Commit Graph

3716 Commits

Author SHA1 Message Date
Yi Zhao
6c6d4d2d1c
snort3: upgrade 3.3.1.0 -> 3.3.2.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.3.2.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-08-01 20:57:21 -07:00
alperak
d1bf2db7cc
tayga: Fix contains reference to TMPDIR [buildpaths] warning
WARNING: tayga-0.9.2-r0 do_package_qa: QA Issue: File /usr/sbin/.debug/tayga in package tayga-dbg contains reference to TMPDIR [buildpaths]

Make sure that the OE provided CFLAGS are passed to the compiler.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-31 08:29:24 -07:00
Yi Zhao
62b0d59023
snort3: upgrade 3.1.84.0 -> 3.3.1.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.2.1.0
https://github.com/snort3/snort3/releases/tag/3.2.2.0
https://github.com/snort3/snort3/releases/tag/3.3.0.0
https://github.com/snort3/snort3/releases/tag/3.3.1.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-28 07:42:22 -07:00
J. S.
28d77dddad
znc: Fix buildpaths QA errors
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-27 17:26:38 -07:00
Poonam Jadhav
ec1d116c8c
tcpreplay: Fix CVE-2023-4256
Add patch to fix tcpreplay CVE-2023-4256
dlt_jnpr_ether_cleanup: check config before cleanup
Links:
https://github.com/appneta/tcpreplay/pull/851
https://github.com/appneta/tcpreplay/issues/813#issuecomment-2245557093

Signed-off-by: Poonam Jadhav <poonam.jadhav@kpit.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-25 07:58:08 -07:00
Jiaying Song
60a250c7e2
nftables: change ptest output format
This change adds a simple format for the skip results.
The format selected is the automake "simple test" format:
"result: testname"

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-19 07:15:45 -07:00
Yi Zhao
7ccce2f966
nftables: upgrade 1.0.9 -> 1.1.0
ChangeLog:
https://www.netfilter.org/projects/nftables/files/changes-nftables-1.1.0.txt

* Drop backport patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-17 18:42:57 -07:00
Yi Zhao
9e90715d90
libnftnl: upgrade 1.2.6 -> 1.2.7
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-17 18:42:57 -07:00
Wang Mingyu
e23eaf27d8
wolfssl: upgrade 5.7.0 -> 5.7.2
Changelog:
 https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.2-stable

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:16 -07:00
Wang Mingyu
6e57592dcf
wireshark: upgrade 4.2.5 -> 4.2.6
Bugfixes:
===========
* RADIUS dissector's dictionary loading broken in many ways.
* 3.4 -> 3.6.5 ASCII display is broken on CentOS 7.
* Funnel/Lua: Closing child window disconnects buttons of parent.
* Lua detection fails with Alpine Linux: missing: LUA_LIBRARIES.
* vnd.3gpp.5gnas payloads of type SMS not decoded inside HTTP2 5GC.
* TCP Stream Graphs green sliding window line not displayed correctly.
* Wireshark window doesn't fully fit on screen on small resolutions and can't be resized properly on Russian language.
* Wireshark started from command line doesn't set gui.fileopen_remembered_dir correctly on Windows.
* Wireshark expects wrong length for DHCP Relay Agent Information Source Port Suboption.
* SIP P-Access-Network-Info header not correctly decoded.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:15 -07:00
Wang Mingyu
ff69831eac
sngrep: upgrade 1.8.1 -> 1.8.2
Changelog:
 capture: fix possible buffer overflow while processing RTP payload

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:15 -07:00
Wang Mingyu
4117b96652
networkmanager: upgrade 1.48.2 -> 1.48.4
Changelog:
==========
* Support matching a OVS system interface by MAC address.
* When looking up the system hostname from the reverse DNS lookup of
  addresses configured on interfaces, NetworkManager now takes into
  account the content of /etc/hosts.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:12 -07:00
Wang Mingyu
3d02fd0ef2
ipset: upgrade 7.21 -> 7.22
Changelog:
==========
- ipset: fix json output format for IPSET_OPT_IP
- tests: add namespace test and take into account delayed
  set removal at module remove
- Update autoconfig tools to build cleanly on Debian bookworm

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-15 16:36:11 -07:00
Wang Mingyu
09cf028276
fetchmail: disable rpath to fix buildpaths warning.
There was an error with the last modification to the buildpaths warning, which could cause segment error.

fix the following warning about buildpath:
  WARNING: fetchmail-6.4.38-r0 do_package_qa: QA Issue: File /usr/bin/fetchmail in package fetchmail contains reference to TMPDIR [buildpaths]

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-10 09:02:52 -07:00
Yoann Congal
7bbf253811
daq: fix SRC_URI to point to the real 2.0.7 release
The previous fossies.org archive contained a 2.0.6 release.
(The included "configure" script contained PACKAGE_VERSION='2.0.6')

Switch to the upstream archive hosted on snort.org which look like a
real 2.0.7 version (configure contains PACKAGE_VERSION='2.0.7')

Diff of the before vs after archive includes:
* configure script :
  * New option : -runstatedir
  * PACKAGE_VERSION='2.0.6' -> '2.0.7' (+ other related variables)
* New copyright year (2014-2021 Cisco) on some files

Use a custom downloadfilename to avoid conflicts with the "wrong" 2.0.7
archive.

CC: Romain Naour <romain.naour@smile.fr>
CC: Yann E. MORIN <yann.morin.1998@free.fr>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-09 13:21:30 -07:00
Jeremy A. Puhlman
63fce96670
net-snmp: Set ps flag value since it checks the host
The value the configure script uses is picked up
from the host machine ps, and there are cases when
the flag selection can be different. Which would
break reproducablity between builds on different
machines.

Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-09 08:48:23 -07:00
Martin Jansa
f0c767407d
recipes: ignore various issues fatal with gcc-14
work arounds for:
meta-oe/meta-oe/recipes-devtools/nodejs/nodejs_20.12.2.bb:do_compile
meta-oe/meta-oe/recipes-support/pidgin/pidgin_2.14.2.bb:do_compile
meta-oe/meta-oe/recipes-devtools/uw-imap/uw-imap_2007f.bb:do_compile
meta-oe/meta-oe/recipes-extended/rrdtool/rrdtool_1.8.0.bb:do_compile
meta-oe/meta-oe/recipes-extended/cmpi-bindings/cmpi-bindings_1.0.4.bb:do_compile
meta-oe/meta-python/recipes-devtools/python/python3-gevent_24.2.1.bb:do_compile
meta-oe/meta-oe/recipes-support/avro/avro-c++_1.11.3.bb:do_compile
meta-oe/meta-python/recipes-devtools/python/python3-h5py_3.10.0.bb:do_compile
meta-oe/meta-oe/recipes-multimedia/cdrkit/cdrkit_1.1.11.bb:do_compile
meta-oe/meta-networking/recipes-connectivity/openthread/ot-br-posix_git.bb:do_compile
meta-oe/meta-oe/recipes-devtools/heaptrack/heaptrack_1.2.0.bb:do_configure
meta-oe/meta-oe/recipes-support/avro/avro-c_1.11.3.bb:do_compile
meta-oe/meta-oe/recipes-core/usleep/usleep_1.2.bb:do_compile
meta-oe/meta-networking/recipes-protocols/openflow/openflow_git.bb:do_compile
meta-oe/meta-oe/recipes-extended/sblim-sfcc/sblim-sfcc_2.2.8.bb:do_compile
meta-oe/meta-networking/recipes-support/linux-atm/linux-atm_2.5.2.bb:do_compile
meta-oe/meta-oe/recipes-kernel/ipmitool/ipmitool_1.8.19.bb:do_compile
meta-oe/meta-networking/recipes-support/ssmping/ssmping_0.9.1.bb:do_compile
meta-oe/meta-oe/recipes-connectivity/wifi-test-suite/wifi-test-suite_10.10.1.bb:do_compile
meta-oe/meta-oe/recipes-extended/zsync/zsync-curl_git.bb:do_compile
meta-oe/meta-python/recipes-devtools/python/python3-kivy_2.3.0.bb:do_compile
meta-oe/meta-oe/recipes-support/openct/openct_0.6.20.bb:do_compile
meta-oe/meta-oe/recipes-benchmark/dhrystone/dhrystone_2.1.bb:do_compile
meta-oe/meta-networking/recipes-daemons/ncftp/ncftp_3.2.7.bb:do_compile
meta-oe/meta-oe/recipes-support/daemontools/daemontools_0.76.bb:do_compile
meta-oe/meta-oe/recipes-devtools/libgee/libgee_0.20.6.bb:do_compile
meta-oe/meta-oe/recipes-devtools/mcpp/mcpp_2.7.2.bb:do_compile
meta-oe/meta-oe/recipes-devtools/android-tools/android-tools_5.1.1.r37.bb:do_compile
meta-oe/meta-networking/recipes-connectivity/dibbler/dibbler_git.bb:do_compile
meta-oe/meta-oe/recipes-devtools/glade/glade_3.22.2.bb:do_compile

http://errors.yoctoproject.org/Errors/Build/183124/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-08 08:42:43 -07:00
rajmohan r
d8f21b1dc8
unbound: Add ptest for unbound
Adapt the compile 'test' phony target from Makefile and deploy as
ptest for unbound.
All test are successful on a trial and took around >9min and <10min.
Duration of ptest execution was 587 seconds on an average.

Signed-off-by: rajmohan r <semc.2042@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-01 23:32:38 -07:00
Wang Mingyu
738ed3edf0
networkmanager: upgrade 1.48.0 -> 1.48.2
Changelog:
===========
* Support matching a OVS system interface by MAC address.
* Fix port reactivation when the controller is reactivating.
* Save connection timestamps when shutting down, so that the right
  connection autoactivates after restart.
* Fix handling of VPN secrets for 2-factor authentication.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-07-01 08:01:58 -07:00
Yi Zhao
4b306f382f
devecot: set dovecot.conf file mode with chmod
The touch command doesn't support file mode setting. Set it with chmod.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-28 11:22:06 -07:00
Ninette Adhikari
3c00af6e2d
usrsctp: CVE status update for CVE-2019-20503
The current version (0.9.5.0) is not affected by the CVE which affects versions at least earlier than 0.9.4.0.

Signed-off-by: Ninette Adhikari <ninette@thehoodiefirm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-28 11:22:03 -07:00
alperak
46154b133f
rdist: Fix contains reference to TMPDIR [buildpaths] warning
Pass OE cflags to makefile

WARNING: rdist-6.1.5-r0 do_package_qa: QA Issue: File /usr/bin/.debug/rdistd in package rdist-dbg contains reference to TMPDIR
File /usr/bin/.debug/rdist in package rdist-dbg contains reference to TMPDIR [buildpaths]

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-28 11:22:01 -07:00
Wang Mingyu
f32d860b39
openvpn: upgrade 2.6.10 -> 2.6.11
0001-configure.ac-eliminate-build-path-from-openvpn-versi.patch
refreshed for 2.6.11

Changelog:
=============
- Implement server_poll_timeout for socks
- Use snprintf instead of sprintf for get_ssl_library_version
- Add bracket in fingerprint message and do not warn about missing verification
- Replace macos11 with macos14 in github runners
- Only run coverity scan in OpenVPN/OpenVPN repository
- Workaround issue in LibreSSL crashing when enumerating digests/ciphers
- Properly handle null bytes and invalid characters in control messages
- Allow to set ifmode for existing DCO interfaces in FreeBSD
- samples: Update sample configurations
- documentation: make section levels consistent
- phase2_tcp_server: fix Coverity issue 'Dereference after null check'
- script-options.rst: Update ifconfig_* variables
- LZO: do not use lzoutils.h macros
- Remove "experimental" denotation for --fast-io
- Implement Windows CA template match for Crypto-API selector
- misc.c: remove unused code
- interactive.c: Improve access control for gui<->service pipe
- Only schedule_exit() once

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-27 09:18:55 -07:00
Wang Mingyu
c50a209d31
networkmanager-openvpn: upgrade 1.11.0 -> 1.12.0
Changelog:
==========
* Adapt to the new way of handling the 2FA secret by the
  daemon, needed by it to fix a bug with certain clients.
  Requires NetworkManager >= 1.46.2.
* Update Slovenian and Hungarian translations.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-27 09:18:55 -07:00
Wang Mingyu
158a4d0869
libdaq: upgrade 3.0.14 -> 3.0.15
Changelog:
 api: Add DIOCTL_GET_CPU_PROFILE_DATA ioctl to get cpu profile data

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-27 09:18:53 -07:00
Wang Mingyu
53dae6dca0
frr: upgrade 10.0 -> 10.0.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-27 09:18:51 -07:00
Hitendra Prajapati
095881069b
tcpdump: fix CVE-2024-2397
Upstream-Status: Backport from b9811ef5bb

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-27 09:18:49 -07:00
Khem Raj
6b077bce55
rdma-core: Do not use overloadable attribute with musl
clang fortify with glibc is where the issue happens so limit
it to just glibc

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-27 09:18:47 -07:00
Khem Raj
69769ff44e
rdma-core: Fix recvfrom override errors with glibc 2.40 and clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-21 22:27:51 -07:00
Yi Zhao
41df431b91
samba: upgrade 4.19.6 -> 4.19.7
ChangeLog:
https://www.samba.org/samba/history/samba-4.19.7.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-20 19:25:52 -07:00
Yi Zhao
09f8ef2242
libldb: upgrade 2.8.0 -> 2.8.1
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-20 19:25:52 -07:00
Timo Schuster
e35ce3956a
mbedtls: Do not set LIB_INSTALL_DIR to an absolute path to make MbedTLSTargets.cmake relocateable.
Signed-off-by: Timo Schuster <timo.schuster@leica-microsystems.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-14 15:46:50 -07:00
Changqing Li
f6f2fad649
tnftp: fix lib32-tnftp build failure with gcc-14
lib32-tnftp do_compile failed with gcc-14:
../../tnftp-20230507/libedit/terminal.c:597:56: error: passing argument 2 of 'terminal_overwrite' from incompatible pointer type [-Wincompatible-pointer-types]
  597 |                                 terminal_overwrite(el, &el->el_display[
      |                                                        ^~~~~~~~~~~~~~~~
      |                                                        |
      |                                                        wint_t * {aka unsigned int *}
  598 |                                     el->el_cursor.v][el->el_cursor.h],
      |                                     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
../../tnftp-20230507/libedit/refresh.c:114:38: error: initialization of 'wchar_t *' {aka 'long int *'} from incompatible pointer type 'wint_t *' {aka 'unsigned int *'} [-Wincompatible-pointer-types]
  114 |                 wchar_t *firstline = el->el_vdisplay[0];

For 64bit system:
wchar_t is defined as int
wint_t is define as unsigned int

For 32bit system:
wchar_t is defined as long int
wint_t is define as unsigned int

In 64bit case, it works well, but in 32bit case, gcc will take it as
incompatible, and report above error

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-14 10:20:37 -07:00
Wang Mingyu
3b79135ae0
frr: use update-alternatives to solve conflicts with libsmi
Error: Transaction test error:
  file /usr/share/yang/ietf-netconf-acm.yang conflicts between attempted installs of libsmi-yang-0.5.0-r0.aarch64 and frr-10.0-r0.aarch64
  file /usr/share/yang/ietf-netconf-with-defaults.yang conflicts between attempted installs of libsmi-yang-0.5.0-r0.aarch64 and frr-10.0-r0.aarch64
  file /usr/share/yang/ietf-netconf.yang conflicts between attempted installs of libsmi-yang-0.5.0-r0.aarch64 and frr-10.0-r0.aarch64

libsmi also uses the doc 'ietf-netconf-acm.yang ietf-netconf-with-defaults.yang ietf-netconf.yang'.
libsmi has a priority of 50.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-12 21:08:07 -07:00
Wang Mingyu
a5ec07e2e8
usbredir: upgrade 0.13.0 -> 0.14.0
Changelog:
============
- usbredirect: Fix redirecting identical devices
- usbredirect: Fix CPU tight loop when run as TCP server
- usbredirect: Fix some minor memory leaks
- usbredirect: Add documentation about bus-device option
- usbredirtestclient: Fix build on MacOS 10.5

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-11 22:02:03 -07:00
Enguerrand de Ribaucourt
8b01302835
udpcast: add recipe
udpcast is a file transfer tool that can send data simultaneously to many
destinations on a LAN.

It is an alternative to uftp which is already in meta-networking.

On a lossy network, udpcast provided 10x faster transfer rates
with error correction enabled while using a half as much CPU thanks to a
simpler algorithm.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-10 23:08:41 -07:00
Kai Kang
d0d0e6efb9
daq: fix incompatible pointer type error
Fix incompatible pointer type error for daq:

| ../../daq-2.0.7/os-daq-modules/daq_nfq.c: In function 'SetPktHdr':
| ../../daq-2.0.7/os-daq-modules/daq_nfq.c:394:37: error: passing argument 2
   of 'nfq_get_payload' from incompatible pointer type [-Wincompatible-pointer-types]
|   394 |     int len = nfq_get_payload(nfad, (char**)pkt);
|       |                                     ^~~~~~~~~~~
|       |                                     |
|       |                                     char **

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-09 16:14:58 -07:00
Khem Raj
751cb7534c
networkmanager: Fix undefined symbol errors on musl+lld
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 21:53:33 -07:00
Wang Mingyu
7cd1f5a871
openfortivpn: upgrade 1.22.0 -> 1.22.1
Bugfix:
 do not advertise we talk compressed HTTP

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 09:11:59 -07:00
Wang Mingyu
a5f414bc46
ntp: upgrade 4.2.8p17 -> 4.2.8p18
License-Update: Copyright year updated to 2024.

Changelog:
===========
- changes crypto (OpenSSL or compatible) detection and default build behavior.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 09:11:59 -07:00
Wang Mingyu
485dfc19be
networkmanager: upgrade 1.46.0 -> 1.48.0
Changelog:
============
* Building with autotools is now deprecated and will be completely removed
  in the next development cycle. We recommend using meson to build
  NetworkManager -- for basic setup, see the CONTRIBUTING.md file.
  To ignore this deprecation and still build with Autotools, you can specify
  the '--disable-autotools-deprecation' argument when configuring.
* Support changing the OpenSSL ciphers for 802.1X authentication via
  connection property "802-1x.openssl-ciphers".
* The reason why a device is unmanaged is now properly set in the
  "StateReason" property of the "Device" D-Bus object. The property is
  visible in nmcli via "nmcli -f all device show $DEV".
* Deprecated 802-11-wireless and 802-11-wired property 'mac-address-blacklist'
  and introduced the 'mac-address-denylist' property.
* Properly restore in-memory connection profiles during the rollback
  of a checkpoint.
* Fix detection of 6 GHz band capability for WiFi devices
* Allow IPv6 SLAAC and static IPv6 DNS server assignment for modem broadband
  when IPv6 device address was not explicitly passed on by ModemManager
* Fix a performance issue that was leading to 100% CPU usage by NetworkManager
  if external programs were doing a big amount of routes updates.
* Patch-level development releases (i.e. 1.48.1-dev) won't be used anymore.
  From now on, all the patch releases whithin a stable branch will be normal
  releases, like 1.48.0, 1.48.1, 1.48.2, 1.48.3 and so on.
  Odd numbers in the minor version number still indicates if it's a development
  branch like 1.49 or a stable one like 1.48.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 09:11:59 -07:00
Wang Mingyu
1b0f933f5b
libiec61850: upgrade 1.5.1 -> 1.5.3
Changelog:
=============
- config file parser dynamically allocates linebuffer to allow multithreaded applications
- parse time values in model configuration file
- config file generator: added missing code for GSEControl
- Config file generator: support multiple access points for GOOSE and SMV control blocks
- config file generator: added code to add SMVCBs to config files
- IED server: added code to create SMVCBs with the dynamic model API
- MMS server: added support for write access with component alternate access
- MMS client: added function MmsConnection_writeVariableComponent to write to variables with alternate component access
- make write access to RCB elements configurable according to ReportSettings
- Added function IedConnection_setLocalAddress to define local IP address and optionally local port of a client connection
- IED server: added ControlAction_getSynchroCheck and ControlAction_getInterlockCheck functions
- fixed - IEC 61580 server: dataset is not released when RCB.Datset is set to empty string by client
- PAL: fixed wrong order of function arguments for fread and fwrite functions
- MMS client: parsing of servicecsSupported in MMS init response is off by one
- fixed - potential memory leaks in goose publisher code
- fixed - server sends dchg report when only dupd is enabled in RCB
- GOOSE subscriber: fixed - possible heap corruption in parseAllData due to missing validity check in bit-string handling
- IED server: fixed problem with implicit ResvTms setting when reserved with RptEna
- IED server: fixed - segmentation fault when compiled with CONFIG_MMS_THREADLESS_STACK
- fixed - MMS server: messages can be corrupted when TCP buffer is full
- fixed - .NET: IedConenction.WriteDataSetValues throws a NullReferenceException
- fixed - server send invalid response- when client uses wrong ctlModel
- fixed - IedConnection_setRCBValuesAsync crashes when RCB is already reserved by other client
- fixed - outstanding call not released in IedConnection_getDataSetDirectoryAsync

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 09:11:58 -07:00
Wang Mingyu
9993925b67
iscsi-initiator-utils: upgrade 2.1.8 -> 2.1.10
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 09:11:57 -07:00
Alex Kiernan
db6540fee1
mdns: Upgrade 2200.100.94.0.2 -> 2200.120.24
Drop 0015-Add-missing-limits.h.patch (equivalent patch merged upstream),
rebase other patches.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-07 09:11:54 -07:00
Dmitry Baryshkov
95fbda5625
ntopng: fix building with GCC 14
GCC 14 is more strict regarding const pointers conversion. Fix
conversion to let ntpong build with GCC 14 and updated rrdtool. The
patch is not submitted upstream yet, the project requires singing of
CLA.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-06 21:45:26 -07:00
Jonas Gorski
2d11258e2d
frr: update 9.1 to 10.0
Update FRR from version 9.1 to newest 10.0.

Signed-off-by: Jonas Gorski <jonas.gorski@bisdn.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-06-06 21:45:26 -07:00
Michael Olbrich
5cf3766cf6
nftables: avoid python dependencies when building without python
Use inherit_defer instead of inhert. This way, setuptools3 is not
inherited when python is removed from PACKAGECONFIG in a .bbappend file.
This avoids dependencies added by setuptools3.

Don't add nftables-python to PACKAGES if python is disabled. It adds
extra runtime dependencies on python3-core and python3-json.

Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-30 08:42:03 -07:00
Wang Mingyu
7f56ae763f
wireshark: upgrade 4.2.4 -> 4.2.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-28 09:34:36 -07:00
Wang Mingyu
64b8b621b4
arno-iptables-firewall: upgrade 2.1.1 -> 2.1.2
Changelog:
============
* Enable IPv6 name record lookups for dig-wrapper. This indirectly enables
  IPv6/AAAA-record support for dyndns-host-open (& traffic-accounting) plugin
! Prevent systemd from terminating the job manager when some rules fail
* Renamed xxx_OUTPUT to INET_OUTPUT_xxx for clarity/consistency
+ Additional INET_OUTPUT_xxx settings to have better control
  of internet access on this machine
* Reorder some code/settings for clarity/consistency

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-28 09:34:28 -07:00
Dmitry Baryshkov
07772ae470
layers: stop declaring compatibility with scarthgap
With the UNPACKDIR changes in place the layers are no longer compatible
with the scarthgap release. Drop it from LAYERSERIES_COMPAT and limit
compatibility to styhead only.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-28 09:34:02 -07:00
Wang Mingyu
d93d67dab3
fetchmail: Fix buildpaths warning.
WARNING: fetchmail-6.4.38-r0 do_package_qa: QA Issue: File /usr/bin/fetchmail in package fetchmail contains reference to TMPDIR [buildpaths]

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 16:17:11 -07:00
Khem Raj
c33cfad1b0
recipes: Switch away from S = WORKDIR
Make it dependent on UNPACKDIR instead

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:44 -07:00
Khem Raj
ffc64e9c6f
recipes: Start WORKDIR -> UNPACKDIR transition
Replace references of WORKDIR with UNPACKDIR where it makes sense to do
so in preparation for changing the default value of UNPACKDIR.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:44 -07:00
Khem Raj
46db58f8c7
nbd: Do not inherit systemd
It does not provide/enable systemd script generation which results in

ERROR: nbd-3.26.1-r0 do_package: nbd does not appear in package list, please add it

Signes-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:42 -07:00
Khem Raj
673ba54e98
nbd: Fix build with GCC14 on musl targets
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:42 -07:00
Khem Raj
5762e4fd55
nbd: Upgrade to 3.26.1
Backport a build fix when using --disable-manpages

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-23 08:44:41 -07:00
Yoann Congal
d161de0b00
mdio-tools: fix mdio-netlink kernel module reproducibility
mdio-netlink source make reference to ${S}/.. which breaks
-fdebug-prefix-map and results in the full TMPDIR path being present in
the -dbg package and, also, change a related CRC in the main package.

This changes ${S} to enclose the whole SRC_URI repo and adapt relative paths to
build (MODULES_MODULE_SYMVERS_LOCATION)

This make mdio-netlink reproducible and fixes this warning:
WARNING: mdio-netlink-1.3.1-r0 do_package_qa: QA Issue: File /lib/modules/6.6.29-yocto-standard/updates/.debug/mdio-netlink.ko in package mdio-netlink-dbg contains reference to TMPDIR [buildpaths]

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-21 14:15:10 -07:00
Khem Raj
bc0a516502
openflow: Fix build build with musl/gcc14
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:28:01 -07:00
Yoann Congal
1429a784c7
squid: workaround a build failure with native gcc10
When build on Debian 11 (gcc10), squid fails to build[0] because of a
bug[1] in the configure step (it mixes options between old native compiler
and recent target compiler: the former needs the std=c++17 option, the latter
doesn't).

The workaround is to force the "-std=c++17" option for the native build.

NB: Our Buildroot friends have the same workaround[2].

[0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/23/steps/28/logs/stdio
[1]: https://bugs.squid-cache.org/show_bug.cgi?id=5376
     Bug closed as invalid by upstream
[2]: 932b52fad8/package/squid/squid.mk (L24)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Reviewed-by: Alexandre Truong <alexandre.truong@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:28:01 -07:00
Beniamin Sandu
967216f6d7
unbound: upgrade 1.19.3 -> 1.20.0
Full changelog:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.20.0

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:28:00 -07:00
Wang Mingyu
9ef0e88791
smcroute: upgrade 2.5.6 -> 2.5.7
Changelog:
 Fix #207: crash when adding IPv6 multicast route on a kernel without IPv6 multicast support

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:27:58 -07:00
Wang Mingyu
aa0eb49df0
openipmi: upgrade 2.0.34 -> 2.0.35
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:27:54 -07:00
Wang Mingyu
41c3ad1a63
networkmanager-openvpn: upgrade 1.10.2 -> 1.11.0
Changelog:
===========
* Improve the support for 2FA dynamic challenge, not
  saving the response into the profile.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-19 08:27:54 -07:00
Khem Raj
f804417cda
geoip-perl: Add ptest missing dependency on perl-modules
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-12 21:51:32 -07:00
Yi Zhao
7222132115
samba: upgrade 4.19.5 -> 4.19.6
ChangeLog:
https://www.samba.org/samba/history/samba-4.19.6.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-09 17:10:59 -07:00
Yi Zhao
37d1908eea
libtevent: upgrade 0.16.0 -> 0.16.1
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-09 17:10:59 -07:00
Ricardo Simoes
577a55f7a5
mbedtls: Fix warning for missing program
When PACKAGECONFIG does not contains 'programs', the hello binary will
not be generated, but the ALTERNATIVE 'hello' is still set, causing the
update-alternatives bbclass to generate warnings for the  missing
'hello' binary.

This commit fixes that by only populating ALTERNATIVES when 'programs'
is enabled.

Signed-off-by: Ricardo Simoes <ricardo.simoes@pt.bosch.com>
Signed-off-by: Mark Jonas <mark.jonas@de.bosch.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-02 07:32:55 -07:00
Wang Mingyu
a733b0c75c
fping: upgrade 5.1 -> 5.2
0001-fping-Initialize-msghdr-struct-in-a-portable-way.patch
removed since it's included in 5.2

Changelog:
============
-New option -X / --fast-reachable to exit immediately once N hosts have been found
-New option -k / -fwmark to set Linux fwmark mask
-Always output fatal error messages
-Fallback to SO_TIMESTAMP if SO_TIMESTAMPNS is not available
-Fix "not enough sequence numbers available" error on BSD-like systems
-Fix running in unprivileged mode
-Fix build issue for NetBSD/alpha
-Fix build issue for OpenBSD/alpha
-Fix build warning for long int usage
-Fix build error with musl libc
-Fix to guard against division by zero
-Decouple -a/-u effects from -c
-Added contrib/Dockerfile
-Remove host from Netdata chart titles
-Add additional tests
-Update github action os images
-Fix Azure pipeline tests
-Various autoconf fixes
-Extended configure script with --enable-debug and output cpu usage
-Documentation: Update Netdata website link
-Documentation: fix description of --file option
-Documentation: improve exit status description
-Documentation: move description of -i MSEC
-Documentation: improve help output for options -c and -C

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-02 07:32:47 -07:00
Markus Volk
a87f7624e1
networkmanager: add missing glib-2.0 dependency
- also copy GLib*Typelib to STAGING_LIBDIR_NATIVE to avoid:
| gi.RepositoryError: Typelib file for namespace 'GLib', version '2.0' not found

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-05-01 09:06:43 -07:00
Markus Volk
43d20c156a
networkmanager: fix gir build
Basically what is done in:
https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=4c40897893f43a99e6ae12e652c0cf789d89df90

This fixes:
| gi.RepositoryError: Typelib file for namespace 'Gobject', version '2.0' not found
| gi.RepositoryError: Typelib file for namespace 'Gio', version '2.0' not found
| gi.RepositoryError: Typelib file for namespace 'GModule', version '2.0' not found

- Remove uneeded do_compile:prepend. It was broken because of {B}} and seems to be unneeded anyway

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 08:20:34 -07:00
maffan
4fc97fe602
networkd-dispatcher: Add dependency on python3-json
networkd-dispatcher imports json. Add it as a RDEPENDS.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-30 08:20:34 -07:00
Ninette Adhikari
285b9c555b
open-vm-tools: Update status for CVE-2014-4199 and CVE-2014-4200
Current version 12.3.5 is not affected by the issue.
Affected versions: Up to (incl) 10.0.3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-29 11:11:52 -07:00
Yoann Congal
d3751ce994
reproducibility: move repro excludes from AB config.json to meta-oe
For now, the known non-reproducible packages list is stored inside the
autobuilder config.json file. This is not ideal. Let's move this list
into each layers of meta-openembedded.

These lists can be used with, in local.conf:
  include conf/include/non-repro-meta-oe.inc
  OEQA_REPRODUCIBLE_EXCLUDED_PACKAGES = "${KNOWN_NON_REPRO_META_OE}"

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Acked-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-29 11:11:51 -07:00
Khem Raj
1e5ae73fd3
layers: Add styhead to compatible release series
styhead is codename for upcoming 5.1 release

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-28 08:55:01 -07:00
Markus Volk
c203e6afa8
spice-gtk: add PACKAGECONFIG for webdav
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-23 15:15:35 -07:00
Markus Volk
3e27517f7e
spice-gtk: use hwdata instead of usbids
spice-gtk seems to be the last recipe in meta-openembedded that uses
usbids instead of hwdata.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-23 15:15:35 -07:00
Wang Mingyu
d7d1da7a96
openfortivpn: upgrade 1.21.0 -> 1.22.0
Changelog:
==========
* make sure Homebrew packages for macOS are built with --enable-legacy-pppd
* do not print TLS socket options in log (revert change from 1.16.0)
* add option to specify SNI
* change most occurrences of "SSL" to "TLS" in user-visible text

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-23 15:15:32 -07:00
Martin Jansa
0ef3e9918d
freediameter: fix dependency from libidn to libidn2
* it's used since:
  da679d27c5
  included with the upgrade to 1.5.0 in:
  https://git.openembedded.org/meta-openembedded/commit/?id=47ccb88d94852e327f3bdd45425f33e56983b50c

* libidn2 is usually pulled into the RSS by the dependency from gnutls
  but when gnutls doesn't depend on it, the build fails with:
-- Checking for module 'libidn2'
--   No package 'libidn2' found
CMake Error at include/freeDiameter/CMakeLists.txt:144 (MESSAGE):
  Unable to find libidn2, please install libidn2-dev or equivalent, or set
  DIAMID_IDNA_IGNORE or DIAMID_IDNA_REJECT

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-19 14:31:32 -07:00
Wang Mingyu
8c1aa2b8ae
squid: upgrade 6.8 -> 6.9
Changelog:
==========
- Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef
- Bug 5069: Keep listening after getsockname() error
- Bug 5360: FwdState::noteDestinationsEnd() assertion "err"
- Reduce stale errno usage
- Plug memory leak in handling cache manager requests
- Fix error: template-id not allowed for constructor in C++20
- Improve release packaging automation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-17 23:47:28 -07:00
Wang Mingyu
b58ee068c1
sngrep: upgrade 1.8.0 -> 1.8.1
Changelog:
 capture: fix possible buffer overflow while processing headers

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-17 23:47:28 -07:00
Wang Mingyu
2824a7ef39
rdma-core: upgrade 50.0 -> 51.0
Changelog:
============
-Merge pull request #1444 from yishaih/mlx5_dr
-Merge pull request #1439 from Kamalheib/qedr_pr
-mlx5: DR, Using sq ts format when RoCE is disabled
-Merge pull request #1440 from Honggang-LI/doc
-librdmacm: adjust ECE function name in man page
-providers/qedr: Remove unused debug files
-roviders/qelr: Replace DP_ERR with verbs_err
-providers/qelr: Replace DP_VERBOSE with verbs_debug
-providers/qelr: Remove unused macros
-Merge pull request #1438 from amzn/fix-rdma-tracepoint

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-17 23:47:28 -07:00
Alexander Vickberg
8d6078b19b
nng: upgrade 1.5.2 -> 1.7.3
Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-17 23:47:22 -07:00
Alexander Vickberg
4d41a11052
Revert "nng: upgrade 1.5.2 -> 12"
This reverts commit 915b6c02ee.

Mistake upgrade by AUH

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-17 23:47:22 -07:00
Yi Zhao
3716379d3f
snort3: update to latest stable version 3.1.84.0
ChangeLog:
https://github.com/snort3/snort3/releases/tag/3.1.84.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-16 11:00:33 -07:00
Yi Zhao
891162dbb4
libdaq: update to latest stable version 3.0.14
ChangeLog:
https://github.com/snort3/libdaq/releases/tag/v3.0.14

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-16 11:00:33 -07:00
alperak
d3a16ad4ae
Use PYTHON_SITEPACKAGES_DIR instead of hard-coded site-packages directory path
The following paths have been replaced with PYTHON_SITEPACKAGES_DIR:

- "${libdir}/${PYTHON_DIR}/site-packages"
- "${libdir}/python${PYTHON_BASEVERSION}/site-packages"
- "${libdir}/python*/site-packages"
- "${libdir}/python3.*/site-packages"

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-15 21:01:20 -07:00
Khem Raj
47ccb88d94
freediameter: Upgrade to latest on master 1.5.0+
This also fixes all ptests, therefore move freediameter
out of PTESTS_PROBLEMS_META_NETWORKING to PTESTS_FAST_META_NETWORKING

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-15 21:01:12 -07:00
alperak
b4980bfc97
libcoap: fix CVE-2024-0962
CVE-2024-0962:

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_oscore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow.

Upstream-Status: Backport [https://github.com/obgm/libcoap/pull/1311]

WARNING: libcoap-4.3.4-r0 do_cve_check: Found unpatched CVE (CVE-2024-0962)

This vulnerability is only exist in 4.3.4.

Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-12 08:57:34 -07:00
Peter Marko
2f30540742
waf-samba: replace oldincludedir
oldincludedir was removed in oe-core by
commit  506c91cbc6a604a84e37e53ccff430436369802e

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-12 08:57:34 -07:00
Khem Raj
614956c5d7
nftables: Fix ptest runs
It gets OOMs with memory < 2G on x86_64 qemu
Export NFT variable in run-ptest script its used by few tests
Add required runtime dependencies for ptests to pass

This also requires changes to kernel config
features/nf_tables/nft_test.scc and CONFIG_VETH

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-10 16:06:30 -07:00
Randy MacLeod
4416aaf88e
postfix: switch SRC_URI to http
Switch the SRC_URI to http since the postfix site does not yet use https.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09 13:56:26 -07:00
Randy MacLeod
8f4dc754cf
tnftp: switch the SRC_URI to https
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09 13:56:26 -07:00
Randy MacLeod
9221eaa8d6
pimd: switch SRC_URI to https
Switch SRC_URI to https (yes, the URI still has ftp in the path!).
Also drop the obsolete SRC_URI[md5sum].

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09 13:56:26 -07:00
Randy MacLeod
9dbf1b42bb
ncftp: Upgrade to 3.2.7
Switch the SRC_URI from "ftp:" to "https:". Drop the obsolete SRC_URI[md5sum].
Drop ncftp-3.2.5-gcc10.patch since we're using gcc13 and upstream has fixed the build
to work by adding an extern to sh_util/gpshare.c for example.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09 13:56:26 -07:00
Beniamin Sandu
c581a72619
unbound: upgrade 1.19.1 -> 1.19.3
Includes security fixes for:
CVE-2024-1931 - Loop with Unreachable Exit Condition ('Infinite Loop')

Full release notes:
https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.3

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-05 10:21:15 -07:00
Beniamin Sandu
6c9a01f670 mbedtls: upgrade 2.28.7 -> 2.28.8
Includes security fixes for:
CVE-2024-28960 - Insecure handling of shared memory in PSA Crypto APIs

Full release notes:
https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.8

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-05 08:07:24 -07:00
Beniamin Sandu
36148978f6 mbedtls: upgrade 3.5.2 -> 3.6.0
This is an LTS release.

Includes security fixes:
* CVE-2024-28960 - Insecure handling of shared memory in PSA Crypto APIs

Full release notes:
https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.6.0

Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-05 08:07:24 -07:00
Alex Kiernan
2061a94d2a mdns: Upgrade 2200.80.16 -> 2200.100.94.0.2
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-05 08:07:24 -07:00
William Lyu
b5573a4896
nftables: Fix failed ptest testcases
There are 2 failed ptest testcases. They fail because they are broken,
but the fix from the upstream is not yet available in version 1.0.9.
These testcases are:
-   tests/shell/testcases/sets/reset_command_0
    Fix from the upstream:
    https://git.netfilter.org/nftables/commit/?id=7a6089a400a573b9a4fd92f29c00a6be7b8ef269
-   tests/shell/testcases/json/0005secmark_objref_0
    Fix from the upstream:
    https://git.netfilter.org/nftables/commit/?id=fff913c1eefbc84eb2d9c52038ef29fe881e9ee9

Signed-off-by: William Lyu <William.Lyu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02 17:54:04 -07:00
William Lyu
c3541b903f
nftables: Fix ShellCheck violations in ptest wrapper script "run-ptest"
The following ShellCheck violations in "run-ptest" are fixed:
-   line 4:
    SC2164: Use 'cd ... || exit' or 'cd ... || return' in case cd fails.
-   line 7:
    SC2086: Double quote to prevent globbing and word splitting.
-   line 9:
    SC2006: Use $(...) notation instead of legacy backticks `...`.
    SC2086: Double quote to prevent globbing and word splitting.
    SC2126: Consider using 'grep -c' instead of 'grep|wc -l'.
-   line 10:
    SC2006: Use $(...) notation instead of legacy backticks `...`.
    SC2086: Double quote to prevent globbing and word splitting.
    SC2126: Consider using 'grep -c' instead of 'grep|wc -l'.
-   line 17:
    SC2086: Double quote to prevent globbing and word splitting.

Signed-off-by: William Lyu <William.Lyu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02 17:54:04 -07:00