summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
* wireshark: Fix CVE-2023-2906Hitendra Prajapati2023-12-042-0/+39
| | | | | | | | | | Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/44dc70cc5aadca91cb8ba3710c59c3651b7b0d4d Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> (cherry picked from commit 919a2074586ff957362ae2dbd3438fa648bb9bee) Signed-off-by: Deepak Rathore <deeratho@cisco.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* traceroute: upgrade 2.1.2 -> 2.1.3Narpat Mali2023-11-161-1/+1
| | | | | | | | | | | | | | | This upgrade incorporates the CVE-2023-46316 fix. Changelog: ---------- - Fix command line parsing in wrappers. References: https://security-tracker.debian.org/tracker/CVE-2023-46316 https://sourceforge.net/projects/traceroute/files/traceroute/traceroute-2.1.3/ Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* open-vm-tools: fix CVE-2023-34058Archana Polampalli2023-11-162-0/+242
| | | | | | | | | | | | | A flaw was found in open-vm-tools. This flaw allows a malicious actor that has been granted Guest Operation Privileges in a target virtual machine to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-34058 Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tcpreplay: fix pcap detection with /usr/lib32 multilibMartin Jansa2023-09-062-4/+87
| | | | | | | | | | | | * use BPN, BP where useful * use prefix instead of hardcoding /usr * add patch to search also in lib32 subdir of --with-libpcap value to fix: checking for libpcap... configure: error: "Unable to find matching library for header file in TOPDIR/BUILD/work/raspberrypi4_64-oemllib32-linux-gnueabi/lib32-tcpreplay/4.4.4-r0/lib32-recipe-sysroot/usr" Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tcpdump: upgrade 4.99.3 -> 4.99.4Wang Mingyu2023-09-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== Source code: ---------------- Fix spaces before tabs in indentation. Updated printers: ----------------- LSP ping: Fix "Unused value" warnings from Coverity. CVE-2023-1801: Fix an out-of-bounds write in the SMB printer. DNS: sync resource types with IANA. ICMPv6: Update the output to show a RPL DAO field name. Geneve: Fix the Geneve UDP port test. Building and testing: ---------------------- Require at least autoconf 2.69. Don't check for strftime(), as it's in C90 and beyond. Update config.{guess,sub}, timestamps 2023-01-01,2023-01-21. Documentation: ------------- man: Document TCP flag names better. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 2e782260d0b6018614dbdea95899a4a0921915e0) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* open-vm-tools: Security fix CVE-2023-20867Yi Zhao2023-07-022-0/+164
| | | | | | | | | | | | | | | | CVE-2023-20867: A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-20867 Patch from: https://github.com/vmware/open-vm-tools/blob/CVE-2023-20867.patch/2023-20867-Remove-some-dead-code.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* tcpreplay: upgrade 4.4.3 -> 4.4.4Polampalli, Archana2023-06-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release contains bug fixes only. The following CVEs have been addressed: CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786 CVE-2023-27787 CVE-2023-27788 CVE-2023-27789 Changelog: ========= dlt_jnpr_ether_cleanup: check subctx before cleanup by @Marsman1996 in #781 Bug #780 assert tcpedit dlt cleanup by @fklassen in #800 Fix bugs caused by strtok_r by @Marsman1996 in #783 Bug #782 #784 #785 #786 #787 #788 strtok r isuses by @fklassen in #801 Update en10mb.c by @david-guti in #793 PR #793 ip6 unicast flood by @fklassen in #802 Bug #719 fix overflow check for parse_mpls() by @fklassen in #804 PR #793 - update tests for corrected IPv6 MAC by @fklassen in #805 PR #793 - update tests for vlandel by @fklassen in #806 Feature #773 gh actions ci by @fklassen in #807 Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* wireshark: Fix Multiple CVEsHitendra Prajapati2023-06-274-0/+224
| | | | | | | | | | Backport fixes for: * CVE-2023-0666 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/265cbf15a418b629c3c8f02c0ba901913b1c8fd2 * CVE-2023-0667 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/85fbca8adb09ea8e1af635db3d92727fbfa1e28a * CVE-2023-0668 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/c4f37d77b29ec6a9754795d0efb6f68d633728d9 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* wireshark: CVE-2023-2952 XRA dissector infinite loopHitendra Prajapati2023-06-172-0/+99
| | | | | | | Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/e18d0e369729b0fff5f76f41cbae67e97c2e52e5 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* wireshark: Fix CVE-2023-2858 & CVE-2023-2879Hitendra Prajapati2023-06-153-0/+134
| | | | | | | | | Backport fixes for: * CVE-2023-2858 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/cb190d6839ddcd4596b0205844f45553f1e77105 * CVE-2023-2879 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/118815ca7c9f82c1f83f8f64d9e0e54673f31677 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* wireshark: Fix CVE-2023-2855 & CVE-2023-2856Hitendra Prajapati2023-06-073-0/+179
| | | | | | | | | Backport fixes for: * CVE-2023-2855 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/0181fafb2134a177328443a60b5e29c4ee1041cb * CVE-2023-2856 - Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/db5135826de3a5fdb3618225c2ff02f4207012ca Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* unbound: Remove references to buildpathsKhem Raj2023-05-281-0/+4
| | | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9a06629463ebe8217a30011f9e94127a324d895c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* curlpp: Remove references to buildpaths e.g. TMPDIRKhem Raj2023-05-282-1/+42
| | | | | | | | | Fixes WARNING: curlpp-0.8.1-r0 do_package_qa: QA Issue: File /usr/bin/curlpp-config in package curlpp-dev contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 8257604b8ab05f7f6e5d0414a12a4aae84e99aaa) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* nbdkit: Remove buildpaths from binariesKhem Raj2023-05-283-40/+39
| | | | | | | | | | | Drop unused patch 0001-server-Fix-build-when-printf-is-a-macro.patch Fixes WARNING: nbdkit-1.33.11-r0 do_package_qa: QA Issue: File /usr/lib/nbdkit/plugins/nbdkit-cc-plugin.so in package nbdkit contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit da331ae8f1fccf3b542526f1caaa3834261434fa) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* spice-gtk: respect gobject-introspection-dataMartin Jansa2023-05-161-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * without gobject-introspection-data in DISTRO_FEATURES the bbclass correctly disables it: $ bitbake-getvar -r spice-gtk EXTRA_OEMESON # # $EXTRA_OEMESON [6 operations] # :append /OE/build/oe-core/openembedded-core/meta/classes-recipe/meson.bbclass:44 # " ${PACKAGECONFIG_CONFARGS}" # :prepend[class-target] /OE/build/oe-core/openembedded-core/meta/classes-recipe/gobject-introspection.bbclass:28 # "${@['', '${GIRMESONTARGET}'][d.getVar('GIR_MESON_OPTION') != '']}" # :prepend[class-native] /OE/build/oe-core/openembedded-core/meta/classes-recipe/gobject-introspection.bbclass:33 # "${@['', '${GIRMESONBUILD}'][d.getVar('GIR_MESON_OPTION') != '']}" # :prepend[class-nativesdk] /OE/build/oe-core/openembedded-core/meta/classes-recipe/gobject-introspection.bbclass:34 # "${@['', '${GIRMESONBUILD}'][d.getVar('GIR_MESON_OPTION') != '']}" # set /OE/build/oe-core/meta-openembedded/meta-networking/recipes-support/spice/spice-gtk_0.42.bb:49 # "-Dpie=true -Dvapi=enabled" # :append[libc-musl] /OE/build/oe-core/meta-openembedded/meta-networking/recipes-support/spice/spice-gtk_0.42.bb:50 # " -Dcoroutine=libucontext" # pre-expansion value: # "${@['', '${GIRMESONTARGET}'][d.getVar('GIR_MESON_OPTION') != '']}-Dpie=true -Dvapi=enabled ${PACKAGECONFIG_CONFARGS}" EXTRA_OEMESON="-Dintrospection=false -Dpie=true -Dvapi=enabled " and prevents build failure: http://errors.yoctoproject.org/Errors/Details/702789/ Run-time dependency gobject-introspection-1.0 found: NO (tried pkgconfig) ../git/meson.build:346:0: ERROR: Dependency "gobject-introspection-1.0" not found, tried pkgconfig * it just needs GIR_MESON_*_FLAG to be set to avoid: meson.build:4:0: ERROR: Value "false" (of type "string") for combo option "Check for GObject instrospection requirements" is not one of the choices. Possible choices are (as string): "enabled", "disabled", "auto". * and enable vapi only when introspection is enabled, use PACKAGECONFIG for that to avoid: meson.build:358:4: ERROR: Problem encountered: VAPI support requested without introspection Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* ntp: whitelist CVE-2019-11331Peter Marko2023-05-071-0/+2
| | | | | | | | | | | | | | Links from https://nvd.nist.gov/vuln/detail/CVE-2019-11331 lead to conclusion that this is how icurrent ntp protocol is designed. New RFC is propsed for future but it will not be compatible with current one. See https://support.f5.com/csp/article/K09940637 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 648912f72d3d85ef43ba5114953794faa1572bdf) Signed-off-by: Armin Kuster <akuster808@gmail.com>
* recipes: Remove double protocol= from SRC_URIsPeter Kjellerstedt2023-04-051-1/+1
| | | | | | | | | | With the exception of paho-mqtt-cpp, the double protocol= attributes were added to the SRC_URIs when protocol=https was added to all SRC_URIs fetching from github.com in commit b402a3076f (recipes: Update SRC_URI branch and protocols). Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.1 -> 2.6.2Wang Mingyu2023-04-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== dco: don't use NetLink to exchange control packets dco: print version to log if available dco-linux: remove M_ERRNO flag when printing netlink error message multi: don't call DCO APIs if DCO is disabled dco-freebsd: use m->instances[] instead of m->hash dco-linux: implement dco_get_peer_stats{, multi} API Set netlink socket to be non-blocking Ensure n = 2 is set in key2 struct in tls_crypt_v2_unwrap_client_key Fix memory leaks in open_tun_dco() Fix memory leaks in HMAC initial packet generation Use key_state instead of multi for tls_send_payload parameter Make sending plain text control message session aware Only update frame calculation if we have a valid link sockets Improve description of compat-mode Simplify --compress parsing in options.c Refuse connection if server pushes an option contradicting allow-compress Add 'allow-compression stub-only' internally for DCO Parse compression options and bail out when compression is disabled tests/unit_tests: Fix 'make distcheck' with subdir-objects enabled preparing release 2.6.2 dns option: allow up to eight addresses per server dco: print FreeBSD version Support --inactive option for DCO Fix '--inactive <time> 0' behavior for DCO Print DCO client stats on SIGUSR2 Don't overwrite socket flags when using DCO on Windows using OpenSSL3 API for EVP PKEY type name reporting Bugfix: Convert ECDSA signature form pkcs11-helper to DER encoded form Import some sample certificates into Windows store for testing Add tests for finding certificates in Windows cert store Refactor SSL_CTX_use_CryptoAPI_certificate() Add a test for signing with certificates in Windows store Unit tests: add test for SSL_CTX_use_Cryptoapi_certificate() Improve error message on short read from socks proxy Make error in setting metric for IPv6 interface non-fatal Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndisc6: upgrade 1.0.6 -> 1.0.7Wang Mingyu2023-04-041-1/+1
| | | | | | | | | | Changelog: ========= # Do not ignore multicast advertisements when discovery was sent as unicast (fix regression from 1.0.5). Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 2.7.1 -> 2.7.2Wang Mingyu2023-04-041-2/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fwknop: Fix AS_IF configure syntaxKhem Raj2023-04-022-11/+32
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fwknop: Use pkg-config instead of gpgme-configKhem Raj2023-04-022-1/+29
| | | | | | pkg-config is sysroot aware which is needed for cross-builds Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: fix CVE-2023-28450Peter Marko2023-03-252-0/+49
| | | | | | | | The patch is modified by removing irrelevant and conflicting CHANGELOG entry. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.33.10 -> 1.33.11Wang Mingyu2023-03-231-2/+2
| | | | | | | | License-Update: "Copyright (C) 2013-2020 Red Hat Inc." changed to "Copyright Red Hat" Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ettercap: Update Upstream-StatusFabio Estevam2023-03-231-1/+1
| | | | | | | | The patch has been applied upstream, so update the Upstream-Status line accordingly. Signed-off-by: Fabio Estevam <festevam@denx.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ettercap: Fix build with libcurl >= 8Khem Raj2023-03-232-1/+40
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: 4.4.2 -> 4.4.3Yi Zhao2023-03-231-1/+1
| | | | | | | | ChangeLog: https://github.com/appneta/tcpreplay/releases/tag/v4.4.3 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: Added a new recipe.Lei Maohui2023-03-225-0/+142
| | | | | | | Pgpool-II is a middleware that works between PostgreSQL servers and a PostgreSQL database client. It is distributed under a license similar to BSD and MIT. It provides the following features. Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: drop the deprecated ntpdateZhixiong Chi2023-03-174-116/+8
| | | | | | | | | | | The combination of ntpd and sntp now implements the functions of ntpdate, which has been deprecated. Now we don't need ntpdate anymore, and we can use the following command 'ntpd -q -g -x' instead. So drop the related section of ntpdate now. Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 44.0 -> 45.0Wang Mingyu2023-03-171-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ========== 53ee89b Merge pull request #1299 from zhuyj/dmabuf 95507d0 Merge pull request #1311 from EdwardSro/pr-pyverbs-tests 087deb5 irdma: Add support for ibv_reg_dmabuf_mr 6644617 Merge pull request #1309 from hz-cheng/master fe9e480 Merge pull request #1304 from EdwardSro/pr-tests-fixes 5c9f444 Merge pull request #1303 from EdwardSro/pr-mlx5-dr-steering 8f56a83 Merge pull request #1310 from joshuafried/mlx5_dr_bugfix 638ace8 tests: Add test for devx DBR-less mode data path 25a4bf0 tests: Skip CUDA tests if there is no CUDA device 5dad658 tests: Add set and copy modify action of metadata Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 2.6.1 -> 2.7.1Yi Zhao2023-03-142-9/+9
| | | | | | | Refresh 0002-ldb-Add-configure-options-for-packages.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.0 -> 2.6.1Petr Gotthard2023-03-101-1/+1
| | | | | | | | Changelog: https://github.com/OpenVPN/openvpn/blob/v2.6.1/Changes.rst Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.33.7 -> 1.33.10Wang Mingyu2023-03-091-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.67 -> 5.69Wang Mingyu2023-03-091-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: Copyright year updated to 2023. Changelog: ========== * New features - Improved logging performance with the "output" option. - Improved file read performance on the WIN32 platform. - DH and kDHEPSK ciphersuites removed from FIPS defaults. - Set the LimitNOFILE ulimit in stunnel.service to allow for up to 10,000 concurrent clients. - Added the new 'CAengine' service-level option to load a trusted CA certificate from an engine. - Added requesting client certificates in server mode with 'CApath' besides 'CAfile'. - Improved file read performance. - Improved logging performance. * Bugfixes - Fixed the "CApath" option on the WIN32 platform by applying https://github.com/openssl/openssl/pull/20312. - Fixed stunnel.spec used for building rpm packages. - Fixed tests on some OSes and architectures by merging Debian 07-tests-errmsg.patch (thx to Peter Pentchev). - Fixed EWOULDBLOCK errors in protocol negotiation. - Fixed handling TLS errors in protocol negotiation. - Prevented following fatal TLS alerts with TCP resets. - Improved OpenSSL initialization on WIN32. - Improved testing suite stability. * Security bugfixes - OpenSSL DLLs updated to version 3.0.8. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* traceroute: upgrade 2.1.1 -> 2.1.2Yi Zhao2023-03-061-1/+1
| | | | | | | | | Changes in 2.1.2: * Fix unprivileged ICMP tracerouting with Linux kernel >= 6.1 (Eric Dumazet, SF bug #14) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: 5.9.9 -> 5.9.10Yi Zhao2023-03-061-3/+3
| | | | | | | | Changelog: https://github.com/strongswan/strongswan/releases/tag/5.9.10 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.8 -> 2.6.0Petr Gotthard2023-02-241-3/+3
| | | | | | | | | | | | | | | | | | | New features and improvements in 2.6.0 compared to 2.5.8: - Data Channel Offload (DCO) kernel acceleration support for Windows, Linux, and FreeBSD. - OpenSSL 3 support. - Improved handling of tunnel MTU, including support for pushable MTU. - Outdated cryptographic algorithms disabled by default, but there are options to override if necessary. - Reworked TLS handshake, making OpenVPN immune to replay-packet state exhaustion attacks. - Added --peer-fingerprint mode for a more simplistic certificate setup and verification. - Added Pre-Logon Access Provider support to OpenVPN GUI for Windows. - Improved protocol negotiation, leading to faster connection setup. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* .patch: fix Upstream-Status formatting issues reported by patchreview tool ↵Martin Jansa2023-02-244-15/+15
| | | | | | | from oe-core Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-networking: fix Upstream-Status formatYi Zhao2023-02-241-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 42.0 -> 44.0Wang Mingyu2023-02-202-33/+2
| | | | | | | | 0001-examples-Include-alloca.h-for-strdupa.patch removed since it's included in 44.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: upgrade 2.3.4 -> 2.4.0Wang Mingyu2023-02-181-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtdb: upgrade 1.4.7 -> 1.4.8Wang Mingyu2023-02-181-2/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: upgrade 0.13.0 -> 0.14.1Wang Mingyu2023-02-182-13/+15
| | | | | | | | 0001-Add-configure-options-for-packages.patch refreshed for new version. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipcalc: update to 1.0.2Michael Opdenacker2023-02-183-50/+14
| | | | | | | | | | | - Now built with meson - Update the source git repository and home page https://github.com/nmav/ipcalc redirects to https://gitlab.com/ipcalc/ipcalc - USE_GEOIP = "no" not necessary in the recipe, already set by default in the code. Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* htpdate: upgrade 1.3.6 -> 1.3.7Wang Mingyu2023-02-161-1/+1
| | | | | | | | | | | | Changelog: ========== - bugfix: wrong default portnumber for proxy was used - bugfix: https://bugs.launchpad.net/ubuntu/+source/htpdate/+bug/1850740 - improvement: Avoid bouncing between upper/lower limit when (almost) in sync - improvement: Set SSL server hostname on SSL object Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: fix CVE-2022-40468Chee Yang Lee2023-02-102-0/+34
| | | | | Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-gtk: Update to version 0.42Fabio Estevam2023-02-091-1/+1
| | | | | | | | | | | | | | | | | | | | Update to version 0.42: v0.42 ===== - !115 - Fix compilation on win32 with EGL - !114 - spice-widget: fix hotspot position on Wayland/HiDPI - !112 - meson: Allow building on a Wayland-only environment - !110 - usb-backend: Fix devices not being enumerated - !108 - spicy: Add keyboard shortcuts for copy/paste sync - Require meson >= 0.56 The original recipe name was spice-gtk_0.4.1.bb, but the spice-gtk repo tags the releases as 0.41, not 0.4.1, so update it accordingly. Signed-off-by: Fabio Estevam <festevam@denx.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: switch to using variable flags for alternativesUlrich Ölmann2023-02-091-2/+2
| | | | | | | | Up to now in this recipe the alternative mechanism only worked by accident, so do like all other recipes and utilize varflags. Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: Upgrade 2.88 -> 2.89Alex Kiernan2023-02-061-1/+1
| | | | | | | | | | | | | | | | | | version 2.89 Fix bug introduced in 2.88 (commit fe91134b) which can result in corruption of the DNS cache internal data structures and logging of "cache internal error". This has only been seen in one place in the wild, and it took considerable effort to even generate a test case to reproduce it, but there's no way to be sure it won't strike, and the effect is to break the cache badly. Installations with DNSSEC enabled are more likely to see the problem, but not running DNSSEC does not guarantee that it won't happen. Thanks to Timo van Roermund for reporting the bug and for his great efforts in chasing it down. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: fix overrides syntax in SYSTEMD_AUTO_ENABLE:${PN}Martin Jansa2023-02-031-1/+1
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>