PROVIDES
      8a0ad2660a apm821xx: fix sata access freezes
      f6dee438
  11. Aug 04, 2018
  12. Aug 03, 2018
  13. Aug 01, 2018
  14. Jul 29, 2018
  15. Jul 25, 2018
  16. Jul 23, 2018
  17. Jul 22, 2018
    • Sven Eckelmann's avatar
      gluon-client-bridge: Revert "move IPv4 local subnet route to br-client (#1312)" · 3ef28a46
      Sven Eckelmann authored
      The commit b3762fc6 ("gluon-client-bridge: move IPv4 local subnet route
      to br-client (#1312)") moves the IPv4 prefix from the local-port interface
      to br-client. A client requesting an IPv4 connection to the IPv4 anycast
      address of the node (the device running gluon) will create following
      packets:
      
      1. ARP packet from client to get the MAC of the mac address of the anycast
         IPv4 address
      2. ARP reply from node to client with the anycast MAC address for the IPv4
         anycast address
      3. IPv4 packet from client which requires reply (for example ICMP echo
         request)
      4. ARP request for the client MAC address for its IPv4 address in prefix4
         (done with the mac address of br-client and transmitted over br-client)
      5. IPv4 packet from node (transmitted over br-client with br-client MAC
         address) as reply for the client IPv4 packet (for example ICMP echo
         reply)
      
      The step 4 and 5 are problematic here because packets use the node specific
      MAC addresses from br-client instead of the anycast MAC address. The client
      will receive the ARP packet with the node specific MAC address and change
      their own neighbor IP (translation) table. This will for example break the
      access to the status page to the connected device or the anycast DNS
      forwarder implementation when the client roams to a different node.
      
      This reverts commit b3762fc6 and adds an
      upgrade code to remove local_node_route on on existing installations.
      3ef28a46
    • Sven Eckelmann's avatar
      gluon-mesh-batman-adv: Drop IPv4 anycast related packets from/to bat0 · fc59d520
      Sven Eckelmann authored
      The commit b3762fc6 ("gluon-client-bridge: move IPv4 local subnet route
      to br-client (#1312)") moves the IPv4 prefix from the local-port interface
      to br-client. A client requesting an IPv4 connection to the IPv4 anycast
      address of the node (the device running gluon) will create following
      packets:
      
      1. ARP packet from client to get the MAC of the mac address of the anycast
         IPv4 address
      2. ARP reply from node to client with the anycast MAC address for the IPv4
         anycast address
      3. IPv4 packet from client which requires reply (for example ICMP echo
         request)
      4. ARP request for the client MAC address for its IPv4 address in prefix4
         (done with the mac address of br-client and transmitted over br-client)
      5. IPv4 packet from node (transmitted over br-client with br-client MAC
         address) as reply for the client IPv4 packet (for example ICMP echo
         reply)
      
      The step 4 is extremely problematic here. ARP replies with the anycast IPv4
      address must not be submitted or received via bat0 - expecially not when it
      contains an node specific MAC address as source. When it is still done then
      the wrong MAC address is stored in the batadv DAT cache and ARP packet is
      maybe even forwarded to clients. This latter is especially true for ARP
      requests which are broadcast and will be flooded to the complete mesh.
      
      Clients will see these ARP packets and change their own neighbor IP
      (translation) table. They will then try to submit the packets for IPv4
      anycast addresses to the complete wrong device in the mesh. This will for
      example break the access to the status page to the connected device or the
      anycast DNS forwarder implementation. Especially the latter causes extreme
      latency when clients try to connect to server using a domain name or even
      breaks the connection setup process completely. Both are caused by the
      unanswered DNS requests which at first glance look like packet loss.
      
      An node must therefore take care of:
      
      * not transmitting ARP packets related to the anycast IPv4 address over
        bat0
      * drop ARP packets related to the anycast IPv4 when they are received on
        bat0 from a still broken node
      * don't accept ARP packets related to the anycast IPv4 replies on local
        node when it comes from bat0
      
      Fixes: b3762fc6 ("gluon-client-bridge: move IPv4 local subnet route to br-client (#1312)")
      fc59d520
  18. Jul 19, 2018
  19. Jul 18, 2018
  20. Jul 17, 2018
Loading