summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* cyrus-sasl: Disable ntlm plugin by defaultKhem Raj2020-12-231-1/+1
| | | | | | | | | ntlm requires md4 algorith defines which is now disabled in openssl recipe by default also see [1] [1] https://github.com/cyrusimap/cyrus-sasl/issues/632 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vblade: upgrade 24 -> 25zangrc2020-12-184-90/+4
| | | | | | | | | | | | gcc-10.patch Removed since this is included in 25. Refresh the following patch: cross.patch makefile-add-ldflags.patch Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.29 -> 2.0.30zangrc2020-12-181-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade to 2.25.0Alexander Vickberg2020-12-172-61/+2
| | | | | | | Deleted build fix patch. This is already applied in this release. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: do not install /etc/ethertypesYi Zhao2020-12-162-1/+37
| | | | | | | | | | | | The /etc/ethertypes is provided by netbase since 6.0[1]. Do not instal the file in ebtables, otherwise there would be a conflict: Error: Transaction test error: file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7_64 [1] https://salsa.debian.org/md/netbase/-/commit/316680c6a2c3641b6abc76b3eebf88781f609d35 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: CVE-2020-14383 Security AdvisoryZheng Ruoqin2020-12-152-0/+113
| | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: CVE-2020-14318 Security AdvisoryZheng Ruoqin2020-12-152-0/+143
| | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix reallocarray check in meson and configureKhem Raj2020-12-122-0/+28
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade to 2.24.0Alexander Vickberg2020-12-092-4/+63
| | | | | | | | | Download archives are no longer updated so fetch from Github. Add build fix from upstream. The file LICENSE now contains the full Apache 2.0 license text. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ptpd: Solve memory leak for function NTPDCrequestLi Zhou2020-11-292-0/+41
| | | | | | | | | | | | | | | | | | Solve the memory leak in function NTPDCrequest detected by valgrind tool. Memory leak log example: ==619== 21 bytes in 1 blocks are still reachable in loss record 1 of 3 ==619== at 0x4A09DB0: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) ==619== by 0x43512E: NTPDCrequest (ntpdcontrol.c:255) ==619== by 0x43512E: NTPDCquery.isra.1 (ntpdcontrol.c:683) ==619== by 0x4359EE: ntpdInControl (ntpdcontrol.c:807) ==619== by 0x4364F5: ntpServiceUpdate (timingdomain.c:622) ==619== by 0x436935: timingDomainUpdate (timingdomain.c:756) ==619== by 0x4334A7: protocol (protocol.c:263) ==619== by 0x402BAE: main (ptpd.c:131) Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard-module: upgrade 1.0.20200908 -> 1.0.20201112Ricardo Salveti2020-11-271-1/+1
| | | | | | | | | | | | | Relevant changes: - fe40226 version: bump - d0bf51b qemu: bump default testing version - ce8faa3 compat: SYM_FUNC_{START,END} were backported to 5.4 - da5646f qemu: drop build support for rhel 8.2 - 99e954f netns: check that route_me_harder packets use the right sk - 25320ac noise: take lock when removing handshake entry from table Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: upgrade 0.99 -> 0.100zangrc2020-11-274-61/+43
| | | | | | | | 0001-src-parse.c-Initialize-key-to-NULL.patch Removed since this is included in 0.100. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: upgrade 2.9 -> 3.0zangrc2020-11-271-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.16.1 -> 2.9.17zangrc2020-11-271-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nngpp: upgrade 1.2.4 -> 1.3.0zangrc2020-11-271-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: upgrade 2.41.0 -> 2.42.0zangrc2020-11-271-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: Patch for CVE-2020-8037viatsk2020-11-242-0/+71
| | | | | Signed-off-by: Stacy Gaikovaia <stacy.gaikovaia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Upgrade to 4.0Khem Raj2020-11-234-245/+51
| | | | | | | | | | | | | | | | | | | | ChangeLog is here [1] Do not install /var/log as it conflicts with basefiles package Collected errors: * check_data_file_clashes: Package chrony wants to install file /var/log But that file is already provided by package * base-files Remove CVE patch since its upstream Forward port arm_eabi.patch patch Make builds reproducible [1] https://chrony.tuxfamily.org/news.html Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade to 1.12.0Beni2020-11-233-80/+80
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.8.4 -> 5.9.1zangrc2020-11-232-37/+2
| | | | | | | | 0001-Remove-obsolete-setting-regarding-the-Standard-Outpu.patch Removed since this is included in 5.9.1 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 31.1 -> 32.0zangrc2020-11-231-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* traceroute: set VPATHMingli Yu2020-11-181-0/+1
| | | | | | | | Fixes: make[1]: *** No rule to make target '-lm', needed by 'traceroute'. Stop. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: Inherit python3targetconfigKhem Raj2020-11-171-1/+1
| | | | | | | | | | | | Fixes configure: error: Could not link test program to Python. Maybe the main Python library has been installed in some non-standard library path. If so, pass it to configure, via the LIBS environment variable. Example: ./configure LIBS="-L/usr/non-standard-path/python/lib" Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: Fix build on 32bit arches with 64bit time_t e.g. RISCV-32Khem Raj2020-11-152-0/+37
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: Link with libatomic on rv32Khem Raj2020-11-151-0/+1
| | | | | | | Fixes build errors e.g. include/c++/10.2.0/bits/atomic_base.h:426: undefined reference to `__atomic_load_8' Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: Add leading whitespace for append operatorKhem Raj2020-11-151-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: remove ldap from default PACKAGECONFIGNick Rosbrook2020-11-101-1/+0
| | | | | | | Since ldap is not a standard DISTRO_FEATURE, leave it disabled by default. Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: do not use deprecated stroke and starter by defaultNick Rosbrook2020-11-101-2/+10
| | | | | | | | | | | | | | | | The swanctl and vici configuration of strongswan is preferred, as the stroke plugin used with starter is deprecated. As a reasonable default, add swanctl to PACKAGECONFIG by default, and remove stroke. When systemd is in DISTRO_FEATURES, add systemd-charon to PACKAGECONFIG, and add charon when systemd is not in DISTRO_FEATURES. While here, make sure strongswan-starter.service is only installed when charon is enabled. The current unconditional installation of strongswan-starter.service can break systems which install strongswan.service for use with swanctl. Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-networking.bb: add ntopng related recipesMingli Yu2020-11-091-1/+3
| | | | | | | Add ntopng related recipes and remove the deprecated ntop. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntop: remove the recipeMingli Yu2020-11-0911-760/+0
| | | | | | | | | | The ntop project is inactive and there is no new version since 2012 [1] and it has been replaced by ntopng. [1] https://sourceforge.net/projects/ntop/files/ntop/Stable/ Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: add new recipeMingli Yu2020-11-097-0/+307
| | | | | | | | | | ntopng is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmaxminddb: add new recipeMingli Yu2020-11-091-0/+18
| | | | | | | | The libmaxminddb library provides a C library for reading MaxMind DB files, including the GeoIP2 databases from MaxMind. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndpi: add new recipeMingli Yu2020-11-092-0/+59
| | | | | | | nDPI is an open source LGPLv3 library for deep-packet inspection. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.4.9 -> 2.5.0Zang Ruochen2020-11-091-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: upgrade 5.20.05 -> 5.20.08Zang Ruochen2020-11-092-70/+2
| | | | | | | | 0001-Add-configure-time-check-for-gettid-API.patch Removed since this is included in 5.20.08 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: Disable LTOKhem Raj2020-11-091-0/+4
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* traceroute: Fix build with LTOKhem Raj2020-11-092-51/+1
| | | | | | | Drop patch needed to build when S = B, we do not use this setting anymore Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Upgrade to 31.1Khem Raj2020-11-092-354/+4
| | | | | | | | | | Disable LTO, its uses ASM constructs for symbol versioning which are incompatible with LTO, they should migrate to gcc-10's mechanism for symbol versioning which is compatible with LTO disable manpages, it needs pandoc to build Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lksctp-tools: Update to latest masterKhem Raj2020-11-098-319/+1
| | | | | | Drop the patches which are upstream now Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: add some PACKAGECONFIG options for EAPNick Rosbrook2020-11-061-0/+2
| | | | | | | Add options for eap-identity and eap-mschapv2 plugins. Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* layer.conf: Add hardknott to LAYERSERIES_COMPATKhem Raj2020-11-041-1/+1
| | | | | | Thats codename for 3.3 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkd-dispatcher: Upgrade to 2.1Khem Raj2020-11-031-3/+4
| | | | | | Drop gitlab archives and use git fetcher directly instead Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: unify volatiles file nameYi Zhao2020-11-031-2/+2
| | | | | | | Make the volatiles file name starts with digital. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: Fix typo in PACKAGECONFIGMark Jonas2020-11-031-1/+1
| | | | | Signed-off-by: Mark Jonas <toertel@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard-tools: upgrade 1.0.20200513 -> 1.0.20200827Ricardo Salveti2020-11-021-1/+1
| | | | | | | | | | | | | | | | | | Changelog: - 7a321ce version: bump - 91fbeb4 Revert "wg-quick: wait on process substitutions" - 9a0d65e wg-quick: android: use iproute2 to bring up interface instead of ndc - fbca033 version: bump - 26683f6 wg-quick: wait on process substitutions - 13fac76 ctype: use non-locale-specific ctype.h - cf2bf09 pubkey: isblank is a subset of isspace - b4a8a18 man: wg-quick: use syncconf instead of addconf for strip example - a66219f systemd: add reload target to systemd unit - eb4665e wincompat: fold random into genkey - 197995d ipc: split into separate files per-platform Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard-module: upgrade 1.0.20200712 -> 1.0.20200908Ricardo Salveti2020-11-021-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: - d97b575 version: bump - 482d020 peerlookup: take lock before checking hash in replace operation - dace9d0 compat: backport NLA policy macros - a28032f netlink: consistently use NLA_POLICY_MIN_LEN() - 515d544 netlink: consistently use NLA_POLICY_EXACT_LEN() - 1a41e32 compat: backport kfree_sensitive and switch to it - 90a9e82 compat: drop support for SUSE 15.1 - a567b4c version: bump - 4213ef0 compat: add missing headers for ip_tunnel_parse_protocol - 5a45add compat: ipv6_dst_lookup_flow was ported to rhel 7.9 beta - 372427a compat: allow override of depmod basedir - f04dae1 compat: rhel 8.3 beta removed nf_nat_core.h Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Patch CVE-2020-14367Anatol Belski2020-11-022-0/+205
| | | | | Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.6 -> 0.9.7Zang Ruochen2020-11-021-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* radvd: upgrade 2.18 -> 2.19Zang Ruochen2020-11-022-5/+5
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.7 -> 1.1.8Zang Ruochen2020-11-021-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>