summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
...
* libesmtp: bump 1.0.6 -> 1.1.0Jiaqing Zhao2022-03-034-105/+32
| | | | | | This also fixes CVE-2019-19977. Signed-off-by: Jiaqing Zhao <jiaqing.zhao@linux.intel.com>
* spice-protocol: upgrade 0.14.3 -> 0.14.4Wang Mingyu2022-02-241-1/+1
| | | | | | | | | | Major changes in 0.14.4 ======================= * Fix enum deprecation warning for visual studio * Fix documentation typos in stream-device.h Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: upgrade 4.4.0 -> 4.4.1Wang Mingyu2022-02-241-1/+1
| | | | | | | | | | | | | Changelog: ========= Bug #708 fix support for feeding PCAP files from STDIN Bug #705 fix Debian/kfreebsd build Bug #704 fix typos Bug #703 safeguard against corrupt packet lengths in checksum functions Bug #702 fix double free in Juniper DLT Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 38.0 -> 39.0Wang Mingyu2022-02-231-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ========= b2fedc4 rsocket: Make sure that the allocated memory is aligned ebbdb85 Merge pull request #1107 from Sindhu-Devale/libirdma-12-9-fixes a83619b providers: Move input validation for memory window bind to core a274c9c providers/rxe: Replace '%' with '&' in check_qp_queue_full() 812ab81 Merge pull request #1128 from Wenpeng-Liang/clear_rq_sge 1a9b2db docs: Fix typo in pyverbs example d498180 libhns: Clear remaining unused sges when post recv d99f61c Merge pull request #1127 from Wenpeng-Liang/misc_bugfix 7307264 verbs: Fix description of manual for ibv wc read byte len function c298130 verbs: Fix a typo Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Fix DeprecationWarning about regexpsMartin Jansa2022-02-211-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes: meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:125: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:126: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:128: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:129: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:130: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-graphics/ttf-fonts/ttf-mplus_027.bb:18: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-multimedia/libcdio/libcdio-paranoia_10.2+2.0.1.bb:21: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-multimedia/libcdio/libcdio_2.1.0.bb:28: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1342: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1343: DeprecationWarning: invalid escape sequence \- oe-core/meta/classes/package.bbclass:1343: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1344: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1345: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1348: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1350: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1353: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1355: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1358: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1360: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1365: DeprecationWarning: invalid escape sequence \. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Use new CVE_CHECK_IGNORE variableKhem Raj2022-02-213-3/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Use renamed SKIP_RECIPE varFlagKhem Raj2022-02-212-2/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networking: add new netsniff-ng recipe version 0.6.8Clément Péron2022-02-172-0/+62
| | | | | | | | | | Netsniff-ng is a fast zero-copy analyzer, pcap capturing and replaying tool. Actually the Makefile doesn't create the folder when installing tools, let's add a patch to fix this. Signed-off-by: Clément Péron <peron.clem@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: Avoid linking libm staticallyKhem Raj2022-02-162-0/+40
| | | | | | This fixes build on x86 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: update to 5.1Oleksandr Kravchuk2022-02-111-1/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: update HOMEPAGEYi Zhao2022-02-091-1/+2
| | | | | | | The official site was moved to https://tcpreplay.appneta.com/. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: upgrade 5.0 -> 5.2.1Wang Mingyu2022-02-085-34/+34
| | | | | | | | change configure.seed to configure.ac.in refresh 0001-Makefile.in-don-t-use-the-internal-lua.patch Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndpi: upgrade 4.0 -> 4.2Wang Mingyu2022-02-082-13/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | refresh 0001-autogen.sh-not-generate-configure.patch Changelog: ========= New Features ----------- Add a "confidence" field indicating the reliability of the classification Add risk exceptions for services and domain names via ndpi_add_domain_risk_exceptions() Add ability to report whether a protocol is encrypted New Supported Protocols and Services ----------------------------------- Add protocol detection for: Badoo Cassandra EthernetIP Improvements ------------ Significantly reduced memory footprint from 2.94 KB to 688 B per flow Improve protocol detection for: BitTorrent ICloud Private Relay IMAP, POP3, SMTP Log4J/Log4Shell Microsoft Azure Pandora TV RTP RTSP Salesforce STUN Whatsapp QUICv2 Zoom Add flow risk: NDPI_CLEAR_TEXT_CREDENTIALS NDPI_POSSIBLE_EXPLOIT (Log4J) NDPI_TLS_FATAL_ALERT NDPI_TLS_CERTIFICATE_ABOUT_TO_EXPIRE Update WhatsAPP and Instagram addresses Update the list of default ports for QUIC Update WindowsUpdate URLs Add support for the .goog Google TLD Add googletagmanager.com Add bitmaps and API for handling compressed bitmaps Add JA3 in risk exceptions Add entropy calculation to check for suspicious (encrypted) payload Add extraction of hostname in SMTP Add RDP over UDP dissection Add support for TLS over IPV6 in Subject Alt Names field Improve JSON and CSV serialization Improve IPv6 support for almost all dissectors Improve CI and unit tests, add arm64, armhf and s390x as part of CI Improve WHOIS detection, reduce false positives Improve DGA detection for skipping potential DGAs of known/popular domain names Improve user agent analysis Reworked HTTP protocol dissection including HTTP proxy and HTTP connect Changes -------- TLS obsolete protocol is set when TLS < 1.2 (used to be 1.1) Numeric IPs are not considered for DGA checks Differentiate between standard Amazon stuff (i.e market) and AWS Remove Playstation VUE protocol Remove pandora.tv from Pandora protocol Remove outdated SoulSeek dissector Fixes ----- Fix race conditions Fix dissectors to be big-endian friendly Fix heap overflow in realloc wrapper Fix errors in Kerberos, TLS, H323, Netbios, CSGO, Bittorrent Fix wrong tuple comparison Fix ndpi_serialize_string_int64 Fix Grease values parsing Fix certificate mismatch check Fix null-dereference read for Zattoo with IPv6 Fix dissectors initialization for XBox, Diameter Fix confidence for STUN classifications Fix FreeBSD support Fix old GQUIC versions on big-endian machines Fix aho-corasick on big-endian machines Fix DGA false positive Fix integer overflow for QUIC Fix HTTP false positives Fix SonarCloud-CI support Fix clashes setting the hostname on similar protocols (FTP, SMTP) Fix some invalid TLS guesses Fix crash on ARM (Raspberry) Fix DNS (including fragmented DNS) dissection Fix parsing of IPv6 packets with extension headers Fix extraction of Realm attribute in STUN Fix support for START-TLS sessions in FTP Fix TCP retransmissions for multiple dissectors Fix DES initialisation Fix Git protocol dissection Fix certificate mismatch for TLS flows with no client hello observed Fix old versions of GQUIC on big-endian machines Misc ---- Add tool for generating automatically the Azure IP list Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: upgrade 4.3.4 -> 4.4.0wangmy2022-02-081-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Update strlcpy.c and strlcat.c PR #636 Apply #616 fix to flows.c, fix #665 Bug #670: update Travis CI to focal Bug #669: LINUX installed netmap auto detection Feature #626 - Support for Q-in-Q VLAN tags Bug #677 skipbroadcast Bug #689: add security policy document Directories of pcaps as arguments PR #682 Bug #679 fix PPS calc for long-running sessions Bug #668 Improve SDK selection Bug #696 fix directory include feature Bug #695 mac os tests fail Bug #674 - Revert "send_packet: Avoid clock drift by using time since first packet" Feature #563 mac update on multicast Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: Fix build with muslKhem Raj2022-02-072-0/+37
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: set precise licenseRoss Burton2022-02-031-1/+3
| | | | | | | | | | fping is under a non-standard license: it's almost BSD-3-Clause but is phrased differently. As interpretation of the licenses isn't something we want to do, we can use the exact license text instead of referring to the 3-clause BSD text. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocol: upgrade to 1.14.3Ross Burton2022-02-032-28/+19
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: use precise BSD licenseRoss Burton2022-02-031-1/+1
| | | | | | | This package is BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: set correct LICENSERoss Burton2022-02-031-1/+1
| | | | | | | Remove BSD, as this package is entirely LGPL2+. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpslice: upgrade 1.2a3 -> 1.5Yi Zhao2022-02-034-126/+25
| | | | | | | | | * Update SRC_URI to official download page * Drop patches which had been fixed upstream. * Add UPSTREAM_CHECK_REGEX Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: upgrade 4.99.0 -> 4.99.1Yi Zhao2022-02-032-46/+5
| | | | | | | | | * Skip aclocal in do_configure * Inherit pkgconfig then we can drop 0001-aclocal.m4-Skip-checking-for-pcap-config.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mtr: upgrade 0.94 -> 0.95wangmy2022-01-192-72/+2
| | | | | | | | 0001-Fix-a-lot-of-Werror-format-security-errors-in-printw.patch removed since it is included in 0.95. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 36.0 -> 38.0wangmy2022-01-181-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ========= Merge pull request #1085 from rleon/upgrade-fc35 build: Update to clang 13 build: Update to Fedora 35 ci: Convert deprecated distutils Merge pull request #1084 from jgunthorpe/kernel-headers Update kernel headers build: Fix distutils deprecation warning during vuild pyverbs: Prepare code to Cython 3 mlx5: Change pthread_yield to sched_yield Merge pull request #1083 from Wenpeng-Liang/fix_db Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: Add missing header stdc-predef.hKhem Raj2022-01-182-0/+32
| | | | | | | | | | | | musl highlights this problem Fixes | ../../tnftp-20210827/libedit/chartype.h:47:3: error: wchar_t must store ISO 10646 characters | #error wchar_t must store ISO 10646 characters | ^ | 1 error generated. Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Yi Zhao <yi.zhao@windriver.com>
* tnftp: upgrade 20151004 -> 20210827Yi Zhao2022-01-182-46/+3
| | | | | | | | * License-Update: Update copyright years * Drop tnftp-autotools.patch as the issue had been fixed upstream Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bridge-utils: upgrade 1.7 -> 1.7.1Yi Zhao2022-01-185-15/+165
| | | | | | | | | | | * Update SRC_URI to official git repo per [1] * Refresh patches * Backport a patch to fix build error with musl [1] https://wiki.linuxfoundation.org/networking/bridge Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntpsec: Add glibc-2.34/kernel-5.14 seccomp fixesAlex Kiernan2022-01-054-0/+110
| | | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Alex Kiernan <alexk@zuma.ai> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: update to latest stable 3.4.11Armin Kuster2022-01-052-10/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For more infromation, see: https://www.wireshark.org/docs/relnotes/wireshark-3.4.11.html refresh 0004-lemon-Remove-line-directives.patch Includes CVEs: 3.4.11: wnpa-sec-2021-16 Gryphon dissector crash. Issue 17737. CVE-2021-4186. wnpa-sec-2021-17 RTMPT dissector infinite loop. Issue 17745. CVE-2021-4185. wnpa-sec-2021-18 BitTorrent DHT dissector infinite loop. Issue 17754. CVE-2021-4184. wnpa-sec-2021-20 RFC 7468 file parser infinite loop. Issue 17801. CVE-2021-4182. wnpa-sec-2021-21 Sysdig Event dissector crash. CVE-2021-4181. 3.4.10: wnpa-sec-2021-07 Bluetooth DHT dissector crash. Issue 17651. CVE-2021-39929. wnpa-sec-2021-08 Bluetooth HCI_ISO dissector crash. Issue 17649. CVE-2021-39926. wnpa-sec-2021-09 Bluetooth SDP dissector crash. Issue 17635. CVE-2021-39925. wnpa-sec-2021-10 Bluetooth DHT dissector large loop. Issue 17677. CVE-2021-39924. wnpa-sec-2021-11 PNRP dissector large loop. Issue 17684. wnpa-sec-2021-12 C12.22 dissector crash. Issue 17636. CVE-2021-39922. wnpa-sec-2021-13 IEEE 802.11 dissector crash. Issue 17704. CVE-2021-39928. wnpa-sec-2021-14 Modbus dissector crash. Issue 17703. CVE-2021-39921. wnpa-sec-2021-15 IPPUSB dissector crash. Issue 17705. CVE-2021-39920. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: remove redundant DEPENDSArmin Kuster2021-12-271-1/+1
| | | | | | | drop openssl and gmp from DEPENDS, covered in PACKAGECONFIG Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: add integrity optionsArmin Kuster2021-12-271-0/+36
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: add tpm PACKAGECONFIGArmin Kuster2021-12-271-0/+5
| | | | | | | migrate meta-tpm strongswan tweaks to meta-networking Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: provide PACKAGECONFIG for cureve25519Armin Kuster2021-12-271-2/+2
| | | | | | | | Not everyone wants this to be installed by default. Enable to remove cureve25519 is someone wants to. Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.31 -> 2.0.32Yi Zhao2021-12-211-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.4 -> 2.5.5zhengruoqin2021-12-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Fix error in example firewall.sh script configure: remove useless -Wno-* from default CFLAGS Add argv_insert_head__empty_argv__head_only to argv tests Move deprecation of SWEET32/64bit block size ciphers to 2.7 Include --push-remove in the output of --help. Move '--push-peer-info' documentation from 'server' to 'client options' add test case(s) to notice 'openvpn --show-cipher' crashing BUILD: enable CFG and Spectre mitigation for MSVC Fix loading PKCS12 files on Windows msvc: fix product version display msvc: add missing header to project file config-msvc.h: fix OpenSSL-related defines contrib/vcpkg-ports: remove openssl port GitHub Actions: use latest working lukka/run-vcpkg Use network address for emulated DHCP server as a default Load OpenSSL config on Windows from trusted location ring_buffer.h: fix GCC warning about unused function ssh_openssl.h: remove unused declaration vcpkg/pkcs11-helper: compatibility with latest vcpkg config-msvc.h: indicate key material export support Don't use BF-CBC in unit tests if we don't have it Define have_blowfish variable in ncp unit tests doc link-options.rst: Use free open-source dynamic-DNS provider URL Fix some more wrong defines in config-msvc.h Ensure the current common_name is in the environment for scripts Require EC key support in Windows builds resolvconf fails with -p Update IRC information in CONTRIBUTING.rst doc/man (vpn-network-options): fix foreign_option_{n} typo README.down-root: Fix plugin module name Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.1 -> 4.2zhengruoqin2021-12-212-13/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | refresh arm_eabi.patch Changelog: ========== Enhancements -Add support for NTPv4 extension field improving synchronisation stability and resolution of root delay and dispersion (experimental) -Add support for NTP over PTP (experimental) -Add support for AES-CMAC and hash functions in GnuTLS -Improve server interleaved mode to be more reliable and support multiple clients behind NAT -Update seccomp filter -Add statistics about interleaved mode to serverstats report Bug fixes -Fix RTC support with 64-bit time_t on 32-bit Linux -Fix seccomp filter to work correctly with bind*device directives -Suppress kernel adjustments of system clock (dosynctodr) on illumos Other changes -Switch Solaris support to illumos Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: install dbus service configurationJeremy Kerr2021-12-211-0/+8
| | | | | | | | mctpd ships with an example dbus service configuration, so install in the dbus system configuration dir. Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: upgrade to v1.0Jeremy Kerr2021-12-212-89/+3
| | | | | | | | We have a tag for 1.0, now: better handling of local stack configuration at runtime, and the 5.15 kernel header change has been integrated. Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: remove obsolete support for renamed libtoolRoss Burton2021-12-131-3/+1
| | | | | | | | libtool is now longer renamed to ${host}-libtool, so remove the changes to support this. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bmon: fix PVOleksandr Kravchuk2021-12-101-0/+0
| | | | | | | The commit hash is pointing out to the tag v4.0, not 2.1.0. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntpsec: Disable seccomp on riscv32Khem Raj2021-12-021-1/+1
| | | | | | rv32 does not have seccomp support yet. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: fix pyext_PATTERN for cross compilationYi Zhao2021-11-252-0/+60
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The pyext_PATTERN will add native arch as suffix when cross compiling. For example, on qemuarm64, it is expanded to: pyext_PATTERN ='%s.cpython-310-x86_64-linux-gnu.so' which will result in the incorrect library name. root@qemuarm64:~# find /usr/lib/ -name \*ldb\* /usr/lib/pkgconfig/pyldb-util.cpython-310-x86_64-linux-gnu.pc /usr/lib/pkgconfig/ldb.pc /usr/lib/libpyldb-util.cpython-310-x86-64-linux-gnu.so.2.3.2 /usr/lib/libldb.so.2.3.2 /usr/lib/libpyldb-util.cpython-310-x86-64-linux-gnu.so.2 /usr/lib/libldb.so /usr/lib/libldb.so.2 /usr/lib/python3.10/site-packages/_ldb_text.py /usr/lib/python3.10/site-packages/ldb.cpython-310-x86_64-linux-gnu.so /usr/lib/libpyldb-util.cpython-310-x86-64-linux-gnu.so Set pyext_PATTERN to '%s.so' to remove the suffix. After the patch: root@qemuarm64:~# find /usr/lib/ -name \*ldb\* /usr/lib/pkgconfig/pyldb-util.pc /usr/lib/pkgconfig/ldb.pc /usr/lib/libpyldb-util.so.2.3.2 /usr/lib/libldb.so.2.3.2 /usr/lib/libpyldb-util.so.2 /usr/lib/libldb.so /usr/lib/libldb.so.2 /usr/lib/python3.10/site-packages/_ldb_text.py /usr/lib/python3.10/site-packages/ldb.so /usr/lib/libpyldb-util.so Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: fix pyext_PATTERN for cross compilationYi Zhao2021-11-252-5/+43
| | | | | | | | | | | | | | | | | | | The pyext_PATTERN will add native arch as suffix when cross compiling. For example, on qemuarm64, it is expanded to: pyext_PATTERN ='%s.cpython-310-x86_64-linux-gnu.so' which will result in the incorrect library name. root@qemuarm64:~# find /usr/lib/python3.10/ -name \*tevent\*.so /usr/lib/python3.10/site-packages/_tevent.cpython-310-x86_64-linux-gnu.so /usr/lib/python3.10/site-packages/_tevent.so Set pyext_PATTERN to '%s.so' to remove the suffix. After the patch: root@qemuarm64:~# find /usr/lib/python3.10/ -name \*tevent\*.so /usr/lib/python3.10/site-packages/_tevent.so Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtdb: fix pyext_PATTERN for cross compilationYi Zhao2021-11-252-6/+43
| | | | | | | | | | | | | | | | | | | The pyext_PATTERN will add native arch as suffix when cross compiling. For example, on qemuarm64, it is expanded to: pyext_PATTERN ='%s.cpython-310-x86_64-linux-gnu.so' which will result in the incorrect library name. root@qemuarm64:~# find /usr/lib/python3.10/ -name tdb\* /usr/lib/python3.10/site-packages/tdb.so /usr/lib/python3.10/site-packages/tdb.cpython-310-x86_64-linux-gnu.so Set pyext_PATTERN to '%s.so' to remove the suffix. After the patch: root@qemuarm64:~# find /usr/lib/python3.10/ -name tdb\* /usr/lib/python3.10/site-packages/tdb.so Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: fix pyext_PATTERN for cross compilationYi Zhao2021-11-252-0/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The pyext_PATTERN will add native arch as suffix when cross compiling. For example, on qemuarm64, it is expanded to: pyext_PATTERN ='%s.cpython-310-x86_64-linux-gnu.so' which will result in the incorrect library name. root@qemuarm64:~# find /usr/lib -name \*talloc\* /usr/lib/pkgconfig/talloc.pc /usr/lib/pkgconfig/pytalloc-util.cpython-310-x86_64-linux-gnu.pc /usr/lib/libpytalloc-util.cpython-310-x86-64-linux-gnu.so.2.3.3 /usr/lib/libtalloc.so.2 /usr/lib/libpytalloc-util.cpython-310-x86-64-linux-gnu.so.2 /usr/lib/libpytalloc-util.cpython-310-x86-64-linux-gnu.so /usr/lib/libtalloc.so /usr/lib/libtalloc.so.2.3.3 /usr/lib/python3.10/site-packages/talloc.cpython-310-x86_64-linux-gnu.so Set pyext_PATTERN to '%s.so' to remove the suffix. After the patch: root@qemuarm64:~# find /usr/lib -name \*talloc\* /usr/lib/pkgconfig/talloc.pc /usr/lib/pkgconfig/pytalloc-util.pc /usr/lib/libpytalloc-util.so.2.3.3 /usr/lib/libtalloc.so.2 /usr/lib/libpytalloc-util.so.2 /usr/lib/libpytalloc-util.so /usr/lib/libtalloc.so /usr/lib/libtalloc.so.2.3.3 /usr/lib/python3.10/site-packages/talloc.so Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* smcroute: upgrade 2.5.3 -> 2.5.4wangmy2021-11-161-1/+1
| | | | | | | | | | | | | | | Changes: Automatically extract new version from GIT tag Fixes: Avoid trying to delete inactive VIFs. Fixing an annoying bogus error: "Failed deleting VIF for iface lo: Resource temporarily unavailable" Fix #171: too small string buffer for IPv6 address causing garbled output in periodic expiry callback Fix too small buffer for IPv6 address in mroute display functions Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 2.3.0 -> 2.3.2Yi Zhao2021-11-161-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: Change the default cipher to AES-256-GCM for server configurationswangmy2021-11-151-1/+1
| | | | | | | | | | | | | | This change makes the server use AES-256-GCM instead of BF-CBC as the default cipher for the VPN tunnel. To avoid breaking existing running configurations defaulting to BF-CBC, the Negotiable Crypto Parameters (NCP) list contains the BF-CBC in addition to AES-CBC. This makes it possible to migrate existing older client configurations one-by-one to use at least AES-CBC unless the client is updated to v2.4 (which defaults to upgrade to AES-GCM automatically) Upstream-Status: Backport [https://src.fedoraproject.org/rpms/openvpn/blob/rawhide/f/0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch] Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vpm-tools: update 11.2.5 -> 11.3.5Alexander Kanavin2021-11-137-112/+52
| | | | | | | | | | | Drop 0001-hgfsmounter-Makefile.am-support-usrmerge.patch (file no longer present) 0001-pollGtk-Fix-volatile-qualifier-exposed-incorrectly.patch (issue fixed upstream) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: add required kernel modules to RRECOMMENDSYi Zhao2021-11-111-1/+4
| | | | | | | | | | Strongswan failed to startup because there is no kernel module named ipsec. Add basic kernel modules required by strongswan per [1]. [1] https://wiki.strongswan.org/projects/strongswan/wiki/KernelModules, Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.4.21 -> 6.4.23wangmy2021-11-091-2/+2
| | | | | | | | | | | | | | | | | fetchmail-6.4.23 (released 2021-10-31, 30206 LoC): For common ssh-based IMAP PREAUTH setups (i. e. those that use a plugin - no matter its contents - and that set auth ssh), change the STARTTLS error message to suggest sslproto '' instead. This is a commonly reported issue after the CVE-2021-39272 fix in 6.4.22. Fixes Redhat Bugzilla 2008160. Fixes GitLab #39. License-Update: Add "SSL library considerations" to COPYING. Format of COPYING changed. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 18:12:20 +0000