summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* frr: add a patch to correctly check presence of python from pkg-configAlexander Kanavin2022-11-102-1/+30
| | | | | Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 5.5.2 -> 5.5.3Wang Mingyu2022-11-091-1/+1
| | | | | | | | | | | | | | | Fixes --------- Fix for possible buffer zeroization overrun introduced at the end of v5.5.2 release cycle in GitHub pull request 5743 (#5743) and fixed in pull request 5757 (#5757). In the case where a specific memory allocation failed or a hardware fault happened there was the potential for an overrun of 0's when masking the buffer used for (D)TLS 1.2 and lower operations. (D)TLS 1.3 only and crypto only users are not affected by the issue. This is not related in any way to recent issues reported in OpenSSL. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.66 -> 5.67Wang Mingyu2022-11-091-1/+1
| | | | | | | | | | | | | | | | | | | | | Changelog: ========== Security bugfixes ----------------- OpenSSL DLLs updated to version 3.0.7. New features ------------ Provided a logging callback to custom engines. Bugfixes --------- OpenSSL DLLs updated to version 3.0.6. Fixed "make cert" with OpenSSL older than 3.0. Fixed the code and the documentation to use concious language for SNI servers (thx to Clemens Lang). Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.7 -> 2.5.8Wang Mingyu2022-11-091-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== tls-crypt-v2: bail out if the client key is too small Remove useless empty line from CR_RESPONSE message Allow running a default configuration with TLS libraries without BF-CBC Change command help to match man page and implementation Fix OpenVPN querying user/password if auth-token with user expires t_client: Allow to force FAIL on prerequisite fails t_client.sh: do not require fping6 Preparing release 2.5.8 msvc: add branch name and commit hash to version output Update the replay-window backtrack log message Do not skip ERROR:/SUCCESS: response from management interface Fix auth-token usage with management-def-auth Allow a few levels of recursion in virtual_output_callback() Ensure --auth-nocache is handled during renegotiation Purge auth-token as well while purging passwords Do not copy auth_token username to itself Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ulogd2: upgrade 2.0.7 -> 2.0.8Wang Mingyu2022-11-071-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: use automake ptest output formatRandy MacLeod2022-11-072-2/+19
| | | | | | | | | | | | | | | | | Make run-ptest use the correct libdir for multilib builds. Log the ptest output to a date stamped file and append a test summary to the end of the log. Munge the log as it is produced to: - insert the expected automake keywords: PASS and FAIL. - remove escape sequences used for ANSI colours as well as movement commands Add additional discrete tool dependencies to the nftables-ptest list since the test suite does not work with the busybox versions. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: Fix buildpaths warning.Wang Mingyu2022-11-071-0/+4
| | | | | | | WARNING: fetchmail-6.4.23-r0 do_package_qa: QA Issue: File /usr/bin/fetchmailconf in package fetchmail contains reference to TMPDIR [buildpaths] Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Fix install conflict with multilib enabled.leimaohui2022-11-072-0/+123
| | | | | Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-gtk: add recipeMarkus Volk2022-11-011-0/+43
| | | | | Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 5.5.1 -> 5.5.2Wang Mingyu2022-10-311-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpslice: upgrade 1.5 -> 1.6zhengruoqin2022-10-241-2/+1
| | | | | | | | | | | | | | | | | Changelog: ========= - Call pcap_dump_close() on the output file. - Implement new flags in ./configure: --enable-instrument-functions, --without-libnids, --without-libosipparser2 and --without-libooh323c. - autoconf: Add the option to print functions and files names - Update config.{guess,sub}, timestamps 2022-01-09,2022-01-03 - configure: use pcap-config --static-pcap-only if available - Remove awk code from mkdep. - Refine the man page. - Refine the documentation files. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lldpd: Upgrade 1.0.14 -> 1.0.15Alex Kiernan2022-10-221-2/+2
| | | | | | | Add github-releases to make new releases discoverable. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: Upgrade to 3.7.3Khem Raj2022-10-193-17/+53
| | | | | | Fix build on systems with linux 6.x Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade 1.16.3 -> 1.17.0zhengrq.fnst2022-10-181-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: upgrade 2.3.2 -> 2.3.4Wang Mingyu2022-10-181-1/+1
| | | | | | | | | Bugs fixed ========== Errors when connected to a device with the DisconnectItems plugin enabled Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.33.1 -> 1.33.2Wang Mingyu2022-10-181-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: Use canonical shell spacingAlex Kiernan2022-10-161-12/+12
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: Add PACKAGECONFIGs for build optionsAlex Kiernan2022-10-161-1/+8
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: Upgrade 1.4.6 -> 1.4.7Alex Kiernan2022-10-161-3/+2
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: upgrade 2.2.4 -> 2.3.2Markus Volk2022-10-132-12/+14
| | | | | | | | Switch from using tarball to git because the 2.3.2 tarball lacks the meson_options.txt file. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Security fix CVE-2022-37032Yi Zhao2022-10-122-0/+44
| | | | | | | | | | | | | | | | CVE-2022-37032: An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service. This occurs in bgp_capability_msg_parse in bgpd/bgp_packet.c. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-37032 Patch from: https://github.com/FRRouting/frr/commit/066770ac1c69ee5b484bb82581b22ad0423b004d Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: install the .target filesHao Jiang2022-10-121-1/+4
| | | | | | | Need the targets file to enable the mctpd.service on systemd. Signed-off-by: Hao Jiang <jianghao@google.com> Change-Id: I8d48d3767760dc1f34ae7e1266600d350ac93281
* dhcp-relay: upgrade 4.4.3 -> 4.4.3-P1Yi Zhao2022-10-111-3/+3
| | | | | | | | | | | | | | | | | | | | Changes since 4.4.3 (Bug Fixes) Corrected a reference count leak that occurs when the server builds responses to leasequery packets. Thanks to VictorV of Cyber Kunlun Lab for reporting the issue. [Gitlab #253] CVE: CVE-2022-2928 Corrected a memory leak that occurs when unpacking a packet that has an FQDN option (81) that contains a label with length greater than 63 bytes. Thanks to VictorV of Cyber Kunlun Lab for reporting the issue. [Gitlab #254] CVE: CVE-2022-2929 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: Include aarch64 to COMPATIBLE_HOSTFabio Estevam2022-10-101-1/+1
| | | | | | | | Allow spice to be built on ARM64 as well, so add aarch64 entry to COMPATIBLE_HOST. Signed-off-by: Fabio Estevam <festevam@denx.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: upgrade 11.3.5 -> 12.1.0Yi Zhao2022-10-1017-176/+97
| | | | | | | | | | | * Drop 0001-Make-HgfsConvertFromNtTimeNsec-aware-of-64-bit-time_.patch and 0013-misc-Do-not-print-NULL-string-into-logs.patch which have been merged upstream. * Refresh patches. * Do not build containerinfo plugin as it requries containerd. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 5.5.0 -> 5.5.1zhengrq.fnst2022-10-101-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.65 -> 5.66zhengrq.fnst2022-10-101-1/+1
| | | | | | | | | | | | | | Changelog: =========== New features OpenSSL 3.0 FIPS Provider support for Windows. Bugfixes Fixed building on machines without pkg-config. Added the missing "environ" declaration for BSD-based operating systems. Fixed the passphrase dialog with OpenSSL 3.0. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.9.7 -> 5.9.8Yi Zhao2022-10-081-2/+2
| | | | | | | | | | | | ChangeLog: https://github.com/strongswan/strongswan/releases/tag/5.9.8 * Drop PACKAGECONFIG[scep] as scepclient has been removed. * Add plugin-gcm to RDEPENDS as gcm plugin has been added to the default plugins. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: correct parameter to configure to disable readline usageFederico Pellegrin2022-10-061-1/+1
| | | | | | | | | | | The correct parameter to disable readline usage is --disable-readline and not --without-readline. See also chrony source at: https://github.com/mlichvar/chrony/blob/master/configure#L110 Signed-off-by: Federico Pellegrin <fede@evolware.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: add pkgconfig class as pkg-config is explicitly searched forFederico Pellegrin2022-10-061-1/+1
| | | | | | | | | | | | | | The configure script present in chrony will explicitly look for pkg-config and without the pkgconfig class it will fail: Checking for pkg-config : No This then affects the possibility (via image features or bbappend) to use features based on nettle/gnutls/nss which strictly require pkgconfig to be present and working. Signed-off-by: Federico Pellegrin <fede@evolware.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: Whitelist CVE-2021-43666, CVE-2021-45451Mathieu Dubois-Briand2022-10-041-0/+5
| | | | | Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: Update to 2.28.1 versionMathieu Dubois-Briand2022-10-041-1/+1
| | | | | Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: Fix CVE product nameMathieu Dubois-Briand2022-10-041-0/+2
| | | | | Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open62541: Disable lto on riscv/clangKhem Raj2022-10-041-0/+9
| | | | | | | | | | clang errors out linking lto objects riscv64-yoe-linux-musl-ld: /tmp/lto-llvm-d497c5.o: can't link soft-float modules with double-float modules This is something needs to be addressed in clang for riscv as of now disable lto for rv32/rv64 when using clang Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opcua: Add new recipeVyacheslav Yurkov2022-10-032-0/+60
| | | | | | | | | | | | open62541 (http://open62541.org) is an open source and free implementation of OPC Unified Architecture according to IEC62541 standard The patch exclude git-related files from installation directory Upstream-Status: Accepted https://github.com/open62541/open62541/commit/a0328d4cb527f9778a262fc4a6b42bfbdffc38e9 Signed-off-by: Vyacheslav Yurkov <v.yurkov@precitec.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.0.4 -> 1.0.5Yi Zhao2022-09-291-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.2.2 -> 1.2.3Yi Zhao2022-09-292-656/+4
| | | | | | | | Drop 0001-avoid-naming-local-function-as-one-of-printf-family.patch as the issue has been fixed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 8.2.2 -> 8.3.1Yi Zhao2022-09-294-3/+206
| | | | | | | | Backport patches to fix build error with --disable-ospfapi and CVE-2022-37035. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix daemon startup warningsYi Zhao2022-09-292-2/+2
| | | | | | | | | Fixes: chown[1483]: /bin/chown: warning: '.' should be ':': 'radiusd.radiusd' /etc/tmpfiles.d/radiusd.conf:2: Line references path below legacy directory /var/run/, updating /var/run/radiusd -> /run/radiusd Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade 1.16.2 -> 1.16.3wangmy2022-09-271-1/+1
| | | | | | | | Bug Fixes - Patch for CVE-2022-3204 Non-Responsive Delegation Attack. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: upgrade 2.86 -> 2.87wangmy2022-09-274-201/+10
| | | | | | | | | | License-Update : format of License file changed. CVE-2022-0934.patch deleted since it's included in 2.87. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: CVE-2022-3190 Infinite loop in legacy style dissectorHitendra Prajapati2022-09-262-0/+146
| | | | | | | | | | | | | Source: https://gitlab.com/wireshark/wireshark/-/commit/67326401a595fffbc67eeed48eb6c55d66a55f67 MR: 122044 Type: Security Fix Disposition: Backport from https://gitlab.com/wireshark/wireshark/-/commit/67326401a595fffbc67eeed48eb6c55d66a55f67 ChangeID: 13f833dfbd8f76db1ea01984441b212f08e6e4f5 Description: CVE-2022-3190 wireshark: Infinite loop in legacy style dissector. Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: add missing runtime dependency on libgcc for sntpFrank de Brabander2022-09-261-1/+2
| | | | | | | | | | This runtime dependency was already added for ntpd but not yet for the sntp binary. This will result in an error when pthread_exit() is called: "libgcc_s.so.1 must be installed for pthread_cancel to work" Signed-off-by: Frank de Brabander <debrabander@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdio-tools,mdio-netlink: Upgrade recipes to 1.2.0Khem Raj2022-09-223-2/+1
| | | | | | | | | | | | | | | | | | | | | brings in Added mdio: A new addressing mode "mmd-c22": Used to access MMDs attached to MDIO controllers without Clause 45 support by using registers 13 and 14 in the device's Clause 22 register space mdio: Pretty print gigabit link capability information from a PHY's extended status register mdio: Pretty print lots of status information from MMDs (C45 PHYs) mvls: Decode priority override information of ATU entries Changed mvls: Table listings now always prints out the device information, even on single chip systems. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcoap: Upgrade 4.3.0 -> 4.3.1Alex Kiernan2022-09-223-100/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Drop merged backport of 7e20aa9ef172 ("coap_session.c: Balance SESSIONS_ADD and SESSIONS_DELETE usage"). c694baead2f9 Update version to release 4.3.1 ab9488559f5e Doxygen: Fix missing links for later versions of asciidoc 144f9c4381c1 Manual pages: Update NAME section to contain all of the alternative names 707aed35d39b Doxygen: Hyperlink man page functions 46feac2455ab Misc: Tidy up documentation and space usage d09204e24aba Doxygen: Add in individual man pages for the ease of finding the functions 09aab40d14f9 Tag release candidate 2 for version 4.3.1 2755af4d1a16 block.c: Clarify ignored result from coap_get_data() 5f0eea8dbbc4 coap_session.c: Fix adding NULL pointer on error in coap_new_server_session() ea89cb842cf6 coap_cache.txt.in: Fix typo in function name 922e81a0d21f Doc: Include statement about upgrading to 4.3.1 5c498249e7e7 ChangeLog: Add summary for version update to 4.3.1 4f12b9be1b7b coap_event.h: Clean up Doxygen documentation for coap_event_t 43bfbea924e0 Copyright: Update dates to 2022 where appropriate 37731524a0ad RFC8516: Document support a7b2f2b4901b block.c: Timeout coap_lg_crcv_t structures correctly f4507e6e9adb Block: Report event on large xmit failures 3d387a5be485 block.c: Correct size of allocated PDU buffer 6a9a787503ec Observe: Clean up server timing out after observe failures 725e464421e0 mcast: Tidy up logging 381ff3d94da2 PDU Data: Clean up internal usage of PDU data 0f0cac71f5e5 Observe: Support disabling observe cancellation on session close bc4c75060b86 coap_mbedtls.c: Fix output type of a log message b8f01cef06f0 net.c: Move variable into correct block 58a8b338045b net.c: Send appropriate delayqueue entries in coap_cancel_all_messages() b4306bb79162 observe: Make sure the correct token in used for cancellation c68d1e9fe785 mutex: Do not output mutex warnings for LwIP and Contiki 7f551fcea56b coap_mbedtls.c: Upgrade to mbedTLS v3.2.1 - Updated the deprecated APIs with the respective alternatives - `mbedtls_ssl_conf_min_version` => `mbedtls_ssl_conf_min_tls_version` - Updated fields for `mbedtls_ssl_ciphersuite_t` - `max_major_version`/`max_minor_version` => `max_tls_version` - Added macros for backward compatibility 8c15b896ef30 esp-idf: Stop -Wformat errors for uint32_t variables 0ca2fd4a90b5 Tag release candidate 1 for version 4.3.1 9962bab56f6b Updated tinydtls to current develop HEAD 8fbe440f8aaa coap_io.c: Updates for esp-idf port d2306569d16a proxy: Make proxy requests separate responses 98ecf5a2a166 tinydtls: Update submodule to latest version 8c973a454e73 mid_duplicates: Drop general responses duplicates dc92fe5e1ea6 coap.h.windows.in: Fix missing file renames 347270b9abc4 file naming: Rename files to have coap_ prefix 8b9377ef2ad4 coap_mbedtls.c: Fix memory leak e8052b3988ec resource.c: Further fix making subscribers iteration safe f93b9a3e37cf coap_mbedtls.c: Catch connection reset in coap_tls_write d5bcb8159b73 resource.c: Make subscribers iteration safe in coap_notify_observers 0d9f2531e5dd coap_session.c: Free off session's last_token on session deletion 415fbdb7cddf RFC9175: Add in support for the Echo and Request-Tag options 88ae9563e665 mcast support: Support multicast granular to the resource level 73565196a8f3 block.c: Fix error handling with Block transfers 132c72619032 net.c: Handle multiple same token request/responses d68f5d6f5713 net.c: Handle well_known requests when there is no libcoap block support fe51d3335e81 lwip: Fix minor issues 6046dcbd5589 net.c: Fix broken client only build 20f15a17d698 Large Observes: Prevent server sending new response if active response 5a10ce4890ff Congestion Control: add in RFC7252 configuration flexibility 41afb92141c5 net.c: Update .well-known/core handling to use common logic 6b32ed3de2fb coap_io.c: Track ICMP Host Administravely Prohibited error 279755b1df9e coap_send: Make error checks for coap_send() more rigorous 925d39fd8cfb coap-server.c: Cleanup misplaced comment c77176714770 coap_gnutls.c: Handle another error in do_gnutls_handshake() 801e5492f2e6 CSM: Move coap_client_delay_first() to later in code processing 346a831cd604 block.c: Correctly preset updated_block variable 56db248daba6 async.c: Remove white space 256a758e0273 TLS SIGPIPE: Stop programs exiting with code 141 (128 + 13:SIGPIPE) 6649bdef39db net.c: fix null pointer exception 03a9059439d0 BERT: Support block BERT szx of 7 for reliable protocols 445a9481deca RFC7390: Update support for RFC7390 428f759659a4 coap_mbedtls.c: Fix coap_rng() return for 3.x code 1b2668f562e9 CMakeLists.txt: Correctly determine cmsghdr support for determining addresses 21fd838dc781 coap_io_prepare_io: Re-order function code for correctly updating sockets[] cfbf3ab617f8 doc/main.md: Update copyright year f28044303abe net.c: Make sure separate response is CON for CON requests 069a0786ce85 CSM: Support different XMT and RCV Max-Message-Size 9cbe5757cb69 recursive mutex: Stop recursive Mutex when doing handler callbacks d9c19c378f3f event.h: Add events for server session state management 7e20aa9ef172 coap_session.c: Balance SESSIONS_ADD and SESSIONS_DELETE usage 806861359b81 configure.ac: Allow using non-vendored TinyDTLS with autotools build 6c8b76d534a0 tinydtls: Update to latest version aa391b5b7601 async: Handle changes to delay when using epoll 65cba25cc7e5 coap-client.c: Delay sending each request using -G by 1 second d57d44aa142a block.c: Fix data leak in coap_add_data_large_internal eb7656850f1c pdu.h: Add Content-Format for application/ace+cbor c8458f262ab8 coap_mbedtls.c: Fix return brace location 583c29fd47d9 coap_mbedtls.c: Make TLS error recovery more rigorous 02deef8da6ac coap_prng.c: Added alternate RNG implementation - For targets having their own hardware entropy/RNG implementation using mbedtls_hardware_poll() - This change was made as since mbedtls-3.x, passing a RNG function to all functions that accept a f_rng parameter is mandatory 916a534e170b coap_mbedtls.c: Upgrade to mbedTLS v3.x - Added MBEDTLS_ALLOW_PRIVATE_ACCESS to access private struct members wherever required - Updated deprecated functions from hashing module (E.g. mbedtls_sha256_starts_ret() -> mbedtls_sha256_starts()) - Added mandatory RNG parameter for some functions (mbedtls_pk_parse_keyfile(), mbedtls_pk_parse_key()) - Remove support for parsing SSLv2 ClientHello b42c184f74a6 block.c: Fix possible null-pointer dereference df72a53f2d66 coap_openssl.c: Support Microsoft VS builds 0f76881802af autogen.sh: Fix missing file ar-lib 19928e81bd42 builds: Set CFLAGS += -Werror in all linux subdirectory compilations b2ad43319a0f doc/Makefile.am: Include module_api_wrap.h in a distribution dfc678c33bd1 Proxy: Support unknown Critical but Safe-To-Forward options 93f2738c451d coap_pdu_setup.txt.in: Clarify / more make readable the pdu setup information 5b32d716fa03 github workflow: Support windows-2022 bd9ced550e07 pdu.c: Fix coap_insert_option with delta = 269 ba585f848ff5 [OSS-Fuzz] pdu_parse_target.c: Check result of coap_pdu_parse() a2e0046c802f [OSS-Fuzz] pdu_parse_target.c: Fix compiler warning b3d503cbff07 sessions: Prevent multiple client session confusion 726b9630e51f coap_block.txt.in: Clarify / more make readable the block handling information 756bb042395d pdu building: Enforce the application order of building a PDU c02ca5f097d6 coap_pdu_access.txt.in: Add in documentation for coap_get_uri_path() aaf611559482 proxy_uri: Fix handling the resource for uri path in Proxy-Uri a8c00f2af9c6 coap_pdu_setup.txt.in: Better document coap_encode_var_safe8() 64e56410177b versioning: Make current git describe available 0a16d790ce53 cmake_coap_config.h.in: Fix definitions for when building with tinydtls 17aaa81b5ad3 Caching: Highlight requirements ignoring certain CoAP Options 74582eddde28 resource.c: Support deleting resources that have not yet been added 32d2d0e1c62b request_handler: Report only when app's request handler is actually called 5dc2dfca86ec block.c: Do not match large response if no Block2 option in request 18888cd0dde3 cmake: Install example programs if examples enabled c0e032ffad0b block: Check block size space correctly 693a4e231386 net.c: correct return value in coap_send_internal() 38bffb7f99d9 configure.ac: Fix have mbedtls lib, but no mbedtls-dev issue 694a205f28dc coap-server.c: Fix proxy response type and code e8e33f0424ad coap-server: Add in POST support for unknown request handler 3f5ec5467a1d coap_cache.c: Correctly build cache key e43cf9369ac5 RFC7959: Handle both client and server initiating requests bdf7686613ec coap_write_session: Account correctly for partial TCP writes 76194be8cd3f coap-client.c: Allow time for all server responses to mcast d395df1a812f coap_session.c: Do not check for duplicate mids if reliable protocol 73389b8192e8 handlers: Clarify which handlers are client only, server only or both df9071c93eff coap_session.[hc]: Added function to retrieve PSK identity from session 7791897e8f4c api-version-bump.sh: Added missing changes for win32 4834b86067ae pkg-config: Don't use hard coded binary d139beab67ff pkg-config: Don't use hard coded binary 166ef51ed155 Windows: Update libcoap-2 objects to libcoap-3 31722c208ac9 PSK: Make PSK hint / key / identity retrieval simpler d746fc24e5a7 coap_pdu_parse: Add to public API 0aeb0d624797 doxygen: Tidy up Modules and Files tab information f026f5701ece client+server: Reduce code size by building libcoap for client or server only a7f53b4d6b0a coap_debug.h: Allow <syslog.h> to be included before and after <coap3/coap.h> 77f8cf59702e DTLS/TLS: Support TLS when DTLS is not enabled 587de900c2cc coap_mbedtls.c: Add in TLS support 94b297aae7a5 coap_mbedtls.c: Fix build fail for client only mbedtls cc2648aef685 net.c: Protect against session release in coap_io_do_io() ca44071b8afe net.h: do not include sys/select.h in Windows builds e984f38b8fd6 [DTLS] make buffer sizes for psk and psk_identity configurable 54dbc3eeb815 [RIOT] coap_time.h: fix COAP_TICKS_PER_SECOND for undefined XTIMER_HZ 05e7f12d7ca8 net.h: Include sys/select.h for fd_set 25a59905792f doxygen: Fix summary output for manual pages a5c0d12354ed doc: Document the coap_can_exit() function a1d78d505d98 tiny.c: Fix message id generation 67f189f134a2 CMakeLists.txt: Fix macOS builds by checking for if_nametoindex support 8ce139d349bc coap_event.h: Make coap_event_t an enum b0ca3ae643d1 resource.c: Delete previous subscription correctly 98b9179d5666 async: Correct MID usage in response c61748f4dd33 RFC7959: session->lg_xmit not being released for a server 482be755fe29 gnutls: GNUTLS_CRT_RAW not defined e0d6477b5ec9 man: Update man page documentation d52986f00459 coap_resource_init: Leading '/' is not required for uri_path 60c69557f3d5 pdu.h: Remove unassigned response code COAP_RESPONSE_CODE_OK 87fab6d573cf coap_mbedtls.c: Allow ESP-IDF systems to be compiled without PSK support 77d1aae06b17 Fix condition for MBEDTLS_INCLUDE_DIRS 4bbf25ba338a coap-client: Add in support for generating multiple requests 50530704df9a tinydtls: update to latest version License-Update: Update year Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: upgrade 4.15 -> 5.7Andrej Kozemcak2022-09-227-166/+27
| | | | | | | | | | | - drop included patches - refresh remaining patches - update to new ptest Licence change: update year Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-br-posix: Add dep to ipset as used by firewallPhilippe Coval2022-09-211-1/+1
| | | | | | | | | | | | | | | | | | | | ipset is used by firewall module of ot-br-posix: third_party/openthread/repo/src/posix/platform/firewall.cpp:\ return ExecuteCommand("%s add %s %s -exist", kIpsetCommand, aSetName, aAddress); Related observed issue looked like: ``` oniro@oniro-linux-blueprint-gateway-raspberrypi4-64:~$ sudo journalctl -u otbr-agent.service Apr 28 17:42:32 oniro-linux-blueprint-gateway-raspberrypi4-64 systemd[1]: Started OpenThread Border Router Agent. Apr 28 17:42:38 oniro-linux-blueprint-gateway-raspberrypi4-64 otbr-agent[330]: sh: ipset: not found ``` Relate-to: https://gitlab.eclipse.org/eclipse/oniro-blueprints/transparent-gateway/meta-oniro-blueprints-gateway/-/issues/6 Cc: Stefan Schmidt <stefan.schmidt@huawei.com> Forwarded: https://github.com/openembedded/meta-openembedded/pull/611 Signed-off-by: Philippe Coval <philippe.coval.ext@huawei.com>
* ufw: Fix "could not find required binary 'iptables'"Howard Cochran2022-09-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | Switch from using DISTUTILS_*_ARGS to SETUPTOOLS_*_ARGS to correspond with the earlier change to use setuptools3_legacy instead of distutils3. Without this change, you will get the following error if your build host does not have iptables installed: Fixes: ERROR: ufw-0.36.1-r0 do_compile: 'python3 setup.py build ' execution failed. Log data follows: | DEBUG: Executing shell function do_compile | ERROR: could not find required binary 'iptables' | ERROR: 'python3 setup.py build ' execution failed. | WARNING: exit code 1 from a shell command. ERROR: Task ([snip]/meta-openembedded/meta-networking/recipes-connectivity/ufw/ufw_0.36.1.bb:do_compile) failed with exit code '1' Also, although the build will not fail on a host that has iptables, it could cause a problem if it is installed at a different path than where OpenEmbedded's iptables will be installed on the target. Fixes: 3e2ed1dcc088 ("ufw: port to setuptools, use setuptools_legacy") Signed-off-by: Howard Cochran <howard_cochran@jabil.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 5.4.0 -> 5.5.0zhengruoqin2022-09-131-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-isns: upgrade 0.101 -> 0.102wangmy2022-09-131-1/+1
| | | | | | | | | | | | | Changelog: ========= Enable meson for building open-isns, deprecating autoconf/make (though the current build system still works) Add a package config file for libisns, so other software can find it Fix some compiler warnings and spelling errors Make IPv6 default socket type Fix isnsadm parsing of some arguments Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 18:04:29 +0000