linux/meta-openembedded.git/meta-networking/recipes-support, branch thud

tcpdump: Fix CVE-2017-16808

2019-10-05T16:01:00+00:00

Backport selected parts of three upstream commits to fix CVE-2017-16808 where tcpdump 4.9.2 has a heap-based buffer over-read. Upstream-Status: Backport [ several ] Upstream commits fully backported: 46aead6 [CVE-2017-16808/AoE: Add a missing bounds check] Upstream commits partially backported: 7068209 [Use nd_ types in 802.x and FDDI headers.] 84ef17a [Replace ND_TTEST2()/ND_TCHECK2() macros by macros using pointers (1/n)] 46aead6 fixes the vulnerability and requires two macros defined in 7068209 and 84ef17a, which are committed after the release of 4.9.2. Only the definition of the macros are taken from the two commits as they impact a wide range of code and are difficult to integrate. CVE: CVE-2017-16808 Signed-off-by: Peiran Hong Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

wireshark: Update to 2.6.10 for security fixes.

2019-09-04T20:14:32+00:00

Source: wireshark.org MR: 99742, 99743, 99744, 99745, 99746 99747, 99742, 99748, 99062 Type: Security Fix Disposition: Backport from wireshark.org ChangeID: d9a2014ea6271a58633cea8899b63257b8b03cd3 Description: Bug fix update only updates. 2.8.10: wnpa-sec-2019-20 ASN.1 BER and related dissectors crash. Bug 15870. CVE-2019-13619. 2.8.9: wnpa-sec-2019-19 Wireshark dissection engine crash. Bug 15778. CVE-2019-12295 2.6.8: wnpa-sec-2019-09 NetScaler file parser crash. Bug 15497. CVE-2019-10895. wnpa-sec-2019-10 SRVLOC dissector crash. Bug 15546. CVE-2019-10899. wnpa-sec-2019-14 GSS-API dissector crash. Bug 15613. CVE-2019-10894. wnpa-sec-2019-15 DOF dissector crash. Bug 15617. CVE-2019-10896. wnpa-sec-2019-17 LDSS dissector crash. Bug 15620. CVE-2019-10901. wnpa-sec-2019-18 DCERPC SPOOLSS dissector crash. Bug 15568. CVE-2019-10903. Signed-off-by: Armin Kuster

ntp: upgrade 4.2.8p12 -> 4.2.8p13

2019-05-25T19:18:49+00:00

License has been changed due to reformatting, no new stuff added. Bug fix only update include security fixes: CVE-2019-8936 Signed-off-by: Andrej Valek Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

Split ntpq into an own package

2019-03-25T01:44:58+00:00

ntpq is the standard query program for ntp, but ntp-utils depends on perl. Signed-off-by: Adrian Bunk Signed-off-by: Armin Kuster

wireshark: update to 2.6.6

2019-02-05T05:53:15+00:00

includes: wnpa-sec-2019-01 The 6LoWPAN dissector could crash. Bug 15217. CVE-2019-5716. wnpa-sec-2019-02 The P_MUL dissector could crash. Bug 15337. CVE-2019-5717. wnpa-sec-2019-03 The RTSE dissector and other dissectors could crash. Bug 15373. CVE-2019-5718. wnpa-sec-2019-04 The ISAKMP dissector could crash. Bug 15374. CVE-2019-5719. For more info see: https://www.wireshark.org/docs/relnotes/wireshark-2.6.6.html Signed-off-by: Armin Kuster Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

wireshark: upgrade to 2.6.5

2019-02-05T05:02:45+00:00

1.Upgrade wireshark from 2.6.4 to 2.6.5. Signed-off-by: Hong Liu Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

geoip: update SRC_URI

2018-12-22T16:14:11+00:00

previous database on maxmind website will be removed from January 2, 2019. and also we met checksum weekly change problem, so update the SRC_URI to http://sources.openembedded.org/ Signed-off-by: Changqing Li Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

geoip: update geolite database checksum

2018-12-22T16:14:11+00:00

Geolite database checksum changed today, so update it to the lastest one. Signed-off-by: Changqing Li Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

geoip: add downloadfilename for geoip database files

2018-12-22T16:14:10+00:00

previous change of checksum don't trigger archive to re-downloaded, , which will cause checksum mismatch. add downloadfilename to trigger re-download. 1. for user with PREMIRROR, another benefit is it can still compile success event upstream checksum change frequently. 2. but for user don't use PREMIRROR, if upstream checksum changed, still might have checksum mismatch problem. Signed-off-by: Changqing Li Signed-off-by: Khem Raj Signed-off-by: Armin Kuster

ntp: Reproducible build: Use fixed path to posix shell

2018-11-15T21:18:52+00:00

At configure time, the ntp build goes looking on the build machine for a posix shell, using `which` to find it. Under OE, it settles on hosttools/bash, resulting in this build host path being written into several binaries. This did not affect the Debian reproducibility project, presumably because it consistently found bash at /bin/bash. Don't go looking, just use a fixed path to /bin/sh instead. Upstream-Status: Submitted http://bugs.ntp.org/show_bug.cgi?id=3551 Signed-off-by: Douglas Royds Signed-off-by: Khem Raj Signed-off-by: Armin Kuster