Commit Graph

2531 Commits

Author SHA1 Message Date
Adrian
43077d8321 networkmanager: add missing readline depends
Introduce PACKAGECONFIG[nmcli] to make building the nmcli utility which
depends on GPLv3 licensed readline library optional.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-27 10:21:12 -08:00
Nicolas Jeker
62ab2ad252 networkmanager: Add Wireless Extensions to PACKAGECONFIG[wifi]
Linux Wireless Extensions (Wext) support is enabled per default in
NetworkManager. Having Wext enabled without enabling WiFi support, too,
doesn't make much sense. Therefore, instead of creating a separate
PACKAGECONFIG flag, 'wext' was added to the already existing 'wifi'
flag.

Signed-off-by: Nicolas Jeker <n.jeker@gmx.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-27 10:20:43 -08:00
Mario Schuknecht
55c94cb319 dnsmasq: Fix systemd service
Systemd service file option 'ExecStopPre' is warned and ignored by
systemd. By replacing 'ExecStopPre' with 'ExecStop', the intended
behavior is realized. The 'ExecStop' commands are executed one after the
other.

Signed-off-by: Mario Schuknecht <mario.schuknecht@dresearch-fe.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-25 14:58:54 -08:00
Adrian Freihofer
e6ab1ec84b firewalld: upgrade 0.9.2 -> 0.9.3
Fix new dependencies to nftables-python. Firewalld has been changed to
use python bindings instead of calling the nftables cli utility.

(Has this firewalld recipe been used with firewalld's default
configuration which defaults to nftables backend?)

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-25 14:58:54 -08:00
Adrian Freihofer
b7f83ca2f7 nftables: upgrade 0.9.7 -> 0.9.8
Added missing RDEPENDS to the libnft library from nftables-python to
libnftable.so.1 which is loaded dynamically by LibraryLoader into
python.

Added json to default PACKAGECONFIG which is probably used as well when
compiled with python support. For example firewalld crashes at runtime
if nftables is compiled without json support.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-25 14:58:54 -08:00
zangrc
fd14cf84cd python3-networkmanager: upgrade 2.1 -> 2.2
-License-Update: Copyright year updated to 2021.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-25 14:34:06 -08:00
zangrc
e07f675fd7 libnftnl: upgrade 1.1.8 -> 1.1.9
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-25 14:34:06 -08:00
Andreas Müller
d57d6ca4bc networkmanager: upgrade 1.22.14 -> 1.28.0
* Build tested on aarch64 glibc/musl
* 0003-Fix-build-with-musl-for-n-dhcp4.patch has to go. Grepped nm code for
  seed48_r / mrand48_r => no findings
* Since this is a huge version bump no detaile release notes are provided here
* Have tried to move to meson build few months ago but it turned into huge
  efforts and ended without success. Maybe situation changed but let's postpone
  for now

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 17:50:42 -08:00
Diego Santa Cruz
e58e07b010 net-snmp: control smux via PACKAGECONFIG
Support for smux is always enabled by the recipe, but it can be a
security risk since it makes the snmpd daemon listen on TCP port 199.

This makes it contrallable via PACKAGECONFIG, so that it can be easily
disabled from the distro or local config. The mechanism makes it easy
to add control for other MIB modules via PACKAGECONFIG later if need
be.

For compatibility smux is added to the default PACKAGECONFIG, so there
is no change in the default build configuration.

Signed-off-by: Diego Santa Cruz <Diego.SantaCruz@spinetix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Kai Kang
e31d5970cb blueman: refresh patch
Module 'time' had been imported in Functions.py by upstream, so not
import in 0002-fix-fail-to-enable-bluetooth.patch and update accordingly.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 20:29:45 -08:00
changqing.li@windriver.com
5450c958bf celt051: update SRC_URI
original SRC_URI is not valid now, offical CELT repository
moved to gitlab

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 09:12:04 -08:00
Wang Mingyu
33086407b1 dovecot: upgrade 2.2.36.4 -> 2.3.13
0001-doveadm-Fix-parallel-build.patch
removed since it is included in 2.3.13

refresh 0001-configure.ac-convert-AC_TRY_RUN-to-AC_TRY_LINK-state.patch

add 0001-not-check-pandoc.patch to not check pandoc of configure

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 22:38:29 -08:00
Khem Raj
e50c285e41 packagegroup-meta-networking: Add ipset
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Armin Kuster
6312f419dd ipset: add recipe
This is needed for login-shield pkg in meta-security

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
Armin Kuster
b2d9c69405 wireshark: Several securtiy fixes
Source: Wireshark.org
MR: 106181, 106696, 107655, 107673, 107682
Type: Security Fix
Disposition: Backport from wireshark.org
ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a
Description:

Bugfix only update including these cves:
3.2.8
CVE-2020-26575
CVE-2020-28030

3.2.9
CVE-2020-26418
CVE-2020-26421
CVE-2020-26420

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-13 10:22:23 -08:00
Zheng Ruoqin
c184746be9 mdns: upgrade 1096.40.7 -> 1310.40.42
Refresh the following patch:
0001-mdns-include-stddef.h-for-NULL.patch

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
Zheng Ruoqin
7f3ccef7b4 igmpproxy: upgrade 0.2.1 -> 0.3
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
Zheng Ruoqin
3d89340118 firewalld: upgrade 0.9.1 -> 0.9.2
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
Zheng Ruoqin
3055f59683 cifs-utils: upgrade 6.11 -> 6.12
0001-Bugfix-Modify-the-dir-of-install-exec-hook-and.patch
Removed since this is included in 6.12.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
zangrc
b8e884d638 rdma-core: upgrade 32.0 -> 33.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-07 22:57:45 -08:00
Andreas Müller
93d149afc2 blueman: upgrade 2.1.3 -> 2.1.4
Security release, see GHSA-jpc9-mgw6-2xwx/CVE-2020-15238 [1]

Changes
    Force cython to use python language version 3
    Do not use exitcode 1 when we expect to fail
    Mark more strings translatable (@cwendling)
Bugs fixed
    Unstranslated strings
    Searching (with Ctrl+F in manager device list) did not work
    Default PIN lookup
    Fix device removal handling (@Yannik)
    Only use LaunchContext when we have proper event time

[1] https://github.com/blueman-project/blueman/security/advisories/GHSA-jpc9-mgw6-2xwx

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-06 14:20:52 -08:00
zangrc
e12d9290e3 wolfssl: upgrade 4.5.0 -> 4.6.0
0001-Make-ByteReverseWords-available-for-big-and-little-e.patch
Removed since this is included in 4.6.0

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:26 -08:00
Yi Zhao
d97b95466d tcpdump: add UPSTREAM_CHECK_REGEX
Add UPSTREAM_CHECK_REGEX to skip checking testing version (e.g. 4.99.0).

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:25 -08:00
He Zhe
00958a182e ebtables: Add symbol link /sbin/ebtables
The original /sbin/ebtables has been moved to /usr/sbin/ebtables-legacy.
But the old path is still used by some other software libvirt.

libvirtd[809]: direct firewall backend requested,
but /sbin/ebtables is not available: No such file or directory

As stated in the related change in ebtable git repo:
The new -legacy binary has no problem if called via a symlink with the
'ebtables' name, so users can still name this binary with whatever name.

So we add a symbol link from /usr/sbin/ebtables-legacy to /sbin/ebtables.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:25 -08:00
Yi Zhao
752bb30c39 ebtables: do not install /etc/ethertypes
Refer to Debian, patch the Makefile to prevent /etc/ethertypes
installation instead of removing it in do_install_append.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:25 -08:00
Yi Zhao
5816f414af ebtables: remove upstream ebtables-legacy-save
Remove the upstream ebtables-legacy-save before we install the local
ones. And install it to ${sbindir} rather than ${base_sbindir}.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:15:59 -08:00
Yi Zhao
cac0daacd1 ebtables: add missing file ebtables.common
The ebtables.common is required by ebtables.service. Add it back.

Fixes:
systemd[660]: ebtables.service: Failed to locate executable /usr/sbin/ebtables.common: No such file or directory
systemd[660]: ebtables.service: Failed at step EXEC spawning /usr/sbin/ebtables.common: No such file or directory

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-04 14:48:29 -08:00
zangrc
7b9045ee87 python3-ldap: upgrade 3.2.0 -> 3.3.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Acked-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-04 14:48:29 -08:00
zhengruoqin
18a57eb1d7 opensaf: upgrade 5.20.08 -> 5.20.11
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zhengruoqin
353aac0c7f netplan: upgrade 0.100 -> 0.101
Refresh the following patch:
0001-dbus-Remove-unused-variabes.patch
0002-Makefile-Exclude-.h-files-from-target-rule.patch

Add 0001-don-t-fail-if-GLOB_BRACE-is-not-defined.patch to solve the
compilation errors on musl.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zhengruoqin
1d112d988e bridge-utils: upgrade 1.6 -> 1.7
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zangrc
667a7b1027 libtevent: upgrade 0.10.1 -> 0.10.2
Refresh the following patch:
avoid-attr-unless-wanted.patch
options-0.10.0.patch

0001-waf-add-support-of-cross_compile.patch
Removed since this is included in 0.10.2

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zangrc
d8426e0637 libtalloc: upgrade 2.3.0 -> 2.3.1
0001-waf-add-support-of-cross_compile.patch
Removed since this is included in 2.3.1.

Refresh the following patch:
avoid-attr-unless-wanted.patch
options-2.2.0.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
Mingli Yu
a921faaee4 tftp-hpa: change the ALTERNATIVE_PRIORITY
Both inetutils-tftp and tftp-hpa provide the tftp command and
the ALTERNATIVE_PRIORITY of inetutils-tftp is 79 until now.

Increase the ALTERNATIVE_PRIORITY of tftp-hpa to 100 to guarantee
the tftp command provided by tftp-hpa when both of the packages
installed.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 19:34:49 -08:00
zangrc
46e30569e3 iscsi-initiator-utils: upgrade 2.1.2 -> 2.1.3
0001-libopeniscsiusr-Compare-with-max-int-instead-of-max-.patch
Removed since this is included in 2.1.3

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 19:34:49 -08:00
zangrc
b1120e126e ebtables: upgrade 2.0.10-4 -> 2.0.11
Refresh the following patch:
0010-Adjust-header-include-sequence.patch

Referring to Fedora style, ebtables-legacy-save and ebtables.service are retained.

The upstream address has been modified.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 19:34:49 -08:00
Mingli Yu
049f0b3e83 traceroute: change the ALTERNATIVE_PRIORITY
Both inetutils-traceroute and traceroute provide the traceroute
command and the ALTERNATIVE_PRIORITY of inetutils-traceroute is
79 until now.

Increase the ALTERNATIVE_PRIORITY of traceroute to 100 to guarantee
the traceroute command provided by traceroute when both of the
packages installed.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-23 22:47:02 -08:00
Khem Raj
a82ae84619 cyrus-sasl: Disable ntlm plugin by default
ntlm requires md4 algorith defines which is now disabled in openssl
recipe by default also see [1]

[1] https://github.com/cyrusimap/cyrus-sasl/issues/632

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-23 22:47:02 -08:00
zangrc
4e5e5479c0 vblade: upgrade 24 -> 25
gcc-10.patch
Removed since this is included in 25.

Refresh the following patch:
cross.patch
makefile-add-ldflags.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-18 08:23:14 -08:00
zangrc
4a3e3f2d2d openipmi: upgrade 2.0.29 -> 2.0.30
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-18 08:23:14 -08:00
Alexander Vickberg
f431022415 mbedtls: upgrade to 2.25.0
Deleted build fix patch. This is already applied in this release.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-17 09:12:27 -08:00
Yi Zhao
af6f068632 ebtables: do not install /etc/ethertypes
The /etc/ethertypes is provided by netbase since 6.0[1].
Do not instal the file in ebtables, otherwise there would be a conflict:
Error: Transaction test error:
  file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7_64

[1] 316680c6a2

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-16 12:03:57 -08:00
Zheng Ruoqin
baee1ebeaf samba: CVE-2020-14383 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Zheng Ruoqin
1d44b4c03d samba: CVE-2020-14318 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Khem Raj
62c2f4a48a networkmanager: Fix reallocarray check in meson and configure
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-12 16:41:59 -08:00
Alexander Vickberg
6f1139a717 mbedtls: upgrade to 2.24.0
Download archives are no longer updated so fetch from Github. Add build
fix from upstream. The file LICENSE now contains the full Apache 2.0
license text.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-09 10:14:57 -08:00
Li Zhou
885149082b ptpd: Solve memory leak for function NTPDCrequest
Solve the memory leak in function NTPDCrequest detected by valgrind tool.

Memory leak log example:
==619== 21 bytes in 1 blocks are still reachable in loss record 1 of 3
==619==    at 0x4A09DB0: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==619==    by 0x43512E: NTPDCrequest (ntpdcontrol.c:255)
==619==    by 0x43512E: NTPDCquery.isra.1 (ntpdcontrol.c:683)
==619==    by 0x4359EE: ntpdInControl (ntpdcontrol.c:807)
==619==    by 0x4364F5: ntpServiceUpdate (timingdomain.c:622)
==619==    by 0x436935: timingDomainUpdate (timingdomain.c:756)
==619==    by 0x4334A7: protocol (protocol.c:263)
==619==    by 0x402BAE: main (ptpd.c:131)

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-29 22:02:14 -08:00
Ricardo Salveti
666a8b94a3 wireguard-module: upgrade 1.0.20200908 -> 1.0.20201112
Relevant changes:
- fe40226 version: bump
- d0bf51b qemu: bump default testing version
- ce8faa3 compat: SYM_FUNC_{START,END} were backported to 5.4
- da5646f qemu: drop build support for rhel 8.2
- 99e954f netns: check that route_me_harder packets use the right sk
- 25320ac noise: take lock when removing handshake entry from table

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 22:28:31 -08:00
zangrc
9ef0c70871 netplan: upgrade 0.99 -> 0.100
0001-src-parse.c-Initialize-key-to-NULL.patch
Removed since this is included in 0.100.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 14:21:57 -08:00
zangrc
2c564df8bf weechat: upgrade 2.9 -> 3.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
zangrc
2bbb303b72 snort: upgrade 2.9.16.1 -> 2.9.17
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
zangrc
bb64362db7 nngpp: upgrade 1.2.4 -> 1.3.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
zangrc
3e05b98d08 nghttp2: upgrade 2.41.0 -> 2.42.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
viatsk
0192d60708 tcpdump: Patch for CVE-2020-8037
Signed-off-by: Stacy Gaikovaia <stacy.gaikovaia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-24 21:19:34 -08:00
Khem Raj
d9d8713860 chrony: Upgrade to 4.0
ChangeLog is here [1]

Do not install /var/log as it conflicts with basefiles package

Collected errors:
 * check_data_file_clashes: Package chrony wants to install file /var/log
        But that file is already provided by package  * base-files

Remove CVE patch since its upstream

Forward port arm_eabi.patch patch

Make builds reproducible

[1] https://chrony.tuxfamily.org/news.html

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 22:51:38 -08:00
Beni
70662b5b7e unbound: upgrade to 1.12.0
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:34 -08:00
zangrc
9a77c8d8f0 strongswan: upgrade 5.8.4 -> 5.9.1
0001-Remove-obsolete-setting-regarding-the-Standard-Outpu.patch
Removed since this is included in 5.9.1

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:33 -08:00
zangrc
f682696a05 rdma-core: upgrade 31.1 -> 32.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:33 -08:00
Mingli Yu
bcfd6f7a4b traceroute: set VPATH
Fixes:
make[1]: *** No rule to make target '-lm', needed by 'traceroute'.  Stop.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-18 08:25:43 -08:00
Khem Raj
59f817bbe3 openipmi: Inherit python3targetconfig
Fixes

configure: error:
  Could not link test program to Python. Maybe the main Python library has been
  installed in some non-standard library path. If so, pass it to configure,
  via the LIBS environment variable.
  Example: ./configure LIBS="-L/usr/non-standard-path/python/lib"

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-17 15:04:43 -08:00
Khem Raj
f7a175c5b4 opensaf: Fix build on 32bit arches with 64bit time_t e.g. RISCV-32
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 13:27:46 -08:00
Khem Raj
05d7f36548 ntopng: Link with libatomic on rv32
Fixes build errors e.g.
include/c++/10.2.0/bits/atomic_base.h:426: undefined reference to `__atomic_load_8'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 12:25:54 -08:00
Khem Raj
02c21a0342 spice: Add leading whitespace for append operator
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 12:25:53 -08:00
Nick Rosbrook
4cdd651960 strongswan: remove ldap from default PACKAGECONFIG
Since ldap is not a standard DISTRO_FEATURE, leave it disabled by default.

Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-10 08:15:56 -08:00
Nick Rosbrook
b570072902 strongswan: do not use deprecated stroke and starter by default
The swanctl and vici configuration of strongswan is preferred, as the stroke
plugin used with starter is deprecated. As a reasonable default, add swanctl
to PACKAGECONFIG by default, and remove stroke. When systemd is in DISTRO_FEATURES,
add systemd-charon to PACKAGECONFIG, and add charon when systemd is not in
DISTRO_FEATURES.

While here, make sure strongswan-starter.service is only installed when
charon is enabled. The current unconditional installation of
strongswan-starter.service can break systems which install strongswan.service
for use with swanctl.

Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-10 08:15:56 -08:00
Mingli Yu
65751e16ac packagegroup-meta-networking.bb: add ntopng related recipes
Add ntopng related recipes and remove the deprecated ntop.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Mingli Yu
127e50b456 ntop: remove the recipe
The ntop project is inactive and there is no new version
since 2012 [1] and it has been replaced by ntopng.

[1] https://sourceforge.net/projects/ntop/files/ntop/Stable/

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Mingli Yu
f5b9e4ecd2 ntopng: add new recipe
ntopng is a web-based network traffic monitoring application
released under GPLv3. It is the new incarnation of the original
ntop written in 1998, and now revamped in terms of performance,
usability, and features.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Mingli Yu
3b6b36e32d libmaxminddb: add new recipe
The libmaxminddb library provides a C library for reading MaxMind
DB files, including the GeoIP2 databases from MaxMind.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Mingli Yu
1b37387c39 ndpi: add new recipe
nDPI is an open source LGPLv3 library for deep-packet inspection.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Zang Ruochen
f20a4ba04f openvpn: upgrade 2.4.9 -> 2.5.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:41:02 -08:00
Zang Ruochen
3866391da4 opensaf: upgrade 5.20.05 -> 5.20.08
0001-Add-configure-time-check-for-gettid-API.patch
Removed since this is included in 5.20.08

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:41:02 -08:00
Khem Raj
7a0117ec4e dovecot: Disable LTO
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:41:02 -08:00
Khem Raj
294e945309 traceroute: Fix build with LTO
Drop patch needed to build when S = B, we do not use this setting
anymore

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:40:57 -08:00
Khem Raj
7b31db8928 rdma-core: Upgrade to 31.1
Disable LTO, its uses ASM constructs for symbol versioning which are incompatible with LTO,
they should migrate to gcc-10's mechanism for symbol versioning which is
compatible with LTO

disable manpages, it needs pandoc to build

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 00:00:05 -08:00
Khem Raj
e1745fb68f lksctp-tools: Update to latest master
Drop the patches which are upstream now

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 00:00:05 -08:00
Nick Rosbrook
b6e1480592 strongswan: add some PACKAGECONFIG options for EAP
Add options for eap-identity and eap-mschapv2 plugins.

Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-06 21:26:27 -08:00
Khem Raj
8fbaa7e41c layer.conf: Add hardknott to LAYERSERIES_COMPAT
Thats codename for 3.3

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-04 12:43:55 -08:00
Khem Raj
a57f2a5e97 networkd-dispatcher: Upgrade to 2.1
Drop gitlab archives and use git fetcher directly instead

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:41:03 -08:00
Yi Zhao
dccecd1411 quagga: unify volatiles file name
Make the volatiles file name starts with digital.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Mark Jonas
2fe4cb5882 mbedtls: Fix typo in PACKAGECONFIG
Signed-off-by: Mark Jonas <toertel@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Ricardo Salveti
0500b364b2 wireguard-tools: upgrade 1.0.20200513 -> 1.0.20200827
Changelog:
- 7a321ce version: bump
- 91fbeb4 Revert "wg-quick: wait on process substitutions"
- 9a0d65e wg-quick: android: use iproute2 to bring up interface instead of ndc
- fbca033 version: bump
- 26683f6 wg-quick: wait on process substitutions
- 13fac76 ctype: use non-locale-specific ctype.h
- cf2bf09 pubkey: isblank is a subset of isspace
- b4a8a18 man: wg-quick: use syncconf instead of addconf for strip example
- a66219f systemd: add reload target to systemd unit
- eb4665e wincompat: fold random into genkey
- 197995d ipc: split into separate files per-platform

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Ricardo Salveti
446857e016 wireguard-module: upgrade 1.0.20200712 -> 1.0.20200908
Changelog:
- d97b575 version: bump
- 482d020 peerlookup: take lock before checking hash in replace operation
- dace9d0 compat: backport NLA policy macros
- a28032f netlink: consistently use NLA_POLICY_MIN_LEN()
- 515d544 netlink: consistently use NLA_POLICY_EXACT_LEN()
- 1a41e32 compat: backport kfree_sensitive and switch to it
- 90a9e82 compat: drop support for SUSE 15.1
- a567b4c version: bump
- 4213ef0 compat: add missing headers for ip_tunnel_parse_protocol
- 5a45add compat: ipv6_dst_lookup_flow was ported to rhel 7.9 beta
- 372427a compat: allow override of depmod basedir
- f04dae1 compat: rhel 8.3 beta removed nf_nat_core.h

Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Anatol Belski
b4d7b1ee42 chrony: Patch CVE-2020-14367
Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Zang Ruochen
f604ed19d2 nftables: upgrade 0.9.6 -> 0.9.7
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Zang Ruochen
917142fab5 radvd: upgrade 2.18 -> 2.19
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Zang Ruochen
b18b12e549 libnftnl: upgrade 1.1.7 -> 1.1.8
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:51 -08:00
Fagundes, Paulo
36f6580943 vnstat: add recipe
vnStat is a console-based network traffic monitor for Linux and BSD
that keeps a log of network traffic for the selected interface(s).

Signed-off-by: Paulo Fagundes <paulohefagundes@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-23 10:20:24 -07:00
Khem Raj
409032dcc5 iscsi-initiator-utils: Silence a clang warning on 64bit systems
This unbreaks the build with clang as well.

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-21 09:37:38 -07:00
Qi.Chen@windriver.com
bb460fb3cb freediameter: use /run instead of /var/run in systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-20 09:15:07 -07:00
Chen Qi
032e6879b5 openhpi: use /run instead of /var/run in systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-19 23:49:22 -07:00
Chen Qi
7a0d9990a6 open-isns: use /run instead of /var/run in systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-19 22:30:51 -07:00
Pierre-Jean Texier
b76712700c stunnel: upgrade 5.56 -> 5.57
License-Update: copyright years updated.

This is a bug fix release:

 - X.509 v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificaes.
 - Fixed a tiny memory leak in configuration file reload error handling (thx to Richard Könning).
 - Merged Debian 05-typos.patch (thx to Peter Pentchev).
 - Merged with minor changes Debian 06-hup-separate.patch (thx to Peter Pentchev).
 - Merged Debian 07-imap-capabilities.patch (thx to Ansgar).
 - Merged Debian 08-addrconfig-workaround.patch (thx to Peter Pentchev).
 - Fixed tests on the WSL2 platform.

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-19 22:23:13 -07:00
Qi.Chen@windriver.com
5a5f7ec345 cyrus-sasl: use /run instead of /var/run for systemd service file
/var/run has been deprecated by systemd, so use /run instead,
as suggested by systemd.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-16 09:21:54 -07:00
Mario Schuknecht
84681a31cf wireguard-tools: Fix systemd service installation
Install systemd configuration file wg-quick@.service into the proper folder.
Use 'systemd_system_unitdir' instead of 'systemd_unitdir' as the installation
path.

Signed-off-by: Mario Schuknecht <mario.schuknecht@dresearch-fe.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-15 11:42:15 -07:00
Khem Raj
cd9eaf4318 meta-openembedded: Add gatesgarth to LAYERSERIES_COMPAT
Remove older releases from COMPAT

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-15 11:42:15 -07:00
Yi Zhao
17bc2a137f networkmanager: remove PACKAGECONFIG[dhclient]
The dhcp-client has been removed from oe-core and the current
networkmanager does not support dhcpcd >= 9.0 (See bug report:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/410)

Remove the PACKAGECONFIG[dhclient] and pass --with-dhclient/dhcpcd=no
explicitly to EXTRA_OECONF. Otherwise it will search the host path when
configure.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-14 08:39:34 -07:00
Yi Zhao
bebdea8530 samba: upgrade 4.10.17 -> 4.10.18
This is security release in order to address CVE-2020-1472
(Unauthenticated domain takeover via netlogon ("ZeroLogon")).

See: https://www.samba.org/samba/history/samba-4.10.18.html

Also remove 3 backported patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-14 08:39:34 -07:00
Zang Ruochen
47821db8ed wireshark: upgrade 3.2.6 -> 3.2.7
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-13 22:33:05 -07:00
Zang Ruochen
5bd81144e3 mtr: upgrade 0.93 -> 0.94
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-13 22:33:05 -07:00
Zang Ruochen
2519ac6932 firewalld: upgrade 0.9.0 -> 0.9.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-13 22:33:05 -07:00
Martin Jansa
cc512cd9e1 utouch-*, ifenslave, iozone3, ttf-honkyfonts, python3-smbus: don't use trailing slash in S
* see oe-core base.bbclass changes from:
  https://lists.openembedded.org/g/openembedded-core/message/143159
  https://lists.openembedded.org/g/openembedded-core/message/143161

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-09 17:22:31 -07:00
Alexander Vickberg
35459c1d25 wolfssl: upgrade 4.4.0 -> 4.5.0
Add patch from upstream which fixes building on big endian.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-06 08:45:24 -07:00
Winfried Dobbe
92524727d4 firewalld: Add missing rdep on nftables-python
Fixes Issue #280

Signed-off-by: Winfried Dobbe <winfried.dobbe@xmsnet.nl>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-26 07:20:26 -07:00
Zang Ruochen
683066f9e7 arno-iptables-firewall: upgrade 2.1.0 -> 2.1.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-25 08:41:40 -07:00
Romain Naour
25b91b3d2b libiec61850: add recipe for libiec61850
IEC 61850 is an international standard for communication systems in
Substation Automation Systems (SAS) and management of Decentralized
Energy Resources (DER). It is seen as one of the communication
standards of the emerging Smart Grid.

Add two upstream patch fixing build issues with musl libc.

Enable the libiec61850 python binding (pyiec61850) that require a fix
to find the correct PYTHON_SITE_DIR path while cross-compiling.

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-24 12:42:04 -07:00
Robert Yang
ac313b6380 crda: rdepends on wireless-regdb-static
The wireless-regdb has been moved to oe-core. According the commit
message:

wireless-regdb-static should be used with kernel >= 4.15.
wireless-regdb can be used with older kernels and is mostly
irrelevant here, but keeping it in meta-networking would
create needless recipe duplication.

it should replace runtime dependency wireless-regdb with
wireless-regdb-static.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-24 12:42:04 -07:00
Todd Cunningham
3c35fe419d firewalld: upgrade 0.8.3 -> 0.9.0
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-23 19:45:53 -07:00
Vladimir Zapolskiy
08801a358a cifs-utils: remove explicitly set PV variable
There is no need to set and then tediously modify PV variable on every
upgrade, what's worse it may happen that the PV is not modified like it
happened on the recent upgrade from cifs-utils-6.10 to cifs-utils-6.11.

Signed-off-by: Vladimir Zapolskiy <vladimir@tuxera.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-23 19:45:53 -07:00
Mingli Yu
e61b73e6d3 strongswan: Remove obsolete setting regarding the Standard Output
The Standard output type "syslog" is obsolete, causing a warning since systemd
version 246 [1].

Please consider using "journal" or "journal+console"

[1] https://github.com/systemd/systemd/blob/master/NEWS#L202

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-23 19:45:53 -07:00
Mingli Yu
592d9be3f6 ippool: Remove obsolete setting in service file
The Standard error type "syslog" is obsolete, causing a warning since systemd
version 246 [1].

Please consider using "journal" or "journal+console"

[1] https://github.com/systemd/systemd/blob/master/NEWS#L202

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-23 19:45:53 -07:00
Martin Jansa
bdb964c907 ssmtp: adjust u-a
* it's newaliases not newalias in sbindir
* drop u-a for man pages, because only ssmtp.8 was created which shouldn't
  conflict with esmpt

In my build I don't have mailq, sendmail, newaliases as man pages, but binaries in sbindir (and the sbinbinary is called newaliases, not newalias)

tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/share
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/share/man
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/share/man/man8
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/share/man/man8/ssmtp.8
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/sbin
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/sbin/mailq
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/sbin/sendmail
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/sbin/newaliases
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/sbin/ssmtp
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/etc
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/etc/ssmtp
tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/etc/ssmtp/revaliases

this added u-a is causing following warnings:

WARNING: ssmtp-2.64-r0 do_package: ssmtp: alternative target (/usr/share/man/man1/mailq.1 or /usr/share/man/man1/mailq.1.ssmtp) does not exist, skipping...
WARNING: ssmtp-2.64-r0 do_package: ssmtp: alternative target (/usr/share/man/man1/newaliases.1 or /usr/share/man/man1/newaliases.1.ssmtp) does not exist, skipping...
WARNING: ssmtp-2.64-r0 do_package: ssmtp: alternative target (/usr/share/man/man1/sendmail.1 or /usr/share/man/man1/sendmail.1.ssmtp) does not exist, skipping...
WARNING: ssmtp-2.64-r0 do_package: ssmtp: alternative target (/usr/sbin/newalias or /usr/sbin/newalias.ssmtp) does not exist, skipping...
WARNING: ssmtp-2.64-r0 do_package: ssmtp: NOT adding alternative provide /usr/share/man/man1/mailq.1: /usr/share/man/man1/mailq.1.ssmtp does not exist
WARNING: ssmtp-2.64-r0 do_package: ssmtp: NOT adding alternative provide /usr/share/man/man1/newaliases.1: /usr/share/man/man1/newaliases.1.ssmtp does not exist
WARNING: ssmtp-2.64-r0 do_package: ssmtp: NOT adding alternative provide /usr/share/man/man1/sendmail.1: /usr/share/man/man1/sendmail.1.ssmtp does not exist
WARNING: ssmtp-2.64-r0 do_package: ssmtp: NOT adding alternative provide /usr/sbin/newalias: /usr/sbin/newalias.ssmtp does not exist
WARNING: ssmtp-2.64-r0 do_package: ssmtp: alt_link == alt_target: /usr/share/man/man1/mailq.1 == /usr/share/man/man1/mailq.1
WARNING: ssmtp-2.64-r0 do_package: ssmtp: alt_link == alt_target: /usr/share/man/man1/newaliases.1 == /usr/share/man/man1/newaliases.1
WARNING: ssmtp-2.64-r0 do_package: ssmtp: alt_link == alt_target: /usr/share/man/man1/sendmail.1 == /usr/share/man/man1/sendmail.1
WARNING: ssmtp-2.64-r0 do_package: ssmtp: alt_link == alt_target: /usr/sbin/newalias == /usr/sbin/newalias

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-18 06:07:50 -07:00
Martin Jansa
e48aabf951 netkit-rsh: inherit update-alternatives
* fixes:
  netkit-rsh-0.17-r0 do_package_qa: QA Issue: netkit-rsh: recipe defines ALTERNATIVE_netkit-rsh-client but doesn't inherit update-alternatives. This might fail during do_rootfs later! [missing-update-alternatives]
  netkit-rsh-0.17-r0 do_package_qa: QA Issue: netkit-rsh: recipe defines ALTERNATIVE_netkit-rsh-server but doesn't inherit update-alternatives. This might fail during do_rootfs later! [missing-update-alternatives]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-18 06:07:50 -07:00
Zang Ruochen
3d51223f53 znc: upgrade 1.8.1 -> 1.8.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-17 08:56:33 -07:00
Zang Ruochen
535b9088dc libdnet: upgrade 1.12 -> 1.14
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-10 21:20:23 -07:00
Zang Ruochen
59e2df5366 cifs-utils: upgrade 6.10 -> 6.11
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-10 21:20:23 -07:00
Mikko Rapeli
d12ea80ef5 mdns: add BSD-3-Clause to LICENSE
The LICENSE file in source tree says:

The majority of the source code in the mDNSResponder project is licensed
under the terms of the Apache License, Version 2.0, available from:
   <http://www.apache.org/licenses/LICENSE-2.0>

To accommodate license compatibility with the widest possible range
of client code licenses, the shared library code, which is linked
at runtime into the same address space as the client using it, is
licensed under the terms of the "Three-Clause BSD License".

The Linux Name Service Switch code, contributed by National ICT
Australia Ltd (NICTA) is licensed under the terms of the NICTA Public
Software Licence (which is substantially similar to the "Three-Clause
BSD License", with some additional language pertaining to Australian law).

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-08 11:53:53 -07:00
Mikko Rapeli
6c14299d09 mdns: set CVE_PRODUCT to "apple:mdnsresponder"
This is used in CVEs like
https://nvd.nist.gov/vuln/detail/CVE-2015-7987

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-08 11:53:53 -07:00
Mikko Rapeli
21afab4609 mdns: update to version 1096.40.7
Refresh Makefile patch (build.patch) to properly cross compile
mdns. Then try refresh patches which still apply. Following patches
don't apply anymore due to refactoring done on mdns side so thus
dropping patches:

 * 0005-Handle-noisy-netlink-sockets.patch
 * 0007-Indicate-loopback-interface-to-mDNS-core.patch

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-08 11:53:53 -07:00
Khem Raj
b7f2a66d62 packagegroup-meta-networking: Remove dhcpcd and kea
They moved out from meta-networking into core

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Armin Kuster
45ccf2f43f dhcpcd: pkg moved to core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Armin Kuster
89adc5d3ec kea: pkg moved to core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Leon Anavi
afe3b35c84 fping: Upgrade 4.4 -> 5.0
Upgrade to release 5.0:

- In non-quiet loop and count mode, a line is printed for every
  lost packet
- The returned size in bytes now always excludes the IP header, so
  if before it reported '84 bytes' e.g. when using 'fping -l', now
  it reports '64 bytes'. This is to make the reported size
  consistent with ping(8) from iputils and also with fping when
  pinging a IPv6 host (which never included the IPv6 header size).
- The number of sent pings is only counted when the pings are
  received or have timed out, ensuring that the loss ratio will be
  always correct. This makes it possible, for example, to use loop
  mode (-l) with interval statistics (-Q) and a timeout larger
  than period, without having the issue that initially some pings
  would be reported as missing
- Improved precision of measurements from 10us to 1us
- The reported size of received packets is now always correct on
  Linux even for packets > 4096 bytes
- Travis CI automated testing now also macos testing and additional
  ubuntu distributions

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Leon Anavi
9701b83409 mosquitto: Upgrade 1.6.11 -> 1.6.12
Upgrade to release 1.6.12:

Security:
- In some circumstances, Mosquitto could leak memory when handling
  PUBLISH messages. This is limited to incoming QoS 2 messages,
  and is related to the combination of the broker having
  persistence enabled, a clean session=false client, which was
  connected prior to the broker restarting, then has reconnected
  and has now sent messages at a sufficiently high rate that the
  incoming queue at the broker has filled up and hence messages
  are being dropped. This is more likely to have an effect where
  max_queued_messages is a small value. This has now been fixed.

Broker:
- Build warning fixes when building with WITH_BRIDGE=no and
  WITH_TLS=no.

Clients:
- All clients exit with an error exit code on CONNACK failure.
- Don't busy loop with `mosquitto_pub -l` on a slow connection.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Leon Anavi
b127e56bc8 znc: Upgrade 1.7.5 -> 1.8.1
Upgrade to release 1.8.1:

- Bug fix: authenticated users can trigger an application crash
  (with a NULL pointer dereference) if echo-message is not enabled
  and there is no network.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Khem Raj
43bd735121 netkit-rwho: Convert to ontarget postinst
Starting the service is something to be done when its booted on target

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
6cfa5d0ed8 netkit-ftp: Use update-alternatives for ftp
So it can live with other providers

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
915844297a netkit-rwho: Use update-alternatives for tftp
So it can live along other providers

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
916b6f15ef ssmtp: Use update alternatives for conflicts with esmtp
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
ab2f8b5051 netkit-rpc: Use update alternatives for rpcinfo
This helps it live along rpcbind

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
7df48b8014 quagga,pimd: Use update-alternatives for pimd
pimd is provided by both quagga and pimd, prefer quagga over pimd when
both are in image

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
0b15dce76a autossh: Depend on ssh instead of hardcoding openssh
This helps it to use dropbear

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
40ef9eea78 bearssl: fix GNU_HASH link error
Fixes
No GNU_HASH in the ELF binary /mnt/b/yoe/master/build/tmp/work/cortexa57-yoe-linux/bearssl/0.6-r0/packages-split/bearssl/usr/lib/libbearssl.so.6.0.0, didn't pass LDFLAGS? [ldflag
s]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
9b23aab0dd packagegroup-meta-networking: Add new packages
Reorganize to have one package per line

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
17b8039078 networkmanager: Depend on dhcpcd
dhcp-client is being removed from oe-core

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Ovidiu Panait
dbf619019d net-snmp: upgrade 5.8 -> 5.9
Upgrade net-snmp 5.8 -> 5.9:
* refresh patches
* drop backports:
  5f881d3bf2
  6e1329bde8
  abdcb6af8d
  21260fdd60

Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-31 13:04:43 -07:00
Jugurtha BELKALEM
a100cce1fc recipe/ettercap : new ettercap recipe
Ettercap is a comprehensive suite for man in the
middle attacks. It features sniffing of live
connections, content filtering on the fly and
many other interesting tricks. It supports active
and passive dissection of many protocols and includes
many features for network and host analysis.

To test ettercap :
$ ettercap -T -i eth0 # Text mode
or
$ ettercap -C -i eth0 # console based mode

Signed-off-by: Jugurtha BELKALEM <jugurtha.belkalem@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-28 17:16:57 -07:00
Andrej Valek
c449e8a8b7 squid: upgrade 4.12 -> 4.13
Changes are found at: http://www.squid-cache.org/Versions/v4/changesets

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-25 11:24:58 -07:00
Jack Mitchell
af306b7f7f meta-networking: dhcpcd: backport ALIGN compile error fix
Fails to build on an aarch64 system with ipv6 disabled. This backported
patch fixes it.

Signed-off-by: Jack Mitchell <ml@embed.me.uk>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-25 10:39:27 -07:00
Alejandro Enedino Hernandez Samaniego
8f5ed264da weechat: Upgrade to 2.9
- Add python3 rdepends on PACKAGECONFIG

Signed-off-by: Alejandro Hernandez Samaniego <alejandro@enedino.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-23 22:51:20 -07:00
Khem Raj
63ebd02d22 wireguard-module: Exlude from world builds
Moving beyond kernel 5.6, this kmod is not needed and core has moved the
reference kernel to 5.8 for reference machines

wireguard-tools should RDEPEND but not DEPEND

Remove it from meta-networking packagegroup as well

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 16:35:25 -07:00
Jens Rehsack
c79884d9b5 bearssl: fix missing install
Default Makefile of bearssl doesn't have a make target which hadn't
enough attraction when creating the recipe.

Add missing functionality.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 16:35:25 -07:00
Zang Ruochen
88df26ab74 wireshark: upgrade 3.2.5 -> 3.2.6
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 10:16:29 -07:00
Zang Ruochen
903a808600 lftp: upgrade 4.9.1 -> 4.9.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 10:16:29 -07:00
Jens Rehsack
7527b1425f bearssl: add new recipe
Add recipe for BearSSL - an an implementation of the SSL/TLS protocol with
the approach of:
* Be correct and secure.
* Be small
* Be highly portable
* Be feature-rich and extensible

See https://bearssl.org for more details.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-19 14:02:48 -07:00
Colin McAllister
02f2eb8d50 autossh: Created recipe
Added recipe for autossh tool.

Signed-off-by: Colin McAllister <colinmca242@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17 17:59:34 -07:00
Leon Anavi
7c6bf8926c mosquitto: Upgrade 1.6.10 -> 1.6.11
Upgrade to release 1.6.11:

Broker:
- Fix usage message only mentioning v3.1.1.
- Fix broker refusing to start if only websockets listeners were
  defined.
- Change systemd unit files to create /var/log/mosquitto before
  starting.
- Don't quit with an error if opening the log file isn't possible.
- Fix bridge topic remapping when using "" as the topic.
- Fix messages being queued for disconnected bridges when clean
  start was set to true.
- Fix `autosave_interval` not being triggered by messages being
  delivered.
- Fix websockets clients sometimes not being disconnected promptly.
- Fix "slow" file based logging by switching to line based
  buffering.
- Log protocol error message where appropriate from a bad
  UNSUBSCRIBE, rather than the generic "socket error".
- Don't try to start DLT logging if DLT unavailable, to avoid a
  long delay when shutting down the broker.
- Fix potential memory leaks.
- Fix clients not receiving messages after a previous client with
  the same client ID and positive will delay interval quit.
- Fix overly broad HAVE_PTHREAD_CANCEL compile guard.

Client library:
- Improved documentation around connect callback return codes.
- Fix `mosquitto_publish*()` no longer returning
  `MOSQ_ERR_NO_CONN` when not connected.
- `mosquitto_loop_start()` now sets a thread name on Linux,
  FreeBSD, NetBSD, and OpenBSD.
- Fix `mosquitto_loop_stop()` not stopping on Windows.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17 12:26:41 -07:00
Khem Raj
545f6d0891 opensaf: Fix build with -fno-common
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17 12:26:41 -07:00
Slater, Joseph
98991b2e0f aoetool: make builds reproducible
Strip host path infomation out of binaries by not suppressing
default CFLAGS.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:37:48 -07:00
Khem Raj
4515a5556e iftop: Fix build with -fno-common
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00