summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
* openvpn: upgrade 2.6.10 -> 2.6.11Wang Mingyu2024-06-272-7/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-configure.ac-eliminate-build-path-from-openvpn-versi.patch refreshed for 2.6.11 Changelog: ============= - Implement server_poll_timeout for socks - Use snprintf instead of sprintf for get_ssl_library_version - Add bracket in fingerprint message and do not warn about missing verification - Replace macos11 with macos14 in github runners - Only run coverity scan in OpenVPN/OpenVPN repository - Workaround issue in LibreSSL crashing when enumerating digests/ciphers - Properly handle null bytes and invalid characters in control messages - Allow to set ifmode for existing DCO interfaces in FreeBSD - samples: Update sample configurations - documentation: make section levels consistent - phase2_tcp_server: fix Coverity issue 'Dereference after null check' - script-options.rst: Update ifconfig_* variables - LZO: do not use lzoutils.h macros - Remove "experimental" denotation for --fast-io - Implement Windows CA template match for Crypto-API selector - misc.c: remove unused code - interactive.c: Improve access control for gui<->service pipe - Only schedule_exit() once Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: fix CVE-2024-2397Hitendra Prajapati2024-06-272-0/+130
| | | | | | | Upstream-Status: Backport from https://github.com/the-tcpdump-group/tcpdump/commit/b9811ef5bb1b7d45a90e042f81f3aaf233c8bcb2 Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Do not use overloadable attribute with muslKhem Raj2024-06-271-4/+2
| | | | | | | clang fortify with glibc is where the issue happens so limit it to just glibc Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Fix recvfrom override errors with glibc 2.40 and clangKhem Raj2024-06-212-0/+41
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 2.8.0 -> 2.8.1Yi Zhao2024-06-201-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: fix lib32-tnftp build failure with gcc-14Changqing Li2024-06-143-0/+108
| | | | | | | | | | | | | | | | | | | | | | | | | | | lib32-tnftp do_compile failed with gcc-14: ../../tnftp-20230507/libedit/terminal.c:597:56: error: passing argument 2 of 'terminal_overwrite' from incompatible pointer type [-Wincompatible-pointer-types] 597 | terminal_overwrite(el, &el->el_display[ | ^~~~~~~~~~~~~~~~ | | | wint_t * {aka unsigned int *} 598 | el->el_cursor.v][el->el_cursor.h], | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ../../tnftp-20230507/libedit/refresh.c:114:38: error: initialization of 'wchar_t *' {aka 'long int *'} from incompatible pointer type 'wint_t *' {aka 'unsigned int *'} [-Wincompatible-pointer-types] 114 | wchar_t *firstline = el->el_vdisplay[0]; For 64bit system: wchar_t is defined as int wint_t is define as unsigned int For 32bit system: wchar_t is defined as long int wint_t is define as unsigned int In 64bit case, it works well, but in 32bit case, gcc will take it as incompatible, and report above error Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* usbredir: upgrade 0.13.0 -> 0.14.0Wang Mingyu2024-06-111-1/+1
| | | | | | | | | | | | | Changelog: ============ - usbredirect: Fix redirecting identical devices - usbredirect: Fix CPU tight loop when run as TCP server - usbredirect: Fix some minor memory leaks - usbredirect: Add documentation about bus-device option - usbredirtestclient: Fix build on MacOS 10.5 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* udpcast: add recipeEnguerrand de Ribaucourt2024-06-102-0/+49
| | | | | | | | | | | | | udpcast is a file transfer tool that can send data simultaneously to many destinations on a LAN. It is an alternative to uftp which is already in meta-networking. On a lossy network, udpcast provided 10x faster transfer rates with error correction enabled while using a half as much CPU thanks to a simpler algorithm. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: upgrade 4.2.8p17 -> 4.2.8p18Wang Mingyu2024-06-071-2/+2
| | | | | | | | | | | License-Update: Copyright year updated to 2024. Changelog: =========== - changes crypto (OpenSSL or compatible) detection and default build behavior. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: fix building with GCC 14Dmitry Baryshkov2024-06-062-0/+33
| | | | | | | | | | GCC 14 is more strict regarding const pointers conversion. Fix conversion to let ntpong build with GCC 14 and updated rrdtool. The patch is not submitted upstream yet, the project requires singing of CLA. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.2.4 -> 4.2.5Wang Mingyu2024-05-281-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: Fix buildpaths warning.Wang Mingyu2024-05-231-0/+3
| | | | | | | WARNING: fetchmail-6.4.38-r0 do_package_qa: QA Issue: File /usr/bin/fetchmail in package fetchmail contains reference to TMPDIR [buildpaths] Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Switch away from S = WORKDIRKhem Raj2024-05-231-3/+4
| | | | | | Make it dependent on UNPACKDIR instead Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Start WORKDIR -> UNPACKDIR transitionKhem Raj2024-05-2322-50/+50
| | | | | | | Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbd: Do not inherit systemdKhem Raj2024-05-231-1/+1
| | | | | | | | It does not provide/enable systemd script generation which results in ERROR: nbd-3.26.1-r0 do_package: nbd does not appear in package list, please add it Signes-off-by: Khem Raj <raj.khem@gmail.com>
* nbd: Fix build with GCC14 on musl targetsKhem Raj2024-05-232-1/+46
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbd: Upgrade to 3.26.1Khem Raj2024-05-233-20/+72
| | | | | | Backport a build fix when using --disable-manpages Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdio-tools: fix mdio-netlink kernel module reproducibilityYoann Congal2024-05-211-2/+3
| | | | | | | | | | | | | | | | mdio-netlink source make reference to ${S}/.. which breaks -fdebug-prefix-map and results in the full TMPDIR path being present in the -dbg package and, also, change a related CRC in the main package. This changes ${S} to enclose the whole SRC_URI repo and adapt relative paths to build (MODULES_MODULE_SYMVERS_LOCATION) This make mdio-netlink reproducible and fixes this warning: WARNING: mdio-netlink-1.3.1-r0 do_package_qa: QA Issue: File /lib/modules/6.6.29-yocto-standard/updates/.debug/mdio-netlink.ko in package mdio-netlink-dbg contains reference to TMPDIR [buildpaths] Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade 1.19.3 -> 1.20.0Beniamin Sandu2024-05-191-2/+2
| | | | | | | | Full changelog: https://github.com/NLnetLabs/unbound/releases/tag/release-1.20.0 Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* smcroute: upgrade 2.5.6 -> 2.5.7Wang Mingyu2024-05-191-1/+1
| | | | | | | | Changelog: Fix #207: crash when adding IPv6 multicast route on a kernel without IPv6 multicast support Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.34 -> 2.0.35Wang Mingyu2024-05-191-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* geoip-perl: Add ptest missing dependency on perl-modulesKhem Raj2024-05-121-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: upgrade 0.16.0 -> 0.16.1Yi Zhao2024-05-091-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: upgrade 5.1 -> 5.2Wang Mingyu2024-05-022-46/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-fping-Initialize-msghdr-struct-in-a-portable-way.patch removed since it's included in 5.2 Changelog: ============ -New option -X / --fast-reachable to exit immediately once N hosts have been found -New option -k / -fwmark to set Linux fwmark mask -Always output fatal error messages -Fallback to SO_TIMESTAMP if SO_TIMESTAMPNS is not available -Fix "not enough sequence numbers available" error on BSD-like systems -Fix running in unprivileged mode -Fix build issue for NetBSD/alpha -Fix build issue for OpenBSD/alpha -Fix build warning for long int usage -Fix build error with musl libc -Fix to guard against division by zero -Decouple -a/-u effects from -c -Added contrib/Dockerfile -Remove host from Netdata chart titles -Add additional tests -Update github action os images -Fix Azure pipeline tests -Various autoconf fixes -Extended configure script with --enable-debug and output cpu usage -Documentation: Update Netdata website link -Documentation: fix description of --file option -Documentation: improve exit status description -Documentation: move description of -i MSEC -Documentation: improve help output for options -c and -C Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: Update status for CVE-2014-4199 and CVE-2014-4200Ninette Adhikari2024-04-291-0/+2
| | | | | | | Current version 12.3.5 is not affected by the issue. Affected versions: Up to (incl) 10.0.3 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-gtk: add PACKAGECONFIG for webdavMarkus Volk2024-04-231-0/+1
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-gtk: use hwdata instead of usbidsMarkus Volk2024-04-231-2/+2
| | | | | | | | spice-gtk seems to be the last recipe in meta-openembedded that uses usbids instead of hwdata. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sngrep: upgrade 1.8.0 -> 1.8.1Wang Mingyu2024-04-171-1/+1
| | | | | | | | Changelog: capture: fix possible buffer overflow while processing headers Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 50.0 -> 51.0Wang Mingyu2024-04-171-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ============ -Merge pull request #1444 from yishaih/mlx5_dr -Merge pull request #1439 from Kamalheib/qedr_pr -mlx5: DR, Using sq ts format when RoCE is disabled -Merge pull request #1440 from Honggang-LI/doc -librdmacm: adjust ECE function name in man page -providers/qedr: Remove unused debug files -roviders/qelr: Replace DP_ERR with verbs_err -providers/qelr: Replace DP_VERBOSE with verbs_debug -providers/qelr: Remove unused macros -Merge pull request #1438 from amzn/fix-rdma-tracepoint Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Use PYTHON_SITEPACKAGES_DIR instead of hard-coded site-packages directory pathalperak2024-04-154-5/+5
| | | | | | | | | | | | The following paths have been replaced with PYTHON_SITEPACKAGES_DIR: - "${libdir}/${PYTHON_DIR}/site-packages" - "${libdir}/python${PYTHON_BASEVERSION}/site-packages" - "${libdir}/python*/site-packages" - "${libdir}/python3.*/site-packages" Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: switch the SRC_URI to httpsRandy MacLeod2024-04-091-1/+1
| | | | | Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pimd: switch SRC_URI to httpsRandy MacLeod2024-04-091-2/+1
| | | | | | | | Switch SRC_URI to https (yes, the URI still has ftp in the path!). Also drop the obsolete SRC_URI[md5sum]. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade 1.19.1 -> 1.19.3Beniamin Sandu2024-04-051-2/+2
| | | | | | | | | | | Includes security fixes for: CVE-2024-1931 - Loop with Unreachable Exit Condition ('Infinite Loop') Full release notes: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.3 Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.2.3 -> 4.2.4Wang Mingyu2024-04-021-1/+1
| | | | | | | | | | | | | | | Bugfix: ========= -wnpa-sec-2024-06 T.38 dissector crash. -Extcap with configuration never starts; "Configure all extcaps before start of capture." is shown instead. -Packet Dissection CSV Export includes last column even if hidden. -Inject TLS secrets closes Wireshark on Windows. -Wireshark crashes when adding another port to the HTTP dissector. -When adding a new row to a table an error report may be inserted. -'--export-objects' does not work as expected on tshark version later than 3.2.10. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcpr: add new recipePeter Marko2024-03-261-0/+24
| | | | | | | | Curl for People C++ Requests is a simple wrapper around libcurl inspired by the excellent Python Requests project. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.9.13 -> 5.9.14Yi Zhao2024-03-261-1/+1
| | | | | | | | ChangeLog: https://github.com/strongswan/strongswan/releases/tag/5.9.14 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ssmtp: Fix build with musl >= 1.2.5Khem Raj2024-03-252-0/+33
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Fix build with musl >= 1.2.5Khem Raj2024-03-252-1/+61
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.9 -> 2.6.10Yi Zhao2024-03-211-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: Update copyright years to 2024 ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.6.10/Changes.rst Security fixes: CVE-2024-27459: Windows: fix a possible stack overflow in the interactive service component which might lead to a local privilege escalation. CVE-2024-24974: Windows: disallow access to the interactive service pipe from remote computers. CVE-2024-27903: Windows: disallow loading of plugins from untrusted installation paths, which could be used to attack openvpn.exe via a malicious plugin. Plugins can now only be loaded from the OpenVPN install directory, the Windows system directory, and possibly from a directory specified by HKLM\SOFTWARE\OpenVPN\plugin_dir. CVE-2024-1305: Windows TAP driver: Fix potential integer overflow in !TapSharedSendPacket. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Drop remaining PR values from recipesMartin Jansa2024-03-171-1/+0
| | | | | | | | | | | | * as oe-core did in: https://git.openembedded.org/openembedded-core/commit/?id=d4c346e8ab * when people are have to maintain own PRs for recipes in oe-core, they might add them for meta-oe recipes at the same time when upgrading to next LTS Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sngrep: new recipe for ncurses SIP Messages flow viewerJörg Sommer2024-03-171-0/+37
| | | | | Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unionfs-fuse, dropwatch, postgresql, yasm, multipath-tools, ↵Martin Jansa2024-03-171-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | python3-pybind11: add missing Upstream-Status * add Pending to .patch files where it was accidentally droped with upgrades or modifications in: f88e5b146e postgresql: upgrade 15.5 -> 16.2 c904e169db multipath-tools: upgrade 0.9.3 -> 0.9.8 105be9b3d9 unionfs-fuse: upgrade 2.2 --> 3.4 or new patches where the author didn't notice/care: 2a7f74cdb0 dropwatch: Use header files from sysroot instead of build host f5cc9f272a yasm: improve reproducibility 39028d0d9d python3-pybind11: Restore strip prevention patch authors of these added to CC, please be more careful with removing or not adding these or enable patch-status in ERROR_QA for your builds, see: https://lists.openembedded.org/g/openembedded-core/topic/104922136#197113 * added with: for p in `/OE/layers/openembedded-core/scripts/contrib/patchreview.py -v . | grep Missing.Upstream-Status.tag | sed 's/.*(//g;s/)$//g'`; do grep -q ^Upstream-Status: $p || sed -i "s/^---$/\nUpstream-Status: Pending\n---/g" $p; grep -q ^Upstream-Status: $p || sed -i "1iUpstream-Status: Pending\n" $p; done Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netcf: Fix build with latest gnulibKhem Raj2024-03-092-1/+84
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcprelay: fix a minor cross compilation do_configure issueChen Qi2024-03-082-0/+52
| | | | | | | | | | | | | | | | We're seeing errors like below in log.do_configure: ./conftest: cannot execute binary file: Exec format error The tcprelay's configure have two places to execute ./conftest. And the result happens to be correct even with the error above. Instead of leaving the errors as they are, we explicitly skip running ./conftest in case of cross compiling. The build will continue to succeed and result will remain the same. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.69 -> 5.72Wang Mingyu2024-03-082-18/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fix-openssl-no-des.patch refreshed for 5.72 License-Update: Copyright year updated to 2024. Changelog: =========== * Security bugfixes - OpenSSL DLLs updated to version 3.2.1. - OpenSSL FIPS Provider updated to version 3.0.8. * Bugfixes - Fixed SSL_CTX_new() errors handling. - Fixed OPENSSL_NO_PSK builds. - Android build updated for NDK r23c. - stunnel.nsi updated for Debian 12. - Fixed tests with OpenSSL older than 1.0.2. - Fixed the console output of tstunnel.exe. - Fixed TLS socket EOF handling with OpenSSL 3.x. This bug caused major interoperability issues between stunnel built with OpenSSL 3.x and Microsoft's Schannel Security Support Provider (SSP). - Fixed reading certificate chains from PKCS#12 files. * Features sponsored by SAE IT-systems - OCSP stapling is requested and verified in the client mode. - Using "verifyChain" automatically enables OCSP stapling in the client mode. - OCSP stapling is always available in the server mode. - An inconclusive OCSP verification breaks TLS negotiation. This can be disabled with "OCSPrequire = no". - Added the "TIMEOUTocsp" option to control the maximum time allowed for connecting an OCSP responder. * Features - Added support for Red Hat OpenSSL 3.x patches. - Added configurable delay for the "retry" option. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtdb: upgrade 1.4.9 -> 1.4.10Wang Mingyu2024-03-082-8/+33
| | | | | | | | 0001-tdb-Add-configure-options-for-packages.patch refreshed for 1.4.10 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: upgrade 2.4.1 -> 2.4.2Wang Mingyu2024-03-082-8/+33
| | | | | | | | 0001-talloc-Add-configure-options-for-packages.patch refreshed for 2.4.2 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.4.37 -> 6.4.38Wang Mingyu2024-03-081-1/+1
| | | | | | | | | | | | Changelog: ========== -updates translations, and tightens OpenSSL/wolfSSL version requirements in order to track their security fixes and deprecations. OpenSSL 3.0.9, 3.1.4, 3.2.0 and wolfSSL 5.6.2 (or newer on the respective compatible branches) remain supported. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: Fix build with postgresql 16+Khem Raj2024-03-052-0/+26
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: Upgrade to 4.5.1Khem Raj2024-03-052-39/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>