markmental/mentalnet-gnu-linux
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security: update Mentalnet Ochatime build

Browse source 
Update Linux to 6.12.114 for the PwnEscape fix while keeping toolchain headers at 6.12.104.

Update PHP to 8.3.36, remove compromised eMudhra roots, and add GNU Wget 1.25.0 with HTTPS/OpenSSL support.

Refresh the Ochatime release and Buildroot overlay documentation.
This commit is contained in:
markmental 2026-10-22 15:20:45 -04:00
commit 19257c5db1
2 changed files with 17 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

25
.config
View file

@ -1,6 +1,6 @@
#
# Automatically generated file; DO NOT EDIT.
# Buildroot -gbd62aab-dirty Configuration
# Buildroot -ga582ea3 Configuration
#
BR2_HAVE_DOT_CONFIG=y
BR2_HOST_GCC_AT_LEAST_4_9=y
@ -524,6 +524,7 @@ BR2_LINUX_KERNEL_INSTALL_TARGET=y
# Linux Kernel Extensions
#
# BR2_LINUX_KERNEL_EXT_XENOMAI is not set
# BR2_LINUX_KERNEL_EXT_RTAI is not set
# BR2_LINUX_KERNEL_EXT_EV3DEV_LINUX_DRIVERS is not set
# BR2_LINUX_KERNEL_EXT_FBTFT is not set
# BR2_LINUX_KERNEL_EXT_AUFS is not set
@ -1264,7 +1265,7 @@ BR2_PACKAGE_QT6_ARCH_SUPPORTS=y
# BR2_PACKAGE_BRLTTY is not set
#
# cc-tool needs a toolchain w/ C++, threads, wchar, gcc >= 4.9
# cc-tool needs a toolchain w/ C++, threads, wchar, gcc >= 4.9
#
# BR2_PACKAGE_CDRKIT is not set
# BR2_PACKAGE_CRUCIBLE is not set
@ -4556,7 +4557,7 @@ BR2_PACKAGE_TRACEROUTE=y
# BR2_PACKAGE_VSFTPD is not set
# BR2_PACKAGE_VTUN is not set
# BR2_PACKAGE_WAVEMON is not set
# BR2_PACKAGE_WGET is not set
BR2_PACKAGE_WGET=y
# BR2_PACKAGE_WHOIS is not set
# BR2_PACKAGE_WIREGUARD_TOOLS is not set
# BR2_PACKAGE_WIRELESS_REGDB is not set
@ -4589,35 +4590,35 @@ BR2_PACKAGE_TRACEROUTE=y
#
#
# Please note:
# Please note:
#
#
# - Buildroot does *not* generate binary packages,
# - Buildroot does *not* generate binary packages,
#
#
# - Buildroot does *not* install any package database.
# - Buildroot does *not* install any package database.
#
#
# *
# *
#
#
# It is up to you to provide those by yourself if you
# It is up to you to provide those by yourself if you
#
#
# want to use any of those package managers.
# want to use any of those package managers.
#
#
# *
# *
#
#
# See the manual:
# See the manual:
#
#
@ -6151,5 +6152,3 @@ BR2_TARGET_UBOOT_CUSTOM_PATCH_DIR=""
# BR2_BINUTILS_VERSION_2_22 is not set
# BR2_PACKAGE_GPU_VIV_BIN_MX6Q is not set
# BR2_TARGET_UBOOT_NETWORK is not set

6
README.md
View file

@ -29,7 +29,7 @@ disk installer (`mentalnet-install`).
| R1 | FirstStorm | *Chūlán ~First Storm~ (初嵐～First Storm～)* — DECO*27 | Swap-free installer, true i586 support, terminal/input hardening, interrupt-storm fixes |
| R1 | LovePara | *ラブパラ (Love Para)* — DECO*27 feat. Hatsune Miku | app-server stack (PHP/Ruby/Perl, php-fpm, lighttpd `/proxy/` → port 1337), tcc on-target C dev with glibc headers, socat, gesftpserver, SiS 900 / VIA Rhine / Tigon3 NICs, fastfetch, nano, en_US.UTF-8 locale |
| R1 | StreamingHeart | *ストリーミングハート (Streaming Heart)* — DECO*27 feat. Hatsune Miku | `runmain.o` for tcc (run C files like scripts without permanent compilation), tmux, custom bash prompt |
| R1 | **Ochatime** | *Ochatime* — 23.exe | **Current** — Linux 6.12.114 (PwnEscape/CVE-2026-99999 fix), PHP 8.3.36 security update (*php2shell*, CVE-2026-109618 / CVE-2026-109619), eMudhra (emSign) root CAs purged from the trust store |
| R1 | **Ochatime** | *Ochatime* — 23.exe | **Current** — Linux 6.12.114 (PwnEscape/CVE-2026-99999 fix), PHP 8.3.36 security update (*php2shell*, CVE-2026-109618 / CVE-2026-109619), compromised eMudhra (emSign) roots removed, GNU Wget 1.25.0 with HTTPS/OpenSSL (BusyBox `wget` remains available via `busybox wget`) |
## Quick facts
@ -65,6 +65,8 @@ meant to be applied on top of a pristine Buildroot checkout.
| `board/mentalnet/` | `board/mentalnet/` |
| `fs/iso9660/grub.cfg` | `fs/iso9660/grub.cfg` — **overwrites an upstream file** |
| `.config` | `.config` |
| `linux/linux.hash` | `linux/linux.hash` — includes the Linux 6.12.114 source hash |
| `package/php/php.mk`, `package/php/php.hash` | same paths — PHP 8.3.36 |
| `logos/`, `README.md`, `LICENSE` | same paths (repo-local, not used by the build) |
3. Build:
@ -83,6 +85,8 @@ The committed `.config` is based on the default i386 defconfig plus
the Mentalnet selections (GRUB2 embedded config, e2fsprogs, getty
TERM, and so on). Copying it reproduces the released system exactly;
alternatively, start fresh with `make menuconfig` and roll your own.
The target kernel is pinned to 6.12.114, while the internal toolchain
uses Buildroot's 6.12.104 kernel headers; this separation is intentional.
## Security after install