linux/meta-openembedded.git/meta-networking/recipes-protocols, branch daisy-next

net-snmp-5.7.2: fix CVE-2014-2285

2014-05-09T14:18:40+00:00

The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2285 Signed-off-by: yzhu1 Signed-off-by: Roy Li Signed-off-by: Joe MacDonald

net-snmp-5.7.2: fix CVE-2014-2284

2014-05-09T14:18:40+00:00

The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2284 Signed-off-by: yanjun.zhu Signed-off-by: Roy Li Signed-off-by: Joe MacDonald

net-snmp: Using the target perl

2014-05-09T14:18:40+00:00

Set the PERLPROG to target perl to avoid host contamination. Signed-off-by: Yue Tao Signed-off-by: Roy Li Signed-off-by: Joe MacDonald

quagga: fix CVE-2013-6051

2014-04-25T01:07:46+00:00

Backport patch to fix CVE-2013-6051. Signed-off-by: Hu Signed-off-by: Kai Kang Signed-off-by: Joe MacDonald

quagga: fix QA warning

2014-04-25T01:07:46+00:00

When build quagga, it shows QA warnings: WARNING: QA Issue: ELF binary '/home/build/poky/build/tmp/work/i586-poky-linux/quagga/0.99.21-r2.0/packages-split/quagga-bgpd/usr/sbin/bgpd' has relocations in .text WARNING: QA Issue: ELF binary '/home/build/poky/build/tmp/work/i586-poky-linux/quagga/0.99.21-r2.0/packages-split/quagga-ripngd/usr/sbin/ripngd' has relocations in .text The configure script tests compiler whether support option '-fPIE'. If support, it pass option '-fPIE' to compiler then cause these QA warnings. Disable configure script to check option '-fPIC'. Signed-off-by: Kai Kang Signed-off-by: Joe MacDonald

quagga: Add mirror site

2014-04-25T00:39:15+00:00

* The SRC_URI is not accessible. So need to add mirror site referred by the original site. * The problem is that http://download.savannah.nongnu.org/releases redirects to closest mirror and few mirrors (e.g. .jp) weren't working correctly while http://download-mirror.savannah.gnu.org/releases/ seems to be reliable. Signed-off-by: Changhyeok Bae Signed-off-by: Joe MacDonald

quagga: work with new readline

2014-03-27T19:41:12+00:00

The Function and CPPFunction had been removed by in readline 6.3, use the new functions to replace them. Signed-off-by: Robert Yang Signed-off-by: Joe MacDonald

recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues

2014-02-23T22:20:02+00:00

Changes: - rename SUMMARY with length > 80 to DESCRIPTION - rename DESCRIPTION with length < 80 to (non present tag) SUMMARY - drop final point character at the end of SUMMARY string - remove trailing whitespace of SUMMARY line Note: don't bump PR Signed-off-by: Matthieu Crapet Signed-off-by: Martin Jansa

quagga: close the stdout/stderr as in other daemons

2014-02-23T22:17:29+00:00

Once babald becomes a background daemon, it should not output information to stdout, so need to close stdout. In fact, other daemons close their stdout when they run into background, like ospfd, isisd and bgpd, by calling daemon() which is in lib/daemon.c Closing the stdout can fix a tee hang issue { #/usr/sbin/babeld -d |tee tmp } Signed-off-by: Roy Li Signed-off-by: Martin Jansa

quagga: fix a typOS

2014-02-13T01:09:26+00:00

it should be CPP, not cpp; this typOS makes vtysh unable to work. Signed-off-by: Roy Li Signed-off-by: Joe MacDonald