Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=zeus 2020-03-15T20:30:34+00:00 2020-03-15T20:30:34+00:00 Peter Kjellerstedt peter.kjellerstedt@axis.com 2019-11-18T13:31:39+00:00 urn:sha1:94cc8b862ac4df7c7f66933dea42846c80f707df It was only added because samba was a dependency, but was not removed again when the dependency on samba was removed in commit 6207331f. This effectively reverts commit a190c2e3. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0d2b80bd783fb2190c28caa2ebf3a13d4491d7c7) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2020-03-15T20:30:34+00:00 Adrian Bunk bunk@stusta.de 2020-02-21T20:39:26+00:00 urn:sha1:af706c5d83c2807d1fec321602c63aee210f0db6 Upgrade on the 3.0 stable branch, including fixes for CVE-2019-19553 and CVE-2020-7045. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2020-01-30T05:14:26+00:00 Yi Zhao yi.zhao@windriver.com 2019-11-08T03:24:48+00:00 urn:sha1:f64c2d691ea597aa6221e3d7706a4d022e07bfea Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 2b3fd534874aee125a6c79c70c93b1aa498fda3f) [Samba's update via ee5aa6911b2e93b89e67ae6167ee7d9a029b9262 required libldb upgrade to 1.5.6 Yocto # 13750] Signed-off-by: Armin Kuster <akuster808@gmail.com> 2020-01-19T16:55:36+00:00 Zhixiong Chi zhixiong.chi@windriver.com 2020-01-10T02:18:45+00:00 urn:sha1:688e19d04d67afa8cc848e91b891ba0a84ec739b Backport the CVE patch from the upstream to fix the memory leak. Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit c8ca82feb5d6ceb843aad33dada947b456f7fcac) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2020-01-05T22:44:11+00:00 Khem Raj raj.khem@gmail.com 2019-11-20T19:42:40+00:00 urn:sha1:e855ecc6d35677e79780adc57b2552213c995731 do_install never executed as a result it was empty install Create ruli-bin package for utilities, so libraries can be packages granularily Drop the makefile patch which is no longer needed, set the make variables to get the needed bits set Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f4e6224b340fba198639bdd4585a81efdf15303e) Signed-off-by: Armin Kuster <akuster808@gmail.com> 2019-11-24T20:28:29+00:00 Zheng Ruoqin zhengrq.fnst@cn.fujitsu.com 2019-10-30T20:56:27+00:00 urn:sha1:fdfa4cde192952ca7a63eb058d691e86a8e163fa Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> [Bug fix only update includes: CVE-2019-16319 ] Signed-off-by: Armin Kuster <akuster808@gmail.com> 2019-10-10T06:27:15+00:00 Peiran Hong peiran.hong@windriver.com 2019-10-09T14:43:15+00:00 urn:sha1:01b55a8a552d460acbe3673268733a78b47c5c03 Delete patch "0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch" since it is not used in the tcpdump recipe anymore. Signed-off-by: Peiran Hong <peiran.hong@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2019-10-09T07:35:31+00:00 Zang Ruochen zangrc.fnst@cn.fujitsu.com 2019-10-09T07:25:44+00:00 urn:sha1:10bba9fe7daf36e9d952821a4ad0837ec3a2f5bc -License-Update: Copyright year updated to 2019. -fetchmail/02_remove_SSLv3.patch Removed since this is included in 6.4.1. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2019-10-08T07:52:33+00:00 Peiran Hong peiran.hong@windriver.com 2019-10-07T13:43:40+00:00 urn:sha1:71535e2f0ea76d39d2911e022905ec8ee9843872 This upgrade adds some new features and fixes numerous bugs including the following CVEs: CVE: CVE-2017-16808 (AoE) CVE: CVE-2018-14468 (FrameRelay) CVE: CVE-2018-14469 (IKEv1) CVE: CVE-2018-14470 (BABEL) CVE: CVE-2018-14466 (AFS/RX) CVE: CVE-2018-14461 (LDP) CVE: CVE-2018-14462 (ICMP) CVE: CVE-2018-14465 (RSVP) CVE: CVE-2018-14881 (BGP) CVE: CVE-2018-14464 (LMP) CVE: CVE-2018-14463 (VRRP) CVE: CVE-2018-14467 (BGP) CVE: CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled) CVE: CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled) CVE: CVE-2018-14880 (OSPF6) CVE: CVE-2018-16451 (SMB) CVE: CVE-2018-14882 (RPL) CVE: CVE-2018-16227 (802.11) CVE: CVE-2018-16229 (DCCP) CVE: CVE-2018-16301 (was fixed in libpcap) CVE: CVE-2018-16230 (BGP) CVE: CVE-2018-16452 (SMB) CVE: CVE-2018-16300 (BGP) CVE: CVE-2018-16228 (HNCP) CVE: CVE-2019-15166 (LMP) CVE: CVE-2019-15167 (VRRP) CVE: CVE-2018-14879 (tcpdump -V) Deleted patch "0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch" since the fix is included in the upgrade. Modified patches "avoid-absolute-path-when-searching-for-libdlpi.patch", "unnecessary-to-check-libpcap.patch", and "add-ptest.path" since the upgrade renamed configure.in to configure.ac and made changes to the file. Added PACKAGECONFIG for smb. It is disabled by default in the upgraded version in both the package's configure script and this bitbake recipe since it is insecure. Modified the parsing of ptest result to align with the new output format. With core-image-minimal on qemux86-64/kvm: Recipe | Passed | Failed | Skipped | Time(s) Before | 408 | 0 | 2 | 4 After | 431 | 11 | 2 | 10 11 test failed after the upgrade since libpcap is not upgraded alongside with tcpdump. Signed-off-by: Peiran Hong <peiran.hong@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2019-10-05T02:11:55+00:00 Callaghan, Dan dan.callaghan@opengear.com 2019-10-04T03:35:47+00:00 urn:sha1:b08e503eb75f1e6fee65cea4c03d18ad91e7a217 These are needed for other packages which want to link against libstrongswan or other libraries included with Strongswan. By default, no headers are installed. Signed-off-by: Khem Raj <raj.khem@gmail.com>