Fixes:
- CVE-2022-30698
- CVE-2022-30699

Release notes:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-2

HBK version of the same fix already applied to HBL. Original
description:

Make sure that sessions use relative time from browser, so you can setup
your router even if your router/browser has a wrong time. Big thanks and
the credits go to László Várady.

Make sure that sessions use relative time from browser, so you can setup
your router even if your router/browser has a wrong time. Big thanks and
the credits go to László Várady.

Josef Schlehofer authored 2 years ago and Michal Vasilek committed 2 years ago

The file boot.scr should be in boot folder and not in root,
because then it is not in the same way as it is done for Turris Omnia
and Turris MOX. I checked it with Turris OS 3.x release also, when
boot.scr was introduced for Turris 1.x routers and there is also in boot
folder.

Fixes the following output:
cmp: /boot/boot.scr: No such file or directory
cp: can't stat '/boot/boot.scr': No such file or directory

Fixes: 03c8a7c7 ("turris1x-btrfs: deploy
boot.scr and link the appropriate dtb name")

Remove backported patches, which was taken from this tagged release:

* Fixed case when updates were installed automatically, even though manual confirmation was required.
* Fix detection of delayed reboot and thus create complete notification for it.

Fixed:
- notifier: Add timezone to timestamp in email notification
(remove the patch, which backported the change)

This patch is already merged to user-notify repository, but until there
is tagged release, let's do it this way.

We provided two servers for reForis - flup and cgi. Unfortunately, no
one uses cgi and it is not documented how to use it. Let's drop it.

Josef Schlehofer authored 2 years ago and Michal Vasilek committed 2 years ago

This helps in cases when someone forgets to bump PKG_RELEASE.

Reference:
https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=9ae3c6f94c616cfbf854d3ec749c7fafc9893942

File resolv.conf.auto is now stored mainly in the directory
/tmp/resolv.conf.d as well as resolv.conf files generated by OpenVPN
client, so let's prefer this directory for reading nameservers. It is
more secure.

File resolv.conf.auto is now stored mainly in the directory
/tmp/resolv.conf.d as well as resolv.conf files generated by OpenVPN
client, so let's prefer this directory for reading nameservers. It is
more secure.

Use new /tmp/resolv.cond.d directory to store nameservers provided by
OpenVPN. It is more secure and new default in OpenWrt:

https://github.com/openwrt/openwrt/commit/cd48d8d3420dd4df03daaa548227ceb487ba7104

1. initrd.gz: ASCII cpio archive (SVR4 with no CRC)
Replace it by ugly cp instead of renaming it in two packages

This is the upstream change in Linux Kernel Build repository.
Refer: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/usr/Makefile?h=v5.10.74&id=80e715a06c2d0a24dbb818bb1dba2ef0f20d7068

It was changed that the MOX is now the same as Turris Omnia

This is the upstream change in Linux Kernel Build repository.
Refer: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/usr/Makefile?h=v5.10.74&id=80e715a06c2d0a24dbb818bb1dba2ef0f20d7068

This is required becase of changes done in Turris Build repository.
The previous target was not good to upstream it to OpenWrt. This helps a
little bit to be in sync how the Turris Omnia and Turris MOX are done

Release notes:
https://www.nlnetlabs.nl/news/2022/Jul/11/unbound-1.16.1-released/

Release notes:
 - https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/55a95339526ba3ad6c3c31721ab1ecfd957eb5b4:/Changelog

With recent changes, the config is not just for omnia, but for all
routers. Let's make it more clear for someone, who is browsing the
source code.

Suggested-by: Michal Vasilek <michal.vasilek@nic.cz>

We can drop this file as it is no longer used. Thanks to commit
2d15f049 ("resolver-conf: ship Turris
Omnia config to all routers")

The resolver-omnia-config has configuration for Knot Resolver and it is
used even by Turris MOX and Shield, because Turris 1.x routers (the
powerpc ones) can finally now use Knot Resolver, then try to make it by
default even there.

When the kresd service was started, there was a test which printed "No such
file or directory" to stderr when the file tested didn't exist.

Downgrades between versions is dangerous and can break router. It is not
supported and all fixes and migration scripts are just one way, there is
no way to revert changes done by them on downgrade. Thus doing downgrade
can cause pretty much any component to become invalidly configured and
thus broken.

- Update copyright

Josef Schlehofer authored 2 years ago and Michal Vasilek committed 2 years ago

Drop backported patches