linux/meta-openembedded.git/meta-networking/recipes-protocols, branch nanbield

frr: fix CVEs CVE-2023-4675{2,3} and CVE-2023-4723{4,5}

2024-01-05T12:52:17+00:00

Add patches fixing CVE CVE-2023-46752, CVE-2023-46753, CVE-2023-47234, and CVE-2023-47235 to FRR 9.0. Patch order is commit order, not CVE numerical order, to avoid fuzz / need for rebasing of the patches. References: https://nvd.nist.gov/vuln/detail/CVE-2023-46752 https://nvd.nist.gov/vuln/detail/CVE-2023-46753 https://nvd.nist.gov/vuln/detail/CVE-2023-47234 https://nvd.nist.gov/vuln/detail/CVE-2023-47235 Signed-off-by: Jonas Gorski Signed-off-by: Khem Raj (cherry picked from commit 00e928bcb7e933ada8e67f3bfa887988d1ca9d61) Signed-off-by: Armin Kuster

open62541: add Backport status and link to patch

2023-10-12T13:58:06+00:00

Signed-off-by: Johannes Kauffmann Signed-off-by: Khem Raj (cherry picked from commit 0287a38fbcead63a16d8b6d931d5e0e70adfe494) Signed-off-by: Armin Kuster

mdns: Upgrade 1790.80.10 -> 2200.0.8

2023-10-04T14:52:48+00:00

Signed-off-by: Alex Kiernan Signed-off-by: Khem Raj (cherry picked from commit 8ffef53d6a491e154d9cbc83b766e65825120c80) Signed-off-by: Armin Kuster

frr: upgrade 8.4.4 -> 9.0.1

2023-09-22T14:36:16+00:00

Upgrade FRR to 9.0.1: * drop all existing patches since they are included in 9.0.1 * add a patch fixing (harmless) error messages in log * license files moved to doc/licenses * protobuf-c-native (for protoc) and protobuf-c are now needed Changelogs: https://github.com/FRRouting/frr/releases/tag/frr-9.0.1 https://github.com/FRRouting/frr/commit/31ed3dd753d62b5d8916998bc32814007e91364b https://github.com/FRRouting/frr/releases/tag/frr-9.0 https://github.com/FRRouting/frr/commit/2863e7efbcd0cbfbd41d3be04c660d77df65d0ea Signed-off-by: Jonas Gorski Signed-off-by: Khem Raj

vsomeip: add recipe

2023-09-07T15:22:43+00:00

The vsomeip stack implements the http://some-ip.com/ (Scalable service-Oriented MiddlewarE over IP (SOME/IP)) protocol. The stack consists out of: a shared library for SOME/IP (libvsomeip3.so) a shared library for SOME/IP's configuration module (libvsomeip3-cfg.so) a shared library for SOME/IP's service discovery (libvsomeip3-sd.so) a shared library for SOME/IP's E2E protection module (libvsomeip3-e2e.so) Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

frr: Fix CVE-2023-41358 and CVE-2023-41360

2023-09-07T15:22:43+00:00

Backport patches to fix CVE-2023-41358 and CVE-2023-41360. References: https://nvd.nist.gov/vuln/detail/CVE-2023-41358 https://nvd.nist.gov/vuln/detail/CVE-2023-41360 Signed-off-by: Robert Yang Signed-off-by: Khem Raj

frr: Security fix CVE-2023-3748

2023-08-28T15:55:26+00:00

CVE-2023-3748: A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-3748 Patch from: https://github.com/FRRouting/frr/commit/ae1e0e1fed77716bc06f181ad68c4433fb5523d0 Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

remove unused AUTHOR variable

2023-08-03T16:14:20+00:00

No longer used in generating packages Also creates a possible confusion with the recipe maintainer name. Signed-off-by: Michael Opdenacker Signed-off-by: Khem Raj

babeld: upgrade 1.12.2 -> 1.13.1

2023-08-01T15:46:48+00:00

Changelog: ========== * Implemented the per-interface option "probe-mtu", which automatically discards links with a mis-configured MTU. * Fixed a typo in the handing of the option "v4viav6". * Removed diversity support and related configuration file directives. * Optimised route redistribution. We now install just the route that the kernel sent us rather than doing a full route dump on every change. * Added optional delay to daemon shutdown; see the configuration option "shutdown-delay-ms". * Fixed compilation under BSD. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS

2023-07-27T15:54:40+00:00

- Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek Signed-off-by: Khem Raj