summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
...
* celt051: update SRC_URIchangqing.li@windriver.com2021-01-191-1/+1
| | | | | | | | original SRC_URI is not valid now, offical CELT repository moved to gitlab Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: upgrade 2.2.36.4 -> 2.3.13Wang Mingyu2021-01-184-90/+85
| | | | | | | | | | | | 0001-doveadm-Fix-parallel-build.patch removed since it is included in 2.3.13 refresh 0001-configure.ac-convert-AC_TRY_RUN-to-AC_TRY_LINK-state.patch add 0001-not-check-pandoc.patch to not check pandoc of configure Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-networking: Add ipsetKhem Raj2021-01-181-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: add recipeArmin Kuster2021-01-181-0/+21
| | | | | | | This is needed for login-shield pkg in meta-security Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Several securtiy fixesArmin Kuster2021-01-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Source: Wireshark.org MR: 106181, 106696, 107655, 107673, 107682 Type: Security Fix Disposition: Backport from wireshark.org ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a Description: Bugfix only update including these cves: 3.2.8 CVE-2020-26575 CVE-2020-28030 3.2.9 CVE-2020-26418 CVE-2020-26421 CVE-2020-26420 Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: upgrade 1096.40.7 -> 1310.40.42Zheng Ruoqin2021-01-122-3/+3
| | | | | | | | Refresh the following patch: 0001-mdns-include-stddef.h-for-NULL.patch Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* igmpproxy: upgrade 0.2.1 -> 0.3Zheng Ruoqin2021-01-121-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.9.1 -> 0.9.2Zheng Ruoqin2021-01-121-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: upgrade 6.11 -> 6.12Zheng Ruoqin2021-01-122-48/+1
| | | | | | | | 0001-Bugfix-Modify-the-dir-of-install-exec-hook-and.patch Removed since this is included in 6.12. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 32.0 -> 33.0zangrc2021-01-071-4/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: upgrade 2.1.3 -> 2.1.4Andreas Müller2021-01-061-1/+1
| | | | | | | | | | | | | | | | | | | | Security release, see GHSA-jpc9-mgw6-2xwx/CVE-2020-15238 [1] Changes Force cython to use python language version 3 Do not use exitcode 1 when we expect to fail Mark more strings translatable (@cwendling) Bugs fixed Unstranslated strings Searching (with Ctrl+F in manager device list) did not work Default PIN lookup Fix device removal handling (@Yannik) Only use LaunchContext when we have proper event time [1] https://github.com/blueman-project/blueman/security/advisories/GHSA-jpc9-mgw6-2xwx Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 4.5.0 -> 4.6.0zangrc2021-01-052-34/+1
| | | | | | | | 0001-Make-ByteReverseWords-available-for-big-and-little-e.patch Removed since this is included in 4.6.0 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: add UPSTREAM_CHECK_REGEXYi Zhao2021-01-051-0/+2
| | | | | | | Add UPSTREAM_CHECK_REGEX to skip checking testing version (e.g. 4.99.0). Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: Add symbol link /sbin/ebtablesHe Zhe2021-01-051-0/+3
| | | | | | | | | | | | | | | | | | The original /sbin/ebtables has been moved to /usr/sbin/ebtables-legacy. But the old path is still used by some other software libvirt. libvirtd[809]: direct firewall backend requested, but /sbin/ebtables is not available: No such file or directory As stated in the related change in ebtable git repo: The new -legacy binary has no problem if called via a symlink with the 'ebtables' name, so users can still name this binary with whatever name. So we add a symbol link from /usr/sbin/ebtables-legacy to /sbin/ebtables. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: do not install /etc/ethertypesYi Zhao2021-01-052-3/+35
| | | | | | | | Refer to Debian, patch the Makefile to prevent /etc/ethertypes installation instead of removing it in do_install_append. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: remove upstream ebtables-legacy-saveYi Zhao2021-01-052-4/+4
| | | | | | | | Remove the upstream ebtables-legacy-save before we install the local ones. And install it to ${sbindir} rather than ${base_sbindir}. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: add missing file ebtables.commonYi Zhao2021-01-042-3/+170
| | | | | | | | | | | The ebtables.common is required by ebtables.service. Add it back. Fixes: systemd[660]: ebtables.service: Failed to locate executable /usr/sbin/ebtables.common: No such file or directory systemd[660]: ebtables.service: Failed at step EXEC spawning /usr/sbin/ebtables.common: No such file or directory Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ldap: upgrade 3.2.0 -> 3.3.1zangrc2021-01-041-2/+2
| | | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: upgrade 5.20.08 -> 5.20.11zhengruoqin2020-12-281-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: upgrade 0.100 -> 0.101zhengruoqin2020-12-284-17/+56
| | | | | | | | | | | | Refresh the following patch: 0001-dbus-Remove-unused-variabes.patch 0002-Makefile-Exclude-.h-files-from-target-rule.patch Add 0001-don-t-fail-if-GLOB_BRACE-is-not-defined.patch to solve the compilation errors on musl. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bridge-utils: upgrade 1.6 -> 1.7zhengruoqin2020-12-281-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: upgrade 0.10.1 -> 0.10.2zangrc2020-12-284-84/+32
| | | | | | | | | | | | Refresh the following patch: avoid-attr-unless-wanted.patch options-0.10.0.patch 0001-waf-add-support-of-cross_compile.patch Removed since this is included in 0.10.2 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: upgrade 2.3.0 -> 2.3.1zangrc2020-12-284-85/+22
| | | | | | | | | | | | 0001-waf-add-support-of-cross_compile.patch Removed since this is included in 2.3.1. Refresh the following patch: avoid-attr-unless-wanted.patch options-2.2.0.patch Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tftp-hpa: change the ALTERNATIVE_PRIORITYMingli Yu2020-12-241-1/+1
| | | | | | | | | | | | Both inetutils-tftp and tftp-hpa provide the tftp command and the ALTERNATIVE_PRIORITY of inetutils-tftp is 79 until now. Increase the ALTERNATIVE_PRIORITY of tftp-hpa to 100 to guarantee the tftp command provided by tftp-hpa when both of the packages installed. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: upgrade 2.1.2 -> 2.1.3zangrc2020-12-242-50/+1
| | | | | | | | 0001-libopeniscsiusr-Compare-with-max-int-instead-of-max-.patch Removed since this is included in 2.1.3 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: upgrade 2.0.10-4 -> 2.0.11zangrc2020-12-2421-1103/+132
| | | | | | | | | | | | Refresh the following patch: 0010-Adjust-header-include-sequence.patch Referring to Fedora style, ebtables-legacy-save and ebtables.service are retained. The upstream address has been modified. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* traceroute: change the ALTERNATIVE_PRIORITYMingli Yu2020-12-231-1/+1
| | | | | | | | | | | | | Both inetutils-traceroute and traceroute provide the traceroute command and the ALTERNATIVE_PRIORITY of inetutils-traceroute is 79 until now. Increase the ALTERNATIVE_PRIORITY of traceroute to 100 to guarantee the traceroute command provided by traceroute when both of the packages installed. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cyrus-sasl: Disable ntlm plugin by defaultKhem Raj2020-12-231-1/+1
| | | | | | | | | ntlm requires md4 algorith defines which is now disabled in openssl recipe by default also see [1] [1] https://github.com/cyrusimap/cyrus-sasl/issues/632 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vblade: upgrade 24 -> 25zangrc2020-12-184-90/+4
| | | | | | | | | | | | gcc-10.patch Removed since this is included in 25. Refresh the following patch: cross.patch makefile-add-ldflags.patch Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.29 -> 2.0.30zangrc2020-12-181-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade to 2.25.0Alexander Vickberg2020-12-172-61/+2
| | | | | | | Deleted build fix patch. This is already applied in this release. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: do not install /etc/ethertypesYi Zhao2020-12-162-1/+37
| | | | | | | | | | | | The /etc/ethertypes is provided by netbase since 6.0[1]. Do not instal the file in ebtables, otherwise there would be a conflict: Error: Transaction test error: file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7_64 [1] https://salsa.debian.org/md/netbase/-/commit/316680c6a2c3641b6abc76b3eebf88781f609d35 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: CVE-2020-14383 Security AdvisoryZheng Ruoqin2020-12-152-0/+113
| | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: CVE-2020-14318 Security AdvisoryZheng Ruoqin2020-12-152-0/+143
| | | | | | | | References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix reallocarray check in meson and configureKhem Raj2020-12-122-0/+28
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade to 2.24.0Alexander Vickberg2020-12-092-4/+63
| | | | | | | | | Download archives are no longer updated so fetch from Github. Add build fix from upstream. The file LICENSE now contains the full Apache 2.0 license text. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ptpd: Solve memory leak for function NTPDCrequestLi Zhou2020-11-292-0/+41
| | | | | | | | | | | | | | | | | | Solve the memory leak in function NTPDCrequest detected by valgrind tool. Memory leak log example: ==619== 21 bytes in 1 blocks are still reachable in loss record 1 of 3 ==619== at 0x4A09DB0: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) ==619== by 0x43512E: NTPDCrequest (ntpdcontrol.c:255) ==619== by 0x43512E: NTPDCquery.isra.1 (ntpdcontrol.c:683) ==619== by 0x4359EE: ntpdInControl (ntpdcontrol.c:807) ==619== by 0x4364F5: ntpServiceUpdate (timingdomain.c:622) ==619== by 0x436935: timingDomainUpdate (timingdomain.c:756) ==619== by 0x4334A7: protocol (protocol.c:263) ==619== by 0x402BAE: main (ptpd.c:131) Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard-module: upgrade 1.0.20200908 -> 1.0.20201112Ricardo Salveti2020-11-271-1/+1
| | | | | | | | | | | | | Relevant changes: - fe40226 version: bump - d0bf51b qemu: bump default testing version - ce8faa3 compat: SYM_FUNC_{START,END} were backported to 5.4 - da5646f qemu: drop build support for rhel 8.2 - 99e954f netns: check that route_me_harder packets use the right sk - 25320ac noise: take lock when removing handshake entry from table Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: upgrade 0.99 -> 0.100zangrc2020-11-274-61/+43
| | | | | | | | 0001-src-parse.c-Initialize-key-to-NULL.patch Removed since this is included in 0.100. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: upgrade 2.9 -> 3.0zangrc2020-11-271-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.16.1 -> 2.9.17zangrc2020-11-271-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nngpp: upgrade 1.2.4 -> 1.3.0zangrc2020-11-271-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: upgrade 2.41.0 -> 2.42.0zangrc2020-11-271-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: Patch for CVE-2020-8037viatsk2020-11-242-0/+71
| | | | | Signed-off-by: Stacy Gaikovaia <stacy.gaikovaia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Upgrade to 4.0Khem Raj2020-11-234-245/+51
| | | | | | | | | | | | | | | | | | | | ChangeLog is here [1] Do not install /var/log as it conflicts with basefiles package Collected errors: * check_data_file_clashes: Package chrony wants to install file /var/log But that file is already provided by package * base-files Remove CVE patch since its upstream Forward port arm_eabi.patch patch Make builds reproducible [1] https://chrony.tuxfamily.org/news.html Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade to 1.12.0Beni2020-11-233-80/+80
| | | | | Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.8.4 -> 5.9.1zangrc2020-11-232-37/+2
| | | | | | | | 0001-Remove-obsolete-setting-regarding-the-Standard-Outpu.patch Removed since this is included in 5.9.1 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 31.1 -> 32.0zangrc2020-11-231-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* traceroute: set VPATHMingli Yu2020-11-181-0/+1
| | | | | | | | Fixes: make[1]: *** No rule to make target '-lm', needed by 'traceroute'. Stop. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: Inherit python3targetconfigKhem Raj2020-11-171-1/+1
| | | | | | | | | | | | Fixes configure: error: Could not link test program to Python. Maybe the main Python library has been installed in some non-standard library path. If so, pass it to configure, via the LIBS environment variable. Example: ./configure LIBS="-L/usr/non-standard-path/python/lib" Signed-off-by: Khem Raj <raj.khem@gmail.com>