summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity
Commit message (Collapse)AuthorAgeFilesLines
* snort: upgrade 2.9.15 -> 2.9.16Zang Ruochen2020-06-122-51/+2
| | | | | | | | | | -0001-chdeck-for-gettid-API-during-configure.patch Removed since this is included in 2.9.16 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit e44e7be3e9d140410d3c7d799a32cf867e494f9c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mosquitto: upgrade 1.6.9 -> 1.6.10Zang Ruochen2020-06-121-2/+2
| | | | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit aa615a8e6093759fd580217be79dc037d9c0d79c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* kea: upgrade 1.7.6 -> 1.7.7Zheng Ruoqin2020-05-281-2/+2
| | | | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a5d7311490e12a296241bcd8adb0090c226842ec) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* netplan: Depend on systemd if it is in distroKhem Raj2020-05-281-1/+2
| | | | | | | | | | | | it needs to link with libsystemd when using systemd as init system Fixes Package libsystemd was not found in the pkg-config search path. Perhaps you should add the directory containing `libsystemd.pc' to the PKG_CONFIG_PATH environment variable Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 60e603f11ae1cca38553d18cf411f1a77207a97c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samba: upgrade 4.10.13 -> 4.10.15Yi Zhao2020-05-201-2/+2
| | | | | | | | | | | | This is a security release in order to address the following defects: CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a41c021cfb11418f1a32e49be0716b00b5234210) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* samba: Remove the dependency on libbsdPeter Kjellerstedt2020-04-292-1/+106
| | | | | | | | | | | | It is unnecessary, and libbsd uses the "BSD-4-Clause" license, which can be problematic. To make it deterministic, a patch is introduced to allow libbsd support to be disabled. It resembles similar patches in, e.g., libldb, libtalloc, libtdb and libtevent. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 4.3.0 -> 4.4.0Pierre-Jean Texier2020-04-261-1/+1
| | | | | | | | | | Release 4.4.0 of wolfSSL embedded TLS has bug fixes, new features and fixes for security vulnerabilities. See full changelog https://github.com/wolfSSL/wolfssl/releases/tag/v4.4.0-stablefixes Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: improve reproducibilityMingli Yu2020-04-261-0/+4
| | | | | | | | | | | | | | There are some shell scripts such as kea-admin, upgrade_4.0_to_5.0.sh, wipe_data.sh and etc contain build path. Actually the build path is meanlingless on the target, so replace abs_top_builddir to abs_top_builddir_placeholder to avoid expanding abs_top_builddir which introduces build path. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 2.16.5 -> 2.16.6Pierre-Jean Texier2020-04-151-2/+2
| | | | | | | | | | Mbed TLS 2.16.6 is a maintenance release of the Mbed TLS 2.16 branch, and provides security fixes and bug fixes, see: - https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.6-and-2.7.15-released Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* relayd: use UPSTREAM_CHECK_COMMITSPierre-Jean Texier2020-04-041-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status relayd <...> INFO: relayd 0.0.1 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* miniupnpd: Package miniupnpd_functions.shVinothkumar2020-04-021-0/+1
| | | | | | | | Currently miniupnpd.service fails to start without miniupnpd_functions.sh in rootfs Signed-off-by: Vinothkumar <vinothkumar_baskaran@comcast.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: upgrade 1.7.5 -> 1.7.6Wang Mingyu2020-03-311-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: don't download LFS content by defaultChangqing Li2020-03-261-1/+1
| | | | | | | | | | | | | fix error: Fetcher failure: Repository git://github.com/FreeRADIUS/freeradius-server.git has LFS content, install git-lfs on host to download (or set lfs=0 to ignore it) upstream has file .lfsconfig to make it not download lfs files by default, so we also don't download it by default Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ufw: fix upstream check URLPierre-Jean Texier2020-03-231-0/+3
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status ufw <...> INFO: ufw 0.33 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: upgrade 1.11 -> 1.12Wang Mingyu2020-03-201-3/+3
| | | | | | | -License-Update: Copyright year updated to 2020. Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: Make PACKAGECONFIG gnome workAndreas Müller2020-03-181-1/+12
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.8.10 -> 1.8.12Andreas Müller2020-03-181-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | >From [1]: ======================================================= NetworkManager-openvpn-1.8.12 Overview of changes since NetworkManager-openvpn-1.8.10 ======================================================= * The auth helper in external UI mode can now be run without a display server. Future nmcli version will utilize this for handling the secrets without a graphical desktop. * libnm-glib compatibility (NetworkManager < 1.0) is disabled by default. It can be enabled by passing --with-libnm-glib to configure script. Nobody should need it by now. Users that still use this are encouraged to let us know before the libnm-glib support is removed for good. * Add support for the following OpenVPN options: tls-version-min, tls-version-max, compress. * Support inline CRL blobs during import. * Allow option mssfix to be set to zero. * Update Catalan, Czech, Danish, Dutch, Friulian, Hungarian, Indonesian, Italian, Polish, Serbian, Spanish, Swedish and Ukrainian translations. [1] http://ftp.gnome.org/pub/gnome/sources/NetworkManager-openvpn/1.8/NetworkManager-openvpn-1.8.12.news Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Upgrade 1.22.8 -> 1.22.10Adrian Bunk2020-03-181-2/+1
| | | | | | | Upgrade on the 1.22 stable branch. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: upgrade 1.7.4 -> 1.7.5Wang Mingyu2020-03-101-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: do not enable srv by defaultGianfranco Costamagna2020-03-081-1/+1
| | | | | | | | | | | Rationale can be found in the Debian packaging (debian/changelog): Revert change enabling SRV functionality, it is disabled by default upstream and of little benefit to any end user, but adds reasonable complexity to the code. Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: refresh patches and sync with Debian packagingGianfranco Costamagna2020-03-083-3/+16
| | | | | | | | Also add patch from debian to mqtt_protocol.h header file Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Upgrade 1.18.4 -> 1.22.8Adrian2020-03-087-57/+159
| | | | | | | | | | | | | - rebased patches - added two more small patches - Option --enable-polkit-agent is not available with current NM, removed - Option --with-libnm-glib is not available with current NM, removed - New package NM-cloud-setup for new experimental cloud setup feature - NM tries to re-license from GPL to LGPL, added LGPL to LICENSES - Removed empty packages libnmutil libnmglib libnmglib-vpn Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdnet: make dnet-config a multilib_scriptJeremy Puhlman2020-03-061-1/+3
| | | | | | | Script encodes library paths. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: upgrade 1.6.8 -> 1.6.9Pierre-Jean Texier2020-03-024-136/+2
| | | | | | | | | | Bugfix release. For details, see: https://mosquitto.org/blog/2020/02/version-1-6-9-released/ Also remove patches applied upstream. Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
* kea: upgrade 1.7.3 -> 1.7.4Zheng Ruoqin2020-02-241-3/+3
| | | | | | | -License-Update: Copyright year updated to 2020. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: upgrade 8.1.5 -> 8.1.6Zheng Ruoqin2020-02-241-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 2.16.3 -> 2.16.5Pierre-Jean Texier2020-02-211-2/+2
| | | | | | | | | | Mbed TLS 2.16.5 is a maintenance release of the Mbed TLS 2.16 branch, and provides security fixes and bug fixes, see: https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.5-and-2.7.14-released Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: add native and nativesdk to BBCLASSEXTENDPierre-Jean Texier2020-02-201-0/+2
| | | | | | | | | Fixes: ERROR: Nothing PROVIDES 'mbedtls-native' Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: rdep on python3 version of pyflakesKhem Raj2020-02-171-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openconnect: use target path to scriptMax Krummenacher2020-02-161-2/+2
| | | | | | | | | | | openconnect puts the default absolute path to the vpnc-script into its binary from the --with-vpnc-script configure options. So do not prepend the value with the path to the OE sysroot. RDEPEND on vpnc-script to have the script from vpnc installed on target. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openconnect: build with python3Max Krummenacher2020-02-162-7/+76
| | | | | Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vpnc: splitout the vpnc-script into its own packageMax Krummenacher2020-02-161-1/+5
| | | | | | | | The vpnc-script can be used unchanged with the openconnect package. Provide it in its own package and make vpnc RDEPEND on it. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.11 -> 4.10.13Yi Zhao2020-02-131-2/+2
| | | | | | | | Changelog: https://www.samba.org/samba/history/samba-4.10.13.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: Use mosquitto.init for daemon initMike Krupicka2020-02-111-1/+1
| | | | | | Config file specification is missing in start) case. It is present already in restart) case. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: upgrade 3.0.19 -> 3.0.20Yi Zhao2020-02-063-120/+77
| | | | | | | | | | | * Drop backported patch: 0001-su-to-radiusd-user-group-when-rotating-logs.patch * Disable python2 module build and add PACKAGECONFIG for python3 module build Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lftp: upgrade 4.9.0 -> 4.9.1Trevor Gamblin2020-02-041-2/+2
| | | | | Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nng: Add recipeTom Rini2020-02-031-0/+21
| | | | | | | | | | | | nng is the nanomsg project's rewrite of their libnanomsg library. Just like nanomsg it is a socket library that provides several common communication patterns. Unlike nanomsg it does not normally provide a number of tools and we do not attempt to add them here. We allow for optional mbedtls support. Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: apply upstream proposed patches to use cmake build system,Gianfranco Costamagna2020-01-255-27/+173
| | | | | | | | | simplifying a lot the build and install process. Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <gianfranco.costamagna@abinsula.com> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.7.2 -> 0.7.3Pierre-Jean Texier2020-01-241-2/+2
| | | | | | | See full changelog https://github.com/firewalld/firewalld/releases/tag/v0.7.3 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crda: Fix build with python3Khem Raj2020-01-222-1/+103
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-networking: Remove using python2Khem Raj2020-01-224-8/+8
| | | | | | | This change makes the parsing go though, we still might have build issues, which will be reported in world builds seprately Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: upgrade 8.1.1 -> 8.1.5Zang Ruochen2020-01-152-38/+3
| | | | | | | | -files/0001-dhcpcd-Fix-build-error-with-musl.patch Removed since this is included in 8.1.5. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crda: fix UDEV_RULE_DIRYi Zhao2020-01-141-1/+1
| | | | | | | The default UDEV_RULE_DIR is ${nonarch_base_libdir}. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: upgrade 1.7.2 -> 1.7.3Wang Mingyu2020-01-061-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 4.2.0 -> 4.3.0Wang Mingyu2020-01-061-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lftp: upgrade 4.8.4 -> 4.9.0Wang Mingyu2020-01-062-49/+3
| | | | | | | | fix-gcc-6-conflicts-signbit.patch Removed since they are included in 4.9.0 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.10 -> 4.10.11Yi Zhao2020-01-061-2/+2
| | | | | | | | | | | | | | Security fixes: CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server (dnsserver). CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC. See: https://www.samba.org/samba/history/samba-4.10.11.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: disable guest access and anonymous queriesTrevor Gamblin2019-12-251-1/+5
| | | | | | | | | | | | | | | | | | Guest accounts for Samba are a known potential vulnerability (see https://www.tenable.com/plugins/nessus/26919) where info about the host can be obtained without proper access. The option "map to guest = bad user" allows login attempts with usernames that don't exist to map to the guest account, while the "restrict anonymous" value (implicitly set to 0 before this patch) would allow any queries to obtain user and group list information. Raise the default security level by setting "restrict anonymous" to "1" and "map to guest" to "never" to avoid providing user/group info to unauthenticated users and reject login attempts with an invalid password, respectively. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cannelloni: Include stdexcept for runtime_errorKhem Raj2019-12-232-0/+33
| | | | | | | | | Fixes error: 'runtime_error' is not a member of 'std' throw std::runtime_error("Allocation error."); ^~~~~~~~~~~~~ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: Upgrade to latest tipKhem Raj2019-12-201-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>