This is the security update for DNS resolvers
More details:
- https://nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40188

Changelog between alpha2 and alpha3:
  • PCIe improvements for Turris Omnia and Turris MOX
    (Turris Omnia should support 1 ath11k miniPCIe card - not tested,
there is a missing support in OpenWrt)
  • Added support for SFP GPON module HALNy HL-GSFP
  • Added new U-boot versions for Turris 1.x routers
  • Updated Foris Controller and TurrisHW

+ mention it in NEWS

Changelog between alpha1 and alpha2:
  • MOX OTP is now working with kernel 5.15
  • Fixed Turris Auth issue when using reForis (/logout) URL
  • Updated Knot Resolver to version 5.5.2
  • Try to improve notification from Updater Supervisor

Josef Schlehofer authored 2 years ago and Simon Borek committed 2 years ago

Co-authored-by: Šimon Bořek <simon.borek@nic.cz>

Knot Resolver and Unbound will be installed side by side. It depends, if
it is existing configuration or not. We don't want to break critical
part of router features and functions, we will use Knot Resolver in new
installations (e.g. medkit) and existing routers will use unbound.

Co-authored-by: Michal Vasilek <michal.vasilek@gmail.com>
Co-authored-by: Šimon Bořek <simon.borek@nic.cz>

One of our kernel developers is working to improve powerpc support in
U-boot and while he was working at it, he prepare a new U-boot version
for old our Turris 1.x routers, which means that in upcoming U-boot
versions Turris 1.x will be supported.

References:
- https://patchwork.ozlabs.org/bundle/pali/turris1x/?state=*
- https://patchwork.ozlabs.org/bundle/pali/powerpc/?state=*

Simon Borek authored 3 years ago and Josef Schlehofer committed 3 years ago

add important missing changes, update kernel version to current value

Simon Borek authored 3 years ago and Josef Schlehofer committed 3 years ago

add important missing changes, update kernel version to current value

This was my fault, I think I copy&pasted this from older changelog and
did not bump the OpenWrt version.

Fixes:
a09c13dd ("NEWS: 5.3.6: Mention new
version of OpenWrt")

This was my fault, I think I copy&pasted this from older changelog and
did not bump the OpenWrt version.

Fixes:
a09c13dd ("NEWS: 5.3.6: Mention new
version of OpenWrt")