aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking
AgeCommit message (Collapse)Author
2021-01-13wireshark: Several securtiy fixesArmin Kuster
Source: Wireshark.org MR: 106181, 106696, 107655, 107673, 107682 Type: Security Fix Disposition: Backport from wireshark.org ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a Description: Bugfix only update including these cves: 3.2.8 CVE-2020-26575 CVE-2020-28030 3.2.9 CVE-2020-26418 CVE-2020-26421 CVE-2020-26420 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12mdns: upgrade 1096.40.7 -> 1310.40.42Zheng Ruoqin
Refresh the following patch: 0001-mdns-include-stddef.h-for-NULL.patch Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12igmpproxy: upgrade 0.2.1 -> 0.3Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12firewalld: upgrade 0.9.1 -> 0.9.2Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12cifs-utils: upgrade 6.11 -> 6.12Zheng Ruoqin
0001-Bugfix-Modify-the-dir-of-install-exec-hook-and.patch Removed since this is included in 6.12. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-07rdma-core: upgrade 32.0 -> 33.0zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-06blueman: upgrade 2.1.3 -> 2.1.4Andreas Müller
Security release, see GHSA-jpc9-mgw6-2xwx/CVE-2020-15238 [1] Changes Force cython to use python language version 3 Do not use exitcode 1 when we expect to fail Mark more strings translatable (@cwendling) Bugs fixed Unstranslated strings Searching (with Ctrl+F in manager device list) did not work Default PIN lookup Fix device removal handling (@Yannik) Only use LaunchContext when we have proper event time [1] https://github.com/blueman-project/blueman/security/advisories/GHSA-jpc9-mgw6-2xwx Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05wolfssl: upgrade 4.5.0 -> 4.6.0zangrc
0001-Make-ByteReverseWords-available-for-big-and-little-e.patch Removed since this is included in 4.6.0 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05tcpdump: add UPSTREAM_CHECK_REGEXYi Zhao
Add UPSTREAM_CHECK_REGEX to skip checking testing version (e.g. 4.99.0). Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05ebtables: Add symbol link /sbin/ebtablesHe Zhe
The original /sbin/ebtables has been moved to /usr/sbin/ebtables-legacy. But the old path is still used by some other software libvirt. libvirtd[809]: direct firewall backend requested, but /sbin/ebtables is not available: No such file or directory As stated in the related change in ebtable git repo: The new -legacy binary has no problem if called via a symlink with the 'ebtables' name, so users can still name this binary with whatever name. So we add a symbol link from /usr/sbin/ebtables-legacy to /sbin/ebtables. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05ebtables: do not install /etc/ethertypesYi Zhao
Refer to Debian, patch the Makefile to prevent /etc/ethertypes installation instead of removing it in do_install_append. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05ebtables: remove upstream ebtables-legacy-saveYi Zhao
Remove the upstream ebtables-legacy-save before we install the local ones. And install it to ${sbindir} rather than ${base_sbindir}. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-04ebtables: add missing file ebtables.commonYi Zhao
The ebtables.common is required by ebtables.service. Add it back. Fixes: systemd[660]: ebtables.service: Failed to locate executable /usr/sbin/ebtables.common: No such file or directory systemd[660]: ebtables.service: Failed at step EXEC spawning /usr/sbin/ebtables.common: No such file or directory Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-04python3-ldap: upgrade 3.2.0 -> 3.3.1zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28opensaf: upgrade 5.20.08 -> 5.20.11zhengruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28netplan: upgrade 0.100 -> 0.101zhengruoqin
Refresh the following patch: 0001-dbus-Remove-unused-variabes.patch 0002-Makefile-Exclude-.h-files-from-target-rule.patch Add 0001-don-t-fail-if-GLOB_BRACE-is-not-defined.patch to solve the compilation errors on musl. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28bridge-utils: upgrade 1.6 -> 1.7zhengruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28libtevent: upgrade 0.10.1 -> 0.10.2zangrc
Refresh the following patch: avoid-attr-unless-wanted.patch options-0.10.0.patch 0001-waf-add-support-of-cross_compile.patch Removed since this is included in 0.10.2 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28libtalloc: upgrade 2.3.0 -> 2.3.1zangrc
0001-waf-add-support-of-cross_compile.patch Removed since this is included in 2.3.1. Refresh the following patch: avoid-attr-unless-wanted.patch options-2.2.0.patch Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24tftp-hpa: change the ALTERNATIVE_PRIORITYMingli Yu
Both inetutils-tftp and tftp-hpa provide the tftp command and the ALTERNATIVE_PRIORITY of inetutils-tftp is 79 until now. Increase the ALTERNATIVE_PRIORITY of tftp-hpa to 100 to guarantee the tftp command provided by tftp-hpa when both of the packages installed. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24iscsi-initiator-utils: upgrade 2.1.2 -> 2.1.3zangrc
0001-libopeniscsiusr-Compare-with-max-int-instead-of-max-.patch Removed since this is included in 2.1.3 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24ebtables: upgrade 2.0.10-4 -> 2.0.11zangrc
Refresh the following patch: 0010-Adjust-header-include-sequence.patch Referring to Fedora style, ebtables-legacy-save and ebtables.service are retained. The upstream address has been modified. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-23traceroute: change the ALTERNATIVE_PRIORITYMingli Yu
Both inetutils-traceroute and traceroute provide the traceroute command and the ALTERNATIVE_PRIORITY of inetutils-traceroute is 79 until now. Increase the ALTERNATIVE_PRIORITY of traceroute to 100 to guarantee the traceroute command provided by traceroute when both of the packages installed. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-23cyrus-sasl: Disable ntlm plugin by defaultKhem Raj
ntlm requires md4 algorith defines which is now disabled in openssl recipe by default also see [1] [1] https://github.com/cyrusimap/cyrus-sasl/issues/632 Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-18vblade: upgrade 24 -> 25zangrc
gcc-10.patch Removed since this is included in 25. Refresh the following patch: cross.patch makefile-add-ldflags.patch Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-18openipmi: upgrade 2.0.29 -> 2.0.30zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-17mbedtls: upgrade to 2.25.0Alexander Vickberg
Deleted build fix patch. This is already applied in this release. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-16ebtables: do not install /etc/ethertypesYi Zhao
The /etc/ethertypes is provided by netbase since 6.0[1]. Do not instal the file in ebtables, otherwise there would be a conflict: Error: Transaction test error: file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7_64 [1] https://salsa.debian.org/md/netbase/-/commit/316680c6a2c3641b6abc76b3eebf88781f609d35 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15samba: CVE-2020-14383 Security AdvisoryZheng Ruoqin
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15samba: CVE-2020-14318 Security AdvisoryZheng Ruoqin
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-12networkmanager: Fix reallocarray check in meson and configureKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-09mbedtls: upgrade to 2.24.0Alexander Vickberg
Download archives are no longer updated so fetch from Github. Add build fix from upstream. The file LICENSE now contains the full Apache 2.0 license text. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-29ptpd: Solve memory leak for function NTPDCrequestLi Zhou
Solve the memory leak in function NTPDCrequest detected by valgrind tool. Memory leak log example: ==619== 21 bytes in 1 blocks are still reachable in loss record 1 of 3 ==619== at 0x4A09DB0: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) ==619== by 0x43512E: NTPDCrequest (ntpdcontrol.c:255) ==619== by 0x43512E: NTPDCquery.isra.1 (ntpdcontrol.c:683) ==619== by 0x4359EE: ntpdInControl (ntpdcontrol.c:807) ==619== by 0x4364F5: ntpServiceUpdate (timingdomain.c:622) ==619== by 0x436935: timingDomainUpdate (timingdomain.c:756) ==619== by 0x4334A7: protocol (protocol.c:263) ==619== by 0x402BAE: main (ptpd.c:131) Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27wireguard-module: upgrade 1.0.20200908 -> 1.0.20201112Ricardo Salveti
Relevant changes: - fe40226 version: bump - d0bf51b qemu: bump default testing version - ce8faa3 compat: SYM_FUNC_{START,END} were backported to 5.4 - da5646f qemu: drop build support for rhel 8.2 - 99e954f netns: check that route_me_harder packets use the right sk - 25320ac noise: take lock when removing handshake entry from table Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27netplan: upgrade 0.99 -> 0.100zangrc
0001-src-parse.c-Initialize-key-to-NULL.patch Removed since this is included in 0.100. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27weechat: upgrade 2.9 -> 3.0zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27snort: upgrade 2.9.16.1 -> 2.9.17zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27nngpp: upgrade 1.2.4 -> 1.3.0zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27nghttp2: upgrade 2.41.0 -> 2.42.0zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-24tcpdump: Patch for CVE-2020-8037viatsk
Signed-off-by: Stacy Gaikovaia <stacy.gaikovaia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23chrony: Upgrade to 4.0Khem Raj
ChangeLog is here [1] Do not install /var/log as it conflicts with basefiles package Collected errors: * check_data_file_clashes: Package chrony wants to install file /var/log But that file is already provided by package * base-files Remove CVE patch since its upstream Forward port arm_eabi.patch patch Make builds reproducible [1] https://chrony.tuxfamily.org/news.html Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23unbound: upgrade to 1.12.0Beni
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23strongswan: upgrade 5.8.4 -> 5.9.1zangrc
0001-Remove-obsolete-setting-regarding-the-Standard-Outpu.patch Removed since this is included in 5.9.1 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23rdma-core: upgrade 31.1 -> 32.0zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-18traceroute: set VPATHMingli Yu
Fixes: make[1]: *** No rule to make target '-lm', needed by 'traceroute'. Stop. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-17openipmi: Inherit python3targetconfigKhem Raj
Fixes configure: error: Could not link test program to Python. Maybe the main Python library has been installed in some non-standard library path. If so, pass it to configure, via the LIBS environment variable. Example: ./configure LIBS="-L/usr/non-standard-path/python/lib" Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15opensaf: Fix build on 32bit arches with 64bit time_t e.g. RISCV-32Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15ntopng: Link with libatomic on rv32Khem Raj
Fixes build errors e.g. include/c++/10.2.0/bits/atomic_base.h:426: undefined reference to `__atomic_load_8' Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15spice: Add leading whitespace for append operatorKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-10strongswan: remove ldap from default PACKAGECONFIGNick Rosbrook
Since ldap is not a standard DISTRO_FEATURE, leave it disabled by default. Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-04-19 18:07:00 +0000