summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* ebtables: remove perl from RDEPENDSChristian Eggers2022-02-141-1/+1
| | | | | | | | | The upstream ebtables-legacy-save perl script is replaced by a bash implementation (taken from Fedora). So there's nothing left which RDEPENDs on perl. Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: Package needed shared libs from bindKhem Raj2022-02-111-3/+7
| | | | | | | Fixes ERROR: QA Issue: /usr/sbin/dhcrelay contained in package dhcp-relay requires libisccfg.so.163, but no providers found in RDEPENDS:dhcp-relay? [file-rdeps] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.14.11 -> 4.14.12Yi Zhao2022-02-111-1/+1
| | | | | | | | | | | | | This is a security release in order to address the following defects: CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module. https://www.samba.org/samba/security/CVE-2021-44142.html CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks. https://www.samba.org/samba/security/CVE-2022-0336.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: Upgrade to 2.28.0Mark Jonas2022-02-112-37/+2
| | | | | | | | | | Mbed TLS 2.28 is a long-time support branch. It will be supported with bug-fixes and security fixes until end of 2024. https://github.com/ARMmbed/mbedtls/releases/tag/v2.28.0 Signed-off-by: Mark Jonas <toertel@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: update to 5.1Oleksandr Kravchuk2022-02-111-1/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: update HOMEPAGEYi Zhao2022-02-091-1/+2
| | | | | | | The official site was moved to https://tcpreplay.appneta.com/. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: upgrade 2.0.12 -> 2.0.14Gianfranco Costamagna2022-02-082-4/+4
| | | | | | | | | - Upgrade license hash due to whitespace changes - refresh patch 1571.patch Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: upgrade 5.0 -> 5.2.1Wang Mingyu2022-02-085-34/+34
| | | | | | | | change configure.seed to configure.ac.in refresh 0001-Makefile.in-don-t-use-the-internal-lua.patch Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndpi: upgrade 4.0 -> 4.2Wang Mingyu2022-02-082-13/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | refresh 0001-autogen.sh-not-generate-configure.patch Changelog: ========= New Features ----------- Add a "confidence" field indicating the reliability of the classification Add risk exceptions for services and domain names via ndpi_add_domain_risk_exceptions() Add ability to report whether a protocol is encrypted New Supported Protocols and Services ----------------------------------- Add protocol detection for: Badoo Cassandra EthernetIP Improvements ------------ Significantly reduced memory footprint from 2.94 KB to 688 B per flow Improve protocol detection for: BitTorrent ICloud Private Relay IMAP, POP3, SMTP Log4J/Log4Shell Microsoft Azure Pandora TV RTP RTSP Salesforce STUN Whatsapp QUICv2 Zoom Add flow risk: NDPI_CLEAR_TEXT_CREDENTIALS NDPI_POSSIBLE_EXPLOIT (Log4J) NDPI_TLS_FATAL_ALERT NDPI_TLS_CERTIFICATE_ABOUT_TO_EXPIRE Update WhatsAPP and Instagram addresses Update the list of default ports for QUIC Update WindowsUpdate URLs Add support for the .goog Google TLD Add googletagmanager.com Add bitmaps and API for handling compressed bitmaps Add JA3 in risk exceptions Add entropy calculation to check for suspicious (encrypted) payload Add extraction of hostname in SMTP Add RDP over UDP dissection Add support for TLS over IPV6 in Subject Alt Names field Improve JSON and CSV serialization Improve IPv6 support for almost all dissectors Improve CI and unit tests, add arm64, armhf and s390x as part of CI Improve WHOIS detection, reduce false positives Improve DGA detection for skipping potential DGAs of known/popular domain names Improve user agent analysis Reworked HTTP protocol dissection including HTTP proxy and HTTP connect Changes -------- TLS obsolete protocol is set when TLS < 1.2 (used to be 1.1) Numeric IPs are not considered for DGA checks Differentiate between standard Amazon stuff (i.e market) and AWS Remove Playstation VUE protocol Remove pandora.tv from Pandora protocol Remove outdated SoulSeek dissector Fixes ----- Fix race conditions Fix dissectors to be big-endian friendly Fix heap overflow in realloc wrapper Fix errors in Kerberos, TLS, H323, Netbios, CSGO, Bittorrent Fix wrong tuple comparison Fix ndpi_serialize_string_int64 Fix Grease values parsing Fix certificate mismatch check Fix null-dereference read for Zattoo with IPv6 Fix dissectors initialization for XBox, Diameter Fix confidence for STUN classifications Fix FreeBSD support Fix old GQUIC versions on big-endian machines Fix aho-corasick on big-endian machines Fix DGA false positive Fix integer overflow for QUIC Fix HTTP false positives Fix SonarCloud-CI support Fix clashes setting the hostname on similar protocols (FTP, SMTP) Fix some invalid TLS guesses Fix crash on ARM (Raspberry) Fix DNS (including fragmented DNS) dissection Fix parsing of IPv6 packets with extension headers Fix extraction of Realm attribute in STUN Fix support for START-TLS sessions in FTP Fix TCP retransmissions for multiple dissectors Fix DES initialisation Fix Git protocol dissection Fix certificate mismatch for TLS flows with no client hello observed Fix old versions of GQUIC on big-endian machines Misc ---- Add tool for generating automatically the Azure IP list Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: upgrade 4.3.4 -> 4.4.0wangmy2022-02-081-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Update strlcpy.c and strlcat.c PR #636 Apply #616 fix to flows.c, fix #665 Bug #670: update Travis CI to focal Bug #669: LINUX installed netmap auto detection Feature #626 - Support for Q-in-Q VLAN tags Bug #677 skipbroadcast Bug #689: add security policy document Directories of pcaps as arguments PR #682 Bug #679 fix PPS calc for long-running sessions Bug #668 Improve SDK selection Bug #696 fix directory include feature Bug #695 mac os tests fail Bug #674 - Revert "send_packet: Avoid clock drift by using time since first packet" Feature #563 mac update on multicast Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: upgrade 5.21.09 -> 5.22.01wangmy2022-02-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= * log: removal of letter 'C'/'R' from msgId in RFC5424 format [#3303] * log: Stop all threads while releasing the log agent object [#3302] * amf: Correct HC period to make it effect immediately[#3298] * log: Correct condition to shutdown the log agent [#3301] * log: Increase timeout in logtest [#3291] * log: Shutdown log agent when not in use [#3291] * log: Introduce the initial clm node status [#3291] * amf: Correct the version of csi attribute message [#3296] * ntf: correct the behavior of periodic check log pending [#3297] * mds: Resolve active MxN VDEST conflict in split brain [#3281] * smf: correct merge bundle rolling to single step [#3290] * ntf: get attribute value from local when value not existed [#3289] * immd: fix cannot find candidate for new immnd coordinator [#3284] * smf: make more robustness in BISU upgrade [#3286] * amfd: Tightens sync window condition to proceed headless restoration [#3271] * osaf: fixed redefinition of typedef 'SaConstStringT' [#3287] * amf: update runtime attributes of node to IMM in sync [#3285] * amfd: Correct checking CSICOMP while deleting CSI [#3282] * base: using mutex for test case sysf_ipc_test instead of atomic [#3283] * build: adaptive python version for rpm build [#3270] Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: Fix build with muslKhem Raj2022-02-072-0/+37
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crda: Fix buffer overflow in sscanfKhem Raj2022-02-042-0/+32
| | | | | | Fixes build with clang14 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: set precise licenseRoss Burton2022-02-031-1/+3
| | | | | | | | | | fping is under a non-standard license: it's almost BSD-3-Clause but is phrased differently. As interpretation of the licenses isn't something we want to do, we can use the exact license text instead of referring to the 3-clause BSD text. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocol: upgrade to 1.14.3Ross Burton2022-02-032-28/+19
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: use precise BSD licenseRoss Burton2022-02-031-1/+1
| | | | | | | This package is BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: set correct LICENSERoss Burton2022-02-031-1/+1
| | | | | | | Remove BSD, as this package is entirely LGPL2+. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpslice: upgrade 1.2a3 -> 1.5Yi Zhao2022-02-034-126/+25
| | | | | | | | | * Update SRC_URI to official download page * Drop patches which had been fixed upstream. * Add UPSTREAM_CHECK_REGEX Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: upgrade 4.99.0 -> 4.99.1Yi Zhao2022-02-032-46/+5
| | | | | | | | | * Skip aclocal in do_configure * Inherit pkgconfig then we can drop 0001-aclocal.m4-Skip-checking-for-pcap-config.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.32.12 -> 1.34.0wangmy2022-01-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= * initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6". * core: better handle sd-resolved errors when resolving hostnames. * nmcli: fix import WireGuard profile with DNS domain and address family disabled. * ndisc: send router solicitations before expiry. * policy: send earlier the ip configs to the DNS manager. * core: support linking with LLD 13. * wireguard: importing wg-quick configuration files with nmcli no longer sets a negative, exclusive "dns-priority". This plays better with common split DNS setups that use systemd-resolved. Adjust the "dns-priority" to your liking after import yourself. * NetworkManager no longer listens for netlink events for traffic control objects (qdiscs and filters). * core: add internal nm-priv-helper service for separating privileges and have a way to drop capabilities from NetworkManager daemon. * bond: add support for setting queue-id of bond port. * dns: support configuring DNS over TLS (DoT) with systemd-resolved. * nmtui: add support for WireGuard profiles. * nmcli: add aliases `nmcli device up|down` beside connect|disconnect. * conscious language: Deprecate 'Device.Slaves' D-Bus property in favor of new 'Device.Ports' property. Depracate 'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()' in libnm. * nmcli: invoking nmcli command without arguments will now show 'default' instead of null address in route4 or route6 section. The following changes were backported to 1.32.x releases between 1.32.0 and 1.32.12 are also present in NetworkManager-1.34: - 1.32.12: * Fix wrong order of addresses when restarting NetworkManager. * Preserve the IPv6 ff00::/8 route added by kernel in the local table, necessary for multicast communication. * Fix emitting the signal for changed metered status of devices. * Fix applying the ethtool autonegotiation and speed settings. * initrd: fix crash parsing plain '=' without key. * cloud-setup: use suppress_prefixlength rule to honor non-default-routes in the main table. - 1.32.10: * core: fix the order of IPv6 addresses changing on service restart. * initrd: add command line option to configure link autonegotiation and speed. * ifcfg-rh: fix crash when parsing invalid DNS address. * ifcfg-rh: extend ifup/ifdown scripts to work with connection profile names. * udev: also react to "move" (and "change") udev actions in our rules. - 1.32.8: * firewalld: configure zones on "Reloaded" signal. * core: fix wrong MTU for bridge interfaces. * cloud-setup: fix gateway address for Aliyun cloud. - 1.32.6: * core: fix adding stale local routes when address changes. * initrd: tag generated profiles with origin in user data. * core: introduce "allowed-connections" option to disallow profiles on a device. This allows to filter out profiles that originate from initrd. * core: introduce "keep-configuration" device option to forcefully activate a profile on start. * dhcp: handle filename/bootfile_name DHCP option and write it to device state file for initrd/kickstart. * initrd: add "ib.pkey=" command line option - 1.32.4: * core: remove stale entries from "seen-bssids" and "timestamp" files in "/var/lib/NetworkManager". * bond: support the peer_notif_delay option. * core: add ipv[46].required-timeout option to wait for IP configuration while activating. * core: send ARP announcements when there is carrier. * core: start DHCPv6 when a prefix delegation is needed for shared mode. * firewall: fix nftables backend to create "ip" table for IPv4 only. * initrd: set required-timeout of 20 seconds for default IPv4 configuration to opportunistically wait for IPv4. * ifcfg: log warning about invalid keys in ifcfg files. * ifcfg: reject non-UTF-8 from ifcfg files. * nmcli: show DNS SEARCH field in device information. * cloud-setup: add support for Aliyun cloud. - 1.32.2: * hostname: prefer IPv4 addresses for reverse DNS lookup. * dhcp: ignore unauthenticated FORCERENEW messages with internal, systemd-based DHCPv4 plugin (CVE-2020-13529). This plugin is not used, unless the undocumented dhcp=systemd option was set. * cloud-setup: preserve IP addresses, routes and rules from currently active connection profile. * Various bugfixes and performance improvements. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mtr: upgrade 0.94 -> 0.95wangmy2022-01-192-72/+2
| | | | | | | | 0001-Fix-a-lot-of-Werror-format-security-errors-in-printw.patch removed since it is included in 0.95. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 36.0 -> 38.0wangmy2022-01-181-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ========= Merge pull request #1085 from rleon/upgrade-fc35 build: Update to clang 13 build: Update to Fedora 35 ci: Convert deprecated distutils Merge pull request #1084 from jgunthorpe/kernel-headers Update kernel headers build: Fix distutils deprecation warning during vuild pyverbs: Prepare code to Cython 3 mlx5: Change pthread_yield to sched_yield Merge pull request #1083 from Wenpeng-Liang/fix_db Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.6.3 -> 3.6.4Yi Zhao2022-01-1812-88/+90
| | | | | | | Refresh patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: Add missing header stdc-predef.hKhem Raj2022-01-182-0/+32
| | | | | | | | | | | | musl highlights this problem Fixes | ../../tnftp-20210827/libedit/chartype.h:47:3: error: wchar_t must store ISO 10646 characters | #error wchar_t must store ISO 10646 characters | ^ | 1 error generated. Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Yi Zhao <yi.zhao@windriver.com>
* tnftp: upgrade 20151004 -> 20210827Yi Zhao2022-01-182-46/+3
| | | | | | | | * License-Update: Update copyright years * Drop tnftp-autotools.patch as the issue had been fixed upstream Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: upgrade 2.1.4. -> 2.1.5Yi Zhao2022-01-182-1/+45
| | | | | | | Backport a patch to fix the build error. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bridge-utils: upgrade 1.7 -> 1.7.1Yi Zhao2022-01-185-15/+165
| | | | | | | | | | | * Update SRC_URI to official git repo per [1] * Refresh patches * Backport a patch to fix build error with musl [1] https://wiki.linuxfoundation.org/networking/bridge Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-queue: upgrade 1.0.3 -> 1.0.5Yi Zhao2022-01-182-1229/+1
| | | | | | | | Drop 0001-libnetfilter-queue-Declare-the-define-visivility-attribute-together.patch as the clang build issue had been fixed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: upgrade 7.11 -> 7.15Yi Zhao2022-01-181-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.0.0 -> 1.0.1Yi Zhao2022-01-181-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-scapy: remove redundant pycrypto RDEPENDSRoss Burton2022-01-181-1/+1
| | | | | | | | Scapy moved from pycrypto to cryptography in 2.4.0 (commit c24298b). Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
* ntpsec: Add glibc-2.34/kernel-5.14 seccomp fixesAlex Kiernan2022-01-054-0/+110
| | | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Alex Kiernan <alexk@zuma.ai> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 5.0.0 -> 5.1.0wangmy2022-01-051-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: upgrade 3.0 -> 3.4wangmy2022-01-052-9/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | refresh 0001-use-pkg-config-for-gcrypt-instead.patch License-Update: Url changed from "https://www.gnu.org/philosophy/why-not-lgpl.html" to "https://www.gnu.org/licenses/why-not-lgpl.html" Changelog: ========= New features ---------------- core: add support of static arrays in hdata core: add command /toggle api: add parameters pointers, extra_vars and options in function hdata_search api: add user variables in evaluation of expressions with "define:name,value" api: add IRC message parameters "param1" to "paramN" and "num_params" in output of irc_message_parse irc: allow quotes around IRC message in command /server fakerecv trigger: hide key and password in command "/msg nickserv setpass nick key password" trigger: add support of option "-server" when hiding passwords in command /msg nickserv register Bug fixes --------------- core: fix memory leak in evaluated expression "split:number,seps,flags,xxx" when multiple "strip_items" are given core: fix random integer number with large range in evaluation of expressions on GNU/Hurd core: fix access to integer/long/time arrays in hdata api: fix search of option when the section is not given in functions config_search_option and config_search_section_option irc: fix join of channels with long name (issue #1717) irc: fix parsing of parameters in all IRC messages (issue #1666) irc: fix parsing of CAP message when there is no prefix (issue #1707) irc: fix parsing of TAGMSG message when there is a colon before the channel Documentation --------------- doc: remove tester's guide doc: add dark theme (automatic, following browser/desktop settings) doc: make build reproducible doc: disable web fonts doc: switch from prettify to pygments for syntax highlighting Tests -------------- core: add build with CMake and Ninja in CI core: add build on macOS 11 in CI Build ------------ ruby: add detection of Ruby 3.0 (issue #1721, issue #1605) core: add targets "changelog" and "rn" to build HTML version of ChangeLog and release notes (CMake build only) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: update to latest stable 3.4.11Armin Kuster2022-01-052-10/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For more infromation, see: https://www.wireshark.org/docs/relnotes/wireshark-3.4.11.html refresh 0004-lemon-Remove-line-directives.patch Includes CVEs: 3.4.11: wnpa-sec-2021-16 Gryphon dissector crash. Issue 17737. CVE-2021-4186. wnpa-sec-2021-17 RTMPT dissector infinite loop. Issue 17745. CVE-2021-4185. wnpa-sec-2021-18 BitTorrent DHT dissector infinite loop. Issue 17754. CVE-2021-4184. wnpa-sec-2021-20 RFC 7468 file parser infinite loop. Issue 17801. CVE-2021-4182. wnpa-sec-2021-21 Sysdig Event dissector crash. CVE-2021-4181. 3.4.10: wnpa-sec-2021-07 Bluetooth DHT dissector crash. Issue 17651. CVE-2021-39929. wnpa-sec-2021-08 Bluetooth HCI_ISO dissector crash. Issue 17649. CVE-2021-39926. wnpa-sec-2021-09 Bluetooth SDP dissector crash. Issue 17635. CVE-2021-39925. wnpa-sec-2021-10 Bluetooth DHT dissector large loop. Issue 17677. CVE-2021-39924. wnpa-sec-2021-11 PNRP dissector large loop. Issue 17684. wnpa-sec-2021-12 C12.22 dissector crash. Issue 17636. CVE-2021-39922. wnpa-sec-2021-13 IEEE 802.11 dissector crash. Issue 17704. CVE-2021-39928. wnpa-sec-2021-14 Modbus dissector crash. Issue 17703. CVE-2021-39921. wnpa-sec-2021-15 IPPUSB dissector crash. Issue 17705. CVE-2021-39920. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: upgrade 2.2.1 -> 2.2.3Andreas Müller2022-01-051-1/+1
| | | | | | | | | | | | | | | | 2.2.3: Bugs fixed Recent connections disabled after suspend and resume Service authorization notifications did not respond Passkeys did not get displayed 2.2.2: Bugs fixed Issues with power level bars Error message in blueman-mechanism Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: remove redundant DEPENDSArmin Kuster2021-12-271-1/+1
| | | | | | | drop openssl and gmp from DEPENDS, covered in PACKAGECONFIG Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: add integrity optionsArmin Kuster2021-12-271-0/+36
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: add tpm PACKAGECONFIGArmin Kuster2021-12-271-0/+5
| | | | | | | migrate meta-tpm strongswan tweaks to meta-networking Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: provide PACKAGECONFIG for cureve25519Armin Kuster2021-12-271-2/+2
| | | | | | | | Not everyone wants this to be installed by default. Enable to remove cureve25519 is someone wants to. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xl2tpd: update to 1.3.16Oleksandr Kravchuk2021-12-231-1/+3
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.31 -> 2.0.32Yi Zhao2021-12-211-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.14.10 -> 4.14.11zhengruoqin2021-12-211-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ There have been a few regressions in the security release 4.14.10: o CVE-2020-25717: A user on the domain can become root on domain members. https://www.samba.org/samba/security/CVE-2020-25717.html PLEASE [RE-]READ! The instructions have been updated and some workarounds initially adviced for 4.14.10 are no longer required and should be reverted in most cases. o BUG-14902: User with multiple spaces (eg Fred&lt;space&gt;&lt;space&gt;Nurk) become un-deletable. While this release should fix this bug, it is adviced to have a look at the bug report for more detailed information, see https://bugzilla.samba.org/show_bug.cgi?id=14902. Changes since 4.14.10 --------------------- * BUG 14878: Recursive directory delete with veto files is broken. * BUG 14879: A directory containing dangling symlinks cannot be deleted by SMB2 alone when they are the only entry in the directory. * BUG 14656: Spaces incorrectly collapsed in ldb attributes. * BUG 14694: Ensure that the LDB request has not timed out during filter processing as the LDAP server MaxQueryDuration is otherwise not honoured. * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token. * BUG 14902: User with multiple spaces (eg Fred&lt;space&gt;&lt;space&gt;Nurk) become un- deletable. * BUG 14127: Avoid storing NTTIME_THAW (-2) as value on disk * BUG 14922: Kerberos authentication on standalone server in MIT realm broken. * BUG 14923: Segmentation fault when joining the domain. * BUG 14903: Support for ROLE_IPA_DC is incomplete. * BUG 14788: Memory leak if ioctl(FSCTL_VALIDATE_NEGOTIATE_INFO) fails before smbd_smb2_ioctl_send. * BUG 14899: winbindd doesn&apos;t start when &quot;allow trusted domains&quot; is off. * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token. * BUG 14694: Ensure that the LDB request has not timed out during filter processing as the LDAP server MaxQueryDuration is otherwise not honoured. * BUG 14901: The CVE-2020-25717 username map [script] advice has undesired side effects for the local nt token. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.6.2 -> 3.6.3Yi Zhao2021-12-211-1/+1
| | | | | | | | Release Notes: http://www.postfix.org/announcements/postfix-3.6.3.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.4 -> 2.5.5zhengruoqin2021-12-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Fix error in example firewall.sh script configure: remove useless -Wno-* from default CFLAGS Add argv_insert_head__empty_argv__head_only to argv tests Move deprecation of SWEET32/64bit block size ciphers to 2.7 Include --push-remove in the output of --help. Move '--push-peer-info' documentation from 'server' to 'client options' add test case(s) to notice 'openvpn --show-cipher' crashing BUILD: enable CFG and Spectre mitigation for MSVC Fix loading PKCS12 files on Windows msvc: fix product version display msvc: add missing header to project file config-msvc.h: fix OpenSSL-related defines contrib/vcpkg-ports: remove openssl port GitHub Actions: use latest working lukka/run-vcpkg Use network address for emulated DHCP server as a default Load OpenSSL config on Windows from trusted location ring_buffer.h: fix GCC warning about unused function ssh_openssl.h: remove unused declaration vcpkg/pkcs11-helper: compatibility with latest vcpkg config-msvc.h: indicate key material export support Don't use BF-CBC in unit tests if we don't have it Define have_blowfish variable in ncp unit tests doc link-options.rst: Use free open-source dynamic-DNS provider URL Fix some more wrong defines in config-msvc.h Ensure the current common_name is in the environment for scripts Require EC key support in Windows builds resolvconf fails with -p Update IRC information in CONTRIBUTING.rst doc/man (vpn-network-options): fix foreign_option_{n} typo README.down-root: Fix plugin module name Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.1 -> 4.2zhengruoqin2021-12-212-13/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | refresh arm_eabi.patch Changelog: ========== Enhancements -Add support for NTPv4 extension field improving synchronisation stability and resolution of root delay and dispersion (experimental) -Add support for NTP over PTP (experimental) -Add support for AES-CMAC and hash functions in GnuTLS -Improve server interleaved mode to be more reliable and support multiple clients behind NAT -Update seccomp filter -Add statistics about interleaved mode to serverstats report Bug fixes -Fix RTC support with 64-bit time_t on 32-bit Linux -Fix seccomp filter to work correctly with bind*device directives -Suppress kernel adjustments of system clock (dosynctodr) on illumos Other changes -Switch Solaris support to illumos Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: add ptestTrevor Gamblin2021-12-213-1/+63
| | | | | Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: install dbus service configurationJeremy Kerr2021-12-211-0/+8
| | | | | | | | mctpd ships with an example dbus service configuration, so install in the dbus system configuration dir. Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: upgrade to v1.0Jeremy Kerr2021-12-212-89/+3
| | | | | | | | We have a tag for 1.0, now: better handling of local stack configuration at runtime, and the 5.15 kernel header change has been integrated. Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: fix rebuildsRoss Burton2021-12-151-3/+3
| | | | | | | | | | | | | | | dhcp-relay needs a fresh tarball of bind unpacked in ${S}, but this is done by fetching the tarball to ${WORKDIR}, then in do_configure moving it to ${S} and unpacking it. If dhcp-relay is re-configured, the tarball no longer exists in ${WORKDIR} so this fails. Copy instead of moving so rebuilds work. Also don't rename the downloaded file to just bind.tar.gz as that can cause probems if the version changes. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-11-18 21:50:24 +0000