linux/meta-openembedded.git/meta-networking/recipes-daemons, branch krogoth

postfix: Fix rootfs creation errors

2016-08-16T17:29:39+00:00

1) error: file /usr/share/man/man1/mailq.1 from install of postfix-doc conflicts with file from package esmtp-doc 2) error: file /usr/share/man/man1/newaliases.1 from install of postfix-doc conflicts with file from package esmtp-doc 3) error: file /usr/share/man/man1/sendmail.1 from install of postfix-doc conflicts with file from package esmtp-doc Signed-off-by: Dai Caiyun Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald (cherry picked from commit 7832c673504415cf78a910263c23dda8ec9b982d) Signed-off-by: Armin Kuster

squid: CVE-2016-4553

2016-08-16T17:29:39+00:00

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-4553 Backported upstream patch: http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14039.patch Signed-off-by: Catalin Enache Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald (cherry picked from commit d46c89ae44c811b64b117613072698601e483b32) Signed-off-by: Armin Kuster

squid: CVE-2016-3947

2016-05-10T02:05:02+00:00

Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performance degradation or transition failures) or write sensitive information to log files via an ICMPv6 packet. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3947 Signed-off-by: Catalin Enache Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald Signed-off-by: Otavio Salvador Signed-off-by: Armin Kuster

proftpd: CVE-2016-3125

2016-05-10T02:05:02+00:00

The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3125 Signed-off-by: Catalin Enache Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald Signed-off-by: Otavio Salvador Signed-off-by: Armin Kuster

lldpd: Update to version 0.9.2

2016-04-29T15:57:47+00:00

This new release has following changes since version 0.9.0: lldpd (0.9.2) Change: - Ability to add/remove/replace custom TLV from lldpcli. - LLDP-MED capabilities are displayed differently in lldpcli. - Limit the maximum depth (5) when trying to apply a VLAN. - Change JSON output format when using json-c to match Jansson output. - Integration tests for the major parts of lldpd, including use of address and leak sanitizer. Fix: - LLDP-MED POE TLV are now displayed in lldpcli. - Ignore lower link when it is in another namespace. - Fix various problems with interfaces being enslaved. - Fix a memory leak when modifying port-related settings. lldpd (0.9.1) Change: - Rework packaging for OS X to make it work with El Capitan. To simplify a bit, it is not possible anymore to build fat binaries. Latest version of OS X supporting 32bit was 10.6. Fix: - By default, when using port alias as description, use port name as port ID. - Miscellaneous fixes with netlink cache. - Ensure large netlink messages can be received. Signed-off-by: Fabio Berton Acked-by: Otavio Salvador Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

cyrus-sasl: Drop unneeded group addition

2016-04-19T14:03:20+00:00

The mail group is provided by base-passwd so would always be present. Therefore drop the uneeded group addition from this recipe. This works around the recent user cleanup code improvements which meant this started causing failures for people. Signed-off-by: Richard Purdie Acked-by: Otavio Salvador Tested-by: Otavio Salvador Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

lldpd: fix PN -> BPN SRC_URI for multilib build

2016-03-02T19:07:34+00:00

Signed-off-by: Randy MacLeod Signed-off-by: Joe MacDonald

ncftp: fix build failures with ccdv

2016-02-29T21:23:35+00:00

ccdv is an internal tool to reduce the deluge Make output to make finding actual problems easier and it is intended to be invoked from Makefiles only, it doesn't work for the cross compiling, so compile it with $BUILD_CC and corresponding CFLAGS. And I think we don't need to enable it by default to reduce our Make output, so add a PACKAGECONFIG for it but disable it by default. Signed-off-by: Jackie Huang Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

postfix: fix clean broken issue

2016-02-29T21:23:35+00:00

There is a build failure while rebuilding postfix ... | NOTE: make -e MAKEFLAGS= OPT= DEBUG= OPTS= clean | make -f Makefile.in MAKELEVEL= Makefiles | (echo "# Do not edit -- this file documents how Postfix was built for your machine.";/bin/sh makedefs) >makedefs.tmp | No include file found. | Install the appropriate db*-devel package first. | Makefile.in:31: recipe for target 'Makefiles' failed | make: *** [Makefiles] Error 1 | Makefile:21: recipe for target 'Makefiles' failed | make: *** [Makefiles] Error 2 | ERROR: oe_runmake failed | ERROR: Function failed: do_configure (log file is located at tmp/work/ core2-64-wrs-linux/postfix/3.0.2-r0/temp/do_configure/log.do_configure.12848) ... Signed-off-by: Hongxu Jia Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

lldpd: use bash-completion.bbclass

2016-02-29T21:23:34+00:00

Use bash-completion.bbclass to package bash completions. Signed-off-by: George McCollister Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald