3663 Commits

Author SHA1 Message Date
Yi Zhao
6f28dfb8b9 mbedtls: upgrade 3.6.0 -> 3.6.1
ChangeLog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.1

Security fixes:
CVE-2024-45157
CVE-2024-45158
CVE-2024-45159

* According to commit[1], install data_files into framework directory
  for ptest.

[1] 9c4dd4ee6f

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-09-22 10:06:28 -04:00
Wang Mingyu
1b62af8ac6 samba: upgrade 4.19.7 -> 4.19.8
Changelog:
 https://www.samba.org/samba/history/samba-4.19.8.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3cbd140c7d85d99afc81ffd83b75698ee621c1c1)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-09-15 12:28:06 -04:00
Yi Zhao
d3cd9c14cb samba: upgrade 4.19.6 -> 4.19.7
ChangeLog:
https://www.samba.org/samba/history/samba-4.19.7.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 41df431b91f1d81070c1f0e8633995d7afba52e4)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-09-15 12:27:56 -04:00
Vijay Anusuri
4f0f1bd855 wireshark: upgrade 4.2.5 -> 4.2.7
CVE's fixed by upgrade:
CVE-2024-8250

Other Changes between 4.2.5 -> 4.2.7
======================================
https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html
https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-09-09 15:33:16 -04:00
Adrian Freihofer
17aacc80f7 networkmanager: remove modemmanager rdepends
This reverts commit: 5edb8335dc46450fd6bcdbb3fcf55336b32bd422

The Networkmanager package must not depend on ModemManager. Only the
Networkmanager-wwan package should depend on the ModemManager package.

The mobile-broadband-provider-info is fully optional and it is often not
required for embedded devices. Let the user choose if it gets installed
or not. Adding it explicitely to IMAGE_INSTALL is simple. Adding an
RRECOMMENS would work as well. But adding an RDEPENDS is bad.

In general, NetworkManager packaging is intended to provide a set of
binary packages suitable for building many different images.
NetworkManager is designed to be used for binary packages distributions
where it is not possible to rebuild NetworkManager just to install
Modemmanager. Also for OE, where a rebuilding is possible, a rebuild is
a disadvantage. So please do not destroy this flexibility by adding
RDEPENDS, which are firstly wrong and secondly only suitable for your
specific needs.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-08-21 16:45:33 -04:00
Peter Marko
be2127dce5 squid: patch CVE-2024-37894
Reference: https://github.com/squid-cache/squid/security/advisories/GHSA-wgvf-q977-9xjg

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-08-21 16:45:29 -04:00
alperak
3472995aea tayga: Fix contains reference to TMPDIR [buildpaths] warning
WARNING: tayga-0.9.2-r0 do_package_qa: QA Issue: File /usr/sbin/.debug/tayga in package tayga-dbg contains reference to TMPDIR [buildpaths]

Make sure that the OE provided CFLAGS are passed to the compiler.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d1bf2db7cc2bcb8b6ac45bb382c3f2b6bb762053)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-08-10 11:22:42 -04:00
J. S.
76f14368a0 znc: Fix buildpaths QA errors
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 28d77dddad1c86ac5771859e59504e662eb68813)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-08-10 11:21:45 -04:00
Poonam Jadhav
4d7c91ee53 tcpreplay: Fix CVE-2023-4256
Add patch to fix tcpreplay CVE-2023-4256
dlt_jnpr_ether_cleanup: check config before cleanup
Links:
https://github.com/appneta/tcpreplay/pull/851
https://github.com/appneta/tcpreplay/issues/813#issuecomment-2245557093

Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-08-03 11:55:57 -04:00
Jiaying Song
80e01188fa nftables: change ptest output format
This change adds a simple format for the skip results.
The format selected is the automake "simple test" format:
"result: testname"

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-07-23 15:24:57 -04:00
Vijay Anusuri
e73202e04a wireshark: upgrade 4.2.4 -> 4.2.5
The following vulnerabilities have been fixed:

    wnpa-sec-2024-07 MONGO and ZigBee TLV dissector infinite loops. Issue 19726. CVE-2024-4854.

    wnpa-sec-2024-08 The editcap command line utility could crash when chopping bytes from the beginning of a packet. Issue 19724. CVE-2024-4853.

    wnpa-sec-2024-09 The editcap command line utility could crash when injecting secrets while writing multiple files. Issue 19782. CVE-2024-4855.

Release Notes: https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-07-17 20:01:33 -04:00
Hitendra Prajapati
c18656fa75 tcpdump: fix CVE-2024-2397
Upstream-Status: Backport from b9811ef5bb

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-26 07:30:56 -04:00
Kai Kang
1812028119 daq: fix incompatible pointer type error
Fix incompatible pointer type error for daq:

| ../../daq-2.0.7/os-daq-modules/daq_nfq.c: In function 'SetPktHdr':
| ../../daq-2.0.7/os-daq-modules/daq_nfq.c:394:37: error: passing argument 2
   of 'nfq_get_payload' from incompatible pointer type [-Wincompatible-pointer-types]
|   394 |     int len = nfq_get_payload(nfad, (char**)pkt);
|       |                                     ^~~~~~~~~~~
|       |                                     |
|       |                                     char **

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-24 07:36:08 -04:00
Yoann Congal
5b010b412b squid: workaround a build failure with native gcc10
When build on Debian 11 (gcc10), squid fails to build[0] because of a
bug[1] in the configure step (it mixes options between old native compiler
and recent target compiler: the former needs the std=c++17 option, the latter
doesn't).

The workaround is to force the "-std=c++17" option for the native build.

NB: Our Buildroot friends have the same workaround[2].

[0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/23/steps/28/logs/stdio
[1]: https://bugs.squid-cache.org/show_bug.cgi?id=5376
     Bug closed as invalid by upstream
[2]: 932b52fad8/package/squid/squid.mk (L24)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Yi Zhao
60018b59c3 samba: upgrade 4.19.5 -> 4.19.6
ChangeLog:
https://www.samba.org/samba/history/samba-4.19.6.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Yi Zhao
18fa1f593e libtevent: upgrade 0.16.0 -> 0.16.1
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-02 14:57:06 -04:00
Markus Volk
63db9c0d52
networkmanager: fix gir build
Basically what is done in:
https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=4c40897893f43a99e6ae12e652c0cf789d89df90

This fixes:
| gi.RepositoryError: Typelib file for namespace 'Gobject', version '2.0' not found
| gi.RepositoryError: Typelib file for namespace 'Gio', version '2.0' not found
| gi.RepositoryError: Typelib file for namespace 'GModule', version '2.0' not found

- Remove uneeded do_compile:prepend. It was broken because of {B}} and seems to be unneeded anyway

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:34 -07:00
maffan
d8ba3e4400
networkd-dispatcher: Add dependency on python3-json
networkd-dispatcher imports json. Add it as a RDEPENDS.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:34 -07:00
Ninette Adhikari
41e8a4b855
open-vm-tools: Update status for CVE-2014-4199 and CVE-2014-4200
Current version 12.3.5 is not affected by the issue.
Affected versions: Up to (incl) 10.0.3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:34 -07:00
Yoann Congal
2e25f21f52
reproducibility: move repro excludes from AB config.json to meta-oe
For now, the known non-reproducible packages list is stored inside the
autobuilder config.json file. This is not ideal. Let's move this list
into each layers of meta-openembedded.

These lists can be used with, in local.conf:
  include conf/include/non-repro-meta-oe.inc
  OEQA_REPRODUCIBLE_EXCLUDED_PACKAGES = "${KNOWN_NON_REPRO_META_OE}"

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Acked-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 11:00:33 -07:00
Markus Volk
0b8e416edc
spice-gtk: add PACKAGECONFIG for webdav
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 10:59:07 -07:00
Markus Volk
1ebbb331ea
spice-gtk: use hwdata instead of usbids
spice-gtk seems to be the last recipe in meta-openembedded that uses
usbids instead of hwdata.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 10:59:07 -07:00
Wang Mingyu
ff6b6f57bc
openfortivpn: upgrade 1.21.0 -> 1.22.0
Changelog:
==========
* make sure Homebrew packages for macOS are built with --enable-legacy-pppd
* do not print TLS socket options in log (revert change from 1.16.0)
* add option to specify SNI
* change most occurrences of "SSL" to "TLS" in user-visible text

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 10:59:05 -07:00
Martin Jansa
b0bd1ffdf4
freediameter: fix dependency from libidn to libidn2
* it's used since:
  da679d27c5
  included with the upgrade to 1.5.0 in:
  https://git.openembedded.org/meta-openembedded/commit/?id=47ccb88d94852e327f3bdd45425f33e56983b50c

* libidn2 is usually pulled into the RSS by the dependency from gnutls
  but when gnutls doesn't depend on it, the build fails with:
-- Checking for module 'libidn2'
--   No package 'libidn2' found
CMake Error at include/freeDiameter/CMakeLists.txt:144 (MESSAGE):
  Unable to find libidn2, please install libidn2-dev or equivalent, or set
  DIAMID_IDNA_IGNORE or DIAMID_IDNA_REJECT

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-21 10:52:50 -07:00
Wang Mingyu
697f0b5e9a
squid: upgrade 6.8 -> 6.9
Changelog:
==========
- Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef
- Bug 5069: Keep listening after getsockname() error
- Bug 5360: FwdState::noteDestinationsEnd() assertion "err"
- Reduce stale errno usage
- Plug memory leak in handling cache manager requests
- Fix error: template-id not allowed for constructor in C++20
- Improve release packaging automation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-21 10:52:48 -07:00
Wang Mingyu
0d7056e1b5
sngrep: upgrade 1.8.0 -> 1.8.1
Changelog:
 capture: fix possible buffer overflow while processing headers

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-21 10:52:48 -07:00
Wang Mingyu
d0a010899e
rdma-core: upgrade 50.0 -> 51.0
Changelog:
============
-Merge pull request #1444 from yishaih/mlx5_dr
-Merge pull request #1439 from Kamalheib/qedr_pr
-mlx5: DR, Using sq ts format when RoCE is disabled
-Merge pull request #1440 from Honggang-LI/doc
-librdmacm: adjust ECE function name in man page
-providers/qedr: Remove unused debug files
-roviders/qelr: Replace DP_ERR with verbs_err
-providers/qelr: Replace DP_VERBOSE with verbs_debug
-providers/qelr: Remove unused macros
-Merge pull request #1438 from amzn/fix-rdma-tracepoint

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-21 10:52:48 -07:00
Alexander Vickberg
724705aa1e
nng: upgrade 1.5.2 -> 1.7.3
Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-21 10:52:41 -07:00
Alexander Vickberg
3fa294eaa2
Revert "nng: upgrade 1.5.2 -> 12"
This reverts commit 915b6c02ee43e2dee8c6b3132e7d47836d392168.

Mistake upgrade by AUH

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-21 10:52:41 -07:00
Yi Zhao
e7bf56b3f5
snort3: update to latest stable version 3.1.84.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.1.84.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-21 10:52:40 -07:00
Yi Zhao
d3aac26c36
libdaq: update to latest stable version 3.0.14
ChangeLog:
https://github.com/snort3/libdaq/releases/tag/v3.0.14

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-21 10:52:40 -07:00
alperak
050286a953
Use PYTHON_SITEPACKAGES_DIR instead of hard-coded site-packages directory path
The following paths have been replaced with PYTHON_SITEPACKAGES_DIR:

- "${libdir}/${PYTHON_DIR}/site-packages"
- "${libdir}/python${PYTHON_BASEVERSION}/site-packages"
- "${libdir}/python*/site-packages"
- "${libdir}/python3.*/site-packages"

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-21 10:52:39 -07:00
Khem Raj
0db381eb31
freediameter: Upgrade to latest on master 1.5.0+
This also fixes all ptests, therefore move freediameter
out of PTESTS_PROBLEMS_META_NETWORKING to PTESTS_FAST_META_NETWORKING

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-21 10:52:39 -07:00
alperak
4e7573011d
libcoap: fix CVE-2024-0962
CVE-2024-0962:

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_oscore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow.

Upstream-Status: Backport [https://github.com/obgm/libcoap/pull/1311]

WARNING: libcoap-4.3.4-r0 do_cve_check: Found unpatched CVE (CVE-2024-0962)

This vulnerability is only exist in 4.3.4.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-14 08:38:42 -07:00
Peter Marko
e5042e3a0c
waf-samba: replace oldincludedir
oldincludedir was removed in oe-core by
commit  506c91cbc6a604a84e37e53ccff430436369802e

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-14 08:38:42 -07:00
Khem Raj
f6305ba58c
nftables: Fix ptest runs
It gets OOMs with memory < 2G on x86_64 qemu
Export NFT variable in run-ptest script its used by few tests
Add required runtime dependencies for ptests to pass

This also requires changes to kernel config
features/nf_tables/nft_test.scc and CONFIG_VETH

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-14 08:38:40 -07:00
Randy MacLeod
6fe48daa6d
postfix: switch SRC_URI to http
Switch the SRC_URI to http since the postfix site does not yet use https.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-14 08:38:39 -07:00
Randy MacLeod
6a4216ee49
tnftp: switch the SRC_URI to https
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-14 08:38:39 -07:00
Randy MacLeod
2ca621cbd1
pimd: switch SRC_URI to https
Switch SRC_URI to https (yes, the URI still has ftp in the path!).
Also drop the obsolete SRC_URI[md5sum].

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-14 08:38:39 -07:00
Randy MacLeod
7227c83e80
ncftp: Upgrade to 3.2.7
Switch the SRC_URI from "ftp:" to "https:". Drop the obsolete SRC_URI[md5sum].
Drop ncftp-3.2.5-gcc10.patch since we're using gcc13 and upstream has fixed the build
to work by adding an extern to sh_util/gpshare.c for example.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-14 08:38:39 -07:00
Beniamin Sandu
880f806500
unbound: upgrade 1.19.1 -> 1.19.3
Includes security fixes for:
CVE-2024-1931 - Loop with Unreachable Exit Condition ('Infinite Loop')

Full release notes:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.3

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-07 08:36:35 -07:00
Beniamin Sandu
887992ea2f
mbedtls: upgrade 2.28.7 -> 2.28.8
Includes security fixes for:
CVE-2024-28960 - Insecure handling of shared memory in PSA Crypto APIs

Full release notes:
https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.8

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-07 08:36:35 -07:00
Beniamin Sandu
1308dc5b9c
mbedtls: upgrade 3.5.2 -> 3.6.0
This is an LTS release.

Includes security fixes:
* CVE-2024-28960 - Insecure handling of shared memory in PSA Crypto APIs

Full release notes:
https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.6.0

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-07 08:36:35 -07:00
Alex Kiernan
7f3e413612
mdns: Upgrade 2200.80.16 -> 2200.100.94.0.2
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-07 08:36:35 -07:00
William Lyu
04fcbeb562
nftables: Fix failed ptest testcases
There are 2 failed ptest testcases. They fail because they are broken,
but the fix from the upstream is not yet available in version 1.0.9.
These testcases are:
-   tests/shell/testcases/sets/reset_command_0
    Fix from the upstream:
    https://git.netfilter.org/nftables/commit/?id=7a6089a400a573b9a4fd92f29c00a6be7b8ef269
-   tests/shell/testcases/json/0005secmark_objref_0
    Fix from the upstream:
    https://git.netfilter.org/nftables/commit/?id=fff913c1eefbc84eb2d9c52038ef29fe881e9ee9

Signed-off-by: William Lyu <William.Lyu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-03 17:44:22 -07:00
William Lyu
32f5f091dd
nftables: Fix ShellCheck violations in ptest wrapper script "run-ptest"
The following ShellCheck violations in "run-ptest" are fixed:
-   line 4:
    SC2164: Use 'cd ... || exit' or 'cd ... || return' in case cd fails.
-   line 7:
    SC2086: Double quote to prevent globbing and word splitting.
-   line 9:
    SC2006: Use $(...) notation instead of legacy backticks `...`.
    SC2086: Double quote to prevent globbing and word splitting.
    SC2126: Consider using 'grep -c' instead of 'grep|wc -l'.
-   line 10:
    SC2006: Use $(...) notation instead of legacy backticks `...`.
    SC2086: Double quote to prevent globbing and word splitting.
    SC2126: Consider using 'grep -c' instead of 'grep|wc -l'.
-   line 17:
    SC2086: Double quote to prevent globbing and word splitting.

Signed-off-by: William Lyu <William.Lyu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-03 17:44:22 -07:00
William Lyu
6f723efdc6
nftables: Fix ptest output format issues
Fix the following ptest output format issues:

-   For "sed" command, change "-e" option to "-E" option. I believe the
    previous "-e" option is a typo based on the manual page of "sed":

        -e script, --expression=script
            add the script to the commands to be executed

    "-E" option, on the other hand, makes "sed" "use extended regular
    expressions in the script" according to the manual page.

-   The test result summary line is being treated as both a passed
    testcase and a failed testcase due to this line containing substring
    "[OK]" and "[FAILED]". The following is a sample test result summary
    line:

        I: results: [OK] 379 [SKIPPED] 1 [FAILED] 0 [TOTAL] 380

    The fix is to change run-ptest to look for "I: [OK]" and
    "W: [FAILED]" when determining which lines correspond to
    passed/failed testcases.

-   Previously, only "W: [FAILED]" out of the following testcase failure
    prompts is parsed:

        W: [CHK DUMP]
        W: [VALGRIND]
        W: [TAINTED]
        W: [DUMP FAIL]
        W: [FAILED]

    Adding parsing for all testcase failure prompts.

Signed-off-by: William Lyu <William.Lyu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-03 17:44:21 -07:00
Robert Yang
873d049724
freeradius: 3.0.26 -> 3.2.3
* Add --without-rlm_json to fix:
  configure: error: set --without-rlm_json to disable it explicitly

* Add --without-rlm_cache_redis to fix:
  configure: error: set --without-rlm_cache_redis to disable it explicitly.

* Drop 0017-add-python.m4-for-detecting-python-3.10.patch and add
  0017-Add-acinclude.m4-to-include-required-macros.patch to fix python3 related
  build errors

* Rebased other patches for 3.2.3.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02 14:56:53 -07:00
Wang Mingyu
eee270ce10
wolfssl: upgrade 5.6.6 -> 5.7.0
Changelog:
============
https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.0-stable

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02 14:56:53 -07:00
Wang Mingyu
54c324032e
wireshark: upgrade 4.2.3 -> 4.2.4
Bugfix:
=========
-wnpa-sec-2024-06 T.38 dissector crash.
-Extcap with configuration never starts; "Configure all extcaps before start of capture." is shown instead.
-Packet Dissection CSV Export includes last column even if hidden.
-Inject TLS secrets closes Wireshark on Windows.
-Wireshark crashes when adding another port to the HTTP dissector.
-When adding a new row to a table an error report may be inserted.
-'--export-objects' does not work as expected on tshark version later than 3.2.10.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02 14:56:53 -07:00