linux/meta-openembedded.git/meta-networking, branch rocko-next

lftp: CVE-2018-10916

2018-09-04T14:37:56+00:00

Affects lftp <= 4.8.3 Signed-off-by: Jagadeesh Krishnanjanappa Signed-off-by: Armin Kuster

wireshark: update to 2.2.16

2018-07-25T22:51:47+00:00

Bug fix only updates Include security fixes: 2.2.16: wnpa-sec-2018-06 RPKI-Router infinite loop. Bug 14414. CVE-2018-7325. wnpa-sec-2018-34 BGP dissector large loop. Bug 13741. CVE-2018-14342. wnpa-sec-2018-35 ISMP dissector crash. Bug 14672. CVE-2018-14344. wnpa-sec-2018-36 Multiple dissectors could crash. Bug 14675. CVE-2018-14340. wnpa-sec-2018-37 ASN.1 BER dissector crash. Bug 14682. CVE-2018-14343. wnpa-sec-2018-38 MMSE dissector infinite loop. Bug 14738. CVE-2018-14339. wnpa-sec-2018-39 DICOM dissector crash. Bug 14742. CVE-2018-14341. wnpa-sec-2018-40 Bazaar dissector infinite loop. Bug 14841. wnpa-sec-2018-41 HTTP2 dissector crash. Bug 14869. 2.2.15: wnpa-sec-2018-25 The LDSS dissector could crash. (Bug 14615) wnpa-sec-2018-28 Multiple dissectors could consume excessive memory. (Bug 14678) wnpa-sec-2018-29 The DNS dissector could crash. (Bug 14681) wnpa-sec-2018-30 The GSM A DTAP dissector could crash. (Bug 14688) wnpa-sec-2018-31 The Q.931 dissector could crash. (Bug 14689) wnpa-sec-2018-33 Multiple dissectors could crash. (Bug 14703) 2.2.14: wnpa-sec-2018-15 The MP4 dissector could crash. (Bug 13777) wnpa-sec-2018-16 The ADB dissector could crash. (Bug 14460) wnpa-sec-2018-17 The IEEE 802.15.4 dissector could crash. (Bug 14468) wnpa-sec-2018-18 The NBAP dissector could crash. (Bug 14471) wnpa-sec-2018-19 The VLAN dissector could crash. (Bug 14469) wnpa-sec-2018-20 The LWAPP dissector could crash. (Bug 14467) wnpa-sec-2018-23 The Kerberos dissector could crash. (Bug 14576) 2.2.13: wnpa-sec-2018-05 The IEEE 802.11 dissector could crash. Bug 14442, CVE-2018-7335 wnpa-sec-2018-06 Multiple dissectors could go into large infinite loops. All ASN.1 BER dissectors (Bug 14444), along with the DICOM (Bug 14411), DMP (Bug 14408), LLTD (Bug 14419), OpenFlow (Bug 14420), RELOAD (Bug 14445), RPCoRDMA (Bug 14449), RPKI-Router (Bug 14414), S7COMM (Bug 14423), SCCP (Bug 14413), Thread (Bug 14428), Thrift (Bug 14379), USB (Bug 14421), and WCCP (Bug 14412) dissectors were susceptible. wnpa-sec-2018-07 The UMTS MAC dissector could crash. Bug 14339, CVE-2018-7334 wnpa-sec-2018-09 The FCP dissector could crash. Bug 14374, CVE-2018-7336 wnpa-sec-2018-10 The SIGCOMP dissector could crash. Bug 14398, CVE-2018-7320 wnpa-sec-2018-11 The pcapng file parser could crash. Bug 14403, CVE-2018-7420 wnpa-sec-2018-12 The IPMI dissector could crash. Bug 14409, CVE-2018-7417 wnpa-sec-2018-13 The SIGCOMP dissector could crash. Bug 14410, CVE-2018-7418 wnpa-sec-2018-14 The NBAP disssector could crash. Bug 14443, CVE-2018-7419 Signed-off-by: Armin Kuster

wireshark: Update Package to 2.2.12

2018-06-07T13:43:47+00:00

Includes: wnpa-sec-2018-01, Multiple dissectors could crash. (Bug 14253) CVE-2018-5336 wnpa-sec-2018-02, The MRDISC dissector could crash. (Bug 14299, Bug 13707) CVE-2017-17997 wnpa-sec-2018-03, The IxVeriWave file parser could crash. (Bug 14297) CVE-2018-5334 wnpa-sec-2018-04, The WCP dissector could crash. (Bug 14251) CVE-2018-5335 Full release notes: https://www.wireshark.org/docs/relnotes/wireshark-2.2.12.html Signed-off-by: Armin Kuster

wireshark: Update to 2.2.11

2018-06-07T13:43:47+00:00

changed --with-ssh to --with-libssh=DIR includes: wnpa-sec-2017-47 : CVE-2017-17084 The IWARP_MPA dissector could crash. (Bug 14236) wnpa-sec-2017-48 : CVE-2017-17083 The NetBIOS dissector could crash. (Bug 14249) wnpa-sec-2017-49 : CVE-2017-17085 The CIP Safety dissector could crash. (Bug 14250) release notes: https://www.wireshark.org/docs/relnotes/wireshark-2.2.11.html Signed-off-by: Armin Kuster Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald Signed-off-by: Armin Kuster

networkmanager: add consolekit only when x11 is enabled

2018-02-01T15:32:05+00:00

consolekit depends on virtual/libx11 then it requires x11 distro feature, so add consolekit option only when x11 is in DISTRO_FEATURES. Signed-off-by: Jackie Huang Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit b55738ef8d30d6aa92e2e644a50f4b06ec541204) Signed-off-by: Armin Kuster

stunnel: fix compile error when openssl disable des support

2018-02-01T15:32:05+00:00

When openssl disable des support with configure option 'no-des', it doesn't provide des related header file and functions. That causes stunnel compile failed. Fix it by checking macro OPENSSL_NO_DES to use openssl des related library conditionaly. Signed-off-by: Kai Kang Signed-off-by: Joe MacDonald Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit f9a1fe6ab2dfb6a53e58fc8da3a1580e76954e5e) Signed-off-by: Armin Kuster

net-snmp: support openssl without 3des

2018-02-01T15:32:05+00:00

net-snmp enables 3des support by default and fails to build with distro feature openssl-no-weak-ciphers: | ../../net-snmp-5.7.3/snmplib/scapi.c:82:25: fatal error: openssl/des.h: No such file or directory | #include To fix the issue: * add a patch to include des.h only if it's found in openssl * disable des when openssl-no-weak-ciphers is enabled Signed-off-by: Jackie Huang Signed-off-by: Joe MacDonald Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit d8e69bc9e9c183346a11eb31915c12558565f881) Signed-off-by: Armin Kuster

arptables: Fix do_install task

2018-02-01T15:32:05+00:00

We need to run oe_runmake install with DESTDIR variable to install all arptables files. Without this the only file installed in package is systemd unit. Signed-off-by: Fabio Berton Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit f122ecd7171b2258452131cc75d809b02a1f4f02) Signed-off-by: Armin Kuster

dnsmasq: update SRC_URI for versions 2.69 and earlier

2018-02-01T15:32:05+00:00

Versions 2.16 to 2.69 have now also moved into the archives folder. Signed-off-by: Andre McCurdy Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit d338d219dfbcbbdd133c7d4364bc8a1b19835e0b) Signed-off-by: Armin Kuster

dovecot: Fix parallel build

2018-02-01T15:32:04+00:00

Signed-off-by: Khem Raj Signed-off-by: Armin Kuster Signed-off-by: Joe MacDonald (cherry picked from commit ff720f34e47638dd86f9671ab8073f27094d819f) Signed-off-by: Armin Kuster