summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
...
* strongswan: upgrade 5.9.2 -> 5.9.3zangrc2021-07-131-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | - Added AES_ECB, SHA-3 and SHAKE-256 support to wolfssl plugin. - Added AES_CCM and SHA-3 signature support to openssl plugin. - The x509 and openssl plugins now consider the authorityKeyIdentifier, if available, before verifying signatures, which avoids unnecessary signature verifications after a CA key rollover if both certificates are loaded. - The pkcs11 plugin better handles optional attributes like CKA_TRUSTED, which previously depended on a version check. - charon-nm now supports using SANs as client identities, not only full DNs. - charon-tkm now handles IKE encryption. - A MOBIKE update is sent again if a a change in the NAT mappings is detected but the endpoints stay the same. - Converted most of the test case scenarios to the vici interface Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: fix ntpdate to wait for subprocessesAdrian Zaharia2021-06-281-0/+5
| | | | | | | | | | | | | | | When using systemd, ntpdate-sync script will start in background triggering the start of ntpd without actually exiting. This results in an bind error in ntpd startup. Add wait at the end of ntpdate script to ensure that when the ntpdate.service is marked as finished the oneshot script ntpdate-sync finished and unbind the ntp port Fixes #386 Signed-off-by: Adrian Zaharia <Adrian.Zaharia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: add CVE-2020-7224 and CVE-2020-27569 to allowlistAkifumi Chikazawa2021-06-261-0/+3
| | | | | | | | CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client, not for openvpn. Signed-off-by: Akifumi Chikazawa <chikazawa.akifu@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.2 -> 2.5.3zangrc2021-06-231-3/+3
| | | | | | | -License-Update: Copyright year updated to 2021. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: add CVE-2016-9312 to allowlistSekine Shigeki2021-06-181-0/+3
| | | | | Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: set ROOTSBINDIR to /usr/sbin if DISTRO_FEATURES has usrmergeGeoff Parker2021-06-181-3/+14
| | | | | | | | | | | | | | Fixes cif-utils recipe build when DISTRO_FEATURES includes 'usrmerge' Add do_configure_prepend() to override ROOTSSBINDIR environment variable so that the utilities are installed in /usr/sbin rather than /sbin. Setting --exec-prefix or --prefix in EXTRA_OECONF does not work. Update do_install_append() to NOT remove /usr/bin /usr/sbin if usrmerge is set in DISTRO_FEATURES Signed-off-by: Geoff Parker <geoffrey.parker@arthrex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Use the built-in options for removing pack toolsEd Tanous2021-06-181-5/+1
| | | | | | | | | | | | | For distros that want to use the ENABLE_LIB_ONLY option, the rm call will fail, because ENABLE_HPACK_TOOLS (set implicitly as part of ENABLE_LIB_ONLY) removes those two binaries from the build, so they then can't be removed again. This commit sets ENABLE_HPACK_TOOLS=OFF, which not only allows for the option to be overridden in other meta layers, also allows a simplified use of ENABLE_LIB_ONLY in meta layers that don't want to ship the binaries. Signed-off-by: Ed Tanous <ed@tanous.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: add CVE-2016-4983 to allowlistito-yuichi@fujitsu.com2021-06-151-0/+3
| | | | | | | CVE-2016-4983 affects only postinstall script on specific distribution, so add it to allowlist. Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.4.5 -> 3.4.6zangrc2021-06-091-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 1.5.8 -> 2.3.0Yi Zhao2021-06-056-125/+43
| | | | | | | | | | | | | | | Refresh patches: do-not-import-target-module-while-cross-compile.patch options-1.5.4.patch avoid-openldap-unless-wanted.patch libldb-fix-musl-libc-conflict-type-error.patch Drop patches: 0001-waf-add-support-of-cross_compile.patch libldb-fix-musl-libc-unkown-type-error.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade to 1.6.9Khem Raj2021-06-053-76/+50
| | | | | | | Fix Set but unused clang warning sigignore issue is already fixed in 1.6.9 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: Fix build with llvm libunwindKhem Raj2021-05-312-0/+31
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Add zstd via packageconfigKhem Raj2021-05-281-0/+1
| | | | | | Its disabled by default Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Upgrade to 35.0Khem Raj2021-05-211-2/+2
| | | | | | | | | | | Native python is being probed on some builds Fixes recipe-sysroot-native/usr/share/cmake-3.20/Modules/FindPackageHandleStandardArgs.cmake:230 (message): Could NOT find PythonLibs (missing: PYTHON_LIBRARIES PYTHON_INCLUDE_DIRS) (Required is exact version "3.8") Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.0 -> 4.1zhengruoqin2021-05-192-7/+7
| | | | | | | | Refresh the following patch: arm_eabi.patch Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: upgrade 4.3.3 -> 4.3.4zangrc2021-05-141-3/+3
| | | | | | | -License-Update: URL changed from HTTP to HTTPS. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.25.6 -> 1.25.7zangrc2021-05-141-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lksctp-tools: upgrade 1.0.18 -> 1.0.19zangrc2021-05-142-92/+2
| | | | | | | | 0001-m4-sctp.m4-make-conpatible-to-autoconf-2.70.patch Removed since this is included in 1.0.19. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ifenslave: upgrade 2.11 -> 2.12zangrc2021-05-141-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* http-parser: add recipeStefan Wiehler2021-05-121-0/+30
| | | | | | | HTTP request/response parser for C. Signed-off-by: Stefan Wiehler <stefan.wiehler@missinglinkelectronics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libowfat: Replace __pure__ with pure and remove using __deprecated__Khem Raj2021-05-032-0/+563
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.4.4 -> 3.4.5zangrc2021-04-291-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.1 -> 2.5.2zangrc2021-04-291-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.4.18 -> 6.4.19zangrc2021-04-291-2/+2
| | | | | | | | -License-Update: Change distribition to distribution. Specific permission is granted for the GPLed code in this distribution to be linked to OpenSSL without invoking GPL clause 2(b). Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: upgrade 1.10.0 -> 1.11.0zangrc2021-04-232-21/+32
| | | | | | | | Refresh the following patch: disable-documentation.patch Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: Make PACKAGECONFIG a default valueJoe Hershberger2021-04-171-1/+1
| | | | | | | | Change from a weak default to a default in the definition of the PACKAGECONFIG. In https://github.com/flihp/meta-measured/blob/master/networking-layer/recipes-support/strongswan/strongswan_5.%25.bbappend the PACKAGECONFIG is appended to, so if the definition is weak here, the variable will be empty when the bbappend attempts to add to it. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.25.5 -> 1.25.6zangrc2021-04-151-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: upgrade 2.84 -> 2.85zangrc2021-04-152-8/+8
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: upgrade 6.12 -> 6.13zangrc2021-04-151-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: Fix build with gcc 11Khem Raj2021-04-152-0/+30
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Trevor Gamblin <Trevor.Gamblin@windriver.com>
* open-vm-tools: upgrade 11.0.1 -> 11.2.5Randy MacLeod2021-04-1510-907/+184
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Drop 0001-GitHub-Issue-367.-Remove-references-to-deprecated-G_.patch since it was a backport. Drop 0001-pollGtk-Drop-volatile-qualifier.patch since it's covered by: f48efc8e Make pollGtk resetable. Drop 0001-utilBacktrace-Ignore-Warray-bounds.patch since it's covered by: 0cfda58a Make peeking back into the stack work for back traces Drop 0002-add-include-sys-sysmacros.h.patch since it's covered by: 69b7e1f9 Include sysmacros.h directly as mandated by glibc-2.25. Refit: 0005-Use-configure-to-test-for-feature-instead-of-platfor.patch 0009-Rename-poll.h-to-vm_poll.h.patch 0002-hgfsServerLinux-Consider-64bit-time_t-possibility.patch 0011-Use-uintmax_t-for-handling-rlim_t.patch Add: 0001-Add-resolv_compat.h-for-musl-builds.patch Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Trevor Gamblin <Trevor.Gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vnstat: Disable install parallism to fix a potential install raceKhem Raj2021-04-151-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | It seems in some cases installing vnstati program races and is tried twice, and second operation fails since it ensues somewhere between the file being created by first operation and file actually being created /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c vnstat vnstati '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/bin' | /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c -m 644 ../vnstat-2.6/man/vnstatd.8 '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/share/man/man8' | /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c -m 644 ../vnstat-2.6/man/vnstat.conf.5 '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/share/man/man5' | /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c -m 644 ../vnstat-2.6/man/vnstat.1 ../vnstat-2.6/man/vnstati.1 '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/share/man/man1' | make install-data-hook | make[3]: Entering directory '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/build' | Making install-exec in . | make[4]: Entering directory '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/build' | /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/mkdir -p '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/bin' | /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/mkdir -p '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/sbin' | /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c vnstat vnstati '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/bin' | /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c vnstatd '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/sbin' | /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install: cannot create regular file '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/bin/vnstati': File exists | make[4]: *** [Makefile:822: install-binPROGRAMS] Error 1 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* usbredir: upgrade 0.8.0 -> 0.9.0zangrc2021-04-081-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.58 -> 5.59zangrc2021-04-082-6/+6
| | | | | | | | Refresh the following patch: fix-openssl-no-des.patch Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.25.4 -> 1.25.5zangrc2021-04-081-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.4.17 -> 6.4.18zhengruoqin2021-04-011-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: move to meta-networkingMartin Jansa2021-03-2823-0/+1753
| | | | | | | | | | | | | | | | | | * and make it skipped only when meta-filesystem is missing as well * depends on libdnet from meta-networking and nothing in meta-oe depends on open-vm-tools * update packagegroup-meta-oe to match this, without either of these layers packagegroup-meta-oe is currently failing with: ERROR: Nothing RPROVIDES 'open-vm-tools' (but meta-oe/recipes-core/packagegroups/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it) open-vm-tools was skipped: Requires meta-networking and meta-filesystems to be present. NOTE: Runtime target 'open-vm-tools' is unbuildable, removing... Missing or unbuildable dependency chain was: ['open-vm-tools'] ERROR: Required build target 'packagegroup-meta-oe' has no buildable providers. Missing or unbuildable dependency chain was: ['packagegroup-meta-oe', 'open-vm-tools'] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.4.3 -> 3.4.4zangrc2021-03-181-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.25.3 -> 1.25.4zangrc2021-03-181-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.4.16 -> 6.4.17zangrc2021-03-161-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: upgrade 2.3.13 -> 2.3.14zangrc2021-03-161-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bridge-utils: Switch to use the main branchMingli Yu2021-03-111-1/+1
| | | | | | | | Fix the below do_fetch warning: WARNING: bridge-utils-1.7-r0 do_fetch: Failed to fetch URL git://git.kernel.org/pub/scm/linux/kernel/git/shemminger/bridge-utils.git, attempting MIRRORS if available Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* geoip-perl: Switch to use the main branchMingli Yu2021-03-111-1/+1
| | | | | | | | Fix the below do_fetch warning: WARNING: geoip-perl-1.51-r0 do_fetch: Failed to fetch URL git://github.com/maxmind/geoip-api-perl.git;protocol=https;, attempting MIRRORS if available Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* geoip: Switch to use the main branchMingli Yu2021-03-111-1/+1
| | | | | | | | Fix the below do_fetch warning: WARNING: geoip-1.6.12-r0 do_fetch: Failed to fetch URL git://github.com/maxmind/geoip-api-c.git, attempting MIRRORS if available Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: update to 1.25.3Oleksandr Kravchuk2021-03-071-4/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.9.1 -> 5.9.2zangrc2021-03-041-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.0 -> 2.5.1zangrc2021-03-041-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.57 -> 5.58Wang Mingyu2021-02-241-2/+2
| | | | | | | License-Update: Update year to 2021 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: update 4.9.3 -> 4.99.0Yi Fan Yu2021-02-216-158/+67
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Removed patches: * avoid-absolute-path-when-searching-for-libdlpi.patch reason: this is a solaris specific patch, It no longer generates QA error. * unnecessary-to-check-libpcap.patch reason: upstream changed the logic, a new patch was needed. New patch: * 0001-aclocal.m4-Skip-checking-for-pcap-config.patch reason: configure shouldn't look for pcap-config. upstream reference: cfc4c750a Modified patch: * add-ptest.patch reason: Makefile had slight change. new unrelated perl script was introduced, removed to make package QA happy. License: upstream removed some whitespace Ptest: binaries are now present in /usr/bin not /usr/sbin upstream commit: 95096be4f add perl libraries dependencies tests passed: 571 (qemux86-64) tests failed: 0 Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update common-licenses references to match new namesKhem Raj2021-02-212-2/+2
| | | | | | | | | The licenses were renamed to match their SPDX names, fix the references in LIC_FILES_CHKSUM Correct the checksums where they were wrong Signed-off-by: Khem Raj <raj.khem@gmail.com>