meta-openembedded/meta-networking/recipes-support
Peiran Hong 446bd615fd tcpdump: Fix CVE-2017-16808
Backport selected parts of three upstream commits to fix
CVE-2017-16808 where tcpdump 4.9.2 has a heap-based buffer over-read.

Upstream-Status: Backport
[ several ]

Upstream commits fully backported:
46aead6  [CVE-2017-16808/AoE: Add a missing bounds check]

Upstream commits partially backported:
7068209  [Use nd_ types in 802.x and FDDI headers.]
84ef17a  [Replace ND_TTEST2()/ND_TCHECK2() macros by macros using
pointers (1/n)]

46aead6 fixes the vulnerability and requires two macros defined in
7068209 and 84ef17a, which are committed after the release of 4.9.2.
Only the definition of the macros are taken from the two commits
as they impact a wide range of code and are difficult to integrate.

CVE: CVE-2017-16808

Signed-off-by: Peiran Hong <peiran.hong@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-10-05 09:01:00 -07:00
..
aoetools aoetools: fix QA warning for GNU_HASH 2016-11-14 13:01:10 -05:00
arptables arptables: Fix do_install task 2018-01-08 11:53:44 -05:00
bridge-utils bridge-utils: update to v1.6 2018-01-08 11:57:34 -05:00
c-ares c-ares: add nativesdk to BBCLASSEXTEND 2018-10-10 08:53:21 -07:00
celt051 celt051: Fix building testcases 2018-06-14 20:25:16 -07:00
chrony chrony: Update to version 3.3 2018-05-17 08:32:26 -07:00
cifs cifs-utils: mount.cifs should build without samba dependency 2018-01-08 12:05:43 -05:00
cim-schema cim-schema-exper: 2.39.0 -> 2.50.0 2018-03-05 11:45:40 -05:00
curlpp curlpp: Fix packaging and reference to license 2018-11-15 13:18:51 -08:00
dnsmasq dnsmasq: upgrade 2.78 -> 2.79 2018-06-29 07:00:52 -07:00
dnssec-conf meta-networking: standardize SECTION values 2015-06-05 20:42:25 -04:00
dovecot recipes: Link with libtirpc 2018-05-17 08:32:26 -07:00
drbd drbd-utils: fix usrmerge install path 2018-08-28 09:36:28 -07:00
esmtp esmtp: add sendmail to ALTERNATIVE_${PN} 2018-09-05 13:59:16 -07:00
fetchmail fetchmail: Fix build with OpenSSL 1.1.x 2018-09-08 13:32:12 -07:00
fping Make use of the new bb.utils.filter() function 2017-03-07 13:30:26 +01:00
fwknop fwknop: Use new config.guess and config.sub 2018-04-09 12:32:07 -04:00
geoip geoip: update SRC_URI 2018-12-22 08:14:11 -08:00
htpdate htpdate: Add recipe 2018-06-16 08:51:38 -07:00
ifenslave ifenslave: inherit manpages instead of adding man to RDEPENDS_${PN} 2018-08-11 20:16:52 -07:00
iftop iftop: 1.0pre2 -> 1.0pre4 2015-09-14 15:07:53 -04:00
ipcalc ipcalc: switch away from github archive 2018-05-17 08:32:26 -07:00
ipsec-tools ipsec-tools: support openssl 1.1.x 2018-09-25 22:24:15 -07:00
ipvsadm ipvsadm: fix usrmerge install path 2018-08-19 16:09:28 -07:00
libesmtp libesmtp: Fix config.h define for snprintf detection 2017-09-08 16:38:58 -04:00
libldb libldb: add pam to REQUIRED_DISTRO_FEATURES 2018-09-27 08:58:18 -07:00
libmemcached libmemcached: Upgrade to 1.0.18 2017-03-24 14:10:18 -04:00
libtalloc libtalloc: split one dpg package 2018-09-17 22:23:29 -07:00
libtdb libtdb: split one dpg package 2018-09-17 22:23:29 -07:00
libtevent libtevent: split one dpg package 2018-09-17 22:23:29 -07:00
linux-atm linux-atm: Fix build with hardening flags 2017-06-28 10:29:07 -04:00
lksctp-tools lksctp-tools: fix ptest Segmentation fault 2018-09-25 00:57:30 -07:00
lowpan-tools lowpan-tools: Fix build with gcc-8 2018-05-31 21:53:52 -07:00
macchanger meta-networking: standardize SECTION values 2015-06-05 20:42:25 -04:00
memcached memcached: Update to 1.5.10 2018-08-29 18:18:14 -07:00
mtr mtr: Upgrade 0.87+git 2017-04-25 16:10:07 -04:00
nbd nbd: Upgrade to nbd 3.17 2018-09-12 21:14:26 -07:00
ncp ncp: add v1.2.4 2016-12-14 09:20:09 -05:00
ndisc6 ndisc6: Do not use gold linker and disable rpath 2018-08-30 11:29:19 -07:00
netcat netcat-openbsd: update SRC_URI 2018-11-15 13:18:48 -08:00
netcf netcf: add UPSTREAM_CHECK_GITTAGREGEX 2018-05-30 12:33:43 -07:00
netperf netperf: Fix build error on musl 2018-09-26 18:19:14 -07:00
nghttp2 nghttp2: Move to meta-networking 2018-02-05 10:40:19 -05:00
nis yp-tools: Add dep on virtual/crypt 2018-08-13 14:29:11 -04:00
ntimed ntimed: use beginline= in LIC_FILES_CHKSUM 2018-02-05 10:40:19 -05:00
ntop ntop: fix so generation in plugins/Makefile.am 2018-07-12 07:19:43 -07:00
ntp ntp: upgrade 4.2.8p12 -> 4.2.8p13 2019-05-25 12:18:49 -07:00
nuttcp nuttcp: fix QA warning for GNU_HASH 2016-11-14 13:01:11 -05:00
open-isns open-isns: upgrade 0.97 -> 0.98 2018-07-03 17:42:25 -07:00
openipmi openipmi: not install .pyc and .pyo files 2018-10-19 11:03:18 -07:00
openvpn openvpn: update to 2.4.6 2018-10-09 19:08:26 -07:00
phytool phytool: Add recipe 2016-10-20 11:18:07 -04:00
pimd pimd: Upgrade to 2.3.2 2017-09-08 16:38:15 -04:00
rdma-core rdma-core: Update to version 18 2018-06-14 09:01:12 -07:00
ruli ruli: FIx build with hardening flags 2017-06-28 10:29:59 -04:00
smcroute meta-networking: standardize SECTION values 2015-06-05 20:42:25 -04:00
spice spice: cleanup leftover patch from upgrade to 0.13.90 2018-09-14 19:01:41 -07:00
ssmping meta-oe: fix indentation 2016-08-22 15:56:28 +02:00
ssmtp ssmtp: misc recipe updates + add Debian "partial loss of message body" fix 2018-01-08 11:48:42 -05:00
strongswan strongswan: upgrade to 5.7.1 2018-10-16 23:27:55 -07:00
stunnel stunnel: update 5.35 -> 5.49 2018-09-14 19:02:24 -07:00
tcpdump tcpdump: Fix CVE-2017-16808 2019-10-05 09:01:00 -07:00
tcpreplay tcpreplay: upgrade to 4.2.6 2017-09-12 10:55:06 -04:00
tinyproxy tinyproxy: Refresh patches 2018-09-29 02:10:12 -07:00
tnftp Make use of the new bb.utils.filter() function 2017-03-07 13:30:26 +01:00
traceroute traceroute: Move manual pages from mandir to man8 under it 2017-06-28 10:27:03 -04:00
tunctl tunctl: fix QA warning for GNU_HASH 2016-11-14 13:01:11 -05:00
uftp uftp: Upgrade to 4.9.8 2018-09-08 13:32:12 -07:00
wireshark wireshark: Update to 2.6.10 for security fixes. 2019-09-04 13:14:32 -07:00
wpan-tools wpan-tools: Add recipe 2018-04-25 15:53:45 -04:00