summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
...
* tinyproxy: Install a default tinyproxy.confStefan Lendl2020-01-112-2/+335
| | | | | | | sets the correct user tinyproxy and group nogroup Signed-off-by: Stefan Lendl <sll@mission-embedded.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: CVE-2019-14834Zhixiong Chi2020-01-102-0/+50
| | | | | | | Backport the CVE patch from the upstream to fix the memory leak. Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Enable plugins when enabling qt5Khem Raj2020-01-091-1/+1
| | | | | | | | | | | | | | | | plugins tab and about dialog have created dependency with commit[1] this fails to build when qt5 is in bblayers Fixes wireshark-3.2.0/ui/qt/about_dialog.cpp:137:29: error: 'plugins_add_description' was not declared in this scope; did you mean 'plugins_get_descriptions'? 137 | extcap_get_descriptions(plugins_add_description, &plugin_data); | ^~~~~~~~~~~~~~~~~~~~~~~ | plugins_get_descriptions [1] https://github.com/wireshark/wireshark/commit/5dfde7ff83a35bb7186cd05ce61f4b139ab01203 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.0.7 -> 3.2.0Wang Mingyu2020-01-071-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: upgrade 1.39.2 -> 1.40.0Wang Mingyu2020-01-061-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipvsadm: upgrade 1.30 -> 1.31Wang Mingyu2020-01-061-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.8.1 -> 5.8.2Wang Mingyu2020-01-031-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: restrict NTP mode 6 queriesYi Zhao2020-01-031-1/+5
| | | | | | | | | | | | | | | | The current NTP server responds to mode 6 queries from any clients. Devices that respond to these queries have the potential to be used in NTP amplification attacks. An unauthenticated, remote attacker could potentially exploit this, via a specially crafted mode 6 query, to cause a reflected denial of service condition. See: https://www.tenable.com/plugins/nessus/97861 https://scan.shadowserver.org/ntpversion/ Update ntp.conf to restrict NTP mode 6 queries. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netcat: Fix build with gettext 0.20.xKhem Raj2020-01-012-0/+17
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: bump to version 5.56William A. Kennington III via Openembedded-devel2019-12-301-3/+3
| | | | | | | | | | | Release notes of the bugfix release: - https://www.stunnel.org/NEWS.html Also: - rename COPYING to COPYING.md Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ruli: Fix implicit conversion from 'unsigned int' to 'float'Khem Raj2019-12-292-0/+20
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade to 1.5.20Khem Raj2019-12-251-2/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ruli: Define OOP_LIB_DIR and INSTALL_LIB_DIRKhem Raj2019-12-201-1/+4
| | | | | | This helps in taking care of multilib install dir Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Replace pthread_yield with sched_yieldKhem Raj2019-12-162-0/+31
| | | | | | | | | | Fixes /usr/src/debug/rdma-core/26.1-r0/git/librdmacm/rsocket.c:3041: undefined reference to `pthread_yield' collect2: error: ld returned 1 exit status Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Kai Kang <kai.kang@windriver.com>
* rdma-core: 18.1 -> 27.0Kai Kang2019-12-166-127/+261
| | | | | | | | | | | | Upgrade rdma-core from 18.1 to 27.0 * remove 4 patches which have been merged by upstream * update context and remove more unbuildable manual in 0001-Remove-man-files-which-cant-be-built.patch * set services file for systemd Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netperf: add "intervals" and "histogram" PACKAGECONFIGsDenys Dmytriyenko2019-12-111-0/+2
| | | | | | | | | | | >From https://hewlettpackard.github.io/netperf/doc/netperf.html: Other optional configure-time settings include --enable-intervals=yes to give netperf the ability to “pace” its _STREAM tests and --enable-histogram=yes to have netperf keep a histogram of interesting times. Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.0.6 -> 3.0.7Wang Mingyu2019-12-101-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: split ntpdc into separate packageAndrej Valek2019-12-051-3/+4
| | | | | | | | A ntpdc is a special NTP query program. It shouldn't be part of ntp-utils which is depending on perl. Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lksctp-tools: Add RRECOMENDS kernel-module-sctp for pkg lksctp-toolsPau Espin Pedrol2019-12-051-0/+1
| | | | | | | | | Previously the kernel module was only pulled in for ${PN}-utils and ${PN}-ptest, but not for the library itself. As a result, appsexternal to this recipe using only the library fail because kernel module is not installed in the image. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq.conf: fix dnsmasq pathChangqing Li2019-11-221-1/+1
| | | | | | | | we install dnsmasq under /usr/bin by default, correct the path in comments. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ruli: Fix install step and build samples tooKhem Raj2019-11-205-135/+169
| | | | | | | | | | | do_install never executed as a result it was empty install Create ruli-bin package for utilities, so libraries can be packages granularily Drop the makefile patch which is no longer needed, set the make variables to get the needed bits set Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: Do not require the "pam" distro feature to be enabledPeter Kjellerstedt2019-11-181-2/+1
| | | | | | | | | | It was only added because samba was a dependency, but was not removed again when the dependency on samba was removed in commit 6207331f. This effectively reverts commit a190c2e3. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lowpan-tools: Blacklist as its deprecated use wpan-tools insteadKhem Raj2019-11-131-0/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 1.5.5 -> 1.5.6Yi Zhao2019-11-071-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: allow to build a -native packageAndré Draszik2019-11-071-0/+3
| | | | | | | This will e.g. enable us to use it from nodejs-native. Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: build more of this & fix packagingAndré Draszik2019-11-072-3/+53
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nghttp2 also provides http client, server, and proxy. Add the necessary DEPENDS and build flags to enable those. They are all packaged into individual packages, with 'nghttp2' being a meta-package now and pulling in all of the above three applications. The shared library itself (the only part that this recipe had been building so far), is also being split into its own package, meaning existing users shouldn't be affected, as nobody should have an RDEPENDS on 'nghttp2' at the moment (due to bitbake's shlibs dependency tracking). The deflatehd and inflatehd binaries have been completely dropped, as they are (header) test applications for HTTP/2. Debian doesn't ship them either. The python script fetch-ocsp-response is (only) needed by the proxy, and itself calls out to openssl. We can easily make this python3 using a simple patch, though. Minor additional fixes: * sort DEPENDS alphabetically * drop python-dir, this is implied by pythonnative * inherit manpages so as to benefit from man-db processing (note that manpages are not generated here, we just want the automatic update of the package index caches) We need to add a PACKAGECONFIG, as manpages.bbclass requires it to be present, even though nghttp2 unconditionally installs them Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: update to 1.39.2André Draszik2019-11-071-2/+2
| | | | | Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: fix UPSTREAM_CHECK_URIAndré Draszik2019-11-071-1/+1
| | | | | | | | This was added incorrectly in the previous recipe update and doesn't actually work. Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libowfat: Fix parallel buildKhem Raj2019-11-062-1/+47
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libowfat: upgrade 0.31 -> 0.32Zheng Ruoqin2019-11-011-3/+3
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mtr: upgrade 0.92 -> 0.93Zheng Ruoqin2019-11-011-4/+2
| | | | | | | 1) Update LIC_FILES_CHKSUM as adress has been updated. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.0.3 -> 3.0.6Zheng Ruoqin2019-11-011-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade 1.9.2 -> 1.9.4Zheng Ruoqin2019-11-011-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbd: upgrade 3.19 -> 3.20Zheng Ruoqin2019-11-011-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* htpdate: upgrade 1.2.1 -> 1.2.2Zheng Ruoqin2019-11-011-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: Upgrade 2.2.36.3 -> 2.2.36.4Adrian Bunk2019-11-011-2/+2
| | | | | | | The release contains the CVE-2019-11500 fix. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cim-schema: Remove duplicate fileAdrian Bunk2019-11-011-34/+0
| | | | | Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd-utils: upgrade 9.10.0 -> 9.11.0Zheng Ruoqin2019-10-251-3/+3
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: Clarify BSD license variantChristophe PRIOUZEAU2019-10-241-1/+1
| | | | | | | The License of tcpdump is BSD-3-Clause. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocol: Clarify BSD license variantChristophe PRIOUZEAU2019-10-241-1/+1
| | | | | | | The License of spice-protocol is BSD-3-Clause. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmemcached: Clarify BSD license variantChristophe PRIOUZEAU2019-10-241-1/+1
| | | | | | | The License of libmemcached is BSD-3-Clause. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* celt051: Clarify BSD license variantChristophe PRIOUZEAU2019-10-241-1/+1
| | | | | | | The License of celt051 is BSD-2-Clause. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipvsadm: install initscript to /etc/init.dYi Zhao2019-10-171-1/+3
| | | | | | | Move initscript from /etc/rc.d/init.d to /etc/init.d Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: add a PACKAGECONFIG for libbfd stack tracesCallaghan, Dan2019-10-171-0/+1
| | | | | | | | | | | | | | | | | | Strongswan installs a signal handler for SIGSEGV, SIGILL, and SIGBUS which attempts to print a stack trace of the crash. For producing line numbers in the stack trace, it can use libbfd from binutils, or libunwind, or else it falls back to a slower method using /usr/bin/addr2line. Currently the addr2line method is unlikely to actually work, since there is no RDEPENDS to pull that command into the image. This patch adds a PACKAGECONFIG to enable the libbfd-based stack traces, which is likely the best alternative since binutils is already required for building everything, and it will be faster than the addr2line method (which requires addr2line and libbfd anyway). Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: Delete unused patchPeiran Hong2019-10-091-61/+0
| | | | | | | | Delete patch "0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch" since it is not used in the tcpdump recipe anymore. Signed-off-by: Peiran Hong <peiran.hong@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.3.26 -> 6.4.1Zang Ruochen2019-10-092-1580/+3
| | | | | | | | | | -License-Update: Copyright year updated to 2019. -fetchmail/02_remove_SSLv3.patch Removed since this is included in 6.4.1. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: upgrade 4.9.2 -> 4.9.3Peiran Hong2019-10-085-25/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This upgrade adds some new features and fixes numerous bugs including the following CVEs: CVE: CVE-2017-16808 (AoE) CVE: CVE-2018-14468 (FrameRelay) CVE: CVE-2018-14469 (IKEv1) CVE: CVE-2018-14470 (BABEL) CVE: CVE-2018-14466 (AFS/RX) CVE: CVE-2018-14461 (LDP) CVE: CVE-2018-14462 (ICMP) CVE: CVE-2018-14465 (RSVP) CVE: CVE-2018-14881 (BGP) CVE: CVE-2018-14464 (LMP) CVE: CVE-2018-14463 (VRRP) CVE: CVE-2018-14467 (BGP) CVE: CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled) CVE: CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled) CVE: CVE-2018-14880 (OSPF6) CVE: CVE-2018-16451 (SMB) CVE: CVE-2018-14882 (RPL) CVE: CVE-2018-16227 (802.11) CVE: CVE-2018-16229 (DCCP) CVE: CVE-2018-16301 (was fixed in libpcap) CVE: CVE-2018-16230 (BGP) CVE: CVE-2018-16452 (SMB) CVE: CVE-2018-16300 (BGP) CVE: CVE-2018-16228 (HNCP) CVE: CVE-2019-15166 (LMP) CVE: CVE-2019-15167 (VRRP) CVE: CVE-2018-14879 (tcpdump -V) Deleted patch "0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch" since the fix is included in the upgrade. Modified patches "avoid-absolute-path-when-searching-for-libdlpi.patch", "unnecessary-to-check-libpcap.patch", and "add-ptest.path" since the upgrade renamed configure.in to configure.ac and made changes to the file. Added PACKAGECONFIG for smb. It is disabled by default in the upgraded version in both the package's configure script and this bitbake recipe since it is insecure. Modified the parsing of ptest result to align with the new output format. With core-image-minimal on qemux86-64/kvm: Recipe | Passed | Failed | Skipped | Time(s) Before | 408 | 0 | 2 | 4 After | 431 | 11 | 2 | 10 11 test failed after the upgrade since libpcap is not upgraded alongside with tcpdump. Signed-off-by: Peiran Hong <peiran.hong@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: install dev headersCallaghan, Dan2019-10-041-1/+2
| | | | | | | | These are needed for other packages which want to link against libstrongswan or other libraries included with Strongswan. By default, no headers are installed. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: fix qt5 buildGeorge McCollister2019-10-041-2/+4
| | | | | | | | | | | | | | | | | | | | | | Add qttools-native to PACKAGECONFIG[qt5] DEPENDS to resolve missing Qt5LinguistTools build error. Add qtmultimedia to PACKAGECONFIG[qt5] DEPENDS to resolve missing Qt5Multimedia build error. Add qtsvg to PACKAGECONFIG[qt5] DEPENDS to resolve missing Qt5Svg build error. Inherit cmake_qt5 when qt5 is in PACKAGECONFIG to resolve get_target_property() called with non-existent target "Qt5::qmake" build error. Automatically add qt5 to PACKAGECONFIG when meta-qt5 is in the build since adding qt5 via a .bbappend won't satisfy the conditional inherit cmake_qt5. The poppler recipe does exactly this. Signed-off-by: George McCollister <george.mccollister@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Revert "spice: Drop broken native"Martin Jansa2019-10-011-1/+2
| | | | | | | | | | | This reverts commit 5f32fd6b08d79b9a4d1bffb9b2bcbc535a5b27d2. * fixed by restricting -Wno-error=address-of-packed-member only for target, spice-native is still useful for qemu-native when spice PACKAGECONFIG is enabled Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 15:35:08 +0000