summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-daemons
Commit message (Collapse)AuthorAgeFilesLines
* squid: Backport fix for CVE-2023-50269Vijay Anusuri2024-03-032-0/+63
| | | | | | | | | | | | import patch from ubuntu to fix CVE-2023-50269 Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/squid/tree/debian/patches?h=ubuntu/focal-security&id=9ccd217ca9428c9a6597e9310a99552026b245fa Upstream commit https://github.com/squid-cache/squid/commit/9f7136105bff920413042a8806cc5de3f6086d6d] Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* squid: Fix for CVE-2023-49285 and CVE-2023-49286Vijay Anusuri2024-03-033-0/+124
| | | | | | | | | | Upstream-Status: Backport [https://github.com/squid-cache/squid/commit/77b3fb4df0f126784d5fd4967c28ed40eb8d521b & https://github.com/squid-cache/squid/commit/6014c6648a2a54a4ecb7f952ea1163e0798f9264] Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* squid: backport Debian patch for CVE-2023-46728 and CVE-2023-46846Vijay Anusuri2024-03-034-0/+1934
| | | | | | | | | | | | | | | | | import patches from ubuntu to fix CVE-2023-46728 CVE-2023-46846 Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/squid/tree/debian/patches?h=ubuntu/focal-security&id=9ccd217ca9428c9a6597e9310a99552026b245fa Upstream commit https://github.com/squid-cache/squid/commit/6ea12e8fb590ac6959e9356a81aa3370576568c3 & https://github.com/squid-cache/squid/commit/417da4006cf5c97d44e74431b816fc58fec9e270 & https://github.com/squid-cache/squid/commit/05f6af2f4c85cc99323cfff6149c3d74af661b6d] Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* proftpd: Fix CVE-2023-51713 Out-of-bounds buffer readHitendra Prajapati2024-01-162-0/+279
| | | | | | | Upstream-Status: Backport from https://github.com/proftpd/proftpd/commit/97bbe68363ccf2de0c07f67170ec64a8b4d62592 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* squid: fix CVE-2023-46847 Denial of Service in HTTP Digest Authenticationvkumbhar2023-12-172-0/+48
| | | | | | | Upstream-Status: Backport from https://github.com/squid-cache/squid/commit/052cf082b0faaef4eaaa4e94119d7a1437aac4a3 Signed-off-by: Vivek Kumbhar <vkumbhar@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postfix: upgrade 3.4.23 -> 3.4.27Yi Zhao2023-01-191-1/+1
| | | | | | | | Changelog: http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.4.27.HISTORY Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* proftpd: CVE-2021-46854 memory disclosure to radius serverHitendra Prajapati2023-01-192-0/+52
| | | | | | Upstream-Status: Backport from https://github.com/proftpd/proftpd/commit/10a227b4d50e0a2cd2faf87926f58d865da44e43 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
* cyrus-sasl: CVE-2022-24407 failure to properly escape SQL input allows an ↵Hitendra Prajapati2022-07-162-0/+84
| | | | | | | | | | | | | | | attacker to execute arbitrary SQL commands Source: https://github.com/cyrusimap/cyrus-sasl MR: 118501 Type: Security Fix Disposition: Backport from https://github.com/cyrusimap/cyrus-sasl/commit/9eff746c9daecbcc0041b09a5a51ba30738cdcbc ChangeID: 5e0fc4c28d97b498128e4aa5d3e7c012e914ef51 Description: CVE-2022-24407 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands. Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* atftp: Add fix for CVE-2021-41054 and CVE-2021-46671Ranjitsinh Rathod2022-05-253-0/+161
| | | | | | | | | | Add patches to fix CVE-2021-41054 and CVE-2021-46671 issues Link: https://nvd.nist.gov/vuln/detail/CVE-2021-41054 Link: https://nvd.nist.gov/vuln/detail/CVE-2021-46671 Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com> Signed-off-by: Ranjitsinh Rathod <ranjitsinhrathod1991@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postfix: upgrade 3.4.12 -> 3.4.23Yi Zhao2021-12-311-2/+2
| | | | | | | Changelog: http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.20.HISTORY Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* postfix: fix build with glibc 2.34Yi Zhao2021-12-312-0/+47
| | | | | | | | | | | | | | | | | | Backport a patch to fix build against glibc 2.34 (e.g. on Fedora 35) Fixes: | In file included from attr_clnt.c:88: | /usr/include/unistd.h:363:13: error: conflicting types for ‘closefrom’; have ‘void(int)’ | 363 | extern void closefrom (int __lowfd) __THROW; | | ^~~~~~~~~ | In file included from attr_clnt.c:87: | ./sys_defs.h:1506:12: note: previous declaration of ‘closefrom’ with type ‘int(int)’ | 1506 | extern int closefrom(int); | | ^~~~~~~~~ Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
* recipes: Update SRC_URI branch and protocolsArmin Kuster2021-11-174-4/+4
| | | | | | | | This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Armin Kuster <akuster808@gmail.com>
* cyrus-sasl: add CVE-2020-8032 to allowlistito-yuichi@fujitsu.com2021-07-051-0/+3
| | | | | | | | | | | This affects only openSUSE, so add it to allowlist. Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 711e932b14de57a5f341124470b2f3f131615a25) Signed-off-by: Armin Kuster <akuster808@gmail.com> (cherry picked from commit 26819375448077265cd4c9dbb88b6be08b899e3f) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* networkd-dispatcher: use git fetcherMartin Jansa2021-01-281-3/+4
| | | | | | | | | * now the gitlab QA check was backported to dunfell as well in: https://git.openembedded.org/openembedded-core/commit/?h=dunfell&id=72f2c45880afbba1745e5e0cbd841d7fd666f374 and this started failing with: ERROR: networkd-dispatcher-2.0.1-r0 do_package_qa: QA Issue: networkd-dispatcher: SRC_URI uses unstable GitHub/GitLab archives, convert recipe to use git protocol [src-uri-bad] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* iscsi-initiator-utils: upgrade 2.1.2 -> 2.1.3zangrc2021-01-252-50/+1
| | | | | | | | | | | | | | | | | | | | | | Source: git.openembedded.org MR: 108115, 108125, 108095, 108105 Type: Security Fix Disposition: Backport from https://git.openembedded.org/meta-openembedded/commit/meta-networking/recipes-daemons/iscsi-initiator-utils?id=46e30569e3b3d0cc66ce05e9accd759f37705feb ChangeID: 46e30569e3b3d0cc66ce05e9accd759f37705feb Description: 0001-libopeniscsiusr-Compare-with-max-int-instead-of-max-.patch Removed since this is included in 2.1.3 Bugfix only update. Also includes these CVE fixes: CVE-2020-13988 CVE-2020-13987 CVE-2020-17438 CVE-2020-17437 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster@mvista.com>
* iscsi-initiator-utils: Silence a clang warning on 64bit systemsKhem Raj2021-01-252-0/+49
| | | | | | | | This unbreaks the build with clang as well. Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 409032dcc59bed5051cca454f7344b3cd207cebf) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* iscsi-initiator-utils: Upgrade to _2.1.2Khem Raj2021-01-252-6/+34
| | | | | | | | | Fix build with clang Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit b99b2f5297a587188cf28e687111b58d7e358fb7) [Bug fix only update] Signed-off-by: Armin Kuster <akuster808@gmail.com>
* radvd: add /etc/radvd.confChangqing Li2020-07-302-1/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | When starting radvd without any configuration the following errors would be triggered. """ root@intel-x86-64:~# systemctl status radvd ● radvd.service - Router advertisement daemon for IPv6 Loaded: loaded (/lib/systemd/system/radvd.service; enabled; vendor preset: enabled) Active: inactive (dead) Condition: start condition failed at Tue 2019-09-24 13:29:36 UTC; 3s ago └─ ConditionPathExists=/etc/radvd.conf was not met """ Normally the user should create and configrue the /etc/radvd.conf manually. However the radvd provide a example file for redhad located at "radvd/redhat/radvd.conf.empty". When installing, it would copy radvd/redhat/radvd.conf.empty to /etc/radvd.conf. Also add this empty conf here to used as an example of configuration Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5af77740a46c334978adc7f37f53ea9a318d3a33) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* proftpd: Fix typo for SRC_URI[md5sum]Konrad Weihmann2020-06-121-1/+1
| | | | | | | Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5caca0f7bdefd28b9ecc446aea4177e2e297aa20) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postfix: Upgrade 3.4.10 -> 3.4.12Adrian Bunk2020-05-283-40/+2
| | | | | | | | | | Remove patch applied upstream. Manual -fcommon is no longer necessary. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 3d81f6d013b21a5db8e71328648aa896177e40eb) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postfix: Upgrade to 3.4.10 and compile with -fcommonKhem Raj2020-05-282-4/+2
| | | | | | | | Ensures it can build with gcc10 Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d04f3a1be3a6d7f57b3cc26cb3159b1055a5ee22) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postfix: split ${PN}-bin from ${PN} to solve recursive dependencyYi Zhao2020-04-171-7/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | The commit 89d86b96f80d8a136d38113baf69d8ccad5a5ff6 which tries to fix the installation issue for ostree introduces a recursive dependency issue. When installing the postfix package on target via online repository, the postinst function for postfix-cfg package needs newaliases but this command is from postfix package which causes an error: Configuring postfix-cfg. /var/lib/opkg/info/postfix-cfg.postinst: line 9: newaliases: not found pkg_run_script: package "postfix-cfg" postinst script returned status 127. Split a new package postfix-bin from postfix and make it as the runtime dependency for postfix-cfg. Set USERADD_PACKAGES to ${PN}-bin to avoid image do_rootfs warnings when installing postfix via IMAGE_INSTALL: [log_check] warning: group postdrop does not exist - using root [log_check] warning: user postfix does not exist - using root Set ALTERNATIVE to ${PN}-bin to make sure the newaliases symbolic link is installed before installing postfix-cfg. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.4.7 -> 3.4.8Wang Mingyu2020-04-081-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* igmpproxy: fix upstream check URLPierre-Jean Texier2020-04-041-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status igmpproxy <...> INFO: igmpproxy 0.2.1 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ptpd: fix upstream check URLPierre-Jean Texier2020-04-041-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status ptpd <...> INFO: ptpd 2.3.1 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: fix upstream check URLPierre-Jean Texier2020-04-041-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status opensaf <...> INFO: opensaf 5.19.10 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tftp-hpa: Use alternatives to avoid manpage conflictsOvidiu Panait2020-03-311-0/+5
| | | | | | | | | | | Fix the following manpage conflicts: * check_data_file_clashes: Package inetutils-doc wants to install file /usr/share/man/man1/tftp.1 But that file is already provided by package * tftp-hpa-doc * check_data_file_clashes: Package inetutils-doc wants to install file /usr/share/man/man8/tftpd.8 But that file is already provided by package * tftp-hpa-doc Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* proftpd: make prxs a mulitlib scriptJeremy Puhlman2020-03-061-1/+3
| | | | | | | | | Script encodes compiler settings and compiler name. my $compiler = q(x86_64-poky-linux-gcc -m64 -march=nehalem -mtune=generic -mfpmath=sse -msse4.2 ); Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* proftpd: remove macro-prefix-map from prxsJeremy Puhlman2020-03-061-0/+1
| | | | | | | | macro-prefix-map points to build WORKDIR which will cause reproducibilty failures. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: upgrade 2.0.878 -> 2.1.0Wang Mingyu2020-02-271-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cyrus-sasl: fix CVE-2019-19906Changqing Li2020-02-272-0/+36
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: Link with libatomic on riscvKhem Raj2020-01-281-0/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* keepalived: upgrade 2.0.19 -> 2.0.20Pierre-Jean Texier2020-01-271-2/+2
| | | | | | | See full changelog https://www.keepalived.org/changelog.html Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: update recipe to use python3Andrey Zhizhikin2020-01-272-2/+53
| | | | | | | | Update recipe to include support for python3. Introduce a patch which converts samples to utilize pytho3 on the target. Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: upgrade 5.19.07 -> 5.19.10Wang Mingyu2020-01-061-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ippool: Fix strncpy -Wformat-truncation warningKhem Raj2019-12-282-0/+40
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Adrian Bunk <bunk@stusta.de>
* recipes: rename distro_features_check to features_checkDenys Dmytriyenko2019-11-211-1/+1
| | | | | | | Avoid warning due to the class rename in OE-Core. Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: upgrade 4.6 -> 4.9Martin Balik2019-11-151-2/+2
| | | | | | Signed-off-by: Martin Balik <martin.balik@siemens.com> Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autofs: install sysvinit script manually if systemd is enabledAndreas Oberritter2019-11-071-0/+5
| | | | | | | | | Update-rc.d complains if no sysvinit script is present. This happens in hybrid systemd/sysvinit builds, because autofs does not install the init script if configured with '--with-systemd'. Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autofs: set some paths for configure scriptAndreas Oberritter2019-11-071-0/+6
| | | | | | | | The configure script used by autofs tries to detect paths on the build system. Avoid it by presetting fixed values. Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: upgrade 2.0.877 -> 2.0.878Zheng Ruoqin2019-11-014-299/+5
| | | | | | | | | | | | | | 1) Upgrade iscsi-initiator-utils from 2.0.877 to 2.0.878. 2) Remove patches have been merged in 2.0.878. 0001-Fix-i586-build-issues-with-string-length-overflow.patch 0001-Make-iscsid-systemd-usage-optional.patch 0001-Use-pkg-config-in-Makefiles-for-newer-libraries.patch 3) Fix DEPENDS and EXTRA_OECONF for systemd as in new version systemd is default on. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lldpd: Upgrade 1.0.3 -> 1.0.4Adrian Bunk2019-11-012-30/+2
| | | | | | | Backported patch removed. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pure-ftpd: upgrade 1.0.47 -> 1.0.49Zheng Ruoqin2019-11-012-18/+26
| | | | | | | | | | | | | | | 1) Upgrade pure-ftpd from 1.0.47 to 1.0.49. 2) Update LIC_FILES_CHKSUM as date has been changed. 3) Update 0001-Remove-hardcoded-usr-local-includes-from-configure.a.patch for 1.0.49. 4) Delete "--with-minimal" to fix error as follows: /usr/src/debug/pure-ftpd/1.0.49-r0/build/src/../../pure-ftpd-1.0.49/src/ls.c:1080: undefined reference to `modernformat' Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autofs: upgrade 5.1.5 -> 5.1.6Zang Ruochen2019-11-013-4/+35
| | | | | | | | | | | | | -When compiling version 5.1.6 on musl, the following error occurs: | In file included from defaults.c:32: | ../include/log.h:49:8: error: unknown type name 'pid_t' -Add autofs/0001-Bug-fix-for-pid_t-not-found-on-musl.patch to fix it. -Refresh the following patch: autofs/0001-Do-not-hardcode-path-for-pkg.m4.patch Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.4.5 -> 3.4.7Zheng Ruoqin2019-10-281-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* keepalived: upgrade 2.0.16 -> 2.0.19Zheng Ruoqin2019-10-281-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix.inc: make deterministic buildHongxu Jia2019-10-251-19/+6
| | | | | | | | | | | | | This postinst can fail depending on host setup, which makes non-deterministic build on different host. Use postinst ontarget to always fail at do_rootfs and rerun at target first boot. In this situation, remove postfix-native from PACKAGE_WRITE_DEPS Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: split /etc from ${PN} to ${PN}-cfg for ostreeHongxu Jia2019-10-251-2/+5
| | | | | | | | | | | | | | | | | | | In postinst of ${PN}, call newaliases on etc may fail at do_rootfs due to host setup. If fail, the postinst will rerun at target first boot which cause update-alternatives in postinst rerun. For ostree system, /usr is readonly, /etc is writable, the update-alternatives will be failed when run on target since it needs write files in /usr. Split the postinst into two packages can fix the problem: * update-alternatives runs at do_rootfs * newaliases runs at do_rootfs or first boot, it needs write files in /etc when run at first boot, while /etc is writable for ostree. For non-ostree, everything will be OK as normal Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pure-ftpd: Clarify BSD license variantChristophe PRIOUZEAU2019-10-241-1/+1
| | | | | | The License of pure-ftpd is BSD-0-Clause. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ptpd: Clarify BSD license variantChristophe PRIOUZEAU2019-10-241-1/+1
| | | | | | | The License of ptpd is BSD-2-Clause. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-19 21:00:27 +0000