summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* dnsmasq: upgrade 2.82 -> 2.84Wang Mingyu2021-01-293-12/+13
| | | | | | | | Refresh the following patch: lua.patch Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: improve reproducibilityMingli Yu2021-01-292-2/+44
| | | | | | | | | Add a patch to fix the gap between 32bit and 64bit system when the configure option "--with-openssl=${STAGING_EXECPREFIXDIR}" passed in. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.30 -> 2.0.31Yi Zhao2021-01-293-21/+22
| | | | | | | Refresh openipmi-remove-host-path-from-la_LDFLAGS.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Add PACKAGECONFIG for ovsNicolas Jeker2021-01-281-1/+1
| | | | | | | | | | | | | | | Open vSwitch support is enabled by default in NetworkManager, but only useful in the context of several virtualisation environments, e.g. Xen, KVM, OpenStack and more. Therefore, the ovs PACKAGECONFIG is now disabled by default. The jansson dependency is only required for Open vSwitch and teamsdctl support in NetworkManager. As there is no libteamsdctl recipe around (and no teamsdctl PACKAGECONFIG), make it dependent on the ovs PACKAGECONFIG. Signed-off-by: Nicolas Jeker <n.jeker@gmx.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: add missing readline dependsAdrian2021-01-271-2/+6
| | | | | | | | Introduce PACKAGECONFIG[nmcli] to make building the nmcli utility which depends on GPLv3 licensed readline library optional. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Add Wireless Extensions to PACKAGECONFIG[wifi]Nicolas Jeker2021-01-271-1/+1
| | | | | | | | | | | Linux Wireless Extensions (Wext) support is enabled per default in NetworkManager. Having Wext enabled without enabling WiFi support, too, doesn't make much sense. Therefore, instead of creating a separate PACKAGECONFIG flag, 'wext' was added to the already existing 'wifi' flag. Signed-off-by: Nicolas Jeker <n.jeker@gmx.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: Fix systemd serviceMario Schuknecht2021-01-251-1/+1
| | | | | | | | | | Systemd service file option 'ExecStopPre' is warned and ignored by systemd. By replacing 'ExecStopPre' with 'ExecStop', the intended behavior is realized. The 'ExecStop' commands are executed one after the other. Signed-off-by: Mario Schuknecht <mario.schuknecht@dresearch-fe.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.9.2 -> 0.9.3Adrian Freihofer2021-01-251-4/+5
| | | | | | | | | | | Fix new dependencies to nftables-python. Firewalld has been changed to use python bindings instead of calling the nftables cli utility. (Has this firewalld recipe been used with firewalld's default configuration which defaults to nftables backend?) Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.7 -> 0.9.8Adrian Freihofer2021-01-251-3/+3
| | | | | | | | | | | | | Added missing RDEPENDS to the libnft library from nftables-python to libnftable.so.1 which is loaded dynamically by LibraryLoader into python. Added json to default PACKAGECONFIG which is probably used as well when compiled with python support. For example firewalld crashes at runtime if nftables is compiled without json support. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-networkmanager: upgrade 2.1 -> 2.2zangrc2021-01-251-3/+3
| | | | | | | | -License-Update: Copyright year updated to 2021. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.8 -> 1.1.9zangrc2021-01-251-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.22.14 -> 1.28.0Andreas Müller2021-01-218-108/+65
| | | | | | | | | | | | | * Build tested on aarch64 glibc/musl * 0003-Fix-build-with-musl-for-n-dhcp4.patch has to go. Grepped nm code for seed48_r / mrand48_r => no findings * Since this is a huge version bump no detaile release notes are provided here * Have tried to move to meson build few months ago but it turned into huge efforts and ended without success. Maybe situation changed but let's postpone for now Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: control smux via PACKAGECONFIGDiego Santa Cruz2021-01-211-3/+5
| | | | | | | | | | | | | | | | Support for smux is always enabled by the recipe, but it can be a security risk since it makes the snmpd daemon listen on TCP port 199. This makes it contrallable via PACKAGECONFIG, so that it can be easily disabled from the distro or local config. The mechanism makes it easy to add control for other MIB modules via PACKAGECONFIG later if need be. For compatibility smux is added to the default PACKAGECONFIG, so there is no change in the default build configuration. Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: refresh patchKai Kang2021-01-191-13/+4
| | | | | | | | Module 'time' had been imported in Functions.py by upstream, so not import in 0002-fix-fail-to-enable-bluetooth.patch and update accordingly. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* celt051: update SRC_URIchangqing.li@windriver.com2021-01-191-1/+1
| | | | | | | | original SRC_URI is not valid now, offical CELT repository moved to gitlab Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: upgrade 2.2.36.4 -> 2.3.13Wang Mingyu2021-01-184-90/+85
| | | | | | | | | | | | 0001-doveadm-Fix-parallel-build.patch removed since it is included in 2.3.13 refresh 0001-configure.ac-convert-AC_TRY_RUN-to-AC_TRY_LINK-state.patch add 0001-not-check-pandoc.patch to not check pandoc of configure Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-networking: Add ipsetKhem Raj2021-01-181-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: add recipeArmin Kuster2021-01-181-0/+21
| | | | | | | This is needed for login-shield pkg in meta-security Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Several securtiy fixesArmin Kuster2021-01-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Source: Wireshark.org MR: 106181, 106696, 107655, 107673, 107682 Type: Security Fix Disposition: Backport from wireshark.org ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a Description: Bugfix only update including these cves: 3.2.8 CVE-2020-26575 CVE-2020-28030 3.2.9 CVE-2020-26418 CVE-2020-26421 CVE-2020-26420 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: upgrade 1096.40.7 -> 1310.40.42Zheng Ruoqin2021-01-122-3/+3
| | | | | | | | Refresh the following patch: 0001-mdns-include-stddef.h-for-NULL.patch Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* igmpproxy: upgrade 0.2.1 -> 0.3Zheng Ruoqin2021-01-121-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.9.1 -> 0.9.2Zheng Ruoqin2021-01-121-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: upgrade 6.11 -> 6.12Zheng Ruoqin2021-01-122-48/+1
| | | | | | | | 0001-Bugfix-Modify-the-dir-of-install-exec-hook-and.patch Removed since this is included in 6.12. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 32.0 -> 33.0zangrc2021-01-071-4/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: upgrade 2.1.3 -> 2.1.4Andreas Müller2021-01-061-1/+1
| | | | | | | | | | | | | | | | | | | | Security release, see GHSA-jpc9-mgw6-2xwx/CVE-2020-15238 [1] Changes Force cython to use python language version 3 Do not use exitcode 1 when we expect to fail Mark more strings translatable (@cwendling) Bugs fixed Unstranslated strings Searching (with Ctrl+F in manager device list) did not work Default PIN lookup Fix device removal handling (@Yannik) Only use LaunchContext when we have proper event time [1] https://github.com/blueman-project/blueman/security/advisories/GHSA-jpc9-mgw6-2xwx Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 4.5.0 -> 4.6.0zangrc2021-01-052-34/+1
| | | | | | | | 0001-Make-ByteReverseWords-available-for-big-and-little-e.patch Removed since this is included in 4.6.0 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: add UPSTREAM_CHECK_REGEXYi Zhao2021-01-051-0/+2
| | | | | | | Add UPSTREAM_CHECK_REGEX to skip checking testing version (e.g. 4.99.0). Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: Add symbol link /sbin/ebtablesHe Zhe2021-01-051-0/+3
| | | | | | | | | | | | | | | | | | The original /sbin/ebtables has been moved to /usr/sbin/ebtables-legacy. But the old path is still used by some other software libvirt. libvirtd[809]: direct firewall backend requested, but /sbin/ebtables is not available: No such file or directory As stated in the related change in ebtable git repo: The new -legacy binary has no problem if called via a symlink with the 'ebtables' name, so users can still name this binary with whatever name. So we add a symbol link from /usr/sbin/ebtables-legacy to /sbin/ebtables. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: do not install /etc/ethertypesYi Zhao2021-01-052-3/+35
| | | | | | | | Refer to Debian, patch the Makefile to prevent /etc/ethertypes installation instead of removing it in do_install_append. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: remove upstream ebtables-legacy-saveYi Zhao2021-01-052-4/+4
| | | | | | | | Remove the upstream ebtables-legacy-save before we install the local ones. And install it to ${sbindir} rather than ${base_sbindir}. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: add missing file ebtables.commonYi Zhao2021-01-042-3/+170
| | | | | | | | | | | The ebtables.common is required by ebtables.service. Add it back. Fixes: systemd[660]: ebtables.service: Failed to locate executable /usr/sbin/ebtables.common: No such file or directory systemd[660]: ebtables.service: Failed at step EXEC spawning /usr/sbin/ebtables.common: No such file or directory Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ldap: upgrade 3.2.0 -> 3.3.1zangrc2021-01-041-2/+2
| | | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: upgrade 5.20.08 -> 5.20.11zhengruoqin2020-12-281-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: upgrade 0.100 -> 0.101zhengruoqin2020-12-284-17/+56
| | | | | | | | | | | | Refresh the following patch: 0001-dbus-Remove-unused-variabes.patch 0002-Makefile-Exclude-.h-files-from-target-rule.patch Add 0001-don-t-fail-if-GLOB_BRACE-is-not-defined.patch to solve the compilation errors on musl. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bridge-utils: upgrade 1.6 -> 1.7zhengruoqin2020-12-281-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: upgrade 0.10.1 -> 0.10.2zangrc2020-12-284-84/+32
| | | | | | | | | | | | Refresh the following patch: avoid-attr-unless-wanted.patch options-0.10.0.patch 0001-waf-add-support-of-cross_compile.patch Removed since this is included in 0.10.2 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: upgrade 2.3.0 -> 2.3.1zangrc2020-12-284-85/+22
| | | | | | | | | | | | 0001-waf-add-support-of-cross_compile.patch Removed since this is included in 2.3.1. Refresh the following patch: avoid-attr-unless-wanted.patch options-2.2.0.patch Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tftp-hpa: change the ALTERNATIVE_PRIORITYMingli Yu2020-12-241-1/+1
| | | | | | | | | | | | Both inetutils-tftp and tftp-hpa provide the tftp command and the ALTERNATIVE_PRIORITY of inetutils-tftp is 79 until now. Increase the ALTERNATIVE_PRIORITY of tftp-hpa to 100 to guarantee the tftp command provided by tftp-hpa when both of the packages installed. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: upgrade 2.1.2 -> 2.1.3zangrc2020-12-242-50/+1
| | | | | | | | 0001-libopeniscsiusr-Compare-with-max-int-instead-of-max-.patch Removed since this is included in 2.1.3 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: upgrade 2.0.10-4 -> 2.0.11zangrc2020-12-2421-1103/+132
| | | | | | | | | | | | Refresh the following patch: 0010-Adjust-header-include-sequence.patch Referring to Fedora style, ebtables-legacy-save and ebtables.service are retained. The upstream address has been modified. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* traceroute: change the ALTERNATIVE_PRIORITYMingli Yu2020-12-231-1/+1
| | | | | | | | | | | | | Both inetutils-traceroute and traceroute provide the traceroute command and the ALTERNATIVE_PRIORITY of inetutils-traceroute is 79 until now. Increase the ALTERNATIVE_PRIORITY of traceroute to 100 to guarantee the traceroute command provided by traceroute when both of the packages installed. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cyrus-sasl: Disable ntlm plugin by defaultKhem Raj2020-12-231-1/+1
| | | | | | | | | ntlm requires md4 algorith defines which is now disabled in openssl recipe by default also see [1] [1] https://github.com/cyrusimap/cyrus-sasl/issues/632 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vblade: upgrade 24 -> 25zangrc2020-12-184-90/+4
| | | | | | | | | | | | gcc-10.patch Removed since this is included in 25. Refresh the following patch: cross.patch makefile-add-ldflags.patch Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.29 -> 2.0.30zangrc2020-12-181-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade to 2.25.0Alexander Vickberg2020-12-172-61/+2
| | | | | | | Deleted build fix patch. This is already applied in this release. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: do not install /etc/ethertypesYi Zhao2020-12-162-1/+37
| | | | | | | | | | | | The /etc/ethertypes is provided by netbase since 6.0[1]. Do not instal the file in ebtables, otherwise there would be a conflict: Error: Transaction test error: file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7_64 [1] https://salsa.debian.org/md/netbase/-/commit/316680c6a2c3641b6abc76b3eebf88781f609d35 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: CVE-2020-14383 Security AdvisoryZheng Ruoqin2020-12-152-0/+113
| | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: CVE-2020-14318 Security AdvisoryZheng Ruoqin2020-12-152-0/+143
| | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix reallocarray check in meson and configureKhem Raj2020-12-122-0/+28
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade to 2.24.0Alexander Vickberg2020-12-092-4/+63
| | | | | | | | | Download archives are no longer updated so fetch from Github. Add build fix from upstream. The file LICENSE now contains the full Apache 2.0 license text. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-05 23:07:37 +0000