summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* mbedtls: upgrade 3.6.3.1 -> 3.6.4gudni2025-07-271-2/+2
| | | | | | | | | | | | | | | | | | | | Fixes several security vulnerabilities: CVE-2025-49601, CVE-2025-49600, CVE-2025-52496, CVE-2025-47917, CVE-2025-48965, CVE-2025-52497, and CVE-2025-49087 The framework directory has been changed into a git submodule.[1][2] The recipe now uses Git Submodule Fetcher (gitsm) Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4 [1] https://github.com/Mbed-TLS/mbedtls/commit/8cf5666a174237998a7965e284d7ba8c1655d16d [2] https://github.com/Mbed-TLS/mbedtls/commit/c90c6d8ff787ab8787d9373b0e662a95ed1f4dae Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* mbedtls: upgrade 3.6.3 -> 3.6.3.1Wang Mingyu2025-07-271-3/+4
| | | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libcoap: patch CVE-2024-31031Peter Marko2025-07-272-0/+83
| | | | | | | | | | | | Pick commit [1] from [2] which fixes [3] as listed in [4]. [1] https://github.com/obgm/libcoap/commit/214665ac4b44b1b6a7e38d4d6907ee835a174928 [2] https://github.com/obgm/libcoap/pull/1352 [3] https://github.com/obgm/libcoap/issues/1351 [4] https://nvd.nist.gov/vuln/detail/CVE-2024-31031 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* postfix: fix rootfs file differenceJinfeng Wang2025-07-062-0/+32
| | | | | | | | Rootfs file differs with the same project configure, add preliminary setting to avoid this. Signed-off-by: Jinfeng Wang <jinfeng.wang.cn@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* netcf: remove EXTRA_AUTORECONFChangqing Li2025-07-061-2/+0
| | | | | | | | | | | Refer [1], Makefile.am already set ACLOCAL_AMFLAGS = -I gnulib/m4, set EXTRA_AUTORECONF will cause do_configure failure with long build path, just drop EXTRA_AUTORECONF. [1] https://git.openembedded.org/openembedded-core/commit/meta/classes-recipe/autotools.bbclass?id=e718d1be2c4fb54cf363c23f929358e1be68c724 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* open-vm-tools: fix CVE-2025-22247Yogita Urade2025-07-062-0/+379
| | | | | | | | | | | | | | | | VMware Tools contains an insecure file handling vulnerability. \xa0A malicious actor with non-administrative privileges on a guest VM may tamper the local files to trigger insecure file operations within that VM. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-22247 Upstream patch: https://github.com/vmware/open-vm-tools/blob/CVE-2025-22247.patch/CVE-2025-22247-1230-1250-VGAuth-updates.patch Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* chrony: use inherit_defer for conditional inherit of useraddClayton Casciato2025-06-201-1/+1
| | | | | | | | | | | | [ Upstream commit 63df976d8eec0fa714e8da30f4333f8af23c57d3 ] conditionnal inherit is missed when PACKAGECONFIG privdrop is activated after this inherit, eg in .bbappend. Signed-off-by: Andreas Fenkart <afenkart@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Clayton Casciato <majortomtosourcecontrol@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* meta-networking/README.md: Correct the branch for dependent layersPeter Kjellerstedt2025-05-171-3/+3
| | | | | | | | | | | | This was missed in commit 0d2d2d193a1619b6dbebaf335f1ef785478049e3. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> --- PATCHv2: * Added my Signed-off-by. * Removed unintentional Change-Id.
* meta-openemnedded: Add myself as walnascar maintainerArmin Kuster2025-04-162-12/+7
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: update 2.4.3 -> 2.4.4Markus Volk2025-04-102-41/+2
| | | | | | | | | | | | | | | | | | | | | | | | - remove patch that was merged upstream 2.4.4 Bugs fixed Fix Rfcom plugin dbus signature Set an initial selected device in blueman-sendto AutoConnect: Store bluetooth address instead of object path Applet: Handle UnknownObject DBus error (@tommie) Make search button available after device list becomes empty (@astcri) Fatal LoadException Changes Terminate applet on manager termination if it was started by manager Add Galic and Esperanto translations AutoConnect: Automatically convert path to address Add toggle to force symbolic statusicon Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd-utils: Fix build with gcc-15Nguyen Dat Tho2025-04-102-0/+35
| | | | | | | | | | | | To fix error: http://errors.yoctoproject.org/Errors/Details/851808/ In file included from string_matching.cpp:1: ./string_matching.h:10:18: error: 'uint16_t' does not name a type 10 | extern const uint16_t PATTERN_LIMIT; | ^~~~~~~~ ./string_matching.h:7:1: note: 'uint16_t' is defined in header '<cstdint>'; this is probably fixable by adding '#include <cstdint>' Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Fix build with gcc-15Nguyen Dat Tho2025-04-102-0/+38
| | | | | | | | | | | | | | | Fix error: http://errors.yoctoproject.org/Errors/Details/851809/ ../mDNSShared/CommonServices.h:856:13: error: 'bool' cannot be defined via 'typedef' 856 | typedef int bool; | ^~~~ ../mDNSShared/CommonServices.h:856:13: note: 'bool' is a keyword with '-std=c23' onwards ../mDNSShared/CommonServices.h:856:1: warning: useless type name in empty declaration 856 | typedef int bool; | ^~~~~~~ Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: upgrade 4.5.0 -> 4.6.0Nguyen Dat Tho2025-04-101-1/+1
| | | | | | | | Changelog: https://github.com/weechat/weechat/blob/v4.6.0/CHANGELOG.md Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.13 -> 2.6.14Wang Mingyu2025-04-071-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ssmping: Use debian mirror for SRC_URIKhem Raj2025-04-061-2/+1
| | | | | | | Original URI is not accessible anymore Drop md5sum Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: fix build with gcc-15.0.1mark.yang2025-04-022-0/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | * fix following error: http://errors.yoctoproject.org/Errors/Details/850313/ ../git/compat/malloc.c:9:7: warning: conflicting types for built-in function 'malloc'; expected 'void *(long unsigned int)' [-Wbuiltin-declaration-mismatch] 9 | void *malloc (); | ^~~~~~ ../git/compat/malloc.c:5:1: note: 'malloc' is declared in header '<stdlib.h>' 4 | #include "config.h" +++ |+#include <stdlib.h> 5 | #undef malloc ../git/compat/malloc.c: In function 'rpl_malloc_unbound': ../git/compat/malloc.c:23:10: error: too many arguments to function 'malloc'; expected 0, have 1 23 | return malloc (n); | ^~~~~~ ~ ../git/compat/malloc.c:9:7: note: declared here 9 | void *malloc (); | ^~~~~~ * Seeing that there is '#undef malloc', it appears they don't want to use the malloc from stdlib.h. Therefore, we need to correctly define the parameters for malloc. Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freediameter: fix build with gcc-15.0.1mark.yang2025-04-012-0/+70
| | | | | | | | | | | | | | | | * backport fix from: https://github.com/freeDiameter/freeDiameter/issues/72 https://github.com/freeDiameter/freeDiameter/commit/a54f10082f819dadfa6931166e71edffadb565dd to fix: http://errors.yoctoproject.org/Errors/Details/850312/ TOPDIR/tmp/work/qemux86_64-oe-linux/freediameter/1.5.0+git/git/libfdcore/sctp.c:622:21: note: 'bool' is a keyword with '-std=c23' onwards TOPDIR/tmp/work/qemux86_64-oe-linux/freediameter/1.5.0+git/git/libfdcore/sctp.c:622:26: error: expected identifier or '(' before '=' token 622 | int bool = 1; | ^ Signed-off-by: mark.yang <mark.yang@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: upgrade 3.6.1 -> 3.7.1Nguyen Dat Tho2025-03-312-2/+82
| | | | | | | | | | Changelog: https://github.com/snort3/snort3/blob/master/ChangeLog.md Add 0001-Fix-build-with-gcc-15.patch to fix build with gcc-15 Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: 3.6.2 -> 3.6.3Yi Zhao2025-03-311-5/+2
| | | | | | | | | | | | | | ChangeLog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3 Remove mbedtls-framework repository, as the framework is now added as a flat directory rather than a submodule[1][2]. [1] https://github.com/Mbed-TLS/mbedtls/commit/b41194ce7f2fda63bf5959588631eba73c5c621e [2] https://github.com/Mbed-TLS/mbedtls/commit/2c824b4fe5dab7e1526560be203bf705857e372a Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 2.28.9 -> 2.28.10Yi Zhao2025-03-311-1/+1
| | | | | | | | ChangeLog https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.10 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 10.2.1 -> 10.3Yi Zhao2025-03-311-2/+2
| | | | | | | | ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-10.3 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Drop styhead from LAYERSERIES_COMPATKhem Raj2025-03-311-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Fix a crash and support for 6.7+ kernelKhem Raj2025-03-293-0/+142
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Fix build on musl when xtables enabledKhem Raj2025-03-281-0/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openl2tp: Replace ifconfig with ip command in ptest run scriptKhem Raj2025-03-281-3/+2
| | | | | | | ifconfig may not exist on all systems since its deprecated, fixes ptests Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xl2tpd: fix build with gcc-15Martin Jansa2025-03-282-1/+42
| | | | | Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade 1.6.37 -> 1.6.38Wang Mingyu2025-03-251-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdaq: upgrade 3.0.18 -> 3.0.19Wang Mingyu2025-03-251-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: upgrade 2.90 -> 2.91Yi Zhao2025-03-241-1/+1
| | | | | | | | ChangeLog: https://thekelleys.org.uk/dnsmasq/CHANGELOG Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: 3.2.5 -> 3.2.7Yi Zhao2025-03-2118-101/+118
| | | | | | | | | | | ChangeLog: https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_6 https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_7 * Refresh local patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd-utils: upgrade 9.28.0 -> 9.30.0Yi Zhao2025-03-213-156/+20
| | | | | | | | | | ChangeLog: https://github.com/LINBIT/drbd-utils/blob/v9.30.0/ChangeLog * Refresh local patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 6.0.0 -> 6.0.1Yi Zhao2025-03-211-1/+1
| | | | | | | | ChangeLog: https://github.com/strongswan/strongswan/releases/tag/6.0.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iftop: fix build with gcc-15Martin Jansa2025-03-212-0/+47
| | | | | | | | fixes: http://errors.yoctoproject.org/Errors/Details/848458/ Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openl2tp: Pin to C17 stdKhem Raj2025-03-201-1/+1
| | | | | | | Does not compile with C23 with GCC-15 and the last release was long time ago. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Fix variable assignment whitespaceRichard Purdie2025-03-2014-20/+20
| | | | | Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdist: Pin to C17 stdKhem Raj2025-03-201-0/+2
| | | | | | | It can not be cleanly compiled with C23 defaults in GCC-15 therefore stick with C17 for now. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openl2tp: don't inherit autotoolsRoss Burton2025-03-191-2/+4
| | | | | | | | This upstream does not in fact use autotools, so remove the inherit and implement the required do_install. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* miniupnpd: partial recipe rewriteRoss Burton2025-03-191-9/+13
| | | | | | | | | | | | | | | | | | | | This upstream does not in fact use autotools, so remove the inherit. Split the configure step (make config.h) into do_configure and ensure that it always runs in case the configuration has changed. Use PACKAGECONFIG for options, as there are more available upstream. Add UPSTREAM_CHECK variables to check for new releases. This depends on a bitbake change[1] but with that detects that 2.3.7 has been released. Add a DEPENDS on openssl as the Makefiles try to link against it and silently fail without it. [1] https://lore.kernel.org/bitbake-devel/20250319165339.439776-1-ross.burton@arm.com/T/#u Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vblade: don't inherit autotoolsRoss Burton2025-03-191-1/+1
| | | | | | | This upstream does not in fact use autotools, so remove the inherit. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdist: don't inherit autotoolsRoss Burton2025-03-191-2/+4
| | | | | | | | This upstream does not in fact use autotools, so remove the inherit and implement the required do_install directly. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Add nts support through PACKAGECONFIGOmri Sarig2025-03-191-0/+1
| | | | | | | | | | | Chronyd is supporting NTS (network time security) protocol, however, to build the application with this support, it require having gnutls at build time. This commit adds a PACKAGECONFIG line, allowing users to control whether the supporting application will have nts or not. Signed-off-by: Omri Sarig <omri.sarig13@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: enable packageconfig cppYi Zhao2025-03-171-1/+1
| | | | | | | Enable packageconfig cpp required by minifi-cpp. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* reproducibility: Mark phytool{,-dbg} as known non-reproducibleYoann Congal2025-03-151-0/+2
| | | | | | | | | | | From AB run: https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/36/steps/28/logs/stdio Diffoscope output is at: https://valkyrie.yocto.io/pub/repro-fail-openembedded/meta-networking/oe-reproducible-20250315-xxydi74w/packages/diff-html/ Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* waf-samba: using python variable from python3native.bbclassDmitriy Makhnin2025-03-131-1/+1
| | | | | | | | | Waf-samba.bbclass inherits python3native.bbclass which has the variable PYTHON="${STAGING_BINDIR_NATIVE}/python3-native/python3". This allows this variable to be used in do_compile instead of python3. Signed-off-by: Dmitry Makhnin <d.makhnin@yadro.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Upgrade 2559.60.39.0.1 -> 2559.80.8Alex Kiernan2025-03-131-1/+1
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* keepalived: Make keepalived cross compile reproducibleKhem Raj2025-03-121-1/+5
| | | | | | | This should help with not emitting configure commandline into binaries, these may contain absolute build paths Signed-off-by: Khem Raj <raj.khem@gmail.com>
* reproducibility: update known non-reproducible packagesYoann Congal2025-03-111-0/+2
| | | | | | | | | | | | Those reproducible failures are from AB runs: * https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/34 * https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/35 https://valkyrie.yocto.io/pub/repro-fail-openembedded/ NB: diffoscope output can be found in Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* udpcast: upgrade 20230924 -> 20250223Wang Mingyu2025-03-112-4/+6
| | | | | | | | 0001-include-stddef.h-for-ptrdiff_t.patch refreshed for 20250223 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Wolfssl: add ptestSofiane HAMAM2025-03-064-2/+48
| | | | | | | | | | | | | | | | | | Add ptest for Wolfssl package. Set IMAGE_ROOTFS_EXTRA_SPACE:virtclass-mcextend-wolfssl to 700M enough to avoid a "No space left on device". BEGIN: /usr/lib/wolfssl/ptest Wolfssl ptest logs are stored in /tmp/wolfss_temp.qvuQ9h/ptest.log Test script returned: 0 unit_test: Success for all configured tests. PASS: Wolfssl DURATION: 7 END: /usr/lib/wolfssl/ptest Signed-off-by: Sofiane HAMAM <sofiane.hamam@smile.fr> Reviewed-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: split schema defs into separate packageJohannes Kauffmann2025-03-061-0/+6
| | | | | | | | | | | The OPC UA schema definitions and nodeset descriptions make up 90MB of the "normal" package and contain mostly text files not needed during runtime. Split them into a -tools package. The "normal" package size is reduced drastically. Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>