aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking
AgeCommit message (Collapse)Author
2017-06-26samba: install systemd units and initscripts unconditionallyAndreas Oberritter
Fixes hybrid systemd/sysvinit setups. Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: rename initscript from 'samba.sh' to more common 'samba'Andreas Oberritter
This gets masked automatically by samba.service if systemd is running. Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: install all systemd unit filesAndreas Oberritter
This includes samba.service, which other major distributions install, too. Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: remove superflous listing of pam_smbpass.soAndreas Oberritter
EXTRA_OECONF includes --with-pammodulesdir=${base_libdir}/security when pam is enabled. Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: use systemd_system_unitdir variableAndreas Oberritter
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: remove unneeded conditionals for sysvinit and systemdAndreas Oberritter
systemd.bbclass takes care of deleting unused startup scripts. Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: use default packaging rules for -dbg and -dev packagesAndreas Oberritter
There's no need to create multiple packages. Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: fix build by linking with bfd instead of goldAndreas Müller
Use this workaround as long as there is no better (upstream) fix Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit b60c60806e57f69233db582ef88d113867c2ecd1) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: fix to package pidl in samba-pidlMingli Yu
* Use =+ to replace the previous += to let samba-pidl do package before samba to guarantee the file /usr/bin/pidl packaged in samba-pidl as both samba and samba-pidl have rules to package /usr/bin/pidl and the command pidl depends on perl modules such as Parse/Pidl.pm resides in samba-pidl Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit b4b6465fe3409c17de25f144a6240eaf74f32a5f) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: upgrade to 4.4.5Jackie Huang
* This is a security release in order to address the following defect: - CVE-2016-2119 (Client side SMB2/3 required signing can be downgraded) * Detail release note: - https://www.samba.org/samba/history/samba-4.4.5.html * Removed part of the 10-use-only-libsystemd.patch which has been fixed in new version. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 35326fa74dee53ffa4bd454e5fc95fdcbf0d5da6) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: remove ${localstatedir}/logRobert Yang
Fixed do_package error: WARNING: samba-4.4.2-r0 do_package: FILES contains file '/var/log/samba' which resides under a directory symlink. Please fix the recipe and use the real path for the file. ERROR: samba-4.4.2-r0 do_package: File './var/log/samba' cannot be packaged into 'samba-base' because its parent directory structure does not exist. One of its parent directories is a symlink whose target directory is not included in the package. ERROR: samba-4.4.2-r0 do_package: Function failed: populate_packages It has a file ${sysconfdir}/tmpfiles.d/samba.conf which will create /var/log/samba when systemd, and volatiles.03_samba when sysvinit. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 74d994ed27e53370101a3a44f25cd07327d774ad) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26samba: inherit update-rc.d to manage init scriptJackie Huang
inherit update-rc.d to manage init script, so we can avoid duplicating the update-rc.d commands, and the default behavior can be easily overridden by distro. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 32a6fd48ab781c15c37551f4e8ed6721ca5cb87b) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2017-06-26Samba: use only libsystemdSzombathelyi György
This patch was disappeared while moved to 4.4.2 Signed-off-by: Gyorgy Szombathelyi <gyurco@freemail.hu> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit b6e805c83eb5dd27729959443abdc5191cb2c74c) Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
2016-08-16net-snmp: initscripts are located in net-snmp-server-snmp packageLi Wang
The net-snmp-server package is a meta-package requiring net-snmp-server-snmpd and net-snmp-server-snmptrapd package. The net-snmp-server-snmpd package provides the startup scripts not the meta net-snmp-server package. Signed-off-by: Anders Wallin <anders.wallin@windriver.com> Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 4fbb4d2371648ceb9ad6b99f46261ed5a125fb98) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16net-snmp: fix snmpd crash via AgentX connectionJackie Huang
backport a patch to fixed snmpd crashing when an AgentX subagent disconnect in the middle of processing of a request. Signed-off-by: Zhu Yanjun <yanjun.zhu@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 582eddb44e0d1ce67a04afb441059a8bf7cc1ef1) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16openconnect: PACKAGECONFIG certain dependenciesJoe Slater
Some items now in DEPENDS are configuration options, so we create PACKAGECONFIG[] entries for them. We do not select pcsc-lite by default because it is GPLv3. Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit a27d4a75c503f8cab2188cfed78754d1a4157775) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16curlpp: fix build with gcc-6 and remove blacklistDerek Straka
Signed-off-by: Derek Straka <derek@asterius.io> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 5c8efcc9f54d04ac9a7c41176989efb78c4ac54f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16wireshark: update to 2.0.4Armin Kuster
The following vulnerabilities have been fixed: * [1]wnpa-sec-2016-29 The SPOOLS dissector could go into an infinite loop. Discovered by the CESG. * [2]wnpa-sec-2016-30 The IEEE 802.11 dissector could crash. ([3]Bug 11585) * [4]wnpa-sec-2016-31 The IEEE 802.11 dissector could crash. Discovered by Mateusz Jurczyk. ([5]Bug 12175) * [6]wnpa-sec-2016-32 The UMTS FP dissector could crash. ([7]Bug 12191) * [8]wnpa-sec-2016-33 Some USB dissectors could crash. Discovered by Mateusz Jurczyk. ([9]Bug 12356) * [10]wnpa-sec-2016-34 The Toshiba file parser could crash. Discovered by iDefense Labs. ([11]Bug 12394) * [12]wnpa-sec-2016-35 The CoSine file parser could crash. Discovered by iDefense Labs. ([13]Bug 12395) * [14]wnpa-sec-2016-36 The NetScreen file parser could crash. Discovered by iDefense Labs. ([15]Bug 12396) * [16]wnpa-sec-2016-37 The Ethernet dissector could crash. ([17]Bug 12440) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit f316c4a32686e57c4b65e659fbf7d7936ac39ff6) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16wireshark: update package to 2.0.3Armin Kuster
No CVE's assigned. The following vulnerabilities have been fixed: * [1]wnpa-sec-2016-19 The NCP dissector could crash. ([2]Bug 11591) * [3]wnpa-sec-2016-20 TShark could crash due to a packet reassembly bug. ([4]Bug 11799) * [5]wnpa-sec-2016-21 The IEEE 802.11 dissector could crash. ([6]Bug 11824, [7]Bug 12187) * [8]wnpa-sec-2016-22 The PKTC dissector could crash. ([9]Bug 12206) * [10]wnpa-sec-2016-23 The PKTC dissector could crash. ([11]Bug 12242) * [12]wnpa-sec-2016-24 The IAX2 dissector could go into an infinite loop. ([13]Bug 12260) * [14]wnpa-sec-2016-25 Wireshark and TShark could exhaust the stack. ([15]Bug 12268) * [16]wnpa-sec-2016-26 The GSM CBCH dissector could crash. ([17]Bug 12278) * [18]wnpa-sec-2016-27 MS-WSP dissector crash. ([19]Bug 12341) Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 7a9c626092c7d3b10206c7ca4ea2827cca9cba4f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16ntp: Security fixes via Upgrade to 4.2.8p8fan.xin
CVE-2016-4957 CVE-2016-4953 CVE-2016-4954 CVE-2016-4955 CVE-2016-4956 For more info to see: http://support.ntp.org/bin/view/Main/SecurityNotice#June_2016_ntp_4_2_8p8_NTP_Securi Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 13db3c65f525a6c87cd51961c3c1816e059478b9) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16libldb: add missing libaio dependencyJonathan Liu
Signed-off-by: Jonathan Liu <net147@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 7be16bce816dee5e9ea1dd241b5a3543fdf78356) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16libtalloc: add missing libaio dependencyJonathan Liu
Signed-off-by: Jonathan Liu <net147@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 126e48c2a0e56333a6e7da7d30ea4c01d67904d1) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16libtdb: add missing libaio dependencyJonathan Liu
Signed-off-by: Jonathan Liu <net147@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 81f3fb09de018b2b67f608ecdf6963a70bffb463) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16libtevent: add missing libaio dependencyJonathan Liu
Fixes the following compile error: | [ 6/27] Compiling lib/replace/test/testsuite.c | In file included from ../lib/replace/test/testsuite.c:49:0: | ../lib/replace/system/aio.h:29:20: fatal error: libaio.h: No such file or directory | compilation terminated. Signed-off-by: Jonathan Liu <net147@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 18a1d69f86b7eb5d151a77665dbb6a2da5306c05) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16cifs-utils: make samba conditional dependencyS. Lockwood-Childs
Add PACKAGECONFIG for cifsacl and update PACKAGECONFIG for cifsidmap to make samba a conditional dependency. It is nice to be able to get mount.cifs without needing to build samba. Signed-off-by: S. Lockwood-Childs <sjl@vctlabs.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit a6a36710a110d381b798b445b2da9d6c490215f3) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16netcat-openbsd: fix qa warningShrikant Bobade
fix for QA Warning: No GNU_HASH in elf binary, it won't obey the default LDFLAGS which results in QA Warning while building with external toolchain, so adding the default LDFLAGS. WARNING: netcat-openbsd-1.105-r0 do_package_qa:QA Issue: No GNU_HASH in the elf binary:..nc.netcat-openbsd' [ldflags] Signed-off-by: Shrikant Bobade <shrikant_bobade@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit d765990dd2fc9324963e9ecb0f93b7e613e874ad) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16esmtp: Fix rootfs creation errorsDai Caiyun
1) error: file /usr/share/man/man1/mailq.1 from install of postfix-doc conflicts with file from package esmtp-doc 2) error: file /usr/share/man/man1/newaliases.1 from install of postfix-doc conflicts with file from package esmtp-doc 3) error: file /usr/share/man/man1/sendmail.1 from install of postfix-doc conflicts with file from package esmtp-doc Signed-off-by: Dai Caiyun <daicy.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit a2256bb3bd2abe89c9ecfbdf2b9690aaf7540342) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16postfix: Fix rootfs creation errorsDai Caiyun
1) error: file /usr/share/man/man1/mailq.1 from install of postfix-doc conflicts with file from package esmtp-doc 2) error: file /usr/share/man/man1/newaliases.1 from install of postfix-doc conflicts with file from package esmtp-doc 3) error: file /usr/share/man/man1/sendmail.1 from install of postfix-doc conflicts with file from package esmtp-doc Signed-off-by: Dai Caiyun <daicy.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 7832c673504415cf78a910263c23dda8ec9b982d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16netkit-rsh: fix build issue.Armin Kuster
glibc deprecate union wait and remove support from wait functions https://sourceware.org/ml/libc-alpha/2016-02/msg00342.html change rlogin.c accordingly Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 62e3df2ddbeff9f2293027af6f159260cd2ab134) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16squid: CVE-2016-4553Catalin Enache
client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4553 Backported upstream patch: http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch Signed-off-by: Catalin Enache <catalin.enache@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit d46c89ae44c811b64b117613072698601e483b32) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-08-16ntp: avoid floating dependency on mdns (aka mDNSResponder)Andre McCurdy
An mdns package is provided by meta-intel-iot-middleware. Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> (cherry picked from commit 9a13040d7b10b9f7221f8190e75aa249bfacee9d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-13nbd: fix LIC_FILES_CHKSUMRobert Yang
The file depcomp would be changed during configure, which is not suitable for LIC_FILES_CHKSUM, there is a COPYING file which is GPLv2, so use it. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-13znc: fix QA issue and remove from blacklistQi.Chen@windriver.com
Modify the .pc file to fix the following QA problem. "BROKEN: QA Issue: znc.pc failed sanity test" Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-13netcf: fix mishandling of gnulib submodule causing build failPaul Gortmaker
netcf fails to build on certain hosts with newer versions of git installed as follows: | ./bootstrap: Bootstrapping from checked-out netcf sources... | ./bootstrap: consider installing git-merge-changelog from gnulib | ./bootstrap: getting gnulib files... | error: pathspec 'gnulib' did not match any file(s) known to git. If we do a devshell we will see that our configure prepend that intended to _create_ the .gitmodules has instead _modified_ it and left us with this change present: sh-4.3# git diff diff --git a/.gitmodules b/.gitmodules index 7acb1ea19ca7..2d10b0e0e0fe 100644 --- a/.gitmodules +++ b/.gitmodules @@ -1,3 +1,3 @@ [submodule "gnulib"] - path = .gnulib - url = git://git.sv.gnu.org/gnulib.git + path = gnulib + url = git://git.sv.gnu.org/gnulib sh-4.3# What happens is that the newer git does not respect uncommitted changes to the .gitmodules file, and hence the path ".gnulib" is still considered valid vs. the in tree updated path "gnulib". It doesn't help any that the package has its own tracked files in gnulib/ that we stomp over, but the real fail is just uncommitted changes to the .gitmodule as this insertion of a random path shows: sh-4.3# git diff diff --git a/.gitmodules b/.gitmodules index 7acb1ea19ca7..91bd45f8e4d4 100644 --- a/.gitmodules +++ b/.gitmodules @@ -1,3 +1,3 @@ [submodule "gnulib"] - path = .gnulib + path = gnulibaaa url = git://git.sv.gnu.org/gnulib.git sh-4.3# git --version git version 2.7.4 sh-4.3# git submodule init fatal: no submodule mapping found in .gitmodules for path '.gnulib' sh-4.3# Since the original bbclass simply assumed there was no .gitmodules file to begin with, we can easily solve this by not clobbering it and respect the path choice used by the package itself. As the version of ./bootstrap shipped with netcf supports this: --no-git do not use git to update gnulib. Requires that --gnulib-srcdir point to a correct gnulib snapshot we can use it in conjunction with the pathspec since we know the gnulib was just copied in from the sysroot, and does not need to try and pull any further updates. Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-13autotools-bootstrap: make bootstrap package specific.Paul Gortmaker
The theory behind this bbclass was reasonable, with the primary goal being to avoid multiple downloads of gnulib, but it neglected the fact that packages would be shipping a specific version of the ./bootstrap which will support some flags but maybe not all the latest ones from the latest gnulib/build-aux/bootstrap file. I attempted to simply update the two pkgs to use the latest copy of bootstrap from gnulib but this of course triggers the descent into autoconf hell that we all know and love. Rather than futzing with the packages configure.ac and deviating from what the pkg maintainers intended and tested, we can just let the packages have independent calls to ./bootstrap with whatever flags are needed. The goal of this commit is to move the prepend out to the packages and then delete the class without any real functional change ; i.e. a purely mechanical change. Then we can adjust each package to ensure it will still build with a modern host, in an independent fashion, while keeping the main advantage of not fetching gnulib two extra times for netcf and fontforge. Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-13wireshark: Fix new QA ErrorArmin Kuster
NOTE: Resolving any missing task queue dependencies ERROR: Nothing PROVIDES 'libepoxy' (but /oss/maint/mylayers/openembedded-core/meta/recipes-gnome/gtk+/gtk+3_3.18.8.bb DEPENDS on or otherwise requires it) ERROR: libepoxy was skipped: missing required distro feature 'opengl' (not in DISTRO_FEATURES) add DISTRO_FEATURES check for opengl to enable gtk3 Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-13curlpp: fix recipeQi.Chen@windriver.com
Fix curlpp recipe to make it succeed to build. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-09squid: CVE-2016-3947Catalin Enache
Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3947 Signed-off-by: Catalin Enache <catalin.enache@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-09rp-pppoe: Fix rootfs creation errorsLi xin
error: file /usr/share/doc/README from install of rp-pppoe-doc-3.11-* conflicts with file from package dmidecode-doc-2.12* Signed-off-by: Li Xin <lixin.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-09openconnect: add missing dependenciesIoan-Adrian Ratiu
They were autodetected and triggered QA warnings Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-09proftpd: CVE-2016-3125Catalin Enache
The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3125 Signed-off-by: Catalin Enache <catalin.enache@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-09dovecot: fix QA issue and remove from blacklistQi.Chen@windriver.com
Modify FILES_${PN} and FILES_${PN}-dev to fix QA issue and remove dovecot from blacklist. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-09net-snmp: enable ipv6 supportZhu Yanjun
Add packageconfig for ipv6 and enable it when it's defined in distro_features. Signed-off-by: Zhu Yanjun <yanjun.zhu@windriver.com> Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-02ntp: Security fixes via update to 4.2.8p7Armin Kuster
CVE-2016-1551 CVE-2016-2516 CVE-2016-2517 CVE-2016-2518 CVE-2016-2519 CVE-2016-1547 CVE-2015-7704 CVE-2015-8138 CVE-2016-1550 for more info see: http://support.ntp.org/bin/view/Main/SecurityNotice#April_2016_NTP_4_2_8p7_Security Signed-off-by: Armin Kuster <akuster@mvista.com> Acked-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-05-02vpnc: stage vpnc-scriptIoan-Adrian Ratiu
The vpn connection handling script is used during building openconnect so we need to stage it. Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-02openconnect: add recipeIoan-Adrian Ratiu
openconnect is a FOSS VPN client designed to work with Cisco AnyConnect and Pulse Connect Secure (Juniper SSL). Signed-off-by: Ioan-Adrian Ratiu <adrian.ratiu@ni.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-02c-ares: Add package to networkingArmin Kuster
this package is in 5 other layers. Move to a more common location and update version. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-05-02samba: remove dependency on ctdbMark Asselstine
During rootfs creation the following error is being hit Preparing... ######################################## [ 0%] warning: Removing ctdb-2.5.1-r0@core2_64 due to file /usr/bin/ctdb conflicting with samba-4.4.2-r0@core2_64 error: ctdb-dev-2.5.1-r0 conflicts with ctdb = 2.5.1-r0 Looking at the relationship between samba and ctdb it appears that the landscape has changed some starting in version 4.2. Samba now includes and installs ctdb instead of relying on stand-alone ctdb. Referencing https://wiki.samba.org/index.php/CTDB_Setup we see this activated by '--with-cluster-support' which we do pass to configure based on the bb. Dropping the DEPENDS on ctdb resolves this issue. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-04-29samba: fix paths in sysv initscriptRichard Leitner
The sysv initscript provided by samba assumes smbd and nmbd are installed in /opt/samba/bin/. In our case both binaries are installed to /usr/sbin/ by default. Therefore fix these paths. Furthermore fix the log and config directory as well as the name of the initscript in its usage text. Signed-off-by: Richard Leitner <richard.leitner@skidata.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-04-29samba: fix QA warnings.Armin Kuster
V2: Fix WARN: samba: samba rdepends on libarchive, but it isn't a build dependency? V1: WARNING: samba-4.4.2-r0 do_package_qa: QA Issue: samba rdepends on libaio, but it isn't a build dependency, missing libaio in DEPENDS or PACKAGECONFIG? [build-deps] WARNING: samba-4.4.2-r0 do_package_qa: QA Issue: samba rdepends on lttng-ust, but it isn't a build dependency, missing lttng-ust in DEPENDS or PACKAGECONFIG? [build-deps] Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-28 11:07:28 +0000