Commit Graph

489 Commits

Author SHA1 Message Date
Meenali Gupta f77bc7fda8 lldpd: upgrade 1.0.16 -> 1.0.17
This release only contains bugfixes and security fixes.

Highlighted bugfixes in 1.0.17:
      Read overflow when parsing CDP addresses. Thanks to Matteo Memelli.
      Don't output empty lines on configure commands.
Changelog:
      https://github.com/lldpd/lldpd/releases/tag/1.0.17

References: 
     https://nvd.nist.gov/vuln/detail/CVE-2023-41910

Signed-off-by: Meenali Gupta <meenali.gupta@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2023-10-15 19:09:42 -04:00
Martin Jansa 285b7cd79f .patch: fix Upstream-Status formatting issues reported by patchreview tool from oe-core
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-24 08:45:44 -08:00
Martin Jansa 80fbf964e1 openhpi, uw-imag, python3-m2crypto: replace Unknown Upstream-Status with Pending
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-24 08:45:44 -08:00
Jan Luebbe 6c48a651b6 atftp: use https for git repository access
Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-18 13:19:36 -08:00
Jan Luebbe afc7637239 atftp: upgrade from 0.7.5 to 0.8.0
Signed-off-by: Jan Luebbe <jlu@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-18 13:19:36 -08:00
Wang Mingyu c24f88a02b iscsi-initiator-utils: upgrade 2.1.7 -> 2.1.8
0002-iscsiuio-Use-pthread_t-for-INVALID_THREAD.patch
removed since it's included in 2.1.8.

0001-Makefile-Do-not-set-Werror.patch
refreshed for 2.1.8

Changelog:
===========
 make: avoid hard-coding path to sed (#357)
 etc: install system unit with without executable bit (#354)
 Add ability for MGMT IPC to check UID only
 Use config for iscsistart and iscsiadm fw login
 iscsiuio: Use pthread_t for INVALID_THREAD (#363)
 Add a 'distclean' Makefile top-level target
 Cleanup fwparam makefile (#360)
 Small bug fixes (#364)
 Use meson as the main build system (#365)
 libopeniscsiusr: cleanup recent reallocarray->realloc change (#369)
 Added examples in man file for iscsiadm session commands.
 iscsid: fix logout pdu send failure handling
 Update README's error handler/timeout section
 iscsiuio: fix LDADD
 libopeniscsiusr: use realloc instead of reallocarray (#368)
 iscsiadm: enable specify iface name-value parameters when creating iface
 Fix a possible passing null pointer in usr/iface.c (#356)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-02-16 19:33:29 -08:00
Martin Jansa ea63f13846 .patch: fix Signed-off-by formatting issues reported by patchreview tool from oe-core
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-01-27 17:06:52 -08:00
Martin Jansa e99f187966 .patch: fix Upstream-Status formatting issues reported by patchreview tool from oe-core
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-01-27 17:06:52 -08:00
Khem Raj 8284a018f3 opensaf: Fix build with gcc13
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-01-26 10:24:25 -08:00
Khem Raj b075f0e44c ippool: Use unsigned int type for 1-bit integer bitfield
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-01-21 10:02:02 -08:00
Khem Raj 5d304b24af opensaf: Fix the check for __fsblkcnt64_t size
The size on glibc depends on time_t size which is 64bit on newer
architectures like rv32 while on musl it is indicated by _FILE_OFFSET_BITS
therefore check for both

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2023-01-04 15:33:58 -08:00
Khem Raj 3705caf227 vsftpd_3.0.5.bb: Define _LARGEFILE64_SOURCE on musl
Needed for F_SETLKW64

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-12-31 10:40:31 -08:00
Kai Kang b75c138a1c postfix: fix multilib conflict of sample-main.cf
It fails to install postfix and lib32-postfix at same time:

| Error: Transaction test error:
|   file /etc/postfix/sample-main.cf conflicts between attempted installs of
    lib32-postfix-cfg-3.7.3-r0.i586 and postfix-cfg-3.7.3-r0.core2_64

Rename sample-main.cf with ${MLPREFIX}.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-12-05 18:02:40 -08:00
Khem Raj 4635b1c427 opensaf: Check for _FILE_OFFSET_BITS instead of __TIMESIZE
This is fixing both LFS as well as 64bit time_t issue in one go

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-30 09:46:47 -08:00
Peter Kjellerstedt 9cbd247b42 lldpd: Correct the checksum for the tar ball to match 1.0.16
The checksum was not updated when the recipe version was stepped.

Also simplify the SRC_URI by replacing "${BPN}-${PV}" with "${BP}".

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-29 14:07:52 -08:00
Peter Kjellerstedt 040b55ce99 Revert "lldpd: Use github release assets for SRC_URI"
This reverts commit e154914718.

The change of SRC_URI was probably triggered by the checksum for the
tarball not having been updated when the recipe version was stepped.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-29 14:07:52 -08:00
Khem Raj e154914718 lldpd: Use github release assets for SRC_URI
media.luffy.cx seems unreliable as AB is not able to fetch it

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-23 08:25:30 -08:00
Wang Mingyu a56dcf44c7 lldpd: upgrade 1.0.15 -> 1.0.16
Fix:
--------
    Do not use 00:00:00:00:00:00 as chassis ID.
    Do not busy loop when an interface with a neighbor disappears.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-19 08:11:45 -08:00
Xiangyu Chen 7fe87bea09 lldpd: add ptest for lldpd package
Signed-off-by: Xiangyu Chen <xiangyu.chen@eng.windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-11 11:45:17 -08:00
Alex Kiernan c782674d3f lldpd: Upgrade 1.0.14 -> 1.0.15
Add github-releases to make new releases discoverable.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-22 16:01:22 -07:00
Khem Raj dd5226bed9 postfix: Upgrade to 3.7.3
Fix build on systems with linux 6.x

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-19 10:33:43 -07:00
Andrej Kozemcak 1dc95cae90 squid: upgrade 4.15 -> 5.7
- drop included patches
- refresh remaining patches
- update to new ptest

Licence change: update year

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-09-22 16:45:05 -07:00
Khem Raj 0abaecf0a6 tftp-hpa: Fix includes for bsd_signal()
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-09-07 16:44:54 -07:00
Khem Raj 014326ebca autofs: Backport innetgr and strerror_r musl patches
Fixes build with musl/x86

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-09-05 22:49:35 -07:00
Khem Raj 254b6cb115 iscsi-initiator-utils: Avoid hardcoding sed to /usr/bin/sed
This ensures that it can use the sed provided by build environment, as
we poison host sysroots, we wont be able to get it from /usr/bin anyway

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-30 15:27:08 -07:00
Khem Raj c52b9e1a93 radvd: Fix build on musl
Backport a patch from upstream to fix musl builds
Merged inc file into bb file, makes it easy to use devtool

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-30 00:14:58 -07:00
Khem Raj 2bbccfe1ae iscsi-initiator-utils: Upgrade to 2.1.7
Fix build on musl by using proper typecast for pthread_t

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-30 00:14:58 -07:00
Khem Raj 4262458aaa ippool: Fix build with clang15
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-30 00:14:58 -07:00
Khem Raj 8070c54457 ncftp: Fix TMPDIR path embedding into ncftpget
Fixes
QA Issue: File /usr/bin/ncftpget in package ncftp contains reference to TMPDIR

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-24 00:44:39 -07:00
Khem Raj e4d91fad96 ncftp: Enable autoreconf
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-24 00:44:34 -07:00
Khem Raj 6538118f60 proftpd: Always enable largefile support
largefile DISTRO_FEATURE is deprecated

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-13 07:05:31 -07:00
Khem Raj 0b031b5704 autofs: Fix build with glibc 2.36
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-06 22:53:24 -07:00
wangmy 8a50039955 pure-ftpd: upgrade 1.0.50 -> 1.0.51
0001-Remove-hardcoded-usr-local-includes-from-configure.a.patch
updated for new version.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-08-06 09:12:14 -07:00
Harshal dd8d5e8bfd lldpd: upgrade 1.0.8 -> 1.0.14
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-06-30 13:39:28 -04:00
Armin Kuster eaa0fd9c2f cyrus-sasl: move from meta-networking to meta-oe
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-05-02 17:51:58 -07:00
Khem Raj 83b283c528 opensaf: Fix build with gcc 12
Use configure logic to disable certain warnings if compiler supports
them

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-04-13 19:21:41 -07:00
Yi Zhao 6ebe45deb4 postfix: upgrade 3.6.4 -> 3.6.5
ChangeLog:
https://www.postfix.org/announcements/postfix-3.6.5.html

* Drop 0006-correct-signature-of-closefrom-API.patch as the issue has
been fixed upstream.

* Update main.cf to eliminate startup warning:
postfix: Postfix is running with backwards-compatible default settings
postfix: See http://www.postfix.org/COMPATIBILITY_README.html for details
postfix: To disable backwards compatibility use "postconf compatibility_level=3.6" and "postfix reload"

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-24 09:45:25 -07:00
Radovan Scasny d2ce8ff16e proftpd: update to 1.3.7c
Signed-off-by: Radovan Scasny <radovan.scasny@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-07 09:27:53 -08:00
Khem Raj 7d8a0e840d recipes: Update LICENSE variable to use SPDX license identifiers
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-04 17:41:45 -08:00
Khem Raj 055dd8ceab cyrus-sasl: Fix ptest builds
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Wang Mingyu <wangmy@fujitsu.com>
2022-03-01 09:13:42 -08:00
Wang Mingyu edd8bd0f24 cyrus-sasl: upgrade 2.1.27 -> 2.1.28
0001-Allow-saslauthd-to-be-built-outside-of-source-tree-w.patch
0001-makeinit.sh-fix-parallel-build-issue.patch
0004-configure.ac-fix-condition-for-suppliment-snprintf-i.patch
deleted since they're included in 2.1.28

CVE-2019-19906.patch
avoid-to-call-AC_TRY_RUN.patch
refreshed for new version

Changelog:
=========
build:
------
configure - Restore LIBS after checking gss_inquire_sec_context_by_oid
makemd5.c - Fix potential out of bound writes
fix build with –disable-shared –enable-static
Dozens of fixes for Windows specific builds
Fix cross platform builds with SPNEGO
Do not try to build broken java subtree
Fix build error with –enable-auth-sasldb

common:
-------
plugin_common.c:
Ensure size is always checked if called repeatedly (#617)

documentation:
--------------
Fixed generation of saslauthd(8) man page
Fixed installation of saslauthd(8) and testsaslauthd(8) man pages (#373)
Updates for additional SCRAM mechanisms
Fix sasl_decode64 and sasl_encode64 man pages
Tons of fixes for Sphinx

include:
--------
sasl.h:
Allow up to 16 bits for security flags

lib:
----
checkpw.c:
Skip one call to strcat
Disable auxprop-hashed (#374)
client.c:
Use proper length for fully qualified domain names
common.c:
CVE-2019-19906 Fix off by one error (#587)
external.c:
fix EXTERNAL with non-terminated input (#689)
saslutil.c:
fix index_64 to be a signed char (#619)

plugins:
--------
gssapi.c:
Emit debug log only in case of errors
ntlm.c:
Fail compile if MD4 is not available (#632)
sql.c:
Finish reading residual return data (#639)
CVE-2022-24407 Escape password for SQL insert/update commands.

sasldb:
-------
db_gdbm.c:
fix gdbm_errno overlay from gdbm_close

DIGEST-MD5 plugin:
------------------
Prevent double free of RC4 context
Use OpenSSL RC4 implementation if available

SCRAM plugin:
------------
Return BADAUTH on incorrect password (#545)
Add -224, -384, -512 (#552)
Remove SCRAM_HASH_SIZE
Add function to return SCRAM auth method name
Allocate enough memory in scam_setpass()
Add function to sort SCRAM methods by hash strength
Update windows build for newer SCRAM options

saslauthd:
---------
auth_httpform.c:
Avoid signed overflow with non-ascii characters (#576)
auth_krb5.c:
support setting an explicit auth_krb5 server name
support setting an explicit servername with Heimdal
unify the MIT and Heimdal auth_krb5 implementations
Remove call to krbtf
auth_rimap.c:
provide native memmem implementation if missing
lak.c:
Allow LDAP_OPT_X_TLS_REQUIRE_CERT to be 0 (no certificate verification)
lak.h:
Increase supported DN length to 4096 (#626)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-03-01 09:13:42 -08:00
Wang Mingyu 358db10e03 iscsi-initiator-utils: upgrade 2.1.5 -> 2.1.6
0001-Fix-compiler-error-introduced-with-recent-IPv6-commi.patch
removed since it's included in 2.1.6.

Changelog:
=========
This release adds more bug fixes and cleanups. No major functionality changes.

 libopeniscsiusr: extend sysfs ignore_error to include EINVAL
 Fix compiler error introduced with recent IPv6 commit.
 Remove dependences from iscsi-init.service
 Use "sbindir" for path in systemd service files
 Updated README a bit
 Finish ability to have binary location configurable.
 Fix iscsi-init so that it runs when root writable
 remove redundant params in Makefile
 Fixing last parts of sbindir configuration
 Cosmetic cleanup on recent addition
 Update the iscsi-gen-initiatorname script: harden and generalize
 change iscsi-gen-initiatorname option -b => -p
 Add man page for the iscsi-gen-initiatorname script.
 Install new man page for iscsi-gen-initiatorname
 Fix issues discovered by gcc12
 Fix more issues discovered by gcc12
 iscsi sysfs: check state before onlining devs
 iscsistart: fix login timeout handling
 iscsid: use infinite timeout if passed in
 iscsid: add error code for req timeouts
 Improve 'iscsid.conf'
 iscsiadm: Call log_init() first to fix a segmentation fault
 iscsi_err: Add iscsid request timed out error messages
 Fix wrong install_systemd destination path
 actor: add name to struct actor and init it with function name
 actor: print thread name in log
 actor: enhanced: print error log when init a initilized thread
 initiator_common: make set operational parameter log easy to read
 iscsid: Check session id before start sync a thread

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-22 08:30:50 -08:00
Khem Raj f2df270179 recipes: Use new CVE_CHECK_IGNORE variable
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-21 18:12:04 -08:00
wangmy 1320b9c9d2 opensaf: upgrade 5.21.09 -> 5.22.01
Changelog:
=========
* log: removal of letter 'C'/'R' from msgId in RFC5424 format [#3303]
* log: Stop all threads while releasing the log agent object [#3302]
* amf: Correct HC period to make it effect immediately[#3298]
* log: Correct condition to shutdown the log agent [#3301]
* log: Increase timeout in logtest [#3291]
* log: Shutdown log agent when not in use [#3291]
* log: Introduce the initial clm node status [#3291]
* amf: Correct the version of csi attribute message [#3296]
* ntf: correct the behavior of periodic check log pending [#3297]
* mds: Resolve active MxN VDEST conflict in split brain [#3281]
* smf: correct merge bundle rolling to single step [#3290]
* ntf: get attribute value from local when value not existed [#3289]
* immd: fix cannot find candidate for new immnd coordinator [#3284]
* smf: make more robustness in BISU upgrade [#3286]
* amfd: Tightens sync window condition to proceed headless restoration [#3271]
* osaf: fixed redefinition of typedef 'SaConstStringT' [#3287]
* amf: update runtime attributes of node to IMM in sync [#3285]
* amfd: Correct checking CSICOMP while deleting CSI [#3282]
* base: using mutex for test case sysf_ipc_test instead of atomic [#3283]
* build: adaptive python version for rpm build [#3270]

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-02-08 01:44:49 -08:00
Yi Zhao 2c710b005a postfix: upgrade 3.6.3 -> 3.6.4
Refresh patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-18 09:01:51 -08:00
Yi Zhao 57d127e81e iscsi-initiator-utils: upgrade 2.1.4. -> 2.1.5
Backport a patch to fix the build error.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-01-18 09:01:51 -08:00
Yi Zhao 45fee2d0ce postfix: upgrade 3.6.2 -> 3.6.3
Release Notes:
http://www.postfix.org/announcements/postfix-3.6.3.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-12-21 18:49:37 -08:00
wangmy c9a95c095d pure-ftpd: upgrade 1.0.49 -> 1.0.50
License-Update: year updated to 2021.

Changelog
==========
This version fixes some really old issues, the most significant one being
excessive memory use for large memory listings.

When virtual quotas were used, transfers were not aborted after the limit was
reached; files were only removed at the end of a transfer. That should now be fixed.

Support for MD5, SHA1 and the MySQL PASSWORD() function were removed for
password hashing. You should now use scrypt, argon2 or the system crypt(3) function.

The server used to reject class E reserved network ranges. People reported that
Linux containers may use them, so this is now accepted.

Finally, it is now possible to recursively include additional files in a
configuration file, with the new Include directive.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-29 09:09:03 -08:00
Khem Raj 6d8edf440c ippool: silence a DeprecationWarning
Use regex strings (r’’)
Fixes

meta-networking/recipes-daemons/ippool/ippool_1.3.bb:99:
DeprecationWarning: invalid escape sequence \d
  r = re.compile("\d*\.\d*\.\d*")

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-25 10:14:18 -08:00
Peter Kjellerstedt fce137d50b opensaf: Make sure a file needed by opensafd.service is not removed
Rename /etc/init.d/opensafd to /usr/lib/opensaf/opensafd-init as it is
needed by opensafd.service, but /etc/init.d is removed by
systemd.bbclass if sysvinit is not in DISTRO_FEATURES.

Note that this will not actually make the initscript and service file
work since they depend on /lib/lsb/init-functions, which does not exist
since the lsb recipe was removed from OE-Core.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-04 06:52:50 -07:00