summaryrefslogtreecommitdiffstats
path: root/meta/recipes-connectivity
Commit message (Collapse)AuthorAgeFilesLines
...
* bind: upgrade 9.20.6 -> 9.20.7Richard Purdie2025-04-037-9/+9
| | | | | | (From OE-Core rev: 47128597fbc62164d614aae816edb47a745a5702) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes-connectivity: Drop dbus from RDEPENDS:${PN}Niko Mauno2025-04-014-8/+0
| | | | | | | | | | | | | | Since each of these recipes already have 'dbus' in their DEPENDS, explicit runtime dependency declaration to dbus is not stricly necessary, because dbus-lib has runtime recommendation for ${VIRTUAL-RUNTIME_dbus} which in turn induces pulling also the preferred runtime D-Bus package to rootfs. Suggested-by: Ross Burton <ross.burton@arm.com> (From OE-Core rev: cf5b48d03f290a6bde94ee7a5c1aaee4d1a7793c) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: disable aics testsGuðni Már Gilbert2025-04-012-0/+41
| | | | | | | | | | | | | | | Temporarily disable aics tests as they can fail depending on how the tests are executed. Sometimes they pass, sometimes they fail. The issue has been observed since BlueZ 5.72 to 5.80 Starting with BlueZ 5.80, the tests began failing when using the ptest-runner script. This is not a new issue in BlueZ 5.80 which is why the test is disabled with this commit until a solution is found. (From OE-Core rev: 1cd9f431e9a0c8c946630f2522d922e21ecfa1c2) Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: add missing tools to noinst-tools packageGuðni Már Gilbert2025-04-011-1/+7
| | | | | | | | | | | | | | | | | This change will prevent these tools from being installed if the image doesn't install bluez5-noinst-tools package. BlueZ 5.66: tools/mesh-tester BlueZ 5.66: tools/ioctl-tester BlueZ 5.65: tools/iso-tester BlueZ 5.56: tools/btpclientctl BlueZ 5.51: tools/bcmfw BlueZ 5.49: tools/rtlfw BlueZ 5.47: tools/btconfig (not a new tool, but it was moved from bin_PROGRAMS to noinst_PROGRAMS) (From OE-Core rev: 5b9d5f8971bc97f9adb0b0b8a0cfdd6fd221fc24) Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez5: upgrade 5.79 -> 5.80Guðni Már Gilbert2025-04-018-175/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes relevant for the build: * Four patches are dropped because they are included in 5.80. * Removed changes to etc/bluetooth directory permission bits. They are now set correctly in 5.80 [1]. * AMP code has been removed [2]. This means "tools/amptest" can be removed from NOINST_TOOLS_BT [1] - https://github.com/bluez/bluez/commit/b1fd409960001a77cda2a09ecc00147ebd9c3667 [2] - https://github.com/bluez/bluez/commit/1474c11618bc1092f7dd4b304d3768ce9da02b13 Changelog: Fix issue with handling address type for all types of keys. Fix issue with handling maximum number of GATT channels. Fix issue with handling MTU auto-tuning feature. Fix issue with handling AVRCP volume in reconfigured transports. Fix issue with handling VCP volume setting requests. Fix issue with handling VCP connection management. Fix issue with handling MAP qualification. Fix issue with handling PBAP qualification. Fix issue with handling BNEP qualification. Add support for PreferredBearer device property. Add support for SupportedTypes Message Access property. Add support for HFP, A2DP, AVRCP, AVCTP and MAP latest versions. (From OE-Core rev: 9e340d4c8070bab0a14adc7d9f6534d1185944f5) Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: Add iptables PACKAGECONFIG knobNiko Mauno2025-03-241-2/+3
| | | | | | | | | | | | | iproute2 detects presence of iptables during building and can also be built without it. Add PACKAGECONFIG option which allows user to optionally leave it out, and enable it by default to keep current recipe behavior. (From OE-Core rev: 07ddaeaacaab4c3e264816dea6de32378617bf4e) Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* neard: use WIRELESS_DAEMONJoão Henrique Ferreira de Freitas2025-03-241-1/+2
| | | | | | | | | Honor WIRELESS_DAEMON when wifi is enable for DISTRO_FEATURE. (From OE-Core rev: 86b408919d9506b6f1ba69c96f1bc6212e724bbc) Signed-off-by: João Henrique Ferreira de Freitas <joaohf@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ppp: Fix build when shadow is enabledKhem Raj2025-03-202-0/+34
| | | | | | | | | | | GCC-15 patch is not sufficient when shadow is enabled, therefore fix the remaining issues. (From OE-Core rev: 9143b23cecb505f130f86b03039c6c0aba5dcc2b) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bluez: Fix build with GCC-15Khem Raj2025-03-204-0/+129
| | | | | | | | | | | | | | | | | gcc-15 switched to -std=c23 by default: https://gcc.gnu.org/git/?p=gcc.git;a=commitdiff;h=55e3bd376b2214e200fa76d12b67ff259b06c212 As a result `bluez` fails the build as: src/shared/ad.c:1090:24: error: incompatible types when returning type '_Bool' but 'const char *' was expected 1090 | return false; | ^~~~~ (From OE-Core rev: 5afef9ba63364c6c93c8a1359020f038d06881fa) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kea: fix conflict between kea-dhcp6 multilibsLei Maohui2025-03-201-1/+27
| | | | | | | | | | | | | | | There are conflict of config files between kea and lib32-kea: | Error: Transaction test error: | file /etc/kea/kea-dhcp6.conf conflicts between attempted installs of lib32-kea-2.6.1-r0.core2_32 and kea-2.6. 1-r0.core2_64 Similar to: | 8cc65e7eb0 kea: fix conflict between multilibs (From OE-Core rev: 0fe8ec57f19d79e94f02e3c710a1b76c04b34143) Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ppp: remove erroneous generated header from the source treeAlexander Kanavin2025-03-192-1/+100
| | | | | | | | | | | | | | | | ppp-2.5.2 tarball ships a generated header with various configuration settigns that takes precedence over the same header generated into the build directory during the actual build. This resulted in various linking fails that were worked around by enabling multilink in 2.5.2 version update. The correct fix that removes all contamination is to remove the bogus header first. (From OE-Core rev: 87863ce4530cf08fd28b1bde13e3f7142001b54d) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcpcd: don't try to run autoreconfRoss Burton2025-03-181-0/+7
| | | | | | | | | | | This recipe has a configure script that isn't actually autoconf but tries hard to look like it is. Instead of trying to run autoreconf, change do_configure to just run the configure script directly. (From OE-Core rev: e80d2ec5cda1121ba6b3d299fb2e79c194c7f30e) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcpcd: upgrade 10.1.0 -> 10.2.2Richard Purdie2025-03-185-41/+7
| | | | | | | | | | License-Update: Copyright years change only Drop a backported patch (From OE-Core rev: 718e4efa4f6f595b17e2438a15fc57c2c88ae9f1) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ofono: upgrade 2.14 -> 2.15Richard Purdie2025-03-174-193/+4
| | | | | | (From OE-Core rev: d2eb70c70a5632edc6fe118aae3f3c8a816ac8ba) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ppp: Replace K&R style C declarationsKhem Raj2025-03-172-0/+76
| | | | | | | | | | GCC uses C23 standard by default which does not allow K&R style declarations (From OE-Core rev: acc41d7f912bf9d3ee142a02d0b64cf9ff6f226e) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dhcpcd: fix for unexpected syscall 135 for 10.1.0 versionBalaji Pothunoori2025-03-062-0/+31
| | | | | | | | | | | | | | | Current dhcpcd (version 10.1.0) service crashes on the WiFi (wlan0) interface with the following error: "ps_seccomp_violation: unexpected syscall 135" This update pulls in fix #421 for dhcpcd 10.1.0 to address this issue. (From OE-Core rev: 2bb20f49ada56f1c7707565e475051174feba945) Signed-off-by: Balaji Pothunoori <quic_bpothuno@quicinc.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: upgrade 9.9p1 -> 9.9p2Wang Mingyu2025-03-061-1/+1
| | | | | | | | (From OE-Core rev: 584584d4e33d06171f2f9b77adb312dd357f46a4) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* inetutils: upgrade 2.5 -> 2.6Wang Mingyu2025-03-061-1/+1
| | | | | | | | (From OE-Core rev: 82fc6ffca9e1f0bc4905777296bce5067e578ee9) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.20.5 -> 9.20.6Wang Mingyu2025-03-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== New Features -------------- - Adds support for EDE code 1 and 2. - Add a rndc command to toggle jemalloc profiling. - Add support for multiple extended DNS errors. - Print the expiration time of the stale records. Feature Changes --------------- - Refactor reference counting in both QPDB and RBTDB. - Shutdown the fetch context after canceling the last fetch. Bug Fixes ---------- - Fix possible truncation in dns_keymgr_status() - Recently expired records could be returned with timestamp in future. - Yaml string not terminated in negative response in delv. - Fix a bug in dnssec-signzone related to keys being offline. - Apply the memory limit only to ADB database items. - Avoid unnecessary locking in the zone/cache database. - Fix EDE 22 time out detection. - Split and simplify the use of EDE list implementation. - Fix the cache findzonecut() implementation. - DNSSEC EDE system tests on FIPS platform. - Reduce the false sharing the dns_qpcache and dns_qpzone. (From OE-Core rev: 1394e8befb305106695c91e2fe16c55483bf467f) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl-native(sdk): poision built in pathsDan McGregor2025-03-062-9/+13
| | | | | | | | | | | | | | | | | | | | Long ago, in the OpenSSL 1.1 days changing CFLAGS worked to override hard-coded paths in the OpenSSL libraries. Even as far back as kirkstone this was no longer working. Override make variables instead to poision the paths that get built into the native (and nativesdk) libraries so they become relocatable again. While here, remove the -isystem<foo> compiler argument from the compiler command line stored in the library, just like we already remove the prefix-map and sysroot arguments. (From OE-Core rev: d1b29222ad6243c15275a04f9de5989cf158cb2e) Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: fix rpc.statd path in initscriptYi Zhao2025-02-271-1/+1
| | | | | | | | | The location of rpc.statd is /usr/sbin instead of /sbin. (From OE-Core rev: 19494e414429b74d2a15b32f21b1b3067d3a41b2) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: honour calling environment's values in wrapper scriptRasmus Villemoes2025-02-271-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | When using openssl with some pkcs#11 plugin module, one (usually) needs to set the OPENSSL_CONF environment variable appropriately, and e.g. invoke openssl as openssl dgst -engine pkcs11 -keyform engine ... However, when putting that logic in a bitbake recipe and depending on openssl-native (and the recipe providing the pkcs#11 engine and the associated configuration file), the value of OPENSSL_CONF is unconditionally overridden by the wrapper script. If openssl was invoked directly in the task function, I could probably call "openssl.real" instead, but then I miss the proper settings of the other four variables, which I'd then also have to repeat in my recipe. Moreover, sometimes openssl is only called via some helper script (for example rpi-eeprom-digest for signing bootloader images for RPi), and it's not reasonable to patch every such script to call openssl.real. So rewrite the wrapper such that if a variable is already set in the environment before openssl is invoked, preserve its value. (From OE-Core rev: 5582ec9d3a21c546b799d2f6d4928f5e1d19eb0a) Signed-off-by: Rasmus Villemoes <ravi@prevas.dk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: fold result of sed invocation into environment fileRasmus Villemoes2025-02-272-4/+3
| | | | | | | | | | | | A long time ago, the environment.d-openssl.sh file was shared between openssl 1.0 and openssl 1.1 recipes, and sed was used to make the path right for the 1.1 version. Nowadays, with only a single recipe, this is a bit roundabout, so just use the proper path in the file directly. (From OE-Core rev: 291fe7db623b0974e7831e908e91b1f1259e0506) Signed-off-by: Rasmus Villemoes <ravi@prevas.dk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* recipes/*: remove obsolete use of acpathsRoss Burton2025-02-271-2/+0
| | | | | | | | | | | The bulk of these recipes used acpaths to work around argument list limits as we passed the full path to every directory. As this behaviour no longer happens we can remove these workarounds. (From OE-Core rev: c4336f1b0da981b3ea396b17779b67898bceccef) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* socat: upgrade 1.8.0.2 -> 1.8.0.3Hongxu Jia2025-02-271-2/+2
| | | | | | | | | | | | | | | | | | | | According to [1]: 2025-02-21: Socat version 1.8.0.3 has been released. It fixes a lot of minor issues and provides some minor improvements, see file CHANGES [2]. The experimental POSIXMQ feature has been improved, got a few new options, and is now considered stable. License in README has no change [1] http://www.dest-unreach.org/socat/ [2] http://www.dest-unreach.org/socat/CHANGES: (From OE-Core rev: 650e9b72ded376ef5974cb7a71ade00a93e4612f) Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kea: avoid assertion on empty DHCPDISCOVER packetYi Zhao2025-02-252-0/+149
| | | | | | | | | | | | | | | | | | | | | | When kea is built with "-D_GLIBCXX_ASSERTIONS " set in SECURITY_CFLAGS, an assertion occurs if the kea server receives an empty DHCPDISCOVER packet: kea-dhcp4[596]: /usr/include/c++/13.3.0/bits/stl_vector.h:1128: std::vector<Tp, _Alloc>::reference std::vector<_Tp, _Alloc>::operator[](size_type) [with _Tp = unsigned char; _Alloc = std::allocator<unsigned char>; reference = unsigned char&; size_type = long unsigned int]: Assertion '_n < this->size()' failed. Backport patches to fix this issue[1]. [1] https://gitlab.isc.org/isc-projects/kea/-/commit/0b98eae16d9b6ecdf57005624712b9b26fa05bc0 https://gitlab.isc.org/isc-projects/kea/-/commit/16306026e37b32a2ce4b16fb5b78561ae153d570 (From OE-Core rev: 17c67a47ec9c6e90a339f32c35f80ca4c908a254) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* kea: make kea environment available to lfc processYi Zhao2025-02-252-0/+97
| | | | | | | | | | | | | | | | | | | | | If the location of the log lock file is changed using the environment variable KEA_LOCKFILE_DIR, the kea-dhcp process will work properly, but the lfc (lease file cleanup) process spawned by it will not inherit this value and use the default path[1], which will cause the kea server to print the following message when running: kea-dhcp4[6767]: Unable to use interprocess sync lockfile (No such file or directory): /var/run/kea/logger_lockfile Backport a patch to fix this issue[2]. [1] https://gitlab.isc.org/isc-projects/kea/-/issues/3450 [2] https://gitlab.isc.org/isc-projects/kea/-/commit/f477e8ebcc8b8e1f1adaad4d55031084c0ff6f40 (From OE-Core rev: 34f1392aef4d5fa402600b21f6d7a47cd735cfd4) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libuv: upgrade 1.49.2 -> 1.50.0Wang Mingyu2025-02-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes since version 1.49.2: ============================== * ci: run macOS and iOS tests also on macOS 14 * unix,win: map ENOEXEC errno * test: skip multicast join test on ENOEXEC * ci: make sure the macOS firewall is disabled * darwin,test: squelch EBUSY error on multicast join * build: update minimum cmake to 3.10 * kqueue: use EVFILT_USER for async if available * unix,win: fix off-by-one in uv_wtf8_to_utf16() * doc: add scala-native-loop to LINKS.md * unix: fix build breakage on haiku, openbsd, etc * kqueue: lower overhead in uv__io_check_fd * doc: move cjihrig back to active maintainers * build(deps): bump actions/checkout from 3 to 4 * unix,pipe: fix handling null buffer in uv_pipe_get{sock,peer}name * unix,win: harmonize buffer checking * unix,win: add support for detached threads * src: add uv_thread_set/getname() methods * build: fix qemu builds * win: drop support for windows 8 * linux: fix uv_cpu_info() arm cpu model detection * linux: always use io_uring for epoll batching * doc: clarify repeating timer behavior more * unix,win: handle nbufs=0 in uv_udp_try_send * win: use GetQueuedCompletionStatusEx directly * win: enable uv_thread_{get,set}name on MinGW * win: drop support for the legacy MinGW * win,fs: get (most) fstat when no permission * win: plug uv_fs_event_start memory leak * test: address FreeBSD kernel bug causing NULL path in fsevents * unix: refactor udp sendmsg code * unix,win: add uv_udp_try_send2 * build: enable fdsan in Android * test: fix udp-multicast-join for FreeBSD * win: fix leak processing fs event * src: set a default thread name for workers * misc: implement uv_getrusage_thread (From OE-Core rev: 0a941918275ea089fa94d05129a2b88858aec8bd) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: Start nfsv4 utilities with sysvinitDaniel McGregor2025-02-182-48/+289
| | | | | | | | | | Rewrite the nfs sysvinit scripts to start the services required by nfsv4: gssd, idmapd, and statd. (From OE-Core rev: 2cca2dfb6acc25f1a6a25dc60423708a78cef85d) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: Configure nfsv4 ID mapping & KerberosDaniel McGregor2025-02-186-344/+219
| | | | | | | | | | | | | | Add support for the nfsv4 user ID mapping daemon, configured with a sensible default, and add a packageconfig for Kerberos support. This is reasonably tested in production in our environment, but only systemd support. There'll be some more work to do to get GSSAPI and NFS idmapd support integreated into that. (From OE-Core rev: a7ea135108e445197a58b19601d77eb9d287af69) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: Use upstream systemd service filesDaniel McGregor2025-02-188-204/+11
| | | | | | | | | | | | | | Reduce diffs against upstream by using the service files provided by them. This reduces our dependence on patches that simply change the names of a service. This also changes the way some nfs options get set for systemd, it introduces the nfs.conf file for configuration, which all daemons already support. (From OE-Core rev: eeab3fa1423d499f9b39fda7a7514e619a3ac010) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: clean up startupDaniel McGregor2025-02-182-9/+8
| | | | | | | | | | | | | Change the sysvinit script to start at the S runlevel, this matches Debian, and prevents systemd from generating a unit file for it. Also have the nfsd systemd service request the nfsd kernel filesystem mountpoint. This avoids startup failures in unpriviled containers or other setups that don't support the filesystem. (From OE-Core rev: 6110687d199bf390380fe84c330858e3b03f681d) Signed-off-by: Daniel McGregor <daniel.mcgregor@vecima.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: upgrade 3.4.0 -> 3.4.1Peter Marko2025-02-183-91/+1
| | | | | | | | | | | | | | | Release information: https://github.com/openssl/openssl/blob/openssl-3.4/NEWS.md#major-changes-between-openssl-340-and-openssl-341-11-feb-2025 Handles CVE-2024-12797 and CVE-2024-13176. Remove two patches included in the new version. (From OE-Core rev: d7ac886d91ccf6b91f67fb0c843fc1765d9dafb1) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libslirp: set the PV in the filenameRoss Burton2025-02-101-4/+2
| | | | | | | | | | As this recipe builds the tagged releases we can put the PV in the filename. (From OE-Core rev: 2c7c9eb6ff996639a632059102de4d1168958eb6) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: fix register trampling on aarch64Ross Burton2025-02-102-0/+53
| | | | | | | | | Backport a patch from upstream to fix register tramping on aarch64. (From OE-Core rev: 9005321e37030d916f4f26e7201e2f86c85ebdbd) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: remove python hashbang rewritesRoss Burton2025-02-101-3/+0
| | | | | | | | | These were replaced with python3 in 2.5.2 (commit d1683f). (From OE-Core rev: 85ae456a12bccabc62cb0906b92d6705f88c932f) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libslirp: upgrade 4.8.0 -> 4.9.0Richard Purdie2025-02-051-2/+2
| | | | | | (From OE-Core rev: e768efe68dd0b6a624fa4b2fed8e5ff5ed58df26) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: upgrade 6.12.0 -> 6.13.0Richard Purdie2025-02-053-95/+4
| | | | | | (From OE-Core rev: dcac3219770e38e9f072723e918a761a3ee99fe6) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bind: upgrade 9.20.4 -> 9.20.5Richard Purdie2025-02-057-70/+116
| | | | | | (From OE-Core rev: 615807f9a7162847ce0f727b075bc746da241ba5) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* avahi: Switch RRECOMMENDS to avahi-libnss-mdnsAlex Kiernan2025-02-051-2/+2
| | | | | | | | | | | Rather than using the RPROVIDES on libnss-mdns which comes from avahi-libnss-mdns, RRECOMMENDS avahi-libnss-mdns directly to avoid picking any other version. (From OE-Core rev: 61f44f8b817738c0e220b3d461952816ef7f1449) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nss-mdns: Rename recipe to avahi-libnss-mdnsAlex Kiernan2025-02-051-0/+1
| | | | | | | | | | | meta-networking has Apple's mDNSResponder which also delivers libnss-mdns nsswitch plugin. Rename this recipe to avahi-libss-mdns and add an RPROVIDE so that either than be chosen. (From OE-Core rev: f9d10d6ac4b2a081d110ab58e7137aedddd960cb) Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* meta/meta-selftest: Fix variable assignment whitespaceRichard Purdie2025-02-012-3/+3
| | | | | | | | | | Recipes are much more readable with whitespace around the assignment operators. Fix various assignments in OE-Core to show this is definitely the preferred formatting. (From OE-Core rev: 30ea609d3357fb3de911f2f6a5e6856c151b976a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssh: update SRC_URI to use httpsJermain Horsman2025-02-011-1/+1
| | | | | | | | (From OE-Core rev: c1a9546a8c9b00f21ca86cdc5c810d4ea7c1225e) Signed-off-by: Jermain Horsman <jermain.horsman@nedap.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ofono: patch CVE-2024-7540, CVE-2024-7541, CVE-2024-7542Peter Marko2025-01-232-0/+53
| | | | | | | | | | | Cherry-pick commit https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=29ff6334b492504ace101be748b256e6953d2c2f (From OE-Core rev: 2513c7504a270c7a079f4e942252f92d0e48bd32) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Ross Burton <ross.burton@arm.com>
* ofono: fix CVE-2024-7539Yogita Urade2025-01-202-0/+89
| | | | | | | | | | | | | | | | | | | | | | | | | | oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of responses from AT+CUSD commands. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-23195. Reference: https://security-tracker.debian.org/tracker/CVE-2024-7539 Upstream patch: https://git.kernel.org/pub/scm/network/ofono/ofono.git/commit/?id=389e2344f86319265fb72ae590b470716e038fdc (From OE-Core rev: 55aea716ca4665cf45579247dd5feec5668dd94f) Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* openssl: remove obsolete CVE version suffixPeter Marko2025-01-201-3/+0
| | | | | | | | | Since 3.0.0 openssl no longer uses characters in version suffix. (From OE-Core rev: 80151340b0b20610030f3026e9fc71ef5970c2c5) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* boost: update 1.86.0 -> 1.87.0Alexander Kanavin2025-01-102-0/+191
| | | | | | | | | Backport a kea patch to address 1.87.0 compatibility. (From OE-Core rev: ac328183d4592ad146c41e48c2c92d1dbb53a894) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* ppp: update 2.5.1 -> 2.5.2Alexander Kanavin2025-01-101-6/+7
| | | | | | | | | | | | | | License-Update: BSD items clarified to be 2-clause: https://github.com/ppp-project/ppp/commit/d4ec06ec5839350bd728da0e92a8cb2e1c37d880 passprompt plugin removed upstream. Add an enable a multilink option, as the build breaks without it at the linking step (upstream presumably didn't test that it works): https://github.com/ppp-project/ppp/issues/541 (From OE-Core rev: e6ea3ade8f3977ec93c68229d2660bbc335a80a6) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iproute2: update 6.11.0 -> 6.12.0Alexander Kanavin2025-01-045-142/+93
| | | | | | | (From OE-Core rev: f8c665ca16bf643039bd3f0a918ea9cf9d1a3726) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nfs-utils: Use v2 of upstream patch for tpyecast fixKhem Raj2024-12-201-14/+17
| | | | | | | (From OE-Core rev: a2c5b2cad7857250b4a1b36ba792a8110989733a) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>