summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* ntp: add CVE-2016-9312 to allowlistSekine Shigeki2021-06-181-0/+3
| | | | | Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: upgrade 2.0.10 -> 2.0.11zangrc2021-06-181-3/+3
| | | | | | | | -License-Update: notice.html does not exist in this version, use NOTICE.md to check. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: set ROOTSBINDIR to /usr/sbin if DISTRO_FEATURES has usrmergeGeoff Parker2021-06-181-3/+14
| | | | | | | | | | | | | | Fixes cif-utils recipe build when DISTRO_FEATURES includes 'usrmerge' Add do_configure_prepend() to override ROOTSSBINDIR environment variable so that the utilities are installed in /usr/sbin rather than /sbin. Setting --exec-prefix or --prefix in EXTRA_OECONF does not work. Update do_install_append() to NOT remove /usr/bin /usr/sbin if usrmerge is set in DISTRO_FEATURES Signed-off-by: Geoff Parker <geoffrey.parker@arthrex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Use the built-in options for removing pack toolsEd Tanous2021-06-181-5/+1
| | | | | | | | | | | | | For distros that want to use the ENABLE_LIB_ONLY option, the rm call will fail, because ENABLE_HPACK_TOOLS (set implicitly as part of ENABLE_LIB_ONLY) removes those two binaries from the build, so they then can't be removed again. This commit sets ENABLE_HPACK_TOOLS=OFF, which not only allows for the option to be overridden in other meta layers, also allows a simplified use of ENABLE_LIB_ONLY in meta layers that don't want to ship the binaries. Signed-off-by: Ed Tanous <ed@tanous.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: add CVE-2016-4983 to allowlistito-yuichi@fujitsu.com2021-06-151-0/+3
| | | | | | | CVE-2016-4983 affects only postinstall script on specific distribution, so add it to allowlist. Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cyrus-sasl: add CVE-2020-8032 to allowlistito-yuichi@fujitsu.com2021-06-111-0/+3
| | | | | | | This affects only openSUSE, so add it to allowlist. Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* add CVE-2011-2411 to allowlistSekine Shigeki2021-06-111-0/+4
| | | | | | | This affects only on HP NonStop Server, so add it to allowlist. Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: upgrade 5.9 -> 5.9.1zhengruoqin2021-06-102-9/+12
| | | | | | | | Refresh the following patch: net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.14.4 -> 4.14.5Yi Zhao2021-06-091-2/+2
| | | | | | | | Changelog: https://www.samba.org/samba/history/samba-4.14.5.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: disable check fcntl RW_HINTS when configureYi Zhao2021-06-092-1/+1
| | | | | | | | | | This fails on cross-compilation for musl and clang. Fixes configure error: Checking whether fcntl supports setting/geting hints: UNKNOWN Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-networking: add dhcp-relayYi Zhao2021-06-091-0/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: update 4.4.2 -> 4.4.2-P1Yi Zhao2021-06-091-4/+4
| | | | | | | | | | | | | | Changes since 4.4.2 (Bug Fixes) Corrected a buffer overwrite possible when parsing hexadecimal literals with more than 1024 octets. Reported by Jon Franklin from Dell, and also by Pawel Wieczorkiewicz from Amazon Web Services. [Gitlab #182] CVE: CVE-2021-25217 See: https://downloads.isc.org/isc/dhcp/4.4.2-P1/dhcp-4.4.2-P1-RELNOTES Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: disable backtrace in bundled bindYi Zhao2021-06-092-0/+32
| | | | | | | | | | | Disable backtrace in bundled bind to fix build error for qemuarm on musl. Fixes: bind/bind-9.11.32/lib/isc/.libs/libisc.so: undefined reference to `_Unwind_GetIP' Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: update bundled bind to 9.11.32Yi Zhao2021-06-092-6/+43
| | | | | | | | | | | | | | Update the bundled bind from 9.11.14 to 9.11.32. Fixes build error on qemuarmv5: stats.c: In function 'setcounter': stats.c:300:36: error: 'val' undeclared (first use in this function); did you mean 'value'? 300 | stats->counters[counter] = val; | ^~~ | value Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.4.5 -> 3.4.6zangrc2021-06-091-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: Fix a warning with clangKhem Raj2021-06-093-7/+37
| | | | | | | Refresh musl patch to avoid fuzz Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Zang Ruochen <zangrc.fnst@fujitsu.com>
* netplan: upgrade 0.101 -> 0.102zangrc2021-06-093-95/+2
| | | | | | | | | 0001-dbus-Remove-unused-variabes.patch 0002-Makefile-Exclude-.h-files-from-target-rule.patch Removed since these are included in 0.102. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: update smb.confYi Zhao2021-06-051-29/+11
| | | | | | | | | | | | | | | | | There are some options are deprecated in smb.conf. Refer to https://salsa.debian.org/samba-team/samba/-/blob/master/debian/smb.conf to update it. * Remove the deprecated "syslog only" and "syslog" global options and replace them with the "logging" statement. * Remove wins support and wins server comments since WINS protocol is outdated. * Improve idmap config Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.18 -> 4.14.4Yi Zhao2021-06-0519-647/+307
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The 4.10.x is EOL: https://wiki.samba.org/index.php/Samba_Release_Planning Upgrade to latest 4.14.x. Remove PACKAGECONFIG[gnutls] since the gnutls is now the mandatory requirement for samba. See: https://wiki.samba.org/index.php/Package_Dependencies_Required_to_Build_Samba#Mandatory Refresh patches: 16-do-not-check-xsltproc-manpages.patch 20-do-not-import-target-module-while-cross-compile.patch 21-add-config-option-without-valgrind.patch 0001-Add-options-to-configure-the-use-of-libbsd.patch dnsserver-4.7.0.patch iconv-4.7.0.patch 0001-samba-fix-musl-lib-without-innetgr.patch Drop patches: 0001-lib-replace-wscript-Avoid-generating-nested-main-fun.patch 0001-nsswitch-nsstest.c-Avoid-nss-function-conflicts-with.patch 0001-waf-add-support-of-cross_compile.patch 0002-util_sec.c-Move-__thread-variable-to-global-scope.patch CVE-2020-14318.patch CVE-2020-14383.patch glibc_only.patch smb_conf-4.7.0.patch Add new patches: 0007-wscript_configure_system_gnutls-disable-check-gnutls.patch 0008-source3-wscript-disable-check-fcntl-F_OWNER_EX.patch source3-wscript-disable-check-fcntl-RW_HINTS.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 1.5.8 -> 2.3.0Yi Zhao2021-06-056-125/+43
| | | | | | | | | | | | | | | Refresh patches: do-not-import-target-module-while-cross-compile.patch options-1.5.4.patch avoid-openldap-unless-wanted.patch libldb-fix-musl-libc-conflict-type-error.patch Drop patches: 0001-waf-add-support-of-cross_compile.patch libldb-fix-musl-libc-unkown-type-error.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade to 1.6.9Khem Raj2021-06-053-76/+50
| | | | | | | Fix Set but unused clang warning sigignore issue is already fixed in 1.6.9 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: Add packageconfig for warning-as-errorsKhem Raj2021-06-041-0/+1
| | | | | | | Disable the options by default, as we use different compilers there are more warnings to handle then upstream Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: Upgrade to 2.26.0Khem Raj2021-06-031-1/+1
| | | | | | https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: upgrade 5.21.03 -> 5.21.06zhengruoqin2021-06-031-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.8 -> 0.9.9Trevor Gamblin2021-06-031-1/+1
| | | | | Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.9 -> 1.2.0Trevor Gamblin2021-06-032-127/+131
| | | | | | | | Upgrade libnftnl in preparation for the upgrade of nftables, since the latter requires libnftnl >= 1.2.0. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: Fix libtool files for internal bind buildKhem Raj2021-06-011-0/+4
| | | | | | | | | The bundled libtool files are arcane and do not work in OE cross build environment, resulting in creating wrong entried in DT_NEEDED section as well as emitting build paths into rpaths into ELF files, therefore copy the OE provided libtool files to fix this issue Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: Fix build with llvm libunwindKhem Raj2021-05-312-0/+31
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-scapy: add pkg to pkg grpArmin Kuster2021-05-311-0/+1
| | | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
* python3-scapy: move from meta-securityArmin Kuster2021-05-312-0/+45
| | | | | | | | | This tracks the official scapy project. includes ptest Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
* dhcp-relay: Use recent config.guess and config.sub for bindKhem Raj2021-05-281-0/+6
| | | | | | | | | | | vendored version of bind is quite old which does not have all newer architecture info like riscv in gnu-config files captured in the bind tarball, therefore update these files before configuring bundled bind Fixes build on rv32/rv64 Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Yi Zhao <yi.zhao@windriver.com>
* dhcp-relay: add recipeYi Zhao2021-05-285-0/+158
| | | | | | | | | | The current default dhcp server kea in oe-core doesn't provide dhcp-relay tool. Add a recipe to provide dhcrelay which is from dhcp. This patch is picked up from dhcp recipe with some tweaks. In order to fix the build dependency, we use bundled bind instead of external bind. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Add zstd via packageconfigKhem Raj2021-05-281-0/+1
| | | | | | Its disabled by default Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libiec61850: Upgrade to 1.5.0Romain Naour2021-05-284-72/+5
| | | | | | | | Remove all upstream patches Rename patch 0003 -> 0001 Signed-off-by: Romain Naour <romain.naour@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Upgrade to 35.0Khem Raj2021-05-211-2/+2
| | | | | | | | | | | Native python is being probed on some builds Fixes recipe-sysroot-native/usr/share/cmake-3.20/Modules/FindPackageHandleStandardArgs.cmake:230 (message): Could NOT find PythonLibs (missing: PYTHON_LIBRARIES PYTHON_INCLUDE_DIRS) (Required is exact version "3.8") Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: upgrade 4.14 -> 4.15Andrej Kozemcak2021-05-212-25/+2
| | | | | | | Changes are found at: http://www.squid-cache.org/Versions/v4/changesets Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.0 -> 4.1zhengruoqin2021-05-192-7/+7
| | | | | | | | Refresh the following patch: arm_eabi.patch Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* restinio: fix licenseStefan Wiehler2021-05-191-1/+1
| | | | | Signed-off-by: Stefan Wiehler <stefan.wiehler@missinglinkelectronics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: upgrade 4.3.3 -> 4.3.4zangrc2021-05-141-3/+3
| | | | | | | -License-Update: URL changed from HTTP to HTTPS. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.25.6 -> 1.25.7zangrc2021-05-141-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lksctp-tools: upgrade 1.0.18 -> 1.0.19zangrc2021-05-142-92/+2
| | | | | | | | 0001-m4-sctp.m4-make-conpatible-to-autoconf-2.70.patch Removed since this is included in 1.0.19. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ifenslave: upgrade 2.11 -> 2.12zangrc2021-05-141-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-networking.bb: Add http-parser to ↵Khem Raj2021-05-131-0/+1
| | | | | | packagegroup-meta-networking-support Signed-off-by: Khem Raj <raj.khem@gmail.com>
* restinio: add recipeStefan Wiehler2021-05-121-0/+31
| | | | | | | Header-only C++14 library that gives you an embedded HTTP server. Signed-off-by: Stefan Wiehler <stefan.wiehler@missinglinkelectronics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* http-parser: add recipeStefan Wiehler2021-05-121-0/+30
| | | | | | | HTTP request/response parser for C. Signed-off-by: Stefan Wiehler <stefan.wiehler@missinglinkelectronics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libowfat: Replace __pure__ with pure and remove using __deprecated__Khem Raj2021-05-032-0/+563
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dibbler: Add libpthread to linker flagsKhem Raj2021-05-031-0/+2
| | | | | | | | Fixed build issue lowlevel-linux-link-state.c:(.text+0x450): undefined reference to `pthread_create' clang-12: error: linker command failed with exit code 1 (use -v to see invocation) Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ufw: bump version to 0.36 and add servicesSilcet2021-05-0310-389/+140
| | | | | | | | | | | | | | | | | | | | | This commit brings the version of ufw up to 0.36 since version 0.33 had some problems: * The setup.py calls sed to replace some variables in the source code with the correct paths. However, this is done using a hardcoded path and conflicts with distutils * The python shebang was not properly corrected in setup.py, leading to a script that only run if there is a python symlink to python2 or python3 The first issue is addressed by the bump in version, while the second one is fixed in patch 0003 of the recipe. Also, the new version provides examples for systemd service and sysvinit scripts to autostart ufw. These are added into the recipe now. Signed-off-by: Silcet <camorga1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* proftpd: Update to 1.3.7a releaseAndrej Kozemcak2021-04-303-62/+49
| | | | | Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort,proftpd,net-snmp: Deal with -ffile-prefix-map as wellKhem Raj2021-04-293-1/+4
| | | | | | | this is another option for reproducibility which can be used by compilers, and here consider processing it as well Signed-off-by: Khem Raj <raj.khem@gmail.com>