linux/meta-openembedded.git/meta-networking/recipes-protocols, branch mickledore-next

frr: Security fix CVE-2023-38802

2023-10-15T23:09:42+00:00

CVE-2023-38802: FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation). Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-38802 Patch from: https://github.com/FRRouting/frr/commit/46817adab03802355c3cce7b753c7a735bdcc5ae Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

frr: Fix CVE-2023-41358 and CVE-2023-41360

2023-10-15T23:09:42+00:00

Backport patches to fix CVE-2023-41358 and CVE-2023-41360. References: https://nvd.nist.gov/vuln/detail/CVE-2023-41358 https://nvd.nist.gov/vuln/detail/CVE-2023-41360 Signed-off-by: Robert Yang Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

frr: Security fix CVE-2023-3748

2023-08-31T12:49:13+00:00

CVE-2023-3748: A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-3748 Patch from: https://github.com/FRRouting/frr/commit/ae1e0e1fed77716bc06f181ad68c4433fb5523d0 Signed-off-by: Yi Zhao Signed-off-by: Khem Raj (cherry picked from commit ee1026ab77dcb31b0f5cb723b4d998aab4c00382) Signed-off-by: Armin Kuster

frr: upgrade 8.4.2 -> 8.4.4

2023-06-28T20:28:27+00:00

ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.4 https://github.com/FRRouting/frr/commit/45e36c0c00a517ad1606135b18c5753e210cfc0d Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

frr: add CVE_PRODUCT

2023-05-28T19:57:29+00:00

The CVE_PRODUCT is frrouting in NVD database. Signed-off-by: Chen Qi Signed-off-by: Khem Raj (cherry picked from commit 10c7793832ec492da50c89889c5cdd114962b7a5) Signed-off-by: Armin Kuster

freediameter: fix typo and old overide syntax

2023-05-07T16:31:52+00:00

A typo that probably caused a left over from override syntax conversion. INITSCRIPT_PARAMS$_${PN} --> INITSCRIPT_PARAMS:${PN} Signed-off-by: Peter Bergin Signed-off-by: Peter Bergin Signed-off-by: Khem Raj (cherry picked from commit 77f031776ec9c9edb18e7323b17b697f5c52d5f5) Signed-off-by: Armin Kuster

radiusclient-ng: Point SRC_URI to archive.ubuntu.com

2023-05-07T16:31:13+00:00

This tarball is not available on debian ftp archive anymore Signed-off-by: Khem Raj (cherry picked from commit fe62e64c973730da0e385ddbbab8cdc3217e0e69) Signed-off-by: Armin Kuster

rp-pppoe: Point SRC_URI to valid location

2023-05-07T16:30:14+00:00

Signed-off-by: Khem Raj (cherry picked from commit 2b2cc606ecc795e65d5b551ae30c8e0cef429bf9) Signed-off-by: Armin Kuster

rp-pppoe: Define _GNU_SOURCE

2023-03-22T16:10:39+00:00

Ensures that it picks up definitions of strlcpy() from string.h Signed-off-by: Khem Raj

rp-pppoe: upgrade 3.14 -> 3.15

2023-03-10T07:45:17+00:00

dont-swallow-errors.patch configure.in-Error-fix.patch removed since they're not available in 3.14. configure_in_cross.patch refreshed for 3.14. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj