summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* tcpdump: Delete unused patchPeiran Hong2019-10-091-61/+0
| | | | | | | | Delete patch "0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch" since it is not used in the tcpdump recipe anymore. Signed-off-by: Peiran Hong <peiran.hong@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.3.26 -> 6.4.1Zang Ruochen2019-10-092-1580/+3
| | | | | | | | | | -License-Update: Copyright year updated to 2019. -fetchmail/02_remove_SSLv3.patch Removed since this is included in 6.4.1. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.7.1 -> 0.7.2Zang Ruochen2019-10-081-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Add zeus compatibility to all layer.conf filesPalmer Dabbelt2019-10-081-1/+1
| | | | | | | | | | | I have no idea if this is the right thing to do, but without the patch I can't actually buil OE because none of these layers are compatible with the change in openembedded-core to move to zeus. Fixes: a5c9709b8d ("layer.conf: Update for zeus series") # openembedded-core Signed-off-by: Palmer Dabbelt <palmer@dabbelt.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: add -latomic for armv5Trevor Gamblin2019-10-081-0/+1
| | | | | | | | | | | | | | | | | | | | | freeradius fails to build for armv5: | *** Warning: Linking the executable build/bin/local/radeapclient against the loadable module | *** libfreeradius-server.so is not portable! | | *** Warning: Linking the executable build/bin/local/radeapclient against the loadable module | *** libfreeradius-eap.so is not portable! path -Wl,/yow-lpggp31/tgamblin/freeradius.build/tmp-glibc/work/armv5e-oe-linux-gnueabi/freeradius/3.0.19-r0/git/build/lib/local//.libs /arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_compare_exchange_8' /arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_load_8' /arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_store_8' | collect2: error: ld returned 1 exit status | scripts/boiler.mk:630: recipe for target 'build/bin/local/radeapclient' failed Explicitly link libatomic to fix the issue. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* grpc: Update to 1.24.1Khem Raj2019-10-083-142/+32
| | | | | | | | | | | | | upb dependency needs to fed as source, since it lacks the CMake based external module builds like some other deps Forward port the cross lib installation patch Drop gettid patch as it was a backport which is in this revision Link with libatomic on mips Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: upgrade 4.9.2 -> 4.9.3Peiran Hong2019-10-085-25/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This upgrade adds some new features and fixes numerous bugs including the following CVEs: CVE: CVE-2017-16808 (AoE) CVE: CVE-2018-14468 (FrameRelay) CVE: CVE-2018-14469 (IKEv1) CVE: CVE-2018-14470 (BABEL) CVE: CVE-2018-14466 (AFS/RX) CVE: CVE-2018-14461 (LDP) CVE: CVE-2018-14462 (ICMP) CVE: CVE-2018-14465 (RSVP) CVE: CVE-2018-14881 (BGP) CVE: CVE-2018-14464 (LMP) CVE: CVE-2018-14463 (VRRP) CVE: CVE-2018-14467 (BGP) CVE: CVE-2018-10103 (SMB - partially fixed, but SMB printing disabled) CVE: CVE-2018-10105 (SMB - too unreliably reproduced, SMB printing disabled) CVE: CVE-2018-14880 (OSPF6) CVE: CVE-2018-16451 (SMB) CVE: CVE-2018-14882 (RPL) CVE: CVE-2018-16227 (802.11) CVE: CVE-2018-16229 (DCCP) CVE: CVE-2018-16301 (was fixed in libpcap) CVE: CVE-2018-16230 (BGP) CVE: CVE-2018-16452 (SMB) CVE: CVE-2018-16300 (BGP) CVE: CVE-2018-16228 (HNCP) CVE: CVE-2019-15166 (LMP) CVE: CVE-2019-15167 (VRRP) CVE: CVE-2018-14879 (tcpdump -V) Deleted patch "0001-CVE-2017-16808-AoE-Add-a-missing-bounds-check.patch" since the fix is included in the upgrade. Modified patches "avoid-absolute-path-when-searching-for-libdlpi.patch", "unnecessary-to-check-libpcap.patch", and "add-ptest.path" since the upgrade renamed configure.in to configure.ac and made changes to the file. Added PACKAGECONFIG for smb. It is disabled by default in the upgraded version in both the package's configure script and this bitbake recipe since it is insecure. Modified the parsing of ptest result to align with the new output format. With core-image-minimal on qemux86-64/kvm: Recipe | Passed | Failed | Skipped | Time(s) Before | 408 | 0 | 2 | 4 After | 431 | 11 | 2 | 10 11 test failed after the upgrade since libpcap is not upgraded alongside with tcpdump. Signed-off-by: Peiran Hong <peiran.hong@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: Disable parallel installOvidiu Panait2019-10-041-0/+2
| | | | | | | | | | | | | | According to configure.ac, make install might fail when run with multiple jobs: $ tail -15 log.do_configure ... When running "make install" do not use any form of parallel or job server options (such as GNU make's -j option). Doing so may cause errors. ... Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: install dev headersCallaghan, Dan2019-10-041-1/+2
| | | | | | | | These are needed for other packages which want to link against libstrongswan or other libraries included with Strongswan. By default, no headers are installed. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: update to 0.7.1Callaghan, Dan2019-10-042-75/+10
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: fix qt5 buildGeorge McCollister2019-10-041-2/+4
| | | | | | | | | | | | | | | | | | | | | | Add qttools-native to PACKAGECONFIG[qt5] DEPENDS to resolve missing Qt5LinguistTools build error. Add qtmultimedia to PACKAGECONFIG[qt5] DEPENDS to resolve missing Qt5Multimedia build error. Add qtsvg to PACKAGECONFIG[qt5] DEPENDS to resolve missing Qt5Svg build error. Inherit cmake_qt5 when qt5 is in PACKAGECONFIG to resolve get_target_property() called with non-existent target "Qt5::qmake" build error. Automatically add qt5 to PACKAGECONFIG when meta-qt5 is in the build since adding qt5 via a .bbappend won't satisfy the conditional inherit cmake_qt5. The poppler recipe does exactly this. Signed-off-by: George McCollister <george.mccollister@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Revert "spice: Drop broken native"Martin Jansa2019-10-011-1/+2
| | | | | | | | | | | This reverts commit 5f32fd6b08d79b9a4d1bffb9b2bcbc535a5b27d2. * fixed by restricting -Wno-error=address-of-packed-member only for target, spice-native is still useful for qemu-native when spice PACKAGECONFIG is enabled Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: ignore all warnings not just address-of-packed-memberMartin Jansa2019-10-011-1/+1
| | | | | | | | | | * with older native gcc on host this will break spice-native with: cc1: error: -Werror=address-of-packed-member: no option -Waddress-of-packed-member because older gcc doesn't recognize address-of-packed-member warning to work around this ignore them all Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: Fix duplicate copies of shared libs in packageKhem Raj2019-09-302-3/+28
| | | | | | | | | | | | | some plugins are installed into libdir/opensaf but we were making a copy into libdir as well, this patch changes that so the packaged files are appearing only once create_empty_library should be using cross compiler with linker flags, existig code in this area is not cross compile friendly skip dev-so QA test since some .so are stubs which are packages in PN Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Correct the upstream version checkAdrian Bunk2019-09-301-4/+1
| | | | | Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Fix PACKAGECONFIG for perlRobert Yang2019-09-301-4/+5
| | | | | | | | | | | | | | | | * Remove perl-lib since it had been removed by oe-core: commit 68552c353255188de3d5b42135360a30e7eac535 Author: Alexander Kanavin <alex.kanavin@gmail.com> Date: Sun Dec 2 12:46:37 2018 +0100 perl: remove the previous version of the recipe Now the files are in perl pacakge. * Fix perl paths when perl is enabled. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* corosync: Fix PACKAGECONFIG flag for rdmaRobert Yang2019-09-301-1/+1
| | | | | | | | | | | | | Fixed: PACKAGECONFIG_append_pn-corosync = ' rdma' $ bitbake corosync | configure: error: Package requirements (rdmacm) were not met: | | No package 'rdmacm' found Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Add sysvinit supportOtavio Salvador2019-09-302-1/+115
| | | | | Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Add a `resolvconf` PACKAGECONFIGOtavio Salvador2019-09-301-0/+1
| | | | | Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix ADSL plugin packagingOtavio Salvador2019-09-301-1/+1
| | | | | Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: Mark libOpenIPMI.so.0 as private lib in openipmi-perlKhem Raj2019-09-301-0/+1
| | | | | | | | | | | | | | libOpenIPMI.so.0 is SONAME for openIPMI.so in openipmi-perl package which means the shlibs code will automatically add it as a provider for this shared library but actual public library is provided by openipmi package, and it results in ERROR: openipmi-2.0.27-r0 do_package: openipmi: Multiple shlib providers for libOpenIPMI.so.0: openipmi-perl, openipmi (used by files: /mnt/jenkins/workspace/Yocto-world-musl/build/tmp/work/aarch64-yoe-linux/openipmi/2.0.27-r0/packages-split/openipmi/usr/bin/openipmi_eventd) The library in perl package is actually not required to compete to provide for public interfaces Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kea: upgrade 1.5.0 -> 1.7.0Changqing Li2019-09-282-36/+4
| | | | | | | The license checksum change is due to the date being updated. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: Drop broken nativeRobert Yang2019-09-251-2/+1
| | | | | | | | | | | | $ bitbake spice-native checking whether the C compiler works... no configure: error: in `/path/to/spice-native/0.14.2+gitAUTOINC+7cbd70b931_4fc4c2db36-r0/build': configure: error: C compiler cannot create executables It's a broken native recipe which means no ones need it any more, so remove it. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: add UPSTREAM_CHECK_URICallaghan, Dan2019-09-251-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: update to 1.6.6Leon Anavi2019-09-221-2/+2
| | | | | | | | Fix security vulnerabilities. For further details, see: https://mosquitto.org/blog/2019/09/version-1-6-6-released/ Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: remove restriction to ARM ISAS. Lockwood-Childs2019-09-191-2/+0
| | | | | | | | | The restriction to ARM instruction set came in the original wireshark recipe, which was 2 major versions ago (and also a few toolchains ago). Wireshark 3.x seems to be building fine allowing thumb instructions, at least on cortexa9t2hf. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: upgrade 0.10.0 -> 0.10.1Yuan Chao2019-09-191-2/+2
| | | | | Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.7 -> 4.10.8Yi Zhao2019-09-171-2/+2
| | | | | | | | | | | | Security fixes: CVE-2019-10197: Combination of parameters and permissions can allow user to escape from the share path definition. See: https://www.samba.org/samba/history/samba-4.10.8.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: update to 1.6.5Paul Eggleton2019-09-161-4/+9
| | | | | | | | | | | | | | | | | | A lot of changes upstream since the last upgrade, the highlights: * MQTT v5 protocol support * Performance improvements * New mosquitto_rr (request/response) client * TLS enhancements: OCSP stapling, TLS Engine support, explicit TLS v1.3 support, removed TLS v1.0 support For further details, see https://mosquitto.org/blog/ Additionally, SUMMARY and DESCRIPTION were tidied up as needed. Based upon an earlier upgrade patch by Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: fix package split wrongly when enabled usrmergeChangqing Li2019-09-161-2/+2
| | | | | | | | | | | | | | | | | * when usrmerge is enabled, ${libdir} is /usr/lib, and ${systemd_unitdir} is /usr/lib/systemd, sine PACKAGE ntpdate is after ntp in variable PACKAGES, so file ${systemd_unitdir}/system/ntpdate.service will be populated into PACKAGE ntp, but actually we have add it into FILES_ntpdate when usrmerge is disabled, ${libdir} is empty, and usrmerge is enabled, files under ${libdir} have been covered by other FILES config, so fix by remove ${libdir} * libexecdir is empty, so remove it FILES_${PN} Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* znc: update to 1.7.4Oleksandr Kravchuk2019-09-161-1/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard: Upgrade 20190905 to 20190913Scott Ellis2019-09-153-2/+2
| | | | | Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: Fix CVE-2017-16808Peiran Hong2019-09-132-0/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | Backport selected parts of three upstream commits to fix CVE-2017-16808 where tcpdump 4.9.2 has a heap-based buffer over-read. Upstream-Status: Backport [ several ] Upstream commits fully backported: 46aead6 [CVE-2017-16808/AoE: Add a missing bounds check] Upstream commits partially backported: 7068209 [Use nd_ types in 802.x and FDDI headers.] 84ef17a [Replace ND_TTEST2()/ND_TCHECK2() macros by macros using pointers (1/n)] 46aead6 fixes the vulnerability and requires two macros defined in 7068209 and 84ef17a, which are committed after the release of 4.9.2. Only the definition of the macros are taken from the two commits as they impact a wide range of code and are difficult to integrate. CVE: CVE-2017-16808 Signed-off-by: Peiran Hong <peiran.hong@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openhpi: control snmp-bc ptest generationSlater, Joseph2019-09-101-0/+15
| | | | | | | Do not try to compile ptests for snmp-bc if it is not in PACKGECONFIG. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: Fix do_patch fuzzKhem Raj2019-09-071-5/+3
| | | | | | | | | | | | Refresh the patch to apply cleanly Fixes Applying patch 0001-memory.h-Include-stdint.h-for-uintptr_t.patch patching file src/libstrongswan/utils/utils/memory.h Hunk #1 succeeded at 26 with fuzz 2 (offset 4 lines). Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd,netkit-rusers: Blacklist packagesKhem Raj2019-09-073-2/+5
| | | | | | These fail to build always Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard: Upgrade 20190702 to 20190905Scott Ellis2019-09-073-2/+2
| | | | | Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Fix configure tests to work with clangKhem Raj2019-09-073-0/+90
| | | | | | | Do not use nested functions ( main inside main ) Use global scope for __thread variables Signed-off-by: Khem Raj <raj.khem@gmail.com>
* grpc: Change gettid patch with the upstream merged versionGianfranco Costamagna2019-09-061-33/+95
| | | | | Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* grpc: don't use unexisting gettid function on glibc 2.29, it has been ↵Gianfranco Costamagna2019-09-061-2/+2
| | | | | | | | | implemented only in 2.30 https://sourceware.org/git/?p=glibc.git;a=commit;h=1d0fc213824eaa2a8f8c4385daaa698ee8fb7c92 Signed-off-by: Francesco Mocci <francesco.mocci@abinsula.com> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd-utils: switch to add patch from change source in do_configureChangqing Li2019-09-052-11/+109
| | | | | | | | | | it is not proper change source in do_configure, it will make source not updated even local.conf have change the DISTRO_FEATURES [YOCTO: #13493] Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: upgrade 2.2.0 -> 2.3.0Yuan Chao2019-09-051-2/+2
| | | | | Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netcf: Fix do_configure failed when multilibRobert Yang2019-09-041-1/+1
| | | | | | | | | | Fixed do_configure failed: $ bitbake lib32-netcf cp: cannot stat '/path/to/lib32-recipe-sysroot/usr/share/gnulib': No such file or directory Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: Inherit pkgconfig and override PKG_CONFIGKhem Raj2019-09-031-1/+2
| | | | | | | | | | | | | | PKG_CONFIG is hardcoded to /usr/bin/pkg-config which is not cross compile safe and ends up with build errors especially on hosts where pkgconf is used it ends up with errors like /usr/bin/pkg-config: line 11: exec: pkgconf: not found /usr/bin/pkg-config: line 11: exec: pkgconf: not found Override it to use own native pkg-config which can deal with sysroot correctly Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.8.0 -> 5.8.1Yuan Chao2019-09-021-2/+2
| | | | | Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: upgrade 3.0.17 -> 3.0.19Changqing Li2019-09-025-258/+32
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: 2.0.876 -> 2.0.877Changqing Li2019-09-023-3/+187
| | | | | | | License-Update: Update GPLv2 License information Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netcf: Fix Manifest not found issueRobert Yang2019-08-301-1/+3
| | | | | | | | | | | | | | | | | | | Fixed: $ bitbake netcf WARNING: netcf-0.2.8+gitAUTOINC+2c5d425585-r0 do_package: Manifest /path/sstate-control/manifest-x86_64_x86_64-nativesdk-gnulib.packagedata not found in intel_x86_64 corei7-64 core2-64 x86_64 allarch x86_64_x86_64-nativesdk (variant '')? This is because gnulib has no related tasks: do_package[noexec] = "1" do_packagedata[noexec] = "1" deltask package_write_ipk deltask package_write_deb deltask package_write_rpm deltask do_deploy_archives Depends on gnulib:do_populate_sysroot explicitly to fix the problem. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd: Upgrade to 9.0.19-1Khem Raj2019-08-291-3/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* linux-atm: Fix build with kernel headers 5.2+Khem Raj2019-08-292-0/+60
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>