summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* recipes: drop ld-is-gold supportYi Zhao2025-02-231-1/+1
| | | | | | | | | | The gold linker support has been dropped in oe-core[1]. Remove related special cases and patches in recipes. [1] https://git.openembedded.org/openembedded-core/commit/?id=a4addb9ab63011e7c604fc5daff95559e7d214e7 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: fix SRC_URIGyorgy Sarvari2025-02-231-1/+1
| | | | | | | | | | | | | The original SRC_URI's content seems to be deleted regurarly, when a new version is published, making the previous version unavailable. The new SRC_URI ("all-versions" folder) seems to be more stable, the previous versions of Wireshark are not deleted from there. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: version bump 4.2.10 -> 4.2.11Jan Vermaete2025-02-221-2/+2
| | | | | | | | The 4.2.10 was not longer available at the original SRC_URI. At the new SRC_URI all version of the wireshark releases are available. Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* geoip: fix do_fetch errorWang Mingyu2025-02-201-4/+4
| | | | | | | | Change the SRC_URI to the correct value due to the following error: ERROR: geoip-1.6.12-r0 do_fetch: Bitbake Fetcher Error: FetchError('Unable to fetch URL from any source.', 'http://sources.openembedded.org/GeoIP.dat.20181205.gz;apply=no;name=GeoIP-dat;') Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: Fix build with latest muslKhem Raj2025-02-172-1/+40
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: srcrev bump 9042704131d..dd944cf5b5aThu Nguyen2025-02-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Additional commit included in this version bump are below. Jeremy Kerr (9): + tests: Add tests for dbus Network1 interface + tests: add System.del_address + tests: notify netlink socket on system link/neighbour/address/route changes + tests: Add NLSocket._create_msg + tests: rename NLSocket._send_resp to _send_msg + mctpd: fix error message and code for missing linkmap entry case + mctpd: remove unnecessary debug output + CHANGELOG: Add mctp-bench change Thu Nguyen (1): + Support `LocalEIDs` property in `au.com.codeconstruct.MCTP.Network1` Timon Liu (1): + mctp-bench: Add a utility tool to send/receive messages and display throughput Signed-off-by: Thu Nguyen <thu@os.amperecomputing.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* corosync: reproducibility issueChristos Gavros2025-02-131-0/+3
| | | | | | | | | | | | | | | | | Corosync is not reproducible due to change of value in NETSNMP_SYS_CONTACT which is set in net-snmp: NETSNMP_SYS_CONTACT = "$ME@$LOC" $ME = whoami $LOC assigned domain name from /etc/resolv.conf Use build in'--with-sys-contact' to overwrite it https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/30/steps/28/logs/stdio CC: Yoann Congal <yoann.congal@smile.fr> CC: Randy MacLeod <randy.macleod@windriver.com> Signed-off-by: Christos Gavros <gavrosc@yahoo.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rp-pppoe: update SRC_URIWang Mingyu2025-02-121-1/+1
| | | | | | | | | Upstream repository url changed. Fixes unsuccessful fetch warning. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.2.9 -> 4.2.10Wang Mingyu2025-02-121-1/+1
| | | | | | | | releasenote: https://www.wireshark.org/docs/relnotes/wireshark-4.2.10.html Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: remove nmtui from EXTRA_OEMESONJose Quaresma2025-02-121-1/+0
| | | | | | | | | | In [1] nmtui PACKAGECONFIG was introduced but they are still be explicit in EXTRA_OEMESON and so remove the last. [1] https://git.openembedded.org/meta-openembedded/commit/?id=c331f59e42e9c0bda9d47d0365e6c276746fc81d Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade 1.6.34 -> 1.6.36Wang Mingyu2025-02-101-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdaq: upgrade 3.0.17 -> 3.0.18Wang Mingyu2025-02-101-1/+1
| | | | | | | | Changelog: api: added a new dioctl for snort latency data Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: correct typo on RDEPENDSHongxu Jia2025-02-081-1/+1
| | | | | | | Move `append' to the behind of RDEPENDS:${PN}-libs Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Separate out mdns-libnss-mdns packageAlex Kiernan2025-02-051-3/+8
| | | | | | | | | Extract mdns-libnss-mdns from the main package so we can mark it as an RPROVIDE for libnss-mdns (matching avahi-libnss-mdns) and then RRECOMMEND this when building with glibc. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Correct RPROVIDE to match libdns-sd in avahiAlex Kiernan2025-02-051-1/+1
| | | | | | | | We want to select libdns_sd.so from either Avahi or mDNSResponder, make the RPROVIDE match the one in Avahi. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Upgrade 2559.40.32 -> 2559.60.39.0.1Alex Kiernan2025-02-051-1/+1
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndpi: correct LICENSE valueGyorgy Sarvari2025-02-011-1/+1
| | | | | Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: fix qa error with encryption-openssl PACKAGECONFIGGyorgy Sarvari2025-02-011-0/+3
| | | | | | | | | | | | | In case "encryption-openssl" PACKAGECONFIG is enabled, do_package_qa fails: ERROR: open62541-1.3.8-r0 do_package_qa: QA Issue: File /usr/lib/cmake/open62541/open62541Targets.cmake in package open62541-dev contains reference to TMPDIR [buildpaths] Fix it by changing the value of RECIPE_SYSROOT to CMAKE_SYSROOT variable, so the qa check passes, and other CMake projects should be still able to find the CMake package provided by this recipe. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* znc: fix LICENSE value, clean up SRC_URIGyorgy Sarvari2025-02-011-9/+3
| | | | | | | | | | | 1. Set the correct LICENSE value 2. Csocket is a submodule of the main znc project. Instead of cloning it separately in a subfolder, just let the gitsm fetcher to fetch the correct revisions, at the correct place. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Fix variable assignment whitespaceRichard Purdie2025-01-316-14/+14
| | | | | | | | | | | | Recipes are much more readable with whitespace around the assignment operators. Fix various assignments in meta-openembedded recipes to show this is definitely the preferred formatting. This fixes recipes with larger numbers of issues but there are just under 100 other references left to fix. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp-native: dependency with libpci-nativeChristos Gavros2025-01-291-2/+2
| | | | | | | | | | | | Building of net-snmp-native aborted due to missing dependency with libpci-native. Fixed by keeping the dependency on for target recipe and removing it for native CC: Yoann Congal <yoann.congal@smile.fr> CC: Randy MacLeod <randy.macleod@windriver.com> Signed-off-by: Christos Gavros <gavrosc@yahoo.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: fix pathes in cmake fileGyorgy Sarvari2025-01-251-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. The do_install:append() deleted the TMPDIR from the cmake file, however that left two absolute pathes in the file: /usr/lib/libssl.so and /usr/lib/libcrypto.so. In case another project is trying to link to civetweb-server with cmake, it fails with the following error: ninja: error: '/usr/lib/libssl.so', needed by 'examples/prometheus/prometheus_example', missing and no known rule to make it Instead of only deleting the TMPDIR, change it to ${CMAKE_SYSROOT} - a variable set by cmake.bbclass. This allows other projects to find the required interfacing libraries successfully. 2. When linking to civetweb-server from another project using cmake, the cmake file verifies if the /usr/bin/civetweb binary exists. When using the class-target package, this file is not included in the sysroot during build-time, so this check fails with the following error: CMake Error at ${RECIPE_SYSROOT}/usr/lib/cmake/civetweb/civetweb-targets.cmake:97 (message): The imported target "civetweb::server" references the file "${RECIPE_SYSROOT}/usr/bin/civetweb" but this file does not exist. Possible reasons include: To avoid this error, this check is deleted for class-target. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: set CONFIG_SITE in do_compileRoss Burton2025-01-241-0/+5
| | | | | | | | | Recent changes in to the autotools class in core means that it no longer sets CONFIG_SITE for compile tasks. However, ntp decides to reconfigure itself mid-build, so the CONFIG_SITE values are lost. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ncftp: update for autoconf changes in coreRoss Burton2025-01-241-1/+2
| | | | | | | | | | ACLOCALEXTRAPATH is no longer used, so pass the required -I via EXTRA_AUTORECONF. Also explicitly disable aclocal as the aclocal is hand-maintained. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ncftp: Replace references to ACLOCALEXTRAPATHKhem Raj2025-01-243-1/+96
| | | | | | | | - ACLOCALEXTRAPATH is gone in core with commit 878e1517d4890b31332a506ce903d57e1d7dff87 - Add patches to fix build with latest clang and gcc - Drop disabling warnings as the fixes above take care of the problem Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.12 -> 2.6.13Wang Mingyu2025-01-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - Refuse clients if username or password is longer than USER_PASS_LEN - Improve peer fingerprint documentation - console_systemd: remove the timeout when using 'systemd-ask-password' - Fix missing spaces in various messages - GHA: Update macOS runners - GHA: Simplify macOS builds - Various typo fixes - forward: Fix potential unaligned access in drop_if_recursive_routing - send uname() release as IV_PLAT_VER= on non-windows versions - preparing release 2.6.13 - Route: remove incorrect routes on exit - Use a more robust way to get dco-win version - Fix check_addr_clash argument order - Add calls to nvlist_destroy to avoid leaks - proxy.c: Clear sensitive data after use - Protect cached username, password and token on client - Fix more of uninitialized struct user_pass local vars - Fix IPv6 in port-share journal - Fix port-share journal doc Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* proftpd: define suffix for CVE version comparisonPeter Marko2025-01-151-0/+1
| | | | | | | | Similarly to old openssl versions, proftpd has patch releases with characters instead of numbers. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* proftpd: upgrade 1.3.8b -> 1.3.8cPeter Marko2025-01-153-15/+15
| | | | | | | See https://github.com/proftpd/proftpd/blob/1.3.8/RELEASE_NOTES Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* proftpd: define UPSTREAM_CHECK_GITTAGREGEXPeter Marko2025-01-151-0/+3
| | | | | | | | | Patch releases have character after version devtool upgrade would currently downgrade 1.3.8b -> 1.3.8 This will make it upgrade 1.3.8b -> 1.3.8c Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wpan-tools: upgrade 0.9 -> 0.10Wang Mingyu2025-01-141-2/+2
| | | | | | | | | | License-Update: Delete unnecessary blank lines Changelog: https://github.com/linux-wpan/wpan-tools/releases/tag/wpan-tools-0.10 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lldpd: upgrade 1.0.18 -> 1.0.19Wang Mingyu2025-01-141-1/+1
| | | | | | | | | | | | | | | Changelog: ========= - Support of both Apple Silicon and Intel for macOS package. - Add cvlan/svlan/tpmr capabilities. - Disable LLDP in firmware for Intel X7xx cards on FreeBSD. - Add lldpctl_watch_sync_unblock to liblldpctl. - Add C++ wrapper for lldpctl. - Fix AppArmor policy for /run/lldpd/lldpd.socket.lock. - Do not query stats for a down interface on Linux. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.5 -> 4.6.1Wang Mingyu2025-01-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ Enhancements ------------ * Add ntsaeads directive to enable only selected AEAD algorithms for NTS * Add activate option to local directive to set activation threshold * Add ipv4 and ipv6 options to server/pool/peer directive * Add kod option to ratelimit directive for server KoD RATE support * Add leapseclist directive to read NIST/IERS leap-seconds.list file * Add ptpdomain directive to set PTP domain for NTP over PTP * Allow disabling pidfile * Improve copy server option to accept unsynchronised status instantly * Log one selection failure on start * Add offset command to modify source offset correction * Add timestamp sources to ntpdata report Workarounds ----------- * Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD algorithm (by default the keys are generated differently than in RFC 8915 for compatibility with chrony server and client versions 4.4, 4.5, and 4.6) * Switch to compliant NTS keys if first response from server is NTS NAK Bug fixes --------- * Fix crash on sources reload during initstepslew or RTC initialisation * Fix source refreshment to not repeat failed name resolving attempts Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vsomeip: Skip building, needs porting to boost >= 1.87Khem Raj2025-01-131-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vsomeip: Upgrade to 3.5.3Khem Raj2025-01-135-1494/+13
| | | | | | | Drop backports and not needed patches Add local SRC_URI For googletests Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: upgrade 5.2 -> 5.3Wang Mingyu2025-01-071-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: fix do_fetch errorJiaying Song2025-01-021-1/+1
| | | | | | | | Change the SRC_URI to the correct value due to the following error: WARNING: chrony-4.5-r0.wr2401 do_fetch: Failed to fetch URL https://download.tuxfamily.org/chrony/chrony-4.5.tar.gz, attempting MIRRORS if available Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: upgrade 3.3.4.0 -> 3.6.1.0Yi Zhao2025-01-011-1/+1
| | | | | | | | | | | | | | https://github.com/snort3/snort3/releases/tag/3.6.1.0 https://github.com/snort3/snort3/releases/tag/3.6.0.0 https://github.com/snort3/snort3/releases/tag/3.5.2.0 https://github.com/snort3/snort3/releases/tag/3.5.1.0 https://github.com/snort3/snort3/releases/tag/3.5.0.0 https://github.com/snort3/snort3/releases/tag/3.3.7.0 https://github.com/snort3/snort3/releases/tag/3.3.6.0 https://github.com/snort3/snort3/releases/tag/3.3.5.0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 10.2 -> 10.2.1Yi Zhao2025-01-011-1/+1
| | | | | | | | ChangeLog: https://github.com/FRRouting/frr/commit/5f0beaa0fdd00b7a60c1765067d1b6fa65ce96c0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade 1.6.33 -> 1.6.34Wang Mingyu2024-12-301-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: set CVE-2016-2150 status to fixedPeter Marko2024-12-271-0/+1
| | | | | | | | | | | | | | | | Debian has fixed this CVE with [1]. That patch is taken from [2]. .../tmp/work/core2-64-poky-linux/spice/0.15.2/git$ git describe 69628ea13 v0.13.1-190-g69628ea1 .../tmp/work/core2-64-poky-linux/spice/0.15.2/git$ git tag --contains 69628ea13 v0.13.2 [1] https://sources.debian.org/patches/spice/0.12.5-1%2Bdeb8u5/CVE-2016-2150/0002-improve-primary-surface-parameter-checks.patch/ [2] https://gitlab.freedesktop.org/spice/spice/-/commit/69628ea1375282cb7ca5b4dc4410e7aa67e0fc02 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.9.14 -> 6.0.0Yi Zhao2024-12-261-13/+11
| | | | | | | | | | | | | | ChangeLog: https://github.com/strongswan/strongswan/releases/tag/6.0.0 The aes, curve25519, des, fips-prf, gmp, hmac, md5, pkcs12, rc2, sha1, sha2 plugins are not enabled by default[1]. Remove these plugins from RDEPENDS and add PACKAGECONFIG for them. [1] https://github.com/strongswan/strongswan/blob/6.0.0/NEWS#L38 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.48.10 -> 1.50.0Yi Zhao2024-12-262-67/+1
| | | | | | | | | | | ChangeLog: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.50.0/NEWS Drop 0001-libnm-systemd-core-Disable-sd_dhcp6_client_set_duid_.patch as it has been merged upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 10.1.1 -> 10.2Yi Zhao2024-12-261-2/+2
| | | | | | | | ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-10.2 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: upgrade 4.0.4 -> 4.5.0Peter Marko2024-12-202-42/+3
| | | | | | | | | | | | | Solves CVE-2024-46613 Update dependencies: - remove openssl and icu - add cjson and gettext-native Remove patch to find gcrypt which is no longer needed. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.2.8 -> 4.2.9Peter Marko2024-12-201-1/+1
| | | | | | | | | | | Solves CVE-2024-9781 Release notes: https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmemcached: ignore CVE-2023-27478Peter Marko2024-12-201-0/+2
| | | | | | | | | | | | | | | | | Per [1] this is fixed by [2]. The commit message says that it is reverting feature added in: $ git tag --no-contains d7a0084 | grep 1.0.18 1.0.18 This recipe is for the original memcached which is unmaintained now. Hence the ignore instead of upgrade. [1] https://nvd.nist.gov/vuln/detail/CVE-2023-27478 [2] https://github.com/awesomized/libmemcached/commit/48dcc61a Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmemcached: merge inc into bbPeter Marko2024-12-202-19/+17
| | | | | | | | | After removing old libmemcached recipe version, these is no reasons anymore to have this split. The memcached resurrected project uses cmake and different urls. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmemcached: remove recipe for version 1.0.7Peter Marko2024-12-201-4/+0
| | | | | | | This no longer compiles with latest toolchains. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade 1.6.17 -> 1.6.33Peter Marko2024-12-203-116/+10
| | | | | | | | | Solves CVE-2023-46852 and CVE-2023-46853. Upgrade done via "devtool upgrade". Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: add UPSTREAM_CHECK_URIPeter Marko2024-12-201-0/+2
| | | | | | | | Download URL is not listable so devtool upgrade fails. Using homepage works as it contains link to latest release, Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>