summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
* drbd-utils: upgrade 9.30.0 -> 9.34.0Haiqing Bai2026-04-173-38/+60
| | | | | | | | | | | | | Changes: - Drop 0001-Fix-build-with-gcc-15.patch (merged upstream). - Add 0001-fix-the-hardcoded-legacy-helper-path.patch: replace the hardcoded "/lib/drbd" path in add_lib_drbd_to_path() with the build-configured DRBD_LEGACY_LIB_DIR derived from LIBDIR - Remove sed fixup for the now-absent ocf.ra@.service. - Install new upstream 50-drbd.preset into systemd system-preset Signed-off-by: Haiqing Bai <haiqing.bai@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ruli: Delete -ansi and -pedantic from compiler commandlineKhem Raj2026-04-161-10/+15
| | | | | | | | | | | | | | | The build fails because ruli is compiled with -ansi (which implies C89/C90), but glibc's memchr macro uses _Generic, a C11 feature. Clang treats this as an error via -Werror,-Wc11-extensions. Fixes build with glibc 2.43+ | ruli_conf.c:86:12: error: '_Generic' is a C11 extension [-Werror,-Wc11-extensions] | 86 | if (!memchr(inbuf, '\0', LOAD_SEARCH_LIST_INBUFSZ)) | | ^ Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* dante,openflow,linux-atm: disable C23 support to fix configure checkKhem Raj2026-04-161-0/+2
| | | | | | | | Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23 compiler support, avoiding potential build failures as the package is not yet fully ported to support C23 standard. Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ruli: disable C23 support to fix buildKhem Raj2026-04-161-1/+1
| | | | | | | Avoid potential build failures as the package is not yet fully ported to support C23 standard. Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* stunnel: upgrade 5.77 -> 5.78Wang Mingyu2026-04-142-9/+9
| | | | | | | | | | License-Update: Copyright year updated to 2026 fix-openssl-no-des.patch refreshed for 5.78 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ntp: Fix build with -std=gnu23Khem Raj2026-04-133-0/+136
| | | | | | | Backport a patch from openLDAP to fix the configure errors with clang-22 -std=gnu23 Fix another issue by dropping C89 signatures in favor of C99 function prototypes Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* netperf: Fix build with std=gnu23Khem Raj2026-04-122-0/+26
| | | | Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* dovecot: Fix checksum mismatchWang Mingyu2026-04-101-1/+1
| | | | | | | Update the sha256sum to match the current upstream archive. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* nbdkit: upgrade 1.47.5 -> 1.47.7Wang Mingyu2026-04-101-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ettercap: 0.8.4-> 0.8.4.1Gianfranco Costamagna2026-04-102-50/+1
| | | | | | | | | | | | 1. Changelog https://github.com/Ettercap/ettercap/releases/tag/v0.8.4.1 2. Remove following patches as they were merged upstream CVE-2026-3606.patch Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* linux-atm: Add kernel-module as RRECOMMENDSZheng Ruoqin2026-04-061-0/+1
| | | | | | | | Runtime command line atmtcp depends on kernel module atmtcp, so add it as RRECOMMENDS. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* tinyproxy: patch CVE-2026-3945Gyorgy Sarvari2026-04-063-0/+62
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-3945 Backport the patches which are references by the NVD avisory. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* tinyproxy: upgrade 1.11.2 -> 1.11.3Gyorgy Sarvari2026-04-062-45/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Drop patch that was merged upstream. Shortlog: https://github.com/tinyproxy/tinyproxy/compare/1.11.2...1.11.3 Ptests passed successfully: root@qemux86-64:~# ptest-runner START: ptest-runner 2026-04-06T15:25 BEGIN: /usr/lib/tinyproxy/ptest starting web server... done. listening on 127.0.0.3:32123 starting tinyproxy... done (listening on 127.0.0.2:12321) waiting for 1 seconds. 1 done checking direct connection to web server... ok testing connection through tinyproxy... ok requesting statspage via stathost url... ok signaling tinyproxy to reload config...ok checking direct connection to web server... ok testing connection through tinyproxy... ok requesting statspage via stathost url... ok checking bogus request... ok, got expected error code 400 testing connection to filtered domain... ok, got expected error code 403 requesting connect method to denied port... ok, got expected error code 403 testing unavailable backend... ok, got expected error code 502 0 errors killing tinyproxy... ok killing webserver... ok done PASS: run_tests.sh DURATION: 2 END: /usr/lib/tinyproxy/ptest 2026-04-06T15:25 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* strongswan: mark CVE-2026-25075 as patchedGyorgy Sarvari2026-04-061-0/+2
| | | | | | | | The CVE is fixed in the current version already, however NVD tracks it without version - suppress the report explicitly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* dovecot: ignore already fixed CVEsGyorgy Sarvari2026-04-061-0/+5
| | | | | | | | | | | | | | | | | | | The following CVEs are fixed in the current version already, however they are tracked without version info. Upstream has confirmed[1] that these vulnerabilities are fixed, and Debian has also identified the relevant commits: CVE-2025-30189: https://security-tracker.debian.org/tracker/CVE-2025-30189 CVE-2026-0394: https://security-tracker.debian.org/tracker/CVE-2026-0394 CVE-2026-24031: https://security-tracker.debian.org/tracker/CVE-2026-24031 CVE-2026-27855: https://security-tracker.debian.org/tracker/CVE-2026-27855 CVE-2026-27860: https://security-tracker.debian.org/tracker/CVE-2026-27860 [1]: https://seclists.org/fulldisclosure/2026/Mar/13 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* strongswan: upgrade 6.0.4 -> 6.0.5Gyorgy Sarvari2026-04-011-1/+1
| | | | | | | | | Beside other fixes, it contains a remediation for CVE-2026-25075 Changelog: https://github.com/strongswan/strongswan/releases/tag/6.0.5 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* netcf: remove recipeAnuj Mittal2026-04-013-228/+0
| | | | | | | | | | | | | It isn't maintained anymore and requires workarounds when gnulib is updated. It was only used by libvirt and with the upstream [1] and meta-virt changes to not require it anymore, this can be dropped. [1] https://gitlab.com/libvirt/libvirt/-/commit/35d5b26aa433bd33f4b33be3dbb67313357f97f9 Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* dovecot: upgrade 2.4.2 -> 2.4.3Gyorgy Sarvari2026-04-013-31/+35
| | | | | | | | | | | | | | | | | | Drop patch which is included in this release, and add a patch that adapts a lua api call to the lua version that is used in OE. License-Change: the unicode license text has been updated, there should be no material change. However while examining these changes, I noticed that some parts of the code are covered by licenses not mentined in the recipe. It should reflect all licenses now. Tis version contains fixes fox CVE-2025-59028, CVE-2025-59031, CVE-2026-24031, CVE-2026-27859, CVE-2026-27860, CVE-2026-27857, CVE-2026-27856 and CVE-2026-27855 Changelog: https://github.com/dovecot/core/blob/main/NEWS Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* strongswan: update PACKAGECONFIG soupChangqing Li2026-04-011-1/+1
| | | | | | | | | | | | | Refer [1], this can fix do_configure failure: | checking for libsoup-3.0... no | configure: error: Package requirements (libsoup-3.0) were not met: | | Package 'libsoup-3.0' not found [1] https://github.com/strongswan/strongswan/commit/6ddabf52d5f335147601c7c2797da21820efafb8 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* openvpn: fix ptestHaixiao Yan2026-03-273-15/+65
| | | | | | | | | | | | | | The openvpn 2.7.0 upgrade refactored tests/unit_tests/openvpn/Makefile.am, changing how test_binaries is defined. This caused autoreconf to generate Makefiles where buildtest-TESTS and runtest-TESTS no longer have rule bodies, breaking the existing ptest recipe which relied on these targets for compilation and execution. The fix replaces these internal automake targets with stable interfaces: check-am for compilation and direct binary execution on target. Signed-off-by: Haixiao Yan <haixiao.yan.cn@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* openvpn: Upgrade to 2.7.0Zoltán Böszörményi2026-03-241-2/+3
| | | | | | | | Release notes: https://community.openvpn.net/ReleaseHistory#openvpn-270-released-11-february-2026 Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* netcf: Fix build with newer autotools and gnulibKhem Raj2026-03-223-17/+90
| | | | | | | | | | | | Newer gnulib use python implementation by default if it finds py3 on the system. However, netcf is old package and its not expecting python implementation, therefore make the shell implementation be used. REALLOC_N is gone in latest gnulib so house a local macro Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ntopng: Upgrade to 6.6Khem Raj2026-03-2210-221/+262
| | | | | | | Fix build with Lua 5.5 Add fixes to build with ndpi 5.0 Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* tunctl: Make cflags weak in makefileKhem Raj2026-03-201-3/+16
| | | | | | ensures it used flags from OE env Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndpi: Upgrade to 5.0 releaseKhem Raj2026-03-203-45/+61
| | | | | | Drop downstream cross compile patch, the relevant code is removed in new version Signed-off-by: Khem Raj <raj.khem@gmail.com>
* phytool: Update to latestRicardo Simoes2026-03-201-1/+1
| | | | | | | | | | Changelog: - Add man pages and adjust Makefile for man pages - Avoid %#x printf pattern Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com> Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* phytool: Refactor recipeRicardo Simoes2026-03-201-2/+6
| | | | | | | | | | | | | | | | | This commit fixes a few issues with the phytool recipe: - Missing "_git" suffix in the recipe name, as required by [1]; - Missing description, homepage, and bugtracker metadata [2]'; - Missing section metadata, which is improved package management [3]; - As defined by [4], the SRCREV should be defined after the SRC_URI. [1] https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#recipe-naming-conventions [2] https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#required-variables [3] https://docs.yoctoproject.org/ref-manual/variables.html#term-SECTION [4] https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#recipe-ordering Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com> Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: backport patch to build with glibc 2.43Gyorgy Sarvari2026-03-202-0/+145
| | | | | | | | | | | | As the subject says. Fixes error: | ../../../sources/open-vm-tools-13.0.10/open-vm-tools/lib/hgfs/hgfsEscape.c: In function 'HgfsAddEscapeCharacter': | ../../../sources/open-vm-tools-13.0.10/open-vm-tools/lib/hgfs/hgfsEscape.c:201:15: error: assignment discards 'const' qualifier from pointer target type [-Werror=discarded-qualifiers] | 201 | illegal = strchr(HGFS_ILLEGAL_CHARS, bufIn[escapeContext->processedOffset]); Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Add xxhash to DEPENDSJörg Sommer2026-03-181-1/+13
| | | | | | | | | | | | Currently, the build of wireshark fails with ERROR: wireshark-1_4.6.3-r0 do_package_qa: QA Issue: /usr/lib/libwsutil.so.17.0.0 contained in package wireshark requires libxxhash.so.0()(64bit), but no providers found in RDEPENDS:wireshark? [file-rdeps] ERROR: wireshark-1_4.6.3-r0 do_package_qa: Fatal QA errors were found, failing task. ERROR: Logfile of failure stored in: /build/tmp/work/core2-64-poky-linux/wireshark/4.6.3/temp/log.do_package_qa.302606 ERROR: Task (/build/../work/layers-3rdparty/openembedded/meta-networking/recipes-support/wireshark/wireshark_4.6.3.bb:do_package_qa) failed with exit code '1' Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ettercap: fix typo in CVE IDGyorgy Sarvari2026-03-182-1/+1
| | | | | | | | The CVE fix is correct, but the CVE ID contains a typo. The correct ID is CVE-2026-3606. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-gtk: enable libva-x11 and drop gstreamer1.0-vaapiDmitry Baryshkov2026-03-181-1/+1
| | | | | | | | | OE-Core has dropped gstreamer1.0-vaaapi, breaking spice-gtk. Drop the dependency and, while we are at it, enable libva as a dependency, making sure VA-API is enabled. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: fix build with glibc 2.43Peter Marko2026-03-182-0/+42
| | | | | Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcpr: upgrade 1.13.0 -> 1.14.2Andrej Kozemcak2026-03-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tag is not on any branch. Changelog: 1.14.2: https://github.com/libcpr/cpr/releases/tag/1.14.2 Changed: - test: don't reflect Content-Length from request - Fixed curlholder Double Free - Fix error when running CMake configure multiple times with CPR_BUILD_TESTS, bump CMake min version to 3.18 - fix: replace curl_error_map with switch to fix Static Initialization Order Fiasco - Updated Bazel Instructions - Bump actions/upload-artifact from 5 to 6 - Bump actions/checkout from 5 to 6 - Bump jwlawson/actions-setup-cmake from 1.14 to 2.1 v1.14.1: https://github.com/libcpr/cpr/releases/tag/1.14.1 Changed: - Fixed SSE Windows string parsing v1.14.0 https://github.com/libcpr/cpr/releases/tag/1.14.0 Changed: - fix: Crash when building with /MT in MSVC (double-destructor) #1276 - 1.14.0 Release Preparation - NuGet Release Build Fixes - Add support for Server Sent Events (SSE) Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.47.3 -> 1.47.5Wang Mingyu2026-03-171-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade 1.6.40 -> 1.6.41Wang Mingyu2026-03-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - tests: make slabs-reassign2 test more resilient - proxy: reduce flakiness in t/proxyunits.t - proxy: fix off by one in temp string with 250b key - slabs: fix hang and crash. - Fix failing proxy*.t tests on some systems like OL8 - Account for absent 'ssl_proto_errors' in stats during SSL tests - Fix test compatibility on IPv6-only systems. - Use SSLv23 method when TLSv1.3 is unsupported (e.g., macOS) - extstore: more compaction write patience - parser: fix lru command regression - Fix: avoid null print for slab busy reason - extstore: testing around rescued compaction items - extstore: fix compaction checks wrong refcount - proto: armor against empty commands Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: Add HOMEPAGELiu Yiding2026-03-171-0/+1
| | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ettercap: patch CVE-2026-3603Gyorgy Sarvari2026-03-172-1/+51
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-3606 Pick the commit that is marked to solve the related Github issue[1]. Its commit message also references the CVE ID explicitly. [1]: https://github.com/Ettercap/ettercap/issues/1297 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dropwatch: upgrade 1.5.4 -> 1.5.5Gyorgy Sarvari2026-03-171-2/+2
| | | | | | | | | | | Changes: - Added abilty to build and run in a docker container - kas is the default symbol lookup method now - Fix building without libtool installed - Misc fixes for kas lookup logic Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* curlpp: upgrade to latest revisionGyorgy Sarvari2026-03-172-38/+5
| | | | | | | | | | | | | The last release was almost a decade ago, but there are quite a few commits that were added to the project since that. Instead of waiting for a new release, use the tip of the repository. Changelog: https://github.com/jpbarrette/curlpp/compare/v0.8.1...ec1b66e699557cd9d608d322c013a1ebda16bd08 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arptables: remove unused checksumsGyorgy Sarvari2026-03-171-3/+1
| | | | | | | | | | | | It is fetched from git, so the checksums are not doing anything. While touching it, switch to the project's own license file instead of using a generic one from the COMMON_LICENSE_DIR. The license itself has not changed, still gpl 2.0, only. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 51.0 -> 62.0Gyorgy Sarvari2026-03-174-102/+4
| | | | | | | | | | | | | | | | | | | | | | | | v51 series will get support only for about 2 more years, but v62 just started its ~4 years long support cycle. Drop patches that are included in this release, or were solved on another way by upstream. Changelog: 62.0: https://github.com/linux-rdma/rdma-core/releases/tag/v62.0 61.0: https://github.com/linux-rdma/rdma-core/releases/tag/v61.0 60.0: https://github.com/linux-rdma/rdma-core/releases/tag/v60.0 59.0: https://github.com/linux-rdma/rdma-core/releases/tag/v59.0 58.0: https://github.com/linux-rdma/rdma-core/releases/tag/v58.0 57.0: https://github.com/linux-rdma/rdma-core/releases/tag/v57.0 56.0: https://github.com/linux-rdma/rdma-core/releases/tag/v56.0 55.0: https://github.com/linux-rdma/rdma-core/releases/tag/v55.0 54.0: https://github.com/linux-rdma/rdma-core/releases/tag/v54.0 53.0: https://github.com/linux-rdma/rdma-core/releases/tag/v53.0 52.0: https://github.com/linux-rdma/rdma-core/releases/tag/v52.0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: drop obsolete patchGyorgy Sarvari2026-03-172-62/+1
| | | | | | | | | | | | | The patch removed manual generation completely from the build scripts, however upstream has added a configure option in version 1.11.0[1] to do it in a more gentle way. Drop the patch, and use the configure option instead. [1]: https://github.com/tinyproxy/tinyproxy/commit/5ba958829f73ecc02658a46f5b1bba5ffed2281d Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tunctl: update patch statusGyorgy Sarvari2026-03-171-1/+1
| | | | | Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* udpcast: update patch statusGyorgy Sarvari2026-03-171-1/+1
| | | | | Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.6.3 -> 4.6.4Gyorgy Sarvari2026-03-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bugfix release. Changes: - USB HID dissector memory exhaustion. CVE-2026-3201. - NTS-KE dissector crash. CVE-2026-3202. - RF4CE Profile dissector crash. CVE-2026-3203. - Wireshark doesn’t start if Npcap is configured with "Restrict Npcap driver’s Access to Administrators only" - PQC signature algorithm not reported in signature_algorithms. - Unexpected JA4 ALPN values when space characters sent. - Expert Info seems to have quadratic performance (gets slower and slower) - IKEv2 EMERGENCY_CALL_NUMBERS Notify payload cannot be decoded. - TShark and editcap fails with segmentation fault when output format (-F) set to blf. - Fuzz job crash: fuzz-2026-02-01-12944805400.pcap [Zigbee Direct Tunneling Zigbee NWK PDUs NULL hash table] - Wiretap writes pcapng custom options with string values invalidly. - RDM status in Output Status (GoodOutputB) field incorrectly decoded in Art-Net PollReply dissector. - Wiretap writes invalid pcapng Darwin option blocks. - TDS dissector desynchronizes on RPC DATENTYPE (0x28) due to incorrect expectation of TYPE_VARLEN (MaxLen) - Only first HTTP POST is parsed inside SOCKS with "Decode As". - TShark: Bogus "Dissector bug" messages generated in pipelines where something after tshark exits before reading all its input. - New Diameter RAT-Types in TS 29.212 not decoded. - Malformed packet error on Trigger HE Basic frames. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntpsec: upgrade 1.2.2a -> 1.2.4G B2026-03-171-8/+12
| | | | | | | | | Upgrade to latest upstream release 1.2.4. Release notes: https://blog.ntpsec.org/2025/04/18/version-1.2.4.html Signed-off-by: G B <gitbeam@proton.me> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: Add entry to CVE_PRODUCT to support the product nameHet Patel2026-03-021-1/+1
| | | | | | | | - Added 'vmware:open_vm_tools' to CVE_PRODUCT to align with the NVD CPE and ensure accurate CVE reporting. Signed-off-by: Het Patel <hetpat@cisco.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: upgrade 20230507 -> 20260211Liu Yiding2026-03-021-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | 1.Changelog: * tnftp.h: improve <arpa/nameser.h> compat. * Sync inet_pton.c to lib/libc/inet/inet_pton.c 1.8, via othersrc/libexec/tnftpd/libnetbsd/inet_pton.c 1.5: * Lint issues. * Hex formatting change from bind 9.4.0. * Sync inet_ntop.c to lib/libc/inet/inet_ntop.c 1.12, via othersrc/libexec/tnftpd/libnetbsd/inet_ntop.c 1.5: * Always set errno when returning NULL. * Sync fgetln.c to tools/compat/fgetln.c 1.12: * Switch to a version that does not suffer from reporting the wrong length if the file contains NULs. From OpenBSD. * Fix -Wformat-overflow issues detected by gcc 11 in fetch.c. (Also fixed in upstream NetBSD ftp, will be part of next import.) 2. LICENSE checksum has changed as Copyright year changed Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wavemon: upgrade 0.9.6 -> 0.9.7Wang Mingyu2026-03-021-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.76 -> 5.77Wang Mingyu2026-03-021-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: =========== * Security bugfixes - OpenSSL DLLs updated to version 3.5.5. * Bugfixes - Avoid attempting to fetch OCSP stapling for PSK-only configuration sections. * Features - Merged applicable patches from Fedora and Debian: - Use SOURCE_DATE_EPOCH for reproducible builds. - Skip the OpenSSL version check when AUTOPKGTEST_TMP is set. - Enable PrivateTmp in the stunnel.service template. - Clarify the manual page for the "curves" option. - Log client IP addresses on TLS errors. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-08-15 20:33:47 +0000