[honister 00/14] Patch review

[honister 00/14] Patch review

[Armin Kuster]

Please review and have comments back by Monday

The following changes since commit 33c00e34fc2b085ea538445bbd1ba339024d4d8a:

  pahole: use MACHINE_ARCH (2021-10-12 09:45:25 -0700)

are available in the Git repository at:

  git://git.openembedded.org/meta-openembedded-contrib stable/honister-nut
  http://cgit.openembedded.org/meta-openembedded-contrib/log/?h=stable/honister-nut

Alexander Thoma (1):
  keyutils: fix install path

Armin Kuster (1):
  Apache: Several CVE fixes

Khem Raj (1):
  python3-behave: Switch to using github src_uri

Matthias Schiffer (1):
  byacc: switch to official HTTPS mirror

Yi Zhao (1):
  strongswan: upgrade 5.9.3 -> 5.9.4

wangmy (3):
  openvpn: upgrade 2.5.3 -> 2.5.4
  redis: upgrade 6.2.5 -> 6.2.6
  span-lite: upgrade 0.10.1 -> 0.10.3

zangrc (6):
  python3-ipython: upgrade 7.27.0 -> 7.28.0
  python3-jdatetime: upgrade 3.6.2 -> 3.6.4
  python3-openpyxl: upgrade 3.0.8 -> 3.0.9
  python3-transitions: upgrade 0.8.9 -> 0.8.10
  networkmanager-openvpn: upgrade 1.8.14 -> 1.8.16
  ser2net: upgrade 4.3.3 -> 4.3.4

 ...1.8.14.bb => networkmanager-openvpn_1.8.16.bb} |  3 +--
 .../{openvpn_2.5.3.bb => openvpn_2.5.4.bb}        |  3 +--
 .../{strongswan_5.9.3.bb => strongswan_5.9.4.bb}  |  2 +-
 .../{ser2net_4.3.3.bb => ser2net_4.3.4.bb}        |  2 +-
 meta-oe/recipes-extended/byacc/byacc.inc          |  2 +-
 .../redis/{redis_6.2.5.bb => redis_6.2.6.bb}      |  2 +-
 .../recipes-security/keyutils/keyutils_1.6.1.bb   | 15 +++------------
 .../{span-lite_0.10.1.bb => span-lite_0.10.3.bb}  |  2 +-
 .../python/python3-behave_1.2.6.bb                |  9 ++++++---
 ...python_7.27.0.bb => python3-ipython_7.28.0.bb} |  2 +-
 ...tetime_3.6.2.bb => python3-jdatetime_3.6.4.bb} |  5 ++---
 ...penpyxl_3.0.8.bb => python3-openpyxl_3.0.9.bb} |  2 +-
 ...ons_0.8.9.bb => python3-transitions_0.8.10.bb} |  2 +-
 .../{apache2_2.4.49.bb => apache2_2.4.51.bb}      |  2 +-
 14 files changed, 22 insertions(+), 31 deletions(-)
 rename meta-networking/recipes-connectivity/networkmanager/{networkmanager-openvpn_1.8.14.bb => networkmanager-openvpn_1.8.16.bb} (91%)
 rename meta-networking/recipes-support/openvpn/{openvpn_2.5.3.bb => openvpn_2.5.4.bb} (95%)
 rename meta-networking/recipes-support/strongswan/{strongswan_5.9.3.bb => strongswan_5.9.4.bb} (98%)
 rename meta-oe/recipes-connectivity/ser2net/{ser2net_4.3.3.bb => ser2net_4.3.4.bb} (84%)
 rename meta-oe/recipes-extended/redis/{redis_6.2.5.bb => redis_6.2.6.bb} (96%)
 rename meta-oe/recipes-support/span-lite/{span-lite_0.10.1.bb => span-lite_0.10.3.bb} (86%)
 rename meta-python/recipes-devtools/python/{python3-ipython_7.27.0.bb => python3-ipython_7.28.0.bb} (89%)
 rename meta-python/recipes-devtools/python/{python3-jdatetime_3.6.2.bb => python3-jdatetime_3.6.4.bb} (56%)
 rename meta-python/recipes-devtools/python/{python3-openpyxl_3.0.8.bb => python3-openpyxl_3.0.9.bb} (88%)
 rename meta-python/recipes-devtools/python/{python3-transitions_0.8.9.bb => python3-transitions_0.8.10.bb} (75%)
 rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.49.bb => apache2_2.4.51.bb} (99%)

-- 
2.25.1

[honister 02/14] python3-jdatetime: upgrade 3.6.2 -> 3.6.4

[Armin Kuster]

From: zangrc <zangrc.fnst@fujitsu.com>

-License-Update: Update PKG-INFO.

[3.6.4] - 2021-09-15
Add
Add date.min based on cpython implementation
Add date.max based on cpython implementation
[3.6.3] - 2020-12-11
Change
Run test and publish package from github action

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit a4724fc450c5f987d45287a5e5b50a549cb58cbf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 ...python3-jdatetime_3.6.2.bb => python3-jdatetime_3.6.4.bb} | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)
 rename meta-python/recipes-devtools/python/{python3-jdatetime_3.6.2.bb => python3-jdatetime_3.6.4.bb} (56%)

diff --git a/meta-python/recipes-devtools/python/python3-jdatetime_3.6.2.bb b/meta-python/recipes-devtools/python/python3-jdatetime_3.6.4.bb
similarity index 56%
rename from meta-python/recipes-devtools/python/python3-jdatetime_3.6.2.bb
rename to meta-python/recipes-devtools/python/python3-jdatetime_3.6.4.bb
index cadddc49f5..ad1ca428fe 100644
--- a/meta-python/recipes-devtools/python/python3-jdatetime_3.6.2.bb
+++ b/meta-python/recipes-devtools/python/python3-jdatetime_3.6.4.bb
@@ -1,10 +1,9 @@
 DESCRIPTION = "Jalali implementation of Python's datetime module"
 HOMEPAGE = "https://github.com/slashmili/python-jalali"
 LICENSE = "Python-2.0"
-LIC_FILES_CHKSUM = "file://PKG-INFO;md5=fc0a323542d2fbe0ad822fa0b1a0a96f"
+LIC_FILES_CHKSUM = "file://PKG-INFO;md5=f6890b2f685363312aff7f520831cdef"
 
-SRC_URI[md5sum] = "3c9ee1bc7de48ff4d9c773046b2eb081"
-SRC_URI[sha256sum] = "a589e35f0dab89283c1a3de9d70ed6cf657932aaed8e8ce1b0e5801aaab1da67"
+SRC_URI[sha256sum] = "39d0be41076b3a3850c3bfa90817e7ed459edc0e9cadce37dc7229b11f121c7e"
 
 PYPI_PACKAGE = "jdatetime"
 
-- 
2.25.1

[honister 03/14] python3-openpyxl: upgrade 3.0.8 -> 3.0.9

[Armin Kuster]

From: zangrc <zangrc.fnst@fujitsu.com>

Bugfixes
Ignore blank ignored in existing Data Validations
Add support for cell protection for merged cell ranges
Timezone-aware datetimes raise an Exception
Improved normalisation of chart series
Catch OverflowError for out of range datetimes
Alignment.relativeIndent can be negative
Incorrect default value groupBy attribute

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 18f4c0b5e8aba27edd5758b7dce5e632ce924aee)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../{python3-openpyxl_3.0.8.bb => python3-openpyxl_3.0.9.bb}    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-openpyxl_3.0.8.bb => python3-openpyxl_3.0.9.bb} (88%)

diff --git a/meta-python/recipes-devtools/python/python3-openpyxl_3.0.8.bb b/meta-python/recipes-devtools/python/python3-openpyxl_3.0.9.bb
similarity index 88%
rename from meta-python/recipes-devtools/python/python3-openpyxl_3.0.8.bb
rename to meta-python/recipes-devtools/python/python3-openpyxl_3.0.9.bb
index 3d1f46e50b..4dfd4490ab 100644
--- a/meta-python/recipes-devtools/python/python3-openpyxl_3.0.8.bb
+++ b/meta-python/recipes-devtools/python/python3-openpyxl_3.0.9.bb
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://PKG-INFO;beginline=8;endline=8;md5=8227180126797a0148
 
 inherit pypi setuptools3
 
-SRC_URI[sha256sum] = "4f2770348c029ce9433316ced8f91ed37d2a605e654f8bfdc93a3524561a8ce2"
+SRC_URI[sha256sum] = "40f568b9829bf9e446acfffce30250ac1fa39035124d55fc024025c41481c90f"
 
 RDEPENDS:${PN} += "\
 	${PYTHON_PN}-compression \
-- 
2.25.1

[honister 04/14] python3-transitions: upgrade 0.8.9 -> 0.8.10

[Armin Kuster]

From: zangrc <zangrc.fnst@fujitsu.com>

Release 0.8.10 is a minor release and contains two bug fixes for the HSM extension and changes how the 'self' literal string is handled.

- Feature #545: The literal 'self' (default model parameter of `Machine`) has been replaced by the class variable `Machine.self_literal = 'self'`. `Machine` now performs an identity check (instead of a value check) with `mod is self.self_literal` to determine whether it should act as a model. While 'self' should still work when passed to the `model` parameter, we encourage using `Machine.self_literal` from now on. This was done to enable easier override of `Machine.__eq__` in subclasses (thanks @VKSolovev).
- Bug #547: Introduce `HierarchicalMachine.prefix_path` to resolve global state names since the HSM stack is not reliable when `queued=True` (thanks @jankrejci).
- Bug #548: `HSM` source states were exited even though they are parents of the destination state (thanks @wes-public-apps).

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 46132922023490e5ed2063467eeeeffb284d4d4d)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 ...thon3-transitions_0.8.9.bb => python3-transitions_0.8.10.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-python/recipes-devtools/python/{python3-transitions_0.8.9.bb => python3-transitions_0.8.10.bb} (75%)

diff --git a/meta-python/recipes-devtools/python/python3-transitions_0.8.9.bb b/meta-python/recipes-devtools/python/python3-transitions_0.8.10.bb
similarity index 75%
rename from meta-python/recipes-devtools/python/python3-transitions_0.8.9.bb
rename to meta-python/recipes-devtools/python/python3-transitions_0.8.10.bb
index 178dfad3f3..46292987b1 100644
--- a/meta-python/recipes-devtools/python/python3-transitions_0.8.9.bb
+++ b/meta-python/recipes-devtools/python/python3-transitions_0.8.10.bb
@@ -4,6 +4,6 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=baac7be1f4c17620df74188e23da6d47"
 
 inherit pypi setuptools3
 
-SRC_URI[sha256sum] = "fc2ec6d6b6f986cd7e28e119eeb9ba1c9cc51ab4fbbdb7f2dedad01983fd2de0"
+SRC_URI[sha256sum] = "b0385975a842e885c1a55c719d2f90164471665794d39d51f9eb3f11e1d9c8ac"
 
 RDEPENDS:${PN} += "python3-six python3-logging"
-- 
2.25.1

[honister 05/14] python3-behave: Switch to using github src_uri

[Armin Kuster]

From: Khem Raj <raj.khem@gmail.com>

1.2.6 release does not have fixes to work with setuptools 0.58+
the patches are part of github 1.2.7 pre-release, until the release
comes out switch to using github

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 55534f9d10210120d47ad18526fadf77a752a83c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../recipes-devtools/python/python3-behave_1.2.6.bb      | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/meta-python/recipes-devtools/python/python3-behave_1.2.6.bb b/meta-python/recipes-devtools/python/python3-behave_1.2.6.bb
index 04e24a607f..89bf29fd7a 100644
--- a/meta-python/recipes-devtools/python/python3-behave_1.2.6.bb
+++ b/meta-python/recipes-devtools/python/python3-behave_1.2.6.bb
@@ -3,10 +3,13 @@ HOMEPAGE = "https://github.com/behave/behave"
 LICENSE = "BSD-2-Clause"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=d950439e8ea6ed233e4288f5e1a49c06"
 
-SRC_URI[md5sum] = "3f05c859a1c45f5ed33e925817ad887d"
-SRC_URI[sha256sum] = "b9662327aa53294c1351b0a9c369093ccec1d21026f050c3bd9b3e5cccf81a86"
+PV .= "+git${SRCREV}"
+SRCREV = "9520119376046aeff73804b5f1ea05d87a63f370"
+SRC_URI += "git://github.com/behave/behave;branch=master"
 
-inherit pypi setuptools3
+S = "${WORKDIR}/git"
+
+inherit setuptools3
 
 RDEPENDS:${PN} += " \
     ${PYTHON_PN}-parse-type \
-- 
2.25.1

[honister 07/14] openvpn: upgrade 2.5.3 -> 2.5.4

[Armin Kuster]

From: wangmy <wangmy@fujitsu.com>

2021.10.04 -- Version 2.5.4

Antonio Quartulli (3):
      route.c: pass the right parameter to IN6_IS_ADDR_UNSPECIFIED
      configure: search also for rst2{man, html}.py
      networking: add networking API net_addr_ll_set() and use it on Linux

Arne Schwabe (1):
      Move examples into openvpn-examples(5) man page

David Korczynski (1):
      Fix argv leaks in add_route() and add_route_ipv6()

David Sommerseth (2):
      doc: Use generic rules for man/html generation
      man: Clarify IV_HWADDR

Gert Doering (1):
      Add error reporting to get_console_input_win32().

Lev Stipakov (3):
      Fix console prompts with redirected log
      Add building man page on Windows
      GitHub Actions: remove Ubuntu 16.04 environment

Max Fillinger (1):
      Update Fox e-mail address in copyright notices

Selva Nair (1):
      Minor doc correction: tls-crypt-v2 key generation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 1bcc09e8ff56c63da448862a852fd5ea17683acb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../openvpn/{openvpn_2.5.3.bb => openvpn_2.5.4.bb}             | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)
 rename meta-networking/recipes-support/openvpn/{openvpn_2.5.3.bb => openvpn_2.5.4.bb} (95%)

diff --git a/meta-networking/recipes-support/openvpn/openvpn_2.5.3.bb b/meta-networking/recipes-support/openvpn/openvpn_2.5.4.bb
similarity index 95%
rename from meta-networking/recipes-support/openvpn/openvpn_2.5.3.bb
rename to meta-networking/recipes-support/openvpn/openvpn_2.5.4.bb
index a70e9708de..6b588a5f50 100644
--- a/meta-networking/recipes-support/openvpn/openvpn_2.5.3.bb
+++ b/meta-networking/recipes-support/openvpn/openvpn_2.5.4.bb
@@ -14,8 +14,7 @@ SRC_URI = "http://swupdate.openvpn.org/community/releases/${BP}.tar.gz \
 
 UPSTREAM_CHECK_URI = "https://openvpn.net/community-downloads"
 
-SRC_URI[md5sum] = "08895fd1142f25fdd94a98315632e1bf"
-SRC_URI[sha256sum] = "75f0044df449430555ca7b995a2b77ab24f2946fdc3668301b8edc23986a5f7e"
+SRC_URI[sha256sum] = "f80f3c3df1b94a8892ae547df84f152583250684a24bd022ccc98ef56fa93d97"
 
 # CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client, not for openvpn.
 CVE_CHECK_WHITELIST += "CVE-2020-7224 CVE-2020-27569"
-- 
2.25.1

[honister 08/14] redis: upgrade 6.2.5 -> 6.2.6

[Armin Kuster]

From: wangmy <wangmy@fujitsu.com>

Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:

(CVE-2021-41099) Integer to heap buffer overflow handling certain string
commands and network payloads, when proto-max-bulk-len is manually configured
to a non-default, very large value [reported by yiyuaner].
(CVE-2021-32762) Integer to heap buffer overflow issue in redis-cli and
redis-sentinel parsing large multi-bulk replies on some older and less common
platforms [reported by Microsoft Vulnerability Research].
(CVE-2021-32687) Integer to heap buffer overflow with intsets, when
set-max-intset-entries is manually configured to a non-default, very large
value [reported by Pawel Wieczorkiewicz, AWS].
(CVE-2021-32675) Denial Of Service when processing RESP request payloads with
a large number of elements on many connections.
(CVE-2021-32672) Random heap reading issue with Lua Debugger [reported by
Meir Shpilraien].
(CVE-2021-32628) Integer to heap buffer overflow handling ziplist-encoded
data types, when configuring a large, non-default value for
hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries
or zset-max-ziplist-value [reported by sundb].
(CVE-2021-32627) Integer to heap buffer overflow issue with streams, when
configuring a non-default, large value for proto-max-bulk-len and
client-query-buffer-limit [reported by sundb].
(CVE-2021-32626) Specially crafted Lua scripts may result with Heap buffer
overflow [reported by Meir Shpilraien].
Bug fixes that involve behavior changes:

GEO* STORE with empty source key deletes the destination key and return 0 (#9271)
Previously it would have returned an empty array like the non-STORE variant.
PUBSUB NUMPAT replies with number of patterns rather than number of subscriptions (#9209)
This actually changed in 6.2.0 but was overlooked and omitted from the release notes.
Bug fixes that are only applicable to previous releases of Redis 6.2:

Fix CLIENT PAUSE, used an old timeout from previous PAUSE (#9477)
Fix CLIENT PAUSE in a replica would mess the replication offset (#9448)
Add some missing error statistics in INFO errorstats (#9328)
Other bug fixes:

Fix incorrect reply of COMMAND command key positions for MIGRATE command (#9455)
Fix appendfsync to always guarantee fsync before reply, on MacOS and FreeBSD (kqueue) (#9416)
Fix the wrong mis-detection of sync_file_range system call, affecting performance (#9371)
CLI tools:

When redis-cli received ASK response, it didn't handle it (#8930)
Improvements:

Add latency monitor sample when key is deleted via lazy expire (#9317)
Sanitize corrupt payload improvements (#9321, #9399)
Delete empty keys when loading RDB file or handling a RESTORE command (#9297, #9349)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c48feb5f184738e88e9dac4e4f9d8598743f7109)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../recipes-extended/redis/{redis_6.2.5.bb => redis_6.2.6.bb}   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-extended/redis/{redis_6.2.5.bb => redis_6.2.6.bb} (96%)

diff --git a/meta-oe/recipes-extended/redis/redis_6.2.5.bb b/meta-oe/recipes-extended/redis/redis_6.2.6.bb
similarity index 96%
rename from meta-oe/recipes-extended/redis/redis_6.2.5.bb
rename to meta-oe/recipes-extended/redis/redis_6.2.6.bb
index 58d759b59d..87fade7e04 100644
--- a/meta-oe/recipes-extended/redis/redis_6.2.5.bb
+++ b/meta-oe/recipes-extended/redis/redis_6.2.6.bb
@@ -17,7 +17,7 @@ SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \
            file://GNU_SOURCE.patch \
            file://0006-Define-correct-gregs-for-RISCV32.patch \
            "
-SRC_URI[sha256sum] = "4b9a75709a1b74b3785e20a6c158cab94cf52298aa381eea947a678a60d551ae"
+SRC_URI[sha256sum] = "5b2b8b7a50111ef395bf1c1d5be11e6e167ac018125055daa8b5c2317ae131ab"
 
 inherit autotools-brokensep update-rc.d systemd useradd
 
-- 
2.25.1

[honister 09/14] span-lite: upgrade 0.10.1 -> 0.10.3

[Armin Kuster]

From: wangmy <wangmy@fujitsu.com>

Fixes:

Properly constrain constructor from iterators
(https://github.com/martinmoene/span-lite/issues/69)
Add [noreturn] to throw_out_of_range()
(https://github.com/martinmoene/span-lite/issues/73)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d46c811305ec13554d0ec0ddc973af2f4b33d7e7)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../span-lite/{span-lite_0.10.1.bb => span-lite_0.10.3.bb}      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-support/span-lite/{span-lite_0.10.1.bb => span-lite_0.10.3.bb} (86%)

diff --git a/meta-oe/recipes-support/span-lite/span-lite_0.10.1.bb b/meta-oe/recipes-support/span-lite/span-lite_0.10.3.bb
similarity index 86%
rename from meta-oe/recipes-support/span-lite/span-lite_0.10.1.bb
rename to meta-oe/recipes-support/span-lite/span-lite_0.10.3.bb
index 15ba099826..0079cf7298 100644
--- a/meta-oe/recipes-support/span-lite/span-lite_0.10.1.bb
+++ b/meta-oe/recipes-support/span-lite/span-lite_0.10.3.bb
@@ -4,7 +4,7 @@ LICENSE = "BSL-1.0"
 LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=e4224ccaecb14d942c71d31bef20d78c"
 
 SRC_URI += "git://github.com/martinmoene/span-lite"
-SRCREV = "da49b231a25600b4431e00b564a6a20be95c1108"
+SRCREV = "cbb9c3c5162a0d7018c7b3e053153a04d4fbbbb9"
 
 S = "${WORKDIR}/git"
 
-- 
2.25.1

[honister 10/14] networkmanager-openvpn: upgrade 1.8.14 -> 1.8.16

[Armin Kuster]

From: zangrc <zangrc.fnst@fujitsu.com>

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fd0cd13f423d0278727b6b83f59729b90da36952)
[Bug fix only update]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 ...ager-openvpn_1.8.14.bb => networkmanager-openvpn_1.8.16.bb} | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)
 rename meta-networking/recipes-connectivity/networkmanager/{networkmanager-openvpn_1.8.14.bb => networkmanager-openvpn_1.8.16.bb} (91%)

diff --git a/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.8.14.bb b/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.8.16.bb
similarity index 91%
rename from meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.8.14.bb
rename to meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.8.16.bb
index 9f3054a7c2..19cac13458 100644
--- a/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.8.14.bb
+++ b/meta-networking/recipes-connectivity/networkmanager/networkmanager-openvpn_1.8.16.bb
@@ -10,8 +10,7 @@ inherit gnomebase useradd gettext systemd
 
 SRC_URI = "${GNOME_MIRROR}/NetworkManager-openvpn/${@gnome_verdir("${PV}")}/NetworkManager-openvpn-${PV}.tar.xz"
 
-SRC_URI[md5sum] = "bef67eca77bee68da703609b92f804a0"
-SRC_URI[sha256sum] = "e7419053fc3b5a7e25f1a7517c313ad4531b6ea280255524ebb85a70c76fdbeb"
+SRC_URI[sha256sum] = "8920de09c7ae5f1f520c83f844455db8faec31427350268fe2dd95b860f91fb5"
 
 S = "${WORKDIR}/NetworkManager-openvpn-${PV}"
 
-- 
2.25.1

[honister 11/14] ser2net: upgrade 4.3.3 -> 4.3.4

[Armin Kuster]

From: zangrc <zangrc.fnst@fujitsu.com>

Fix a few minor annoyances.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 082e1599e559c3c93e2d38459c779d377fcda142)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../ser2net/{ser2net_4.3.3.bb => ser2net_4.3.4.bb}              | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-connectivity/ser2net/{ser2net_4.3.3.bb => ser2net_4.3.4.bb} (84%)

diff --git a/meta-oe/recipes-connectivity/ser2net/ser2net_4.3.3.bb b/meta-oe/recipes-connectivity/ser2net/ser2net_4.3.4.bb
similarity index 84%
rename from meta-oe/recipes-connectivity/ser2net/ser2net_4.3.3.bb
rename to meta-oe/recipes-connectivity/ser2net/ser2net_4.3.4.bb
index 87b5b15b75..fcd2546472 100644
--- a/meta-oe/recipes-connectivity/ser2net/ser2net_4.3.3.bb
+++ b/meta-oe/recipes-connectivity/ser2net/ser2net_4.3.4.bb
@@ -9,7 +9,7 @@ DEPENDS = "gensio libyaml"
 
 SRC_URI = "${SOURCEFORGE_MIRROR}/project/ser2net/ser2net/ser2net-${PV}.tar.gz"
 
-SRC_URI[sha256sum] = "f5be52033a690bd0dd711209a64ebaec024ee4542b1357350aad8489dc2bf720"
+SRC_URI[sha256sum] = "c714d6777849100b2ca3f216d1cfc36d4573639ececc91d5c7809dfe27c8428e"
 
 UPSTREAM_CHECK_URI = "http://sourceforge.net/projects/ser2net/files/ser2net"
 
-- 
2.25.1

[honister 12/14] byacc: switch to official HTTPS mirror

[Armin Kuster]

From: Matthias Schiffer <matthias.schiffer@ew.tq-group.com>

FTP does not always work in corporate networks. Switch to the HTTPS URL
mentioned on the tool's homepage. The same URL is also used by FreeBSD [1].

[1] https://cgit.freebsd.org/ports/tree/devel/byacc/Makefile?id=b128c1dbf3e8fbada5f753631041bf93ac51bf4d

Signed-off-by: Matthias Schiffer <matthias.schiffer@ew.tq-group.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d79ca2ebc434f7c89892b2dbb79c038d74e5ce2b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 meta-oe/recipes-extended/byacc/byacc.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta-oe/recipes-extended/byacc/byacc.inc b/meta-oe/recipes-extended/byacc/byacc.inc
index cffa7f5dcd..a3d9bfdb70 100644
--- a/meta-oe/recipes-extended/byacc/byacc.inc
+++ b/meta-oe/recipes-extended/byacc/byacc.inc
@@ -6,7 +6,7 @@ programming language."
 SECTION = "devel"
 LICENSE = "PD"
 
-SRC_URI = "ftp://ftp.invisible-island.net/byacc/byacc-${PV}.tgz \
+SRC_URI = "https://invisible-mirror.net/archives/byacc/byacc-${PV}.tgz \
            file://byacc-open.patch \
            file://0001-byacc-do-not-reorder-CC-and-CFLAGS.patch"
 
-- 
2.25.1

[honister 13/14] strongswan: upgrade 5.9.3 -> 5.9.4

[Armin Kuster]

From: Yi Zhao <yi.zhao@windriver.com>

Add openssl PACKAGECONFIG back as the openssl 3.0 compatibility issue
has been fixed.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit cb08584d8c9e8e1fd9436d3e9466bcb088086de5)
[Includes: CVE-2021-41990 and CVE-2021-41991]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../strongswan/{strongswan_5.9.3.bb => strongswan_5.9.4.bb}     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-networking/recipes-support/strongswan/{strongswan_5.9.3.bb => strongswan_5.9.4.bb} (98%)

diff --git a/meta-networking/recipes-support/strongswan/strongswan_5.9.3.bb b/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb
similarity index 98%
rename from meta-networking/recipes-support/strongswan/strongswan_5.9.3.bb
rename to meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb
index ad104e44ed..cbc263d301 100644
--- a/meta-networking/recipes-support/strongswan/strongswan_5.9.3.bb
+++ b/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb
@@ -12,7 +12,7 @@ SRC_URI = "http://download.strongswan.org/strongswan-${PV}.tar.bz2 \
            file://0001-memory.h-Include-stdint.h-for-uintptr_t.patch \
            "
 
-SRC_URI[sha256sum] = "9325ab56a0a4e97e379401e1d942ce3e0d8b6372291350ab2caae0755862c6f7"
+SRC_URI[sha256sum] = "45fdf1a4c2af086d8ff5b76fd7b21d3b6f0890f365f83bf4c9a75dda26887518"
 
 UPSTREAM_CHECK_REGEX = "strongswan-(?P<pver>\d+(\.\d+)+)\.tar"
 
-- 
2.25.1

[honister 14/14] Apache: Several CVE fixes

[Armin Kuster]

From: Armin Kuster <akuster@mvista.com>

Source: Apache.org
MR: 113457, 113453
Type: Security Fix
Disposition: Backport from apache.org 2.4.51
ChangeID: 9d7b58f49487baff99bf8f101e53217425a2b81f
Description:

Bug fix only update. LTS version
https://httpd.apache.org/security/vulnerabilities_24.html

Fixes CVEs:
CVE-2021-42013
CVE-2021-41524
CVE-2021-41773

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit c59ce3299e8ed52a520a95f0bc0d0996b1cc37df)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
---
 .../apache2/{apache2_2.4.49.bb => apache2_2.4.51.bb}            | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-webserver/recipes-httpd/apache2/{apache2_2.4.49.bb => apache2_2.4.51.bb} (99%)

diff --git a/meta-webserver/recipes-httpd/apache2/apache2_2.4.49.bb b/meta-webserver/recipes-httpd/apache2/apache2_2.4.51.bb
similarity index 99%
rename from meta-webserver/recipes-httpd/apache2/apache2_2.4.49.bb
rename to meta-webserver/recipes-httpd/apache2/apache2_2.4.51.bb
index e5d1879578..4b36c50d55 100644
--- a/meta-webserver/recipes-httpd/apache2/apache2_2.4.49.bb
+++ b/meta-webserver/recipes-httpd/apache2/apache2_2.4.51.bb
@@ -26,7 +26,7 @@ SRC_URI:append:class-target = " \
            "
 
 LIC_FILES_CHKSUM = "file://LICENSE;md5=bddeddfac80b2c9a882241d008bb41c3"
-SRC_URI[sha256sum] = "65b965d6890ea90d9706595e4b7b9365b5060bec8ea723449480b4769974133b"
+SRC_URI[sha256sum] = "20e01d81fecf077690a4439e3969a9b22a09a8d43c525356e863407741b838f4"
 
 S = "${WORKDIR}/httpd-${PV}"
 
-- 
2.25.1