summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity
Commit message (Collapse)AuthorAgeFilesLines
...
* nng: upgrade 1.5.2 -> 12Khem Raj2023-11-061-0/+0
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 3.4.1 -> 3.5.0Beniamin Sandu2023-10-304-70/+89
| | | | | | | | | | | | | * Includes security fix for CVE-2023-43615 - Buffer overread in TLS stream cipher suites * Includes security fix for CVE-2023-45199 - Buffer overflow in TLS handshake parsing with ECDH * Includes aesce compilation fixes Full changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.5.0 The extra patch fixes x86 32-bit builds. Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* network-manager-applet,networkmanager-openvpn, networkmanager: Apply linker ↵Khem Raj2023-10-283-2/+2
| | | | | | | | | versioning patch when using lld only This patch caused GNU linker to fail linking, therefore limit it to just lld. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: Support building for native againPeter Kjellerstedt2023-10-261-0/+2
| | | | | | | | | | Support for building from native was removed in commit e1b332f2e (meta-networking: Drop broken BBCLASSEXTEND variants), most likely due to no support for building libwebsockets-native. That support has now been added, so it is now possible to build mosquitto-native again. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-networking: Drop broken BBCLASSEXTEND variantsRichard Purdie2023-10-241-2/+0
| | | | | | | | | | | | | | | | | | The command "bitbake universe -c fetch" currently throws a ton of warnings as there are many 'impossible' dependencies. In some cases these variants may never have worked and were just added by copy and paste of recipes. In some cases they once clearly did work but became broken somewhere along the way. Users may also be carrying local bbappend files which add further BBCLASSEXTEND. Having universe fetch work without warnings is desireable so clean up the broken variants. Anyone actually needing something dropped here can propose adding it and the correct functional dependencies back quite easily. This also then ensures we're not carrying or fixing things nobody uses. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba.bb : Disable ad-dc by defaultFabien Thomas2023-10-191-1/+1
| | | | | | | | | | | | When this feature is enabled by default in packageconfig this implies a dependency to python3-dnspython which is in meta-python. Disable ac-dc PACKAGECONFIG by default to avoid adding a layer dependency only for this feature. Signed-off-by: Fabien Thomas <fabien.thomas@smile.fr> Reviewed-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: use external cmocka instead of bundled cmockaYi Zhao2023-10-122-54/+2
| | | | | | | | Do not use bundled cmocka to get rid of bundled library libcmocka-samba4.so. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.18.6 -> 4.18.8Yi Zhao2023-10-121-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a security release in order to address the following defects: CVE-2023-3961: Unsanitized pipe names allow SMB clients to connect as root to existing unix domain sockets on the file system. https://www.samba.org/samba/security/CVE-2023-3961.html CVE-2023-4091: SMB client can truncate files to 0 bytes by opening files with OVERWRITE disposition when using the acl_xattr Samba VFS module with the smb.conf setting "acl_xattr:ignore system acls = yes" https://www.samba.org/samba/security/CVE-2023-4091.html CVE-2023-4154: An RODC and a user with the GET_CHANGES right can view all attributes, including secrets and passwords. Additionally, the access check fails open on error conditions. https://www.samba.org/samba/security/CVE-2023-4154.html CVE-2023-42669: Calls to the rpcecho server on the AD DC can request that the server block for a user-defined amount of time, denying service. https://www.samba.org/samba/security/CVE-2023-42669.html CVE-2023-42670: Samba can be made to start multiple incompatible RPC listeners, disrupting service on the AD DC. https://www.samba.org/samba/security/CVE-2023-42670.html Release Notes: https://www.samba.org/samba/history/samba-4.18.8.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes-connectivity: Add tayga recipePawel Langowski2023-10-044-0/+154
| | | | | | | Recipe for TAYGA - an out-of-kernel stateless NAT64 implementation for Linux Signed-off-by: Pawel Langowski <pawel.langowski@3mdeb.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* relayd: Fix build with clangKhem Raj2023-10-021-0/+2
| | | | | | GNU extention is now in use in 6.5 kernel headers sadly Signed-off-by: Khem Raj <raj.khem@gmail.com>
* relayd: Update to latest tip of trunkKhem Raj2023-10-022-38/+2
| | | | | | Drop the patch fixing an issue already addressed upstream Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto, etcd-cpp-apiv3: add missing Upstream-StatusMartin Jansa2023-09-272-0/+4
| | | | | Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-tweaks, networkmanager-fortisslvpn, libesmtp, json-schema-validator, ↵Martin Jansa2023-09-272-2/+2
| | | | | | | | | | | | | | | | | python3-pybluez, python3-pynetlinux, apache2: Fix Malformed Upstream-Status * Accepted was replaced with Backport in gatesgarth: https://docs.yoctoproject.org/migration-guides/migration-3.2.html#miscellaneous-changes * as detected with oe-core/scripts/contrib/patchreview.py: meta-openembedded $ grep -A 3 Malformed *qa-patches meta-gnome.qa-patches:Malformed Upstream-Status 'Malformed Upstream-Status in patch meta-gnome.qa-patches-/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch meta-gnome.qa-patches-Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status : meta-gnome.qa-patches-Upstream-Status: Accepted [https://gitlab.gnome.org/GNOME/gnome-tweaks/-/commit/dc9701e18775c01d0b69fabaa350147f70096da8]' (/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch) Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: upgrade 2.0.17 -> 2.0.18Gianfranco Costamagna2023-09-263-1/+51
| | | | | | | Add two patches from Debian, pull requests proposed upstream as 2894 and 2895 to make it start only when board is online, and to fix dynamic websockets link failure Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: upgrade 2.0.15 -> 2.0.17Gianfranco Costamagna2023-09-132-11/+11
| | | | | | | Fix for CVE-2023-28366, CVE-2023-0809, CVE-2023-3592 Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: do not automatically depend on dlt-daemon, it's a non-mandatory ↵Gianfranco Costamagna2023-09-121-1/+1
| | | | | | logging system Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openconnect: Fix build with GnuTLS v3.8.1Khem Raj2023-09-072-0/+44
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openconnect: Upgrade to 9.12Khem Raj2023-09-071-2/+2
| | | | | | | License-Update: Update LGPL text to match original license verbatim [1] [1] https://git.infradead.org/users/dwmw2/openconnect.git/commit/8c9a353b4930dc081222ae05b3bcd42d0c78b66f Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 2.28.3 -> 2.28.4Beniamin Sandu2023-09-071-1/+1
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 3.4.0 -> 3.4.1Beniamin Sandu2023-09-073-3/+3
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: Fix build with lld on muslKhem Raj2023-09-032-0/+32
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix build on muslKhem Raj2023-08-312-0/+42
| | | | | | | | musl does not need _IO_stdin_used, since its not provided by toolchain runtime ( crt files ) lld linker complains about undefined global symbol on musl Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.18.5 -> 4.18.6Yi Zhao2023-08-221-1/+1
| | | | | | | | Release Notes: https://www.samba.org/samba/history/samba-4.18.6.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.42.8 -> 1.44.0Wang Mingyu2023-08-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== * Introduce a new "link" setting that holds properties related to the kernel link such as "tx-queue-length", "gso-max-size", "gso-max-segments", "gro-max-size". * Support sending a DHCPv6 prefix delegation hint via the "ipv6.dhcp-pd-hint" connection property. * Support new bond options: "arp_missed_max", "lacp_active", "ns_ip6_target". * Add new "initial-eps-bearer-configure" and "initial-eps-bearer-apn" properties in the GSM setting. * Setting "connection.stable-id=default${CONNECTION}" changed behavior to be identical to the built-in default value when the stable-id is not set. * Add a "[keyfile].rename" option to NetworkManager.conf to force renaming profiles on disk when their name changes. * The ifcfg-rh plugin is deprecated; it will only receive bugfixes and no new features. A warning is emitted the log when a connection in ifcfg-rh format is found. * To automatically migrate existing ifcfg-rh connections to the keyfile format, a new configuration option "main.migrate-ifcfg-rh" is provided. Migration is disabled by default, but the default value can be changed at build time via "--with-config-migrate-ifcfg-rh-default=yes". * When configuring hostnames in non-public TLD (like "example.local"), use the TLD as default search domain instead of the full hostname. * Always apply DNS options from the [global-dns] configuration section * The NetworkManager daemon now acquires the D-Bus name only after populating the D-Bus tree. This can add a delay during startup but it is required to avoid race conditions with other services depending on NM. * Add a "version-id" argument to the Update2() D-Bus call to guard against concurrent modifications of profiles. * Don't use tentative IPv6 addresses to resolve the system hostname via DNS. * Track the number of autoconnect retries left for each device and connection. Previously it was tracked only per connection and this lead to unexpected behaviors in case of multiconnect profiles. * Set VLAN filtering options on bridge via netlink instead of sysfs. * nm-cloud-setup now supports IMDSv2 on Amazon EC2. * nmtui now allows to enable or disable Wi-Fi and WWAN radios. * Honor ignore-carrier=no for bond/bridge/team devices. * Add version mismatch warning when running nmcli commands. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* remove unused AUTHOR variableMichael Opdenacker2023-08-032-2/+0
| | | | | | | | | No longer used in generating packages Also creates a possible confusion with the recipe maintainer name. Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cve_check: fix conversion errorsPeter Marko2023-07-312-3/+3
| | | | | | | | Conversion from CVE_CHECK_IGNORE to CVE_STATUS had some copy+paste issues. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* daq: enable nfq module buildYi Zhao2023-07-282-7/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | NFQ is the new and improved way to process iptables packets. Snort IPS mode requires this module in some cases. Before the patch: $ snort --daq-list Available DAQ modules: pcap(v3): readback live multi unpriv ipfw(v3): live inline multi unpriv dump(v3): readback live inline multi unpriv afpacket(v5): live inline multi unpriv After the patch: $ snort --daq-list Available DAQ modules: pcap(v3): readback live multi unpriv nfq(v7): live inline multi ipfw(v3): live inline multi unpriv dump(v3): readback live inline multi unpriv afpacket(v5): live inline multi unpriv Also update 0001-correct-the-location-of-unistd.h.patch to fix build with musl. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.18.4 -> 4.18.5Yi Zhao2023-07-271-1/+1
| | | | | | | | | | | | | | | This is a security release in order to address the following defects: CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 Release Notes: https://www.samba.org/samba/history/samba-4.18.5.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-275-25/+8
| | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: Pass cross configure flags to bind buildKhem Raj2023-07-151-1/+8
| | | | | | | | | | | | | This ensures that host tools like 'gen' are built for build host and not target. internal bind build supplies its own options to configuring it, where it does not pass --host option and as a result it does not deduce it to be a cross compile and hence these variables are not set property inside bind build Fixes | ./gen: /usr/lib/libc.so.6: version `GLIBC_2.38' not found (required by ./gen) Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.18.3 -> 4.18.4Yi Zhao2023-07-121-1/+1
| | | | | | | | Release Notes: https://www.samba.org/samba/history/samba-4.18.4.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: Add systemd unit fileMingli Yu2023-07-123-2/+31
| | | | | | | | | Add systemd unit file snort.service. Reference: https://salsa.debian.org/lts-team/packages/snort/-/blob/debian/buster/debian/snort.service.example Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.42.6 -> 1.42.8Petr Gotthard2023-07-051-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ========== * Add support for ppp 2.5.0. * Fix nft rules for balance-slb bonding. * Support port priority for bonding. * Fix regression handling the PKEY_ID for infiniband profiles in ifcfg-rh format. * Fix race in nm-cloud-setup that caused partial configuration and loss of connectivity with multiple interfaces. * Don't touch "net.ipv6.conf.$IFACE.forwarding" unless explicitly required for IPv6 sharing. * Various bugfixes related to team, Wi-Fi P2P, IPv6LL. * Automatically unblock autoconnect of profiles during reapply. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 2.28.2 -> 2.28.3Yi Zhao2023-06-281-1/+7
| | | | | | | | | | | Mbed TLS 2.28 is a long-time support branch. It will be supported with bug-fixes and security fixes until end of 2024. ChangeLog: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.3 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openfortivpn: upgrade 1.20.3 -> 1.20.5Wang Mingyu2023-06-271-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: fix builds with crypto extensionsBeniamin Sandu2023-06-263-5/+70
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* *.patch: add Upstream-Status to all patchesMartin Jansa2023-06-2122-0/+44
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: add support for v3.xBeniamin Sandu2023-06-191-0/+85
| | | | | | | | | | Version 3.4.0 adds a lot of improvements and fixes (a notable one being initial support for PKCS7 CMS), but since this is a pretty big jump, let's keep both versions for a while, so the v2.x users can upgrade to 3.x in a timely manner if needed. Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.18.2 -> 4.18.3Wang Mingyu2023-06-051-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: fix REQUIRED_DISTRO_FEATURES gobject-introspection-dataPetr Gotthard2023-06-011-1/+1
| | | | | | | | This fixes the commit 1f04864065ec1cbd4b835ad47cbc50ff6ebc8e30. The correct DISTRO_FEATURE is gobject-introspection-data. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vlan: Pass CFLAGS via CCFLAGSKhem Raj2023-05-261-1/+1
| | | | | | | | | | CCFLAGS is used in Make rules which will ensure file remapping options are used when compiling Fixes WARNING: vlan-1.9-r0 do_package_qa: QA Issue: File /usr/sbin/.debug/vconfig.vlan in package vlan-dbg contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: add dependency on pyhthon3-pygobject-nativeRoss Burton2023-05-261-0/+1
| | | | | | | | The build of NM involves running Python that uses PyGObject, so add that to DEPENDS. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: add features_check on gobject-introspection-dataRoss Burton2023-05-251-1/+3
| | | | | | | This project uses gobject-introspection, so depend on the DISTRO_FEATURE. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: dev subpackage conflicts with bind-devZhang Xiao2023-05-241-0/+3
| | | | | | | | dhcp-relay contains a bundled bind thus their development packages conflict each other. Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Turn ppp support into a packageconfig optionThomas Perrot2023-05-231-1/+1
| | | | | | | Enable it only if ppp is in distro features Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openconnect: add new recipePetr Gotthard2023-05-151-0/+46
| | | | | | | | Integration of the OpenConnect VPN client to the NetworkManager https://gitlab.gnome.org/GNOME/NetworkManager-openconnect Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-fortisslvpn: add new recipePetr Gotthard2023-05-143-0/+410
| | | | | | | | Fortinet SSLVPN support for NetworkManager https://gitlab.gnome.org/GNOME/NetworkManager-fortisslvpn Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openfortivpn: add new recipePetr Gotthard2023-05-131-0/+26
| | | | | | | | A client for PPP+SSL VPN tunnel services, compatible with Fortinet VPNs. https://github.com/adrienverge/openfortivpn Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.18.1 -> 4.18.2Wang Mingyu2023-04-231-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.42.4 -> 1.42.6Wang Mingyu2023-04-231-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ========== * Emit the dhcp-change dispatcher event also after a lease renewal. * Fix assertion failure on DHCP renewal. * Add support for EC2 IMDSv2 in nm-cloud-setup. * Allow setting tunnel flags for ip6gre & ip6gretap connection profiles. * Improve the Wi-Fi hotspot functionality. * Fix setting the Wi-Fi roaming policy based on the number of seen BSSIDs. * Support the "no-aaaa" resolv.conf option. * Some oFono fixes. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-23 08:30:23 +0000