linux/meta-openembedded.git/meta-networking, branch mickledore-net

open-vm-tools: Security fix CVE-2023-20867

2023-07-02T15:24:51+00:00

CVE-2023-20867: A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-20867 Patch from: https://github.com/vmware/open-vm-tools/blob/CVE-2023-20867.patch/2023-20867-Remove-some-dead-code.patch Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

mbedtls: upgrade 2.28.2 -> 2.28.3

2023-06-28T20:28:35+00:00

Mbed TLS 2.28 is a long-time support branch. It will be supported with bug-fixes and security fixes until end of 2024. ChangeLog: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.3 Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

frr: upgrade 8.4.2 -> 8.4.4

2023-06-28T20:28:27+00:00

ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.4 https://github.com/FRRouting/frr/commit/45e36c0c00a517ad1606135b18c5753e210cfc0d Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

tcpreplay: upgrade 4.4.3 -> 4.4.4

2023-06-28T20:28:13+00:00

This release contains bug fixes only. The following CVEs have been addressed: CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786 CVE-2023-27787 CVE-2023-27788 CVE-2023-27789 Changelog: ========= dlt_jnpr_ether_cleanup: check subctx before cleanup by @Marsman1996 in #781 Bug #780 assert tcpedit dlt cleanup by @fklassen in #800 Fix bugs caused by strtok_r by @Marsman1996 in #783 Bug #782 #784 #785 #786 #787 #788 strtok r isuses by @fklassen in #801 Update en10mb.c by @david-guti in #793 PR #793 ip6 unicast flood by @fklassen in #802 Bug #719 fix overflow check for parse_mpls() by @fklassen in #804 PR #793 - update tests for corrected IPv6 MAC by @fklassen in #805 PR #793 - update tests for vlandel by @fklassen in #806 Feature #773 gh actions ci by @fklassen in #807 Signed-off-by: Archana Polampalli Signed-off-by: Armin Kuster

wireshark: Fix Multiple CVEs

2023-06-27T11:05:40+00:00

Backport fixes for: * CVE-2023-0666 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/265cbf15a418b629c3c8f02c0ba901913b1c8fd2 * CVE-2023-0667 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/85fbca8adb09ea8e1af635db3d92727fbfa1e28a * CVE-2023-0668 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/c4f37d77b29ec6a9754795d0efb6f68d633728d9 Signed-off-by: Hitendra Prajapati Signed-off-by: Armin Kuster

wireshark: CVE-2023-2952 XRA dissector infinite loop

2023-06-17T17:15:57+00:00

Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/e18d0e369729b0fff5f76f41cbae67e97c2e52e5 Signed-off-by: Hitendra Prajapati Signed-off-by: Armin Kuster

system-config-printer: Delete pycache files

2023-06-17T17:05:55+00:00

These pyc files include references to buildtime TMPDIR, therefore delete them and let them be regerated during runtime if needed. Signed-off-by: Khem Raj (cherry picked from commit b1b7ee87ac55fced4bcf88b0e374025d7f908731) Signed-off-by: Armin Kuster

system-config-printer: clean up DEPENDS

2023-06-17T17:05:20+00:00

Remove intltool-native as it is not used, and add autoconf-archive-native. Also explicitly disable systemd when not selected to be sure it doesn't automatically enable. Signed-off-by: Ross Burton Signed-off-by: Khem Raj (cherry picked from commit 0713297ae90cdf6fc7339ebdcaf5f6f839bcd028) Signed-off-by: Armin Kuster

wireshark: Fix CVE-2023-2858 & CVE-2023-2879

2023-06-15T12:04:00+00:00

Backport fixes for: * CVE-2023-2858 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/cb190d6839ddcd4596b0205844f45553f1e77105 * CVE-2023-2879 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/118815ca7c9f82c1f83f8f64d9e0e54673f31677 Signed-off-by: Hitendra Prajapati Signed-off-by: Armin Kuster

wireshark: Fix CVE-2023-2855 & CVE-2023-2856

2023-06-07T11:46:50+00:00

Backport fixes for: * CVE-2023-2855 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/0181fafb2134a177328443a60b5e29c4ee1041cb * CVE-2023-2856 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/db5135826de3a5fdb3618225c2ff02f4207012ca Signed-off-by: Hitendra Prajapati Signed-off-by: Armin Kuster