linux/meta-openembedded.git/meta-networking/recipes-protocols, branch yoe/mut

frr: Security fix CVE-2023-3748

2023-08-28T15:55:26+00:00

CVE-2023-3748: A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-3748 Patch from: https://github.com/FRRouting/frr/commit/ae1e0e1fed77716bc06f181ad68c4433fb5523d0 Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

remove unused AUTHOR variable

2023-08-03T16:14:20+00:00

No longer used in generating packages Also creates a possible confusion with the recipe maintainer name. Signed-off-by: Michael Opdenacker Signed-off-by: Khem Raj

babeld: upgrade 1.12.2 -> 1.13.1

2023-08-01T15:46:48+00:00

Changelog: ========== * Implemented the per-interface option "probe-mtu", which automatically discards links with a mis-configured MTU. * Fixed a typo in the handing of the option "v4viav6". * Removed diversity support and related configuration file directives. * Optimised route redistribution. We now install just the route that the kernel sent us rather than doing a full route dump on every change. * Added optional delay to daemon shutdown; see the configuration option "shutdown-delay-ms". * Fixed compilation under BSD. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS

2023-07-27T15:54:40+00:00

- Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek Signed-off-by: Khem Raj

frr: upgrade 8.4.2 -> 8.4.4

2023-06-28T20:53:12+00:00

ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.4 https://github.com/FRRouting/frr/commit/45e36c0c00a517ad1606135b18c5753e210cfc0d Signed-off-by: Yi Zhao Signed-off-by: Khem Raj

*.patch: add Upstream-Status to all patches

2023-06-21T16:15:20+00:00

There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa Signed-off-by: Khem Raj

mdns: remove unneeded headers

2023-06-20T01:41:19+00:00

Signed-off-by: Beniamin Sandu Signed-off-by: Khem Raj

open62541: allow disabling subscriptions

2023-06-14T16:41:35+00:00

By default, subscriptions are turned on. Signed-off-by: Johannes Kauffmann Signed-off-by: Khem Raj

open62541: add multithreading PACKAGECONFIG option

2023-06-14T16:41:35+00:00

By default, open62541 is built without multithreading support. Make this configurable. Signed-off-by: Johannes Kauffmann Signed-off-by: Khem Raj

open62541: build optimized binary

2023-06-05T16:45:30+00:00

Without any build type specified, open62541 defaults to "Debug". Signed-off-by: Johannes Kauffmann Signed-off-by: Khem Raj