linux/meta-openembedded.git/meta-networking/recipes-daemons, branch scarthgap-next

postfix: fix rootfs file difference

2025-08-02T17:13:14+00:00

Rootfs file differs with the same project configure, add preliminary setting to avoid this. Signed-off-by: Jinfeng Wang Signed-off-by: Armin Kuster

proftpd: Fix CVE-2023-51713

2025-08-02T17:13:06+00:00

Upstream-Status: Backport from https://github.com/proftpd/proftpd/commit/97bbe68363ccf2de0c07f67170ec64a8b4d62592 Link: https://git.openembedded.org/meta-openembedded/commit/?h=kirkstone&id=730e44900a0a86265bad93a16b5a5ff344a07266 Signed-off-by: Vijay Anusuri Signed-off-by: Armin Kuster

proftpd: Fix CVE-2024-57392

2025-05-21T13:17:27+00:00

Upstream-Status: Backport from https://github.com/proftpd/proftpd/commit/981a37916fdb7b73435c6d5cdb01428b2269427d Signed-off-by: Vijay Anusuri Signed-off-by: Armin Kuster

keepalived: Make build reproducible

2025-04-17T00:30:23+00:00

Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

squid: conditionally set status of CVE-2024-45802

2024-11-09T19:44:28+00:00

According to [1] the ESI feature implementation in squid is vulnerable without any fix available. NVD says it's fixed in 6.10, however the change in this release only disables ESI by default (which we always did via PACKAGECONFIG). Commit in master branch related to this CVE is [2]. Title is "Remove Edge Side Include (ESI) protocol" and it's also what it does. So there will never be a fix for these ESI vulnerabilities. We should not break features in LTS branch and cannot fix this problem. So ignrore this CVE based on set PACKAGECONFIG which should remove it from reports for most users. Thos who need ESI need to assess the risk themselves. [1] https://github.com/squid-cache/squid/security/advisories/GHSA-f975-v7qw-q7hj [2] https://github.com/squid-cache/squid/commit/5eb89ef3d828caa5fc43cd8064f958010dbc8158 Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

squid: patch CVE-2024-37894

2024-08-21T20:45:29+00:00

Reference: https://github.com/squid-cache/squid/security/advisories/GHSA-wgvf-q977-9xjg Signed-off-by: Peter Marko Signed-off-by: Armin Kuster

squid: workaround a build failure with native gcc10

2024-06-02T18:57:06+00:00

When build on Debian 11 (gcc10), squid fails to build[0] because of a bug[1] in the configure step (it mixes options between old native compiler and recent target compiler: the former needs the std=c++17 option, the latter doesn't). The workaround is to force the "-std=c++17" option for the native build. NB: Our Buildroot friends have the same workaround[2]. [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/23/steps/28/logs/stdio [1]: https://bugs.squid-cache.org/show_bug.cgi?id=5376 Bug closed as invalid by upstream [2]: https://github.com/buildroot/buildroot/blob/932b52fad87d79d9f26a343edafe2981079de16e/package/squid/squid.mk#L24 Signed-off-by: Yoann Congal Reviewed-by: Alexandre Truong Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

networkd-dispatcher: Add dependency on python3-json

2024-04-30T18:00:34+00:00

networkd-dispatcher imports json. Add it as a RDEPENDS. Signed-off-by: Khem Raj

squid: upgrade 6.8 -> 6.9

2024-04-21T17:52:48+00:00

Changelog: ========== - Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef - Bug 5069: Keep listening after getsockname() error - Bug 5360: FwdState::noteDestinationsEnd() assertion "err" - Reduce stale errno usage - Plug memory leak in handling cache manager requests - Fix error: template-id not allowed for constructor in C++20 - Improve release packaging automation Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

postfix: switch SRC_URI to http

2024-04-14T15:38:39+00:00

Switch the SRC_URI to http since the postfix site does not yet use https. Signed-off-by: Randy MacLeod Signed-off-by: Khem Raj