summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* libnftnl: upgrade 1.2.4 -> 1.2.5Yi Zhao2023-03-122-5/+5
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.0 -> 2.6.1Petr Gotthard2023-03-101-1/+1
| | | | | | | | Changelog: https://github.com/OpenVPN/openvpn/blob/v2.6.1/Changes.rst Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.33.7 -> 1.33.10Wang Mingyu2023-03-091-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rp-pppoe: upgrade 3.14 -> 3.15Wang Mingyu2023-03-094-122/+16
| | | | | | | | | | | | dont-swallow-errors.patch configure.in-Error-fix.patch removed since they're not available in 3.14. configure_in_cross.patch refreshed for 3.14. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.67 -> 5.69Wang Mingyu2023-03-091-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: Copyright year updated to 2023. Changelog: ========== * New features - Improved logging performance with the "output" option. - Improved file read performance on the WIN32 platform. - DH and kDHEPSK ciphersuites removed from FIPS defaults. - Set the LimitNOFILE ulimit in stunnel.service to allow for up to 10,000 concurrent clients. - Added the new 'CAengine' service-level option to load a trusted CA certificate from an engine. - Added requesting client certificates in server mode with 'CApath' besides 'CAfile'. - Improved file read performance. - Improved logging performance. * Bugfixes - Fixed the "CApath" option on the WIN32 platform by applying https://github.com/openssl/openssl/pull/20312. - Fixed stunnel.spec used for building rpm packages. - Fixed tests on some OSes and architectures by merging Debian 07-tests-errmsg.patch (thx to Peter Pentchev). - Fixed EWOULDBLOCK errors in protocol negotiation. - Fixed handling TLS errors in protocol negotiation. - Prevented following fatal TLS alerts with TCP resets. - Improved OpenSSL initialization on WIN32. - Improved testing suite stability. * Security bugfixes - OpenSSL DLLs updated to version 3.0.8. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-networking: add frrYi Zhao2023-03-091-0/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: support more archesYi Zhao2023-03-081-9/+1
| | | | | | | Now frr can support more arches as libyang can be built on all arches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: add UPSTREAM_CHECK_GITTAGREGEXYi Zhao2023-03-061-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version freeradius INFO: Current version: 3.0.26 INFO: Latest version: 4.0.0 INFO: Latest version's commit: 8b5bff2d8a2cd2be1da58a417787d907c7a5d8f1 4.0.0 is not a stable version tag[1]. After the patch: $ devtool latest-version freeradius INFO: Current version: 3.0.26 INFO: Latest version: 3.2.2 INFO: Latest version's commit: b9ed73ef2d2628fa6e2a6d15a7782f8217966be0 [1] https://github.com/FreeRADIUS/freeradius-server/tags Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* traceroute: upgrade 2.1.1 -> 2.1.2Yi Zhao2023-03-061-1/+1
| | | | | | | | | Changes in 2.1.2: * Fix unprivileged ICMP tracerouting with Linux kernel >= 6.1 (Eric Dumazet, SF bug #14) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-cttimeout: upgrade 1.0.0 -> 1.0.1Yi Zhao2023-03-062-269/+5
| | | | | | | Drop backport patch. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-cthelper: upgrade 1.0.0 -> 1.0.1Yi Zhao2023-03-063-399/+17
| | | | | | | Drop backport patch. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnfnetlink: upgrade 1.0.1 -> 1.0.2Yi Zhao2023-03-068-681/+20
| | | | | | | Drop backport patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: 5.9.9 -> 5.9.10Yi Zhao2023-03-061-3/+3
| | | | | | | | Changelog: https://github.com/strongswan/strongswan/releases/tag/5.9.10 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: drop recipeYi Zhao2023-03-0517-695/+0
| | | | | | | | | | | | | | | Quagga is no longer maintained since 2018[1]. Its official repository is not even available[2]. As an alternative, users can use FRRouting[3] which has been added to meta-networking[4]. [1] https://github.com/Quagga/quagga [2] https://git.savannah.gnu.org/cgit/quagga.git [3] https://frrouting.org [4] https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-protocols/frr Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: add UPSTREAM_CHECK_GITTAGREGEXYi Zhao2023-03-051-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_GITTAGREGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version frr INFO: Current version: 8.4.2 INFO: Latest version: 9.0 INFO: Latest version's commit: 16c38045b1a84f899da473398779cc593d82d2bd Version 9.0 is a development tag[1]. After the patch: $ devtool latest-version frr INFO: Current version: 8.4.2 INFO: Latest version: 8.4.2 INFO: Latest version's commit: 9e25d07412e92bdcd1f69c4755dc7564b23023c0 [1] https://github.com/FRRouting/frr/tags Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: set up /usr/bin/hello as alternativeDenys Dmytriyenko2023-02-261-1/+4
| | | | | | | | | As mbedtls installs this rather generically-named /usr/bin/hello binary, it conflicts with the one provided by lmbench, hence set it up as an alternative to avoid conflicts when both are installed to rootfs or SDK. Signed-off-by: Denys Dmytriyenko <denis@denix.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-scapy: upgrade 2.4.5 -> 2.5.0Petr Gotthard2023-02-242-4/+4
| | | | | | | | | | | Changelog: https://github.com/secdev/scapy/releases/tag/v2.5.0 Also, in this version the UTscapy wrapper gets no longer installed into /usr/bin, so for ptest we need to install it. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.8 -> 2.6.0Petr Gotthard2023-02-241-3/+3
| | | | | | | | | | | | | | | | | | | New features and improvements in 2.6.0 compared to 2.5.8: - Data Channel Offload (DCO) kernel acceleration support for Windows, Linux, and FreeBSD. - OpenSSL 3 support. - Improved handling of tunnel MTU, including support for pushable MTU. - Outdated cryptographic algorithms disabled by default, but there are options to override if necessary. - Reworked TLS handshake, making OpenVPN immune to replay-packet state exhaustion attacks. - Added --peer-fingerprint mode for a more simplistic certificate setup and verification. - Added Pre-Logon Access Provider support to OpenVPN GUI for Windows. - Improved protocol negotiation, leading to faster connection setup. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* .patch: fix Upstream-Status formatting issues reported by patchreview tool ↵Martin Jansa2023-02-2420-45/+44
| | | | | | | from oe-core Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openhpi, uw-imag, python3-m2crypto: replace Unknown Upstream-Status with PendingMartin Jansa2023-02-241-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-networking: fix Upstream-Status formatYi Zhao2023-02-244-4/+4
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sshpass: upgrade 1.09 -> 1.10Wang Mingyu2023-02-201-1/+1
| | | | | | | | | | | | | | | | | Changelog: ========== * Convert repo to git * Remove sig unsafe functions from signal handler (Ticket #22). * Allow -e to explicitly specify the environment variable to use (Ticket #5). * Unset the variable specified with -e before calling subprogram (Ticket #25). * Change the logic for setting a controlling TTY. Fixes compatibility issues with OpenSolaris and MSYS/Cygwin. Thanks Marcin Olszewski for the fix. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 42.0 -> 44.0Wang Mingyu2023-02-202-33/+2
| | | | | | | | 0001-examples-Include-alloca.h-for-strdupa.patch removed since it's included in 44.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix build with muslKhem Raj2023-02-182-0/+39
| | | | | | | __assert_fail signature is assuming glibc which is fine for glibc systems but we have to consider musl case too. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* atftp: use https for git repository accessJan Luebbe2023-02-181-1/+1
| | | | | Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* atftp: upgrade from 0.7.5 to 0.8.0Jan Luebbe2023-02-181-1/+1
| | | | | Signed-off-by: Jan Luebbe <jlu@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.40.10 -> 1.42.0Wang Mingyu2023-02-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ * Added support for source load balancing for Ethernet Bonds. * Allow specifying vhost name (SNI) for a manually DNS-over-TLS server. Only works with systemd-resolved plugin. * Connections can now be activated on a loopback interface. * Added support of IPv4 ECMP routes. The ECMP routes will get merged automatically but the user need to configure them as single-hop routes specifying a valid weight. * Add new "reapply" dispatcher event. * Added support of VTI and VTI6 ip-tunnels along with a new property, "ip-tunnel.fwmark". * VLAN can now support 802.1ad tagging instead of 802.1Q. * Invocations of iptables now use "--wait 2" to handle races with concurrent calls. This fixes misbehavior with IPv4 shared mode. * The DHCP client-id and DHCPv6 DUID are now exposed along with the lease information. * Optionally suppress adding direct route to an external VPN gateway with the new "ipv[46].auto-route-ext-gw" property. * Open vSwitch support gained new properties: "ovs-dpdk.n-rxq-desc", "ovs-dpdk.n-txq-desc", "ovs-interface.ofport-request" and "ovs-port.trunks". * Added support of "other_config" for OVS bridge, port or interface. This property is not supported by nmcli. * nmtui now supports editing Wi-Fi WPA-Enterprise, Ethernet with 802.1X authentication and MACsec connection profiles. * nmcli now allows changing "connection.uuid" and "connection.type" properties in offline mode and setting the UUID when creating a connection. * nmcli now accepts abbreviations for the UUID with the connection selector in `nmcli connection $operator uuid $uuid`. * DHCPv6 leases are now declined when addresses fail DAD. * Documentation improvements. * Many internal improvements and bug fixes. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: upgrade 2.3.4 -> 2.4.0Wang Mingyu2023-02-181-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtdb: upgrade 1.4.7 -> 1.4.8Wang Mingyu2023-02-181-2/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: upgrade 0.13.0 -> 0.14.1Wang Mingyu2023-02-182-13/+15
| | | | | | | | 0001-Add-configure-options-for-packages.patch refreshed for new version. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipcalc: update to 1.0.2Michael Opdenacker2023-02-183-50/+14
| | | | | | | | | | | - Now built with meson - Update the source git repository and home page https://github.com/nmav/ipcalc redirects to https://gitlab.com/ipcalc/ipcalc - USE_GEOIP = "no" not necessary in the recipe, already set by default in the code. Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: upgrade 2.1.7 -> 2.1.8Wang Mingyu2023-02-163-33/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0002-iscsiuio-Use-pthread_t-for-INVALID_THREAD.patch removed since it's included in 2.1.8. 0001-Makefile-Do-not-set-Werror.patch refreshed for 2.1.8 Changelog: =========== make: avoid hard-coding path to sed (#357) etc: install system unit with without executable bit (#354) Add ability for MGMT IPC to check UID only Use config for iscsistart and iscsiadm fw login iscsiuio: Use pthread_t for INVALID_THREAD (#363) Add a 'distclean' Makefile top-level target Cleanup fwparam makefile (#360) Small bug fixes (#364) Use meson as the main build system (#365) libopeniscsiusr: cleanup recent reallocarray->realloc change (#369) Added examples in man file for iscsiadm session commands. iscsid: fix logout pdu send failure handling Update README's error handler/timeout section iscsiuio: fix LDADD libopeniscsiusr: use realloc instead of reallocarray (#368) iscsiadm: enable specify iface name-value parameters when creating iface Fix a possible passing null pointer in usr/iface.c (#356) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* htpdate: upgrade 1.3.6 -> 1.3.7Wang Mingyu2023-02-161-1/+1
| | | | | | | | | | | | Changelog: ========== - bugfix: wrong default portnumber for proxy was used - bugfix: https://bugs.launchpad.net/ubuntu/+source/htpdate/+bug/1850740 - improvement: Avoid bouncing between upper/lower limit when (almost) in sync - improvement: Set SSL server hostname on SSL object Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: fix CVE-2022-40468Chee Yang Lee2023-02-102-0/+34
| | | | | Signed-off-by: Chee Yang Lee <chee.yang.lee@intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-gtk: Update to version 0.42Fabio Estevam2023-02-091-1/+1
| | | | | | | | | | | | | | | | | | | | Update to version 0.42: v0.42 ===== - !115 - Fix compilation on win32 with EGL - !114 - spice-widget: fix hotspot position on Wayland/HiDPI - !112 - meson: Allow building on a Wayland-only environment - !110 - usb-backend: Fix devices not being enumerated - !108 - spicy: Add keyboard shortcuts for copy/paste sync - Require meson >= 0.56 The original recipe name was spice-gtk_0.4.1.bb, but the spice-gtk repo tags the releases as 0.41, not 0.4.1, so update it accordingly. Signed-off-by: Fabio Estevam <festevam@denx.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: switch to using variable flags for alternativesUlrich Ölmann2023-02-091-2/+2
| | | | | | | | Up to now in this recipe the alternative mechanism only worked by accident, so do like all other recipes and utilize varflags. Signed-off-by: Ulrich Ölmann <u.oelmann@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: CVE-2022-44792 & CVE-2022-44793 Fix NULL Pointer ExceptionNarpat Mali2023-02-092-0/+122
| | | | | | | | | References: https://nvd.nist.gov/vuln/detail/CVE-2022-44792 https://nvd.nist.gov/vuln/detail/CVE-2022-44793 Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 8.4.1 -> 8.4.2Yi Zhao2023-02-072-1/+2
| | | | | | | | | | | | | | ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-8.4.2 Per [1], update frr.pam to eliminate the warning issued by pam: vtysh[485]: pam_warn(frr:account): function=[pam_sm_acct_mgmt] flags=0 service=[frr] terminal=[<unknown>] user=[root] ruser=[<unknown>] rhost=[<unknown>] [1] https://github.com/FRRouting/frr/commit/6031b8a3224cde14fd1df6e60855310f97942ff9 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: Upgrade 2.88 -> 2.89Alex Kiernan2023-02-061-1/+1
| | | | | | | | | | | | | | | | | | version 2.89 Fix bug introduced in 2.88 (commit fe91134b) which can result in corruption of the DNS cache internal data structures and logging of "cache internal error". This has only been seen in one place in the wild, and it took considerable effort to even generate a test case to reproduce it, but there's no way to be sure it won't strike, and the effect is to break the cache badly. Installations with DNSSEC enabled are more likely to see the problem, but not running DNSSEC does not guarantee that it won't happen. Thanks to Timo van Roermund for reporting the bug and for his great efforts in chasing it down. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crda: remove recipeKai Kang2023-02-0610-452/+0
| | | | | | | | | | | | | | | | | CRDA is no longer needed as of kernel v4.15 since commit 007f6c5e6eb45 ("cfg80211: support loading regulatory database as firmware file") added support to use the kernel's firmware request API which looks for the firmware on /lib/firmware. Because of this CRDA is legacy software for older kernels, remove the recipe. It could change regulatory domains with iw and wpa_supplicant. Refs 1. https://git.kernel.org/pub/scm/linux/kernel/git/mcgrof/crda.git/tree/README#n8 2. https://wireless.wiki.kernel.org/en/developers/Regulatory/CRDA Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: fix overrides syntax in SYSTEMD_AUTO_ENABLE:${PN}Martin Jansa2023-02-031-1/+1
| | | | | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Upgrade 1790.60.25 -> 1790.80.10Alex Kiernan2023-02-031-1/+1
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* system-config-printer: add recipeMarkus Volk2023-02-011-0/+36
| | | | | | | The OpenPrinting gui for cups configuration Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: add missing runtime dependency, add polkit ruleMarkus Volk2023-02-011-1/+27
| | | | | | | | | Add a missing runtime dependency on python3-ctypes Add a polkit rule to allow users of group wheel to use blueman without authentification Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: Add hiredis to dependsKhem Raj2023-02-011-1/+1
| | | | | | | | Fails to link otherwise ld: cannot find -lhiredis: No such file or directory collect2: error: ld returned 1 exit status Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dante: Add -P to preprocessor flagsKhem Raj2023-01-291-0/+1
| | | | | | | | | | | | | | | | | | | configure uses AC_PREPROC_IFELSE to check for certain errors from getaddrinfo() it user search operation in a preprocessed file UNIQUEVALS=`sort $ERRVALFILE | uniq | wc -l | awk '{ print $1 }'` However, line numbers are generated into the preprocesser files and they get sorted higher than numbers gaierrval: # 130 "conftest.c" 3 4 -3 -P ensures that line numbers are not generated into preprocessed files, so these checks can succeed. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Inherit python3targetconfigKhem Raj2023-01-291-1/+1
| | | | | | | | | | | It uses python3-config during build to grok the python specific includedirs, therefore its important to ensure that target specific python3-config is used, otherwise currently it defaults to native python3-config which ends up adding native python3 include paths which might work out ok but is exposed when target is 32bit + lfs enabled, the headers don't match between native and target python Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Inherit python3targetconfigKhem Raj2023-01-291-1/+1
| | | | | | | | | | | It uses python3-config during build to grok the python specific includedirs, therefore its important to ensure that target specific python3-config is used, otherwise currently it defaults to native python3-config which ends up adding native python3 include paths which might work out ok but is exposed when target is 32bit + lfs enabled, the headers don't match between native and target python Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Add nghttp2 packageconfigKhem Raj2023-01-291-0/+1
| | | | | | | Ensures that clang does not enable it when nghttp2-native is staged in native sysroot. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openthread: Use __attribute__ ((unused)) instead of removing 't'Khem Raj2023-01-292-20/+2
| | | | | | This helps clang to not warn about this variable Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-21 15:02:38 +0000