summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
...
* mdio-tools: Add virtual/kernel dependency to avoid stale SPDX referenceAndrew Jeffery2023-10-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OpenBMC enables SPDX SBOM generation by default. For Meta's Bletchley platform we found that mdio-tools and its relationships with both mdio-netlink and the mdio-netlink kernel module break SPDX processing while generating the rootfs after a kernel bump. For example, the following output was generated by `bitbake obmc-phosphor-image`: ERROR: obmc-phosphor-image-1.0-r0 do_rootfs: Cannot find any SPDX file for document http://spdx.org/spdxdoc/kernel-module-mdio-netlink-6.5.4-da279e9-00089-gda279e98c07f-89187488-3164-50cb-94c5-8b76a30ea093 The error occurred after the following patch was applied (again, in the context of OpenBMC): diff --git a/meta-aspeed/recipes-kernel/linux/linux-aspeed_git.bb b/meta-aspeed/recipes-kernel/linux/linux-aspeed_git.bb index e6f98297c540..b852e993f0f6 100644 --- a/meta-aspeed/recipes-kernel/linux/linux-aspeed_git.bb +++ b/meta-aspeed/recipes-kernel/linux/linux-aspeed_git.bb @@ -1,6 +1,6 @@ KBRANCH ?= "dev-6.5" -LINUX_VERSION ?= "6.5.4" +LINUX_VERSION ?= "6.5.9" -SRCREV="da279e98c07f9c948c60a434ab0043a55c26ea1d" +SRCREV="fc8d4fdba5bd2b9b1cea2aa8a731531943c45aa7" require linux-aspeed.inc With the lack of a dependency the mdio-tools package is not rebuilt subsequent to the kernel bump and the package information remains stale, leading to an incorrect SPDX path being generated. Signed-off-by: Andrew Jeffery <andrew@codeconstruct.com.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-networking: Drop broken BBCLASSEXTEND variantsRichard Purdie2023-10-241-1/+1
| | | | | | | | | | | | | | | | | | The command "bitbake universe -c fetch" currently throws a ton of warnings as there are many 'impossible' dependencies. In some cases these variants may never have worked and were just added by copy and paste of recipes. In some cases they once clearly did work but became broken somewhere along the way. Users may also be carrying local bbappend files which add further BBCLASSEXTEND. Having universe fetch work without warnings is desireable so clean up the broken variants. Anyone actually needing something dropped here can propose adding it and the correct functional dependencies back quite easily. This also then ensures we're not carrying or fixing things nobody uses. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.0.8 -> 4.0.10Wang Mingyu2023-10-231-1/+1
| | | | | | | | Bugfix: Error loading g729.so plugin with Wireshark 4.0.9 and 3.6.17 on macOS. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 47.0 -> 48.0Wang Mingyu2023-10-231-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libexosip2: add recipeCharles Perry2023-10-171-0/+15
| | | | | | | | libexosip2 extends the capabilities of the osip2 library. It can be a useful building block for an embedded device application. Signed-off-by: Charles Perry <charles.perry@savoirfairelinux.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libosip2: add recipeCharles Perry2023-10-171-0/+15
| | | | | | | | The GNU oSIP library is an implementation of SIP - rfc3261. It can be a useful building block for an embedded device application. Signed-off-by: Charles Perry <charles.perry@savoirfairelinux.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: add ptestYi Zhao2023-10-123-50/+26
| | | | | | | | | | | | | | | | | | | | | * use external cmocka instead of bundled cmocka * add run-ptest script Ptest results: $ ptest-runner libldb START: ptest-runner 2023-10-12T11:49 BEGIN: /usr/lib/libldb/ptest PASS: test_ldb_dn PASS: test_ldb_qsort DURATION: 0 END: /usr/lib/libldb/ptest 2023-10-12T11:49 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: fix ptestYi Zhao2023-10-123-58/+24
| | | | | | | | | | | | | | * use external cmocka instead of bundled cmocka * add run-ptest script Ptest results: $ ./run-ptest PASS: replace_testsuite PASS: test_tevent_tag PASS: test_tevent_trace Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-tweaks, networkmanager-fortisslvpn, libesmtp, json-schema-validator, ↵Martin Jansa2023-09-271-1/+1
| | | | | | | | | | | | | | | | | python3-pybluez, python3-pynetlinux, apache2: Fix Malformed Upstream-Status * Accepted was replaced with Backport in gatesgarth: https://docs.yoctoproject.org/migration-guides/migration-3.2.html#miscellaneous-changes * as detected with oe-core/scripts/contrib/patchreview.py: meta-openembedded $ grep -A 3 Malformed *qa-patches meta-gnome.qa-patches:Malformed Upstream-Status 'Malformed Upstream-Status in patch meta-gnome.qa-patches-/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch meta-gnome.qa-patches-Please correct according to https://docs.yoctoproject.org/contributor-guide/recipe-style-guide.html#patch-upstream-status : meta-gnome.qa-patches-Upstream-Status: Accepted [https://gitlab.gnome.org/GNOME/gnome-tweaks/-/commit/dc9701e18775c01d0b69fabaa350147f70096da8]' (/OE/layers/meta-openembedded/meta-gnome/recipes-gnome/gnome-tweaks/gnome-tweaks/0002-meson-fix-invalid-positional-argument.patch) Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntpsec: 1.2.2 -> 1.2.2aLee Chee Yang2023-09-221-1/+1
| | | | | | | | | | Fix a crash in ntpd if NTS is disabled and an NTS-enabled client request (mode 3) is received. (CVE-2023-4012) #794 https://gitlab.com/NTPsec/ntpsec/-/releases/NTPsec_1_2_2a Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: upgrade 2.3.20 -> 2.3.21Wang Mingyu2023-09-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== * lib-oauth2: Allow JWT tokens to be validated with missing typ field. + auth: Auth passdb and userdb reply can contain "event_<name>=value" which will be added to login event and mail user event respectively. + lib-master: Set process title during various initialization stages to clearly describe what the process is waiting on. + lib-storage: The mail_temp_scan_interval is now fuzzed incrementing it by 0..30% based on username's hash to reduce the chance of load spikes. + lib-storage: The temp file scan has been moved from the open of the mailbox to the close, to reduce the latency perceived by users. + stats: If metric has fields specified, all these fields are exported as counters to prometheus exposition. - *-login: Processes might have crashed when a SSL connection disconnects uncleanly. - acl: When plugin was loaded \HasChildren and \HasNoChildren flags were calculated incorrectly for mailboxes containing '*' and '%' in their names. - auth: Crash occured if a connection to PostgreSQL database server failed during startup. - auth: Logins with invalid passwords (e.g. unknown scheme) in passdb were failing with "password mismatch" instead of "internal error". - auth: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol specific error message on all errors. This especially broke OIDC discovery. - dbox: When last_temp_file_scan header wasn't set (especially after dsync migration), the next mailbox open always triggers the temp file scan. - dict-redis: A crash would occur on transaction rollback. - dsync: Infinite loop causing out of memory would occur when handling mailbox deletion from remote end and hierarchy separators would differ. - dsync: Incremental dsync failed for folder names ending with '%', unless BROKENCHAR was set. Also folder names with '%' elsewhere in them caused each incremental dsync to unnecessarily rename the folder to a temporary name and back. v2.3.19 regression. - imap-hibernate: If an IMAP client unhibernation timed out with "(version received)", the unhibernation could still have successfully finished later on and continued working normally. This was rather confusing, because imap-hibernate already logged that the client got disconnected. - imapc: Crashed when a folder mapped through the virtual plugin disappears from the storage. - imapc: EXPUNGE, EXISTS or FETCH replies from a server for a previously selected mailbox could have been processed as if they belonged to the new mailbox currently being selected. - lib-http: Dovecot HTTP server (doveadm, stats/openmetrics) may have disconnected HTTP clients before the response is fully sent. This happened only on busy servers where kernel's socket buffers were rather full. - lib-http: Fixed a potential crash on http-server if a client disconnected early. v2.3.18 regression. - lib-index: Index file corruption could have caused a crash. Fixes: Panic: file mail-transaction-log-view.c: line 165 (mail_transaction_log_view_set): assertion failed: (min_file_seq <= max_file_seq). - lib-index: Purging an existing >1GB cache file can crash. Now cache files still above 1GB after purging are removed. Fixes: Panic: file mail-index-util.c: line 10 (mail_index_uint32_to_offset): assertion failed: (offset < 0x40000000) - lib-lua: A HTTP client could not resolve DNS names in mail processes, because it expected "the dns-client" socket to exist in the current directory. - lib-oauth2: Dovecot would send client_id and client_secret as POST parameters to the introspection server. These need to be optionally in Basic auth instead. - lib-oauth2: JWT aud validation was not performed if aud was missing from a token, but was configured on Dovecot. - lib-oauth2: JWT key type check was too strict. - lib-oauth2: JWT token audience was not validated against client_id as required by the specification. - lib-ssl-iostream: Using the ssl_require_crl=yes setting may have caused CRL check failures for outgoing SSL/TLS connections, although it was supposed to affect checking CRLs only for client-side SSL certificates. v2.3.17 regression. - lib-sql: MySQL driver leaked memory when connection failed. - lib-storage: Various fixes when running into out of disk space. - master: Service idle_kill setting didn't work properly on busy servers. - mdbox: Temp file scan was done for always empty directories. - mdbox: The fdatasync() call was done in wrong parent directory when writing mails. Also on a failure it crashed instead of logging an error. - notify_status: The plugin crashes if any user initialization fails. - pop3: Sending command with the ':' character caused an assert-crash. v2.3.18 regression. Fixes: Panic: event_reason_code_prefix(): name has ':' - stats: Fix panic when a nonexistent event exporter was referenced while adding a new metric dynamically via doveadm stats add. - stats: If process exported a lot of events and then exited, some of the last events may have become lost. - stats: Invalid Prometheus label names were created with specific histogram group_by configurations. Prometheus rejected these labels. - welcome: The plugin didn't execute in some situations that created INBOX but didn't open it. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade 1.17.1 -> 1.18.0Beniamin Sandu2023-09-072-85/+3
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.0.7 -> 4.0.8Wang Mingyu2023-09-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ The following vulnerabilities have been fixed: wnpa-sec-2023-23 CBOR dissector crash. Issue 19144. wnpa-sec-2023-24 BT SDP dissector infinite loop. Issue 19258. wnpa-sec-2023-25 BT SDP dissector memory leak. Issue 19259. wnpa-sec-2023-26 CP2179 dissector crash. Issue 19229. The following bugs have been fixed: TShark cannot capture to pipe on Windows correctly. Issue 17900. Wireshark wrongly blames group membership when pcap capabilities are removed. Issue 18279. Packet bytes window broken layout. Issue 18326. RTP Player only shows waveform until sequence rollover. Issue 18829. Valid Ethernet CFM DMM packets are shown as malformed. Issue 19198. Crash on DICOM Export Objects window close. Issue 19207. The QUIC dissector is reporting the quic_transport_parameters max_ack_delay with the title \"GREASE\" Issue 19209. Preferences: Folder name editing behaves weirdly, cursor jumps. Issue 19213. DHCPFO: Expert info list does not show all expert infos. Issue 19216. Websocket packets not decoded and displayed for Field type=Custom and Field name websocket.payload.text. Issue 19220. Cannot read pcapng file captured on OpenBSD and read on FreeBSD. Issue 19230. UI: While capturing the Wireshark icon changes from green to blue when new file is created. Issue 19252. Conversation: heap-use-after-free after wmem_leave_file_scope. Issue 19265. IP Packets with DSCP 44 does not indicate "Voice-Admit" Issue 19270. NAS 5GS Malformed Packet Decoding SOR transparent container PLMN ID and access technology list. Issue 19273. UI: Auto scroll button in the toolbar is turned on when manually scrolling to the end of packet list. Issue 19274. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* traceroute: upgrade 2.1.2 -> 2.1.3Wang Mingyu2023-09-071-1/+1
| | | | | | | | Changelog: Fix command line parsing in wrappers. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: add missing runtime dependenciesYi Zhao2023-09-071-1/+8
| | | | | | | | | | | | | | | | Some perl modules are required by ntptrace: $ ntptrace Can't locate lib.pm in @INC (you may need to install the lib module) (@INC contains: /usr/lib/perl5/site_perl/5.36.0/x86_64-linux /usr/lib/perl5/site_perl/5.36.0 /usr/lib/perl5/vendor_perl/5.36.0/x86_64-linux /usr/lib/perl5/vendor_perl/5.36.0 /usr/lib/perl5/5.36.0/x86_64-linux /usr/lib/perl5/5.36.0) at /usr/sbin/ntptrace line 10. BEGIN failed--compilation aborted at /usr/sbin/ntptrace line 10. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: fix pcap detection with /usr/lib32 multilibMartin Jansa2023-09-032-4/+87
| | | | | | | | | | | * use BPN, BP where useful * use prefix instead of hardcoding /usr * add patch to search also in lib32 subdir of --with-libpcap value to fix: checking for libpcap... configure: error: "Unable to find matching library for header file in TOPDIR/BUILD/work/raspberrypi4_64-oemllib32-linux-gnueabi/lib32-tcpreplay/4.4.4-r0/lib32-recipe-sysroot/usr" Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* phodav: make sure systemd files are packaged correctlyMartin Jansa2023-08-301-1/+3
| | | | | | | | | | | | | | * fixes installed-vs-shipped QA issue with multilib: ERROR: lib32-phodav-3.0-r0 do_package: QA Issue: lib32-phodav: Files/directories were installed but not shipped in any package: /usr/lib/systemd /usr/lib/systemd/system /usr/lib/systemd/system/spice-webdavd.service Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. lib32-phodav: 3 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-guest-vdagent: add missing dependenciesMarkus Volk2023-08-301-2/+2
| | | | | | | | add x11 to REQUIRED_DISTRO_FEATURES Signed-off-by: Markus Volk <f_l_k@t-online.de> Acked-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: add missing dependency on orcMarkus Volk2023-08-301-1/+1
| | | | | | | | | this fixes: meson.build:139:23: ERROR: Dependency "orc-0.4" not found, tried pkgconfig Signed-off-by: Markus Volk <f_l_k@t-online.de> Acked-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocol: fix populate_sdk error when spice is installedChen Qi2023-08-281-0/+2
| | | | | | | | | | | | | | | | | spice depends on spice-protocol, when IMAGE_INSTALL contains spice, do_populate_sdk fails with the following error: Error: Problem: package libspice-server-dev-0.14.2+git0+7cbd70b931_4fc4c2db36-r0.core2_64 requires spice-protocol-dev, but none of the providers can be installed - conflicting requests - nothing provides spice-protocol = 0.14.4-r0 needed by spice-protocol-dev-0.14.4-r0.core2_64 (try to add '--skip-broken' to skip uninstallable packages) For spice-protocol, it's a development package and all things are in the dev package, so set ALLOW_EMPTY to fix the above error. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-guest-vdagent: add recipeMarkus Volk2023-08-261-0/+25
| | | | | | | | | The spice-vdagent needs to be running alongside qemu-guest-agent on virtualizationguest systems that are using the spice protocol to get seamless integration. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* phodav: add recipeMarkus Volk2023-08-261-0/+23
| | | | | | | | | | | phodav is a small webdav server, that was originally created as a tool to provide folder sharing for spice but it can be used on a wider range of applications. It is usable e.g. in virt-viewer or gnome-boxes Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-gtk: fix api-documentation buildMarkus Volk2023-08-261-4/+8
| | | | | | | | - add support for smartcard - add missing rdepend on usbids Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: upgrade 0.14.2 -> 0.15.2Markus Volk2023-08-264-230/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | -switch to meson buildsystem -remove patches -update dependencies -fetch spice-common as a submodule Major Changes in 0.15.2: Really minor fix release, mainly to fix a distribution issue Add missing file to distribution Fix sound recording fix in case of buffer wrapping Major Changes in 0.15.1: Fix some compatibility issues with FreeBSD Fix some minor issue with build Improve packaging with Meson Lot of C++ improves (clang-tidy) Fix some compatibility with no-Glibc libraries (like Musl) Fix minor leaks shutting down library Add Doxygen file to distribution Fix a longstanding issue related to surface updates where wrong surfaces were possibly used Fix compatibility with OpenSSL 3 Updates and fixes for CI Use more random connection IDs to fix possible issues with proxies Major Changes in 0.15: This is the first release in the new 0.15.x stable series. This release should be ready for production use. Minor updates to CI Some compatibility with OpenSSL Change the behavior of handle_dev_start ignoring multiple start requests Ignore multiple calls to handle_dev_stop Pick up newer spice-common to fix a buffer overflow issue Major Changes in 0.14.91: IMPORTANT 0.14.91 is the first release candidate for the stable 0.15.x series. While some bugs might still be present, it should be reasonably stable. If you are looking for stability for daily use, please keep using the latest 0.14.x release. Support UNIX abstract sockets Fix some potential thread race condition in RedClient Many cleanups in the code Improve migration test script Update in protocol documentation Improve Meson build Removed CELT support Update CI Removed QXLWorker definition, it was deprecated 6 years ago Fix some compatibility with MacOS Fix some compatibility with Windows Move the project to C++ Some fixes for SASL dealing with WebDAV Fix minor Coverity reports Add Doxygen support, manually built with "make doxy" Support more mouse buttons (up to 16 buttons) CVE-2020-14355 multiple buffer overflow vulnerabilities in QUIC decoding code Major Changes in 0.14.3: Main changes are WebSocket and support for Windows. Add support for WebSocket, this will allow to use spice-html5 without proxy Support Windows, now Qemu Windows can be build enabling Spice Fix some alignment problem Converted some documentation to Asciidoc format to make easier to update, updated some Minor compatibility fix for PPC64EL and ARMHF Minor fixes for big endian machines like MIPS Avoid some crashes with some buggy guest drivers, simply ignore the invalid request Fix for old OpenSSL versions Minor fix for Windows clients and brushes, fixed an issue with Photoshop under Windows 7 Add ability to query video-codecs Small use-after-free fix Fix for debugging recording/replaying using QUIC images Fix a regression where spice reported no monitors to the client Fix DoS in spicevmc if WebDAV used Updated and improved test migration script Some minor fixes to smartcard support Avoid possible disconnection using proxies using a in-flow keepalive mechanism Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* usbredir: upgrade 0.9.0 -> 0.13.0Markus Volk2023-08-261-6/+4
| | | | | | | -switch to meson buildsystem Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcacard: add recipeMarkus Volk2023-08-261-0/+13
| | | | | | | libcacard is a library that adds smartcard support to qemu and/or spice Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.3 -> 4.4Wang Mingyu2023-08-152-11/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | arm_eabi.patch refreshed for 4.4 Changelog: =========== * Add support for AES-GCM-SIV with Nettle >= 3.9 to shorten NTS cookies to avoid some length-specific blocking of NTP on Internet * Add support for multiple refclocks using extpps option on one PHC * Add maxpoll option to hwtimestamp directive to improve PHC tracking with low packet rates * Add hwtstimeout directive to configure timeout for late timestamps * Handle late hardware transmit timestamps of NTP requests on all sockets * Handle mismatched 32/64-bit time_t in SOCK refclock samples * Improve source replacement * Log important changes made by command requests (chronyc) * Refresh address of NTP sources periodically * Request nanosecond kernel RX timestamping on FreeBSD * Set DSCP for IPv6 packets * Shorten NTS-KE retry interval when network is down * Update seccomp filter for musl * Warn if loading keys from file with unexpected permissions * Warn if source selection fails or falseticker is detected * Add selectopts command to modify source-specific selection options * Add timestamp sources to serverstats report and make its fields 64-bit * Add -e option to chronyc to indicate end of response Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: add CVE_PRODUCTChen Qi2023-08-071-0/+2
| | | | | | | | vmware:tools is also a valid CVE_PRODUCT for open-vm-tools, e.g., https://nvd.nist.gov/vuln/detail/CVE-2023-20867. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* remove unused AUTHOR variableMichael Opdenacker2023-08-031-1/+0
| | | | | | | | | No longer used in generating packages Also creates a possible confusion with the recipe maintainer name. Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 46.0 -> 47.0Wang Mingyu2023-08-011-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdio-tools,mdio-netlink: Upgrade recipes to 1.3.0Wang Mingyu2023-08-013-1/+1
| | | | | | | | | | | | | | | | | | Changelog: =========== Primarily widen the gamut of supported kernel versions, now supporting all kernels from 5.2 and onwards. Added ------ mvls: Support for 88E6320/88E6321 Changed -------- mdio-netlink: Adapt to the upstream C22/C45 refactor. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cve_check: convert CVE_CHECK_IGNORE to CVE_STATUSAndrej Valek2023-07-274-16/+8
| | | | | | | | | - Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version Signed-off-by: Andrej Valek <andrej.valek@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.0.6 -> 4.0.7Wang Mingyu2023-07-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== The following vulnerabilities have been fixed: wnpa-sec-2023-21[3] Kafka dissector crash. Issue 19105[4]. wnpa-sec-2023-22[5] iSCSI dissector crash. Issue 19164[6]. The following bugs have been fixed: -Crash when (re)loading a capture file after renaming a dfilter macro. Issue 13753[7]. - Moving a column deselects selected packet and moves to beginning of packet list. Issue 16251[8]. -If you set the default interface in the preferences, it doesn't work with TShark. Issue 16593[9]. -Severe performance issues in Follow → Save As raw workflow. Issue 17313[10]. -TShark doesn't support the tab character as an aggregator character in \"-T fields\" Issue 18002[11]. -On Windows clicking on a link in the 'Software Update' window launches, now unsupported, MS Internet Explorer. Issue 18488[12]. -Wireshark 4.x.x on Win10-x64 crashes after saving a file with a name already in use. Issue 18679[13]. -NAS-5GS Operator-defined Access Category: Multiple Criteria values not displayed in dissected packet display. Issue 18941[14]. -Server Hello Packet Invisible - during 802.1x Authentication- from Wireshark App Version 4.0.3 (v4.0.3-0-gc552f74cdc23) & above. Issue 19071[15]. -TShark reassembled data is incomplete/truncated. Issue 19107[16]. CQL protocol parsing issues with 'Result' frames from open source Cassandra. Issue 19119[17]. -TLS 1.3 second Key Update doesn't work. Issue 19120[18]. -HTTP2 dissector reports an assertion error on large data frames. Issue 19121[19]. -epan: Single letter hostnames aren't displayed correctly. Issue 19137[20]. -BLF: CAN-FD-Message format is missing a field. Issue 19146[21]. -BLF: last parameter of LIN-Message is not mandatory (BUGFIX) Issue 19147[22]. -PPP IPv6CP: Incorrect payload length warning. Issue 19149[23]. -INSTALL file needs to be updated for Debian. Issue 19167[24]. -Some RTP streams make Wireshark crash when trying to play stream. Issue 19170[25]. -Wrong ordering in OpenFlow 1.0 Datapath unique ID. Issue 19172[26]. -Incorrect mask in RTCP slice picture ID. Issue 19182[27]. -Dissection error in AMQP 1.0. Issue 19191[28]. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdio-tools: Update to latest on trunkKhem Raj2023-07-151-1/+1
| | | | | | This brings fixed for compiling kmod with linux 6.4+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: Security fix CVE-2023-20867Yi Zhao2023-06-292-0/+164
| | | | | | | | | | | | | | | | CVE-2023-20867: A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-20867 Patch from: https://github.com/vmware/open-vm-tools/blob/CVE-2023-20867.patch/2023-20867-Remove-some-dead-code.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: upgrade 4.4.3 -> 4.4.4Archana Polampalli2023-06-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release contains bug fixes only. The following CVEs have been addressed: CVE-2023-27783 CVE-2023-27784 CVE-2023-27785 CVE-2023-27786 CVE-2023-27787 CVE-2023-27788 CVE-2023-27789 Changelog: ========= dlt_jnpr_ether_cleanup: check subctx before cleanup by @Marsman1996 in #781 Bug #780 assert tcpedit dlt cleanup by @fklassen in #800 Fix bugs caused by strtok_r by @Marsman1996 in #783 Bug #782 #784 #785 #786 #787 #788 strtok r isuses by @fklassen in #801 Update en10mb.c by @david-guti in #793 PR #793 ip6 unicast flood by @fklassen in #802 Bug #719 fix overflow check for parse_mpls() by @fklassen in #804 PR #793 - update tests for corrected IPv6 MAC by @fklassen in #805 PR #793 - update tests for vlandel by @fklassen in #806 Feature #773 gh actions ci by @fklassen in #807 Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: add option to build with libeventBeniamin Sandu2023-06-241-1/+2
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* *.patch: add Upstream-Status to all patchesMartin Jansa2023-06-2140-0/+80
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.9.10 -> 5.9.11Wang Mingyu2023-06-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - A deadlock in the vici plugin has been fixed that could get triggered when multiple connections were initiated/terminated concurrently and control-log events were raised by the watcher_t component. - CRLs have to be signed by a certificate that has the cRLSign keyUsage bit encoded (even if it's a CA), or a CA certificate without keyUsage extension. - Optional CA labels in EST server URIs are supported by `pki --est/estca`. - CMS-style signatures in PKCS#7 containers are supported by the pkcs7 and openssl plugins, which allows verifying RSA-PSS and ECDSA signatures. - Fixed a regression in the server implementation of EAP-TLS with TLS 1.2 or earlier that was introduced with 5.9.10. - Ensure the TLS handshake is complete in the EAP-TLS client with TLS <= 1.2. - kernel-libipsec can process raw ESP packets on Linux (disabled by default) and gained support for trap policies. - The dhcp plugin uses an alternate method to determine the source address for unicast DHCP requests that's not affected by interface filtering. - Certificate and trust chain selection as initiator has been improved in case the local trust chain is incomplete and an unrelated certreq is received. - ECDSA and EdDSA keys in IPSECKEY RRs are supported by the ipseckey plugin. - To bypass tunnel mode SAs/policies, the kernel-wfp plugin installs bypass policies also on the FWPM_SUBLAYER_IPSEC_TUNNEL sublayer. - Stale OCSP responses are now replace in-place in the certificate cache. - Fixed parsing of SCEP server capabilities by `pki --scep/scepca`. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntpd: switch service type from forking to simpleJohannes Kauffmann2023-06-151-3/+2
| | | | | | | | | | | | | | | | | | Type=forking means systemd waits untill the main process, /usr/sbin/ntpd in this case, has exited. However, the ntpd daemon does not seem to call fork() or vfork() and runs endlessly untill killed. Eventually, this causes systemd to trigger a timeout, and the ntpd service is killed. All the while, "systemctl status ntpd" shows "activating (start)" instead of "active (running)". This is fixed by switching Type=forking to Type=simple. Reading ntpd(8) shows that the "-n" option requests ntpd not to fork, so also use that to be safe. Finally, there is no need anymore to keep a pidfile around. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: upgrade 4.2.8p16 -> 4.2.8p17Wang Mingyu2023-06-141-1/+1
| | | | | | | | | | | | | | | Changelog: =========== * [Bug 3824] Spurious "ntpd: daemon failed to notify parent!" logged at event_sync. * [Bug 3822] ntpd significantly delays first poll of servers specified by name. * [Bug 3821] 4.2.8p16 misreads hex authentication keys, won't interop with 4.2.8p15 or earlier. * Add tests/libntp/digests.c to catch regressions reading keys file or with symmetric authentication digest output. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipcalc: upgrade 1.0.2 -> 1.0.3Wang Mingyu2023-06-141-1/+1
| | | | | | | | | | | Changelog: =========== - When --no-decorate is given the default output will include no colors (#28) - Correctly split networks with /31 (#25) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-gtk: Fix build with lld linkerKhem Raj2023-06-141-0/+2
| | | | | | | | | | | | | | | | lld flags errors when checking for --version-script linker option since the export file specifies symbols which do not exist during link, so in a way it is right, however bfd linker works fine and ignores this error. perhaps the meson check should be improved but until them lets add --undefined-version option to linker when using lld Fixes aarch64-yoe-linux-ld.lld: error: TOPDIR/build/tmp/work/cortexa72-cortexa53-crypto-mx8-yoe-linux/spice-gtk/0.42-r0/git/src/spice-glib-sym-file:1: unknown directive: spice_audio_get >>> spice_audio_get >>> ^ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Update to a supported version 4.0.xArmin Kuster2023-06-065-239/+94
| | | | | | | | | | | | Drop CVE patch as its included. Drop 0003-bison-Remove-line-directives.patch as file is not longer there. refactor 0001-wireshark-src-improve-reproducibility.patch LIC_FILES_CHKSUM changed do to re-structuring. Remove TMPDIR found in some files. Remove c-ares PACKAGECONFIG as its a required pkg Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: Fix install conflict when enable multilib.Lei Maohui2023-06-061-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There's conflict of config.h between dovecot and lib32-dovecot. The differences of config-64.h and config-32.h are as follows: @@ -774,7 +774,7 @@ #define MODULE_SUFFIX ".so" /* Maximum value of off_t */ -#define OFF_T_MAX LONG_MAX +#define OFF_T_MAX LLONG_MAX /* Name of package */ #define PACKAGE "dovecot" @@ -834,7 +834,7 @@ #define PRIdTIME_T "ld" /* printf() format for uoff_t */ -#define PRIuUOFF_T "lu" +#define PRIuUOFF_T "llu" /* printf() fmt for hex time_t */ #define PRIxTIME_T "lx" @@ -846,19 +846,19 @@ #define SIZEOF_INT 4 /* The size of `long', as computed by sizeof. */ -#define SIZEOF_LONG 8 +#define SIZEOF_LONG 4 /* The size of `long long', as computed by sizeof. */ #define SIZEOF_LONG_LONG 8 /* The size of `void *', as computed by sizeof. */ -#define SIZEOF_VOID_P 8 +#define SIZEOF_VOID_P 4 /* Build SQL drivers as plugins */ /* #undef SQL_DRIVER_PLUGINS */ /* Maximum value of ssize_t */ -#define SSIZE_T_MAX LONG_MAX +#define SSIZE_T_MAX INT_MAX /* C99 static array */ #define STATIC_ARRAY static @@ -887,13 +887,13 @@ /* #undef UOFF_T_INT */ /* Define if off_t is long */ -#define UOFF_T_LONG /**/ +/* #undef UOFF_T_LONG */ /* Define if off_t is long long */ -/* #undef UOFF_T_LONG_LONG */ +#define UOFF_T_LONG_LONG /**/ /* Maximum value of uoff_t */ -#define UOFF_T_MAX ULONG_MAX +#define UOFF_T_MAX ULLONG_MAX /* Build with checkpassword userdb support */ #define USERDB_CHECKPASSWORD /**/ @@ -935,7 +935,7 @@ #endif /* Number of bits in a file offset, on hosts where this is settable. */ -/* #undef _FILE_OFFSET_BITS */ +#define _FILE_OFFSET_BITS 64 /* Define for large files, on AIX-style hosts. */ /* #undef _LARGE_FILES */ Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: upgrade 4.2.8p15 -> 4.2.8p16Wang Mingyu2023-06-054-29/+31
| | | | | | | | | | | | | | | | 0001-libntp-Do-not-use-PTHREAD_STACK_MIN-on-glibc.patch 0001-test-Fix-build-with-new-compiler-defaults-to-fno-com.patch refreshed for new version. Changelog ========= - fixes 4 vulnerabilities (3 LOW and 1 None severity), - fixes 46 bugs - includes 15 general improvements - adds support for OpenSSL-3.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ettercap: Do not generate #line directives with bison/flexKhem Raj2023-05-281-0/+2
| | | | | | | Fixes File /usr/src/debug/ettercap/0.8.3.1-r0/utils/ef_grammar.c in package ettercap-src contains reference to TMPDIR Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Use target path for systemctlKhem Raj2023-05-282-1/+36
| | | | | | | Fixes WARNING: rdma-core-46.0-r0 do_package_qa: QA Issue: File /usr/lib/udev/rules.d/60-srp_daemon.rules in package rdma-core contains reference to TMPDIR Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ruli: Pass cflags to makefileKhem Raj2023-05-281-1/+1
| | | | | | | Fixes WARNING: ruli-0.36-r0 do_package_qa: QA Issue: File /usr/lib/.debug/libruli.so.4 in package ruli-dbg contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipvsadm: Pass build environment cflags to compilerKhem Raj2023-05-263-3/+69
| | | | | | | | | This helps in avoiding absolute build time paths in binaries debug info Fixes WARNING: ipvsadm-1.31-r0 do_package_qa: QA Issue: File /usr/sbin/.debug/ipvsadm in package ipvsadm-dbg contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 11:06:47 +0000