Commit Graph

16830 Commits

Author SHA1 Message Date
Leon Anavi
fd16ab3d64 python3-pandas: Upgrade 1.0.3 -> 1.0.5
Upgrade to release 1.0.5:

- Fix regression in read_parquet() when reading from file-like
  objects.
- Fix regression in reading from public S3 buckets.
- Fixed regression in replace() raising an AssertionError when
  replacing values in an extension dtype with values of a
  different dtype

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5dbc25ea9d)
[ak: fixes build issue on CentOS7: Bug fix only update
https://github.com/pandas-dev/pandas/releases]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-27 15:40:21 -07:00
Martin Jansa
0bc6614b1a lcov: fix lcov-native build
* there is no provider for gcov-native nor gcov-symlinks-native

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e82bb7efa8)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-23 11:14:56 -07:00
Mingli Yu
5aa6849a90 freeradius: fix the occasional verification failure
Fixes:
  # cd /etc/raddb/certs
  # ./bootstrap
[snip]
chmod g+r ca.key
openssl pkcs12 -in server.p12 -out server.pem -passin pass:'whatever' -passout pass:'whatever'
chmod g+r server.pem
C = FR, ST = Radius, O = Example Inc., CN = Example Server Certificate, emailAddress = admin@example.org
error 7 at 0 depth lookup: certificate signature failure
140066667427072:error:04067084:rsa routines:rsa_ossl_public_decrypt:data too large for modulus:../openssl-1.1.1g/crypto/rsa/rsa_ossl.c:553:
140066667427072:error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib:../openssl-1.1.1g/crypto/asn1/a_verify.c:170:
error server.pem: verification failed
make: *** [Makefile:107: server.vrfy] Error 2

It seems the ca.pem mismatchs server.pem which results in failing to
execute "openssl verify -CAfile ca.pem server.pem", so add the logic
to check the file to avoid inconsistency.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 52f5141109)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-23 11:13:58 -07:00
Kai Kang
57b629543e rdist: fix parallel build
It fails to compile rdist occasionally when system load of build server
is high:

| In file included from common.c:57:
| ../include/defs.h:49:10: fatal error: y.tab.h: No such file or directory
|    49 | #include "y.tab.h"
|       |          ^~~~~~~~~
| compilation terminated.

Make $(COMMONOBJS) which include common.o to depends on related header files
and y.tab.h to fix the parallel build failure.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1bb990c6ca)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-23 11:12:08 -07:00
Yi Zhao
060d218f82 samba: upgrade 4.10.15 -> 4.10.17
This is a security release in order to address the following defects:

CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD
                DC LDAP Server with ASQ, VLV and paged_results.
CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume
                excessive CPU
CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with
                paged_results and VLV.
CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd.

Also backport 3 patches to fix build error with musl.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1609df1153)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-23 11:08:25 -07:00
Andreas Müller
5fe92ba89e exiv2: upgrade 0.27.1 -> 0.27.3
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6443044ca9)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-08-23 11:05:46 -07:00
Yue Tao
fae2b90261 lua: Security Advisory - lua - CVE-2020-15888
Backport fix from https://github.com/lua/lua.git.

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 698748c153)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-30 21:29:08 -07:00
Khem Raj
40f4f3ed5f flashrom: Fix build failure with glibc 2.32
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f16aa16e91)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-30 21:25:51 -07:00
Khem Raj
e227d95f2f samba: Fix conflicts with nss.h from glibc
This is seen with glibc 2.32 where these names are also defined

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5cf2665446)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-30 21:22:28 -07:00
Ryan Rowe
f1dc6e6f5d python3-pint: add setuptools and packaging to RDEPENDS
Signed-off-by: Ryan Rowe <rrowe@xevo.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit cfa7869173)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-30 21:16:19 -07:00
Alistair Francis
135307cf51 python3-obd: Add missing setuptools RDEPENDS
Signed-off-by: Alistair Francis <alistair@alistair23.me>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9cf730f222)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-30 21:14:04 -07:00
Changqing Li
022b5a307c radvd: add /etc/radvd.conf
When starting radvd without any configuration the following errors would
be triggered.

"""
root@intel-x86-64:~# systemctl status radvd
● radvd.service - Router advertisement daemon for IPv6
Loaded: loaded (/lib/systemd/system/radvd.service; enabled; vendor preset:
	enabled)
Active: inactive (dead)
        Condition: start condition failed at Tue 2019-09-24 13:29:36 UTC; 3s ago
	    └─ ConditionPathExists=/etc/radvd.conf was not met
"""

Normally the user should create and configrue the /etc/radvd.conf
manually.  However the radvd provide a example file for redhad located
at "radvd/redhat/radvd.conf.empty". When installing, it would copy
radvd/redhat/radvd.conf.empty to /etc/radvd.conf. Also add this empty
conf here to used as an example of configuration

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5af77740a4)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-30 21:11:21 -07:00
Julius Hemanth Pitti
b4be735fdb netkit-telnetd: Fix buffer overflow in netoprintf
netoprintf() was not handling a case where
return value of vsnprintf is greater than
"size"(2nd argument), results in buffer overflow
while adjusting "nfrontp" pointer to point
beyond "netobuf" buffer.

Here is one such case where "nfrontp"
crossed boundaries of "netobuf", and
pointing to another global variable.

(gdb) p &netobuf[8255]
$5 = 0x55c93afe8b1f <netobuf+8255> ""
(gdb) p nfrontp
$6 = 0x55c93afe8c20 <terminaltype> "\377"
(gdb) p &terminaltype
$7 = (char **) 0x55c93afe8c20 <terminaltype>
(gdb)

This resulted in crash of telnetd service
with segmentation fault.

Signed-off-by: Julius Hemanth Pitti <jpitti@cisco.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 232b82afd4)
[appears to be CVE-2020-10188]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-29 22:44:52 -07:00
Mingli Yu
fd0d398fe7 freeradius: fix the existed certificate error
Fixes the occasional error:
 # cd /etc/raddb/certs
 # ./bootstrap
[snip]
openssl ca -batch -keyfile ca.key -cert ca.pem -in client.csr  -key 'whatever' -out client.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf
Using configuration from ./client.cnf
Check that the request matches the signature
Signature ok
ERROR:There is already a certificate for /C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org
The matching entry has the following details
Type          :Valid
Expires on    :200908024833Z
Serial Number :02
File name     :unknown
Subject Name  :/C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org
make: *** [Makefile:128: client.crt] Error 1

Add the check to fix the above error and it does the same for server.crt.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 0d7522b7df)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-29 22:41:18 -07:00
Kai Kang
1e19fc4d9c lvm2: remove service template from SYSTEMD_SERVICE
Remove systemd service template lvm2-pvscan@.service from
SYSTEMD_SERVICE. It should be started/stopped in udev rules file
69-dm-lvm-metad.rules.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d85613d8d1)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-29 22:35:15 -07:00
Armin Kuster
654ad8bea4 jsoncpp: add PE do to revert to older PV
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-18 07:24:39 -07:00
Ovidiu Panait
5d4023848f nss: Fix CVE-2020-12399
Master (nss version 3.54) is not affected by this issue. This is a backport
from nss version 3.54.

NSS has shown timing differences when performing DSA signatures, which was
exploitable and could eventually leak private keys. This vulnerability affects
Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9.

Upstream patch:
daa823a4a2

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-14 21:37:09 -07:00
Armin Kuster
0e0b4892f5 Revert "jsoncpp: upgrade 1.9.2 -> 1.9.3"
This reverts commit 2b384c5973.

It appears that there was a change in soname not noted in the changelog.

8b7ea09b80

ABI change appears to have occured.
https://abi-laboratory.pro/index.php?view=timeline&l=jsoncpp

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-13 20:45:23 -07:00
Armin Kuster
3add820b37 wireshark: Update to 3.2.5
Source: wireshark.org
MR: 104620
Type: Security Fix
Disposition: Backport from wireshark.org
ChangeID: 64e3701e4d6bd53972c22c49d655556e6f37e461
Description:

Affects: 3.2.0 to 3.2.4

Includes:
CVE-2020-15466

For more info see: https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9019ceb2cc)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:59 -07:00
Robert Yang
c0d869c095 drbd-utils: Add CLEANBROKEN to fix rebuild errors
Fixed when rebuild:
DEBUG: Executing shell function autotools_preconfigure
NOTE: make clean
aclocal
autoheader
autoconf

You need to call ./configure with appropriate arguments (again).

make: *** [Makefile:287: config.status] Error 1

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 922e061fdb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:59 -07:00
Qi.Chen@windriver.com
2103ef7d64 multipath-tools: disable parallel build as a workaround
With parallel build enabled, we got the following error:

  ld: error in libsg.o(.eh_frame); no .eh_frame_hdr table will be created
  ....
  ld: BFD (GNU Binutils) 2.34.0.20200220 internal error, aborting at ../../bfd/merge.c:933 in _bfd_merged_section_offset
  ....
  | make[1]: *** [Makefile:24: libcheckcciss_tur.so] Error 1
  | make[1]: *** Waiting for unfinished jobs....

However, looking at the Makefile, it does not seem to have problem.

So disable the parallel build as a workaround.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 45d6317353)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:52 -07:00
Konrad Weihmann
a6bf385453 openldap: packaging fixes
in FILES_${PN}-slurpd:
- ${localstatedir}/volatile/run is already covered by FILES_${PN}-slapd
- ${localstatedir}/run is already covered by FILES_${PN}-slapd
in FILES_${PN}-dev:
- ${libdir}/*.a is already covered by FILES_${PN}-staticdev

remove the settings as they were without effect anyway

Signed-off-by: Konrad Weihmann <kweihmann@outlook.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 6898858492)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Zheng Ruoqin
ead5cb4ed7 upm:Fix build error when enable multilib.
ERROR: upm-2.0.0+gitAUTOINC+5cf20df96c-r0 do_package: QA Issue: upm:
Files/directories were installed but not shipped in any package:
  /usr/lib/python3.8/site-packages/upm/pyupm_adc121c021.py
  /usr/lib/python3.8/site-packages/upm/pyupm_hmc5883l.py
  /usr/lib/python3.8/site-packages/upm/_pyupm_mma8x5x.so
  /usr/lib/python3.8/site-packages/upm/_pyupm_m24lr64e.so
  /usr/lib/python3.8/site-packages/upm/pyupm_tca9548a.py
  /usr/lib/python3.8/site-packages/upm/pyupm_mb704x.py
  /usr/lib/python3.8/site-packages/upm/_pyupm_ehr.so
  ......

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit efe14bb04e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Zheng Ruoqin
1f77d18cc6 paho-mqtt-c: Fix build error when enable multilib.
The error is as the following:
ERROR: paho-mqtt-c-1.3.2-r0 do_package: QA Issue: paho-mqtt-c:
Files/directories were installed but not shipped in any package:
  /usr/lib
  /usr/lib/cmake
  /usr/lib/cmake/eclipse-paho-mqtt-c
  /usr/lib/cmake/eclipse-paho-mqtt-c/eclipse-paho-mqtt-cConfig.cmake
  /usr/lib/cmake/eclipse-paho-mqtt-c/eclipse-paho-mqtt-cConfigVersion.cmake
  /usr/lib/cmake/eclipse-paho-mqtt-c/eclipse-paho-mqtt-cConfig-noconfig.cmake

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 93aa8defe3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Zheng Ruoqin
aa6371f7bf mraa: Disable python2, otherwise, there is a build error when enable multilib.
ERROR: mraa-2.1.0+gitAUTOINC+e15ce6fbc7-r0 do_package: QA Issue: mraa:
Files/directories were installed but not shipped in any package:
  /usr/lib/python3.8/site-packages/_mraa.so
  /usr/lib/python3.8/site-packages/mraa.py

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fadaf48670)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Pierre-Jean Texier
b86aae02b8 minicoredumper: update SRC_URI to use github instead
Change SRC_URI:

 - all minicoredumper related sources moved to https://github.com/diamon/minicoredumper

>From the NEWS:

The Linux Foundation will be shutting down their git service for workgroups.
The minicoredumper repository and bug tracking has been moved to the DiaMon
Workgroup account on github.com. We thank the Linux Foundation for providing
us the git service over the last 5 years.

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 110fa8902d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Zang Ruochen
7ed1adba79 nftables: upgrade 0.9.5 -> 0.9.6
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b0d884a994)
[AK: This release fixes vmap support which broke in the previous 0.9.5 release.]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Zheng Ruoqin
b1b6f976aa Fix build error when enable multilib.
ERROR: tracker-miners-2.3.3-r0 do_package: QA Issue: tracker-miners:
Files/directories were installed but not shipped in any package:
  /usr/lib64/systemd
  /usr/lib64/systemd/user
  /usr/lib64/systemd/user/tracker-extract.service
  /usr/lib64/systemd/user/tracker-writeback.service
  /usr/lib64/systemd/user/tracker-miner-fs.service

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 02afb13f5d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Andreas Müller
66a457908d ibus: upgrade 1.5.21 -> 1.5.22
1.5.22

* GDBusAuthObserver security fix 3d442db
* Use XDG_CACHE_HOME for Unix socket directory a141a14 982c40f 5742e1b d53401e a1705ad
* Hangul button press handling 25d11f5 c662a02 ecc3465
* Fix deprecated APIs 48a8d7e 35863d8
* Bug fixes 773420f 745ffb8 26a8105 bccf94d d50627f 7486385 cd4fef5

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 43e3c0da02)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Andreas Müller
f032374e55 modemmanager: upgrade 1.12.10 -> 1.12.12
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f0a9b8bfab)
[ak: 1.12.x is a stable release]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Andreas Müller
c94e7930ed blueman: upgrade 2.1.1 -> 2.1.3
2.1.3
Changes
  * Force cython to use python language version 3
Bugs fixed
  * Fix tooltip not updating when bluetooth is disabled
  * Fix dbus timeout in DhcClient
  * Call the right method when pulseaudio crashes
  * Handle os.remove failing

2.1.2
Bugs fixed
  * Signal bar updates with multiple adapters
  * Pairing with pincode

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d05070c7d8)
[AK: Dunfell does not support py2 so upgrade seems resonable]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Changqing Li
4deb89233f libmcrypt: set CLEANBROKEN
reproduce steps:
1. bitbake libmcrypt
2. add bb.note('hello') in do_fetch of base.bbclass
3. bitbake libmcrypt

do_configure failed:
Making clean in doc
make[1]: Entering directory 'build/tmp-glibc/work/cortexa72-wrs-linux/libmcrypt/2.5.8-r0/libmcrypt-2.5.8/doc'
make[1]: *** No rule to make target 'clean'.  Stop.
make[1]: Leaving directory 'build/tmp-glibc/work/cortexa72-wrs-linux/libmcrypt/2.5.8-r0/libmcrypt-2.5.8/doc'
Makefile:316: recipe for target 'clean-recursive' failed

error occurred in autotools_preconfigure, since we have build one time
in step1, we have CONFIGURESTAMPFILE, and also BB_TASKHASH changed after
step2, in step3, after do_fetch, ${S} is renewed, but with main Makefile
exist but no Makefile exist under sub folder, so above error occurred.

set CLEANBROKEN to fix this error

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit e2d3ecaeb0)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:17 -07:00
Armin Kuster
b2acef6703 net-snmp: Security fix CVE-2019-20892
Source: net-snmp.org
MR: 104509
Type: Security Fix
Disposition: Backport from 5f881d3bf2
ChangeID: 206d822029d48d904864f23fd1b1af69dffc26c8
Description:

Fixes CVE-2019-20892 which affect net-snmp <= 5.8pre1

Had to fix up some file do to later code restructioning.
"int             refcnt;" addition was done in include/net-snmp/library/snmpusm.h

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 96a63b1ecf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:17 -07:00
Khem Raj
1d5fe0c17d nss: Remove mcpu to avoid march conflicts
Some files are compiled with armv8-a+crypto and when using cortex-a55
the deduced march is armv8.2-a which then conflicts

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:17 -07:00
Ovidiu Panait
5be9567ffb freediameter: Fix testcnx ptest failure
Currently, testcnx ptest fails due to expired CA certificates:
Test project /usr/lib64/freeDiameter/ptest
...
Start 10: testcnx
10/11 Test #10: testcnx ..........................***Failed 0.12 sec
...

<snip>
Command: "/usr/lib64/freeDiameter/ptest/testcnx"
Directory: /usr/lib64/freeDiameter/ptest
"testcnx" start time: Jun 17 10:52 UTC
Output:
----------------------------------------------------------
10:52:43  ERROR  ERROR: Invalid parameter '(conn->cc_rcvthr != (pthread_t)((voidd
 *)0))', 22
10:52:43  ERROR  TLS: Remote certificate invalid on socket 6 (Remote: 'localhostt
.localdomain')(Connection: '{---T} TCP from [127.0.0.1]:57898 (4<-6)') :
10:52:43  ERROR   - The certificate has expired.
10:52:43  ERROR  TLS ERROR: in 'ret = gnutls_handshake(conn->cc_tls_para.sessionn
)' :    Error in the certificate.
10:52:43  FATAL! testcnx.c:867: CHECK FAILED : fd_cnx_handshake(server_side, GNUU
TLS_SERVER, ALGO_HANDSHAKE_DEFAULT , NULL, NULL) == 16 != 0
10:52:43  FATAL! FAILED: testcnx.c
<end of output>
Test time =   0.02 sec
<snip>

Backport upstream patch [1] to fix this issue.

[1] http://www.freediameter.net/hg/freeDiameter/rev/eff5bb332b5a

This patch is present in version 1.4.0, so master is not affected.

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:17 -07:00
Bog999
2d964c9051 python3: Add python3-cryptography to RDEPENDS for python3-redis
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit bf209dbf11)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:17 -07:00
Armin Kuster
cc6fc6b164 ntp: update 4.2.8p15
Source: ntp.org
MR: 104487
Type: Security Fix
Disposition: Backport from http://archive.ntp.org/ntp4/ntp-4.2/
ChangeID: 65b220646dc29168c45b051a6ea2a651b9e669d1
Description:

Bugfix only update including a security fix: CVE-2020-15025

changelog: https://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ChangeLog-stable

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c9384d7fc4)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Leon Anavi
41f84f6ea8 python3-sqlalchemy: Upgrade 1.3.12 -> 1.3.17
Upgrade to release 1.3.17:

- orm Bug fixes
- orm Added an accessor ColumnProperty.Comparator.expressions
  which provides access to the group of columns mapped under a
  multi-column ColumnProperty attribute.
- orm Introduce _orm.relationship.sync_backref flag in a
  relationship to control if the synchronization events that
  mutate the in-Python attributes are added. This supersedes the
  previous change #5149, which warned that viewonly=True
  relationship target of a back_populates or backref configuration
  would be disallowed.
- engine Bug fixes
- schema Bug fixes
- schema Add comment attribute to _schema.Column __repr__ method.

The year in LICENSE has been updated so LIC_FILES_CHKSUM was
changed.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5fef53b998)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Andreas Müller
c5f9605904 tcpreplay: upgrade 4.3.2 -> 4.3.3
>From [1]

* Increase cache buffers size to accomodate VLAN edits (#594)
* Correct L2 header length to correct IP header offset (#583)
* Fix warnings from gcc version 10 (#580)
* Heap Buffer Overflow in randomize_iparp (#579)
* Use after free in get_ipv6_next (#578)
* Heap Buffer Overflow in git_ipv6_next (#576)
* Call pcap_freecode() on pcap_compile() (#572)
* Increase max snaplen to 262144 (#571)
* Fix divide by zero in fuzzing (#570)
* Unique IP repeats at very high iteration counts (#566)
* Fails to compile on FreeBSD amd64 13.0 (#558)
* Heap Buffer Overflow in do_checksum (#556) (#577)
* Attempt to correct corrupt pcap files, if possible (#557)
* Fix GCC v10 warnings (#555)
* Remove some duplicated SOURCES entries (#551)
* Expand /dev/bpfX hard limit to fix macOS Mojave (#550)
* Implement --loopdelay-ms when using --loop=0 (#546)
* Heap overflow packet2tree and get_l2len (#530)

[1] https://github.com/appneta/tcpreplay/releases

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 822963c6cb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Andreas Müller
c5e0758f4e openh264: upgrade 2.1.0 -> 2.1.1
>From [1]
* release x86 and x64 libraries for android platform
* Bug fixes

[1] https://github.com/cisco/openh264/releases

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 69716e959b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Christian Eggers
63844270a3 linuxptp: Fix segmentation fault on 32 bit platforms with 64 bit time_t
Back ported upstream patch:
7de73fefc3

Signed-off-by: Christian Eggers <ceggers@arri.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 924bd4dd08)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Konrad Weihmann
1f145080dd libtalloc: fix upstream url
https://samba.org seems to be gone, switch to https://www.samba.org
Signed-off-by: Konrad Weihmann <kweihmann@outlook.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9a85b925c5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Wang Mingyu
2bf8068980 twm: upgrade 1.0.10 -> 1.0.11
??Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8f6facb77e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Wang Mingyu
6ab0a2d5fc openipmi: upgrade 2.0.28 -> 2.0.29
???Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>

Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 0b0c102d8c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Paul Eggleton
28941dde0b protobuf-c: disable parallelism to avoid race condition
Unfortunately 489d3b4b93 did not completely
fix the problem - if you try cleaning and rebuilding protobuf-c-native it
doesn't take long to reproduce the issue on a 32-core machine. I spent
some time trying to debug this but failed, there is still a race between
generating t.test-full.pb.h and compiling cxx_generate_packed_data.c
despite BUILT_SOURCES and explicit dependencies. I even tried converting
the multiple target rules to use grouped targets (&:), that didn't fix it
either. Disabling parallelism as a workaround only costs ~20s and it
turns out that upstream is switching to Meson soon anyway:

  https://github.com/protobuf-c/protobuf-c/pull/340

Signed-off-by: Paul Eggleton <paul.eggleton@linux.microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3251fe210a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Pierre-Jean Texier
c02460f831 fuse3: upgrade 3.9.1 -> 3.9.2
See changelog https://github.com/libfuse/libfuse/releases/tag/fuse-3.9.2

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit b6979461fd)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Pierre-Jean Texier
554b2ad45d rsnapshot: upgrade 1.4.2 -> 1.4.3
VERSION 1.4.3
------------------------------------------------------------------------------
- Fixes and minor updates to Pod / man page.
- Adds more tests.
- Restore rsync error code 23 as an important warning.
- Fixes shortargs appending.
- Non-LVM backup source breaks after LVM backup source.
- Update rsnapreport.pl utility script to work with rsync >= 3.1.0 stats and bytes changes.

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>

(cherry picked from commit 4ea3135e94)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Alex Kiernan
e4fa609879 zstd: Upgrade 1.4.4 -> 1.4.5
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f6aa84fcf1)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Mingli Yu
2591786890 python3-m2crypto: add the missing rdepends
Add the missing rdepends to fix the error such as below:
 # python3
 [snip]
 >>> import M2Crypto
 ModuleNotFoundError: No module named 'decimal'

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fe77eaab8f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Qi.Chen@windriver.com
9621a82f49 python-django: set CVE_PRODUCT to be django
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 639eae8901)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00