summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* mbedtls: upgrade 2.28.3 -> 2.28.4Beniamin Sandu2023-09-071-1/+1
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 3.4.0 -> 3.4.1Beniamin Sandu2023-09-073-3/+3
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade 1.17.1 -> 1.18.0Beniamin Sandu2023-09-072-85/+3
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.0.7 -> 4.0.8Wang Mingyu2023-09-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ The following vulnerabilities have been fixed: wnpa-sec-2023-23 CBOR dissector crash. Issue 19144. wnpa-sec-2023-24 BT SDP dissector infinite loop. Issue 19258. wnpa-sec-2023-25 BT SDP dissector memory leak. Issue 19259. wnpa-sec-2023-26 CP2179 dissector crash. Issue 19229. The following bugs have been fixed: TShark cannot capture to pipe on Windows correctly. Issue 17900. Wireshark wrongly blames group membership when pcap capabilities are removed. Issue 18279. Packet bytes window broken layout. Issue 18326. RTP Player only shows waveform until sequence rollover. Issue 18829. Valid Ethernet CFM DMM packets are shown as malformed. Issue 19198. Crash on DICOM Export Objects window close. Issue 19207. The QUIC dissector is reporting the quic_transport_parameters max_ack_delay with the title \"GREASE\" Issue 19209. Preferences: Folder name editing behaves weirdly, cursor jumps. Issue 19213. DHCPFO: Expert info list does not show all expert infos. Issue 19216. Websocket packets not decoded and displayed for Field type=Custom and Field name websocket.payload.text. Issue 19220. Cannot read pcapng file captured on OpenBSD and read on FreeBSD. Issue 19230. UI: While capturing the Wireshark icon changes from green to blue when new file is created. Issue 19252. Conversation: heap-use-after-free after wmem_leave_file_scope. Issue 19265. IP Packets with DSCP 44 does not indicate "Voice-Admit" Issue 19270. NAS 5GS Malformed Packet Decoding SOR transparent container PLMN ID and access technology list. Issue 19273. UI: Auto scroll button in the toolbar is turned on when manually scrolling to the end of packet list. Issue 19274. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* traceroute: upgrade 2.1.2 -> 2.1.3Wang Mingyu2023-09-071-1/+1
| | | | | | | | Changelog: Fix command line parsing in wrappers. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: add missing runtime dependenciesYi Zhao2023-09-071-1/+8
| | | | | | | | | | | | | | | | Some perl modules are required by ntptrace: $ ntptrace Can't locate lib.pm in @INC (you may need to install the lib module) (@INC contains: /usr/lib/perl5/site_perl/5.36.0/x86_64-linux /usr/lib/perl5/site_perl/5.36.0 /usr/lib/perl5/vendor_perl/5.36.0/x86_64-linux /usr/lib/perl5/vendor_perl/5.36.0 /usr/lib/perl5/5.36.0/x86_64-linux /usr/lib/perl5/5.36.0) at /usr/sbin/ntptrace line 10. BEGIN failed--compilation aborted at /usr/sbin/ntptrace line 10. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vsomeip: add recipeYi Zhao2023-09-075-0/+335
| | | | | | | | | | | | | | | | The vsomeip stack implements the http://some-ip.com/ (Scalable service-Oriented MiddlewarE over IP (SOME/IP)) protocol. The stack consists out of: a shared library for SOME/IP (libvsomeip3.so) a shared library for SOME/IP's configuration module (libvsomeip3-cfg.so) a shared library for SOME/IP's service discovery (libvsomeip3-sd.so) a shared library for SOME/IP's E2E protection module (libvsomeip3-e2e.so) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Fix CVE-2023-41358 and CVE-2023-41360Robert Yang2023-09-073-0/+143
| | | | | | | | | | | Backport patches to fix CVE-2023-41358 and CVE-2023-41360. References: https://nvd.nist.gov/vuln/detail/CVE-2023-41358 https://nvd.nist.gov/vuln/detail/CVE-2023-41360 Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: fix pcap detection with /usr/lib32 multilibMartin Jansa2023-09-032-4/+87
| | | | | | | | | | | * use BPN, BP where useful * use prefix instead of hardcoding /usr * add patch to search also in lib32 subdir of --with-libpcap value to fix: checking for libpcap... configure: error: "Unable to find matching library for header file in TOPDIR/BUILD/work/raspberrypi4_64-oemllib32-linux-gnueabi/lib32-tcpreplay/4.4.4-r0/lib32-recipe-sysroot/usr" Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: Fix build with lld on muslKhem Raj2023-09-032-0/+32
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix build on muslKhem Raj2023-08-312-0/+42
| | | | | | | | musl does not need _IO_stdin_used, since its not provided by toolchain runtime ( crt files ) lld linker complains about undefined global symbol on musl Signed-off-by: Khem Raj <raj.khem@gmail.com>
* phodav: make sure systemd files are packaged correctlyMartin Jansa2023-08-301-1/+3
| | | | | | | | | | | | | | * fixes installed-vs-shipped QA issue with multilib: ERROR: lib32-phodav-3.0-r0 do_package: QA Issue: lib32-phodav: Files/directories were installed but not shipped in any package: /usr/lib/systemd /usr/lib/systemd/system /usr/lib/systemd/system/spice-webdavd.service Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. lib32-phodav: 3 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-guest-vdagent: add missing dependenciesMarkus Volk2023-08-301-2/+2
| | | | | | | | add x11 to REQUIRED_DISTRO_FEATURES Signed-off-by: Markus Volk <f_l_k@t-online.de> Acked-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: add missing dependency on orcMarkus Volk2023-08-301-1/+1
| | | | | | | | | this fixes: meson.build:139:23: ERROR: Dependency "orc-0.4" not found, tried pkgconfig Signed-off-by: Markus Volk <f_l_k@t-online.de> Acked-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Security fix CVE-2023-3748Yi Zhao2023-08-282-0/+55
| | | | | | | | | | | | | | | | | | | CVE-2023-3748: A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-3748 Patch from: https://github.com/FRRouting/frr/commit/ae1e0e1fed77716bc06f181ad68c4433fb5523d0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocol: fix populate_sdk error when spice is installedChen Qi2023-08-281-0/+2
| | | | | | | | | | | | | | | | | spice depends on spice-protocol, when IMAGE_INSTALL contains spice, do_populate_sdk fails with the following error: Error: Problem: package libspice-server-dev-0.14.2+git0+7cbd70b931_4fc4c2db36-r0.core2_64 requires spice-protocol-dev, but none of the providers can be installed - conflicting requests - nothing provides spice-protocol = 0.14.4-r0 needed by spice-protocol-dev-0.14.4-r0.core2_64 (try to add '--skip-broken' to skip uninstallable packages) For spice-protocol, it's a development package and all things are in the dev package, so set ALLOW_EMPTY to fix the above error. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-guest-vdagent: add recipeMarkus Volk2023-08-261-0/+25
| | | | | | | | | The spice-vdagent needs to be running alongside qemu-guest-agent on virtualizationguest systems that are using the spice protocol to get seamless integration. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* phodav: add recipeMarkus Volk2023-08-261-0/+23
| | | | | | | | | | | phodav is a small webdav server, that was originally created as a tool to provide folder sharing for spice but it can be used on a wider range of applications. It is usable e.g. in virt-viewer or gnome-boxes Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: upgrade 4.0.3 -> 4.0.4Wang Mingyu2023-08-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ Bug fixes:: ----------- * core: fix integer overflow when setting integer option with '++N' or '--N' * core: fix increment/decrement of options weechat.notify.* * irc: add missing tags on multiline messages (issue #1987) * irc: fix redirection of command '/list' when the reply doesn't start with message 321 (start of /list) * irc: fix wrong time displayed for CTCP messages received from self nick (issue #2000) * logger: remove trailing empty line in display of backlog (issue #2002) * perl: fix display of non-ASCII chars after load of a script with Perl >= 5.38 (issue #1996) * script: adjust scroll after command '/script go N' * scripts: fix function string_parse_size on 32-bit systems (python and ruby) (issue #1999) * xfer: fix conversion of string to IPv4 on 32-bit systems (issue #1999) Tests:: ------------ * irc: fix tests on function irc_join_compare_join_channel (issue #1997) * scripts: fix tests of functions print_date_tag, print_y_date_tags and hook_timer on 32-bit systems Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-gtk: fix api-documentation buildMarkus Volk2023-08-261-4/+8
| | | | | | | | - add support for smartcard - add missing rdepend on usbids Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: upgrade 0.14.2 -> 0.15.2Markus Volk2023-08-264-230/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | -switch to meson buildsystem -remove patches -update dependencies -fetch spice-common as a submodule Major Changes in 0.15.2: Really minor fix release, mainly to fix a distribution issue Add missing file to distribution Fix sound recording fix in case of buffer wrapping Major Changes in 0.15.1: Fix some compatibility issues with FreeBSD Fix some minor issue with build Improve packaging with Meson Lot of C++ improves (clang-tidy) Fix some compatibility with no-Glibc libraries (like Musl) Fix minor leaks shutting down library Add Doxygen file to distribution Fix a longstanding issue related to surface updates where wrong surfaces were possibly used Fix compatibility with OpenSSL 3 Updates and fixes for CI Use more random connection IDs to fix possible issues with proxies Major Changes in 0.15: This is the first release in the new 0.15.x stable series. This release should be ready for production use. Minor updates to CI Some compatibility with OpenSSL Change the behavior of handle_dev_start ignoring multiple start requests Ignore multiple calls to handle_dev_stop Pick up newer spice-common to fix a buffer overflow issue Major Changes in 0.14.91: IMPORTANT 0.14.91 is the first release candidate for the stable 0.15.x series. While some bugs might still be present, it should be reasonably stable. If you are looking for stability for daily use, please keep using the latest 0.14.x release. Support UNIX abstract sockets Fix some potential thread race condition in RedClient Many cleanups in the code Improve migration test script Update in protocol documentation Improve Meson build Removed CELT support Update CI Removed QXLWorker definition, it was deprecated 6 years ago Fix some compatibility with MacOS Fix some compatibility with Windows Move the project to C++ Some fixes for SASL dealing with WebDAV Fix minor Coverity reports Add Doxygen support, manually built with "make doxy" Support more mouse buttons (up to 16 buttons) CVE-2020-14355 multiple buffer overflow vulnerabilities in QUIC decoding code Major Changes in 0.14.3: Main changes are WebSocket and support for Windows. Add support for WebSocket, this will allow to use spice-html5 without proxy Support Windows, now Qemu Windows can be build enabling Spice Fix some alignment problem Converted some documentation to Asciidoc format to make easier to update, updated some Minor compatibility fix for PPC64EL and ARMHF Minor fixes for big endian machines like MIPS Avoid some crashes with some buggy guest drivers, simply ignore the invalid request Fix for old OpenSSL versions Minor fix for Windows clients and brushes, fixed an issue with Photoshop under Windows 7 Add ability to query video-codecs Small use-after-free fix Fix for debugging recording/replaying using QUIC images Fix a regression where spice reported no monitors to the client Fix DoS in spicevmc if WebDAV used Updated and improved test migration script Some minor fixes to smartcard support Avoid possible disconnection using proxies using a in-flow keepalive mechanism Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* usbredir: upgrade 0.9.0 -> 0.13.0Markus Volk2023-08-261-6/+4
| | | | | | | -switch to meson buildsystem Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcacard: add recipeMarkus Volk2023-08-261-0/+13
| | | | | | | libcacard is a library that adds smartcard support to qemu and/or spice Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.18.5 -> 4.18.6Yi Zhao2023-08-221-1/+1
| | | | | | | | Release Notes: https://www.samba.org/samba/history/samba-4.18.6.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.0.7 -> 1.0.8Yi Zhao2023-08-221-1/+1
| | | | | | | | Changelog: https://netfilter.org/projects/nftables/files/changes-nftables-1.0.8.txt Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: upgrade 4.0.2 -> 4.0.3Wang Mingyu2023-08-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== Bug fixes:: ---------- * core: fix input length and crash after delete of line * irc: fix display of self CTCP message containing bold attribute * irc: fix memory leak in IRC message parser * irc: fix switch to channel manually joined when server option autojoin_dynamic is on and option irc.look.buffer_switch_autojoin is off * irc: fix display of outgoing notice with channel when capability "echo-message" is enabled * relay: fix display of IRC CTCP messages received from client Build:: ----------- * doc: display a warning if a locale is missing with fallback to English for auto-generated content Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.42.8 -> 1.44.0Wang Mingyu2023-08-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== * Introduce a new "link" setting that holds properties related to the kernel link such as "tx-queue-length", "gso-max-size", "gso-max-segments", "gro-max-size". * Support sending a DHCPv6 prefix delegation hint via the "ipv6.dhcp-pd-hint" connection property. * Support new bond options: "arp_missed_max", "lacp_active", "ns_ip6_target". * Add new "initial-eps-bearer-configure" and "initial-eps-bearer-apn" properties in the GSM setting. * Setting "connection.stable-id=default${CONNECTION}" changed behavior to be identical to the built-in default value when the stable-id is not set. * Add a "[keyfile].rename" option to NetworkManager.conf to force renaming profiles on disk when their name changes. * The ifcfg-rh plugin is deprecated; it will only receive bugfixes and no new features. A warning is emitted the log when a connection in ifcfg-rh format is found. * To automatically migrate existing ifcfg-rh connections to the keyfile format, a new configuration option "main.migrate-ifcfg-rh" is provided. Migration is disabled by default, but the default value can be changed at build time via "--with-config-migrate-ifcfg-rh-default=yes". * When configuring hostnames in non-public TLD (like "example.local"), use the TLD as default search domain instead of the full hostname. * Always apply DNS options from the [global-dns] configuration section * The NetworkManager daemon now acquires the D-Bus name only after populating the D-Bus tree. This can add a delay during startup but it is required to avoid race conditions with other services depending on NM. * Add a "version-id" argument to the Update2() D-Bus call to guard against concurrent modifications of profiles. * Don't use tentative IPv6 addresses to resolve the system hostname via DNS. * Track the number of autoconnect retries left for each device and connection. Previously it was tracked only per connection and this lead to unexpected behaviors in case of multiconnect profiles. * Set VLAN filtering options on bridge via netlink instead of sysfs. * nm-cloud-setup now supports IMDSv2 on Amazon EC2. * nmtui now allows to enable or disable Wi-Fi and WWAN radios. * Honor ignore-carrier=no for bond/bridge/team devices. * Add version mismatch warning when running nmcli commands. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.3 -> 4.4Wang Mingyu2023-08-152-11/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | arm_eabi.patch refreshed for 4.4 Changelog: =========== * Add support for AES-GCM-SIV with Nettle >= 3.9 to shorten NTS cookies to avoid some length-specific blocking of NTP on Internet * Add support for multiple refclocks using extpps option on one PHC * Add maxpoll option to hwtimestamp directive to improve PHC tracking with low packet rates * Add hwtstimeout directive to configure timeout for late timestamps * Handle late hardware transmit timestamps of NTP requests on all sockets * Handle mismatched 32/64-bit time_t in SOCK refclock samples * Improve source replacement * Log important changes made by command requests (chronyc) * Refresh address of NTP sources periodically * Request nanosecond kernel RX timestamping on FreeBSD * Set DSCP for IPv6 packets * Shorten NTS-KE retry interval when network is down * Update seccomp filter for musl * Warn if loading keys from file with unexpected permissions * Warn if source selection fails or falseticker is detected * Add selectopts command to modify source-specific selection options * Add timestamp sources to serverstats report and make its fields 64-bit * Add -e option to chronyc to indicate end of response Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: add CVE_PRODUCTChen Qi2023-08-071-0/+2
| | | | | | | | vmware:tools is also a valid CVE_PRODUCT for open-vm-tools, e.g., https://nvd.nist.gov/vuln/detail/CVE-2023-20867. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* radvd: Fix groupname gid change warningJD Schroeder2023-08-051-0/+1
| | | | | | | | | | | | | | This patch fixes warnings when useradd-staticids.bbclass is used and USERADD_PARAM is used to add the user to a group that has not been explicitly created yet. By adding the GROUPADD_PARAM for the new group being used the warnings for changing the gid from GID-OLD to GID-NEW is eliminated. Warning fixed: radvd: Changing groupname nogroup's gid from (WXYZ) to (JKLM), verify configuration files! Signed-off-by: JD Schroeder <sweng5080@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* remove unused AUTHOR variableMichael Opdenacker2023-08-035-5/+0
| | | | | | | | | No longer used in generating packages Also creates a possible confusion with the recipe maintainer name. Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 46.0 -> 47.0Wang Mingyu2023-08-011-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdio-tools,mdio-netlink: Upgrade recipes to 1.3.0Wang Mingyu2023-08-013-1/+1
| | | | | | | | | | | | | | | | | | Changelog: =========== Primarily widen the gamut of supported kernel versions, now supporting all kernels from 5.2 and onwards. Added ------ mvls: Support for 88E6320/88E6321 Changed -------- mdio-netlink: Adapt to the upstream C22/C45 refactor. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* babeld: upgrade 1.12.2 -> 1.13.1Wang Mingyu2023-08-011-1/+1
| | | | | | | | | | | | | | | | | Changelog: ========== * Implemented the per-interface option "probe-mtu", which automatically discards links with a mis-configured MTU. * Fixed a typo in the handing of the option "v4viav6". * Removed diversity support and related configuration file directives. * Optimised route redistribution. We now install just the route that the kernel sent us rather than doing a full route dump on every change. * Added optional delay to daemon shutdown; see the configuration option "shutdown-delay-ms". * Fixed compilation under BSD. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cve_check: fix conversion errorsPeter Marko2023-07-312-3/+3
| | | | | | | | Conversion from CVE_CHECK_IGNORE to CVE_STATUS had some copy+paste issues. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* daq: enable nfq module buildYi Zhao2023-07-282-7/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | NFQ is the new and improved way to process iptables packets. Snort IPS mode requires this module in some cases. Before the patch: $ snort --daq-list Available DAQ modules: pcap(v3): readback live multi unpriv ipfw(v3): live inline multi unpriv dump(v3): readback live inline multi unpriv afpacket(v5): live inline multi unpriv After the patch: $ snort --daq-list Available DAQ modules: pcap(v3): readback live multi unpriv nfq(v7): live inline multi ipfw(v3): live inline multi unpriv dump(v3): readback live inline multi unpriv afpacket(v5): live inline multi unpriv Also update 0001-correct-the-location-of-unistd.h.patch to fix build with musl. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-queue: enable native buildYi Zhao2023-07-281-0/+2
| | | | | | | Required by daq native build. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnfnetlink: enable native buildYi Zhao2023-07-281-0/+2
| | | | | | | Required by libnetfilter-queue native build. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.18.4 -> 4.18.5Yi Zhao2023-07-271-1/+1
| | | | | | | | | | | | | | | This is a security release in order to address the following defects: CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 Release Notes: https://www.samba.org/samba/history/samba-4.18.5.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-2711-61/+30
| | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dlm: Do not use -fcf-protection=full on aarch64 platformsMartin Jansa2023-07-211-0/+1
| | | | | | | | | | | Its not supported option, see: http://errors.yoctoproject.org/Errors/Details/721121/ aarch64-oe-linux-gcc -mcpu=cortex-a57 -march=armv8-a+crc -mbranch-protection=standard --sysroot=TOPDIR/tmp-glibc/work/cortexa57-oe-linux/dlm/4.2.0-r0/recipe-sysroot libdlm.c -O2 -pipe -g -feliminate-unused-debug-types -fcanon-prefix-map -fmacro-prefix-map=TOPDIR/tmp-glibc/work/cortexa57-oe-linux/dlm/4.2.0-r0/dlm-dlm-4.2.0=/usr/src/debug/dlm/4.2.0-r0 -fdebug-prefix-map=TOPDIR/tmp-glibc/work/cortexa57-oe-linux/dlm/4.2.0-r0/dlm-dlm-4.2.0=/usr/src/debug/dlm/4.2.0-r0 -fmacro-prefix-map=TOPDIR/tmp-glibc/work/cortexa57-oe-linux/dlm/4.2.0-r0/dlm-dlm-4.2.0=/usr/src/debug/dlm/4.2.0-r0 -fdebug-prefix-map=TOPDIR/tmp-glibc/work/cortexa57-oe-linux/dlm/4.2.0-r0/dlm-dlm-4.2.0=/usr/src/debug/dlm/4.2.0-r0 -fdebug-prefix-map=TOPDIR/tmp-glibc/work/cortexa57-oe-linux/dlm/4.2.0-r0/recipe-sysroot= -fmacro-prefix-map=TOPDIR/tmp-glibc/work/cortexa57-oe-linux/dlm/4.2.0-r0/recipe-sysroot= -fdebug-prefix-map=TOPDIR/tmp-glibc/work/cortexa57-oe-linux/dlm/4.2.0-r0/recipe-sysroot-native= -fcf-protection=full -D_GNU_SOURCE -O2 -ggdb -Wall -Wformat -Wformat-security -Wmissing-prototypes -Wnested-externs -Wpointer-arith -Wextra -Wshadow -Wcast-align -Wwrite-strings -Waggregate-return -Wstrict-prototypes -Winline -Wredundant-decls -Wno-sign-compare -Wno-unused-parameter -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fstack-protector-strong -fstack-clash-protection -fexceptions -fasynchronous-unwind-tables -fdiagnostics-show-option -fPIC -D_REENTRANT -c -o libdlm.o cc1: error: '-fcf-protection=full' is not supported for this target Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.0.6 -> 4.0.7Wang Mingyu2023-07-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== The following vulnerabilities have been fixed: wnpa-sec-2023-21[3] Kafka dissector crash. Issue 19105[4]. wnpa-sec-2023-22[5] iSCSI dissector crash. Issue 19164[6]. The following bugs have been fixed: -Crash when (re)loading a capture file after renaming a dfilter macro. Issue 13753[7]. - Moving a column deselects selected packet and moves to beginning of packet list. Issue 16251[8]. -If you set the default interface in the preferences, it doesn't work with TShark. Issue 16593[9]. -Severe performance issues in Follow → Save As raw workflow. Issue 17313[10]. -TShark doesn't support the tab character as an aggregator character in \"-T fields\" Issue 18002[11]. -On Windows clicking on a link in the 'Software Update' window launches, now unsupported, MS Internet Explorer. Issue 18488[12]. -Wireshark 4.x.x on Win10-x64 crashes after saving a file with a name already in use. Issue 18679[13]. -NAS-5GS Operator-defined Access Category: Multiple Criteria values not displayed in dissected packet display. Issue 18941[14]. -Server Hello Packet Invisible - during 802.1x Authentication- from Wireshark App Version 4.0.3 (v4.0.3-0-gc552f74cdc23) & above. Issue 19071[15]. -TShark reassembled data is incomplete/truncated. Issue 19107[16]. CQL protocol parsing issues with 'Result' frames from open source Cassandra. Issue 19119[17]. -TLS 1.3 second Key Update doesn't work. Issue 19120[18]. -HTTP2 dissector reports an assertion error on large data frames. Issue 19121[19]. -epan: Single letter hostnames aren't displayed correctly. Issue 19137[20]. -BLF: CAN-FD-Message format is missing a field. Issue 19146[21]. -BLF: last parameter of LIN-Message is not mandatory (BUGFIX) Issue 19147[22]. -PPP IPv6CP: Incorrect payload length warning. Issue 19149[23]. -INSTALL file needs to be updated for Debian. Issue 19167[24]. -Some RTP streams make Wireshark crash when trying to play stream. Issue 19170[25]. -Wrong ordering in OpenFlow 1.0 Datapath unique ID. Issue 19172[26]. -Incorrect mask in RTCP slice picture ID. Issue 19182[27]. -Dissection error in AMQP 1.0. Issue 19191[28]. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: upgrade 4.0.1 -> 4.0.2Wang Mingyu2023-07-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== Bug fixes:: * core: fix renaming of options with command '/item rename' * core: don't send "key_pressed" signal again for the same key press * core: don't send "key_combo_*" signals for incomplete keys * core: add key ctrl-backspace in /help key * core: keep keys ctrl-H and ctrl-? (in lower case) if they were manually bound to custom commands in a previous version Tests:: * core: fix hdata tests failure on Alpine 3.18 * relay: fix crash in tests on Alpine 3.18 Build:: * php: fix detection of PHP 8.2 on Alpine 3.18 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.2.5 -> 1.2.6Wang Mingyu2023-07-201-1/+1
| | | | | | | | | | | Changelog: ========= tests: nft-rule-test: Add test cases to improve code coverage tests: nft-table-test: fix typo shixuantong expr: meta: introduce broute meta expression Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: Pass cross configure flags to bind buildKhem Raj2023-07-151-1/+8
| | | | | | | | | | | | | This ensures that host tools like 'gen' are built for build host and not target. internal bind build supplies its own options to configuring it, where it does not pass --host option and as a result it does not deduce it to be a cross compile and hence these variables are not set property inside bind build Fixes | ./gen: /usr/lib/libc.so.6: version `GLIBC_2.38' not found (required by ./gen) Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dlm: Do not use -fcf-protection=full on arm platformsKhem Raj2023-07-151-0/+1
| | | | | | Its not supported option Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dlm: Do not pass -fcf-protection=full via MakefileKhem Raj2023-07-152-5/+70
| | | | | | | | | Pass it via cflags from environment, so it can be controlled for platforms where it is not supported Pass -fstack-clash-protection for clang too, it is available now a days Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dlm: Fix build with linux kernel 6.4+Khem Raj2023-07-153-0/+70
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdio-tools: Update to latest on trunkKhem Raj2023-07-151-1/+1
| | | | | | This brings fixed for compiling kmod with linux 6.4+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dlm: Upgrade to 4.2.0Khem Raj2023-07-133-61/+1
| | | | | | | Drop upstreamed patch and another patch which is fixed differently upstream Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-22 08:28:56 +0000