summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* aoetool: make builds reproducibleSlater, Joseph2020-08-132-0/+13
| | | | | | | | Strip host path infomation out of binaries by not suppressing default CFLAGS. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iftop: Fix build with -fno-commonKhem Raj2020-08-132-1/+71
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openlldp: Update to latest masterKhem Raj2020-08-1310-1/+882
| | | | | | | | | Backport patches from https://github.com/intel/openlldp/pull/55 to fix build with -fno-common Append SRCPV to PV since we are not at exact release point Signed-off-by: Khem Raj <raj.khem@gmail.com>
* daq: Upgrade to 2.0.7Khem Raj2020-08-131-4/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: Upgrade to 2.9.16.1Khem Raj2020-08-131-3/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd-utils: Uphgrade to 9.13.1Khem Raj2020-08-132-4/+38
| | | | | | Fix build with gcc10 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd: Upgrade to 9.0.24-1Khem Raj2020-08-131-4/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: Use -fcommon to compileKhem Raj2020-08-131-0/+2
| | | | | | | clang11 and gcc10 have switched to using -fno-common by default this hoowever still needs to use -fcommon until fixed Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dibbler: Update to latestKhem Raj2020-08-132-76/+1
| | | | | | | Drop upstreamed patch Fixed compatibility with g++-10 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fwknop: Fix build with gcc10Khem Raj2020-08-132-0/+28
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tftp-hpa: Fix build with -fno-commonKhem Raj2020-08-132-0/+31
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: Upgrade to _2.1.2Khem Raj2020-08-132-6/+34
| | | | | | Fix build with clang Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ncftp: Fix build with -fno-commonKhem Raj2020-08-132-0/+84
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: Update to latest to fix build with -fno-commonKhem Raj2020-08-134-1/+104
| | | | | | Add patches to fix build with clang-11 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netperf: Fix build with -fno-commonKhem Raj2020-08-132-0/+38
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vblade: Upgrade to version 24Khem Raj2020-08-132-4/+90
| | | | | | | Switch to github for src_uri Add a patch to fix build with -fno-common Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 28.0 -> 30.0Zang Ruochen2020-08-052-18/+29
| | | | | | | | Refresh the following patch: rdma-core/0001-Remove-man-files-which-cant-be-built.patch Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix the occasional verification failureMingli Yu2020-08-052-0/+136
| | | | | | | | | | | | | | | | | | | | | | | Fixes: # cd /etc/raddb/certs # ./bootstrap [snip] chmod g+r ca.key openssl pkcs12 -in server.p12 -out server.pem -passin pass:'whatever' -passout pass:'whatever' chmod g+r server.pem C = FR, ST = Radius, O = Example Inc., CN = Example Server Certificate, emailAddress = admin@example.org error 7 at 0 depth lookup: certificate signature failure 140066667427072:error:04067084:rsa routines:rsa_ossl_public_decrypt:data too large for modulus:../openssl-1.1.1g/crypto/rsa/rsa_ossl.c:553: 140066667427072:error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib:../openssl-1.1.1g/crypto/asn1/a_verify.c:170: error server.pem: verification failed make: *** [Makefile:107: server.vrfy] Error 2 It seems the ca.pem mismatchs server.pem which results in failing to execute "openssl verify -CAfile ca.pem server.pem", so add the logic to check the file to avoid inconsistency. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdist: fix parallel buildKai Kang2020-08-032-0/+32
| | | | | | | | | | | | | | | | | It fails to compile rdist occasionally when system load of build server is high: | In file included from common.c:57: | ../include/defs.h:49:10: fatal error: y.tab.h: No such file or directory | 49 | #include "y.tab.h" | | ^~~~~~~~~ | compilation terminated. Make $(COMMONOBJS) which include common.o to depends on related header files and y.tab.h to fix the parallel build failure. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.15 -> 4.10.17Yi Zhao2020-07-314-2/+193
| | | | | | | | | | | | | | | | | This is a security release in order to address the following defects: CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results. CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume excessive CPU CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV. CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd. Also backport 3 patches to fix build error with musl. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ifenslave: update to 2.11Oleksandr Kravchuk2020-07-311-7/+2
| | | | | | | ifenslave binary and its man page were removed (see @2b0da97853367e34). Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: update to 4.4Oleksandr Kravchuk2020-07-311-2/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* relayd: bump to latest revisionOleksandr Kravchuk2020-07-311-1/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openconnect: update to 8.10Oleksandr Kravchuk2020-07-312-74/+6
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: update to 0.8.3Oleksandr Kravchuk2020-07-311-3/+1
| | | | | | | nft build dependency has been removed in @3f7419dcb50a5bdcf800512d2491. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcpcd: update to 9.1.4Oleksandr Kravchuk2020-07-311-4/+5
| | | | | | | License checksum changed due to modified copyright years. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 1.5.7 -> 1.5.8Yi Zhao2020-07-311-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nngpp: Add recipeJohan Jeppsson2020-07-281-0/+14
| | | | | | | nngpp is a c++ wrapper for nng Signed-off-by: Johan Jeppsson <johanje@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* keepalived: update to 2.1.5Oleksandr Kravchuk2020-07-281-3/+4
| | | | | | | | Removed config argument does not exist anymore (see @05443e1efa3569fcd39a). Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kronosnet: update to 1.18Oleksandr Kravchuk2020-07-281-2/+9
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: upgrade 2.81 -> 2.82Zang Ruochen2020-07-282-8/+8
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: upgrade 4.2 -> 4.3Zang Ruochen2020-07-281-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Fix conflicts with nss.h from glibcKhem Raj2020-07-222-0/+97
| | | | | | This is seen with glibc 2.32 where these names are also defined Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: Upgrade to 1.6.6Khem Raj2020-07-223-12/+81
| | | | | | Add patch to not use deprecated sigignore API Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netkit-telnetd: Fix buffer overflow in netoprintfJulius Hemanth Pitti2020-07-212-0/+57
| | | | | | | | | | | | | | | | | | | | | | | | | | netoprintf() was not handling a case where return value of vsnprintf is greater than "size"(2nd argument), results in buffer overflow while adjusting "nfrontp" pointer to point beyond "netobuf" buffer. Here is one such case where "nfrontp" crossed boundaries of "netobuf", and pointing to another global variable. (gdb) p &netobuf[8255] $5 = 0x55c93afe8b1f <netobuf+8255> "" (gdb) p nfrontp $6 = 0x55c93afe8c20 <terminaltype> "\377" (gdb) p &terminaltype $7 = (char **) 0x55c93afe8c20 <terminaltype> (gdb) This resulted in crash of telnetd service with segmentation fault. Signed-off-by: Julius Hemanth Pitti <jpitti@cisco.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* radvd: add /etc/radvd.confChangqing Li2020-07-212-1/+22
| | | | | | | | | | | | | | | | | | | | | | | | When starting radvd without any configuration the following errors would be triggered. """ root@intel-x86-64:~# systemctl status radvd ● radvd.service - Router advertisement daemon for IPv6 Loaded: loaded (/lib/systemd/system/radvd.service; enabled; vendor preset: enabled) Active: inactive (dead) Condition: start condition failed at Tue 2019-09-24 13:29:36 UTC; 3s ago └─ ConditionPathExists=/etc/radvd.conf was not met """ Normally the user should create and configrue the /etc/radvd.conf manually. However the radvd provide a example file for redhad located at "radvd/redhat/radvd.conf.empty". When installing, it would copy radvd/redhat/radvd.conf.empty to /etc/radvd.conf. Also add this empty conf here to used as an example of configuration Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard-tools: upgrade 1.0.20200319 -> 1.0.20200513Zheng Ruoqin2020-07-201-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard-module: upgrade 1.0.20200401 -> 1.0.20200712Zheng Ruoqin2020-07-201-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* babeld: upgrade 1.9.1 -> 1.9.2Zheng Ruoqin2020-07-201-1/+1
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix udev dependencyChristian Eggers2020-07-201-1/+1
| | | | | | | NetworkManager depends on libudev, but not on libgudev. Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Package nmcli separatelyChristian Eggers2020-07-201-0/+9
| | | | | | | nmcli depends on libreadline which is licensed under GPLv3. Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp, openjpeg: add proper CVE tags to patchesMingde (Matthew) Zeng2020-07-161-1/+3
| | | | | Signed-off-by: Mingde (Matthew) Zeng <matthew.zeng@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: fix the existed certificate errorMingli Yu2020-07-132-0/+56
| | | | | | | | | | | | | | | | | | | | | | | | Fixes the occasional error: # cd /etc/raddb/certs # ./bootstrap [snip] openssl ca -batch -keyfile ca.key -cert ca.pem -in client.csr -key 'whatever' -out client.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf Using configuration from ./client.cnf Check that the request matches the signature Signature ok ERROR:There is already a certificate for /C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org The matching entry has the following details Type :Valid Expires on :200908024833Z Serial Number :02 File name :unknown Subject Name :/C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org make: *** [Makefile:128: client.crt] Error 1 Add the check to fix the above error and it does the same for server.crt. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Update to 3.2.5Armin Kuster2020-07-091-2/+1
| | | | | | | | | | | | | | | | | | | Source: wireshark.org MR: 104620 Type: Security Fix Disposition: Backport from wireshark.org ChangeID: 64e3701e4d6bd53972c22c49d655556e6f37e461 Description: Affects: 3.2.0 to 3.2.4 Includes: CVE-2020-15466 For more info see: https://www.wireshark.org/docs/relnotes/wireshark-3.2.5.html Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd-utils: Add CLEANBROKEN to fix rebuild errorsRobert Yang2020-07-081-0/+2
| | | | | | | | | | | | | | | | Fixed when rebuild: DEBUG: Executing shell function autotools_preconfigure NOTE: make clean aclocal autoheader autoconf You need to call ./configure with appropriate arguments (again). make: *** [Makefile:287: config.status] Error 1 Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix Files/directories were installed but not shippedHongxu Jia2020-07-072-0/+31
| | | | | | | | | | | | | | | Since networkmanager: upgrade 1.22.10 -> 1.22.14, it added a new build option 'firewalld-zone', while enabling multilib, there is a QA issue ... ERROR: QA Issue: networkmanager: Files/directories were installed but not shipped in any package: /usr/lib/firewalld /usr/lib/firewalld/zones /usr/lib/firewalld/zones/nm-shared.xml ... Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ruli: recipe cleanupKonrad Weihmann2020-07-061-4/+0
| | | | | | | | | - removed B = "${S}", which is the default anyway - removed FILES_${PN} =+ "${bindir}", as it's already covered by ${PN}-bin package Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntop: remove static libs from dev packageKonrad Weihmann2020-07-061-1/+1
| | | | | | | as they are covered by -staticdev package Signed-off-by: Konrad Weihmann <kweihmann@outlook.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netcat: Set CVE_PRODUCTAndre Carvalho2020-07-021-0/+2
| | | | | | | | | | | | | | | | | | | | This way yocto cve-check can find open CVE's. See also: http://lists.openembedded.org/pipermail/openembedded-core/2017-July/139897.html "Results from cve-check are not very good at the moment. One of the reasons for this is that component names used in CVE database differ from yocto recipe names. This series fixes several of those name mapping problems by setting the CVE_PRODUCT correctly in the recipes. To check this mapping with after a build, I'm exporting LICENSE and CVE_PRODUCT variables to buildhistory for recipes and packages." Value added is based on: https://nvd.nist.gov/products/cpe/search/results?keyword=netcat&status=FINAL&orderBy=CPEURI&namingFormat=2.3 Signed-off-by: Andre Carvalho <andrestc@fb.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.7.3 -> 0.7.5Adrian2020-07-021-4/+7
| | | | | | | | | | | | | See full changelogs - https://github.com/firewalld/firewalld/releases/tag/v0.7.4 - https://github.com/firewalld/firewalld/releases/tag/v0.7.5 Make documentation build optional. Delete RedHat specific modprobe config file. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>