From 9f12c5fbc63143c33d6c68139cccac770817b4eb Mon Sep 17 00:00:00 2001 From: Gyorgy Sarvari Date: Tue, 9 Dec 2025 16:39:52 +0100 Subject: dante: upgrade 1.4.3 -> 1.4.4 License-Update: copyright year bump Changelog: - Fix potential security issue CVE-2024-54662, related to "socksmethod" use in client/hostid-rules. - Add a missing call to setgroups(2). - Patch to fix compilation with libminiupnp 2.2.8. - Client connectchild optimizations. - Client SIGIO handling improvements. - Various configure/build fixes. - Updated to support TCP_EXP1 version of TCP hostid format. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj --- .../recipes-protocols/dante/dante_1.4.3.bb | 48 ---------------------- .../recipes-protocols/dante/dante_1.4.4.bb | 48 ++++++++++++++++++++++ 2 files changed, 48 insertions(+), 48 deletions(-) delete mode 100644 meta-networking/recipes-protocols/dante/dante_1.4.3.bb create mode 100644 meta-networking/recipes-protocols/dante/dante_1.4.4.bb diff --git a/meta-networking/recipes-protocols/dante/dante_1.4.3.bb b/meta-networking/recipes-protocols/dante/dante_1.4.3.bb deleted file mode 100644 index 901167f1b3..0000000000 --- a/meta-networking/recipes-protocols/dante/dante_1.4.3.bb +++ /dev/null @@ -1,48 +0,0 @@ -SECTION = "console/utils" -SUMMARY = "A free SOCKS server" -DESCRIPTION = "Dante consists of a SOCKS server and a SOCKS client,\ -implementing RFC 1928 and related standards. It is a flexible product\ -that can be used to provide convenient and secure network\ -connectivity. Once installed, Dante can in most cases be made\ -transparent to clients, providing functionality somewhat similar to\ -what could be described as a non-transparent Layer 4 router." -HOMEPAGE = "http://www.inet.no/dante/" - -LICENSE = "BSD-3-Clause" -LIC_FILES_CHKSUM = "file://LICENSE;md5=edd508404db7339042dfc861a3a690ad" - -SRC_URI = "https://www.inet.no/dante/files/dante-${PV}.tar.gz \ - " -SRC_URI[sha256sum] = "418a065fe1a4b8ace8fbf77c2da269a98f376e7115902e76cda7e741e4846a5d" - -# without --without-gssapi, config.log will contain reference to /usr/lib -# as a consequence of GSSAPI path being set to /usr by default. -# --with-gssapi-path=PATH specify gssapi path -# --without-gssapi disable gssapi support -# --enable-release build prerelease as full release -EXTRA_OECONF += "--without-gssapi --sbindir=${bindir}" - -DEPENDS += "flex-native bison-native libpam libtirpc" -inherit autotools-brokensep features_check - -CPPFLAGS += "-P" -CFLAGS += "-I${STAGING_INCDIR}/tirpc" -LIBS += "-ltirpc" - -REQUIRED_DISTRO_FEATURES = "pam" - -EXTRA_AUTORECONF = "-I ${S}" - -PACKAGECONFIG ??= "" - -do_install:append() { - install -d ${D}${sysconfdir} - cp ${S}/example/sock[sd].conf ${D}${sysconfdir} -} - -PACKAGES =+ "${PN}-sockd ${PN}-libdsocks " - -FILES:${PN}-libdsocks = "${libdir}/libdsocks.so" -FILES:${PN}-sockd = "${bindir}/sockd ${sysconfdir}/sockd.conf" - -INSANE_SKIP:${PN}-libdsocks = "dev-elf" diff --git a/meta-networking/recipes-protocols/dante/dante_1.4.4.bb b/meta-networking/recipes-protocols/dante/dante_1.4.4.bb new file mode 100644 index 0000000000..7aa1103855 --- /dev/null +++ b/meta-networking/recipes-protocols/dante/dante_1.4.4.bb @@ -0,0 +1,48 @@ +SECTION = "console/utils" +SUMMARY = "A free SOCKS server" +DESCRIPTION = "Dante consists of a SOCKS server and a SOCKS client,\ +implementing RFC 1928 and related standards. It is a flexible product\ +that can be used to provide convenient and secure network\ +connectivity. Once installed, Dante can in most cases be made\ +transparent to clients, providing functionality somewhat similar to\ +what could be described as a non-transparent Layer 4 router." +HOMEPAGE = "http://www.inet.no/dante/" + +LICENSE = "BSD-3-Clause" +LIC_FILES_CHKSUM = "file://LICENSE;md5=b3a8e7dc09bb720460f28c9d3796afa5" + +SRC_URI = "https://www.inet.no/dante/files/dante-${PV}.tar.gz \ + " +SRC_URI[sha256sum] = "1973c7732f1f9f0a4c0ccf2c1ce462c7c25060b25643ea90f9b98f53a813faec" + +# without --without-gssapi, config.log will contain reference to /usr/lib +# as a consequence of GSSAPI path being set to /usr by default. +# --with-gssapi-path=PATH specify gssapi path +# --without-gssapi disable gssapi support +# --enable-release build prerelease as full release +EXTRA_OECONF += "--without-gssapi --sbindir=${bindir}" + +DEPENDS += "flex-native bison-native libpam libtirpc" +inherit autotools-brokensep features_check + +CPPFLAGS += "-P" +CFLAGS += "-I${STAGING_INCDIR}/tirpc" +LIBS += "-ltirpc" + +REQUIRED_DISTRO_FEATURES = "pam" + +EXTRA_AUTORECONF = "-I ${S}" + +PACKAGECONFIG ??= "" + +do_install:append() { + install -d ${D}${sysconfdir} + cp ${S}/example/sock[sd].conf ${D}${sysconfdir} +} + +PACKAGES =+ "${PN}-sockd ${PN}-libdsocks " + +FILES:${PN}-libdsocks = "${libdir}/libdsocks.so" +FILES:${PN}-sockd = "${bindir}/sockd ${sysconfdir}/sockd.conf" + +INSANE_SKIP:${PN}-libdsocks = "dev-elf" -- cgit v1.2.3-54-g00ecf