summaryrefslogtreecommitdiffstats
path: root/package/quagga
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'next'Peter Korsgaard2018-12-0210-525/+18
|\ | | | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * package/quagga: add nhrpd optionFabrice Fontaine2018-12-012-2/+14
| | | | | | | | | | Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
| * package/quagga: bump to version 1.2.3Fabrice Fontaine2018-12-019-526/+7
| | | | | | | | | | | | | | | | | | | | | | - Remove all patches except the first one as they are already in this version - Remove AUTORECONF = YES as we're not patching any *.ac files anymore - Disable new nhrpd option - Add hash for license file Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* | quagga: fix BR2_PACKAGE_QUAGGA_TCP_ZEBRAFabrice Fontaine2018-12-011-1/+1
|/ | | | | | | | | Since bump to version 0.99.21 and commit b20c77321fa87f880ead2f27ecf19fd7c4f436da, BR2_PACKAGE_QUAGGA_TCP_ZEBRA has been wrongly rename into BR2_PACKAGE_QUAGGA_TCP_ZERBRA Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
* quagga: add upstream security fixesPeter Korsgaard2018-02-194-0/+338
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes the following security issues: CVE-2018-5378 It was discovered that the Quagga BGP daemon, bgpd, does not properly bounds check data sent with a NOTIFY to a peer, if an attribute length is invalid. A configured BGP peer can take advantage of this bug to read memory from the bgpd process or cause a denial of service (daemon crash). https://www.quagga.net/security/Quagga-2018-0543.txt CVE-2018-5379 It was discovered that the Quagga BGP daemon, bgpd, can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes, resulting in a denial of service (bgpd daemon crash). https://www.quagga.net/security/Quagga-2018-1114.txt CVE-2018-5380 It was discovered that the Quagga BGP daemon, bgpd, does not properly handle internal BGP code-to-string conversion tables. https://www.quagga.net/security/Quagga-2018-1550.txt CVE-2018-5381 It was discovered that the Quagga BGP daemon, bgpd, can enter an infinite loop if sent an invalid OPEN message by a configured peer. A configured peer can take advantage of this flaw to cause a denial of service (bgpd daemon not responding to any other events; BGP sessions will drop and not be reestablished; unresponsive CLI interface). https://www.quagga.net/security/Quagga-2018-1975.txt Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/*/Config.in: fix help text check-package warningsThomas Petazzoni2017-12-181-7/+8
| | | | | | | | | | | | | This commit fixes the warnings reported by check-package on the help text of all package Config.in files, related to the formatting of the help text: should start with a tab, then 2 spaces, then at most 62 characters. The vast majority of warnings fixed were caused by too long lines. A few warnings were related to spaces being used instead of a tab to indent the help text. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: add upstream security fix for CVE-2017-16227Peter Korsgaard2017-11-011-0/+33
| | | | | | | | | | | | | >From the advisory: http://www.openwall.com/lists/oss-security/2017/10/30/4 It was discovered that the bgpd daemon in the Quagga routing suite does not properly calculate the length of multi-segment AS_PATH UPDATE messages, causing bgpd to drop a session and potentially resulting in loss of network connectivity. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+Rahul Bedarkar2017-04-011-1/+1
| | | | | | | | | | | We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\<GPLv2\>/GPL-2.0/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: security bump to version 1.1.1Baruch Siach2017-02-092-4/+10
| | | | | | | | | | Fixes CVE-2017-5495: Telnet interface input buffer allocates unbounded amounts of memory, leading to DoS. Add optional dependency on protobuf-c. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* quagga: fix typo s/BPG/BGP/Thomas Petazzoni2016-11-251-2/+2
| | | | | | | Fixes bug #9431. Reported-by: xichaoli <xichao@sina.cn> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: fix static link with zlibBaruch Siach2016-08-211-0/+108
| | | | | | | | | | | | | | | quagga links with zlib indirectly via netsnmp -> openssl -> zlib. quagga and zlib both define the identically named but otherwise unrelated 'zcalloc' symbol. This breaks static linking. Add a patch that renames the offending symbol, thus fixing the build. Fixes: http://autobuild.buildroot.net/results/013/01317aeaff7d127a05e0488a51e81f2d43750687/ http://autobuild.buildroot.net/results/e9f/e9f17bb6e048c3dd3c65fc588dc5244fbbbba6fb/ http://autobuild.buildroot.net/results/72b/72b5e8a3d4c1d27c61cdad5a90691117d0dcfbb9/ Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* toolchain: add hidden symbol for PIE supportWaldemar Brodkorb2016-07-241-1/+1
| | | | | | | | | | | | | uClibc-ng does not support PIE for some architectures as arc and m68k. It isn't implemented in the static linking case, too. With musl toolchains you might have static PIE support with little patching of gcc. Static linking for GNU libc isn't enabled in buildroot. Fixup any package using special treatment of PIE. (grep -ir pie package/*/*.mk) Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> [Thomas: use positive logic.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/quagga: Add systemd.service fileNathaniel Roach2016-07-032-0/+19
| | | | | | | | | | | | | | | | | | | | | | Use a template service file as all of the daemons use almost identical arguments and generally appear the same to the init system. We "Wants=" zebra as that's the daemon for interfacing to the kernel, and it's not required for the other daemons to work but it's probably going to be used in nearly all setups. /usr/bin/env is needed as systemd doesn't allow the instance variable (%i) in the executable path. We don't enable these services by default as this would require creating configuration and /etc/default files. (And is easily achieved with an FS overlay) [Peter: remove killmode/killsignal/restartsec as suggested by Maxime] Signed-off-by: Nathaniel Roach <nroach44@gmail.com> Reviewed-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/quagga: Fix directories and permissionsNathaniel Roach2016-05-132-1/+29
| | | | | | | | | | | Quagga runs as the "quagga" user, but it also needs to modify files in /etc and /var - config files, pid files and vty sockets for vtysh. Tell the configure script the right folders to use, create the user, fix the permissions, and then let systemd know (if needed). Signed-off-by: Nathaniel Roach <nroach44@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: bump to version 1.0.20160315Baruch Siach2016-03-182-2/+2
| | | | | Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* quagga: fix build when ospfd is disabledBaruch Siach2016-03-161-1/+1
| | | | | | | | | | | | | | | | ospfclient and ospfapi that gets build by default need libospf, but libospf doesn't get built when ospfd is disabled. Disable ospfapi in this case. Fixes: http://autobuild.buildroot.net/results/918/918f5ced9c7dd59a8fcab654dc8f6d2798515e34/ http://autobuild.buildroot.net/results/edb/edbcb616b6019bced330238228fb5c6f880ab885/ http://autobuild.buildroot.net/results/831/8311f611559b3e7e98860d5a0264db97d4de1a54/ and many more. [Peter: tweak description] Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* quagga: security bump to version 1.0.20160309Baruch Siach2016-03-153-13/+2
| | | | | | | | | | | | | | Fixes CVE-2016-2342 (AKA VU#270232): Quagga bgpd with BGP peers enabled for VPNv4 contains a buffer overflow vulnerability. Remove the --enable-babeld and --enable-opaque-lsa configure options that were removed in this release. See the release announcement at https://lists.quagga.net/pipermail/quagga-dev/2016-March/014938.html. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package/quagga: add optional support for libcapBernd Kuhls2016-02-211-0/+7
| | | | | | | | | | | | When libcap was compiled before, quagga will use it as optional dependency: $ output/host/usr/bin/x86_64-linux-readelf -a output/target/usr/bin/vtysh | grep NEEDED | sort 0x0000000000000001 (NEEDED) Shared library: [libcap.so.2] [...] Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: fix static linkingThomas Petazzoni2015-11-262-0/+43
| | | | | | | | | | | | | This commit adds a patch to quagga's configure.ac to fix a library ordering problem that is causing a build failure in static linking scenario. Fixes: http://autobuild.buildroot.org/results/c08/c086f3128232af70d24fd5faf9282ce91d6488ef/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* quagga: disable PIE on ARCAlexey Brodkin2015-07-091-0/+4
| | | | | | | | | | | | | | Even though ARC gcc understands "-pie" option and attempts to generate PIE binaries as of today PIE is not really supported for user-space applications. So we disable PIE detection if building for ARC. That fixes http://autobuild.buildroot.net/results/ca0/ca0b1e271f29d7639b6a6e895472a35e2c1d8aba and also prevents execution of non-supported PIE binary in runtime. Signed-off-by: Alexey Brodkin <abrodkin@synopsys.com> Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: remove non-IPv6 dependencies and tweaksGustavo Zacarias2015-04-221-5/+0
| | | | | | | | Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: option for vtyshMatt Weber2015-03-202-0/+13
| | | | | | | [Thomas: add corresponding explicit --disable option.] Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: bump to version 0.99.24.1Gustavo Zacarias2015-03-092-4/+2
| | | | | | | Fixes the need to autoreconf and a zebra crash. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* quagga: remove redundant assignmentJerzy Grzegorek2015-03-041-1/+0
| | | | | | | | This redundant assignement was mistakenly added in commit a839ac38e158344afb9e5494ce154b93b88bb162. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: bump to version 0.99.24Gustavo Zacarias2015-03-043-9/+18
| | | | | | | Also add hash file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/*: rename patches according to the new policyPeter Korsgaard2015-02-031-0/+0
| | | | | | | Autogenerated from rename-patch.py (http://patchwork.ozlabs.org/patch/403345) Signed-off-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire2014-10-041-14/+14
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: bump to version 0.9.23.1Gustavo Zacarias2014-09-051-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* quagga: depends on MMUThomas Petazzoni2014-07-161-0/+1
| | | | | | | | Fixes: http://autobuild.buildroot.org/results/1c5/1c5fdfe3a0248b65efdea0594d8367ff907015d4/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: bump to version 0.99.23Gustavo Zacarias2014-07-081-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* quagga: security bump to version 0.99.22.4Gustavo Zacarias2013-11-271-1/+1
| | | | | | | Fixes CVE-2013-6051. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Config.in files: add missing dependencies to toolchain option commentsThomas De Schampheleire2013-11-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When a package A depends on config option B and toolchain option C, then the comment that is given when C is not fulfilled should also depend on B. For example: config BR2_PACKAGE_A depends on BR2_B depends on BR2_LARGEFILE depends on BR2_WCHAR comment "A needs a toolchain w/ largefile, wchar" depends on !BR2_LARGEFILE || !BR2_WCHAR This comment should actually be: comment "A needs a toolchain w/ largefile, wchar" depends on BR2_B depends on !BR2_LARGEFILE || !BR2_WCHAR or if possible (typically when B is a package config option declared in that same Config.in file): if BR2_B comment "A needs a toolchain w/ largefile, wchar" depends on !BR2_LARGEFILE || !BR2_WCHAR [other config options depending on B] endif Otherwise, the comment would be visible even though the other dependencies are not met. This patch adds such missing dependencies, and changes existing such dependencies from depends on BR2_BASE_DEP && !BR2_TOOLCHAIN_USES_GLIBC to depends on BR2_BASE_DEP depends on !BR2_TOOLCHAIN_USES_GLIBC so that (positive) base dependencies are separate from the (negative) toolchain dependencies. This strategy makes it easier to write such comments (because one can simply copy the base dependency from the actual package config option), but also avoids complex and long boolean expressions. Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> (untested) Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Config.in files: unify comments of toolchain option dependenciesThomas De Schampheleire2013-10-141-1/+1
| | | | | | | | This patch lines up the comments in Config.in files that clarify which toolchain options the package depends on. Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* net-snmp: needs mmuGustavo Zacarias2013-10-091-0/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* quagga: security bump to version 0.99.22.3Gustavo Zacarias2013-09-171-1/+1
| | | | | | | Fixes CVE-2013-2236. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* change package tarball compression to xz whenever possibleJerzy Grzegorek2013-09-081-0/+1
| | | | | | [Peter: leave change xz tarball format to not end up with circular deps] Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* Normalize separator size to 80Alexandre Belloni2013-06-061-2/+2
| | | | | Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* Remove description and url from headerAlexandre Belloni2013-06-061-1/+1
| | | | | Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* quagga: fix build breakage without snmpGustavo Zacarias2013-04-212-3/+4
| | | | | | | | | | | | | Quagga no longer supports explicitly disabling snmp, and what's worse, it interprets --disable-snmp as --enable-snmp. Remove the disable configure option. While at it add a comment about net-snmp requiring AgentX support for quagga to build properly as suggested by Arnout. Fixes: http://autobuild.buildroot.net/results/a9bce6dd8065ddb1850a4e14f0e4eb257ee89286/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* quagga: bump to version 0.99.22.1Gustavo Zacarias2013-04-171-5/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* quagga: add license informationGustavo Zacarias2013-01-281-0/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* all packages: rename XXXTARGETS to xxx-packageArnout Vandecappelle (Essensium/Mind)2012-07-171-1/+1
| | | | | | | | | | | | | Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* quagga: fix non-IPv6 build failuresGustavo Zacarias2012-06-041-0/+6
| | | | | | | | | | The Zebra daemon now requires IPv6 support so disable it for non-IPv6 toolchains and add a comment mentioning it. The BABEL protocol/daemon also requires IPv6 so just enable it when it's available. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* quagga: bump to version 0.99.21Gustavo Zacarias2012-05-202-71/+23
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* quagga: security bump to version 0.9.20.1Gustavo Zacarias2012-04-291-2/+1
| | | | | | | | Bump to version 0.9.20.1 to fix CVE-2012-0249, CVE-2012-0250 and CVE-2012-0255. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* quagga: security bump to version 0.99.20Gustavo Zacarias2011-10-154-219/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package: remove useless arguments from AUTOTARGETSThomas Petazzoni2011-09-291-1/+1
| | | | | | | | | | Thanks to the pkgparentdir and pkgname functions, we can rewrite the AUTOTARGETS macro in a way that avoids the need for each package to repeat its name and the directory in which it is present. [Peter: pkgdir->pkgparentdir] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* quagga: security bump to version 0.99.18Gustavo Zacarias2011-04-014-3/+221
| | | | | | | | | Fixes for vulnerabilities CVE-2010-1674 and CVE-2010-1675. Additional patches for build-time breakage of the new version. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* quagga: fix build with snmp supportGustavo Zacarias2011-02-241-0/+4
| | | | | | | | | | | | Closes #3277 Quagga's snmp support tries to link with libcrypto from openssl by default. That's a bad no no since snmp might have ssl support disabled and openssl won't be around. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package: apply libtool patch where possiblePeter Korsgaard2011-02-171-1/+0
| | | | | | | | | | Now that we have libtool-2.2.x patch support, we can get rid of a bunch of _LIBTOOL_PATH = NO, fixing (potential) cross link issues. Notice: php not changed, as it uses a very old 1.5 version for the embedded sqlite, where our buildroot-libtool-v1.5.patch doesn't apply. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
OpenPOWER on IntegriCloud