mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-01-01 13:58:06 +00:00
fea53271d1
This upgrade adds some new features and fixes numerous bugs including
the following CVEs:
CVE: CVE-2017-16808 (AoE)
CVE: CVE-2018-14468 (FrameRelay)
CVE: CVE-2018-14469 (IKEv1)
CVE: CVE-2018-14470 (BABEL)
CVE: CVE-2018-14466 (AFS/RX)
CVE: CVE-2018-14461 (LDP)
CVE: CVE-2018-14462 (ICMP)
CVE: CVE-2018-14465 (RSVP)
CVE: CVE-2018-14881 (BGP)
CVE: CVE-2018-14464 (LMP)
CVE: CVE-2018-14463 (VRRP)
CVE: CVE-2018-14467 (BGP)
CVE: CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled)
CVE: CVE-2018-10105 (SMB - too unreliably reproduced,
SMB printing disabled)
CVE: CVE-2018-14880 (OSPF6)
CVE: CVE-2018-16451 (SMB)
CVE: CVE-2018-14882 (RPL)
CVE: CVE-2018-16227 (802.11)
CVE: CVE-2018-16229 (DCCP)
CVE: CVE-2018-16301 (was fixed in libpcap)
CVE: CVE-2018-16230 (BGP)
CVE: CVE-2018-16452 (SMB)
CVE: CVE-2018-16300 (BGP)
CVE: CVE-2018-16228 (HNCP)
CVE: CVE-2019-15166 (LMP)
CVE: CVE-2019-15167 (VRRP)
CVE: CVE-2018-14879 (tcpdump -V)
Deleted patch "0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch"
since the fix is included in the upgrade.
Modified patches "avoid-absolute-path-when-searching-for-libdlpi.patch",
"unnecessary-to-check-libpcap.patch", and "add-ptest.path" since
the upgrade renamed configure.in to configure.ac and made changes
to the file.
Added PACKAGECONFIG for smb. It is disabled by default in
the upgraded version in both the package's configure script and this
bitbake recipe since it is insecure.
Modified the parsing of ptest result to align with the new output
format.
With core-image-minimal on qemux86-64/kvm:
Recipe | Passed | Failed | Skipped | Time(s)
Before | 408 | 0 | 2 | 4
After | 431 | 11 | 2 | 10
11 test failed after the upgrade since libpcap is not upgraded
alongside with tcpdump.
Signed-off-by: Peiran Hong <peiran.hong@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| aoetools | ||
| arptables | ||
| bridge-utils | ||
| c-ares | ||
| celt051 | ||
| chrony | ||
| cifs | ||
| cim-schema | ||
| curlpp | ||
| dnsmasq | ||
| dnssec-conf | ||
| dovecot | ||
| drbd | ||
| esmtp | ||
| fetchmail | ||
| fping | ||
| fwknop | ||
| geoip | ||
| htpdate | ||
| ifenslave | ||
| iftop | ||
| ipcalc | ||
| ipsec-tools | ||
| ipvsadm | ||
| libesmtp | ||
| libldb | ||
| libmemcached | ||
| libtalloc | ||
| libtdb | ||
| libtevent | ||
| linux-atm | ||
| lksctp-tools | ||
| lowpan-tools | ||
| macchanger | ||
| memcached | ||
| mtr | ||
| nbd | ||
| ncp | ||
| ndisc6 | ||
| netcat | ||
| netcf | ||
| netperf | ||
| nghttp2 | ||
| nis | ||
| ntimed | ||
| ntop | ||
| ntp | ||
| nuttcp | ||
| open-isns | ||
| openipmi | ||
| openvpn | ||
| phytool | ||
| pimd | ||
| rdma-core | ||
| ruli | ||
| smcroute | ||
| spice | ||
| ssmping | ||
| ssmtp | ||
| strongswan | ||
| stunnel | ||
| tcpdump | ||
| tcpreplay | ||
| tinyproxy | ||
| tnftp | ||
| traceroute | ||
| tunctl | ||
| uftp | ||
| wireshark | ||
| wpan-tools | ||