linux/meta-openembedded.git/meta-networking/recipes-support, branch rocko-next

wireshark: update to 2.2.16

2018-07-25T22:51:47+00:00

Bug fix only updates Include security fixes: 2.2.16: wnpa-sec-2018-06 RPKI-Router infinite loop. Bug 14414. CVE-2018-7325. wnpa-sec-2018-34 BGP dissector large loop. Bug 13741. CVE-2018-14342. wnpa-sec-2018-35 ISMP dissector crash. Bug 14672. CVE-2018-14344. wnpa-sec-2018-36 Multiple dissectors could crash. Bug 14675. CVE-2018-14340. wnpa-sec-2018-37 ASN.1 BER dissector crash. Bug 14682. CVE-2018-14343. wnpa-sec-2018-38 MMSE dissector infinite loop. Bug 14738. CVE-2018-14339. wnpa-sec-2018-39 DICOM dissector crash. Bug 14742. CVE-2018-14341. wnpa-sec-2018-40 Bazaar dissector infinite loop. Bug 14841. wnpa-sec-2018-41 HTTP2 dissector crash. Bug 14869. 2.2.15: wnpa-sec-2018-25 The LDSS dissector could crash. (Bug 14615) wnpa-sec-2018-28 Multiple dissectors could consume excessive memory. (Bug 14678) wnpa-sec-2018-29 The DNS dissector could crash. (Bug 14681) wnpa-sec-2018-30 The GSM A DTAP dissector could crash. (Bug 14688) wnpa-sec-2018-31 The Q.931 dissector could crash. (Bug 14689) wnpa-sec-2018-33 Multiple dissectors could crash. (Bug 14703) 2.2.14: wnpa-sec-2018-15 The MP4 dissector could crash. (Bug 13777) wnpa-sec-2018-16 The ADB dissector could crash. (Bug 14460) wnpa-sec-2018-17 The IEEE 802.15.4 dissector could crash. (Bug 14468) wnpa-sec-2018-18 The NBAP dissector could crash. (Bug 14471) wnpa-sec-2018-19 The VLAN dissector could crash. (Bug 14469) wnpa-sec-2018-20 The LWAPP dissector could crash. (Bug 14467) wnpa-sec-2018-23 The Kerberos dissector could crash. (Bug 14576) 2.2.13: wnpa-sec-2018-05 The IEEE 802.11 dissector could crash. Bug 14442, CVE-2018-7335 wnpa-sec-2018-06 Multiple dissectors could go into large infinite loops. All ASN.1 BER dissectors (Bug 14444), along with the DICOM (Bug 14411), DMP (Bug 14408), LLTD (Bug 14419), OpenFlow (Bug 14420), RELOAD (Bug 14445), RPCoRDMA (Bug 14449), RPKI-Router (Bug 14414), S7COMM (Bug 14423), SCCP (Bug 14413), Thread (Bug 14428), Thrift (Bug 14379), USB (Bug 14421), and WCCP (Bug 14412) dissectors were susceptible. wnpa-sec-2018-07 The UMTS MAC dissector could crash. Bug 14339, CVE-2018-7334 wnpa-sec-2018-09 The FCP dissector could crash. Bug 14374, CVE-2018-7336 wnpa-sec-2018-10 The SIGCOMP dissector could crash. Bug 14398, CVE-2018-7320 wnpa-sec-2018-11 The pcapng file parser could crash. Bug 14403, CVE-2018-7420 wnpa-sec-2018-12 The IPMI dissector could crash. Bug 14409, CVE-2018-7417 wnpa-sec-2018-13 The SIGCOMP dissector could crash. Bug 14410, CVE-2018-7418 wnpa-sec-2018-14 The NBAP disssector could crash. Bug 14443, CVE-2018-7419 Signed-off-by: Armin Kuster

wireshark: Update Package to 2.2.12

2018-06-07T13:43:47+00:00

Includes: wnpa-sec-2018-01, Multiple dissectors could crash. (Bug 14253) CVE-2018-5336 wnpa-sec-2018-02, The MRDISC dissector could crash. (Bug 14299, Bug 13707) CVE-2017-17997 wnpa-sec-2018-03, The IxVeriWave file parser could crash. (Bug 14297) CVE-2018-5334 wnpa-sec-2018-04, The WCP dissector could crash. (Bug 14251) CVE-2018-5335 Full release notes: https://www.wireshark.org/docs/relnotes/wireshark-2.2.12.html Signed-off-by: Armin Kuster

wireshark: Update to 2.2.11

2018-06-07T13:43:47+00:00

changed --with-ssh to --with-libssh=DIR includes: wnpa-sec-2017-47 : CVE-2017-17084 The IWARP_MPA dissector could crash. (Bug 14236) wnpa-sec-2017-48 : CVE-2017-17083 The NetBIOS dissector could crash. (Bug 14249) wnpa-sec-2017-49 : CVE-2017-17085 The CIP Safety dissector could crash. (Bug 14250) release notes: https://www.wireshark.org/docs/relnotes/wireshark-2.2.11.html Signed-off-by: Armin Kuster Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald Signed-off-by: Armin Kuster

stunnel: fix compile error when openssl disable des support

2018-02-01T15:32:05+00:00

When openssl disable des support with configure option 'no-des', it doesn't provide des related header file and functions. That causes stunnel compile failed. Fix it by checking macro OPENSSL_NO_DES to use openssl des related library conditionaly. Signed-off-by: Kai Kang Signed-off-by: Joe MacDonald Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit f9a1fe6ab2dfb6a53e58fc8da3a1580e76954e5e) Signed-off-by: Armin Kuster

arptables: Fix do_install task

2018-02-01T15:32:05+00:00

We need to run oe_runmake install with DESTDIR variable to install all arptables files. Without this the only file installed in package is systemd unit. Signed-off-by: Fabio Berton Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit f122ecd7171b2258452131cc75d809b02a1f4f02) Signed-off-by: Armin Kuster

dnsmasq: update SRC_URI for versions 2.69 and earlier

2018-02-01T15:32:05+00:00

Versions 2.16 to 2.69 have now also moved into the archives folder. Signed-off-by: Andre McCurdy Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit d338d219dfbcbbdd133c7d4364bc8a1b19835e0b) Signed-off-by: Armin Kuster

dovecot: Fix parallel build

2018-02-01T15:32:04+00:00

Signed-off-by: Khem Raj Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit ff720f34e47638dd86f9671ab8073f27094d819f) Signed-off-by: Armin Kuster

open-isns: Fix build with musl

2018-02-01T15:32:04+00:00

Signed-off-by: Khem Raj Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit 43d2d966b957886bc54d7f15e6632211c41114c3) Signed-off-by: Armin Kuster

wireshark: update to 2.2.10

2017-10-16T17:22:54+00:00

The following vulnerabilities have been fixed: * [1]wnpa-sec-2017-42 BT ATT dissector crash ([2]Bug 14049) [3]CVE-2017-15192 * [4]wnpa-sec-2017-43 MBIM dissector crash ([5]Bug 14056) [6]CVE-2017-15193 * [7]wnpa-sec-2017-44 DMP dissector crash ([8]Bug 14068) [9]CVE-2017-15191 Signed-off-by: Armin Kuster Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

dnsmasq: upgrade to 2.78

2017-10-11T20:22:50+00:00

This update fixes a number of bugs including the following vulnerabilities: CVE-2017-13704 CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496 Further details can be found in the changelog here: http://www.thekelleys.org.uk/dnsmasq/CHANGELOG Signed-off-by: Paul Eggleton Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald