Commit Graph

452 Commits

Author SHA1 Message Date
Zhang Xiao 997caf9146 dnsmasq: backport CVE fixes from dnsmasq 2.78
CVE-2017-1449{1-6}

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:08:25 -07:00
Armin Kuster 2628a2ccac wireshark: Update Package to 2.2.12
Includes:
	wnpa-sec-2018-01,  Multiple dissectors could crash. (Bug 14253) CVE-2018-5336

	wnpa-sec-2018-02, The MRDISC dissector could crash. (Bug 14299, Bug 13707) CVE-2017-17997

	wnpa-sec-2018-03, The IxVeriWave file parser could crash. (Bug 14297) CVE-2018-5334

	wnpa-sec-2018-04, The WCP dissector could crash. (Bug 14251) CVE-2018-5335

Full release notes: https://www.wireshark.org/docs/relnotes/wireshark-2.2.12.html

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Armin Kuster b6a6853f67 wireshark: Update to 2.2.11
changed --with-ssh to --with-libssh=DIR

includes:

wnpa-sec-2017-47 : CVE-2017-17084
    The IWARP_MPA dissector could crash. (Bug 14236)

wnpa-sec-2017-48 : CVE-2017-17083
    The NetBIOS dissector could crash. (Bug 14249)

wnpa-sec-2017-49 : CVE-2017-17085
    The CIP Safety dissector could crash. (Bug 14250)

release notes:
https://www.wireshark.org/docs/relnotes/wireshark-2.2.11.html

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Armin Kuster 59c7c0111c wireshark: update to 2.2.10
The following vulnerabilities have been fixed:
     * [1]wnpa-sec-2017-42
       BT ATT dissector crash ([2]Bug 14049) [3]CVE-2017-15192
     * [4]wnpa-sec-2017-43
       MBIM dissector crash ([5]Bug 14056) [6]CVE-2017-15193
     * [7]wnpa-sec-2017-44
       DMP dissector crash ([8]Bug 14068) [9]CVE-2017-15191

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Armin Kuster d946152884 wireshark: update to 2.2.9
Change LIC_FILES_CHKSUM from README.linux to COPYING as COPYING contains the license info

2.2.9 security fixes:
    wnpa-sec-2017-38
    MSDP dissector infinite loop (Bug 13933) CVE-2017-13767

    wnpa-sec-2017-39
    Profinet I/O buffer overrun (Bug 13847) CVE-2017-13766

    wnpa-sec-2017-41
    IrCOMM dissector buffer overrun (Bug 13929) CVE-2017-13765

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Kai Kang 7f7fdd5e51 wireshark: 2.2.7 -> 2.2.8
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
fan.xin dd63394477 wireshark: Upgrade to 2.2.7
Upgrade wireshark from 2.2.6 to 2.2.7

Signed-off-by: Fan Xin <fan.xin@jp.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Armin Kuster b400424d90 wireshark: update to 2.2.6
The following vulnerabilities have been fixed:
* [1]wnpa-sec-2017-12
  IMAP dissector crash ([2]Bug 13466) [3]CVE-2017-7703
* [4]wnpa-sec-2017-13
  WBMXL dissector infinite loop ([5]Bug 13477) [6]CVE-2017-7702
* [7]wnpa-sec-2017-14
  NetScaler file parser infinite loop ([8]Bug 13478) [9]CVE-2017-7700
* [10]wnpa-sec-2017-15
  RPCoRDMA dissector infinite loop ([11]Bug 13558) [12]CVE-2017-7705
* [13]wnpa-sec-2017-16
  BGP dissector infinite loop ([14]Bug 13557) [15]CVE-2017-7701
* [16]wnpa-sec-2017-17
  DOF dissector infinite loop ([17]Bug 13453) [18]CVE-2017-7704
* [19]wnpa-sec-2017-18
  PacketBB dissector crash ([20]Bug 13559)
* [21]wnpa-sec-2017-19
  SLSK dissector long loop ([22]Bug 13576)
* [23]wnpa-sec-2017-20
  SIGCOMP dissector infinite loop ([24]Bug 13578)
* [25]wnpa-sec-2017-21
  WSP dissector infinite loop ([26]Bug 13581)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Oleksandr Kravchuk 8869e7cf7c wireshark: update to 2.2.5
Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-28 19:07:19 -07:00
Joe Slater 30ac31d098 chrony: fix build failure for arma9
Eliminate references to syscalls not available
for ARM_EABI.  Also add a dependency on libseccomp
which is needed for scfilter to work.

Set PACKAGECONFIG to not enable scfilter, since
kernel CONFIG_SECCOMP is unlikely to be set.  This
aligns the usage of libseccomp with that of other packages.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-06-26 11:19:12 -07:00
Khem Raj fae7d92ab9 ipsec-tools: Fix build with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit f99ac6369e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-24 19:33:29 +00:00
Kai Kang fc8d895d87 ctdb: update SRC_URI
The SRC_URI of ctdb is not right for multilib. Replace var 'PN' with
'BPN' to fix it.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 885a8588ad)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-24 19:33:29 +00:00
Kai Kang d836c393fe pimd: update SRC_URI
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
(cherry picked from commit 742ef73eb5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-24 19:33:29 +00:00
Armin Kuster 85ab36e6a1 fetchmail: update SRC_URI
ERROR: fetchmail-6.3.26-r0 do_checkuri: Fetcher failure for URL: 'http://download.berlios.de/fetchmail/fetchmail-6.3.26.tar.xz'. URL http://download.berlios.de/fetchmail/fetchmail-6.3.26.tar.xz doesn't work
ERROR: fetchmail-6.3.26-r0 do_checkuri: Function failed: do_checkuri
ERROR: Logfile of failure stored in: /home/akuster/oss/maint/poky/build/tmp/work/i586-poky-linux/fetchmail/6.3.26-r0/temp/log.do_checkuri.28438
ERROR: Task (/home/akuster/oss/maint/meta-openembedded/meta-networking/recipes-support/fetchmail/fetchmail_6.3.26.bb:do_checkuri) failed with exit code '1'

per homepage:
NEWS: NOW HOSTED BY SOURCEFORGE.NET AFTER BERLIOS SHUTDOWN

The BerliOS developer's website has shut down in the week following 2014 May 12th, and most of the fetchmail contents have been moved to SourceForge.net, including mailing list subscriptions, archives back to 2004, web site contents, download and Git repository. See http://sourceforge.net/projects/fetchmail/.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 09:00:31 -08:00
Armin Kuster 25f87bf041 ipsec-tools: change SRC_URI fetcher.
ERROR: ipsec-tools-0.8.2-r0 do_checkuri: Fetcher failure for URL: 'ftp://ftp.netbsd.org/pub/NetBSD/misc/ipsec-tools/0.8/ipsec-tools-0.8.2.tar.bz2'. URL ftp://ftp.netbsd.org/pub/NetBSD/misc/ipsec-tools/0.8/ipsec-tools-0.8.2.tar.bz2 doesn't work
ERROR: ipsec-tools-0.8.2-r0 do_checkuri: Function failed: do_checkuri

https seems more reliable.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 09:00:06 -08:00
Armin Kuster d7edfe52bd tcpdump: update to 4.9.0 for security fixes
CVE included in this release:
CVE-2016-7922 CVE-2016-7923 CVE-2016-7924 CVE-2016-7925
CVE-2016-7926 CVE-2016-7927 CVE-2016-7928 CVE-2016-7929
CVE-2016-7930 CVE-2016-7931 CVE-2016-7932 CVE-2016-7933
CVE-2016-7934 CVE-2016-7935 CVE-2016-7936 CVE-2016-7937
CVE-2016-7938 CVE-2016-7939 CVE-2016-7940 CVE-2016-7973
CVE-2016-7974 CVE-2016-7975 CVE-2016-7983 CVE-2016-7984
CVE-2016-7985 CVE-2016-7986 CVE-2016-7992 CVE-2016-7993
CVE-2016-8574 CVE-2016-8575 CVE-2017-5202 CVE-2017-5203
CVE-2017-5204 CVE-2017-5205 CVE-2017-5341 CVE-2017-5342
CVE-2017-5482 CVE-2017-5483 CVE-2017-5484 CVE-2017-5485
CVE-2017-5486

updated add-ptest patch to apply to Makefile.in

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:58:08 -08:00
Oleksandr Kravchuk 70f1e0fa31 tcpdump: upgrade to 4.8.1
Upgraded tcpdump to version 4.8.1 and removed deprecated ipv6 configure
flag.

This update includes:
CVE-2014-8767, CVE-2014-8768, CVE-2014-8769

Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:56:55 -08:00
Armin Kuster 6794ea398d wireshark: fix build issue
This should fix:
 Making all in ui/gtk
| make[2]: Entering directory '/home/jenkins/oe/world/shr-core/tmp-glibc/work/armv5e-oe-linux-gnueabi/wireshark/1_2.2.4-r0/build/ui/gtk'
| /bin/bash: glib-compile-resources: command not found

Fix which glib-compile-resources is picked up. Ensure we use the native glib-2.0p version and not one from the host.

I could not reproduce this but "which  glib-compile-resources" pointed out the problem.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:50:08 -08:00
Chai, Chong Yi 5983889675 libtalloc: fix SRC_URI to use https instead of http
Fetching using http from samba.org is no longer working and changing to https
would fix the issue.

Signed-off-by: Chai, Chong Yi <chong.yi.chai@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 41feeb4df9)
Signed-off-by: Chai, Chong Yi <chong.yi.chai@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:37:41 -08:00
Andreas Müller 86610438b5 libtevent: fix SRC_URI - http has gone
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 3a3e443864)
Signed-off-by: Chai, Chong Yi <chong.yi.chai@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:37:41 -08:00
Andreas Müller 6fb2449710 libtdb: fix SRC_URI - http has gone
Signed-off-by: Andreas Müller <schnitzeltony@googlemail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 7131b825b6)
Signed-off-by: Chai, Chong Yi <chong.yi.chai@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:37:41 -08:00
Armin Kuster 87a0103993 wireshark: update package to 2.2.4
The following vulnerabilities have been fixed:
     * [1]wnpa-sec-2017-01
       The ASTERIX dissector could go into an infinite loop. ([2]Bug
       13344)
     * [3]wnpa-sec-2017-02
       The DHCPv6 dissector could go into a large loop. ([4]Bug 13345)

see: https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:37:41 -08:00
Oleksandr Kravchuk 77161f5b1e wireshark: update to 2.2.3
Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-02-22 08:37:41 -08:00
Zheng Ruoqin 815066eceb wireshark: 2.2.1 -> 2.2.2
Upgrade wireshark from 2.2.1 to 2.2.2

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:35:51 -05:00
Chen Qi e9bb4c52c9 netcat-openbsd: fix ALTERNATIVE_PRIORITY to avoid conflict
Fix ALTERNATIVE_PRIORITY to avoid the same priority of the 'nc' utility
with that from busybox.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:35:26 -05:00
Joe Slater 3c43856b9f ntp: update to version 4.8p9
This fixes two CVE defects.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:31:31 -05:00
Mark Asselstine 6cedb84099 dnsmasq: allow for dnsmasq instances to reuse default dnsmasq.conf
By defining 'listen-address' in the global dnsmasq.conf file we
prevent other instances of dnsmasq from using the global config as we
will get an error that the address is already in use. Instead we pass
'local-service' when we start the main dnsmasq instance which will
listen on the loopback address as well as any other local
subnets. This will allow the main dnsmasq instance to play nice with
other instances we might start for network-manager, libvirt, lxc...

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:28:49 -05:00
Mark Asselstine 01f4d8df84 dnsmasq: read the conf files found in dnsmasq.d
The dnsmasq package installs a ${sysconfigdir}/dnsmasq.d directory but
doesn't currently use any configuration files that might be placed
there. This goes against what the user would expect and doesn't match
what you see in other distros.

We could ensure this config directory is read when dnsmasq is started,
as we are doing here, or by including it in the main dnsmasq.conf
file. By doing it here we can have better reuseability of the main
dnsmasq.conf file by other instances of dnsmasq.

There are currently no files added to the dnsmasq.d directory for core
oe images, so this should not result in any runtime behavior changes.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:28:10 -05:00
Kai Kang de93062527 curlpp: fix qa issue of do_configure
curlpp is configured with boost by default. And it searches boost
directory on build machine. If boost is installed on build machine, then
causes qa issue:

| ERROR: curlpp-0.7.3-r0 do_configure: This autoconf log indicates
| errors, it looked at host include and/or library paths while
| determining system capabilities.

Pass the boost directory in ${STAGING_DIR_HOST} to configure script to
disable search on build machine to fix the issue.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:15:41 -05:00
Jackie Huang e4790ec212 chrony: remove unrecognized option ipv6
The configure is not generated by autotools, and it's
designed to enable ipv6 by default and have option
--disable-ipv6 to disable it, but no --enable-ipv6,
so remove it.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2017-01-29 19:12:35 -05:00
Armin Kuster 24c9c2b253 wireshark: install missing header files
Wireshark does not install header files. add install_append
Remove ALLOW_EMPTY & INHIBIT_PACKAGE_DEBUG_SPLIT, they are no longer needed

V2]
add missing libssh and sbc config

V3]
restore removed FILES append and fixed missing sbc in PACKAGECONFIG

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 7f8915a6ec)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-29 08:22:21 -08:00
Yi Zhao b840fceeb6 tunctl: fix QA warning for GNU_HASH
Add LDFLAGS variable to Makefile so that extra linker flags can be sent
via this variable.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 294d7126ff)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-29 08:22:21 -08:00
Yi Zhao 052fe5e487 nuttcp: fix QA warning for GNU_HASH
Set LDFLAGS explicitly for do_compile

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 0eff2b604d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-29 08:22:21 -08:00
Yi Zhao b6d9486cc2 aoetools: fix QA warning for GNU_HASH
Add LDFLAGS variable to Makefile so that extra linker flags can be sent
via this variable.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
(cherry picked from commit 942cd09609)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2016-11-29 08:22:21 -08:00
Wang Xin 6f06d7559b drbd-utils: 8.9.3 -> 8.9.6
1) Upgrade drbd-utils from 8.9.3 to 8.9.6.
2) Delete one patch, since the data has been changed.
    0001-Makefile.in-don-t-compile-documentation.patch
3) Modify EXTRA_OECONF, since the documentation file is not suitable for cross-compile, so we do not compile it.

Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-11-29 08:22:21 -08:00
Wang Xin 5336366dec lksctp-tools: 1.0.16 -> 1.0.17
Upgrade lksctp-tools from 1.0.16 to 1.0.17.

Signed-off-by: Wang Xin <wangxin2015.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-11-29 08:22:21 -08:00
André Draszik 6e9197700e c-ares: update 1.11.0 -> 1.12.0
Highlight:
- fix CVE-2016-5180

Other changes, from https://c-ares.haxx.se/changelog.html

c-ares version 1.12.0 - Sep 29 2016
Changes:
    api: add ARES_OPT_NOROTATE optmask value

Bug fixes:
    CVE-2016-5180: ares_create_query single byte out of buffer write
    configure: acknowledge --disable-tests [1]
    man pages: fix typos detected by Lintian
    test: add missing #includes for dns-proto.cc
    test: avoid in6addr_* constants
    test: Build with MinGW on AppVeyor
    Makefile.m32: add support for extra flags
    Makefile.m32: add support for CROSSPREFIX
    configure: check if tests can get built before enabled
    ares_library_cleanup: reset ares_realloc too
    ahost.c: add cast to fix C++ compile
    test: Only pass unused args to GoogleTest
    build: commonize MSVC version detection
    msvc_ver.inc: support Visual Studio 2015 Update 1, 2, 3
    test: for AF_UNSPEC, return CNAME only for AAAA, but valid A record
    ares_getnameinfo: explicitly clear struct servent before use
    test: Update fuzzing function prototype
    init: fix nsort initialization
    test: add fuzzing check script to tests
    web: http => https
    read_tcp_data: remove superfluous NULL check
    LICENSE.md: add a stand-alone license file
    SECURITY.md: suggested "security process" for the project
    ares_init_options: only propagate init failures from options [2]
    headers: remove checks for and defines of variable sizes
    test: fix gMock to work with gcc >= 6.x [3]

fix metadata:
        We should set SUMMARY instead of DESCRIPTION.

Signed-off-by: André Draszik <git@andred.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-11-14 10:07:27 -05:00
Khem Raj aebf681a9e lowpan-tools: Fix errors found with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-11-14 10:07:27 -05:00
dengke.du@windriver.com c8f78ecb9b linux-atm: fix do_compile error
With linux kernel v4.8, for file ./src/maint/zntune.c, glibc time.h is
included before linux time.h, when compile zntune.c, it break down by
the following errors:

	redefinition of 'struct timespec' 'struct timeval'
	                'struct timezone' 'struct itimerval'

We should exclude the linux time.h by disable linux/atm_zatm.h and move
some useful definition in linux/atm_zatm.h to a new header file in linux-atm
source code to resolve it.

Signed-off-by: Dengke Du <dengke.du@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-11-14 10:07:19 -05:00
mike.looijmans@topic.nl b850fda09a phytool: Add recipe
A nice tool to directly read, write and interpret ethernet PHY data.
Very useful when debugging PHY or MDIO problems, which ethtool does
not do.

Signed-off-by: Mike Looijmans <mike.looijmans@topic.nl>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:18:07 -04:00
Armin Kuster 8eef5ab5cd wireshark: update to 2.2.1
Restore PE

includes 2 security fixes:
wnpa-sec-2016-57. NCP dissector crash. Fixed in 2.2.1.
wnpa-sec-2016-56. Bluetooth L2CAP dissector crash. Fixed in 2.2.1.

see https://www.wireshark.org/docs/relnotes/wireshark-2.2.1.html

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:17:58 -04:00
Jackie Huang 812e940fd2 ntp : Add openssl to default PACKAGECONFIG options
Add openssl to default PACKAGECONFIG options so ntp
is configured to have crypto support by default.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:17:38 -04:00
Mingli Yu af864a7000 geoip-perl: upgrade to 1.50
* Upgrade geoip-perl from 1.45 to 1.50
* Update LIC_FILES_CHKSUM to check LICENSE file instead
  of the previous README as no README file in 1.50

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:17:13 -04:00
Li Zhou 5abe6ead04 arptables: add the directory for default /etc/sysconfig/arptables
Solve the potential issue for previous commit
<arptables: add arptables systemd service file>: in a small build where
/etc/sysconfig directory doesn't exist, the action of adding default
configuration file (/etc/sysconfig/arptables) will fail.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:17:03 -04:00
Li Zhou a0e2240e0a arptables: add arptables systemd service file
Add arptables systemd service file.
If there isn't any configuration file (/etc/sysconfig/arptables),
add a default configuration file.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:17:01 -04:00
Jackie Huang 307d1c993d libtdb: fixes for deterministic builds
* Add configure option and PACKAGECONFIG for
  the following packages:
  - acl
  - attr
  - libaio
  - libbsd
  - libcap
  - valgrind

* They are all optional, so disable by default
  or control them based on DISTRO_FEATURES.

* Remove the direct dependency on libaio

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:16:44 -04:00
Jackie Huang 5175c03191 libldb: fixes for deterministic builds
* Add configure option and PACKAGECONFIG for
  the following packages:
  - acl
  - attr
  - libaio
  - libbsd
  - libcap
  - valgrind

* They are all optional, so disable by default
  or control them based on DISTRO_FEATURES.

* Remove the direct dependency on libaio and libbsd

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:16:43 -04:00
Jackie Huang 529171574c libtevent: fixes for deterministic builds
* Add configure option and PACKAGECONFIG for
  the following packages:
  - acl
  - attr
  - libaio
  - libbsd
  - libcap
  - valgrind

* They are all optional, so disable by default
  or control them based on DISTRO_FEATURES.

* Remove the direct dependency on libaio and libbsd

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:16:38 -04:00
Jackie Huang 778a2b6793 libtalloc: fixes for deterministic builds
* Add configure option and PACKAGECONFIG for
  the following packages:
  - acl
  - attr
  - libaio
  - libbsd
  - libcap
  - valgrind

* They are all optional, so disable by default
  or control them based on DISTRO_FEATURES.

* Remove the direct dependency on libaio and libbsd

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:16:36 -04:00
Jackie Huang fe652f8654 libldb: fix for LIC_FILES_CHKSUM
Use the source files instead of common-licenses

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2016-10-20 11:16:35 -04:00