<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-openembedded.git/meta-networking/recipes-netkit/netkit-telnet, branch styhead</title>
<subtitle>Mirror of git.openembedded.org/meta-openembedded</subtitle>
<id>https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=styhead</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=styhead'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/'/>
<updated>2023-11-15T17:51:45+00:00</updated>
<entry>
<title>netkit: Drop old and no upstream</title>
<updated>2023-11-15T17:51:45+00:00</updated>
<author>
<name>Armin Kuster</name>
<email>akuster808@gmail.com</email>
</author>
<published>2023-11-15T13:26:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=4c1e6d32ba6e9a14937a83f0d9375ef4d0b28057'/>
<id>urn:sha1:4c1e6d32ba6e9a14937a83f0d9375ef4d0b28057</id>
<content type='text'>
Signed-off-by: Armin Kuster &lt;akuster808@gmail.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>netkit-telnet: Fix CVE-2022-39028</title>
<updated>2023-09-22T14:36:16+00:00</updated>
<author>
<name>Sanjay Chitroda</name>
<email>sanjay.chitroda@einfochips.com</email>
</author>
<published>2023-09-22T11:17:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=d629fe71e4242fc0557f5668d9f223777eb60a0f'/>
<id>urn:sha1:d629fe71e4242fc0557f5668d9f223777eb60a0f</id>
<content type='text'>
References:
https://nvd.nist.gov/vuln/detail/CVE-2022-39028
https://security-tracker.debian.org/tracker/CVE-2022-39028

Upstream Patch:
https://cgit.freebsd.org/src/commit/?id=6914ffef4e23

- Patch is adopted from FreeBSD, as same vulnerability of
  telnetd is applicable to FreeBSD and netkit-telnet packages.

Signed-off-by: Sanjay Chitroda &lt;sanjay.chitroda@einfochips.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>*.patch: add Upstream-Status to all patches</title>
<updated>2023-06-21T16:15:20+00:00</updated>
<author>
<name>Martin Jansa</name>
<email>Martin.Jansa@gmail.com</email>
</author>
<published>2023-06-21T16:09:11+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=be8c765c7c4ed48404da8fd8e813c9f3ab5ad415'/>
<id>urn:sha1:be8c765c7c4ed48404da8fd8e813c9f3ab5ad415</id>
<content type='text'>
There is new patch-status QA check in oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a

This is temporary work around just to hide _many_ warnings from
optional patch-status (if you add it to WARN_QA).

This just added
Upstream-Status: Pending
everywhere without actually investigating what's the proper status.

This is just to hide current QA warnings and to catch new .patch files being
added without Upstream-Status, but the number of Pending patches is now terrible:

5 (26%) 	meta-xfce
6 (50%) 	meta-perl
15 (42%)        meta-webserver
21 (36%)        meta-gnome
25 (57%)        meta-filesystems
26 (43%)        meta-initramfs
45 (45%)        meta-python
47 (55%)        meta-multimedia
312 (63%)       meta-networking
756 (61%)       meta-oe

Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>.patch: fix Upstream-Status formatting issues reported by patchreview tool from oe-core</title>
<updated>2023-02-24T16:45:44+00:00</updated>
<author>
<name>Martin Jansa</name>
<email>martin.jansa@gmail.com</email>
</author>
<published>2023-02-23T13:45:29+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=285b7cd79fda2967613c14141f99aa8ef6f99c8d'/>
<id>urn:sha1:285b7cd79fda2967613c14141f99aa8ef6f99c8d</id>
<content type='text'>
Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>netkit-telnet: Drop using register storage class keyword</title>
<updated>2023-01-17T05:23:07+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2023-01-16T23:52:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=095e86660fe2993f08a141146ce3fae01af4db02'/>
<id>urn:sha1:095e86660fe2993f08a141146ce3fae01af4db02</id>
<content type='text'>
Its dropped since c++17 and modern compilers have started to error on
its use

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>netkit-telnet: Add time.h from strftime/time prototypes</title>
<updated>2022-09-07T23:44:54+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2022-09-07T04:39:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=536281a175cc7870feb2d09aed9f112c04d0ffe8'/>
<id>urn:sha1:536281a175cc7870feb2d09aed9f112c04d0ffe8</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>Convert to new override syntax</title>
<updated>2021-08-03T17:21:25+00:00</updated>
<author>
<name>Martin Jansa</name>
<email>Martin.Jansa@gmail.com</email>
</author>
<published>2021-07-29T15:04:53+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=c61dc077bbd81260e4f167fa2251643ba0ba6974'/>
<id>urn:sha1:c61dc077bbd81260e4f167fa2251643ba0ba6974</id>
<content type='text'>
This is the result of automated script (0.9.1) conversion:

oe-core/scripts/contrib/convert-overrides.py .

converting the metadata to use ":" as the override character instead of "_".

Signed-off-by: Martin Jansa &lt;Martin.Jansa@gmail.com&gt;
</content>
</entry>
<entry>
<title>netkit-telnet: Update SRC_URI</title>
<updated>2021-03-11T08:12:55+00:00</updated>
<author>
<name>Mingli Yu</name>
<email>mingli.yu@windriver.com</email>
</author>
<published>2021-03-10T08:50:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=f555f9d34f93118bb4dbe1ae45ba0657c585ee4f'/>
<id>urn:sha1:f555f9d34f93118bb4dbe1ae45ba0657c585ee4f</id>
<content type='text'>
Fix the below do_fetch warning:
WARNING: netkit-telnet-0.17-r0 do_fetch: Failed to fetch URL http://ftp.linux.org.uk/pub/linux/Networking/netkit/netkit-telnet-0.17.tar.gz, attempting MIRRORS if available

Signed-off-by: Mingli Yu &lt;mingli.yu@windriver.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>netkit-telnetd: Fix buffer overflow in netoprintf</title>
<updated>2020-07-21T23:46:36+00:00</updated>
<author>
<name>Julius Hemanth Pitti</name>
<email>jpitti@cisco.com</email>
</author>
<published>2020-07-20T22:19:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=232b82afd405c526f822294509e1d32388544ed4'/>
<id>urn:sha1:232b82afd405c526f822294509e1d32388544ed4</id>
<content type='text'>
netoprintf() was not handling a case where
return value of vsnprintf is greater than
"size"(2nd argument), results in buffer overflow
while adjusting "nfrontp" pointer to point
beyond "netobuf" buffer.

Here is one such case where "nfrontp"
crossed boundaries of "netobuf", and
pointing to another global variable.

(gdb) p &amp;netobuf[8255]
$5 = 0x55c93afe8b1f &lt;netobuf+8255&gt; ""
(gdb) p nfrontp
$6 = 0x55c93afe8c20 &lt;terminaltype&gt; "\377"
(gdb) p &amp;terminaltype
$7 = (char **) 0x55c93afe8c20 &lt;terminaltype&gt;
(gdb)

This resulted in crash of telnetd service
with segmentation fault.

Signed-off-by: Julius Hemanth Pitti &lt;jpitti@cisco.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>netkit-telnet: fix CVE-2020-10188</title>
<updated>2020-04-25T15:32:42+00:00</updated>
<author>
<name>Yi Zhao</name>
<email>yi.zhao@windriver.com</email>
</author>
<published>2020-04-24T02:07:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-openembedded.git/commit/?id=9bfc740863dd5adb89987d9ac5cdf0b655d4f261'/>
<id>urn:sha1:9bfc740863dd5adb89987d9ac5cdf0b655d4f261</id>
<content type='text'>
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2020-10188

Patch from Fedora:
https://src.fedoraproject.org/rpms/telnet/raw/master/f/telnet-0.17-overflow-exploit.patch

Signed-off-by: Yi Zhao &lt;yi.zhao@windriver.com&gt;
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
</feed>
