summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* nghttp2: upgrade 1.40.0 -> 1.41.0Zheng Ruoqin2020-06-101-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.4 -> 0.9.5Pierre-Jean Texier2020-06-081-2/+1
| | | | | Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.6 -> 1.1.7Pierre-Jean Texier2020-06-081-1/+1
| | | | | | | See https://lwn.net/Articles/822353/ Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: fix upstream check URLPierre-Jean Texier2020-06-081-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status tinyproxy <...> INFO: tinyproxy 1.10.0 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: fix upstream check URLPierre-Jean Texier2020-06-081-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status tcpreplay <...> INFO: tcpreplay 4.3.2 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: typo fixMartin Kelly2020-06-081-1/+1
| | | | | | | | The "ssl" PACKAGECONFIG setting contains WITH_EC_OFF instead of WITH_EC=OFF, resulting in a build break when "ssl" is not set. Signed-off-by: Martin Kelly <mkelly@xevo.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: add native, nativesdk supportMartin Kelly2020-06-081-0/+2
| | | | | Signed-off-by: Martin Kelly <mkelly@xevo.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: upgrade 5.19.10 -> 5.20.05Wang Mingyu2020-06-051-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netkit-rsh: properly append PACKAGECONFIGKonrad Weihmann2020-06-031-1/+1
| | | | | | | | | | As ??= assignment will be overwritten by += in any case, one can't define a default of PACKAGECONFIG in this recipe. Using _append instead mitigates chances of accidental overwriting the default Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* proftpd: Fix typo for SRC_URI[md5sum]Konrad Weihmann2020-05-311-1/+1
| | | | | Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.2.2 -> 3.2.4Zang Ruochen2020-05-311-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.15 -> 2.9.16Zang Ruochen2020-05-312-51/+2
| | | | | | | | -0001-chdeck-for-gettid-API-during-configure.patch Removed since this is included in 2.9.16 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: upgrade 1.6.9 -> 1.6.10Zang Ruochen2020-05-311-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: refresh patchesPatrick Williams2020-05-304-30/+33
| | | | | | | | | | | | | | | | | Refreshed patches for 5.8 due to the following: ERROR: net-snmp-5.8-r0 do_patch: Command Error: 'quilt --quiltrc .../net-snmp/5.8-r0/recipe-sysroot-native/etc/quiltrc push' exited with 0 Output: Applying patch 0001-Add-pkg-config-support-for-building-applications-and.patch patching file configure ... Hunk #1 succeeded at 32248 with fuzz 2 (offset 1826 lines). Hunk #2 FAILED at 31447. 1 out of 2 hunks FAILED -- rejects in file configure ... Patch 0001-Add-pkg-config-support-for-building-applications-and.patch does not apply (enforce with -f) Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* uftp: upgrade 4.10.2 -> 5.0Pierre-Jean Texier2020-05-301-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Full changelog: Version 5.0 - 4/22/2020 Major security updates. The key exchange and key derivation algorithms were modified and supported algorithms were pruned using TLS 1.3 as a basis. This includes: - HKDF used in multiple stages for key derivation from raw shared secrets. - Included addtional context in key derivation and signatures to protect against replay attacks and downgrade attacks. - Reduced set of supported EC curves to those supported by TLS 1.3 - Removed RSA key exchange which does not provide perfect forward secrecy. All key exchanges now use ECDH. - Removed support for SHA-1 hashes in key exchanges. - Supported symmetric ciphers are AES in AEAD mode (GCM or CCM). - Increased supported RSA key sizes Encrypted sessions are now enabled by default. It can be disabled by specifying "none" for the key type in the server's -Y option. Backward compatibility retained for version 4.x in clients and proxies. When communicating with a 4.x server, only allow algorithms and key exchange modes permitted in the new version. Clients and proxies no longer need to use signature keys that match the type and size used by the server. As a result, the -k and -K options to the client now only accept a single key instead of multiple. The proxy still supports multiple keys for 4.x compatibility, however only the first key listed is used for any version 5.x session. Proxies now send their keys in a separate message instead of injecting them in the ANNOUNCE sent by the server. This allows clients to be fully aware of proixes and allows them to authenticate servers and proxies separately. Format of client's server list modified to specify the proxy that a server communicates through. Fingerprints listed in this file now always specify the server as opposed to having the proxy's key in some cases. Added -R option to client to specify a list of proxies along with their public key fingerprints. The old use of -R to specify a version 4.x response proxy has moved to -r. Previously, using -S in the client or proxy to specify a server list would automatically enable source specific multicast (SSM). The use of SSM is now enabled separately via the -o option on both the client and proxy. Fixed a bug that caused ECDSA signatures created on Linux with curve secp521r1 from being verified successfully on Windows. Fixed cleanup on clients and proxies to prevent occasional crashes on shutdown under Windows. Update timstamps in messages to use 64-bit microseconds since the epoch, addressing Y2038 issues. Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* use weak assignments for PNBLACKLIST in recipe filesRobert P. J. Day2020-05-263-3/+3
| | | | | | | | Make sure PNBLACKLIST assignments in recipe files use weak assignment, so they can be overridden in, for example, local.conf files. Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: upgrade 1.7.6 -> 1.7.7Zheng Ruoqin2020-05-211-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.4.3 -> 6.4.4Zang Ruochen2020-05-211-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: upgrade 2.80 -> 2.81Zang Ruochen2020-05-214-90/+8
| | | | | | | | | -dnsmasq/0001-dnsmasq-fix-build-against-5.2-headers.patch -dnsmasq/0001-dnsmasq-fix-memory-leak-in-helper-c.patch Removed since these are included in 2.81 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: Upgrade 3.4.10 -> 3.4.12Adrian Bunk2020-05-213-40/+2
| | | | | | | | Remove patch applied upstream. Manual -fcommon is no longer necessary. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: Upgrade to 3.4.10 and compile with -fcommonKhem Raj2020-05-162-4/+2
| | | | | | Ensures it can build with gcc10 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: Depend on systemd if it is in distroKhem Raj2020-05-161-1/+2
| | | | | | | | | | it needs to link with libsystemd when using systemd as init system Fixes Package libsystemd was not found in the pkg-config search path. Perhaps you should add the directory containing `libsystemd.pc' to the PKG_CONFIG_PATH environment variable Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.13 -> 4.10.15Yi Zhao2020-05-151-2/+2
| | | | | | | | | | This is a security release in order to address the following defects: CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 1.5.6 -> 1.5.7Yi Zhao2020-05-151-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: Fix PACKAGECONFIG for OpenSSLAlexander Vickberg2020-05-051-1/+1
| | | | | | | | This fixes building TCPDump without OpenSSL. Current version does not recognize the option --without-openssl. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: introduce weechat recipe providing a fully working IRC clientAlejandro Enedino Hernandez Samaniego2020-05-052-0/+69
| | | | | Signed-off-by: Alejandro Hernandez Samaniego <alejandro@enedino.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.4.8 -> 2.4.9Andreas Müller2020-05-031-2/+2
| | | | | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* waf: Add cross answers for riscv32Khem Raj2020-04-291-0/+41
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Remove the dependency on libbsdPeter Kjellerstedt2020-04-292-1/+106
| | | | | | | | | | | | It is unnecessary, and libbsd uses the "BSD-4-Clause" license, which can be problematic. To make it deterministic, a patch is introduced to allow libbsd support to be disabled. It resembles similar patches in, e.g., libldb, libtalloc, libtdb and libtevent. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 4.3.0 -> 4.4.0Pierre-Jean Texier2020-04-261-1/+1
| | | | | | | | | | Release 4.4.0 of wolfSSL embedded TLS has bug fixes, new features and fixes for security vulnerabilities. See full changelog https://github.com/wolfSSL/wolfssl/releases/tag/v4.4.0-stablefixes Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: improve reproducibilityMingli Yu2020-04-261-0/+4
| | | | | | | | | | | | | | There are some shell scripts such as kea-admin, upgrade_4.0_to_5.0.sh, wipe_data.sh and etc contain build path. Actually the build path is meanlingless on the target, so replace abs_top_builddir to abs_top_builddir_placeholder to avoid expanding abs_top_builddir which introduces build path. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netkit-telnet: fix CVE-2020-10188Yi Zhao2020-04-252-0/+113
| | | | | | | | | | | Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-10188 Patch from Fedora: https://src.fedoraproject.org/rpms/telnet/raw/master/f/telnet-0.17-overflow-exploit.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: split ${PN}-bin from ${PN} to solve recursive dependencyYi Zhao2020-04-171-7/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | The commit 89d86b96f80d8a136d38113baf69d8ccad5a5ff6 which tries to fix the installation issue for ostree introduces a recursive dependency issue. When installing the postfix package on target via online repository, the postinst function for postfix-cfg package needs newaliases but this command is from postfix package which causes an error: Configuring postfix-cfg. /var/lib/opkg/info/postfix-cfg.postinst: line 9: newaliases: not found pkg_run_script: package "postfix-cfg" postinst script returned status 127. Split a new package postfix-bin from postfix and make it as the runtime dependency for postfix-cfg. Set USERADD_PACKAGES to ${PN}-bin to avoid image do_rootfs warnings when installing postfix via IMAGE_INSTALL: [log_check] warning: group postdrop does not exist - using root [log_check] warning: user postfix does not exist - using root Set ALTERNATIVE to ${PN}-bin to make sure the newaliases symbolic link is installed before installing postfix-cfg. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: Add aarch64 to COMPATIBLE_HOST.Drew Moseley2020-04-161-1/+1
| | | | | | | | This gets it in sync with libhugetlbfs which according to the comment, is supposed to be correct. Signed-off-by: Drew Moseley <drew.moseley@northern.tech> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 2.16.5 -> 2.16.6Pierre-Jean Texier2020-04-151-2/+2
| | | | | | | | | | Mbed TLS 2.16.6 is a maintenance release of the Mbed TLS 2.16 branch, and provides security fixes and bug fixes, see: - https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.6-and-2.7.15-released Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* uftp: upgrade 4.10.1 -> 4.10.2Pierre-Jean Texier2020-04-121-2/+2
| | | | | | | | | | | | | | | | | | This includes: Version 4.10.2 Fixed security issue where using sha384 or sha512 would set encryption keys to all bytes 0 When using ECDH key exchange with closed group membership, an incorrect signature would be applied to the ANNOUCE message, causing the session to fail. Bug fixes. Relaxed server side checks on the type of key supplied by a client when not using public key signatures on all messages. This will assist in the upgrade process to the upcoming version 5.0. Fixed various small memory leaks Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: Add recipe to extend backend possibilities of nbd.Przemyslaw Czarnowski2020-04-112-0/+75
| | | | | | | | | | | | | | | | Nbdkit uses plugins to add more sources of data for nbd client. Nbdkit can also spawn nbd-client, uses unix or network socket to communicate with client, uses different plugins to serve data for nbd device eg. curl, file, custom plugins in many languages (perl, python) and some others. Fix build when printf is a macro instead of function Use BSD-3-Clause for license inherit bash-completion so these are packaged correctly Signed-off-by: Przemyslaw Czarnowski <przemyslaw.hawrylewicz.czarnowski@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.4.2 -> 6.4.3Zheng Ruoqin2020-04-091-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: upgrade 4.2.8p13 -> 4.2.8p14zhangxiao2020-04-092-20/+3
| | | | | | | | | | License has been changed due to date time, no new stuff added. delete source patch reproducibility-respect-source-date-epoch.patch for new version source tree contains it. Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nvmetcli: Add initial version 0.7Jonathan Richardson2020-04-081-0/+39
| | | | | | | | | | Add recipe for NVM-Express target user space configuration utility. It contains a command line interface to the NVMe over Fabrics nvmet in the Linux kernel. It allows configuring the nvmet interactively as well as saving/restoring the configuration to/from a json file. Signed-off-by: Jonathan Richardson <jonathan.richardson@broadcom.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: poppler: prevent PACKAGECONFIG change based on different layersMingde (Matthew) Zeng2020-04-081-1/+1
| | | | | | | | | | As per discussed in a previous email under the subject "Regarding poppler auto PACKAGECONFIG when qt5-layer exists", adding a layer but not using it should not change PACKAGECONFIG automatically. It may result unexpected error. Signed-off-by: Matthew Zeng <matthew.zeng@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.4.7 -> 3.4.8Wang Mingyu2020-04-081-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: upgrade 878.260.1 -> 878.270.2Wang Mingyu2020-04-081-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: upgrade 1.4.5 -> 1.4.6Wang Mingyu2020-04-081-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-conntrack: upgrade 1.0.7 -> 1.0.8Wang Mingyu2020-04-081-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard: Upgrade to latest compat external module and toolsKhem Raj2020-04-073-8/+7
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* igmpproxy: fix upstream check URLPierre-Jean Texier2020-04-041-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status igmpproxy <...> INFO: igmpproxy 0.2.1 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* usrsctp: use UPSTREAM_CHECK_COMMITSPierre-Jean Texier2020-04-041-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status usrsctp <...> INFO: usrsctp git UNKNOWN_BROKEN None f4e14ab5e12187cb2cf1ddbdc0ee5555aead3f72 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ptpd: fix upstream check URLPierre-Jean Texier2020-04-041-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status ptpd <...> INFO: ptpd 2.3.1 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* relayd: use UPSTREAM_CHECK_COMMITSPierre-Jean Texier2020-04-041-0/+2
| | | | | | | | | | | | Fixes: $: devtool check-upgrade-status relayd <...> INFO: relayd 0.0.1 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>