Commit Graph

2706 Commits

Author SHA1 Message Date
Khem Raj
4e05a4362f nis: Drop uclibc check in anon python function
uclibc is no longer supported

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-06 20:38:40 -07:00
wangmy
970a7a52fb fetchmail: upgrade 6.4.19 -> 6.4.20
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-06 20:38:40 -07:00
Khem Raj
a133111e69 recipes: Fix override syntax
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-06 20:38:40 -07:00
Martin Jansa
17adfde3bd layer.conf: Update to honister
This marks the layers as compatible with honister now they use the new override
syntax.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-03 10:21:25 -07:00
Martin Jansa
c61dc077bb Convert to new override syntax
This is the result of automated script (0.9.1) conversion:

oe-core/scripts/contrib/convert-overrides.py .

converting the metadata to use ":" as the override character instead of "_".

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-03 10:21:25 -07:00
Khem Raj
daf661d19b ntp: Fix make check
Some test code is not yet ported to build with gcc 11

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03 08:53:04 -07:00
Khem Raj
7055c764c8 ntp: Do not use PTHREAD_STACK_MIN on glibc
Int not a compile time constant in glibc 2.34+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03 08:53:04 -07:00
Khem Raj
d94bafe1f9 autofs: Fix build with glibc 2.34+
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03 08:53:03 -07:00
Khem Raj
96e37f4a59 addcli: check for ns_get16 and ns_get32
Fixes build with glibc 2.34+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03 08:53:03 -07:00
wangmy
82739e6f1e networkmanager: upgrade 1.32.2 -> 1.32.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-29 10:35:38 -07:00
Tony Battersby
5e042ac207 net-snmp: fix QA Issue after LDFLAGS change
Adding -f*-prefix-map to LDFLAGS caused the following issue:

QA Issue: netsnmp-agent.pc failed sanity test (tmpdir)

Fix by filtering out -f*-prefix-map from *.pc files.

[YOCTO #14481]

Signed-off-by: Tony Battersby <tonyb@cybernetics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-29 10:35:38 -07:00
Yi Zhao
8446eab8fd postfix: upgrade 3.6.1 -> 3.6.2
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
Armin Kuster
b68fe48192 wireshark: update to 3.4.7
Stable branch bug fix update. Includes:
CVE-2021-22235

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
wangmy
b767b37e3a nghttp2: upgrade 1.43.0 -> 1.44.0
v1.44.0 changelog:

lib: Port new ngtcp2 map implementation
doc: Replace master with main
build: Add precious variables for libev and jemalloc and use JEMALLOC_CFLAGS
build: Add more --with-* configure flags
build: Add LIBTOOL_LDFLAGS configure variable
third-party: Bump llhttp to 6.0.2
src: Replace black-list with block-list
nghttpx: Fix max distance in weight group/address cycle comparison
nghttpx: Set connect_blocker and live_check after shuffling addresses
nghttpx: Replace master with main
nghttpx: Remove trailing white space after $method log variable
(https://github.com/nghttp2/nghttp2/pull/1553)
h2load: Add --rps option
(https://github.com/nghttp2/nghttp2/pull/1559)
h2load: Allow unit in -D option
asio: fix some typos (Patch from Jan Kundrát)
(https://github.com/nghttp2/nghttp2/pull/1550)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
wangmy
173cf5fd6b libtalloc: upgrade 2.3.2 -> 2.3.3
License-Update:
 add note:
     ** NOTE! The following LGPL license applies to the talloc
     ** library. This does NOT imply that all of Samba is released
     ** under the LGPL
 "GNU General Public License" changed to "GNU Lesser General Public License"

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
Li Wang
145f59ba75 openlldp: fix segfault
~ lldpad -d
~ 8021q: 802.1Q VLAN Support v1.8
~ 8021q: adding VLAN 0 to HW filter on device eth0
~ lldpad[xxx]: segfault at 0 ip xxx sp xxx error 4 in lldpad[xxx+xxx]
~ Code: xxx

the issue is introduced by:
0002-lldp_head-rename-and-make-extern.patch

Upstream patches:
ed6a8e5a75

Signed-off-by: Li Wang <li.wang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
Khem Raj
2039ff1935 netperf: Add systemd unit file
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
Khem Raj
587fe58777 netperf: Update to latest
License-Update: Upstream has switched to MIT [1]

[1] 2d88bcc75d

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-27 09:52:23 -07:00
Khem Raj
7d64ce0490 autofs: Upgrade to 5.1.7
License-Update:  correct fsf address [1]

- Drop upstreamed autofs-5.0.7-include-linux-nfs.h-directly-in-rpc_sub.patch
- Forward port remaining patches
- Package libautofs.so which is new
- Add a patch to fix build on musl systems
- Detailed ChangeLog [2]

[1] https://git.kernel.org/pub/scm/linux/storage/autofs/autofs.git/commit/COPYING?id=b74dcdd3f6b05522388729141c29286829c302fc
[2] https://www.spinics.net/lists/autofs/msg02344.html

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-17 10:15:51 -07:00
Khem Raj
d774c88023 layers: Fix git send-email instructions in README
This ensures that cut-n-paste of this command from README will work

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-17 09:08:47 -07:00
Khem Raj
06cae38842 postfix: Upgrade to 3.6.1
Fix build with glibc 2.34+
Details of this release [1]

[1] http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.6.1.RELEASE_NOTES

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-16 09:23:03 -07:00
zangrc
67b26428a6 strongswan: upgrade 5.9.2 -> 5.9.3
- Added AES_ECB, SHA-3 and SHAKE-256 support to wolfssl plugin.

- Added AES_CCM and SHA-3 signature support to openssl plugin.

- The x509 and openssl plugins now consider the authorityKeyIdentifier, if
  available, before verifying signatures, which avoids unnecessary signature
  verifications after a CA key rollover if both certificates are loaded.

- The pkcs11 plugin better handles optional attributes like CKA_TRUSTED, which
  previously depended on a version check.

- charon-nm now supports using SANs as client identities, not only full DNs.

- charon-tkm now handles IKE encryption.

- A MOBIKE update is sent again if a a change in the NAT mappings is detected
  but the endpoints stay the same.

- Converted most of the test case scenarios to the vici interface

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-13 09:39:15 -07:00
zangrc
cdac00501f firewalld: upgrade 0.9.3 -> 0.9.4
This is a bug fix only release.

$ git shortlog --grep "^fix" v0.9.3..v0.9.4
Eric Garver (10):

fix(dbus): conf: setting deprecated properties should be ignored
fix(dbus): properties: IPv4 and IPv6 should be true if using nftables
fix(fw): when checking tables make sure to check the actual backend
fix(ipset): nftables: use interval flag for "ip" types
fix(rpm): applet: don't replace config modified by admin
fix(rpm): logrotate: don't replace config modified by admin
fix(ipv6_filter): match fwmark
fix(direct): rule order with multiple address with -s/-d
fix(nm): reload: only consider NM connections with a real interface
fix(policy): warn instead of error for overlapping ports
Fabrizio D'Angelo (1):

fix(ipset): fix hash:net,net functionality
Robert Richmond (1):

fix(ipset): entry delete with timeout
Ye Shu (1):

fix(applet): Show a basic tooltip instead of HTML

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-13 09:39:15 -07:00
Khem Raj
db860191b2 keepalived: Upgrade to 2.2.2
Fix build with upcoming glibc 2.34 while here

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-08 09:21:41 -07:00
Andreas Müller
08d4c28d16 networkmanager: upgrade 1.30.4 -> 1.32.2
Did not find hints upstream but musl build turned painless!

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-08 09:21:40 -07:00
Andreas Müller
9569d222eb blueman: upgrade 2.1.4 -> 2.2.1
Manually refresh 0002-fix-fail-to-enable-bluetooth.patch - it did not apply

2.2.1
Bugs fixed
    Hard dependency of DBusService on NetworkManager

2.2
New features
    Disconnect items in applet menu (plugin)
    Desktop notifications on connect / disconnect (plugin)
    Notifications with battery level for connecting devices (applet plugin)
    Stop discovery and retry connection for broken adapter drivers
    Auto-connect settings for supported services

Changes
    Drop blueman-report
    Drop blueman-assistant
    Raise minimum Python version to 3.6
    Raise GTK+ 3 version to 3.22
    Raise minimum BlueZ version to 5.48
    Allow opening device menus via keyboard (Shift+F10 or menu key)
    Add Ctrl+Q and Ctrl+W accelerators for closing blueman-manager
    Allow cancelling device connection attempts
    Improved passkey handling (fixed padding, highlighting, single notifitication)
    Hide devices with no name

Bugs fixed
    Fix disconnecting NMDevice
    Exceptions from asynchronous DBus calls (getting picked up by tools like Apport or ABRT)
    DiscvManager plugin showed its icon unreliably

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-08 09:21:40 -07:00
Yi Zhao
6db58b2837 samba: add missing runtime dependency for pidl
Add libparse-yapp-perl to RDEPENDS for pidl.

Fixes:
$ pidl
Can't locate Parse/Yapp/Driver.pm in @INC (you may need to install the Parse::Yapp::Driver module)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-01 08:09:38 -07:00
Yi Zhao
7b5b96b444 samba: fix shebang for pidl
The shebang in pidl points to wrong location:
$ pidl
-sh: /usr/bin/pidl: /buildarea/build/tmp-glibc/hosttools/env: bad interpreter: No such file or directory

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-07-01 08:09:38 -07:00
Adrian Zaharia
73d5cd5e8d ntp: fix ntpdate to wait for subprocesses
When using systemd, ntpdate-sync script will start in background
triggering the start of ntpd without actually exiting.
This results in an bind error in ntpd startup.

Add wait at the end of ntpdate script to ensure that when the ntpdate.service
is marked as finished the oneshot script ntpdate-sync finished and unbind the
ntp port

Fixes #386

Signed-off-by: Adrian Zaharia <Adrian.Zaharia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-28 09:49:22 -07:00
Akifumi Chikazawa
d49e96aac4 openvpn: add CVE-2020-7224 and CVE-2020-27569 to allowlist
CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client,
not for openvpn.

Signed-off-by: Akifumi Chikazawa <chikazawa.akifu@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-26 00:45:10 -07:00
Persian Prince
a6653e6dd4 samba: Don't guess dirs for perllocal.pod removing
We're not living in a perfect world so avoid build failures like:

ERROR: samba-4.14.5-r0 do_package_qa: QA Issue: samba-pidl contains perllocal.pod (/usr/lib/perl5/5.34.0/x86_64-linux/perllocal.pod), should not be installed [perllocalpod]
ERROR: samba-4.14.5-r0 do_package_qa: QA run found fatal errors. Please consider fixing them.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-24 16:17:33 -07:00
wangmy
31fb422660 samba: Solve the dependency problem when installing Samba
Error Message:
 Problem: conflicting requests
  - nothing provides samba-pidl needed by samba-client-4.14.5-r0.aarch64

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 23:20:36 -07:00
zangrc
4449b3a7b6 snort: upgrade 2.9.17.1 -> 2.9.18
Refresh the following patch:
configure.in-disable-tirpc-checking-for-fedora.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 23:20:35 -07:00
zangrc
471cc226a6 openvpn: upgrade 2.5.2 -> 2.5.3
-License-Update: Copyright year updated to 2021.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 23:20:35 -07:00
Peter Kjellerstedt
74d58bc6e8 net-snmp: Support building for native
Due to the sed commands in do_install_append() that removed
${STAGING_DIR_HOST} and it being empty when building for native, it was
impossible to add support for building this as native using a bbappend.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 10:46:54 -07:00
Peter Kjellerstedt
411c981ef0 net-snmp: A little clean up
* Remove the explicit dependency on libnl as the libnl PACKAGECONFIG
  depends on it as necessary.
* Add a PACKAGECONFIG for systemd to replace modifying EXTRA_OECONF
  directly.
* Sort the PACKAGECONFIGs.
* Some whitespace clean up.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 10:46:54 -07:00
Daiane Angolini
500ce4d46d wireguard-module: Stop overriding modules_install in the recipe
Configure the recipe to use the module_install function from the module
source code and remove the overriden modules_install function from the
recipe.

Using the default modules_install (instead of the function defined in
the recipe file) the module is signed when DISTRO_FEATURE contains modsign.

Signed-off-by: Daiane Angolini <daiane.angolini@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-23 10:46:24 -07:00
Sekine Shigeki
04a7dce625 ntp: add CVE-2016-9312 to allowlist
Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:42:25 -07:00
zangrc
d7a5707894 mosquitto: upgrade 2.0.10 -> 2.0.11
-License-Update: notice.html does not exist in this version, use NOTICE.md to
check.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:42:25 -07:00
Geoff Parker
3c1e72d62c cifs-utils: set ROOTSBINDIR to /usr/sbin if DISTRO_FEATURES has usrmerge
Fixes cif-utils recipe build when DISTRO_FEATURES includes 'usrmerge'

Add do_configure_prepend() to override ROOTSSBINDIR environment variable
so that the utilities are installed in /usr/sbin rather than /sbin.
Setting --exec-prefix or --prefix in EXTRA_OECONF does not work.

Update do_install_append() to NOT remove /usr/bin /usr/sbin if usrmerge
is set in DISTRO_FEATURES

Signed-off-by: Geoff Parker <geoffrey.parker@arthrex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:39:32 -07:00
Ed Tanous
df8ecfeacf Use the built-in options for removing pack tools
For distros that want to use the ENABLE_LIB_ONLY option, the rm call
will fail, because ENABLE_HPACK_TOOLS (set implicitly as part of
ENABLE_LIB_ONLY) removes those two binaries from the build, so they then
can't be removed again.  This commit sets ENABLE_HPACK_TOOLS=OFF, which not
only allows for the option to be overridden in other meta layers, also
allows a simplified use of ENABLE_LIB_ONLY in meta layers that don't
want to ship the binaries.

Signed-off-by: Ed Tanous <ed@tanous.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-18 08:39:32 -07:00
ito-yuichi@fujitsu.com
3613b50a84 dovecot: add CVE-2016-4983 to allowlist
CVE-2016-4983 affects only postinstall script on specific distribution, so add it to allowlist.

Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-15 08:48:50 -07:00
ito-yuichi@fujitsu.com
711e932b14 cyrus-sasl: add CVE-2020-8032 to allowlist
This affects only openSUSE, so add it to allowlist.

Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-11 08:48:26 -07:00
Sekine Shigeki
bb4a4f0ff8 add CVE-2011-2411 to allowlist
This affects only on HP NonStop Server, so add it to allowlist.

Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-11 08:48:26 -07:00
zhengruoqin
5411629c44 net-snmp: upgrade 5.9 -> 5.9.1
Refresh the following patch:
net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-10 07:06:34 -07:00
Yi Zhao
8fc9ecc767 samba: upgrade 4.14.4 -> 4.14.5
Changelog:
https://www.samba.org/samba/history/samba-4.14.5.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Yi Zhao
8260253c87 samba: disable check fcntl RW_HINTS when configure
This fails on cross-compilation for musl and clang.

Fixes configure error:
Checking whether fcntl supports setting/geting hints: UNKNOWN

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Yi Zhao
b55788aedc packagegroup-meta-networking: add dhcp-relay
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Yi Zhao
f78ef9ac0b dhcp-relay: update 4.4.2 -> 4.4.2-P1
Changes since 4.4.2 (Bug Fixes)
Corrected a buffer overwrite possible when parsing hexadecimal
literals with more than 1024 octets. Reported by Jon Franklin from Dell,
and also by Pawel Wieczorkiewicz from Amazon Web Services.
[Gitlab #182]
CVE: CVE-2021-25217

See: https://downloads.isc.org/isc/dhcp/4.4.2-P1/dhcp-4.4.2-P1-RELNOTES

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:21 -07:00
Yi Zhao
833919c1e9 dhcp-relay: disable backtrace in bundled bind
Disable backtrace in bundled bind to fix build error for qemuarm on
musl.

Fixes:
bind/bind-9.11.32/lib/isc/.libs/libisc.so: undefined reference to `_Unwind_GetIP'

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:20 -07:00
Yi Zhao
ca31e8057a dhcp-relay: update bundled bind to 9.11.32
Update the bundled bind from 9.11.14 to 9.11.32.

Fixes build error on qemuarmv5:
stats.c: In function 'setcounter':
stats.c:300:36: error: 'val' undeclared (first use in this function); did you mean 'value'?
  300 |         stats->counters[counter] = val;
      |                                    ^~~
      |                                    value

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:20 -07:00
zangrc
1c3701018b wireshark: upgrade 3.4.5 -> 3.4.6
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:20 -07:00
Khem Raj
236e2d738a netplan: Fix a warning with clang
Refresh musl patch to avoid fuzz

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Zang Ruochen <zangrc.fnst@fujitsu.com>
2021-06-09 08:49:20 -07:00
zangrc
d612ad6f32 netplan: upgrade 0.101 -> 0.102
0001-dbus-Remove-unused-variabes.patch
0002-Makefile-Exclude-.h-files-from-target-rule.patch
Removed since these are included in 0.102.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-09 08:49:20 -07:00
Yi Zhao
2936dfbe67 samba: update smb.conf
There are some options are deprecated in smb.conf.

Refer to
https://salsa.debian.org/samba-team/samba/-/blob/master/debian/smb.conf
to update it.

* Remove the deprecated "syslog only" and "syslog" global options and
  replace them with the "logging" statement.
* Remove wins support and wins server comments since WINS protocol is
  outdated.
* Improve idmap config

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-05 08:19:07 -07:00
Yi Zhao
dd422c5467 samba: upgrade 4.10.18 -> 4.14.4
The 4.10.x is EOL: https://wiki.samba.org/index.php/Samba_Release_Planning
Upgrade to latest 4.14.x.

Remove PACKAGECONFIG[gnutls] since the gnutls is now the mandatory
requirement for samba. See:
https://wiki.samba.org/index.php/Package_Dependencies_Required_to_Build_Samba#Mandatory

Refresh patches:
  16-do-not-check-xsltproc-manpages.patch
  20-do-not-import-target-module-while-cross-compile.patch
  21-add-config-option-without-valgrind.patch
  0001-Add-options-to-configure-the-use-of-libbsd.patch
  dnsserver-4.7.0.patch
  iconv-4.7.0.patch
  0001-samba-fix-musl-lib-without-innetgr.patch

Drop patches:
  0001-lib-replace-wscript-Avoid-generating-nested-main-fun.patch
  0001-nsswitch-nsstest.c-Avoid-nss-function-conflicts-with.patch
  0001-waf-add-support-of-cross_compile.patch
  0002-util_sec.c-Move-__thread-variable-to-global-scope.patch
  CVE-2020-14318.patch
  CVE-2020-14383.patch
  glibc_only.patch
  smb_conf-4.7.0.patch

Add new patches:
  0007-wscript_configure_system_gnutls-disable-check-gnutls.patch
  0008-source3-wscript-disable-check-fcntl-F_OWNER_EX.patch
  source3-wscript-disable-check-fcntl-RW_HINTS.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-05 08:19:06 -07:00
Yi Zhao
861c0955dd libldb: upgrade 1.5.8 -> 2.3.0
Refresh patches:
  do-not-import-target-module-while-cross-compile.patch
  options-1.5.4.patch
  avoid-openldap-unless-wanted.patch
  libldb-fix-musl-libc-conflict-type-error.patch

Drop patches:
  0001-waf-add-support-of-cross_compile.patch
  libldb-fix-musl-libc-unkown-type-error.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-05 08:19:06 -07:00
Khem Raj
4bcefa8176 memcached: upgrade to 1.6.9
Fix Set but unused clang warning
sigignore issue is already fixed in 1.6.9

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-05 06:06:27 -07:00
Khem Raj
a854c2cb77 mbedtls: Add packageconfig for warning-as-errors
Disable the options by default, as we use different compilers there are
more warnings to handle then upstream

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-04 07:08:13 -07:00
Khem Raj
693ec65bf2 mbedtls: Upgrade to 2.26.0
https://github.com/ARMmbed/mbedtls/releases/tag/v2.26.0

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 19:12:33 -07:00
zhengruoqin
6fcc1f0309 opensaf: upgrade 5.21.03 -> 5.21.06
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 09:13:52 -07:00
Trevor Gamblin
f7751298c5 nftables: upgrade 0.9.8 -> 0.9.9
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 09:13:52 -07:00
Trevor Gamblin
c90b87b81e libnftnl: upgrade 1.1.9 -> 1.2.0
Upgrade libnftnl in preparation for the upgrade of nftables, since the
latter requires libnftnl >= 1.2.0.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 09:13:52 -07:00
Khem Raj
689e8ed550 dhcp-relay: Fix libtool files for internal bind build
The bundled libtool files are arcane and do not work in OE cross build
environment, resulting in creating wrong entried in DT_NEEDED section
as well as emitting build paths into rpaths into ELF files, therefore
copy the OE provided libtool files to fix this issue

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-01 07:49:06 -07:00
Khem Raj
2b01328f56 dovecot: Fix build with llvm libunwind
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-31 15:02:44 -07:00
Armin Kuster
e6cc1f6a1f python3-scapy: add pkg to pkg grp
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
2021-05-31 07:38:06 -07:00
Armin Kuster
0073e325da python3-scapy: move from meta-security
This tracks the official scapy project.
includes ptest

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
2021-05-31 07:38:06 -07:00
Khem Raj
827f511765 dhcp-relay: Use recent config.guess and config.sub for bind
vendored version of bind is quite old which does not have all newer
architecture info like riscv in gnu-config files captured in the bind
tarball, therefore update these files before configuring bundled bind

Fixes build on rv32/rv64

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Yi Zhao <yi.zhao@windriver.com>
2021-05-28 06:55:33 -07:00
Yi Zhao
ccc9d946e3 dhcp-relay: add recipe
The current default dhcp server kea in oe-core doesn't provide
dhcp-relay tool. Add a recipe to provide dhcrelay which is from dhcp.
This patch is picked up from dhcp recipe with some tweaks. In order to
fix the build dependency, we use bundled bind instead of external bind.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-28 06:55:33 -07:00
Khem Raj
cd91cfb17c wireshark: Add zstd via packageconfig
Its disabled by default

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-28 06:55:33 -07:00
Romain Naour
6c2a802f42 libiec61850: Upgrade to 1.5.0
Remove all upstream patches
Rename patch 0003 -> 0001

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-28 06:55:33 -07:00
Khem Raj
03ff456f78 rdma-core: Upgrade to 35.0
Native python is being probed on some builds

Fixes
recipe-sysroot-native/usr/share/cmake-3.20/Modules/FindPackageHandleStandardArgs.cmake:230 (message):
  Could NOT find PythonLibs (missing: PYTHON_LIBRARIES PYTHON_INCLUDE_DIRS)
  (Required is exact version "3.8")

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-21 11:26:57 -07:00
Andrej Kozemcak
77e6147545 squid: upgrade 4.14 -> 4.15
Changes are found at: http://www.squid-cache.org/Versions/v4/changesets

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-21 06:47:58 -07:00
zhengruoqin
5ca3bfcd20 chrony: upgrade 4.0 -> 4.1
Refresh the following patch:
arm_eabi.patch

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 19:11:06 -07:00
Stefan Wiehler
417a344477 restinio: fix license
Signed-off-by: Stefan Wiehler <stefan.wiehler@missinglinkelectronics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-19 09:17:49 -07:00
zangrc
556fbae2ee tcpreplay: upgrade 4.3.3 -> 4.3.4
-License-Update: URL changed from HTTP to HTTPS.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc
8a565dc1c5 nbdkit: upgrade 1.25.6 -> 1.25.7
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc
f2c352d8ff lksctp-tools: upgrade 1.0.18 -> 1.0.19
0001-m4-sctp.m4-make-conpatible-to-autoconf-2.70.patch
Removed since this is included in 1.0.19.

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
zangrc
1447ec7019 ifenslave: upgrade 2.11 -> 2.12
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-14 07:26:46 -07:00
Khem Raj
b31524464a packagegroup-meta-networking.bb: Add http-parser to packagegroup-meta-networking-support
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-13 08:41:15 -07:00
Stefan Wiehler
c049a4e2ce restinio: add recipe
Header-only C++14 library that gives you an embedded HTTP server.

Signed-off-by: Stefan Wiehler <stefan.wiehler@missinglinkelectronics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-12 07:11:41 -07:00
Stefan Wiehler
6f47ea5061 http-parser: add recipe
HTTP request/response parser for C.

Signed-off-by: Stefan Wiehler <stefan.wiehler@missinglinkelectronics.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-12 07:11:41 -07:00
Khem Raj
422f18343b libowfat: Replace __pure__ with pure and remove using __deprecated__
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-03 14:22:55 -07:00
Khem Raj
7178a18131 dibbler: Add libpthread to linker flags
Fixed build issue
lowlevel-linux-link-state.c:(.text+0x450): undefined reference to `pthread_create'
clang-12: error: linker command failed with exit code 1 (use -v to see invocation)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-03 12:56:57 -07:00
Silcet
0a0894b78e ufw: bump version to 0.36 and add services
This commit brings the version of ufw up to 0.36 since version 0.33
had some problems:
* The setup.py calls sed to replace some variables in the source
code with the correct paths. However, this is done using a hardcoded
path and conflicts with distutils
* The python shebang was not properly corrected in setup.py, leading
to a script that only run if there is a python symlink to python2 or
python3

The first issue is addressed by the bump in version, while the second
one is fixed in patch 0003 of the recipe.

Also, the new version provides examples for systemd service and
sysvinit scripts to autostart ufw. These are added into the recipe
now.

Signed-off-by: Silcet <camorga1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-03 08:07:40 -07:00
Andrej Kozemcak
7e0f7072ef proftpd: Update to 1.3.7a release
Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-30 07:55:20 -07:00
Khem Raj
f04fd1f5e7 snort,proftpd,net-snmp: Deal with -ffile-prefix-map as well
this is another option for reproducibility which can be used by
compilers, and here consider processing it as well

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-29 15:40:20 -07:00
zangrc
37d8352d0d wireshark: upgrade 3.4.4 -> 3.4.5
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-29 09:02:39 -07:00
zangrc
b12a2818b9 openvpn: upgrade 2.5.1 -> 2.5.2
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-29 09:02:39 -07:00
zangrc
902eea11f1 fetchmail: upgrade 6.4.18 -> 6.4.19
-License-Update: Change distribition to distribution.
Specific permission is granted for the GPLed code in this distribution to be linked to OpenSSL without invoking GPL clause 2(b).

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-29 09:02:39 -07:00
zangrc
76db7f18d1 babeld: upgrade 1.9.2 -> 1.10
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-29 09:02:39 -07:00
Silcet
5194af1afd ufw: fix python shebang
[meta-openembedded ticket #327] --
https://github.com/openembedded/meta-openembedded/issues/327

The python version in the shebang at the begining of the ufw script
should be the same one as the version the setup.py script was called
with.

The fix in patch "setup-only-make-one-reference-to-env.patch"
depends on sys.executable returning "/usr/bin/env pythonX". However,
it returns "/usr/bin/pythonX". Using sys.version_info we can get the
major version of the python used to called the script and append
that to the shebang line so it works as intended.

Signed-off-by: Silcet <camorga1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-29 09:02:39 -07:00
Reto Schneider
6725a3d3b2 nng: Upgrade 1.2.5 -> 1.4.0
License-Change: Update copyright years change to Staysail Systems, Inc

ee0b44406d (diff-d0ed4cc3fb70489fe51c7e0ac180cba2a7472124f9f9e9ae67b01a37fbd580b7)

In contrast to 1.2.5, this recipe also builds and packages the nngcat
tool.

Signed-off-by: Reto Schneider <reto.schneider@husqvarnagroup.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-29 09:02:39 -07:00
zangrc
03115dcd5f tinyproxy: upgrade 1.10.0 -> 1.11.0
Refresh the following patch:
disable-documentation.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-23 08:56:25 -07:00
zangrc
56782012e3 networkmanager: upgrade 1.30.2 -> 1.30.4
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-22 11:19:38 -07:00
Khem Raj
29f4f5a166 bearssl: Update to tip of master
changelog

* 79b1a99 Fixed comment.
* b2ec203 Fixed carry propagation bug in m64 impl for P-256.
* dda1f8a Harmonized behaviour when point length is invalid.
* acc70b1 Typo fix in comment.
* 946f5ba Added discard of unread appdata on explicit close.
* 252dba9 Fixed carry propagation bug in P-256 'm62' implementation (found by Auke Zeilstra; consequences unclear, possibly some invalid curve attacks in static ECDH contexts).
* 15b3af7 Typo fix in comment.
* 69807a3 Fixed typo in comment.
* fb4296c Fixed some errors in comments.
* 4b60464 Fixed small display bug in debug tool.
* b715b43 Fixed buffer overflow in private key decoding (wrong buffer length used in size check).
* 2893441 Fixed a spurious warning on some compilers.
* e4edfb8 Added support for getrandom()/getentropy(), and a fix for the RDRAND bug on AMD CPU (family 22).
* 924921d Fixed mishandling of UTF-8 codepoints in the FDF0..FEDF range (these were unduly rejected when extracting names from certificates, thereby preventing use of the extra presentation forms of Arabic).
* 9721b3e Fixed efficiency pre-test on RSA prime generation (no security issue, but RSA key generation with pubexp 5, 7 or 11 may be slightly more efficient).
* ecdf897 Normalize use of BR_DOXYGEN_IGNORE.
* c1bb535 Small workaround for CompCert compatibility.
* 87a796d Fixed computing of intermediate buffer size for maximum-size RSA keys.
* 6433cc2 Added detection for MIPS64 with n32 ABI.
* 001d094 Some small performance improvements on 32-bit architectures.
* 08eb078 Fixed fd leak in test code.
* d5acc4f Made m64 implementations of elliptic curves the default (when available).
* f0ddbc3 Added new 64-bit implementations of Curve25519 and P-256.
* b2a08e9 Made ec_c25519_m62 implementation the default on supported architectures.
* 52a69fe Fixed endianness in Curve25519 implementation (no consequence on security). Also added new Curve25519 code for 64-bit platforms.
* fd98320 Cosmetic fix (value did not conform to its announced bit length, but this did not have bad consequences since br_i31_decode_mod() is lenient on that).
* 431629d Changed speed benchmark for i31 to a 521-bit modulus.
* c6ffcd2 Fixed warning on GCC 4.6 to 4.9 (macro redefinition).
* 420f50c Added stand-alone RSA/PSS implementation.
* 966078b Added SHAKE implementation.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-22 11:19:21 -07:00
Kai Kang
c8ceefc5c3 freeradius: check existence of openssl's commands in bootstrap
It calls openssl's commands 'dhparam' and 'pkcs12' in script bootstrap.
These commands are configurable based on configure options 'no-dh' and
'no-des', and may not be provided by openssl. So check existence of
these commands. If not, abort running of script bootstrap.

1. https://github.com/openssl/openssl/blob/master/apps/build.info#L37
2. https://github.com/openssl/openssl/blob/master/apps/build.info#L22

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-21 08:27:01 -07:00
Armin Kuster
4784c7c62f wireguard: update to v1.0.20210219 +1
The +1 fixes build issues for the 5.4 kernel.

This update looks like bugfixes

Signed-off-by: Armin Kuster <akuster808@gmail.com>

v2]
Wrong version listed

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-17 07:45:34 -07:00
Joe Hershberger
90c04acced strongswan: Make PACKAGECONFIG a default value
Change from a weak default to a default in the definition of the PACKAGECONFIG.

In https://github.com/flihp/meta-measured/blob/master/networking-layer/recipes-support/strongswan/strongswan_5.%25.bbappend the PACKAGECONFIG is appended to, so if the definition is weak here, the variable will be empty when the bbappend attempts to add to it.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-17 07:43:11 -07:00
zangrc
5c2112a571 wolfssl: upgrade 4.7.0 -> 4.7.1
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-15 20:01:48 -07:00
zangrc
325deac7bc nbdkit: upgrade 1.25.5 -> 1.25.6
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-15 20:01:48 -07:00
zangrc
063a16bc28 dnsmasq: upgrade 2.84 -> 2.85
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-15 20:01:48 -07:00
zangrc
b96cbaefb5 cifs-utils: upgrade 6.12 -> 6.13
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-15 20:01:48 -07:00
Khem Raj
08c0280b7c open-vm-tools: Fix build with gcc 11
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Trevor Gamblin <Trevor.Gamblin@windriver.com>
2021-04-15 09:28:44 -07:00
Randy MacLeod
7a5fbd9d46 open-vm-tools: upgrade 11.0.1 -> 11.2.5
Drop 0001-GitHub-Issue-367.-Remove-references-to-deprecated-G_.patch
since it was a backport.

Drop 0001-pollGtk-Drop-volatile-qualifier.patch
since it's covered by:
   f48efc8e Make pollGtk resetable.

Drop 0001-utilBacktrace-Ignore-Warray-bounds.patch
since it's covered by:
   0cfda58a Make peeking back into the stack work for back traces

Drop 0002-add-include-sys-sysmacros.h.patch
since it's covered by:
   69b7e1f9 Include sysmacros.h directly as mandated by glibc-2.25.

Refit:
  0005-Use-configure-to-test-for-feature-instead-of-platfor.patch
  0009-Rename-poll.h-to-vm_poll.h.patch
  0002-hgfsServerLinux-Consider-64bit-time_t-possibility.patch
  0011-Use-uintmax_t-for-handling-rlim_t.patch

Add:
  0001-Add-resolv_compat.h-for-musl-builds.patch

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Trevor Gamblin <Trevor.Gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-15 09:28:44 -07:00
Khem Raj
342b6b0475 vnstat: Disable install parallism to fix a potential install race
It seems in some cases installing vnstati program races and is tried
twice, and second operation fails since it ensues somewhere between
the file being created by first operation and file actually being
created

   /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c vnstat vnstati '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/bin'
|  /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c -m 644 ../vnstat-2.6/man/vnstatd.8 '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/share/man/man8'
|  /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c -m 644 ../vnstat-2.6/man/vnstat.conf.5 '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/share/man/man5'
|  /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c -m 644 ../vnstat-2.6/man/vnstat.1 ../vnstat-2.6/man/vnstati.1 '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/share/man/man1'
| make  install-data-hook
| make[3]: Entering directory '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/build'
| Making install-exec in .
| make[4]: Entering directory '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/build'
|  /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/mkdir -p '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/bin'
|  /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/mkdir -p '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/sbin'
|   /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c vnstat vnstati '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/bin'
|   /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install -c vnstatd '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/sbin'
| /home/pokybuild/yocto-worker/meta-oe/build/build/tmp/hosttools/install: cannot create regular file '/home/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/vnstat/2.6-r0/image/usr/bin/vnstati': File exists
| make[4]: *** [Makefile:822: install-binPROGRAMS] Error 1

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-15 09:28:44 -07:00
zangrc
613729e780 usbredir: upgrade 0.8.0 -> 0.9.0
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-08 09:25:54 -07:00
zangrc
83c8e6bcc0 stunnel: upgrade 5.58 -> 5.59
Refresh the following patch:
fix-openssl-no-des.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-08 09:25:54 -07:00
zangrc
5bd0f88c77 nbdkit: upgrade 1.25.4 -> 1.25.5
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-08 09:25:54 -07:00
zangrc
bb60da5cfc mosquitto: upgrade 2.0.9 -> 2.0.10
Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-08 09:25:54 -07:00
Vinicius Aquino
12a241278a networkmanager: upgrade 1.28.0 -> 1.30.2
Upgrade to release 1.30.2:

- 0004-fix_reallocarray_check.patch removed because the current
  version of nm already includes boths malloc.h and stdlib.h
- musl/0002-Fix-build-with-musl.patch removed because the commit
  c50da167bc of nm solves the build issue with musl
- musl/0001-Fix-build-with-musl-systemd-specific.patch modified
  to avoid conflicts when applied to current version of nm
- musl/0003-Fix-build-with-musl-systemd-specific.patch renamed
  to musl/0002-Fix-build-with-musl-systemd-specific.patch and
  modified to avoid conflicts when applied to current version of nm

Signed-off-by: Vinicius Aquino <voa.aquino@gmail.com>
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-08 09:25:33 -07:00
Andreas Müller
a23fa069d0 networkmanager-openvpn: Fix packageing
Recent upgrade introduced:
| ERROR: networkmanager-openvpn-1.8.14-r0 do_package: QA Issue: networkmanager-openvpn: Files/directories were installed but not shipped in any package:
|  /usr/share/metainfo
|  /usr/share/metainfo/network-manager-openvpn.metainfo.xml

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-07 07:45:13 -07:00
Mingli Yu
ece4e7d4f0 freeradius: Upgrade to 3.0.21
Drop one patch at the issue is already fixed in new version
(307678b268 Fix rlm_python3 build)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-06 09:02:12 -07:00
zhengruoqin
66dcc24cd7 snort: upgrade 2.9.17 -> 2.9.17.1
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-01 08:32:47 -07:00
zhengruoqin
30a80664e3 networkmanager-openvpn: upgrade 1.8.12 -> 1.8.14
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-01 08:32:47 -07:00
zhengruoqin
55669e9214 lldpd: upgrade 1.0.4 -> 1.0.8
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-01 08:32:47 -07:00
zhengruoqin
d399c6043c fetchmail: upgrade 6.4.17 -> 6.4.18
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-01 08:32:47 -07:00
Martin Jansa
fdbb0e334f open-vm-tools: move to meta-networking
* and make it skipped only when meta-filesystem is missing as well

* depends on libdnet from meta-networking and nothing in meta-oe depends on open-vm-tools

* update packagegroup-meta-oe to match this, without either of these layers packagegroup-meta-oe is currently failing with:

  ERROR: Nothing RPROVIDES 'open-vm-tools' (but meta-oe/recipes-core/packagegroups/packagegroup-meta-oe.bb RDEPENDS on or otherwise requires it)
  open-vm-tools was skipped: Requires meta-networking and meta-filesystems to be present.
  NOTE: Runtime target 'open-vm-tools' is unbuildable, removing...
  Missing or unbuildable dependency chain was: ['open-vm-tools']
  ERROR: Required build target 'packagegroup-meta-oe' has no buildable providers.
  Missing or unbuildable dependency chain was: ['packagegroup-meta-oe', 'open-vm-tools']

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-28 12:12:57 -07:00
Ming Liu
9a7e075512 atftp: move atftpd.init from files to atftp subdirectory
It does not have to maintain two patch directories files and atftp,
merge them.

Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-23 08:52:15 -07:00
Khem Raj
5daae70617 layers: Drop gatesgarth from LAYERSERIES_COMPAT
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-19 11:58:17 -07:00
zangrc
60d58ceb8f wireshark: upgrade 3.4.3 -> 3.4.4
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-18 12:40:21 -07:00
zangrc
6d8a2dc0e2 wireguard-tools: upgrade 1.0.20210223 -> 1.0.20210315
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-18 12:40:20 -07:00
zangrc
ec2f2b632e nbdkit: upgrade 1.25.3 -> 1.25.4
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-18 12:40:20 -07:00
zangrc
9146480282 mosquitto: upgrade 2.0.8 -> 2.0.9
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-18 12:40:20 -07:00
zangrc
f2f3a3bf43 iscsi-initiator-utils: upgrade 2.1.3 -> 2.1.4
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-18 12:40:20 -07:00
zangrc
efd7121ed1 fetchmail: upgrade 6.4.16 -> 6.4.17
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-16 21:37:14 -07:00
zangrc
cb4d034e7a dovecot: upgrade 2.3.13 -> 2.3.14
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-16 21:37:14 -07:00
Khem Raj
56e9e5255c waf-cross-answers: Add powerpc64le version
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-11 22:34:53 -08:00
Mingli Yu
a1e3dd6a31 quagga: Update SRC_URI
Update the SRC_URI as the previous is unaccessible to fix the below
warning:
WARNING: quagga-1.2.4-r0 do_fetch: Failed to fetch URL https://download.savannah.gnu.org/releases/quagga/quagga-1.2.4.tar.gz;, attemptin MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-11 19:59:04 -08:00
Yi Zhao
9e20a2f41a quagga: do not set PIDFile in service files
The systemd can not open the pid file because it is locked by quagga
daemon.

Fixes:
$ systemctl status ospf6d.service
Feb 25 05:53:26 intel-x86-64 systemd[1]: Starting OSPF routing daemon for IPv6...
Feb 25 05:53:26 intel-x86-64 systemd[1]: ospf6d.service: Can't open PID file /run/quagga/ospf6d.pid (yet?) after start: Operation not permitted
Feb 25 05:53:26 intel-x86-64 systemd[1]: Started OSPF routing daemon for IPv6.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-11 00:12:55 -08:00
Mingli Yu
f555f9d34f netkit-telnet: Update SRC_URI
Fix the below do_fetch warning:
WARNING: netkit-telnet-0.17-r0 do_fetch: Failed to fetch URL http://ftp.linux.org.uk/pub/linux/Networking/netkit/netkit-telnet-0.17.tar.gz, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-11 00:12:55 -08:00
Mingli Yu
f1bb995a05 bridge-utils: Switch to use the main branch
Fix the below do_fetch warning:
WARNING: bridge-utils-1.7-r0 do_fetch: Failed to fetch URL git://git.kernel.org/pub/scm/linux/kernel/git/shemminger/bridge-utils.git, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-11 00:12:55 -08:00
Mingli Yu
2e97d3bd11 geoip-perl: Switch to use the main branch
Fix the below do_fetch warning:
WARNING: geoip-perl-1.51-r0 do_fetch: Failed to fetch URL git://github.com/maxmind/geoip-api-perl.git;protocol=https;, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-11 00:12:55 -08:00
Mingli Yu
df3ef15834 geoip: Switch to use the main branch
Fix the below do_fetch warning:
WARNING: geoip-1.6.12-r0 do_fetch: Failed to fetch URL git://github.com/maxmind/geoip-api-c.git, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-11 00:12:55 -08:00
Sana Kazi
f37e5423da mdns: Whitelisted CVE-2007-0613 for mdns
CVE-2007-0613 is not applicable as it only affects Apple products
i.e. ichat,mdnsresponder, instant message framework and MacOS.
Also, https://www.exploit-db.com/exploits/3230 shows the part of code
affected by CVE-2007-0613 which is not preset in upstream source code.
Hence, CVE-2007-0613 does not affect other Yocto implementations and
is not reported for other distros can be marked whitelisted.
Links:
https://vulmon.com/vulnerabilitydetails?qid=CVE-2007-0613
https://www.incibe-cert.es/en/early-warning/vulnerabilities/cve-2007-0613
https://security-tracker.debian.org/tracker/CVE-2007-0613
https://ubuntu.com/security/CVE-2007-0613
https://vulmon.com/vulnerabilitydetails?qid=CVE-2007-0613

Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-08 22:44:45 -08:00
Oleksandr Kravchuk
90553ded8c nbdkit: update to 1.25.3
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-07 09:53:12 -08:00
Oleksandr Kravchuk
917c0bfe9f ipset: update to 7.11
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-06 07:53:38 -08:00
zangrc
80b8afb231 wireguard-tools: upgrade 1.0.20200827 -> 1.0.20210223
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04 09:04:24 -08:00
zangrc
dc516cbeb7 strongswan: upgrade 5.9.1 -> 5.9.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04 09:04:24 -08:00
zangrc
7e4485adcb openvpn: upgrade 2.5.0 -> 2.5.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04 09:04:24 -08:00
zangrc
e179ed99da opensaf: upgrade 5.20.11 -> 5.21.03
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04 09:04:24 -08:00
Khem Raj
c481ee79a2 squid: Include <limits> for using std::numeric_limits
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-03 11:08:29 -08:00
Khem Raj
4629af5f52 mbedtls: Fix gcc11 stringop-overflow warning
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-02 10:13:38 -08:00
Gianfranco
8850ff297c mosquitto: Upgrade 2.0.7 -> 2.0.8
2.0.8 - 2021-02-25
==================

Broker:
- Fix incorrect datatypes in `struct mosquitto_evt_tick`. This changes the
  size and offset of two of the members of this struct, and changes the size
  of the struct. This is an ABI break, but is considered to be acceptable
  because plugins should never be allocating their own instance of this
  struct, and currently none of the struct members are used for anything, so a
  plugin should not be accessing them. It would also be safe to read/write
  from the existing struct parameters.
- Give compile time warning if libwebsockets compiled without external poll
  support. Closes #2060.
- Fix memory tracking not being available on FreeBSD or macOS. Closes #2096.

Client library:
- Fix mosquitto_{pub|sub}_topic_check() functions not returning MOSQ_ERR_INVAL
  on topic == NULL.

Clients:
- Fix possible loss of data in `mosquitto_pub -l` when sending multiple long
  lines. Closes #2078.

Build:
- Provide a mechanism for Docker users to run a broker that doesn't use
  authentication, without having to provide their own configuration file.
  Closes #2040.

Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
Signed-off-by: Gianfranco Costamagna <gianfranco.costamagna@abinsula.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-28 23:51:14 -08:00
Yi Zhao
a71d1dc472 vsftpd: allow newfstatat and pselect6 syscalls in the seccomp sandbox
Allow newfstatat and pselect6 in the seccomp sanbox for glibc 2.33.

Fixes the following OOPS error:
root@qemux86-64:~# tnftp 192.168.1.1
Connected to 192.168.1.1.
220 (vsFTPd 3.0.3)
Name (192.168.1.1:root): anonymous
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
OOPS: priv_sock_get_cmd

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-28 23:51:14 -08:00
Wang Mingyu
2f887a4d0d stunnel: upgrade 5.57 -> 5.58
License-Update: Update year to 2021

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-24 14:18:31 -08:00
Yi Fan Yu
138e4f59c3 tcpdump: update 4.9.3 -> 4.99.0
Removed patches:
    * avoid-absolute-path-when-searching-for-libdlpi.patch
    reason: this is a solaris specific patch,
            It no longer generates QA error.

    * unnecessary-to-check-libpcap.patch
    reason: upstream changed the logic, a new patch was needed.

New patch:
    * 0001-aclocal.m4-Skip-checking-for-pcap-config.patch
    reason: configure shouldn't look for pcap-config.
    upstream reference: cfc4c750a

Modified patch:
    * add-ptest.patch
    reason: Makefile had slight change.
            new unrelated perl script was introduced,
            removed to make package QA happy.

License:
    upstream removed some whitespace

Ptest:
    binaries are now present in /usr/bin not /usr/sbin
        upstream commit: 95096be4f
    add perl libraries dependencies

    tests passed: 571 (qemux86-64)
    tests failed: 0

Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-21 23:37:54 -08:00
Khem Raj
ed54f12e19 recipes: Update common-licenses references to match new names
The licenses were renamed to match their SPDX names, fix the
references in LIC_FILES_CHKSUM

Correct the checksums where they were wrong

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-21 23:37:54 -08:00
Oleksandr Kravchuk
ea21ccbbcb wolfssl: updae to 4.7.0
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-19 10:02:43 -08:00
Oleksiy Obitotskyy
ac4c2dc26d wireshark-src: improve reproducibility
What was done:
- add --noline option to flex, --no-line to bison
  and -l to lemon generators to prevent
  adding #line directives with absolute path.
- eliminate absolute source path in python code generator
  and use baseline instead.

Signed-off-by: Oleksiy Obitotskyy <oobitots@cisco.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-17 09:58:35 -08:00