OpenWrt v19.07.6 Changelog

This changelog lists all commits done in OpenWrt since the v19.07.5 tag, grouped by subsystem. The changes are chronologically ordered from top to bottom and cover the Git repository history until the tagging of the 19.07.6 release.

See also the release notes that provide a more accessible overview of the main changes in 19.07.6.

42e478e build/json: add filesystem information (+2)
58138df build, imagebuilder: Do not require libncurses-dev (+2)
79b1fa1 build, imagebuilder: Do not require compilers (+4)
2c37993 build/prereq: merge ifndef IB block together (+1,-5)

e290024 glibc: update to latest 2.27 commit (+2,-2)

d0b8be7 generic: ipeth: fix iOS 14 tethering (+44)
cb58c7f kernel: bump 4.14 to 4.14.212 (+42,-86)
c9388fa kernel: bump 4.14 to 4.14.214 (+32,-178)
c7b9c85 kernel: bump 4.14 to 4.14.215 (+9,-9)

53814da at91bootstrap: Add PKG_MIRROR_HASH to fix download (+1)
733e62a uboot-at91: Add PKG_MIRROR_HASH to fix download (+1)

c03f018 openssl: update to 1.1.1i (+2,-2)
e30d3ea mbedtls: update to 2.16.9 (+2,-2)
8055e38 dnsmasq: Backport some security updates (+2.3K,-3)

7711a59 wireless-regdb: bump to latest release 2020-04-29 (+2,-994)
fb52c40 wireless-regdb: Update to version 2020.11.20 (+2,-2)

cb58c7f kernel: bump 4.14 to 4.14.212 (+42,-86)
c9388fa kernel: bump 4.14 to 4.14.214 (+32,-178)

c9388fa kernel: bump 4.14 to 4.14.214 (+32,-178)

cb58c7f kernel: bump 4.14 to 4.14.212 (+42,-86)
b14eecc ath79: image: fix initramfs for safeloader devices (+2)
c9388fa kernel: bump 4.14 to 4.14.214 (+32,-178)

c9388fa kernel: bump 4.14 to 4.14.214 (+32,-178)

c9388fa kernel: bump 4.14 to 4.14.214 (+32,-178)

cb58c7f kernel: bump 4.14 to 4.14.212 (+42,-86)

cb58c7f kernel: bump 4.14 to 4.14.212 (+42,-86)

c9388fa kernel: bump 4.14 to 4.14.214 (+32,-178)

cb58c7f kernel: bump 4.14 to 4.14.212 (+42,-86)
c9388fa kernel: bump 4.14 to 4.14.214 (+32,-178)
c7b9c85 kernel: bump 4.14 to 4.14.215 (+9,-9)

3f5fecf ramips: enable LED VCC for Asus RT-AC51U (+9,-11)

0a59e2a mac80211: Update to version 4.19.161-1 (+158,-243)

Description: The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the "-crl_download" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971
Commits:
c03f018 openssl: update to 1.1.1i (+2,-2)

Description: An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attacker underflows the 'num' parameter to memcpy(), this vulnerability could lead to undefined behavior such as writing to out-of-bounds memory and potentially remote code execution. Furthermore, this memcpy() implementation allows for program execution to continue in scenarios where a segmentation fault or crash should have occurred. The dangers occur in that subsequent execution and iterations of this code will be executed with this corrupted data.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6096
Commits:
e290024 glibc: update to latest 2.27 commit (+2,-2)

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25681
Commits:
8055e38 dnsmasq: Backport some security updates (+2.3K,-3)

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25682
Commits:
8055e38 dnsmasq: Backport some security updates (+2.3K,-3)

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25683
Commits:
8055e38 dnsmasq: Backport some security updates (+2.3K,-3)

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25684
Commits:
8055e38 dnsmasq: Backport some security updates (+2.3K,-3)

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25685
Commits:
8055e38 dnsmasq: Backport some security updates (+2.3K,-3)

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25686
Commits:
8055e38 dnsmasq: Backport some security updates (+2.3K,-3)

Description: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Link: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25687
Commits:
8055e38 dnsmasq: Backport some security updates (+2.3K,-3)