summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity
Commit message (Collapse)AuthorAgeFilesLines
...
* firewalld: add UPSTREAM_CHECK_URICallaghan, Dan2019-09-251-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: update to 1.6.6Leon Anavi2019-09-221-2/+2
| | | | | | | | Fix security vulnerabilities. For further details, see: https://mosquitto.org/blog/2019/09/version-1-6-6-released/ Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.7 -> 4.10.8Yi Zhao2019-09-171-2/+2
| | | | | | | | | | | | Security fixes: CVE-2019-10197: Combination of parameters and permissions can allow user to escape from the share path definition. See: https://www.samba.org/samba/history/samba-4.10.8.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: update to 1.6.5Paul Eggleton2019-09-161-4/+9
| | | | | | | | | | | | | | | | | | A lot of changes upstream since the last upgrade, the highlights: * MQTT v5 protocol support * Performance improvements * New mosquitto_rr (request/response) client * TLS enhancements: OCSP stapling, TLS Engine support, explicit TLS v1.3 support, removed TLS v1.0 support For further details, see https://mosquitto.org/blog/ Additionally, SUMMARY and DESCRIPTION were tidied up as needed. Based upon an earlier upgrade patch by Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Fix configure tests to work with clangKhem Raj2019-09-073-0/+90
| | | | | | | Do not use nested functions ( main inside main ) Use global scope for __thread variables Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: upgrade 3.0.17 -> 3.0.19Changqing Li2019-09-025-258/+32
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Replace EXCLUDE_FROM_WORLD_libc-musl = "1" with COMPATIBLE_HOST_libc-musl = ↵Adrian Bunk2019-08-291-1/+1
| | | | | | | | | | | | 'null' This gives users a proper error message when trying to build a known non-building package. netkit-rsh already had COMPATIBLE_HOST_libc-musl = 'null'. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.6 -> 4.10.7Yi Zhao2019-08-291-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Upgrade 1.18.0 -> 1.18.2Adrian Bunk2019-08-211-3/+2
| | | | | | | Remove a generated file with always changing hash from LIC_FILES_CHKSUM. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: musl now supports secure_getenvAdrian Bunk2019-08-181-9/+0
| | | | | | | | It is no longer necessary to introduce a potential security vulnerability for fixing the musl build. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: add runtime dependency on perlMartin Jansa2019-08-171-1/+1
| | | | | | | | * fixes: ERROR: QA Issue: /usr/bin/radcrypt contained in package freeradius-utils requires /usr/bin/perl, but no providers found in RDEPENDS_freeradius-utils? [file-rdeps] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix typo in nonarch_base_libdirLaszlo Toth2019-08-111-1/+1
| | | | | Signed-off-by: Laszlo Toth <laszlth@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.14 -> 2.9.14.1Yi Zhao2019-08-112-4/+14
| | | | | | | Add volatile conf to create log directory. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: update to 8.0.2Oleksandr Kravchuk2019-08-051-2/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: update to 4.1.0Oleksandr Kravchuk2019-07-301-1/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: Fix build with glibc 2.30Khem Raj2019-07-302-0/+49
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: update to 8.0.1Oleksandr Kravchuk2019-07-281-4/+4
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.13 -> 2.9.14Yi Zhao2019-07-231-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: update to 2.1.1Oleksandr Kravchuk2019-07-222-42/+58
| | | | | | | Removed patch was upstreamed. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: Update to 0.6.3->0.6.4Khem Raj2019-07-212-18/+9
| | | | | | Forward port patch to work with 0.6.4 and update the status Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Use ALTERNATIVES for resolv-conf handling.Drew Moseley2019-07-211-1/+11
| | | | | | | | This brings the networkmanager in sync with how systemd-resolved and connman work. Additionally this allows it to function with a read-only rootFS. Signed-off-by: Drew Moseley <drew.moseley@northern.tech> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.5 -> 4.10.6Yi Zhao2019-07-211-4/+4
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: update to 7.2.3Oleksandr Kravchuk2019-07-181-2/+4
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: fix building with pkgconfigRadovan Scasny2019-07-121-1/+1
| | | | | | | | | PKGCONFIG was used, but not inherited Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Radovan Scasny <radovan.scasny@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* adcli: added new recipe.Zang Ruochen2019-07-112-0/+53
| | | | | | | | | -radiusclient-ng is too old. So, added a substitute. -Has fixed the build on musl. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: enable udev by defaultRadovan Scasny2019-07-101-1/+1
| | | | | Signed-off-by: Radovan Scasny <radovan.scasny@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* miniupnpd: update to 2.1.20190210Oleksandr Kravchuk2019-07-101-3/+3
| | | | | | | License checksum changed due to modified copyright years. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.8.12 -> 4.10.5Changqing Li2019-07-106-89/+203
| | | | | | | | | | | 1. switch to python3, from 4.10.x, samba support both python2 and python3, and from 4.11.x, python2 will be dropped. 2. fix cross-compile problem caused by waf 3. disable lmdb 4. refresh patch Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sethdlc: set PV in filenameOleksandr Kravchuk2019-07-101-3/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Drop bluez4 supportAdrian Bunk2019-07-101-2/+2
| | | | | | | bluez4 was removed from meta-oe 2 years ago. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: Enable thunar support by default but don't rdepend on itAdrian Bunk2019-07-101-1/+2
| | | | | | | | This matches upstream default. The no longer required bbappend in meta-xfce is also removed. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: fix compile-host-path QA issueYi Zhao2019-07-102-0/+61
| | | | | | | | | | | | | | | The Fedora 28+ does not have inbuilt SunRPC support in glibc and is separately availble in tirpc package. So it enables tirpc checking for fedora in configure. Drop this piece of code since we had specify '-ltirpc' in LDFLAGS explicitly. Otherwise it will cause a compile-host-path QA issue if the host is Fedora 28+: cc1: warning: include location "/usr/include/tirpc" is unsafe for cross-compilation [-Wpoison-system-directories] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: update to 7.2.2Oleksandr Kravchuk2019-06-251-6/+4
| | | | | | | | | udev is now enabled by default and is always requested. License checksum changed due to modified copyright year. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: update to 2.16.2Oleksandr Kravchuk2019-06-251-2/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireless-regdb: Remove, was moved to oe-coreAdrian Bunk2019-06-191-42/+0
| | | | | | | | kernel_wireless_regdb.bbclass stays here since it is only required for kernels <= 4.14. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.11.1 -> 2.9.13Yi Zhao2019-06-193-30/+32
| | | | | | | | | | | | | * Add PACKAGECONFIG[appid] for application identification support. * Set the variables 'have_daq_packet_trace' and 'have_daq_verdict_reason' to 'no' since they are only supported in daq 2.2.2 but not in 2.0.6. * Cleanup snort.init script and fix the incorrect argument of mkdir Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openconnect: update to 8.03Oleksandr Kravchuk2019-06-181-3/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: replace -Og with -OMingli Yu2019-06-151-0/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | With below logic in local.conf: MACHINE ??= "qemumips64" MULTILIB_GLOBAL_VARIANTS_append = " libn32" MULTILIBS ?= "multilib:lib32 multilib:libn32" DEFAULTTUNE_virtclass-multilib-lib32 ?= "mips" DEFAULTTUNE_virtclass-multilib-libn32 ?= "mips64-n32" require conf/multilib.conf DEBUG_BUILD = "1" $ bitbake lib32-kea [snip] {standard input}: Assembler messages: {standard input}:305030: Error: branch out of range {standard input}:305041: Error: branch out of range {standard input}:305432: Error: branch out of range {standard input}:305443: Error: branch out of range Makefile:707: recipe for target 'dhcp4_parser.lo' failed make[6]: *** [dhcp4_parser.lo] Error 1 [snip] When DEBUG_BUILD enabled, -Og pass to compiler, replace -Og with -O to fix the above compile error. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireless-regdb: Upgrade 2019.03.01 -> 2019.06.03Adrian Bunk2019-06-151-2/+2
| | | | | | | | This includes deletion of a frequency where transmission is no longer legal in Japan. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Upgrade 4.8.11 -> 4.8.12Adrian Bunk2019-06-151-2/+2
| | | | | | | The only change is the fix for CVE-2018-16860. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba/libldb: add rconflictsChangqing Li2019-05-291-0/+3
| | | | | | | | | | | | | | | samba have bundled libldb, so when both samba and libldb, or both pyldb \ and samba-python is installed, below error will appear: file /usr/bin/ldbadd conflicts between attempted installs of samba-4.8.11-r0.i586 and libldb-1.4.1-r0.i586 file /usr/bin/ldbdel conflicts between attempted installs of samba-4.8.11-r0.i586 and libldb-1.4.1-r0.i586 ... file /usr/lib/python2.7/site-packages/ldb.so conflicts between attempted installs of libpyldb-util1-1.4.1-r0.i586 and samba-python-4.8.11-r0.i586 so add rconflicts for both packages Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Update to 1.18.0Andrei Gherzan2019-05-294-118/+70
| | | | | | | | | | | One patch was dropped (0003-dlopen-failure.patch) as a similar one was merged upstream. See: https://github.com/NetworkManager/NetworkManager/commit/bd4957fcd78a0e64d26459e94ab3b84c91cd6f5f Refreshed musl patches as well. Signed-off-by: Andrei Gherzan <andrei@gherzan.ro> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: Upgrade to 1.5.0Mingli Yu2019-05-243-93/+38
| | | | | | | | | | | | | | | | | | | | | | * License-Update: below text added The ext/coroutine code is externally maintained and distributed under the Boost Software License, Version 1.0. (See its accompanying file LICENSE_1_0.txt.) * There is a new added logic in 1.5.0 to use AC_TRY_RUN to detect usable C++11 regex in below commit: 39ab2f5d15 [5680] Added sanitizeString() function to libutil Use AC_COMPILE_IFELSE instead to fix below do_configure error: | checking for usuable C++11 regex... configure: error: in '/builddir/upgrade1/tmp/work/core2-64-poky-linux/kea/1.5.0-r0/build': | configure: error: cannot run test program while cross compiling * Remove 0001-Fix-error-call-of-overloaded-distance-is-ambiguous.patch as the logic is already included in 1.5.0. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Remove ipsec-tools and umipAdrian Bunk2019-05-238-486/+0
| | | | | | | | | | | | | | | ipsec-tools is dead upstream and upstream recommends against using it: http://ipsec-tools.sourceforge.net/ More detailed explanation from the Debian maintainer: https://bugs.debian.org/917847 umip was the only package depending on ipsec-tools. umip is dormant upstream since 2013. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* umip: make MACHINE_ARCHMartin Jansa2019-05-181-0/+3
| | | | | | | | | | | | | | | | | | * Depends on ipsec-tools which is already MACHINE_ARCH (and also RRECOMMENDS kernel modules) * Fixes: ERROR: umip different signature for task do_configure.sigdata between hammerhead and mako Hash for dependent task umip/umip_1.0.bb.do_prepare_recipe_sysroot changed from 7c74a208880f6c8a5aa46b1c8577e39b6b71429d9a379ea75f17a155ca270035 to 87c6cd438dd9645c98530e3ac1094005bace785bfd89bfe4073bc8815926abba Unable to find matching sigdata for /OE/build/luneos-master/webos-ports/meta-openembedded/meta-networking/recipes-connectivity/umip/umip_1.0.bb.do_prepare_recipe_sysroot with hashes 7c74a208880f6c8a5aa46b1c8577e39b6b71429d9a379ea75f17a155ca270035 or 87c6cd438dd9645c98530e3ac1094005bace785bfd89bfe4073bc8815926abba bitbake-diffsigs /OE/build/luneos-master/webos-ports/tmp-glibc/sstate-diff/1557963509/[hm]*/*/umip/*do_prepare*.sigdata* Hash for dependent task ipsec-tools/ipsec-tools_0.8.2.bb.do_populate_sysroot changed from 1100c4984d88050bb7ca154445205bac3c3ab80c3ff0aa7c9124825c9d4f6e14 to feeddbd35a8106b264c98076e21d0b3cb227ab1d209e150926112b2906273ef4 Unable to find matching sigdata for /OE/build/luneos-master/webos-ports/meta-openembedded/meta-networking/recipes-support/ipsec-tools/ipsec-tools_0.8.2.bb.do_populate_sysroot with hashes 1100c4984d88050bb7ca154445205bac3c3ab80c3ff0aa7c9124825c9d4f6e14 or feeddbd35a8106b264c98076e21d0b3cb227ab1d209e150926112b2906273ef4 as detected with: openembedded-core/scripts/sstate-diff-machines.sh --targets=world --tmpdir=tmp-glibc/ --analyze --machines="hammerhead mako qemux86" Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cannelloni: move from meta-oe to meta-networkingNicolas Dechesne2019-05-131-0/+17
| | | | | | | | | | It has a dependency on lksctp-tools which is available in meta-networking. Move the recipe to avoid dependency from meta-oe onto meta-networking. Signed-off-by: Nicolas Dechesne <nicolas.dechesne@linaro.org> Acked-by: Sean Nyekjaer <sean@geanix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: update to 4.8.11Johannes Pointner2019-05-092-90/+3
| | | | | | | | | | | | | | | | | | | | * This includes security fixes that adresses the following defects: CVE-2018-14629 (Unprivileged adding of CNAME record causing loop in AD Internal DNS server) CVE-2018-16841 (Double-free in Samba AD DC KDC with PKINIT) CVE-2018-16851 (NULL pointer de-reference in Samba AD DC LDAP server) CVE-2018-16853 (Samba AD DC S4U2Self crash in experimental MIT Kerberos configuration (unsupported)) CVE-2019-3880 (Save registry file outside share as unprivileged user) * Upstreamed patch removed: 0001-ldb-Refuse-to-build-Samba-against-a-newer-minor-vers.patch * Extended PACKAGECONFIG ad-dc to be able to build MIT Kerberos see https://bugzilla.samba.org/show_bug.cgi?id=13678 Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* miniupnpd: fix SRC_URI for multilibMartin Jansa2019-05-021-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: add PACKAGECONFIG for libunwindWenlin Kang2019-04-301-0/+1
| | | | | | | | | Add libunwind switch, this makes it have a chance to compile codes which are conditioned by "HAVE_LIBUNWIND_H" Signed-off-by: Wenlin Kang <wenlin.kang@windriver.com> Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: update to 1.8.10Oleksandr Kravchuk2019-04-291-2/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>