summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-protocols
Commit message (Collapse)AuthorAgeFilesLines
* frr: fix CVEs CVE-2023-4675{2,3} and CVE-2023-4723{4,5}Jonas Gorski2024-01-055-0/+455
| | | | | | | | | | | | | | | | | | | Add patches fixing CVE CVE-2023-46752, CVE-2023-46753, CVE-2023-47234, and CVE-2023-47235 to FRR 9.0. Patch order is commit order, not CVE numerical order, to avoid fuzz / need for rebasing of the patches. References: https://nvd.nist.gov/vuln/detail/CVE-2023-46752 https://nvd.nist.gov/vuln/detail/CVE-2023-46753 https://nvd.nist.gov/vuln/detail/CVE-2023-47234 https://nvd.nist.gov/vuln/detail/CVE-2023-47235 Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 00e928bcb7e933ada8e67f3bfa887988d1ca9d61) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* open62541: add Backport status and link to patchJohannes Kauffmann2023-10-121-1/+1
| | | | | | | Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0287a38fbcead63a16d8b6d931d5e0e70adfe494) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mdns: Upgrade 1790.80.10 -> 2200.0.8Alex Kiernan2023-10-045-43/+72
| | | | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8ffef53d6a491e154d9cbc83b766e65825120c80) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* frr: upgrade 8.4.4 -> 9.0.1Jonas Gorski2023-09-226-237/+67
| | | | | | | | | | | | | | | | | | Upgrade FRR to 9.0.1: * drop all existing patches since they are included in 9.0.1 * add a patch fixing (harmless) error messages in log * license files moved to doc/licenses * protobuf-c-native (for protoc) and protobuf-c are now needed Changelogs: https://github.com/FRRouting/frr/releases/tag/frr-9.0.1 https://github.com/FRRouting/frr/commit/31ed3dd753d62b5d8916998bc32814007e91364b https://github.com/FRRouting/frr/releases/tag/frr-9.0 https://github.com/FRRouting/frr/commit/2863e7efbcd0cbfbd41d3be04c660d77df65d0ea Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vsomeip: add recipeYi Zhao2023-09-075-0/+335
| | | | | | | | | | | | | | | | The vsomeip stack implements the http://some-ip.com/ (Scalable service-Oriented MiddlewarE over IP (SOME/IP)) protocol. The stack consists out of: a shared library for SOME/IP (libvsomeip3.so) a shared library for SOME/IP's configuration module (libvsomeip3-cfg.so) a shared library for SOME/IP's service discovery (libvsomeip3-sd.so) a shared library for SOME/IP's E2E protection module (libvsomeip3-e2e.so) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Fix CVE-2023-41358 and CVE-2023-41360Robert Yang2023-09-073-0/+143
| | | | | | | | | | | Backport patches to fix CVE-2023-41358 and CVE-2023-41360. References: https://nvd.nist.gov/vuln/detail/CVE-2023-41358 https://nvd.nist.gov/vuln/detail/CVE-2023-41360 Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Security fix CVE-2023-3748Yi Zhao2023-08-282-0/+55
| | | | | | | | | | | | | | | | | | | CVE-2023-3748: A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages with the unicast flag set, the interval field set to 0, or any TLV that contains a sub-TLV with the Mandatory flag set to enter an infinite loop and cause a denial of service. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-3748 Patch from: https://github.com/FRRouting/frr/commit/ae1e0e1fed77716bc06f181ad68c4433fb5523d0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* remove unused AUTHOR variableMichael Opdenacker2023-08-031-1/+0
| | | | | | | | | No longer used in generating packages Also creates a possible confusion with the recipe maintainer name. Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* babeld: upgrade 1.12.2 -> 1.13.1Wang Mingyu2023-08-011-1/+1
| | | | | | | | | | | | | | | | | Changelog: ========== * Implemented the per-interface option "probe-mtu", which automatically discards links with a mis-configured MTU. * Fixed a typo in the handing of the option "v4viav6". * Removed diversity support and related configuration file directives. * Optimised route redistribution. We now install just the route that the kernel sent us rather than doing a full route dump on every change. * Added optional delay to daemon shutdown; see the configuration option "shutdown-delay-ms". * Fixed compilation under BSD. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-272-20/+14
| | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 8.4.2 -> 8.4.4Yi Zhao2023-06-281-1/+1
| | | | | | | | | ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.4 https://github.com/FRRouting/frr/commit/45e36c0c00a517ad1606135b18c5753e210cfc0d Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* *.patch: add Upstream-Status to all patchesMartin Jansa2023-06-2121-0/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: remove unneeded headersBeniamin Sandu2023-06-192-0/+34
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: allow disabling subscriptionsJohannes Kauffmann2023-06-141-1/+3
| | | | | | | By default, subscriptions are turned on. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: add multithreading PACKAGECONFIG optionJohannes Kauffmann2023-06-141-0/+1
| | | | | | | | By default, open62541 is built without multithreading support. Make this configurable. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: build optimized binaryJohannes Kauffmann2023-06-051-0/+1
| | | | | | | Without any build type specified, open62541 defaults to "Debug". Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: update to v1.3.6Johannes Kauffmann2023-05-311-1/+1
| | | | | | | Since v1.3.4, support for OpenSSL 3.0 has been added. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* zeroconf: Pass cflags from environmentKhem Raj2023-05-261-0/+2
| | | | | | | Fixes WARNING: zeroconf-0.9-r1 do_package_qa: QA Issue: File /usr/sbin/.debug/zeroconf in package zeroconf-dbg contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: add OpenSSL as crypto providerJohannes Kauffmann2023-05-231-1/+2
| | | | | | | | Since multiple crypto provider aren't supported simultaneously, the mbedtls packageconfig conflicts with the openssl packgeconfig. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: rename encryption PACKAGECONFIGJohannes Kauffmann2023-05-231-2/+2
| | | | | | | ... in anticipation for OpenSSL as crypto provider. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* babeld: Upgrade to 1.12.2Khem Raj2023-05-231-1/+3
| | | | | | | Fix buildpath QA errors while here by passing bitbake provided cflags to build env Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: disable warnings as errorsJohannes Kauffmann2023-05-091-0/+1
| | | | | | | | | When using OpenSSL as the encryption provider, the package does not build without deprecation warnings, thus breaking the build. Disable warnings as errors to unbreak the build. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: allow overriding encryption providersJohannes Kauffmann2023-05-091-1/+1
| | | | | | | | | | | | | | | | | | | Without "encryption" PACKAGECONFIG, the option UA_ENABLE_ENCRYPTION=OFF is passed, which disables encryption support altogether and makes it impossible to override the encryption provider. Since no encryption support is already the default, we don't have to specify anthing to disable encryption. Additionally, explicitly specify MbedTLS as the encryption provider; this is the preferred way to enable any one of the three supported providers (LibreSSL, OpenSSL or MbedTLS). The current method prints a deprecation warning: CMake Deprecation Warning at CMakeLists.txt:200 (message): Set UA_ENABLE_ENCRYPTION to the desired encryption library. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: add CVE_PRODUCTChen Qi2023-05-081-0/+2
| | | | | | | The CVE_PRODUCT is frrouting in NVD database. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freediameter: fix typo and old overide syntaxBergin, Peter2023-05-021-1/+1
| | | | | | | | | | A typo that probably caused a left over from override syntax conversion. INITSCRIPT_PARAMS$_${PN} --> INITSCRIPT_PARAMS:${PN} Signed-off-by: Peter Bergin <peter.bergin@windriver.com> Signed-off-by: Peter Bergin <peter@berginkonsult.se> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* radiusclient-ng: Point SRC_URI to archive.ubuntu.comKhem Raj2023-05-011-2/+1
| | | | | | This tarball is not available on debian ftp archive anymore Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rp-pppoe: Point SRC_URI to valid locationKhem Raj2023-04-301-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rp-pppoe: Define _GNU_SOURCEKhem Raj2023-03-221-0/+3
| | | | | | Ensures that it picks up definitions of strlcpy() from string.h Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rp-pppoe: upgrade 3.14 -> 3.15Wang Mingyu2023-03-094-122/+16
| | | | | | | | | | | | dont-swallow-errors.patch configure.in-Error-fix.patch removed since they're not available in 3.14. configure_in_cross.patch refreshed for 3.14. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: support more archesYi Zhao2023-03-081-9/+1
| | | | | | | Now frr can support more arches as libyang can be built on all arches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: drop recipeYi Zhao2023-03-0516-694/+0
| | | | | | | | | | | | | | | Quagga is no longer maintained since 2018[1]. Its official repository is not even available[2]. As an alternative, users can use FRRouting[3] which has been added to meta-networking[4]. [1] https://github.com/Quagga/quagga [2] https://git.savannah.gnu.org/cgit/quagga.git [3] https://frrouting.org [4] https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/frr Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: add UPSTREAM_CHECK_GITTAGREGEXYi Zhao2023-03-051-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version frr INFO: Current version: 8.4.2 INFO: Latest version: 9.0 INFO: Latest version's commit: 16c38045b1a84f899da473398779cc593d82d2bd Version 9.0 is a development tag[1]. After the patch: $ devtool latest-version frr INFO: Current version: 8.4.2 INFO: Latest version: 8.4.2 INFO: Latest version's commit: 9e25d07412e92bdcd1f69c4755dc7564b23023c0 [1] https://github.com/FRRouting/frr/tags Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* .patch: fix Upstream-Status formatting issues reported by patchreview tool ↵Martin Jansa2023-02-247-20/+20
| | | | | | | from oe-core Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: CVE-2022-44792 & CVE-2022-44793 Fix NULL Pointer ExceptionNarpat Mali2023-02-092-0/+122
| | | | | | | | | References: https://nvd.nist.gov/vuln/detail/CVE-2022-44792 https://nvd.nist.gov/vuln/detail/CVE-2022-44793 Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 8.4.1 -> 8.4.2Yi Zhao2023-02-072-1/+2
| | | | | | | | | | | | | | ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.2 Per [1], update frr.pam to eliminate the warning issued by pam: vtysh[485]: pam_warn(frr:account): function=[pam_sm_acct_mgmt] flags=0 service=[frr] terminal=[<unknown>] user=[root] ruser=[<unknown>] rhost=[<unknown>] [1] https://github.com/FRRouting/frr/commit/6031b8a3224cde14fd1df6e60855310f97942ff9 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Upgrade 1790.60.25 -> 1790.80.10Alex Kiernan2023-02-031-1/+1
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dante: Add -P to preprocessor flagsKhem Raj2023-01-291-0/+1
| | | | | | | | | | | | | | | | | | | configure uses AC_PREPROC_IFELSE to check for certain errors from getaddrinfo() it user search operation in a preprocessed file UNIQUEVALS=`sort $ERRVALFILE | uniq | wc -l | awk '{ print $1 }'` However, line numbers are generated into the preprocesser files and they get sorted higher than numbers gaierrval: # 130 "conftest.c" 3 4 -3 -P ensures that line numbers are not generated into preprocessed files, so these checks can succeed. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* .patch: fix Upstream-Status formatting issues reported by patchreview tool ↵Martin Jansa2023-01-272-2/+2
| | | | | | | from oe-core Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Fix build with clang16Khem Raj2023-01-212-0/+33
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Upgrade 1790.40.31 -> 1790.60.25Alex Kiernan2022-12-141-2/+2
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Set MDNS_VERSIONSTR_NODTSAlex Kiernan2022-12-141-0/+4
| | | | | | | | MDNS_VERSIONSTR_NODTS disables __DATE__ and __TIME__ in the version string, which are fixed anyway for build reproducibility. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 8.3.1 -> 8.4.1Yi Zhao2022-12-146-282/+9
| | | | | | | | | | Drop backport patches. ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Upgrade 1310.140.1 -> 1790.40.31Alex Kiernan2022-12-0923-557/+707
| | | | | | | | | | | | | | | | | | | | | | | | Reinstate and rework patches from @garmin.com dropped in 21afab4609d0 ("mdns: update to version 1096.40.7") as these were the functional pieces of this series; we should either maintain it as a whole or drop it in its entirety. With this update and without this series, steady-state operation is a constant churn of all names being removed and re-added every few seconds. These were refactored to handle the move to getifaddrs() from get_ifi_info(). Check and cleanup all the other patches, much of which was redundant. Move source releases to github which is where the Apple site now redirects to (though these are still effectively just tarball dumps into git). Cleanup the recipe so it doesn't override all the packaging defaults. Fixup musl installs so they don't fail attempting to patch a non-existent /etc/nsswitch.conf. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: add a patch to correctly check presence of python from pkg-configAlexander Kanavin2022-11-102-1/+30
| | | | | Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Security fix CVE-2022-37032Yi Zhao2022-10-122-0/+44
| | | | | | | | | | | | | | | | CVE-2022-37032: An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-37032 Patch from: https://github.com/FRRouting/frr/commit/066770ac1c69ee5b484bb82581b22ad0423b004d Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: Disable lto on riscv/clangKhem Raj2022-10-041-0/+9
| | | | | | | | | | clang errors out linking lto objects riscv64-yoe-linux-musl-ld: /tmp/lto-llvm-d497c5.o: can't link soft-float modules with double-float modules This is something needs to be addressed in clang for riscv as of now disable lto for rv32/rv64 when using clang Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opcua: Add new recipeVyacheslav Yurkov2022-10-032-0/+60
| | | | | | | | | | | | open62541 (http://open62541.org) is an open source and free implementation of OPC Unified Architecture according to IEC62541 standard The patch exclude git-related files from installation directory Upstream-Status: Accepted https://github.com/open62541/open62541/commit/a0328d4cb527f9778a262fc4a6b42bfbdffc38e9 Signed-off-by: Vyacheslav Yurkov <v.yurkov@precitec.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 8.2.2 -> 8.3.1Yi Zhao2022-09-294-3/+206
| | | | | | | | Backport patches to fix build error with --disable-ospfapi and CVE-2022-37035. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: Fix AC_CHECK_LIB for libreadlineKhem Raj2022-09-012-0/+34
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Fix configure check for libreadlineKhem Raj2022-09-012-0/+31
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-23 23:16:48 +0000