Commit Graph

2425 Commits

Author SHA1 Message Date
zangrc
e07f675fd7 libnftnl: upgrade 1.1.8 -> 1.1.9
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-25 14:34:06 -08:00
Andreas Müller
d57d6ca4bc networkmanager: upgrade 1.22.14 -> 1.28.0
* Build tested on aarch64 glibc/musl
* 0003-Fix-build-with-musl-for-n-dhcp4.patch has to go. Grepped nm code for
  seed48_r / mrand48_r => no findings
* Since this is a huge version bump no detaile release notes are provided here
* Have tried to move to meson build few months ago but it turned into huge
  efforts and ended without success. Maybe situation changed but let's postpone
  for now

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 17:50:42 -08:00
Diego Santa Cruz
e58e07b010 net-snmp: control smux via PACKAGECONFIG
Support for smux is always enabled by the recipe, but it can be a
security risk since it makes the snmpd daemon listen on TCP port 199.

This makes it contrallable via PACKAGECONFIG, so that it can be easily
disabled from the distro or local config. The mechanism makes it easy
to add control for other MIB modules via PACKAGECONFIG later if need
be.

For compatibility smux is added to the default PACKAGECONFIG, so there
is no change in the default build configuration.

Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Kai Kang
e31d5970cb blueman: refresh patch
Module 'time' had been imported in Functions.py by upstream, so not
import in 0002-fix-fail-to-enable-bluetooth.patch and update accordingly.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 20:29:45 -08:00
changqing.li@windriver.com
5450c958bf celt051: update SRC_URI
original SRC_URI is not valid now, offical CELT repository
moved to gitlab

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 09:12:04 -08:00
Wang Mingyu
33086407b1 dovecot: upgrade 2.2.36.4 -> 2.3.13
0001-doveadm-Fix-parallel-build.patch
removed since it is included in 2.3.13

refresh 0001-configure.ac-convert-AC_TRY_RUN-to-AC_TRY_LINK-state.patch

add 0001-not-check-pandoc.patch to not check pandoc of configure

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 22:38:29 -08:00
Khem Raj
e50c285e41 packagegroup-meta-networking: Add ipset
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Armin Kuster
6312f419dd ipset: add recipe
This is needed for login-shield pkg in meta-security

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Armin Kuster
b2d9c69405 wireshark: Several securtiy fixes
Source: Wireshark.org
MR: 106181, 106696, 107655, 107673, 107682
Type: Security Fix
Disposition: Backport from wireshark.org
ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a
Description:

Bugfix only update including these cves:
3.2.8
CVE-2020-26575
CVE-2020-28030

3.2.9
CVE-2020-26418
CVE-2020-26421
CVE-2020-26420

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-13 10:22:23 -08:00
Zheng Ruoqin
c184746be9 mdns: upgrade 1096.40.7 -> 1310.40.42
Refresh the following patch:
0001-mdns-include-stddef.h-for-NULL.patch

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
Zheng Ruoqin
7f3ccef7b4 igmpproxy: upgrade 0.2.1 -> 0.3
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
Zheng Ruoqin
3d89340118 firewalld: upgrade 0.9.1 -> 0.9.2
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
Zheng Ruoqin
3055f59683 cifs-utils: upgrade 6.11 -> 6.12
0001-Bugfix-Modify-the-dir-of-install-exec-hook-and.patch
Removed since this is included in 6.12.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
zangrc
b8e884d638 rdma-core: upgrade 32.0 -> 33.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-07 22:57:45 -08:00
Andreas Müller
93d149afc2 blueman: upgrade 2.1.3 -> 2.1.4
Security release, see GHSA-jpc9-mgw6-2xwx/CVE-2020-15238 [1]

Changes
    Force cython to use python language version 3
    Do not use exitcode 1 when we expect to fail
    Mark more strings translatable (@cwendling)
Bugs fixed
    Unstranslated strings
    Searching (with Ctrl+F in manager device list) did not work
    Default PIN lookup
    Fix device removal handling (@Yannik)
    Only use LaunchContext when we have proper event time

[1] https://github.com/blueman-project/blueman/security/advisories/GHSA-jpc9-mgw6-2xwx

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-06 14:20:52 -08:00
zangrc
e12d9290e3 wolfssl: upgrade 4.5.0 -> 4.6.0
0001-Make-ByteReverseWords-available-for-big-and-little-e.patch
Removed since this is included in 4.6.0

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:26 -08:00
Yi Zhao
d97b95466d tcpdump: add UPSTREAM_CHECK_REGEX
Add UPSTREAM_CHECK_REGEX to skip checking testing version (e.g. 4.99.0).

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:25 -08:00
He Zhe
00958a182e ebtables: Add symbol link /sbin/ebtables
The original /sbin/ebtables has been moved to /usr/sbin/ebtables-legacy.
But the old path is still used by some other software libvirt.

libvirtd[809]: direct firewall backend requested,
but /sbin/ebtables is not available: No such file or directory

As stated in the related change in ebtable git repo:
The new -legacy binary has no problem if called via a symlink with the
'ebtables' name, so users can still name this binary with whatever name.

So we add a symbol link from /usr/sbin/ebtables-legacy to /sbin/ebtables.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:25 -08:00
Yi Zhao
752bb30c39 ebtables: do not install /etc/ethertypes
Refer to Debian, patch the Makefile to prevent /etc/ethertypes
installation instead of removing it in do_install_append.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:25 -08:00
Yi Zhao
5816f414af ebtables: remove upstream ebtables-legacy-save
Remove the upstream ebtables-legacy-save before we install the local
ones. And install it to ${sbindir} rather than ${base_sbindir}.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:15:59 -08:00
Yi Zhao
cac0daacd1 ebtables: add missing file ebtables.common
The ebtables.common is required by ebtables.service. Add it back.

Fixes:
systemd[660]: ebtables.service: Failed to locate executable /usr/sbin/ebtables.common: No such file or directory
systemd[660]: ebtables.service: Failed at step EXEC spawning /usr/sbin/ebtables.common: No such file or directory

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-04 14:48:29 -08:00
zangrc
7b9045ee87 python3-ldap: upgrade 3.2.0 -> 3.3.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-04 14:48:29 -08:00
zhengruoqin
18a57eb1d7 opensaf: upgrade 5.20.08 -> 5.20.11
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zhengruoqin
353aac0c7f netplan: upgrade 0.100 -> 0.101
Refresh the following patch:
0001-dbus-Remove-unused-variabes.patch
0002-Makefile-Exclude-.h-files-from-target-rule.patch

Add 0001-don-t-fail-if-GLOB_BRACE-is-not-defined.patch to solve the
compilation errors on musl.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zhengruoqin
1d112d988e bridge-utils: upgrade 1.6 -> 1.7
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zangrc
667a7b1027 libtevent: upgrade 0.10.1 -> 0.10.2
Refresh the following patch:
avoid-attr-unless-wanted.patch
options-0.10.0.patch

0001-waf-add-support-of-cross_compile.patch
Removed since this is included in 0.10.2

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zangrc
d8426e0637 libtalloc: upgrade 2.3.0 -> 2.3.1
0001-waf-add-support-of-cross_compile.patch
Removed since this is included in 2.3.1.

Refresh the following patch:
avoid-attr-unless-wanted.patch
options-2.2.0.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
Mingli Yu
a921faaee4 tftp-hpa: change the ALTERNATIVE_PRIORITY
Both inetutils-tftp and tftp-hpa provide the tftp command and
the ALTERNATIVE_PRIORITY of inetutils-tftp is 79 until now.

Increase the ALTERNATIVE_PRIORITY of tftp-hpa to 100 to guarantee
the tftp command provided by tftp-hpa when both of the packages
installed.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 19:34:49 -08:00
zangrc
46e30569e3 iscsi-initiator-utils: upgrade 2.1.2 -> 2.1.3
0001-libopeniscsiusr-Compare-with-max-int-instead-of-max-.patch
Removed since this is included in 2.1.3

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 19:34:49 -08:00
zangrc
b1120e126e ebtables: upgrade 2.0.10-4 -> 2.0.11
Refresh the following patch:
0010-Adjust-header-include-sequence.patch

Referring to Fedora style, ebtables-legacy-save and ebtables.service are retained.

The upstream address has been modified.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 19:34:49 -08:00
Mingli Yu
049f0b3e83 traceroute: change the ALTERNATIVE_PRIORITY
Both inetutils-traceroute and traceroute provide the traceroute
command and the ALTERNATIVE_PRIORITY of inetutils-traceroute is
79 until now.

Increase the ALTERNATIVE_PRIORITY of traceroute to 100 to guarantee
the traceroute command provided by traceroute when both of the
packages installed.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-23 22:47:02 -08:00
Khem Raj
a82ae84619 cyrus-sasl: Disable ntlm plugin by default
ntlm requires md4 algorith defines which is now disabled in openssl
recipe by default also see [1]

[1] https://github.com/cyrusimap/cyrus-sasl/issues/632

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-23 22:47:02 -08:00
zangrc
4e5e5479c0 vblade: upgrade 24 -> 25
gcc-10.patch
Removed since this is included in 25.

Refresh the following patch:
cross.patch
makefile-add-ldflags.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-18 08:23:14 -08:00
zangrc
4a3e3f2d2d openipmi: upgrade 2.0.29 -> 2.0.30
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-18 08:23:14 -08:00
Alexander Vickberg
f431022415 mbedtls: upgrade to 2.25.0
Deleted build fix patch. This is already applied in this release.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-17 09:12:27 -08:00
Yi Zhao
af6f068632 ebtables: do not install /etc/ethertypes
The /etc/ethertypes is provided by netbase since 6.0[1].
Do not instal the file in ebtables, otherwise there would be a conflict:
Error: Transaction test error:
  file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7_64

[1] 316680c6a2

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-16 12:03:57 -08:00
Zheng Ruoqin
baee1ebeaf samba: CVE-2020-14383 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Zheng Ruoqin
1d44b4c03d samba: CVE-2020-14318 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Khem Raj
62c2f4a48a networkmanager: Fix reallocarray check in meson and configure
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-12 16:41:59 -08:00
Alexander Vickberg
6f1139a717 mbedtls: upgrade to 2.24.0
Download archives are no longer updated so fetch from Github. Add build
fix from upstream. The file LICENSE now contains the full Apache 2.0
license text.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-09 10:14:57 -08:00
Li Zhou
885149082b ptpd: Solve memory leak for function NTPDCrequest
Solve the memory leak in function NTPDCrequest detected by valgrind tool.

Memory leak log example:
==619== 21 bytes in 1 blocks are still reachable in loss record 1 of 3
==619==    at 0x4A09DB0: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==619==    by 0x43512E: NTPDCrequest (ntpdcontrol.c:255)
==619==    by 0x43512E: NTPDCquery.isra.1 (ntpdcontrol.c:683)
==619==    by 0x4359EE: ntpdInControl (ntpdcontrol.c:807)
==619==    by 0x4364F5: ntpServiceUpdate (timingdomain.c:622)
==619==    by 0x436935: timingDomainUpdate (timingdomain.c:756)
==619==    by 0x4334A7: protocol (protocol.c:263)
==619==    by 0x402BAE: main (ptpd.c:131)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-29 22:02:14 -08:00
Ricardo Salveti
666a8b94a3 wireguard-module: upgrade 1.0.20200908 -> 1.0.20201112
Relevant changes:
- fe40226 version: bump
- d0bf51b qemu: bump default testing version
- ce8faa3 compat: SYM_FUNC_{START,END} were backported to 5.4
- da5646f qemu: drop build support for rhel 8.2
- 99e954f netns: check that route_me_harder packets use the right sk
- 25320ac noise: take lock when removing handshake entry from table

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 22:28:31 -08:00
zangrc
9ef0c70871 netplan: upgrade 0.99 -> 0.100
0001-src-parse.c-Initialize-key-to-NULL.patch
Removed since this is included in 0.100.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 14:21:57 -08:00
zangrc
2c564df8bf weechat: upgrade 2.9 -> 3.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
zangrc
2bbb303b72 snort: upgrade 2.9.16.1 -> 2.9.17
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
zangrc
bb64362db7 nngpp: upgrade 1.2.4 -> 1.3.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
zangrc
3e05b98d08 nghttp2: upgrade 2.41.0 -> 2.42.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
viatsk
0192d60708 tcpdump: Patch for CVE-2020-8037
Signed-off-by: Stacy Gaikovaia <stacy.gaikovaia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-24 21:19:34 -08:00
Khem Raj
d9d8713860 chrony: Upgrade to 4.0
ChangeLog is here [1]

Do not install /var/log as it conflicts with basefiles package

Collected errors:
 * check_data_file_clashes: Package chrony wants to install file /var/log
        But that file is already provided by package  * base-files

Remove CVE patch since its upstream

Forward port arm_eabi.patch patch

Make builds reproducible

[1] https://chrony.tuxfamily.org/news.html

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 22:51:38 -08:00
Beni
70662b5b7e unbound: upgrade to 1.12.0
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:34 -08:00