summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* strongswan: Security Advisory - strongswan - CVE-2014-2338Yue Tao2014-05-092-0/+37
| | | | | | | | | | | | | IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass authentication by rekeying an IKE_SA during (1) initiation or (2) re-authentication, which triggers the IKE_SA state to be set to established. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2338 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* net-snmp-5.7.2: fix CVE-2014-2285yzhu12014-05-092-0/+27
| | | | | | | | | | | | | The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptrapd crash) via an empty community string in an SNMP trap, which triggers a NULL pointer dereference within the newSVpv function in Perl. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2285 Signed-off-by: yzhu1 <yanjun.zhu@windriver.com> Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* net-snmp-5.7.2: fix CVE-2014-2284yanjun.zhu2014-05-092-0/+127
| | | | | | | | | | | | The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before 5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does not properly validate input, which allows remote attackers to cause a denial of service via unspecified vectors. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2284 Signed-off-by: yanjun.zhu <yanjun.zhu@windriver.com> Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* net-snmp: Using the target perlYue Tao2014-05-091-0/+4
| | | | | | | | Set the PERLPROG to target perl to avoid host contamination. Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* netperf: fix S!=B issuesKoen Kooi2014-05-031-8/+8
| | | | | Signed-off-by: Koen Kooi <koen.kooi@linaro.org> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* bridge-utils: apply brokensepJack Mitchell2014-05-031-1/+1
| | | | | Signed-off-by: Jack Mitchell <jmitchell@cbnl.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* tcpdump: inherit brokensepJack Mitchell2014-05-031-1/+1
| | | | | Signed-off-by: Jack Mitchell <jmitchell@cbnl.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* radvd.init: fix path to radvd.conf sampleWenzong Fan2014-04-241-1/+1
| | | | | | | | Correct the information that printed by radvd initscript. Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* quagga: fix CVE-2013-6051Kai Kang2014-04-242-0/+30
| | | | | | | | Backport patch to fix CVE-2013-6051. Signed-off-by: Hu <yadi.hu@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* quagga: fix QA warningKai Kang2014-04-241-0/+1
| | | | | | | | | | | | | | | | When build quagga, it shows QA warnings: WARNING: QA Issue: ELF binary '/home/build/poky/build/tmp/work/i586-poky-linux/quagga/0.99.21-r2.0/packages-split/quagga-bgpd/usr/sbin/bgpd' has relocations in .text WARNING: QA Issue: ELF binary '/home/build/poky/build/tmp/work/i586-poky-linux/quagga/0.99.21-r2.0/packages-split/quagga-ripngd/usr/sbin/ripngd' has relocations in .text The configure script tests compiler whether support option '-fPIE'. If support, it pass option '-fPIE' to compiler then cause these QA warnings. Disable configure script to check option '-fPIC'. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* ndisc6: allow the package can be emptyKai Kang2014-04-241-0/+2
| | | | | | | | | | | | | FILES_${PN} is set to null in original .bb file, this would cause ndisc6 main package is missing, then one build error will happen: ERROR: ndisc6 not found in the base feeds (qemux86 i586 x86 noarch any all). To fix this, need to set ALLOW_EMPTY_${PN} = "1". Signed-off-by: Xudong.zhu <xudong.zhu@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* ntp: fix hardcode to /usr/bin/perlWenzong Fan2014-04-241-0/+4
| | | | | | | | | This patch properly uses the path variables and fixes ntptrace and ntp-wait, just in case perl is not installed with the hardcode path. Signed-off-by: Rahat Mahbub <rahat.mahbub@windriver.com> Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* dnsmasq: update to 2.68Christian Ziethén2014-04-242-4/+4
| | | | | | | | | | | | Fixes a bug with libvirt and DHCP, which is fixed in 2.66. "Handle the situation where libc headers define SO_REUSEPORT, but the kernel in use doesn't, to cope with the introduction of this option to Linux. Thanks to Rich Felker for the bug report." Signed-off-by: Christian Ziethén <Christian.Ziethen@enea.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* dovecot: add libcap dependencyKoen Kooi2014-04-241-1/+1
| | | | | | | | This fixes: dovecot/dovecot/latest lost dependency on libcap Signed-off-by: Koen Kooi <koen@dominion.thruhere.net> Signed-off-by: Joe MacDonald <joe@deserted.net>
* stunnel: fix configure ssl parameterJavier Viguera2014-04-241-1/+1
| | | | | | | | | | | | | | | | | | '--with-ssl=DIR' configure parameter expects the location of the libraries and include files in the sysroot. This means the directory containing the 'lib' and 'include' subdirectories, not the include directory itself. This fixes an error at configure time: checking <local-path>/tmp/sysroots/ccimx6adpt/usr/include/include/openssl/engine.h usability... no (notice duplicated include entry in above line) Signed-off-by: Javier Viguera <javier.viguera@digi.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* quagga: Add mirror siteChanghyeok Bae2014-04-241-0/+2
| | | | | | | | | | | | * The SRC_URI is not accessible. So need to add mirror site referred by the original site. * The problem is that http://download.savannah.nongnu.org/releases redirects to closest mirror and few mirrors (e.g. .jp) weren't working correctly while http://download-mirror.savannah.gnu.org/releases/ seems to be reliable. Signed-off-by: Changhyeok Bae <changhyeok.bae@lge.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* ntp : Add cap to default PACKAGECONFIG options.Philip Balister2014-04-241-1/+1
| | | | | | | | | | | | | | | | If ntp is built without libcap, it refuses to start with the following message: Starting ntpd: /usr/sbin/ntpd: The ``user'' option has been disabled -- built without --enable-clockctl or --enable-linuxcaps ntpd - NTP daemon program - Ver. 4.2.6p5 USAGE: ntpd [ -<flag> [<val>] | --<name>[{=| }<val>] ]... By adding cap to the PACKAGECONFIG the default runs. In the future, someone could add an option for using clockctl. Signed-off-by: Philip Balister <philip@balister.org> Signed-off-by: Joe MacDonald <joe@deserted.net>
* ipsec-tools: Update patch statusPaul Barker2014-04-201-1/+2
| | | | | Signed-off-by: Paul Barker <paul@paulbarker.me.uk> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* atftp: include whole sysconfdir in PNMartin Jansa2014-04-201-1/+1
| | | | | | | | | * when sysv script is removed QA warn is shown: atftp-0.7.1+gitAUTOINC+be3291a18c: atftp: Files/directories were installed but not shipped /etc empty dir doesn't cost much, so just include it Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* inetutils: add -dbg packages for tftpd, telnetd and rshdJackie Huang2014-04-021-0/+10
| | | | | | | | | | | | | The packages tftpd, telnetd and rshd conflict with the ones provided by netkit, so add the corresponding -dbg packages for them to avoid the following confliction between the dbg package of inetutils and netkit: error: file /usr/sbin/.debug/in.rexecd conflicts between attempted installs of inetutils-dbg-1.9.1-r1.0.armv7a_vfp_neon and netkit-rsh-dbg-0.17-r0.0.armv7a_vfp_neon error: file /usr/sbin/.debug/in.telnetd conflicts between attempted installs of inetutils-dbg-1.9.1-r1.0.armv7a_vfp_neon and netkit-telnet-dbg-0.17-r0.0.armv7a_vfp_neon Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* stunnel: fix SRC_URIJavier Viguera2014-04-021-1/+1
| | | | | | | | | | | | Trying to build stunnel fails with: ERROR 404: Not Found. Seems that after the new release (5.x) they have moved the old tarball under a 'archive/4.x' subdirectory. Signed-off-by: Javier Viguera <javier.viguera@digi.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* netcf: fix gnulib not found in sysroots while using a shared sstate cacheHongxu Jia2014-03-271-5/+2
| | | | | | | | | | | | | | | | | | | | | | ... ./bootstrap: Bootstrapping from checked-out netcf sources... ./bootstrap: consider installing git-merge-changelog from gnulib ./bootstrap: line 641: tmp/sysroots/qemux86/usr/share/gnulib/gnulib-tool: No such file or directory ... The gnulib source was incorrectly populated to ${STAGING_DATADIR}. While the build shared an existed sstate cache, the gnulib's ${SYSROOT_DESTDIR} was empty, the gnulib source code was not found in sysroots. We should use do_install task to install them to ${D}, and the default do_populate_sysroot task will populate them to ${STAGING_DATADIR}. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
* traceroute: filter-out patches dirRobert Yang2014-03-272-0/+48
| | | | | | | | | | | | | | | The $(subdirs) contains all the dirs under the ${B}, and this one: do_unpack[cleandirs] = "${S}/patches" will create a "patches" dir, then there will be compile errors, filter out the patches will fix the problem. Note: poky doesn't have this problem since it separates the ${S} and ${B} Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
* traceroute: fix alternate nameJoe Slater2014-03-271-2/+2
| | | | | | | | | traceroute6 for the name is misleading and will interfere with traceroute6 in iputils making an alternate link to the traceroute6 binary, so we change the name to traceroute. Signed-off-by: Joe Slater <jslater@windriver.com> Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
* sethdlc : add recipeChunrong Guo2014-03-271-0/+30
| | | | | | | | | | | * sethdlc: get/set Linux HDLC packet radio modem driver port information * sethdlc is a program designed to set and/or report the configuration information associated with a soundcard radio modem port. This information includes the modem type, what I/O port, IRQ and DMA channel a particular modem port is using, and where to output a transmitter keying (PTT) signal. Signed-off-by: Chunrong Guo <B40290@freescale.com> Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
* quagga: work with new readlineRobert Yang2014-03-272-0/+35
| | | | | | | | The Function and CPPFunction had been removed by in readline 6.3, use the new functions to replace them. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
* vlan: Create 1.9 versionLauren Post2014-03-151-0/+25
| | | | | | | VLAN provides vconfig utility Signed-off-by: Lauren Post <lauren.post@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ipsec-tools: Don't link against libflPaul Barker2014-03-142-1/+88
| | | | | | | | | | | | | We can remove all references to yywrap by adding "%option noyywrap" statements to each flex source file which doesn't override yywrap. After this, we no longer need to link against libfl and so no longer get errors about undefined references to yylex. Also change the dependency on flex to flex-native as we no longer need libfl compiled for the target - the lexer is now self-contained. Signed-off-by: Paul Barker <paul@paulbarker.me.uk> Signed-off-by: Joe MacDonald <joe@deserted.net>
* ntp: Moving relevant files from /usr/bin to /usr/sbinXufeng Zhang2014-03-145-15/+15
| | | | | | | | | | | | | "--with-binsubdir" controls whether we use bin_PROGRAMS or sbin_PROGRAMS while installing executable files in ntp Makefile, in order to install all the relevant files in /usr/sbin instead of /usr/bin, we can pass "--with-binsubdir=sbin" in ntp configure cmdline. Accordingly, updating the path for the files which are contained in rpm packages. Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* ntp: Running ntpd daemon as ntp:ntpXufeng Zhang2014-03-142-2/+6
| | | | | | | | Adding ntp:ntp(user:group) to system and running ntpd dameon as ntp:ntp. Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* strongswan: update verion to 5.1.1Jackie Huang2014-03-143-36/+143
| | | | | | | | | | | | * Add a patch to fix the function parameter. * Add PACKAGECONFIG for optional packages instead of explicitly disable, and set sqlite and curl as default. * Remove the split package strongswan-plugins. * Add configure option --without-lib-prefix so it doesn't search for libraries in includedir and libdir to avoid QA error. Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* netcf: fix offline rebuilding failedHongxu Jia2014-03-142-2/+38
| | | | | | | | | | | | | | | The netcf downloaded gnulib source to ${S} at the configure time, while the network disconnected, if sstate cache was cleaned, the netcf rebuilding failed. Added a new recipe named 'gnulib' to download gnulib source to ${GITDIR} and populate it to the staging data dir. So netcf could specify this local directory where gnulib sources reside to save the bandwidth downloading. Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* crda: fix udev ruleJavier Viguera2014-03-141-1/+1
| | | | | | | | | | | | | | | | | | | The SBINDIR variable in makefile's install rule needs to have a trailing slash so the path to the 'crda' binary in the udev rule is correct. Otherwise the udev rule has a wrong path: KERNEL=="regulatory*", ACTION=="change", SUBSYSTEM=="platform", RUN+="/usr/sbincrda" and at runtime udev complains: failed to execute '/usr/sbincrda' when a regulatory domain event is triggered. Signed-off-by: Javier Viguera <javier.viguera@digi.com> Acked-by: Koen Kooi <koen@dominion.thruhere.net> Signed-off-by: Joe MacDonald <joe@deserted.net>
* radvd: eliminate confusing warnings when stop serviceLiang Li2014-03-141-0/+4
| | | | | | | | | | | | | | | When run 'service radvd stop' in case radvd is not started/running, we'll get warnings like this: Stopping radvd: no /usr/sbin/radvd found; none killed /etc/init.d/radvd: warning: cannot restore settings radvd. We could by pass these OPs by just check if the service is running or not so eliminate possible warnings. Signed-off-by: Liang Li <liang.li@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* bridge-utils: fix the no brctl error when enable multilibRoy Li2014-03-141-1/+0
| | | | | | | | | | | | update-alternatives.bbclass does not create the brctl symbolic links for multilib, since the wrong use of PN generates /usr/sbin/brctl.lib32-bridge-utils, not /usr/sbin/brctl.bridge-utils; In fact, no need to rename brctl by calling mv, since update-alternatives will handle it Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* dovecot: fix the DEPENDS on lzmaRobert Yang2014-03-111-1/+1
| | | | | | | DEPENDS on lzma should be xz Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issuesMatthieu CRAPET2014-02-2317-17/+21
| | | | | | | | | | | | | Changes: - rename SUMMARY with length > 80 to DESCRIPTION - rename DESCRIPTION with length < 80 to (non present tag) SUMMARY - drop final point character at the end of SUMMARY string - remove trailing whitespace of SUMMARY line Note: don't bump PR Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* quagga: close the stdout/stderr as in other daemonsRoy Li2014-02-232-0/+51
| | | | | | | | | | | | | Once babald becomes a background daemon, it should not output information to stdout, so need to close stdout. In fact, other daemons close their stdout when they run into background, like ospfd, isisd and bgpd, by calling daemon() which is in lib/daemon.c Closing the stdout can fix a tee hang issue { #/usr/sbin/babeld -d |tee tmp } Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* libnetfilter-log: add newrecipe for version 1.0.1Matthieu Crapet2014-02-141-0/+14
| | | | | | | | | | | This library is usefull for userspace netfilter log messages (c.f. iptables and -j NFLOG target). libnetfilter-conntrack, libnetfilter-cttimeout, libnetfilter-cthelper and libnetfilter-queue are already available since december of 2012. Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* proftpd: move the runing created file under /var/runRoy Li2014-02-122-0/+40
| | | | | | Signed-off-by: Roy Li <rongqing.li@windriver.com> Acked-by: Koen Kooi <koen@dominion.thruhere.net> Signed-off-by: Joe MacDonald <joe@deserted.net>
* quagga: fix a typOSRoy Li2014-02-121-1/+1
| | | | | | | it should be CPP, not cpp; this typOS makes vtysh unable to work. Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Joe MacDonald <joe@deserted.net>
* inetutils: disable rpathRoy Li2014-02-121-0/+1
| | | | | | | | | | | | | | The rpath, which configuration computers, is a host-related path in cross-compile environment; In fact, need to not add rpath into elf file. WARNING: QA Issue: package inetutils-ftp contains bad RPATH /buildarea/build/new/bitbake_build/tmp/sysroots/qemux86-64/usr/lib64 in file /buildarea/build/new/bitbake_build/tmp/work/x86_64-wrs-linux/inetutils/1.9.1-r1/packages-split/inetutils-ftp/usr/bin/ftp.inetutils Signed-off-by: Roy Li <rongqing.li@windriver.com> Reviewed-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Joe MacDonald <joe@deserted.net>
* radvd: update to 1.9.8Kang Kai2014-01-225-34/+21
| | | | | | | | | | Update radvd to version 1.9.8 * remove change-scanner-dependency.patch which is merged * add 'status' subcommand for radvd.init Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* inetutils: fix libreadline path to fix QA errorsTing Liu2014-01-221-1/+1
| | | | | | | | | | | | | If wrong path set, inetutils configure script will add a absolute rpath, which result in the below QA errors: | ERROR: QA Issue: package inetutils-ftp contains bad RPATH | ERROR: QA Issue: package inetutils-telnet contains bad RPATH | ERROR: QA Issue: package inetutils-telnetd contains bad RPATH | ERROR: QA run found fatal errors. Please consider fixing them. | ERROR: Function failed: do_package_qa Signed-off-by: Ting Liu <b28495@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* netcf: hardcode --with-driver=redhat for target buildTing Liu2014-01-221-0/+1
| | | | | | | | | | | The configure script of netcf checks the HOST setup to identify the network interface. This means it checks for Red Hat, SuSE, debian, Ubuntu, etc. As this is an embedded cross build, it doesn't seem to make sense to check the HOST in the first place to determine info for the TARGET. Signed-off-by: Ting Liu <b28495@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ipsec-tools: fix unrecognised --without-gssapi optionTing Liu2014-01-221-1/+0
| | | | | Signed-off-by: Ting Liu <b28495@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ntp: Fix the installed but not shipped issue of a systemd units fileStefan Herbrechtsmeier2014-01-221-1/+3
| | | | | | | | | | | | We will get the following ERROR/WARN if we enable systemd and the installed-vs-shipped check in QA: ERROR: QA Issue: ntp: Files/directories were installed but not shipped /lib/systemd/ntp-units.d /lib/systemd/ntp-units.d/60-ntpd.list Signed-off-by: Stefan Herbrechtsmeier <stefan@herbrechtsmeier.net> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* dovecot: add 2.2.10Koen Kooi2014-01-152-0/+135
| | | | | | | Dovecot is an IMAP server. Signed-off-by: Koen Kooi <koen@dominion.thruhere.net> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* fetchmail: add 6.3.26Koen Kooi2014-01-151-0/+18
| | | | | Signed-off-by: Koen Kooi <koen@dominion.thruhere.net> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* nis: inherit pkgconfigRoy Li2014-01-101-1/+1
| | | | | | nis needs pkgconfig to check some dependencies, like DBUS Signed-off-by: Roy Li <rongqing.li@windriver.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-06-26 22:06:24 +0000