Commit Graph

4067 Commits

Author SHA1 Message Date
Jason Schonberg
71f8b389b2
pgpool2: upgrade 4.5.2 -> 4.5.3
Changelog: https://www.pgpool.net/docs/latest/en/html/release-4-5-3.html

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-05 10:18:38 -07:00
Chen Qi
a8995fc3f3
waf-samba.bbclass: adapt to qemu.bbclass refactoring
Avoid inheriting qemu.bbclass and use oe.qemu.xxx instead.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-03 01:59:06 -07:00
Khem Raj
6e136a6bdc
ot-br-posix: Upgrade to latest on top of trunk
Drop a denied patch and use the suggestion to ignore the warning.
Compile with C++20 std, because gcc-15 has started to warn about

recipe-sysroot/usr/include/c++/15.1.0/ciso646:46:4: error: #warning "<ciso646> is deprecated in C++17, use <version> to detect implementation-specific macros" [-Werror=cpp]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-05-02 00:00:29 -07:00
Martin Jansa
f340b4079d
libnftnl: fix tag name
* ${P} doesn't work e.g. with multilib

* fixes:
  git -c gc.autoDetach=false -c core.pager=cat -c safe.bareRepository=all -c clone.defaultRemoteName=origin rev-list -n 1 lib32-libnftnl-1.2.9 failed with exit code 128, output:
  fatal: ambiguous argument \'lib32-libnftnl-1.2.9\': unknown revision or path not in the working tree.

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-29 02:33:26 -07:00
Wang Mingyu
f520bdcee8
nftables: upgrade 1.1.2 -> 1.1.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-29 02:33:23 -07:00
Wang Mingyu
b8abfc747c
nbdkit: upgrade 1.42.1 -> 1.43.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-29 02:33:23 -07:00
Peter Marko
3adc396a6f
corosync: patch CVE-2025-30472
Pick commit from [1] mentioned in [2] from [3]

[1] https://github.com/corosync/corosync/issues/778
[2] https://github.com/corosync/corosync/pull/779
[3] https://nvd.nist.gov/vuln/detail/CVE-2025-30472

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-28 06:49:24 -07:00
Peter Marko
9621423109
corosync: upgrade 3.1.6 -> 3.1.9
dbus dir was changed from sysconfdir to datadir

drop unused configure code

License-Update: copyright years refreshed

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-28 06:49:23 -07:00
Peter Marko
dd40c65866
corosync: fix upstream version check
github-releases is needed that it work at all:
ERROR: Automatic discovery of latest version/revision failed - you must provide a version using the --version/-V option, or for recipes that fetch from an SCM such as git, the --srcrev/-S option.

UPSTREAM_CHECK_GITTAGREGEX is needed to get correct version, otherwise:
$ devtool latest-version corosync
...
INFO: Current version: 3.1.6
INFO: Latest version: 414.336.75.75.75

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-28 06:49:23 -07:00
Jason Schonberg
0ccc751f13
pgpool2: upgrade 4.5.1 -> 4.5.2
Fixes for memory leaks, uninitialized memory, segmentation faults and other fixes.

Changelog: https://www.pgpool.net/docs/latest/en/html/release-4-5-2.html

Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-27 15:23:46 -07:00
Martin Jansa
2c816eab0c
pgpool2: use gnu17 to avoid build failure with gcc-15
* like e.g. gentoo does:
  https://bugs.gentoo.org/940128

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
a3ef0f5c50
fetchmail: upgrade to 6.5.2 to fix build with gcc-15
* fixes:
  http://errors.yoctoproject.org/Errors/Details/852999/

../fetchmail-6.4.38/xmalloc.c:35:1: error: conflicting types for 'xrealloc'; have 'char *(char *, size_t)' {aka 'char *(char *, long unsigned int)'}
   35 | xrealloc (XMALLOCTYPE *p, size_t n)
      | ^~~~~~~~
In file included from ../fetchmail-6.4.38/xmalloc.c:9:
../fetchmail-6.4.38/xmalloc.h:28:14: note: previous declaration of 'xrealloc' with type 'char *(void *, size_t)' {aka 'char *(void *, long unsigned int)'}
   28 | XMALLOCTYPE *xrealloc(/*@null@*/ void *, size_t n);
      |              ^~~~~~~~

COPYING was updated (copyright years update and openssl note was dropped) in:
62a11ca406/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
9c6c2d06e8
open-vm-tools: fix build with gcc-15
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
f7eeca8807
linux-atm: Fix build with gcc-15
* taken from:
  1d1c3f884d/patches/901-linux-atm-dont-use-bool-keyword.patch

* fixes:
  http://errors.yoctoproject.org/Errors/Details/852979/

In file included from load_lex.l:11:
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:10: error: two or more data types in declaration specifiers
   27 |   Bool_t bool;
      |          ^~~~
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:14: warning: declaration does not declare anything
   27 |   Bool_t bool;
      |              ^
In file included from ../../../linux-atm-2.5.2/src/lane/load.c:29:
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:10: error: two or more data types in declaration specifiers
   27 |   Bool_t bool;
      |          ^~~~
../../../linux-atm-2.5.2/src/lane/load_lex.h:27:14: warning: declaration does not declare anything
   27 |   Bool_t bool;
      |              ^
load_lex.l: In function 'yylex':
load_lex.l:47:11: error: expected identifier before 'bool'
load_lex.l:51:11: error: expected identifier before 'bool'
../../../linux-atm-2.5.2/src/lane/load.c: In function 'load_vars':
../../../linux-atm-2.5.2/src/lane/load.c:501:29: error: expected identifier before 'bool'
  501 |                    g_return.bool==BL_TRUE?"True":"False");
      |                             ^~~~
../../../linux-atm-2.5.2/src/lane/load.c:502:51: error: expected identifier before 'bool'
  502 |         set_var_bool(curr_unit, varname, g_return.bool);
      |                                                   ^~~~
make[3]: *** [Makefile:513: load.o] Error 1

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
e984a3504f
postfix: use gnu17 for now
* as recommended by postfix author in:
  https://marc.info/?l=postfix-users&m=173542420611213

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:27 -07:00
Martin Jansa
181fea00cb
proftpd: upgrade to 1.3.9 to fix build with gcc-15
* fixed in:
  61be7eb14f

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:26 -07:00
Martin Jansa
46c46c300b
snort: Fix build with gcc-15
* fixes:
  http://errors.yoctoproject.org/Errors/Details/852983/

../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp_PDF.c:1062:13: error: conflicting types for 'File_Decomp_PDF'; have 'fd_status_t(struct fd_session_s *)' {aka 'enum fd_status(struct fd_session_s *)'}
 1062 | fd_status_t File_Decomp_PDF( fd_session_p_t SessionPtr )
      |             ^~~~~~~~~~~~~~~
In file included from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp.h:59,
                 from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp_PDF.c:31:
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp_PDF.h:83:13: note: previous declaration of 'File_Decomp_PDF' with type 'fd_status_t(void)' {aka 'enum fd_status(void)'}
   83 | fd_status_t File_Decomp_PDF();
      |             ^~~~~~~~~~~~~~~
make[5]: *** [Makefile:374: file_decomp_PDF.o] Error 1
make[5]: *** Waiting for unfinished jobs....
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c: In function 'Process_Decompression':
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c:245:24: error: too many arguments to function 'File_Decomp_PDF'; expected 0, have 1
  245 |             Ret_Code = File_Decomp_PDF( SessionPtr );
      |                        ^~~~~~~~~~~~~~~  ~~~~~~~~~~
In file included from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp.h:59,
                 from ../../../../../snort-2.9.20/src/preprocessors/HttpInspect/files/file_decomp.c:34:
../../../../../snort-2.9.20/src/preprocessors/HttpInspect/include/file_decomp_PDF.h:83:13: note: declared here
   83 | fd_status_t File_Decomp_PDF();
      |             ^~~~~~~~~~~~~~~

  http://errors.yoctoproject.org/Errors/Details/852992/
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_InitGlobal':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:348:25: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
  348 |         size_t memcap = DCE2_GetReloadSafeMemcap(dce2_config);
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadGlobal':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1291:25: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1291 |         size_t memcap = DCE2_GetReloadSafeMemcap(dce2_swap_config);
      |                         ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadVerify':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1436:35: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1436 |     uint32_t current_memcap     = DCE2_GetReloadSafeMemcap(dce2_config);
      |                                   ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1437:35: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1437 |     uint32_t new_memcap         = DCE2_GetReloadSafeMemcap(dce2_swap_config);
      |                                   ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: In function 'DCE2_ReloadSwap':
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1535:26: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1535 |         current_memcap = DCE2_GetReloadSafeMemcap(dce2_config);
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1538:26: error: too many arguments to function 'DCE2_GetReloadSafeMemcap'; expected 0, have 1
 1538 |         swap_memcap    = DCE2_GetReloadSafeMemcap(dce2_swap_config);
      |                          ^~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: declared here
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c: At top level:
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:1673:17: error: conflicting types for 'DCE2_GetReloadSafeMemcap'; have 'uint32_t(tSfPolicyUserContext *)' {aka 'unsigned int(tSfPolicyUserContext *)'}
 1673 | static uint32_t DCE2_GetReloadSafeMemcap(tSfPolicyUserContextId pConfig)
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~
../../../../snort-2.9.20/src/dynamic-preprocessors/dcerpc2/spp_dce2.c:163:17: note: previous declaration of 'DCE2_GetReloadSafeMemcap' with type 'uint32_t(void)' {aka 'unsigned int(void)'}
  163 | static uint32_t DCE2_GetReloadSafeMemcap();
      |                 ^~~~~~~~~~~~~~~~~~~~~~~~

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-26 10:31:26 -07:00
Niko Mauno
2cd4763dc1
system-config-printer: Update D-Bus runtime dependency declaration
In order to facilitate users who wish to use e.g. dbus-broker as their
runtime D-Bus implementation, change the Freedesktop.org specific D-Bus
runtime dependency to honor oe-core's new VIRTUAL-RUNTIME_dbus
variable.

With this change we also align with oe-core commit 5dfca64b78
("dbus-glib: depend on dbus, not dbus-x11") which mentions that

  dbus-x11 hasn't existed as a package since 2012[1] and is just a
  RPROVIDES in dbus, so depend on dbus directly instead.

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-24 18:43:19 -07:00
Wang Mingyu
11c07b393f
nftables: upgrade 1.1.1 -> 1.1.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-23 19:35:04 -07:00
Wang Mingyu
956ef2942d
nbdkit: upgrade 1.40.5 -> 1.42.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-23 19:35:04 -07:00
Wang Mingyu
17aa52ee3a
libnftnl: upgrade 1.2.8 -> 1.2.9
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-23 19:35:03 -07:00
Andreas Fenkart
63df976d8e
chrony: use inherit_defer for conditional inherit of useradd
conditionnal inherit is missed when PACKAGECONFIG privdrop is
activated after this inherit, eg in .bbappend.

Signed-off-by: Andreas Fenkart <afenkart@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:08 -07:00
Andreas Fenkart
b7ec477640
chrony: fix /sbin/nologin path in useradd cmdline
/sbin/nologin instead of /bin/nologin

Signed-off-by: Andreas Fenkart <afenkart@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:08 -07:00
mark.yang
7ad93a1c68
libowfat: fix error with gcc-15
* fix following errors:
  ./select.h:13:12: error: conflicting types for 'select'; have 'int(void)'
   13 | extern int select();
      |            ^~~~~~
   In file included from TOPDIR/tmp/work/core2-64-oe-linux/libowfat/0.32/recipe-sysroot/usr/include/sys/types.h:179,
                 from ./select.h:6:
   ./buffer.h:40:65: error: initialization of 'ssize_t (*)(void)' {aka 'long int (*)(void)'} from incompatible pointer type 'ssize_t (*)(int,  char *, size_t)' {aka 'long int (*)(int,  char *, long unsigned int)'} [-Wincompatible-pointer-types]
   40 | #define BUFFER_INIT(op,fd,buf,len) { (char*)(buf), 0, 0, (len), (op), NULL, NULL, (fd) }

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:07 -07:00
mark.yang
05def1ad00
strongswan: fix error with gcc-15
* Backport 3 Patch:
  - 0001-pki-Fix-signature-of-help-to-match-that-of-a-callbac.patch
  - 0002-callback-job-Replace-return_false-in-constructors-wi.patch
  - 0003-Cast-uses-of-return_-nop-and-enumerator_create_empty.patch

* To fix the error with gcc-15.
  - See more details: http://errors.yoctoproject.org/Errors/Details/851801

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:04 -07:00
mark.yang
a8b8eaa85b
netcat-openbsd: fix build error with gcc-15
* submit fix:
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1097448
  to fix:
    netcat.c:1443:41: error: passing argument 2 of 'signal' from incompatible pointer type [-Wincompatible-pointer-types]
    1443 |                         signal(SIGALRM, quit);
        |                                         ^~~~
        |                                         |
        |                                         void (*)(void)
    In file included from netcat.c💯
    TOPDIR/tmp/work/core2-64-oe-linux/netcat-openbsd/1.195/recipe-sysroot/usr/include/signal.h:88:57: note: expected '__sighandler_t' {aka 'void (*)(int)'} but argument is of type 'void (*)(void)'
    88 | extern __sighandler_t signal (int __sig, __sighandler_t __handler)
        |                                          ~~~~~~~~~~~~~~~^~~~~~~~~
    netcat.c:241:13: note: 'quit' declared here
    241 | static void quit();
        |             ^~~~
    TOPDIR/tmp/work/core2-64-oe-linux/netcat-openbsd/1.195/recipe-sysroot/usr/include/signal.h:72:16: note: '__sighandler_t' declared here
    72 | typedef void (*__sighandler_t) (int);
        |                ^~~~~~~~~~~~~~
    make: *** [Makefile:17: netcat.o] Error 1

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:04 -07:00
Andreas Fenkart
e81fefb0ef
networkmanager: enable vala bindings if gobject introspection is enabled
when opting out from the DISTRO_FEATURE gobject-introspection-date, the
build fails with error:
../NetworkManager-1.50.0/meson.build:849:4: ERROR: Assert failed: vala api require GObject introspection. Use -Dvapi=false to disable it

The gobject-introspection-data feature, while ultimately added to
DISTRO_FEATURES via DISTRO_FEATURE_BACKFILL, isn't available during the
vala.bbclass inheritance check. This also excludes derived variables
e.g. GI_DATA_ENABLED.

To properly disable a DISTRO_FEATURE_BACKFILL feature, it must be
included in DISTRO_FEATURE_BACKFILL_CONSIDERED, a variable that is
available during the parsing phase.

Similar situations have been resolved in:

[openembedded-core:31daea70b18b2b2266bf94063b655aaf142a6166]
librsvg: Only enable the Vala bindings if GObject Introspection is enabled
 PACKAGECONFIG:append:class-target = " ${@bb.utils.contains('GI_DATA_ENABLED', 'True', 'vala', '', d)}"

  -- and --

[meta-openembedded:d89fc6ffbdf8f947643def51b804052bb5e7ac97
libpeas: add recipe for 2.0.5
 PACKAGECONFIG ?= "python3 gjs lua51 ${@bb.utils.contains('DISTRO_FEATURES', 'gobject-introspection', 'vala', '', d)}"

Signed-off: Andreas Fenkart <afenkart@gmail.com>
2025-04-19 14:36:04 -07:00
Andreas Fenkart
ed6a77501a
networkmanager: remove unnecessary typelib file location workaround.
The workaround introduced in commit
63db9c0d52 is no longer needed.
Typelib
files are now correctly located solely within STAGING_LIBDIR_NATIVE,
aligning with the intended build configuration. Removing the
workaround
avoids the following error during build:

cp: cannot stat '.../GObject*typelib': No such file or directory

Signed-off: Andreas Fenkart <afenkart@gmail.com>
2025-04-19 14:36:03 -07:00
mark.yang
cf98490262
netperf: fix build error with gcc-15
* submit fix:
  https://github.com/HewlettPackard/netperf/pull/86
  to fix:
  http://errors.yoctoproject.org/Errors/Details/851803/
    ../../git/src/nettest_bsd.c:4497:19: error: too many arguments to function 'alloc_sendfile_buf_ring'; expected 0, have 4
    4497 |       send_ring = alloc_sendfile_buf_ring(send_width,
        |                   ^~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~
    In file included from ../../git/src/nettest_bsd.c:175:
    ../../git/src/netlib.h:690:26: note: declared here
    690 | extern  struct ring_elt *alloc_sendfile_buf_ring();
        |                          ^~~~~~~~~~~~~~~~~~~~~~~
    In file included from ../../git/src/nettest_omni.c:184:
    ../../git/src/hist.h:135:6: error: conflicting types for 'HIST_purge'; have 'void(struct histogram_struct *)'
    135 | void HIST_purge(HIST h);
        |      ^~~~~~~~~~
  ...

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:02 -07:00
mark.yang
c81b4c74e4
ssmtp: fix build error with gcc-15
* fix build error with gcc-15
../ssmtp-2.64/ssmtp.c:1454:31: error: passing argument 2 of 'signal' from incompatible pointer type [-Wincompatible-pointer-types]
 1454 |         (void)signal(SIGALRM, (void(*)())handler);      /* Catch SIGALRM */
      |                               ^~~~~~~~~~~~~~~~~~
      |                               |
      |                               void (*)(void)
In file included from TOPDIR/tmp/work/core2-64-oe-linux/ssmtp/2.64/recipe-sysroot/usr/include/sys/param.h:28,
                 from ../ssmtp-2.64/ssmtp.c:18:
TOPDIR/tmp/work/core2-64-oe-linux/ssmtp/2.64/recipe-sysroot/usr/include/signal.h:88:57: note: expected '__sighandler_t' {aka 'void (*)(int)'} but argument is of type 'void (*)(void)'
   88 | extern __sighandler_t signal (int __sig, __sighandler_t __handler)
      |                                          ~~~~~~~~~~~~~~~^~~~~~~~~
../ssmtp-2.64/ssmtp.c:1393:6: note: 'handler' declared here
 1393 | void handler(void)
      |      ^~~~~~~

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-19 14:36:02 -07:00
Wang Mingyu
b505813ed9
nbdkit: upgrade 1.40.4 -> 1.40.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-16 08:18:06 -07:00
Khem Raj
aabf9768d0
meta-networking-image-ptest-all: Do not run PTESTS_PROBLEMS_META_NETWORKING
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-12 10:11:32 -07:00
Khem Raj
34b4c40f47
ptest-packagelists-meta-networking: Adjust ptests as per pass status
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-12 10:06:29 -07:00
Yi Zhao
bb89d2ca67
ntp: set UPSTREAM_CHECK_REGEX
Set UPSTREAM_CHECK_REGEX to skip RC/beta version.

Before the fix:
$ devtool latest-version ntp
INFO: Current version: 4.2.8p18
INFO: Latest version: 4.2.8p18-RC1

After the fix:
$ devtool latest-version ntp
INFO: Current version: 4.2.8p18
INFO: Latest version: 4.2.8p18

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-12 07:09:49 -07:00
Khem Raj
b019b4bd68
layers: Add whinlatter (5.3) to compatible layer series
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-11 20:51:29 -07:00
mark.yang
8586c9e2e8
tcpreplay: fix build error with gcc-15
There are two types of errors:
1. Linker errors for txring.c
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:328:(.text+0x1be): undefined reference to `txring_put'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket_open_pf':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:1088:(.text+0x7ea): undefined reference to `txring_init'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:328:(.text+0x1be): undefined reference to `txring_put'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket_open_pf':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:1088:(.text+0x7ea): undefined reference to `txring_init'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:328:(.text+0x1be): undefined reference to `txring_put'
TOPDIR/tmp/work/core2-64-oe-linux/tcpreplay/4.5.1/recipe-sysroot-native/usr/bin/x86_64-oe-linux/../../libexec/x86_64-oe-linux/gcc/x86_64-oe-linux/15.0.1/ld: ./common/libcommon.a(sendpacket.o): in function `sendpacket_open_pf':
/usr/src/debug/tcpreplay/4.5.1/src/common/sendpacket.c:1088:(.text+0x7ea): undefined reference to `txring_init'

The txring file needs to include config.h to build properly.
Surprisingly, in the same environment with gcc14, HAVE_TX_RING is not declared in config.h because it fails during the configure stage.

The config.log below is from the same environment with gcc14.
configure:26549: result: no
configure:26557: checking for TX_RING socket sending support
configure:26579: conftest.c >&5
In file included from conftest.c:130:
/linux/if_packet.h:14:8: error: redefinition of 'struct sockaddr_ll'
   14 | struct sockaddr_ll {
      |        ^~~~~~~~~~~
Therefore, it seems that the linker error did not occur previously.

2. Incompatible type assignment in txring.c when allocating memory for txring_t structure

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:06 -07:00
Markus Volk
b6d13f8108
blueman: update 2.4.3 -> 2.4.4
- remove patch that was merged upstream

2.4.4
Bugs fixed

    Fix Rfcom plugin dbus signature
    Set an initial selected device in blueman-sendto
    AutoConnect: Store bluetooth address instead of object path
    Applet: Handle UnknownObject DBus error (@tommie)
    Make search button available after device list becomes empty (@astcri)
    Fatal LoadException

Changes

    Terminate applet on manager termination if it was started by manager
    Add Galic and Esperanto translations
    AutoConnect: Automatically convert path to address
    Add toggle to force symbolic statusicon

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:04 -07:00
Nguyen Dat Tho
e62c16c3e4
drbd-utils: Fix build with gcc-15
To fix error: http://errors.yoctoproject.org/Errors/Details/851808/
In file included from string_matching.cpp:1:
./string_matching.h:10:18: error: 'uint16_t' does not name a type
   10 |     extern const uint16_t   PATTERN_LIMIT;
      |                  ^~~~~~~~
./string_matching.h:7:1: note: 'uint16_t' is defined in header '<cstdint>'; this is probably fixable by adding '#include <cstdint>'

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Nguyen Dat Tho
7be42e05de
mdns: Fix build with gcc-15
Fix error: http://errors.yoctoproject.org/Errors/Details/851809/

../mDNSShared/CommonServices.h:856:13: error: 'bool' cannot be defined via 'typedef'
  856 | typedef int bool;
      |             ^~~~
../mDNSShared/CommonServices.h:856:13: note: 'bool' is a keyword with '-std=c23' onwards
../mDNSShared/CommonServices.h:856:1: warning: useless type name in empty declaration
  856 | typedef int bool;
      | ^~~~~~~

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Nguyen Dat Tho
058a9ee791
weechat: upgrade 4.5.0 -> 4.6.0
Changelog:
  https://github.com/weechat/weechat/blob/v4.6.0/CHANGELOG.md

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-10 08:31:03 -07:00
Wang Mingyu
03efb8bf8c
openvpn: upgrade 2.6.13 -> 2.6.14
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-07 12:21:18 -07:00
Khem Raj
ceb9160341
ssmping: Use debian mirror for SRC_URI
Original URI is not accessible anymore
Drop md5sum

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-06 08:47:56 -07:00
mark.yang
c022f3ec33
unbound: fix build with gcc-15.0.1
* fix following error:
  http://errors.yoctoproject.org/Errors/Details/850313/
  ../git/compat/malloc.c:9:7: warning: conflicting types for built-in function 'malloc'; expected 'void *(long unsigned int)' [-Wbuiltin-declaration-mismatch]
    9 | void *malloc ();
      |       ^~~~~~
  ../git/compat/malloc.c:5:1: note: 'malloc' is declared in header '<stdlib.h>'
    4 | #include "config.h"
  +++ |+#include <stdlib.h>
    5 | #undef malloc
  ../git/compat/malloc.c: In function 'rpl_malloc_unbound':
  ../git/compat/malloc.c:23:10: error: too many arguments to function 'malloc'; expected 0, have 1
   23 |   return malloc (n);
      |          ^~~~~~  ~
  ../git/compat/malloc.c:9:7: note: declared here
    9 | void *malloc ();
      |       ^~~~~~

* Seeing that there is '#undef malloc', it appears they don't want to
  use the malloc from stdlib.h.
  Therefore, we need to correctly define the parameters for malloc.

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-02 07:29:32 -07:00
mark.yang
f452fa2fce
freediameter: fix build with gcc-15.0.1
* backport fix from:
  https://github.com/freeDiameter/freeDiameter/issues/72
  a54f10082f

  to fix:
  http://errors.yoctoproject.org/Errors/Details/850312/
  TOPDIR/tmp/work/qemux86_64-oe-linux/freediameter/1.5.0+git/git/libfdcore/sctp.c:622:21: note: 'bool' is a keyword with '-std=c23' onwards
  TOPDIR/tmp/work/qemux86_64-oe-linux/freediameter/1.5.0+git/git/libfdcore/sctp.c:622:26: error: expected identifier or '(' before '=' token
  622 |                 int bool = 1;
      |                          ^

Signed-off-by: mark.yang <mark.yang@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-01 23:08:15 -07:00
Nguyen Dat Tho
ffe4c94dca
snort3: upgrade 3.6.1 -> 3.7.1
Changelog:
  https://github.com/snort3/snort3/blob/master/ChangeLog.md

Add 0001-Fix-build-with-gcc-15.patch to fix build with gcc-15

Signed-off-by: Nguyen Dat Tho <tho3.nguyen@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:08 -07:00
Yi Zhao
f27fe8c6e2
mbedtls: 3.6.2 -> 3.6.3
ChangeLog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.3

Remove mbedtls-framework repository, as the framework is now added
as a flat directory rather than a submodule[1][2].

[1] b41194ce7f
[2] 2c824b4fe5

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Yi Zhao
ca08c74223
mbedtls: upgrade 2.28.9 -> 2.28.10
ChangeLog
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.10

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Yi Zhao
506cc7ef56
frr: upgrade 10.2.1 -> 10.3
ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-10.3

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 14:42:06 -07:00
Khem Raj
f4a96810ba
Drop styhead from LAYERSERIES_COMPAT
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-31 07:41:47 -07:00
Khem Raj
8147a884c6
net-snmp: Fix a crash and support for 6.7+ kernel
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-29 09:31:02 -07:00
Khem Raj
7c0f6444e2
nftables: Fix build on musl when xtables enabled
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 22:54:17 -07:00
Khem Raj
6ca6265f7e
openl2tp: Replace ifconfig with ip command in ptest run script
ifconfig may not exist on all systems since its deprecated, fixes
ptests

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 22:22:24 -07:00
Martin Jansa
a2a531a61b
xl2tpd: fix build with gcc-15
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-28 10:28:12 -07:00
Wang Mingyu
66c1ad4149
memcached: upgrade 1.6.37 -> 1.6.38
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 09:33:53 -07:00
Wang Mingyu
998800ce49
libdaq: upgrade 3.0.18 -> 3.0.19
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-25 09:33:52 -07:00
Yi Zhao
e5271adea7
dnsmasq: upgrade 2.90 -> 2.91
ChangeLog:
https://thekelleys.org.uk/dnsmasq/CHANGELOG

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-24 07:29:13 -07:00
Yi Zhao
053d73ffd6
freeradius: 3.2.5 -> 3.2.7
ChangeLog:
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_6
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_7

* Refresh local patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Yi Zhao
0b1e0f24f2
drbd-utils: upgrade 9.28.0 -> 9.30.0
ChangeLog:
https://github.com/LINBIT/drbd-utils/blob/v9.30.0/ChangeLog

* Refresh local patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Yi Zhao
fd730c9269
strongswan: upgrade 6.0.0 -> 6.0.1
ChangeLog:
https://github.com/strongswan/strongswan/releases/tag/6.0.1

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:34 -07:00
Martin Jansa
f19750acc1
iftop: fix build with gcc-15
fixes:
http://errors.yoctoproject.org/Errors/Details/848458/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-21 11:07:33 -07:00
Khem Raj
aa42e35225
openl2tp: Pin to C17 std
Does not compile with C23 with GCC-15 and the last
release was long time ago.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 08:46:56 -07:00
Richard Purdie
eac1f5b9c0
recipes: Fix variable assignment whitespace
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 08:46:56 -07:00
Khem Raj
9060bf3a42
rdist: Pin to C17 std
It can not be cleanly compiled with C23 defaults in GCC-15
therefore stick with C17 for now.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-20 08:46:55 -07:00
Ross Burton
5461aa6cbe
openl2tp: don't inherit autotools
This upstream does not in fact use autotools, so remove the inherit and
implement the required do_install.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:48 -07:00
Ross Burton
672062bb3a
miniupnpd: partial recipe rewrite
This upstream does not in fact use autotools, so remove the inherit.

Split the configure step (make config.h) into do_configure and ensure
that it always runs in case the configuration has changed.

Use PACKAGECONFIG for options, as there are more available upstream.

Add UPSTREAM_CHECK variables to check for new releases. This depends on
a bitbake change[1] but with that detects that 2.3.7 has been released.

Add a DEPENDS on openssl as the Makefiles try to link against it and
silently fail without it.

[1] https://lore.kernel.org/bitbake-devel/20250319165339.439776-1-ross.burton@arm.com/T/#u

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:48 -07:00
Ross Burton
fb38afef30
vblade: don't inherit autotools
This upstream does not in fact use autotools, so remove the inherit.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:47 -07:00
Ross Burton
632d43aa40
rdist: don't inherit autotools
This upstream does not in fact use autotools, so remove the inherit and
implement the required do_install directly.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 11:37:46 -07:00
Omri Sarig
0347365edc
chrony: Add nts support through PACKAGECONFIG
Chronyd is supporting NTS (network time security) protocol, however, to
build the application with this support, it require having gnutls at
build time.
This commit adds a PACKAGECONFIG line, allowing users to control whether
the supporting application will have nts or not.

Signed-off-by: Omri Sarig <omri.sarig13@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-19 09:17:26 -07:00
Yi Zhao
2fb2ee3c7e
civetweb: enable packageconfig cpp
Enable packageconfig cpp required by minifi-cpp.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-17 14:01:15 -07:00
Yoann Congal
26dab6c956
reproducibility: Mark phytool{,-dbg} as known non-reproducible
From AB run:
https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/36/steps/28/logs/stdio

Diffoscope output is at:
https://valkyrie.yocto.io/pub/repro-fail-openembedded/meta-networking/oe-reproducible-20250315-xxydi74w/packages/diff-html/

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-15 23:05:31 -07:00
Dmitriy Makhnin
ae1133e174
waf-samba: using python variable from python3native.bbclass
Waf-samba.bbclass inherits python3native.bbclass
which has the variable PYTHON="${STAGING_BINDIR_NATIVE}/python3-native/python3".
This allows this variable to be used in do_compile instead of python3.

Signed-off-by: Dmitry Makhnin <d.makhnin@yadro.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-13 22:09:36 -07:00
Alex Kiernan
972afd4c72
mdns: Upgrade 2559.60.39.0.1 -> 2559.80.8
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-13 22:09:35 -07:00
Khem Raj
d3b2d1f56a
keepalived: Make keepalived cross compile reproducible
This should help with not emitting configure commandline into
binaries, these may contain absolute build paths

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-12 08:15:43 -07:00
Yoann Congal
d7cef19fcc
reproducibility: update known non-reproducible packages
Those reproducible failures are from AB runs:
* https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/34
* https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/35

https://valkyrie.yocto.io/pub/repro-fail-openembedded/

NB: diffoscope output can be found in
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-11 19:34:55 -07:00
Wang Mingyu
c08b0046f4
udpcast: upgrade 20230924 -> 20250223
0001-include-stddef.h-for-ptrdiff_t.patch
refreshed for 20250223

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-11 17:17:24 -07:00
Sofiane HAMAM
06a5e82a83 Wolfssl: add ptest
Add ptest for Wolfssl package.
Set IMAGE_ROOTFS_EXTRA_SPACE:virtclass-mcextend-wolfssl to 700M
enough to avoid a "No space left on device".

BEGIN: /usr/lib/wolfssl/ptest
Wolfssl ptest logs are stored in /tmp/wolfss_temp.qvuQ9h/ptest.log
Test script returned: 0
unit_test: Success for all configured tests.
PASS: Wolfssl
DURATION: 7
END: /usr/lib/wolfssl/ptest

Signed-off-by: Sofiane HAMAM <sofiane.hamam@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:58:00 -08:00
Johannes Kauffmann
767f429e81 open62541: split schema defs into separate package
The OPC UA schema definitions and nodeset descriptions make up 90MB of
the "normal" package and contain mostly text files not needed during
runtime.

Split them into a -tools package. The "normal" package size is reduced
drastically.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
2025-03-06 11:16:49 +01:00
Johannes Kauffmann
d50733572e open62541: make generated namespace configurable
The default is still the FULL namespace, but it is now possible to
switch to REDUCED.

With the REDUCED namespace, the binary shrinks about 80% in size, from
4.5MB to ~800kB.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
2025-03-06 11:16:05 +01:00
Johannes Kauffmann
05d68e53b1 open62541: remove amalgamation PACKAGECONFIG
open62541@9e0b766fbba73be8d703b6ccbfdeec5bfd200b48 made it an error to
install the package while the amalgamation option is enabled.

On the 1.3 branch, this is not yet an issue. However, it is clear that
this option is not deemed suitable for building open62541 in the context
of a distribution.

Thus, remove the PACKAGECONFIG outright, before someone depends on the
different (incompatible) header includes required by the amalgamation
option.

Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
2025-03-06 11:16:05 +01:00
Johannes Kauffmann
33472c27b4 open62541: update to v1.3.15
Signed-off-by: Johannes Kauffmann <johanneskauffmann@hotmail.com>
2025-03-06 11:16:05 +01:00
Dmitry Baryshkov
caa27aaef6
netperf: fix build failure due to autotools.bbclass change
Recent change to autotools.bbclass broke netperf as it can not now find
proper macros. Remove old workaround and add a proper patch to utilize
ACLOCAL_AMFLAGS option.

Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-27 13:10:01 -08:00
Ross Burton
aa8db6600c lftp: remove obsolete acpaths
As of "autotools: don't try and find in-tree macros" in core, acpaths is
no longer used.

Also remove an obsolete FILES:PN-dbg as the debug package is packaged
automatically.

Signed-off-by: Ross Burton <ross.burton@arm.com>
2025-02-27 20:28:17 +00:00
Ross Burton
76a756989a
pureftp: fix autoreconf
autoreconf needs to be told where to find macros as the Makefile.am does
not do this.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 12:43:32 -08:00
Ross Burton
3a2439edb5
udpcast: add missing manpages PACKAGECONFIG
The manpages.bbclass adds the 'manpages' PACKAGECONFIG but this isn't
defined:

    ERROR: QA Issue: udpcast: invalid PACKAGECONFIG: manpages [invalid-packageconfig]

There is not an option to disable the manpages, so add a stub
PACKAGECONFIG to silence this error.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 12:43:31 -08:00
Ross Burton
aaa88e94d9
ifenslave: remove manpages class
This recipe doesn't ship any manpages since 2.10, so remove the manpage
support.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 12:43:31 -08:00
Wang Mingyu
bd7b50cc55
openfortivpn: upgrade 1.22.1 -> 1.23.1
Changelog:
===========
- fix a few coverity warnings
- Support older mac0S versions that lack vdprintf()
- Patch certificate login error for FortiOS 7.4.4
- Clear OTP after run
- Support SAML login authentication

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:51 -08:00
Wang Mingyu
66e7bd262f
memcached: upgrade 1.6.36 -> 1.6.37
Changelog:
- proto: -X disables stats detail as well

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:51 -08:00
Wang Mingyu
fe5ab4a23b
libtevent: upgrade 0.16.1 -> 0.16.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:51 -08:00
Wang Mingyu
bb2a0984e0
libtdb: upgrade 1.4.12 -> 1.4.13
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:51 -08:00
Wang Mingyu
54b42f4ee9
libtalloc: upgrade 2.4.2 -> 2.4.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:50 -08:00
Wang Mingyu
4283bca610
iscsi-initiator-utils: upgrade 2.1.10 -> 2.1.11
Changelog:
==============
- iscsid: Rate limit session reopen log messages
- Preparing for version 2.1.10
- Fix bug where abort_tmo read failures were ignored.
- Fix gcc issues
- Change a discovery function to void return type
- Fix firmware targets startup to always be "onboot"
- More testing cleanup, and fix dprint test usage
- Improve iscsiadm command line parsing messages
- grammar nitpicks
- Bugfix read specific sysfs value "off" of session attribute
- Fix a typo in test/README
- Make it visible when memory allocation failure
- improve the comments in idbm_lock()
- iscsid: Fix hang during login with scan=manual
- Fix memory leak in iscsi_check_session_use_count
- IPv6 support for iBFT iSCSI boot
- fix 4 issues which are finded when building with clang 17

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:50 -08:00
Yi Zhao
09a888062b
postfix: upgrade 3.8.9 -> 3.10.1
ChangeLog:
https://www.postfix.org/announcements/postfix-3.10.0.html
https://www.postfix.org/announcements/postfix-3.10.1.html

Refresh local patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-25 04:50:39 -08:00
Yi Zhao
9e656e3ac2
postfix: upgrade 3.8.6 -> 3.8.9
ChangeLog:
http://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.8.9.HISTORY

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-25 04:50:38 -08:00
Yi Zhao
ff0b697211
radvd: upgrade 2.19 -> 2.20
ChangeLog:
https://github.com/radvd-project/radvd/blob/v2.20/CHANGES

* Drop backport patch
* Add dependency libbsd
* Update rdavd.service
* Install systemd service file and sysvinit script separately through
  conditional statements.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-24 08:18:49 -08:00
Yi Zhao
8a29c46188
recipes: drop ld-is-gold support
The gold linker support has been dropped in oe-core[1]. Remove related
special cases and patches in recipes.

[1] https://git.openembedded.org/openembedded-core/commit/?id=a4addb9ab63011e7c604fc5daff95559e7d214e7

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-23 17:36:08 -08:00
Gyorgy Sarvari
7e576c0409
wireshark: fix SRC_URI
The original SRC_URI's content seems to be deleted regurarly,
when a new version is published, making the previous version
unavailable.

The new SRC_URI ("all-versions" folder) seems to be more
stable, the previous versions of Wireshark are not deleted from
there.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-23 09:56:37 -08:00
Jan Vermaete
ed5e4031a4
wireshark: version bump 4.2.10 -> 4.2.11
The 4.2.10 was not longer available at the original SRC_URI.
At the new SRC_URI all version of the wireshark releases are available.

Signed-off-by: Jan Vermaete <jan.vermaete@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-22 08:58:27 -08:00
Wang Mingyu
aadc2ac9dc
geoip: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:
ERROR: geoip-1.6.12-r0 do_fetch: Bitbake Fetcher Error: FetchError('Unable to fetch URL from any source.', 'http://sources.openembedded.org/GeoIP.dat.20181205.gz;apply=no;name=GeoIP-dat;')

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-20 08:32:46 -08:00
Khem Raj
29897344f7
mctp: Fix build with latest musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 21:35:47 -08:00
Thu Nguyen
9b522de0f9
mctp: srcrev bump 9042704131d..dd944cf5b5a
Additional commit included in this version bump are below.

Jeremy Kerr (9):
  + tests: Add tests for dbus Network1 interface
  + tests: add System.del_address
  + tests: notify netlink socket on system link/neighbour/address/route
    changes
  + tests: Add NLSocket._create_msg
  + tests: rename NLSocket._send_resp to _send_msg
  + mctpd: fix error message and code for missing linkmap entry case
  + mctpd: remove unnecessary debug output
  + CHANGELOG: Add mctp-bench change

Thu Nguyen (1):
  + Support `LocalEIDs` property in `au.com.codeconstruct.MCTP.Network1`

Timon Liu (1):
  + mctp-bench: Add a utility tool to send/receive messages and display
    throughput

Signed-off-by: Thu Nguyen <thu@os.amperecomputing.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 10:16:24 -08:00
Christos Gavros
bb138b9f6b
corosync: reproducibility issue
Corosync is not reproducible due to change of value
in NETSNMP_SYS_CONTACT which is set in net-snmp:
NETSNMP_SYS_CONTACT = "$ME@$LOC"
$ME = whoami
$LOC assigned domain name from /etc/resolv.conf

Use build in'--with-sys-contact' to overwrite it

https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/30/steps/28/logs/stdio

CC: Yoann Congal <yoann.congal@smile.fr>
CC: Randy MacLeod <randy.macleod@windriver.com>
Signed-off-by: Christos Gavros <gavrosc@yahoo.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-13 20:54:52 -08:00
Wang Mingyu
c400aca52a
rp-pppoe: update SRC_URI
Upstream repository url changed.

Fixes unsuccessful fetch warning.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-12 23:45:35 -08:00
Wang Mingyu
1587704e45
wireshark: upgrade 4.2.9 -> 4.2.10
releasenote:
https://www.wireshark.org/docs/relnotes/wireshark-4.2.10.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-12 09:17:19 -08:00
Jose Quaresma
7e8b47ccc6
networkmanager: remove nmtui from EXTRA_OEMESON
In [1] nmtui PACKAGECONFIG was introduced but they are still be
explicit in EXTRA_OEMESON and so remove the last.

[1] https://git.openembedded.org/meta-openembedded/commit/?id=c331f59e42e9c0bda9d47d0365e6c276746fc81d

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-12 09:16:09 -08:00
Wang Mingyu
579f5c5f2e
memcached: upgrade 1.6.34 -> 1.6.36
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-10 08:45:37 -08:00
Wang Mingyu
7d5d9acb2a
libdaq: upgrade 3.0.17 -> 3.0.18
Changelog:
 api: added a new dioctl for snort latency data

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-10 08:45:36 -08:00
Hongxu Jia
f02e99377c
net-snmp: correct typo on RDEPENDS
Move `append' to the behind of RDEPENDS:${PN}-libs

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-08 20:43:45 -08:00
Alex Kiernan
0ad477bb92
mdns: Separate out mdns-libnss-mdns package
Extract mdns-libnss-mdns from the main package so we can mark it as an
RPROVIDE for libnss-mdns (matching avahi-libnss-mdns) and then
RRECOMMEND this when building with glibc.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-05 13:56:33 -08:00
Alex Kiernan
f97bc097f4
mdns: Correct RPROVIDE to match libdns-sd in avahi
We want to select libdns_sd.so from either Avahi or mDNSResponder, make
the RPROVIDE match the one in Avahi.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-05 13:56:33 -08:00
Alex Kiernan
4bf0af485f
mdns: Upgrade 2559.40.32 -> 2559.60.39.0.1
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-05 13:56:33 -08:00
Gyorgy Sarvari
418ce47f92
ndpi: correct LICENSE value
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-01 08:59:27 -08:00
Gyorgy Sarvari
b5184644d4
open62541: fix qa error with encryption-openssl PACKAGECONFIG
In case "encryption-openssl" PACKAGECONFIG is enabled, do_package_qa fails:

ERROR: open62541-1.3.8-r0 do_package_qa: QA Issue: File /usr/lib/cmake/open62541/open62541Targets.cmake in package open62541-dev contains reference to TMPDIR [buildpaths]

Fix it by changing the value of RECIPE_SYSROOT to CMAKE_SYSROOT variable,
so the qa check passes, and other CMake projects should be still able to find the
CMake package provided by this recipe.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-01 08:59:27 -08:00
Gyorgy Sarvari
6a8d205e5c
znc: fix LICENSE value, clean up SRC_URI
1. Set the correct LICENSE value

2. Csocket is a submodule of the main znc project. Instead of
cloning it separately in a subfolder, just let the gitsm fetcher
to fetch the correct revisions, at the correct place.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-01 08:59:27 -08:00
Richard Purdie
bd6a1bb278
recipes: Fix variable assignment whitespace
Recipes are much more readable with whitespace around the assignment operators.
Fix various assignments in meta-openembedded recipes to show this is definitely
the preferred formatting.

This fixes recipes with larger numbers of issues but there are just under 100
other references left to fix.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-31 10:34:03 -08:00
Christos Gavros
80f9812ab2
net-snmp-native: dependency with libpci-native
Building of net-snmp-native aborted due to
missing dependency with libpci-native.
Fixed by keeping the dependency on for
target recipe and removing it for native

CC: Yoann Congal <yoann.congal@smile.fr>
CC: Randy MacLeod <randy.macleod@windriver.com>
Signed-off-by: Christos Gavros <gavrosc@yahoo.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-29 17:43:03 -08:00
Gyorgy Sarvari
924b1b1cb1
civetweb: fix pathes in cmake file
1. The do_install:append() deleted the TMPDIR from the cmake file,
however that left two absolute pathes in the file: /usr/lib/libssl.so
and /usr/lib/libcrypto.so. In case another project is trying to link
to civetweb-server with cmake, it fails with the following error:

ninja: error: '/usr/lib/libssl.so', needed by 'examples/prometheus/prometheus_example', missing and no known rule to make it

Instead of only deleting the TMPDIR, change it to ${CMAKE_SYSROOT} -
a variable set by cmake.bbclass. This allows other projects to find
the required interfacing libraries successfully.

2. When linking to civetweb-server from another project using cmake,
the cmake file verifies if the /usr/bin/civetweb binary exists. When using
the class-target package, this file is not included in the sysroot during
build-time, so this check fails with the following error:

 CMake Error at ${RECIPE_SYSROOT}/usr/lib/cmake/civetweb/civetweb-targets.cmake:97 (message):
   The imported target "civetweb::server" references the file

      "${RECIPE_SYSROOT}/usr/bin/civetweb"

   but this file does not exist.  Possible reasons include:

To avoid this error, this check is deleted for class-target.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-25 09:28:58 -08:00
Ross Burton
c941e231ad
ntp: set CONFIG_SITE in do_compile
Recent changes in to the autotools class in core means that it no longer
sets CONFIG_SITE for compile tasks.  However, ntp decides to reconfigure
itself mid-build, so the CONFIG_SITE values are lost.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:27:39 -08:00
Ross Burton
6ff48b6461
ncftp: update for autoconf changes in core
ACLOCALEXTRAPATH is no longer used, so pass the required -I via
EXTRA_AUTORECONF.

Also explicitly disable aclocal as the aclocal is hand-maintained.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:27:39 -08:00
Khem Raj
3de33656f9
ncftp: Replace references to ACLOCALEXTRAPATH
- ACLOCALEXTRAPATH is gone in core with commit 878e1517d4890b31332a506ce903d57e1d7dff87
- Add patches to fix build with latest clang and gcc
- Drop disabling warnings as the fixes above take care of the problem

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:27:33 -08:00
Wang Mingyu
75a6e4a617
openvpn: upgrade 2.6.12 -> 2.6.13
Changelog:
===========
- Refuse clients if username or password is longer than USER_PASS_LEN
- Improve peer fingerprint documentation
- console_systemd: remove the timeout when using 'systemd-ask-password'
- Fix missing spaces in various messages
- GHA: Update macOS runners
- GHA: Simplify macOS builds
- Various typo fixes
- forward: Fix potential unaligned access in drop_if_recursive_routing
- send uname() release as IV_PLAT_VER= on non-windows versions
- preparing release 2.6.13
- Route: remove incorrect routes on exit
- Use a more robust way to get dco-win version
- Fix check_addr_clash argument order
- Add calls to nvlist_destroy to avoid leaks
- proxy.c: Clear sensitive data after use
- Protect cached username, password and token on client
- Fix more of uninitialized struct user_pass local vars
- Fix IPv6 in port-share journal
- Fix port-share journal doc

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-24 18:20:01 -08:00
Peter Marko
20e3583f56 proftpd: define suffix for CVE version comparison
Similarly to old openssl versions, proftpd has patch releases with
characters instead of numbers.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-15 12:04:53 -08:00
Peter Marko
7fce6b033b proftpd: upgrade 1.3.8b -> 1.3.8c
See https://github.com/proftpd/proftpd/blob/1.3.8/RELEASE_NOTES

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-15 12:04:53 -08:00
Peter Marko
92fe348b76 proftpd: define UPSTREAM_CHECK_GITTAGREGEX
Patch releases have character after version
devtool upgrade would currently downgrade 1.3.8b -> 1.3.8
This will make it upgrade 1.3.8b -> 1.3.8c

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-15 12:04:53 -08:00
Wang Mingyu
52d727c6f7
wpan-tools: upgrade 0.9 -> 0.10
License-Update: Delete unnecessary blank lines

Changelog:
 https://github.com/linux-wpan/wpan-tools/releases/tag/wpan-tools-0.10

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-14 08:52:07 -08:00
Wang Mingyu
c9ceae2098
lldpd: upgrade 1.0.18 -> 1.0.19
Changelog:
=========
- Support of both Apple Silicon and Intel for macOS package.
- Add cvlan/svlan/tpmr capabilities.
- Disable LLDP in firmware for Intel X7xx cards on FreeBSD.
- Add lldpctl_watch_sync_unblock to liblldpctl.
- Add C++ wrapper for lldpctl.
- Fix AppArmor policy for /run/lldpd/lldpd.socket.lock.
- Do not query stats for a down interface on Linux.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-14 08:52:05 -08:00
Wang Mingyu
a67b258628
chrony: upgrade 4.5 -> 4.6.1
Changelog:
============
Enhancements
------------
* Add ntsaeads directive to enable only selected AEAD algorithms for NTS
* Add activate option to local directive to set activation threshold
* Add ipv4 and ipv6 options to server/pool/peer directive
* Add kod option to ratelimit directive for server KoD RATE support
* Add leapseclist directive to read NIST/IERS leap-seconds.list file
* Add ptpdomain directive to set PTP domain for NTP over PTP
* Allow disabling pidfile
* Improve copy server option to accept unsynchronised status instantly
* Log one selection failure on start
* Add offset command to modify source offset correction
* Add timestamp sources to ntpdata report

Workarounds
-----------
* Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD algorithm
  (by default the keys are generated differently than in RFC 8915 for
  compatibility with chrony server and client versions 4.4, 4.5, and 4.6)
* Switch to compliant NTS keys if first response from server is NTS NAK

Bug fixes
---------
* Fix crash on sources reload during initstepslew or RTC initialisation
* Fix source refreshment to not repeat failed name resolving attempts

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-14 08:52:03 -08:00
Khem Raj
a489d2c9c9
vsomeip: Skip building, needs porting to boost >= 1.87
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-13 10:10:21 -08:00
Khem Raj
9cccd315bf
vsomeip: Upgrade to 3.5.3
Drop backports and not needed patches
Add local SRC_URI For googletests

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-13 10:10:20 -08:00
Wang Mingyu
ef3aa56f79
fping: upgrade 5.2 -> 5.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-07 09:33:14 -08:00
Jiaying Song
8ffe8112f7
chrony: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:
WARNING: chrony-4.5-r0.wr2401 do_fetch: Failed to fetch URL https://download.tuxfamily.org/chrony/chrony-4.5.tar.gz, attempting MIRRORS if available

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-02 07:38:58 -08:00
Yi Zhao
3f7a140ed6
snort3: upgrade 3.3.4.0 -> 3.6.1.0
https://github.com/snort3/snort3/releases/tag/3.6.1.0
https://github.com/snort3/snort3/releases/tag/3.6.0.0
https://github.com/snort3/snort3/releases/tag/3.5.2.0
https://github.com/snort3/snort3/releases/tag/3.5.1.0
https://github.com/snort3/snort3/releases/tag/3.5.0.0
https://github.com/snort3/snort3/releases/tag/3.3.7.0
https://github.com/snort3/snort3/releases/tag/3.3.6.0
https://github.com/snort3/snort3/releases/tag/3.3.5.0

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Yi Zhao
07a8a11d94
frr: upgrade 10.2 -> 10.2.1
ChangeLog:
5f0beaa0fd

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-01-01 19:02:18 -08:00
Wang Mingyu
84cb88feb3
memcached: upgrade 1.6.33 -> 1.6.34
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-30 09:08:04 -08:00
Peter Marko
e44f3251b5
spice: set CVE-2016-2150 status to fixed
Debian has fixed this CVE with [1].
That patch is taken from [2].

.../tmp/work/core2-64-poky-linux/spice/0.15.2/git$ git describe 69628ea13
v0.13.1-190-g69628ea1
.../tmp/work/core2-64-poky-linux/spice/0.15.2/git$ git tag --contains 69628ea13
v0.13.2

[1] https://sources.debian.org/patches/spice/0.12.5-1%2Bdeb8u5/CVE-2016-2150/0002-improve-primary-surface-parameter-checks.patch/
[2] 69628ea137

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-27 09:21:42 -08:00
Yi Zhao
30580f909a
strongswan: upgrade 5.9.14 -> 6.0.0
ChangeLog:
https://github.com/strongswan/strongswan/releases/tag/6.0.0

The aes, curve25519, des, fips-prf, gmp, hmac, md5, pkcs12, rc2, sha1,
sha2 plugins are not enabled by default[1]. Remove these plugins from
RDEPENDS and add PACKAGECONFIG for them.

[1] https://github.com/strongswan/strongswan/blob/6.0.0/NEWS#L38

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
Yi Zhao
a3c4d70afb
networkmanager: upgrade 1.48.10 -> 1.50.0
ChangeLog:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.50.0/NEWS

Drop 0001-libnm-systemd-core-Disable-sd_dhcp6_client_set_duid_.patch as
it has been merged upstream.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
Yi Zhao
44c18d1fb6
frr: upgrade 10.1.1 -> 10.2
ChangeLog:
https://github.com/FRRouting/frr/releases/tag/frr-10.2

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-26 11:12:37 -08:00
Peter Marko
46f22a10be
weechat: upgrade 4.0.4 -> 4.5.0
Solves CVE-2024-46613

Update dependencies:
- remove openssl and icu
- add cjson and gettext-native

Remove patch to find gcrypt which is no longer needed.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:57 -08:00
Peter Marko
2d3988f7b6
wireshark: upgrade 4.2.8 -> 4.2.9
Solves CVE-2024-9781

Release notes:
https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html
https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:57 -08:00
Peter Marko
607a446491
libmemcached: ignore CVE-2023-27478
Per [1] this is fixed by [2].
The commit message says that it is reverting feature added in:

$ git tag --no-contains d7a0084 | grep 1.0.18
1.0.18

This recipe is for the original memcached which is unmaintained now.
Hence the ignore instead of upgrade.

[1] https://nvd.nist.gov/vuln/detail/CVE-2023-27478
[2] https://github.com/awesomized/libmemcached/commit/48dcc61a

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
cdacbdf075
libmemcached: merge inc into bb
After removing old libmemcached recipe version, these is no reasons
anymore to have this split.
The memcached resurrected project uses cmake and different urls.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
7d3c32d609
libmemcached: remove recipe for version 1.0.7
This no longer compiles with latest toolchains.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
fdbec64d99
memcached: upgrade 1.6.17 -> 1.6.33
Solves CVE-2023-46852 and CVE-2023-46853.

Upgrade done via "devtool upgrade".

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:56 -08:00
Peter Marko
65cc05d6ee
memcached: add UPSTREAM_CHECK_URI
Download URL is not listable so devtool upgrade fails.
Using homepage works as it contains link to latest release,

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-20 19:47:55 -08:00
Peter Marko
889ccce684
memcached: ignore disputed CVE-2022-26635
Per [1] this is a problem of applications using memcached inproperly.

This should not be a CVE against php-memcached, but for whatever
software the issue was actually found in. php-memcached and
libmemcached provide a VERIFY_KEY flag if they're too lazy to
filter untrusted user input.

[1] https://github.com/php-memcached-dev/php-memcached/issues/519

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 13:00:33 -08:00
Peter Marko
7e17f8cec0
spice-gtk: mark CVE-2012-4425 as fixed
It is fixed by [1] since 0.15.3.
NVD tracks this CVE as version-less.

[1] https://cgit.freedesktop.org/spice/spice-gtk/commit/?id=efbf867bb88845d5edf839550b54494b1bb752b9

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 13:00:33 -08:00
Peter Marko
073e845274
spice: ignore CVE-2016-0749
NVD tracks this as version-less CVE for spice.
It was fixed by [1] and [2] included in 0.13.2.

[1] 6b32af3e17
[2] 359ac42a7a

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 13:00:32 -08:00
Wang Mingyu
c38b70a70e
stunnel: upgrade 5.73 -> 5.74
fix-openssl-no-des.patch
refreshed for 5.74

* Bugfixes
  - Fixed a stapling cache deallocation crash.
  - Fixed "redirect" with protocol negotiation.
* Features
  - "protocolHost" support for "socks" protocol clients.
  - More detailed logs in OpenSSL 3.0 or later.

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-19 09:41:25 -08:00
Chanh Nguyen
31b6cf91f2
mctp: upgrade 2.0 -> 2.1
Signed-off-by: Chanh Nguyen <chanh@os.amperecomputing.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-16 08:42:00 -08:00
Benjamin Bouvier
d03002f19c
bridge-utils: add CVE_PRODUCT
Add exact CPE name (from NVD database) in CVE_PRODUCT in order to ensure
CVE filtering and not be disturb by futur potential false-positive CVEs.

Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-13 07:54:45 -08:00
Peter Marko
03a1b56bc7
proftpd: set status of CVE-2001-0027
This ancient CVE [1] is unversioned ("*") in NVD DB.
"mod_sqlpw module in ProFTPD does not reset a cached password..."

Looking at history and changelog, the module was removed [2] around
the time when this CVE was published, likely as reaction to this CVE.
"mod_sqlpw.c, mod_mysql.c and mod_pgsql.c have been REMOVED from the
distribution. They are currently unmaintained and have numerous bugs."

Note: It was later re-introduced as mod_sql when it got fixed under
new maintainer.

[1] https://nvd.nist.gov/vuln/detail/CVE-2001-0027
[2] https://github.com/proftpd/proftpd/blob/v1.3.8b/NEWS#L3362

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-10 13:43:54 -08:00
Martin Jansa
b0ceff0204
openhpi: explicitly disable ov-rest plugin
* since elfutils upgrade to 0.192 in:
  https://git.openembedded.org/openembedded-core/commit/?id=1d6ac3c811798732e6addc798656bbe104661d77
  json-c is detected in RSS and ov-rest plugin gets enabled, but fails to build:

../../../openhpi-3.8.0/plugins/ov_rest/ov_rest_event.c:78:10: fatal error: amqp_ssl_socket.h: No such file or directory
   78 | #include <amqp_ssl_socket.h>
      |          ^~~~~~~~~~~~~~~~~~~
compilation terminated.

../../../openhpi-3.8.0/plugins/ov_rest/ov_rest_re_discover.c:707:23: error: initialization of 'SaErrorT' {aka 'int'} from 'void *' makes integer from pointer without a cast [-Wint-conversion]
  707 |         SaErrorT rv = NULL;
      |                       ^~~~

* keep it explicitly disabled as it was disabled before
* add rabbitmq-c dependency for the first issue, the 2nd issue could be
  worked around by:
  # openhpi-3.8.0/plugins/ov_rest/ov_rest_re_discover.c:707:23: error: initialization of 'SaErrorT' {aka 'int'} from 'void *' makes integer from pointer without a cast [-Wint-conversion]
  CFLAGS += "-Wno-error=int-conversion"
  or better fixed properly by someone actually using this recipe

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-07 12:14:02 -08:00
deepan.shivap
dac624de3e
ot-br-posix: Fix Musl build error
Mistakenly removed musl-fixes.patch in previous commit.

update & Include 0001-Musl-build-fix.patch based on latest upstream of ot-br-posix

Remove CXXFLAGS:append:libc-musl:toolchain-clang = " -Wno-error=sign-compare
-Wno-error=unused-but-set-variable", as issue is not reproducible with
current SRCREV of ot-br-posix.

Signed-off-by: deepan.shivap <deepan.shivap@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-03 09:44:36 -08:00
Ghislain Mangé
97318e27eb
wireshark: use inherit_defer for conditional cases
Conditionnal inherit may be missed when PACKAGECONFIG qt5 is activated
after this inherit, eg in .bbappend. see patch [0]

[0]: https://lists.openembedded.org/g/bitbake-devel/message/16815

Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Ghislain Mangé <ghislain.mange@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-03 09:44:31 -08:00
Ghislain Mangé
cc83b9ac17
wireshark: fix Qt5/6 configuration
Wireshark is built with Qt6 by default when Qt is enabled.
Forcibly disable Qt6 in our Qt5 PACKAGECONFIG

Github issue: https://github.com/openembedded/meta-openembedded/issues/844

Reported-by: Ludovic Jozeau <ludovic.jozeau@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Ghislain Mangé <ghislain.mange@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-12-03 09:44:31 -08:00
deepan.shivap
168634c5e6
ot-br-posix: Fix GCC-14 build error
GCC 14 compiler uses -fvisibility-inlines-hidden by default and
it creates visibility conflicts.

Add 0001-fix-build-on-GCC-14-for-yocto.patch file to resolve build error.

Remove musl-fixes.patch, not applicable for latest Upstream.

Update SRCREV to latest Upstream.

Signed-off-by: deepan.shivap <deepan.shivap@lge.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-29 07:56:56 -08:00
Marcin Nowakowski
262bab29e5
nbdkit: Bump to the newest stable repo
Recently, the official nbdkit repo has been changed:
from https://github.com/libguestfs/nbdkit
into https://gitlab.com/nbdkit/nbdkit

Additionally, the newest stable tag version is v1.40.4.
The patch used with version 1.33.11 is also copied
and modified to support the latest changes.

The version 1.33.11 is not removed for reference purposes.

It was tested with one of openbmc images.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-27 10:00:21 -08:00
Alex Kiernan
e008a7b6f0
mdns: Upgrade 2559.1.1 -> 2559.40.32
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-27 09:36:51 -08:00
Khem Raj
f1e8d8a510
meta: Add SECURITY.md file to all layers
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-23 09:00:14 -08:00
Khem Raj
e0c85bdc33
dovecot: Upgrade to 2.3.21.1
Fix build with icu-76.x while here

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-23 09:00:14 -08:00
Khem Raj
e8919e49d4
keepalived: Backport fix to build with musl
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-22 11:02:14 -08:00
Benjamin Bouvier
112120131d
tcpdump: add CVE_PRODUCT
Add exact CPE name in CVE_PRODUCT.

Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-21 21:42:35 -08:00
Benjamin Bouvier
5efb5b44e8
net-snmp: add CVE_PRODUCT
Add exact CPE name in CVE_PRODUCT.

Signed-off-by: Benjamin Bouvier <benjamin.bouvier@ekinops.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-21 21:42:35 -08:00
Khem Raj
b90d48a1c1
keepalived: Upgrade to 2.3.2
Changes are
https://www.keepalived.org/release-notes/Release-2.3.0.html
https://www.keepalived.org/release-notes/Release-2.3.1.html
https://www.keepalived.org/release-notes/Release-2.3.2.html

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 23:57:59 -08:00
Jiaying Song
bea74f838b
openvpn: add ptest support
All test cases PASS.
Add openvpn to PTESTS_SLOW because test duration longer than 30s Below is parts of the run log:
[==========] xkey provider tests: Running 3 test(s).
[ RUN      ] xkey_provider_test_fetch
[       OK ] xkey_provider_test_fetch
[ RUN      ] xkey_provider_test_mgmt_sign_cb
[       OK ] xkey_provider_test_mgmt_sign_cb
[ RUN      ] xkey_provider_test_generic_sign_cb
[       OK ] xkey_provider_test_generic_sign_cb
[==========] xkey provider tests: 3 test(s) run.
[  PASSED  ] 3 test(s).
PASS: provider_testdriver

The files t_client.sh.in and t_cltsrv.sh were not added because they
require specific environment configuration files. It is recommended that
users configure these based on their environment before testing.

Since the recipe enables iproute2, the condition for t_net.sh based on
HAVE_SITNL is not met, so t_net.sh will not be included in the build.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 22:26:45 -08:00
Ross Burton
f2c506e159
blueman: inherit cython class
Use the new cython class to avoid duplicated fixup code to remove build
paths.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 16:59:07 -08:00
Peter Kjellerstedt
7421816de9
ebtables: Remove the dependecy on bash
Rewrite ebtables-legacy-save to avoid using bashisms.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 16:59:05 -08:00
Peter Marko
508a2e6b94
squid: handle CVE-2024-45802
According to [1] the ESI implementation in squid feature is vulnerable
without any fix available.

NVD says it's fixed in 6.10, however the change in this release only
disables ESI by default (which we always did via PACKAGECONFIG).
This means CVE report would say Patched even if the vulnerability is
still present if someone adapts squid PACKAGECONFIG.

Commit in master branch related to this CVE is [2].
Title is "Remove Edge Side Include (ESI) protocol" and it's also what it
does. So there will never be a fix for these ESI vulnerabilities.
Based on this, remove vulnerable ESI PACKAGECONFIG already now.

[1] https://github.com/squid-cache/squid/security/advisories/GHSA-f975-v7qw-q7hj
[2] 5eb89ef3d8

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 13:50:56 -08:00
Peter Marko
928ef34ead
squid: upgrade 6.10 -> 6.12
License-Update: copyright year updated

Add patch to fix new build failure from release tarball.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-19 13:50:56 -08:00
Wang Mingyu
006af9e741
mosquitto: upgrade 2.0.19 -> 2.0.20
Changelog:
==========
Broker:
- Fix QoS 1 / QoS 2 publish incorrectly returning "no subscribers".
  Closes #3128.
- Open files with appropriate access on Windows.
- Don't allow invalid response topic values.
- Fix some strict protocol compliance issues.

Client library:
- Fix cmake build on OS X.

Build:
- Fix build on NetBSD

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-05 22:45:17 -08:00
Wang Mingyu
e04dac483c
libdaq: upgrade 3.0.16 -> 3.0.17
Changelog:
==========
- daq_netmap: Fix build on Linux with non-system headers
- example: support snap encapsulation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-05 22:45:16 -08:00
Martin Jansa
dbf103d4cd
unbound: update to latest to fix occasional build failure
buildhistory-diff shows few new files in testdata:

packages/core2-64-oe-linux/unbound/unbound-ptest: FILELIST: added "
  /usr/lib/unbound/ptest/tests/testdata/rpz_val_block.rpl
  /usr/lib/unbound/ptest/tests/testdata/serve_expired_ttl_reset.rpl
  /usr/lib/unbound/ptest/tests/testdata/val_negcache_ttl_prefetch.rpl
  /usr/lib/unbound/ptest/tests/testdata/val_negcache_ttl.rpl
  /usr/lib/unbound/ptest/tests/testdata/iter_max_global_quota.rpl
  /usr/lib/unbound/ptest/tests/testdata/iter_unverified_glue.rpl
  /usr/lib/unbound/ptest/tests/testdata/serve_expired_val_bogus.rpl
  /usr/lib/unbound/ptest/tests/testdata/iter_unverified_glue_fallback.rpl
  /usr/lib/unbound/ptest/tests/testdata/serve_expired_client_timeout_val_bogus.rpl
  /usr/lib/unbound/ptest/tests/testdata/serve_expired_client_timeout_val_insecure_delegation.rpl
  /usr/lib/unbound/ptest/tests/testdata/dns64_prefetch_cache.rpl"

wasn't tested in runtime, I don't use it, I just wanted to get rid of
random build failure from world builds (happens at least since kirkstone
which has 1.15.0).

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-11-05 09:42:50 -08:00
Alex Kiernan
cedfa1be3a
mdns: Upgrade 2200.140.11 -> 2559.1.1
Add local fixes for:

* definition for MAX()
* missing `limit` declarations

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-30 08:24:30 -07:00
Chanh Nguyen
cbf1c7d312
mctp: Fix build errors with clang19 + musl
Signed-off-by: Chanh Nguyen <chanh@os.amperecomputing.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-28 07:29:54 -07:00
Yi Zhao
792df8e977
mbedtls: upgrade 3.6.1 -> 3.6.2
ChangeLog:
https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.2

Security Fix:
CVE-2024-49195

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-21 20:54:47 -07:00
Chanh Nguyen
b51e4288b9
mctp: upgrade 1.1 -> 2.0
Signed-off-by: Chanh Nguyen <chanh@os.amperecomputing.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-18 09:25:46 -07:00
Jiaying Song
bc29ed7b10
wireguard-tools: fix do_fetch error
Change the SRC_URI to the correct value due to the following error:

WARNING: wireguard-tools-1.0.20210914-r0 do_fetch: Failed to fetch URL git://git.zx2c4.com/wireguard-tools;branch=master, attempting MIRRORS if available

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-18 09:25:45 -07:00
Fabrice Aeschbacher
5299775840
mosquitto: upgrade 2.0.18 -> 2.0.19
- Solves CVE-2024-8376
- removed 1571.patch and 2894.patch, already applied in v2.0.19

https://github.com/eclipse/mosquitto/blob/v2.0.19/ChangeLog.txt

Signed-off-by: Fabrice Aeschbacher <fabrice.aeschbacher@siemens.com>
Reviewed-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-17 14:07:45 -07:00
Jeroen Knoops
58679b6a51
nng: Rename default branch of github.com:nanomsg/nng.git
Default branch is renamed from `master` to `main`. Commitshas are the
same.

Signed-off-by: Jeroen Knoops <jeroen.knoops@philips.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-17 14:07:45 -07:00
Alban Bedel
456a5e1cc8
mdio-tools: RRECOMMENDS the kernel module
The mdio-tools package RDEPENDS on `kernel-module-mdio-netlink` but
this package doesn't exists if the module is built into the kernel.
Use RRECOMMENDS instead as is usually done with kernel modules.

Signed-off-by: Alban Bedel <alban.bedel@aerq.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-16 14:07:28 -07:00
Yi Zhao
9ea11d0857
open-vm-tools: upgrade 12.4.5 -> 12.5.0
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-13 09:21:55 -07:00
Khem Raj
d6110db995
unbound: Upgrade to 1.21.1
Disable rpaths we are cross building and paths on target will be
the usual locations e.g. /usr/lib

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-13 09:19:37 -07:00
Khem Raj
70c663b7ae
ndisc6: Fix reproducible build
includes the CFLAGS used to build the package in
the binary via PACKAGE_CONFIGURE_INVOCATION which then includes the
absolute build path via (eg.) the -ffile-prefix-map flag.

Here we remove using variables like PACKAGE_CONFIGURE_INVOCATION in code

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-10 12:53:51 -07:00
Yi Zhao
f514a646e8
nftables: upgrade 1.1.0 -> 1.1.1
ChangeLog:
https://www.netfilter.org/projects/nftables/files/changes-nftables-1.1.1.txt

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-07 23:18:54 -07:00
Yi Zhao
0681130a66
libnftnl: upgrade 1.2.7 -> 1.2.8
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-07 23:18:54 -07:00
Richard Tollerton
14c7d65643
firewalld: upgrade 1.3.2 -> 2.2.1
Major/minor release changelogs:
- https://firewalld.org/2023/06/firewalld-2-0-0-release
- https://firewalld.org/2024/01/firewalld-2-1-0-release
- https://github.com/firewalld/firewalld/releases/tag/v2.2.0 (dunno why the
  website wasn't updated)

Stop trying to rewrite /etc/firewalld/*.xml. It appears to be for the sake of
/etc/firewalld/lockdown-whitelist.xml, which is not being installed anymore.

Add RDEPENDS+=bash. Used by /usr/lib/firewalld/xmlschema/check.sh; adding to
avoid a QA failure.

Signed-off-by: Rich Tollerton <rich.tollerton@ni.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-07 14:15:09 -07:00
Yoann Congal
7fe2259571
non-repro-meta-networking: update known non-reproducible list
Add ncp, ncp-dbg: symbols are not sorted the same way

from: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/46/steps/28/logs/stdio

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-07 08:08:26 -07:00
Yoann Congal
1b3738d85c
non-repro-meta-networking: update known non-reproducible list
Add:
* ntopng: date in version
* opensaf: build host hostname in /etc/ files

from: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/45/steps/28/logs/stdio

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-02 19:49:53 -07:00
Ghislain Mangé
15758538ee
wireshark: fix typo in PACKAGECONFIG[zstd]
ENABLE_STTD is a typo, correct option is ENABLE_ZSTD.

This patches the following CMake warning in do_configure:
  Manually-specified variables were not used by the project: ENABLE_STTD
After, do_configure does not show the warning.

Github issue: https://github.com/openembedded/meta-openembedded/issues/845

Reported-by: Ludovic Jozeau <ludovic.jozeau@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Ghislain Mangé <ghislain.mange@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-02 07:38:45 -07:00
alperak
56010090ef
curlpp: Fix build issue
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-01 17:56:44 -07:00
Khem Raj
d909e0d1e3
layer.conf: Update to walnascar (5.2) layer/release series
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-10-01 09:23:12 -07:00
Khem Raj
d30427f475
openl2tp: Fix ptests
- Detect active network interface to use, instead of asking user, this needs
  to run in automation
- Find the location of ppp_null.so with find instead of rpm, rpm is a distro choice
  it can be assumed to be always there.
- Add missing runtime deps for ptests
- Kill openl2tpd started by run-ptest script before exiting, otherwise
  ptest runner hangs forever.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-30 23:54:17 -07:00
Wang Mingyu
fac6357f60
pure-ftpd: upgrade 1.0.51 -> 1.0.52
nostrip.patch
refreshed for 1.0.52

License-Update: Copyright year updated to 2024

Changelog:
==========
 - The QUIT command is now accepted during a transfer.
 - The server can be built with --with-minimal again.
 - Fixed an out of bounds read in the MLSD command.
 - Larger mmap()ed pages are used on aarch64.
 - Improved compatibility with HPUX
 - Improved OpenSSL API compatibility
 - Improved compatibility with OpenWall Linux
 - Improved compatibility with Netfilter

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-30 07:34:23 -07:00
Khem Raj
f9c4fa94fd
python3-scapy: Upgrade to 2.6.0 release
Switch to PEP-517 build backend

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-29 14:00:32 -07:00
Yi Zhao
d91297efee
libnetfilter-conntrack: upgrade 1.0.9 -> 1.1.0
* Drop backport patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-29 10:01:08 -07:00
Yi Zhao
4c3e3638b9
lksctp-tools: upgrade 1.0.20 -> 1.0.21
ChangeLog:
https://github.com/sctp/lksctp-tools/blob/v1.0.21/ChangeLog

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-29 10:01:08 -07:00
Yi Zhao
620aab7587
tcpslice: upgrade 1.7 -> 1.8
ChangeLog:
https://github.com/the-tcpdump-group/tcpslice/blob/tcpslice-1.8/CHANGES

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-23 09:47:35 -07:00
Yi Zhao
162039c327
lksctp-tools: upgrade 1.0.19 -> 1.0.20
ChangeLog:
https://github.com/sctp/lksctp-tools/blob/v1.0.20/ChangeLog

Drop redundant variables LK_REL, SOLIBVERSION and SOLIBMAJORVERSION in
recipe.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-23 09:47:35 -07:00
Yoann Congal
22677f96c2
non-repro-meta-networking: update known non-reproducible list
Remove packages seen reproducible in the last 3 completed tests:
https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/44/steps/28/logs/stdio
https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/43/steps/28/logs/stdio
https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/41/steps/28/logs/stdio

Add babeld & babeld-dbg from:
https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/44/steps/28/logs/stdio

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-23 09:47:34 -07:00
Wang Mingyu
6f17bc0c5d
traceroute: upgrade 2.1.5 -> 2.1.6
Changelog:
- Let getaddrinfo(3) select the default IPv4 or IPv6 protocol version
  when it is not explicitly specified on the command line

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-09-18 21:03:17 -07:00