summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-protocols
Commit message (Collapse)AuthorAgeFilesLines
* frr: Security fix CVE-2023-3748Yi Zhao2023-08-282-0/+55
| | | | | | | | | | | | | | | | | | | CVE-2023-3748: A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-3748 Patch from: https://github.com/FRRouting/frr/commit/ae1e0e1fed77716bc06f181ad68c4433fb5523d0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* remove unused AUTHOR variableMichael Opdenacker2023-08-031-1/+0
| | | | | | | | | No longer used in generating packages Also creates a possible confusion with the recipe maintainer name. Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* babeld: upgrade 1.12.2 -> 1.13.1Wang Mingyu2023-08-011-1/+1
| | | | | | | | | | | | | | | | | Changelog: ========== * Implemented the per-interface option "probe-mtu", which automatically discards links with a mis-configured MTU. * Fixed a typo in the handing of the option "v4viav6". * Removed diversity support and related configuration file directives. * Optimised route redistribution. We now install just the route that the kernel sent us rather than doing a full route dump on every change. * Added optional delay to daemon shutdown; see the configuration option "shutdown-delay-ms". * Fixed compilation under BSD. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-272-20/+14
| | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 8.4.2 -> 8.4.4Yi Zhao2023-06-281-1/+1
| | | | | | | | | ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.4 https://github.com/FRRouting/frr/commit/45e36c0c00a517ad1606135b18c5753e210cfc0d Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* *.patch: add Upstream-Status to all patchesMartin Jansa2023-06-2121-0/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: remove unneeded headersBeniamin Sandu2023-06-192-0/+34
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: allow disabling subscriptionsJohannes Kauffmann2023-06-141-1/+3
| | | | | | | By default, subscriptions are turned on. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: add multithreading PACKAGECONFIG optionJohannes Kauffmann2023-06-141-0/+1
| | | | | | | | By default, open62541 is built without multithreading support. Make this configurable. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: build optimized binaryJohannes Kauffmann2023-06-051-0/+1
| | | | | | | Without any build type specified, open62541 defaults to "Debug". Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: update to v1.3.6Johannes Kauffmann2023-05-311-1/+1
| | | | | | | Since v1.3.4, support for OpenSSL 3.0 has been added. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zeroconf: Pass cflags from environmentKhem Raj2023-05-261-0/+2
| | | | | | | Fixes WARNING: zeroconf-0.9-r1 do_package_qa: QA Issue: File /usr/sbin/.debug/zeroconf in package zeroconf-dbg contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: add OpenSSL as crypto providerJohannes Kauffmann2023-05-231-1/+2
| | | | | | | | Since multiple crypto provider aren't supported simultaneously, the mbedtls packageconfig conflicts with the openssl packgeconfig. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: rename encryption PACKAGECONFIGJohannes Kauffmann2023-05-231-2/+2
| | | | | | | ... in anticipation for OpenSSL as crypto provider. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* babeld: Upgrade to 1.12.2Khem Raj2023-05-231-1/+3
| | | | | | | Fix buildpath QA errors while here by passing bitbake provided cflags to build env Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: disable warnings as errorsJohannes Kauffmann2023-05-091-0/+1
| | | | | | | | | When using OpenSSL as the encryption provider, the package does not build without deprecation warnings, thus breaking the build. Disable warnings as errors to unbreak the build. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: allow overriding encryption providersJohannes Kauffmann2023-05-091-1/+1
| | | | | | | | | | | | | | | | | | | Without "encryption" PACKAGECONFIG, the option UA_ENABLE_ENCRYPTION=OFF is passed, which disables encryption support altogether and makes it impossible to override the encryption provider. Since no encryption support is already the default, we don't have to specify anthing to disable encryption. Additionally, explicitly specify MbedTLS as the encryption provider; this is the preferred way to enable any one of the three supported providers (LibreSSL, OpenSSL or MbedTLS). The current method prints a deprecation warning: CMake Deprecation Warning at CMakeLists.txt:200 (message): Set UA_ENABLE_ENCRYPTION to the desired encryption library. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: add CVE_PRODUCTChen Qi2023-05-081-0/+2
| | | | | | | The CVE_PRODUCT is frrouting in NVD database. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freediameter: fix typo and old overide syntaxBergin, Peter2023-05-021-1/+1
| | | | | | | | | | A typo that probably caused a left over from override syntax conversion. INITSCRIPT_PARAMS$_${PN} --> INITSCRIPT_PARAMS:${PN} Signed-off-by: Peter Bergin <peter.bergin@windriver.com> Signed-off-by: Peter Bergin <peter@berginkonsult.se> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* radiusclient-ng: Point SRC_URI to archive.ubuntu.comKhem Raj2023-05-011-2/+1
| | | | | | This tarball is not available on debian ftp archive anymore Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rp-pppoe: Point SRC_URI to valid locationKhem Raj2023-04-301-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rp-pppoe: Define _GNU_SOURCEKhem Raj2023-03-221-0/+3
| | | | | | Ensures that it picks up definitions of strlcpy() from string.h Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rp-pppoe: upgrade 3.14 -> 3.15Wang Mingyu2023-03-094-122/+16
| | | | | | | | | | | | dont-swallow-errors.patch configure.in-Error-fix.patch removed since they're not available in 3.14. configure_in_cross.patch refreshed for 3.14. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: support more archesYi Zhao2023-03-081-9/+1
| | | | | | | Now frr can support more arches as libyang can be built on all arches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: drop recipeYi Zhao2023-03-0516-694/+0
| | | | | | | | | | | | | | | Quagga is no longer maintained since 2018[1]. Its official repository is not even available[2]. As an alternative, users can use FRRouting[3] which has been added to meta-networking[4]. [1] https://github.com/Quagga/quagga [2] https://git.savannah.gnu.org/cgit/quagga.git [3] https://frrouting.org [4] https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/frr Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: add UPSTREAM_CHECK_GITTAGREGEXYi Zhao2023-03-051-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version frr INFO: Current version: 8.4.2 INFO: Latest version: 9.0 INFO: Latest version's commit: 16c38045b1a84f899da473398779cc593d82d2bd Version 9.0 is a development tag[1]. After the patch: $ devtool latest-version frr INFO: Current version: 8.4.2 INFO: Latest version: 8.4.2 INFO: Latest version's commit: 9e25d07412e92bdcd1f69c4755dc7564b23023c0 [1] https://github.com/FRRouting/frr/tags Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* .patch: fix Upstream-Status formatting issues reported by patchreview tool ↵Martin Jansa2023-02-247-20/+20
| | | | | | | from oe-core Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: CVE-2022-44792 & CVE-2022-44793 Fix NULL Pointer ExceptionNarpat Mali2023-02-092-0/+122
| | | | | | | | | References: https://nvd.nist.gov/vuln/detail/CVE-2022-44792 https://nvd.nist.gov/vuln/detail/CVE-2022-44793 Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 8.4.1 -> 8.4.2Yi Zhao2023-02-072-1/+2
| | | | | | | | | | | | | | ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.2 Per [1], update frr.pam to eliminate the warning issued by pam: vtysh[485]: pam_warn(frr:account): function=[pam_sm_acct_mgmt] flags=0 service=[frr] terminal=[<unknown>] user=[root] ruser=[<unknown>] rhost=[<unknown>] [1] https://github.com/FRRouting/frr/commit/6031b8a3224cde14fd1df6e60855310f97942ff9 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Upgrade 1790.60.25 -> 1790.80.10Alex Kiernan2023-02-031-1/+1
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dante: Add -P to preprocessor flagsKhem Raj2023-01-291-0/+1
| | | | | | | | | | | | | | | | | | | configure uses AC_PREPROC_IFELSE to check for certain errors from getaddrinfo() it user search operation in a preprocessed file UNIQUEVALS=`sort $ERRVALFILE | uniq | wc -l | awk '{ print $1 }'` However, line numbers are generated into the preprocesser files and they get sorted higher than numbers gaierrval: # 130 "conftest.c" 3 4 -3 -P ensures that line numbers are not generated into preprocessed files, so these checks can succeed. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* .patch: fix Upstream-Status formatting issues reported by patchreview tool ↵Martin Jansa2023-01-272-2/+2
| | | | | | | from oe-core Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Fix build with clang16Khem Raj2023-01-212-0/+33
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Upgrade 1790.40.31 -> 1790.60.25Alex Kiernan2022-12-141-2/+2
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Set MDNS_VERSIONSTR_NODTSAlex Kiernan2022-12-141-0/+4
| | | | | | | | MDNS_VERSIONSTR_NODTS disables __DATE__ and __TIME__ in the version string, which are fixed anyway for build reproducibility. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 8.3.1 -> 8.4.1Yi Zhao2022-12-146-282/+9
| | | | | | | | | | Drop backport patches. ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Upgrade 1310.140.1 -> 1790.40.31Alex Kiernan2022-12-0923-557/+707
| | | | | | | | | | | | | | | | | | | | | | | | Reinstate and rework patches from @garmin.com dropped in 21afab4609d0 ("mdns: update to version 1096.40.7") as these were the functional pieces of this series; we should either maintain it as a whole or drop it in its entirety. With this update and without this series, steady-state operation is a constant churn of all names being removed and re-added every few seconds. These were refactored to handle the move to getifaddrs() from get_ifi_info(). Check and cleanup all the other patches, much of which was redundant. Move source releases to github which is where the Apple site now redirects to (though these are still effectively just tarball dumps into git). Cleanup the recipe so it doesn't override all the packaging defaults. Fixup musl installs so they don't fail attempting to patch a non-existent /etc/nsswitch.conf. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: add a patch to correctly check presence of python from pkg-configAlexander Kanavin2022-11-102-1/+30
| | | | | Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Security fix CVE-2022-37032Yi Zhao2022-10-122-0/+44
| | | | | | | | | | | | | | | | CVE-2022-37032: An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-37032 Patch from: https://github.com/FRRouting/frr/commit/066770ac1c69ee5b484bb82581b22ad0423b004d Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: Disable lto on riscv/clangKhem Raj2022-10-041-0/+9
| | | | | | | | | | clang errors out linking lto objects riscv64-yoe-linux-musl-ld: /tmp/lto-llvm-d497c5.o: can't link soft-float modules with double-float modules This is something needs to be addressed in clang for riscv as of now disable lto for rv32/rv64 when using clang Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opcua: Add new recipeVyacheslav Yurkov2022-10-032-0/+60
| | | | | | | | | | | | open62541 (http://open62541.org) is an open source and free implementation of OPC Unified Architecture according to IEC62541 standard The patch exclude git-related files from installation directory Upstream-Status: Accepted https://github.com/open62541/open62541/commit/a0328d4cb527f9778a262fc4a6b42bfbdffc38e9 Signed-off-by: Vyacheslav Yurkov <v.yurkov@precitec.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 8.2.2 -> 8.3.1Yi Zhao2022-09-294-3/+206
| | | | | | | | Backport patches to fix build error with --disable-ospfapi and CVE-2022-37035. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: Fix AC_CHECK_LIB for libreadlineKhem Raj2022-09-012-0/+34
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Fix configure check for libreadlineKhem Raj2022-09-012-0/+31
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openl2tp: Provide prototype for l2tp_api_rpc_check_requestKhem Raj2022-08-303-0/+75
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openlldp: Upgrade to 1.1.0Khem Raj2022-08-3012-1217/+26
| | | | | | | | Drop already upstreamed patches Add fix for clang15 build Drop Wno-error Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openflow: Include sys/stat.h for fchmodKhem Raj2022-08-302-2/+25
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dante: Upgrade to 1.4.3Khem Raj2022-08-301-6/+6
| | | | | | | | | License-Update: Dates and address changed Link with libtirpc for bindresvport() implementation Drop krb5 packageconfig, its gone from this version Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freediameter: fix buildpaths issueMingli Yu2022-08-244-75/+97
| | | | | | | | | | | | | | | | | | The pass-ptest-env.patch uses ${B}/extensions as the EXTENSIONS_DIR at build time and pass the env variable EXTENSIONS_DIR as ${libdir}/${fd_pkgname} at run time to fix the run time error. But there still exists buildpaths issue. So rework the pass-ptest-env.patch to make sure EXTENSIONS_DIR to be ${libdir}/${fd_pkgname} both in build and run time. Fixes: WARNING: freediameter-1.4.0-r0 do_package_qa: QA Issue: File /usr/lib/freeDiameter/ptest/testloadext in package freediameter-ptest contains reference to TMPDIR File /usr/lib/freeDiameter/ptest/testmesg_stress in package freediameter-ptest contains reference to TMPDIR File /usr/lib/freeDiameter/ptest/CTestTestfile.cmake in package freediameter-ptest contains reference to TMPDIR [buildpaths] WARNING: freediameter-1.4.0-r0 do_package_qa: QA Issue: File /usr/src/debug/freediameter/1.4.0-r0/build/libfdcore/fdd.tab.c in package freediameter-src contains reference to TMPDIR Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: upgrade 5.9.1 -> 5.9.3Ovidiu Panait2022-08-1214-126/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade summary: ---------------- - drop 0002-configure-fix-a-cc-check-issue.patch, as it was replaced with upstream commit https://github.com/net-snmp/net-snmp/commit/dbb49acfa2af - drop 0001-snmpd-always-exit-after-displaying-usage.patch backport - rebase net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch manually - refresh patches with devtool to get rid of fuzz Changelog: ---------- *5.9.3*: security: - These two CVEs can be exploited by a user with read-only credentials: - CVE-2022-24805 A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference. - These CVEs can be exploited by a user with read-write credentials: - CVE-2022-24806 Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously - CVE-2022-24807 A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. - CVE-2022-24808 A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference. - To avoid these flaws, use strong SNMPv3 credentials and do not share them. If you must use SNMPv1 or SNMPv2c, use a complex community string and enhance the protection by restricting access to a given IP address range. - Thanks are due to Yu Zhang of VARAS@IIE and Nanyu Zhong of VARAS@IIE for reporting the following CVEs that have been fixed in this release, and to Arista Networks for providing fixes. Windows: - WinExtDLL: Fix multiple compiler warnings - WinExtDLL: Make long strings occupy a single line Make it easier to look up error messages in the source code by making long strings occupy a single source code line. - WinExtDLL: Restore MIB-II support Make winExtDLL work on 64-bit Windows systems") caused snmpd to skip MIB-II on 64-bit systems. IF-MIB: Update ifTable entries even if the interface name has changed At least on Linux a network interface index may be reused for a network interface with a different name. Hence this patch that enables replacing network interface information even if the network interface name has changed. unspecified: - Moved transport code into a separate subdirectory in snmplib - Snmplib: remove inline versions of container funcs". misc: - snmp-create-v3-user: Fix the snmpd.conf path @datadir@ is expanded in ${datarootdir} so datarootdir must be set before @datadir@ is used. *5.9.2*: skipped due to a last minute library versioning found bug -- use 5.9.3 instead Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-22 08:55:01 +0000