Fixes: CVE-2022-3204

Exact U-boot version:
- U-Boot 2022.10-rc4-OpenWrt-r16653+119-44ce70f0e2 (Sep 15 2022 - 18:21:35 +0000)
checksum: 561260872b19632660d0f0d2eab0fc5f8389fa97a6b6908319feeb85c7fdfc61

U-boot comes from:
* turris-build: b12dbac87d78ae2620f9489d7fe81cb35b7d3acb
* openwrt: 44ce70f0e209c12cc9548d5fa60890997a2707f2
* turris-os-packages: c7083f7a

(cherry picked from commit 2e2cde37)

Michal Vasilek authored Sep 22, 2022 and Josef Schlehofer committed Sep 25, 2022

* fixes CVE-2022-40188

(cherry picked from commit 7eb63d0c)

Josef Schlehofer authored Aug 17, 2022 and Michal Vasilek committed Sep 06, 2022

Release notes:
https://www.knot-resolver.cz/2022-08-16-knot-resolver-5.5.2.html

(cherry picked from commit a5e99d48)

This adds ftd get value for the last command and adds path for
partitions

- Replaced make by using MAKE variable
- Added PKG_JOBS, but as stated in OpenWrt include/package.mk, there
  needs to be set PKG_BUILD_PARALLEL

- It is disabled for Turris 1.x as there are two defconfigs and it might
  lead to some issues

They were swapped. :-(

Pali Rohár <pali@kernel.org> sent many improvements for PowerPC in
U-boot and Kernel Linux as well. Also, he added support for Turris 1.x
routers, but it is currently on review. We would like to have some
development binaries available to be able to test it in Turris OS.

In CZ.NIC Turris U-boot repository, since today there is a published branch
turris1x-v2022.04, which currently has this commit as head
16fa34e9bc60af50759c389ce40ae35322fdbf55 ("powerpc: Add support for
CZ.NIC Turris 1.x routers"), which is used to compile U-boot binaries
for NOR and SDCard.

- Update copyright

This package is not present in OpenWrt master anymore as it is part of
core binary.

Michal Vasilek authored Oct 29, 2021 and Josef Schlehofer committed Aug 28, 2022

it's needed when running nextcloud_install:

    + sudo -u nobody php-cli ./occ maintenance:install ...
    An unhandled exception has been thrown:
    Error: Call to undefined function OC\filter_var() in /srv/www/nextcloud/lib/private/Setup.php:479

Michal Hrusecky authored Aug 10, 2022 and Josef Schlehofer committed Aug 12, 2022

Fixed downloading firmware and image regeneration.

See https://gitlab.nic.cz/turris/turris-netboot/-/tags/v0.7.1

Michal Hrusecky authored Jul 26, 2022 and Josef Schlehofer committed Aug 12, 2022

Mainly use sudo to get access to the wireless configuration even as an
ordinary user.

Release notes:
- https://gitlab.nic.cz/turris/turris-netboot/-/tags/v0.7.0

Updated copyright

- It fixes Ubi offset header

Ok, it seems that it was happening also in the HBS (before my fix as it
does not get into release), thus we can be sure
that I did not break it, thus revert it once again.

This reverts commit 64045edc.

Even though, the previous solution fixes this output:
```
cmp: /boot/boot.scr: No such file or directory
cp: can't stat '/boot/boot.scr': No such file or directory
```

It seems there is some issue with infinite loop of symlinks
```
INFO:Executing postupdate hook: 10_kernel-install
//boot/zImage /tmp/tmp.NEAjjh/zImage differ: char 5, line 1
cmp: //boot/fdt: Symbolic link loop
cp: can't stat '//boot/fdt': Symbolic link loop
```

Because of that, revert it for now as we would like to release a new
version soon.

This reverts commit e68eda1d.

Fixes:
- CVE-2022-30698
- CVE-2022-30699

Release notes:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-2

HBK version of the same fix already applied to HBL. Original
description:

Make sure that sessions use relative time from browser, so you can setup
your router even if your router/browser has a wrong time. Big thanks and
the credits go to László Várady.

Josef Schlehofer authored Jul 21, 2022 and Michal Vasilek committed Jul 27, 2022

The file boot.scr should be in boot folder and not in root,
because then it is not in the same way as it is done for Turris Omnia
and Turris MOX. I checked it with Turris OS 3.x release also, when
boot.scr was introduced for Turris 1.x routers and there is also in boot
folder.

Fixes the following output:
cmp: /boot/boot.scr: No such file or directory
cp: can't stat '/boot/boot.scr': No such file or directory

Fixes: 03c8a7c7 ("turris1x-btrfs: deploy
boot.scr and link the appropriate dtb name")

This patch is already merged to user-notify repository, but until there
is tagged release, let's do it this way.

Release notes:
https://www.nlnetlabs.nl/news/2022/Jul/11/unbound-1.16.1-released/

Release notes:
 - https://git.ffmpeg.org/gitweb/ffmpeg.git/blob/55a95339526ba3ad6c3c31721ab1ecfd957eb5b4:/Changelog

When the kresd service was started, there was a test which printed "No such
file or directory" to stderr when the file tested didn't exist.

Karel Koci authored Mar 12, 2021 and Josef Schlehofer committed Jun 29, 2022

Downgrades between versions is dangerous and can break router. It is not
supported and all fixes and migration scripts are just one way, there is
no way to revert changes done by them on downgrade. Thus doing downgrade
can cause pretty much any component to become invalidly configured and
thus broken.

Josef Schlehofer authored Jun 14, 2022 and Michal Vasilek committed Jun 24, 2022

Drop backported patches

Moonjit is no longer active [1]. The repository is read-only, so let's
drop this and use LuaJIT from the OpenWrt packages repository.

[1] https://twitter.com/siddhesh_p/status/1308594269502885889?s=20

Release notes:
https://www.nlnetlabs.nl/news/2022/Jun/02/unbound-1.16.0-released/

mea culpa, this was correct during the pull request, but only for master
branch (currently used for OpenWrt 19.07), but the location was changed
in newer versions of OpenWrt

This fixes issues described on our forum:
- https://forum.turris.cz/t/gnome-project-domains-inaccessible-with-dnssec-enabled/17272
- https://forum.turris.cz/t/not-connecting-to-applications-like-discord/17111/7?u=pepe

Karel Koci authored May 17, 2022 and Josef Schlehofer committed Jun 09, 2022

There is now U-Boot's distroboot script available that can be used to
boot the system.

Karel Koci authored May 17, 2022 and Josef Schlehofer committed Jun 09, 2022

This boot script script should support boot from both UBI as well as
BTRFS on SD card (or USB) and others.

Aleksandr Gumroian authored May 23, 2022 and Josef Schlehofer committed May 23, 2022

* Add & update translations
* Add Sentinel device token
* Add missing peerDependencies
* Update Foris JS library to v5.4.0
* Update required NodeJS version to 16.x
* Fix spelling & grammar in helpTexts
* Fix translation strings
* Move reforis to devel dependencies
* Improve description & add repo URL
* Remove obsolete setuptools version pin
* NPM audit fix

We no longer need to have Atlas SW probe in our repository as we can use
the upstreamed variant.

(cherry picked from commit e42d5bb2)

This package contains two new development U-boot versions for Turris
1.x. Only one is shipped with this package to users as the other
  version is nice to have if something goes wrong.

These files were provided by @prohar, who is working to have Turris 1.x
upstream support in U-boot and kernel as well. While working on it, he
found some serious issues in U-boot for mpc85xx, which are currently on
review in their mailing list.

This could be helpful for experienced users, who might try to test it
and let us know if all the things work as they should.

This was compile tested for Turris 1.x.

It seems this was copy&pasted from Turris MOX and someone forgot to
change the TITLE for Turris 1.x router