Commit graph

58695 commits

Author SHA1 Message Date
Hauke Mehrtens
40326394fa OpenWrt v23.05.6: revert to branch defaults
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-08-16 00:10:55 +02:00
Hauke Mehrtens
761ee326d7 OpenWrt v23.05.6: adjust config defaults
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-08-16 00:10:50 +02:00
David Bauer
539228933c ath79: add extended AR9344 reset sequence
Some checks failed
Build Kernel / Build all affected Kernels (push) Has been cancelled
According to datasheet, on AR9344 the switch and switch analog need to
be reset first before initiating a full reset.

Resetting these systems fixes spurious reset hangs on Atheros AR9344
SoCs.

Link: https://github.com/freifunk-gluon/gluon/issues/2904

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 144af32b47)

account for
torvalds/linux/commit/41ccb3a0eb57741eebd72e51e011ef098bb1493d
torvalds/linux/commit/5eddff6add4feebac625f256d2fe292935351ce3
[felix.bau@gmx.de: adjust patch so it applies without commits above]
Signed-off-by: Felix Baumann <felix.bau@gmx.de>
Link: https://github.com/openwrt/openwrt/pull/19759
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-08-14 20:27:40 +02:00
Hauke Mehrtens
fc876e9d50 kernel: Add additional net scheduler fix
Some checks failed
Build Kernel / Build all affected Kernels (push) Has been cancelled
Build all core packages / Build all core packages for selected target (push) Has been cancelled
This fixes a problem introduced in the net scheduler fixes recently
backported.

Fixes: 242bca458f ("kernel: backport fixes missing in stable")
Link: https://github.com/openwrt/openwrt/pull/19747
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-08-12 11:53:10 +02:00
Christian Korber
29f3f276a8 hostapd: fix logging of configuration content
Some checks failed
Build all core packages / Build all core packages for selected target (push) Has been cancelled
This commit is an adoption of the fix for #14049 to
apply it for owrt-23.05.

Signed-off-by: Christian Korber <ck@dev.tdt.de>
Link: https://github.com/openwrt/openwrt/pull/17718
Link: https://github.com/openwrt/openwrt/pull/19658
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-08-10 21:52:47 +02:00
Hauke Mehrtens
242bca458f kernel: backport fixes missing in stable
Some checks failed
Build Kernel / Build all affected Kernels (push) Has been cancelled
Build all core packages / Build all core packages for selected target (push) Has been cancelled
The a stable commit depend son these additional backports.

Without these additional backports this commit causes kernel warnings:
commit e269f29e9395527bc00c213c6b15da04ebb35070
Author: Lion Ackermann <nnamrec@gmail.com>
Date:   Mon Jun 30 15:27:30 2025 +0200
    net/sched: Always pass notifications when child class becomes empty
    [ Upstream commit 103406b38c600fec1fe375a77b27d87e314aea09 ]

Link: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.15.189&id=e269f29e9395527bc00c213c6b15da04ebb35070

Link: https://github.com/openwrt/openwrt/pull/19695
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-08-07 20:03:51 +02:00
Hauke Mehrtens
5509043972 toolchain: glibc: Update glibc 2.37 to recent HEAD
Some checks failed
Build all core packages / Build all core packages for selected target (push) Has been cancelled
Build and Push prebuilt tools container / Build and Push all prebuilt containers (push) Has been cancelled
Build Toolchains / Build Toolchains for each target (push) Has been cancelled
Build host tools / Build host tools for linux and macos based systems (push) Has been cancelled
23021eda75 malloc: Use __get_nprocs on arena_get2 (BZ 30945)
9a1bdd7df7 S390: Do not clobber r7 in clone [BZ #31402]
2fadb0d9b4 support: use 64-bit time_t (bug 30111)
08ac41cf08 make ‘struct pthread’ a complete type
9da8174362 nptl: Unconditionally use a 32-byte rseq area
a11c8d521d Include sys/rseq.h in tst-rseq-disable.c
829b64598b linux: Use rseq area unconditionally in sched_getcpu (bug 31479)
6f28bfa4a0 LoongArch: Correct {__ieee754, _}_scalb -> {__ieee754, _}_scalbf
314b731dd8 AArch64: Improve SVE memcpy and memmove
d0da4fb615 Add HWCAP2_MOPS from Linux 6.5 to AArch64 bits/hwcap.h
4c3985b4c8 AArch64: Add support for MOPS memcpy/memmove/memset
e7f8117b60 AArch64: Cleanup ifuncs
455b1b2b7f AArch64: Cleanup emag memset
cb48c2603a AArch64: Add memset_zva64
3dcb8fde81 AArch64: Remove Falkor memcpy
882b7dc2ab aarch64: correct CFI in rawmemchr (bug 31113)
bbc290aad4 aarch64: fix check for SVE support in assembler
fb8f66c22d AArch64: Check kernel version for SVE ifuncs
6eab323a3c powerpc: Fix ld.so address determination for PCREL mode (bug 31640)
89ce64b269 iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)
ae014a15b4 nptl: Fix tst-cancel30 on kernels without ppoll_time64 support
f75c298e74 CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bug 31677)
5eea50c440 CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678)
a8070b3104 CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678)
6e106dc214 CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)
1aa819a693 elf: Also compile dl-misc.os with $(rtld-early-cflags)
bcd2bf36b4 sparc: Remove 64 bit check on sparc32 wordsize (BZ 27574)
2a41cb9c71 login: Check default sizes of structs utmp, utmpx, lastlog
36ef0d2f2f login: structs utmp, utmpx, lastlog _TIME_BITS independence (bug 30701)
90304900c3 nscd: Use time_t for return type of addgetnetgrentX
f4de99ea83 hurd: fix build of tst-system.c
3956fd48d3 Force DT_RPATH for --enable-hardcoded-path-in-tests
340ca2d514 s390x: Fix segfault in wcsncmp [BZ #31934]
182f4a8c75 Add AT_RSEQ_* from Linux 6.3 to elf.h
a858172cf9 nptl: fix potential merge of __rseq_* relro symbols
643709c6ee elf: Make dl-rseq-symbols Linux only
7f769dd008 Linux: Make __rseq_size useful for feature detection (bug 31965)
40a1e1798b resolv: Allow short error responses to match any query (bug 31890)
3da1b0064a resolv: Do not wait for non-existing second DNS response after error (bug 30081)
708f507e30 resolv: Track single-request fallback via _res._flags (bug 31476)
88b3554ed9 tests: replace system by xsystem
40fb943e12 linux: Update the mremap C implementation [BZ #31968]
aaed1cc9fc mremap: Update manual entry
590e58b652 Add mremap tests
aca9c7d5de resolv: Fix tst-resolv-short-response for older GCC (bug 32042)
6e642a47fa Fix name space violation in fortify wrappers (bug 32052)
f82e0922de x86: Fix bug in strchrnul-evex512 [BZ #32078]
6eb9420551 support: Add FAIL test failure helper
5784740194 stdio-common: Add test for vfscanf with matches longer than INT_MAX [BZ #27650]
bb6cfec3dd Make tst-ungetc use libsupport
810fa2488c ungetc: Fix uninitialized read when putting into unused streams [BZ #27821]
5259c8f052 ungetc: Fix backup buffer leak on program exit [BZ #27821]
5b853745fd posix: Use <support/check.h> facilities in tst-truncate and tst-truncate64
3d0acc5b20 nptl: Use <support/check.h> facilities in tst-setuid3
0141e7c794 libio: Attempt wide backup free only for non-legacy code
a4d9258090 elf: Change ldconfig auxcache magic number (bug 32231)
4b2b81deb4 nptl: initialize rseq area prior to registration
b2ab6ce0f5 nptl: initialize cpu_id_start prior to rseq registration
71fca07505 x86: Avoid integer truncation with large cache sizes (bug 32470)
d5ff2fa5af x86_64: Sort fpu/multiarch/Makefile
3607863050 x86_64: Add log2 with FMA
c0cae389fb x86_64: Add expm1 with FMA
f2947239b6 x86_64: Add log1p with FMA
ec7c01efee x86: Check the lower byte of EAX of CPUID leaf 2 [BZ #30643]
0c6f7cd550 elf: Fix slow tls access after dlopen [BZ #19924]
f0c2fcce5f x86: Only align destination to 1x VEC_SIZE in memset 4x loop
ec40bb7938 sysdeps/x86/Makefile: Split and sort tests
b0eef2f27f x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)
7e84df6892 x86: Improve large memset perf with non-temporal stores [RHEL-29312]
7d1c950582 x86/string: Fixup alignment of main loop in str{n}cmp-evex [BZ #32212]
19d8959b4d elf: Avoid some free (NULL) calls in _dl_update_slotinfo
abe2bb2b47 elf: Support recursive use of dynamic TLS in interposed malloc
9083997843 misc: Add support for Linux uio.h RWF_NOAPPEND flag
a3d7865b09 Fix underallocation of abort_msg_s struct (CVE-2025-0395)
24d69e33fc stdlib: Test using setenv with updated environ [BZ #32588]
5288c29247 assert: Reformat Makefile.
b989519fe1 assert: Add test for CVE-2025-0395
7feb4c414e AArch64: Improve generic strlen
7d16ea8b42 AArch64: Optimize memset
06eafb057a AArch64: Remove zva_128 from memset
93e4b0796e math: Improve layout of expf data
c747695762 AArch64: Add SVE memset
b4a783aa30 AArch64: Use prefer_sve_ifuncs for SVE memset
032545ebd3 math: Improve layout of exp/exp10 data
7403ede2d7 elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static
5b1ea2a223 support: Use const char * argument in support_capture_subprogram_self_sgid
1e29775735 support: Add support_record_failure_barrier
e8e6c54353 elf: Test case for bug 32976 (CVE-2025-4802)
0f4e5f764b x86_64: Fix typo in ifunc-impl-list.c.
fba1c47cb5 elf: Fix subprocess status handling for tst-dlopen-sgid (bug 32987)
9643281f9c support: Don't fail on fchown when spawning sgid processes
245dffa9ed support: Pick group in support_capture_subprogram_self_sgid if UID == 0
ea179f9a37 Fix error reporting (false negatives) in SGID tests
58b768addb posix: Fix double-free after allocation failure in regcomp (bug 33185)

Link: https://github.com/openwrt/openwrt/pull/19552
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-27 19:55:36 +02:00
Hauke Mehrtens
47b419b7af wireless-regdb: Update to version 2025.07.10
6953f19 wireless-regdb: Update regulatory info for Indonesia (ID) for 2025
2e8214e wireless-regdb: Permit 320 MHz bandwidth in 6 GHz band for GB
a94f685 wireless-regdb: Update regulatory info for Egypt (EG) for 2024
7628ce2 wireless-regdb: Update regulatory rules for Brazil (BR) on 6GHz
4411b39 wireless-regdb: Update regulatory info for Vietnam (VN) for 2025
490f136 wireless-regdb: Update regulatory info for Estonia (EE) for 2024
c56c663 wireless-regdb: update regulatory rules for Paraguay (PY) on 6 GHz for 2025
5a8ced5 wireless-regdb: Update regulatory info for CEPT countries for 6GHz listed by WiFi Alliance
5fd8ee3 wireless-regdb: update regulatory rules for Bosnia and Herzegovina (BA) for 6 GHz
e05260a wireless-regdb: update regulatory database based on preceding changes

Link: https://github.com/openwrt/openwrt/pull/19474
(cherry picked from commit 7fe06b7f56)
Link: https://github.com/openwrt/openwrt/pull/19539
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-27 19:54:19 +02:00
Ivan Romanov
6179b450fb build: fix CMake generator for non-Ninja builds
OpenWRT by default uses the Ninja generator, but some packages disable
Ninja and use the default Unix Makefiles generator. This generator can
be overridden in the user environment with `CMAKE_GENERATOR`. This patch
explicitly sets the correct generator when `PKG_USE_NINJA:=0`.

In particular, the `mt76` package uses the Makefiles generator.

Signed-off-by: Ivan Romanov <drizt72@zoho.eu>
Link: https://github.com/openwrt/openwrt/pull/16263
(cherry picked from commit 4646aa1699)
Link: https://github.com/openwrt/openwrt/pull/19525
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-27 19:53:03 +02:00
John Audia
d06733b599 libxml2: update to 2.14.5
Release Notes:
    https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.7
    https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.13.8
    https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.3
    https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.4
    https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.5

Fixes:
CVE-2025-32415 CVE-2025-32414 CVE-2025-6170 CVE-2025-49794 CVE-2025-49795 CVE-2025-49796

Build system: x86/64
Build-tested: x86/64-glibc
Run-tested: x86/64-glibc

Signed-off-by: John Audia <therealgraysky@proton.me>
Link: https://github.com/openwrt/openwrt/pull/19383
(cherry picked from commit c08c2d6eb3)
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
Link: https://github.com/openwrt/openwrt/pull/19485
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-27 19:50:59 +02:00
Andre Heider
235d6eec75 prereq-build: limit python distutils check to <v3.12
Some checks failed
Build all core packages / Build all core packages for selected target (push) Has been cancelled
Build host tools / Build host tools for linux and macos based systems (push) Has been cancelled
v3.12 won't have it anymore.

Signed-off-by: Andre Heider <a.heider@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/16699
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 8191c8980f)
Link: https://github.com/openwrt/openwrt/pull/19513
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-24 22:00:58 +02:00
Paul Spooren
ba84c3640b prereq-build: add Python 3.12 support
This reverts commit 09b7e1955c.

Signed-off-by: Paul Spooren <mail@aparcar.org>
Link: https://github.com/openwrt/openwrt/pull/16699
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit bf059f7108)
Signed-off-by: Andreas Gnau <andreas.gnau@iopsys.eu>
Link: https://github.com/openwrt/openwrt/pull/19513
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-24 22:00:58 +02:00
Shiji Yang
6dcf9882e4 kernel: bump 5.15 to 5.15.189
Some checks failed
Build Kernel / Build all affected Kernels (push) Has been cancelled
Build all core packages / Build all core packages for selected target (push) Has been cancelled
Build host tools / Build host tools for linux and macos based systems (push) Has been cancelled
Changelog: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.189

Manually rebased patches:
  bcm27xx/patches-5.15/950-0600-xhci-quirks-add-link-TRB-quirk-for-VL805.patch[1]
  bcm27xx/patches-5.15/950-0606-usb-xhci-add-VLI_TRB_CACHE_BUG-quirk.patch[1]
  bcm27xx/patches-5.15/950-0717-usb-xhci-add-a-quirk-for-Superspeed-bulk-OUT-transfe.patch[1]
  bcm53xx/patches-5.15/180-usb-xhci-add-support-for-performing-fake-doorbell.patch[1]

All other patches are automatically refreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.15.189&id=e262ff8d634cf6e0028fb7b3643cdd8b758513be

Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/19466
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-21 23:04:05 +02:00
Shiji Yang
b887384eb0 kernel: bump 5.15 to 5.15.188
Changelog: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.188

There are no patches that need to be refreshed.

Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/19466
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-21 23:04:05 +02:00
Hauke Mehrtens
50243ef2d8 mac80211: Update to version 6.1.145-1
Some checks failed
Build Kernel / Build all affected Kernels (push) Has been cancelled
Build all core packages / Build all core packages for selected target (push) Has been cancelled
This updates mac80211 to version 6.1.145-1. This code is based on Linux
6.1.145 and contains all fixes included in the upstream wireless
subsystem from that kernel version. This includes many bugfixes and also
some security fixes.

The removed patches were applied upstream.

Link: https://github.com/openwrt/openwrt/pull/16948
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-16 19:47:22 +02:00
Shiji Yang
6747179486 kernel: bump 5.15 to 5.15.187
Some checks failed
Build Kernel / Build all affected Kernels (push) Has been cancelled
Build all core packages / Build all core packages for selected target (push) Has been cancelled
Build host tools / Build host tools for linux and macos based systems (push) Has been cancelled
Changelog: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.187

New Kconfig symbol:
  x86: enable MITIGATION_TSA[1]

All patches are automatically refreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.15.187&id=f2b75f1368af22bb290f128e29bc64b619a9d54d

Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/19250
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-13 15:49:39 +02:00
Shiji Yang
d4a2742822 kernel: bump 5.15 to 5.15.186
Changelog: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.186

Manually rebased patch:
  realtek/patches-5.15/800-net-mdio-support-hardware-assisted-indirect-access.patch[1-2]

All other patches are automatically refreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.15.186&id=694456462ed63a06adbb0b7f2396a2eb5cc153c0
[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.15.186&id=014ad9210373d2104f6ef10e6bb999a7a0a4c50e

Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/19250
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-13 15:49:39 +02:00
Álvaro Fernández Rojas
ae5488a5cc kernel: r8125: update to v9.016.00
Some checks failed
Build Kernel / Build all affected Kernels (push) Has been cancelled
Build all core packages / Build all core packages for selected target (push) Has been cancelled
Changelog: https://github.com/openwrt/rtl8125/compare/9.015.00...9.016.00

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit 60606fa980)
2025-06-11 18:43:16 +02:00
Álvaro Fernández Rojas
db1f15d576 kernel: r8168: add RSS variant
Instead of enabling RSS support, let's introduce a variant and let users
choose between both variants since it can cause network issues.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit cb3fc1aef9)
2025-06-11 18:43:00 +02:00
Álvaro Fernández Rojas
f316798bda kernel: r8127: rss: enable ENABLE_MULTIPLE_TX_QUEUE
We need both ENABLE_RSS_SUPPORT and ENABLE_MULTIPLE_TX_QUEUE in order to
support multiple RX and TX queues.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit 7615de6ef0)
2025-06-11 18:43:00 +02:00
Álvaro Fernández Rojas
565809404d kernel: r8126: rss: enable ENABLE_MULTIPLE_TX_QUEUE
We need both ENABLE_RSS_SUPPORT and ENABLE_MULTIPLE_TX_QUEUE in order to
support multiple RX and TX queues.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit a3e51a3956)
2025-06-11 18:43:00 +02:00
Pavel Kubelun
56e044645d kernel: r8125: rss: enable ENABLE_MULTIPLE_TX_QUEUE
We need both ENABLE_RSS_SUPPORT and ENABLE_MULTIPLE_TX_QUEUE in order to
support multiple RX and TX queues.

Signed-off-by: Pavel Kubelun <be.dissent@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/18509
[bump release, improve commit description and package changes]
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit d127963a46)
2025-06-11 18:43:00 +02:00
Pavel Kubelun
97bb0a4360 kernel: r8125: disable ASPM
Disable ASPM support for this NIC, fixing strange behavior problems, such as
increased latency, strange uneven throughput, etc.
With this option disabled the NIC achieves stable performance.
Upsteam r8169 driver disables ASPM by default for this NIC.

Signed-off-by: Pavel Kubelun <be.dissent@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/18509
[bump release, fix commit description, split 2nd tx queue part]
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit f99b39fd0c)
2025-06-11 18:43:00 +02:00
Álvaro Fernández Rojas
8204c594ce kernel: r8127: load module at boot time
This allows the network interface naming to be stable, free from any
possible interaction from external USB network devices that might
claim usb* interface names.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit b5680bd113)
2025-06-11 18:34:53 +02:00
Álvaro Fernández Rojas
187213c669 kernel: r8126: load module at boot time
This allows the network interface naming to be stable, free from any
possible interaction from external USB network devices that might
claim usb* interface names.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit 9bb151d0c6)
2025-06-11 18:34:36 +02:00
Álvaro Fernández Rojas
ad51fee6c9 kernel: r8125: load module at boot time
This allows the network interface naming to be stable, free from any
possible interaction from external USB network devices that might
claim usb* interface names.

Signed-off-by: Pavel Kubelun <be.dissent@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/18509
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit ce9f539672)
2025-06-11 18:34:19 +02:00
Álvaro Fernández Rojas
ae242eb34e kernel: r8168: load module at boot time
This allows the network interface naming to be stable, free from any
possible interaction from external USB network devices that might
claim usb* interface names.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit 617961403c)
2025-06-11 18:34:01 +02:00
Álvaro Fernández Rojas
ea7d1f0913 kernel: r8101: load module at boot time
This allows the network interface naming to be stable, free from any
possible interaction from external USB network devices that might
claim usb* interface names.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit 7aeb837bf4)
2025-06-11 18:33:46 +02:00
Álvaro Fernández Rojas
5bd18cb7c7 package: add kmod-r8127 ethernet driver
r8127 is an out of tree driver provided by Realtek for RTL8127 devices.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
(cherry picked from commit 851ea69d8e)
2025-06-11 18:32:45 +02:00
John Audia
040588ca75 openssl: update to 3.0.16
Some checks are pending
Build all core packages / Build all core packages for selected target (push) Waiting to run
Changes between 3.0.15 and 3.0.16 [11 Feb 2025]

CVE-2024-13176[1] - Fixed timing side-channel in ECDSA signature
computation.

There is a timing signal of around 300 nanoseconds when the top word of
the inverted ECDSA nonce value is zero. This can happen with significant
probability only for some of the supported elliptic curves. In
particular the NIST P-521 curve is affected. To be able to measure this
leak, the attacker process must either be located in the same physical
computer or must have a very fast network connection with low latency.

CVE-2024-9143[2] - Fixed possible OOB memory access with invalid
low-level GF(2^m) elliptic curve parameters.

Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit
values for the field polynomial can lead to out-of-bounds memory reads
or writes. Applications working with "exotic" explicit binary (GF(2^m))
curve parameters, that make it possible to represent invalid field
polynomials with a zero constant term, via the above or similar APIs,
may terminate abruptly as a result of reading or writing outside of
array bounds. Remote code execution cannot easily be ruled out.

1. https://www.openssl.org/news/vulnerabilities.html#CVE-2024-13176
2. https://www.openssl.org/news/vulnerabilities.html#CVE-2024-9143

Build system: x86/64
Build-tested: bcm27xx/bcm2712
Run-tested: bcm27xx/bcm2712

Signed-off-by: John Audia <therealgraysky@proton.me>
Link: https://github.com/openwrt/openwrt/pull/17947
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit b4e6fd7b76)
(cherry picked from commit 3abbc15454)
Link: https://github.com/openwrt/openwrt/pull/19073
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-11 15:43:15 +02:00
Hauke Mehrtens
d0179c8176 wolfssl: Update to version 5.7.6
This fixes multiple bugs and also minor security problems.

Changelog:
https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.4-stable
https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.6-stable

The package size increases:
525814 bin/packages/mips_24kc/base/libwolfssl5.7.2.e624513f-5.7.2-r1.apk
549408 bin/packages/mips_24kc/base/libwolfssl5.7.6.e624513f-5.7.6-r1.apk

Link: https://github.com/openwrt/openwrt/pull/17742
(cherry picked from commit 0a7e92c244)
(cherry picked from commit 6f7bbd0395)
Link: https://github.com/openwrt/openwrt/pull/19073
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-11 15:43:15 +02:00
Hauke Mehrtens
d903a23de4 grub2: set -std=gnu17
Some checks failed
Build all core packages / Build all core packages for selected target (push) Has been cancelled
Build and Push prebuilt tools container / Build and Push all prebuilt containers (push) Has been cancelled
Build Toolchains / Build Toolchains for each target (push) Has been cancelled
Build host tools / Build host tools for linux and macos based systems (push) Has been cancelled
Arch Linux updated to GCC15 which now defaults to GNU23 as the default
instead of GNU17[1], and this breaks grub compilation.

This is fixed in more recent grub2 versions.

[1] https://gcc.gnu.org/gcc-15/porting_to.html#c23

Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:37:01 +02:00
Robert Marko
bc48bf7013 jsonfilter: update to Git HEAD (2025-04-18)
8a86fb78235b build: set GNU17 for lemon compilation

Link: https://github.com/openwrt/openwrt/pull/18525
(cherry picked from commit 891c8244f2)
Link: https://github.com/openwrt/openwrt/pull/18581
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit e0069e7587)
Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:37:01 +02:00
Hauke Mehrtens
2c36ed03e5 toolchain: gdb: set -std=gnu17
Arch Linux updated to GCC15 which now defaults to GNU23 as the default
instead of GNU17[1], and this breaks gdb compilation.

This is fixed in more recent gdb versions.

[1] https://gcc.gnu.org/gcc-15/porting_to.html#c23

Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:36:54 +02:00
Robert Marko
bd9b964b24 toolchain: binutils: fix compilation with GCC15
GCC15 has switched the C language default from GNU17 to GNU23[1] and this
causes builds to fail with:
In file included from mips-opc.c:29:
mips-opc.c: In function 'decode_mips_operand':
mips-formats.h:86:7: error: expected identifier or '(' before 'static_assert'
   86 |       static_assert[(1 << (SIZE)) == ARRAY_SIZE (MAP)]; \
      |       ^~~~~~~~~~~~~
mips-opc.c:214:15: note: in expansion of macro 'MAPPED_REG'
  214 |     case 'z': MAPPED_REG (0, 0, GP, reg_0_map);
      |               ^~~~~~~~~~

So, backport upstream fix for this[2] to fix compilation with GCC15.
Patch for 2.40 was manually refreshed as part of the S390 code does not
exist in 2.40 as it was added after it.

[1] https://gcc.gnu.org/gcc-15/porting_to.html#c23
[2] https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=8ebe62f3f0d27806b1bf69f301f5e188b4acd2b4

Fixes: #18678
Link: https://github.com/openwrt/openwrt/pull/18681
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit d3216173ab)
Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:28:26 +02:00
Robert Marko
75d2f9f1c8 tools: gmp: fix compilation with GCC15
Fedora 42 updated to GCC15 which now defaults to GNU23 as the default
instead of GNU17[1], and this breaks GMP compilation by failing to find
a working compiler test.

Its been fixed upstream [2][3], so backport the fix to fix GCC15 compilation.

[1] https://gcc.gnu.org/gcc-15/porting_to.html#c23
[2] https://gmplib.org/repo/gmp/rev/8e7bb4ae7a18
[3] https://gmplib.org/repo/gmp/rev/d66d66d82dbb

Link: https://github.com/openwrt/openwrt/pull/18506
(cherry picked from commit 31800db91d)
Link: https://github.com/openwrt/openwrt/pull/18581
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit d9fccc8e1a)
Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:28:26 +02:00
Nick Hainke
898c336e89 tools/b43-tools: update to latest version, fix C23 build
Update b43-tools to the latest upstream version to fix a
compilation error with C23:

  util.h:25:15: error: 'bool' cannot be defined via 'typedef'
     25 | typedef _Bool bool;
        |               ^~~~

Changelog:
c6fc53f replace custom bool typedef with <stdbool.h>
dadf30c fix format warning in compilation
2fe10ea b43-fwdump: Fix forwarding of arguments to disassembler

Link: https://github.com/openwrt/openwrt/pull/18708
Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit f8da45e25d)
Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:28:26 +02:00
Hauke Mehrtens
fe37f2e52a tools: elfutils: fix compilation with GCC15
Backport fix from upstream to fix compilation with host GCC 15.
https://sourceware.org/git/?p=elfutils.git;a=commitdiff_plain;h=7508696d107ca01b65ce8273c881462a8658f90f

Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:28:26 +02:00
Robert Marko
6fc7344c93 tools: elfutils: set -std=gnu17
Fedora 42 updated to GCC15 which now defaults to GNU23 as the default
instead of GNU17[1], and this breaks m4 compilation.

This looks like a gnulib issue, so until that is updated/fixed
lets simply set C language version back to GNU17.

[1] https://gcc.gnu.org/gcc-15/porting_to.html#c23

Link: https://github.com/openwrt/openwrt/pull/18506
(cherry picked from commit f165dd2f78)
Link: https://github.com/openwrt/openwrt/pull/18581
Signed-off-by: Robert Marko <robimarko@gmail.com>
[Rework patch to make it apply]
(cherry picked from commit 1e51fd037d)
Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:28:26 +02:00
Hauke Mehrtens
c678cfaa5b tools: e2fsprogs: fix compilation with GCC15
Backport fix from upstream to fix compilation with host GCC 15.
49fd04d77b

Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:28:26 +02:00
Robert Marko
b0d7794a95 tools: m4: set -std=gnu17
Fedora 42 updated to GCC15 which now defaults to GNU23 as the default
instead of GNU17[1], and this breaks m4 compilation.

Its been reported upstream [2], so until its fixed lets simply set C
language version back to GNU17.

[1] https://gcc.gnu.org/gcc-15/porting_to.html#c23
[2] https://savannah.gnu.org/support/?111150

Link: https://github.com/openwrt/openwrt/pull/18505
(cherry picked from commit 8c141e53d7)
Link: https://github.com/openwrt/openwrt/pull/18581
Signed-off-by: Robert Marko <robimarko@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:28:26 +02:00
Robert Marko
fe5e590b46 tools: cpio: fix compilation with GCC15
Fedora 42 updated to GCC15 which now defaults to GNU23 as the default
instead of GNU17[1], and this breaks cpio compilation.

Its been reported upstream [2], so import the patch attached to the bug
report that fixes compilation with GCC15.

[1] https://gcc.gnu.org/gcc-15/porting_to.html#c23
[2] https://savannah.gnu.org/bugs/?66297

Link: https://github.com/openwrt/openwrt/pull/18506
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit c5041094ba)
Link: https://github.com/openwrt/openwrt/pull/19065
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-08 21:28:26 +02:00
Shiji Yang
f75d7a5954 kernel: bump 5.15 to 5.15.185
Some checks failed
Build all core packages / Build all core packages for selected target (push) Waiting to run
Build host tools / Build host tools for linux and macos based systems (push) Waiting to run
Build Kernel / Build all affected Kernels (push) Has been cancelled
Changelog: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.185

All patches are automatically refreshed.

Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/19028
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-07 22:45:47 +02:00
Shiji Yang
f932613def kernel: bump 5.15 to 5.15.184
Changelog: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.184

New Kconfig symbols:
- enable CONFIG_MITIGATION_ITS[1]

All patches are automatically refreshed.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v5.15.184&id=858073be8899e16cc469be9c1837d6c3a64887fa

Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/19028
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-06-07 22:45:47 +02:00
Robert Marko
1417fdfc90 image: only filter out images when ImageBuilder is used
Some checks failed
Build all core packages / Build all core packages for selected target (push) Has been cancelled
Build host tools / Build host tools for linux and macos based systems (push) Has been cancelled
Currently, we are filtering out images if DEFAULT:=n or BROKEN:=y are set,
so if you are building from scratch and want to build custom images that
are stripped down to fit, you must edit the image recipe or its just
filtered out.

So, to allow this behaviour when building from scratch as we can assume
that person doing that knows what they are attempting to do lets just limit
the filtering to ImageBuilder.

Fixes: f060615a78 ("image: respect DEFAULT and BROKEN when Default profile is selected")
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit d0d1f19068)
2025-05-24 21:52:05 +02:00
Robert Marko
6b0bbe3223 image: respect DEFAULT and BROKEN when Default profile is selected
Currently, when you select the Default profile it does not honor DEFAULT:=n
nor BROKEN:=y in device profiles but rather just tries to build all of them.

This may work when building directly, but when using Image Builder it will
always fail since no kernel or anything else is present for devices that
have DEFAULT:=n or BROKEN:=Y set since those are skipped during build.

So, lets look for DEFAULT being set to "n" or BROKEN being set to "y" and
then remove clear _PROFILE_SET so they dont end up being marked for
installation.

Fixes: #18410
Link: https://github.com/openwrt/openwrt/pull/18814
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit f060615a78)
2025-05-24 21:51:55 +02:00
Eric Fahlgren
876932b850 imagebuilder: exclude metadata for profiles that have no kernel
Device profiles that specify 'DEFAULT := n' are being included
in the imagebuilder metadata, specifically in .profiles.mk, even
though there is no kernel built for the device.  This results in
'make info' showing the device as valid, but then 'make image
PROFILE=xxx' failing with 'No rule to make target xxx-kernel.bin ...'

We exclude these profiles from the imagebuilder, avoiding these
errors.

Fixes: https://github.com/openwrt/openwrt/issues/18410
Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/18748
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit b88f3ebb33)
2025-05-24 21:51:39 +02:00
Antony Kolitsos
fc75f87823 kernel: Update to version 5.15.183
Some checks failed
Build all core packages / Build all core packages for selected target (push) Waiting to run
Build host tools / Build host tools for linux and macos based systems (push) Waiting to run
Build Kernel / Build all affected Kernels (push) Has been cancelled
All patches automatically rebased.

changelog: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.183

Signed-off-by: Antony Kolitsos <zeusomighty@hotmail.com>
2025-05-24 16:50:43 +02:00
Antony Kolitsos
3b3d16ec49 kernel: Update to version 5.15.182
Manually adapted the following patches:
   generic/backport-5.15/828-v6.4-0002-of-Update-of_device_get_modalias.patch
   generic/backport-5.15/828-v6.4-0004-of-Move-of_modalias-to-module.c.patch

changelog: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.182

Signed-off-by: Antony Kolitsos <zeusomighty@hotmail.com>
2025-05-24 16:50:43 +02:00
Rosen Penev
417e79967c tools: add cmake dependency to bzip2
Some checks failed
Build host tools / Build host tools for linux and macos based systems (push) Waiting to run
Build and Push prebuilt tools container / Build and Push all prebuilt containers (push) Has been cancelled
It's using cmake.mk so it needs CMake to build.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/18880
(cherry picked from commit 9deb8fad2f)
Signed-off-by: Felix Baumann <felix.bau@gmx.de>
Link: https://github.com/openwrt/openwrt/pull/18885
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-05-24 11:31:50 +02:00