summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* recipes: Fix override syntaxKhem Raj2021-08-031-1/+1
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Martin Jansa <Martin.Jansa@gmail.com>
* layer.conf: Update to honisterMartin Jansa2021-08-031-1/+1
| | | | | | | This marks the layers as compatible with honister now they use the new override syntax. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-03149-856/+856
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* ntp: Fix make checkKhem Raj2021-08-032-0/+67
| | | | | | Some test code is not yet ported to build with gcc 11 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: Do not use PTHREAD_STACK_MIN on glibcKhem Raj2021-08-032-0/+33
| | | | | | Int not a compile time constant in glibc 2.34+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autofs: Fix build with glibc 2.34+Khem Raj2021-08-033-14/+116
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* addcli: check for ns_get16 and ns_get32Khem Raj2021-08-032-1/+41
| | | | | | Fixes build with glibc 2.34+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.32.2 -> 1.32.4wangmy2021-07-291-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: fix QA Issue after LDFLAGS changeTony Battersby2021-07-291-0/+5
| | | | | | | | | | | | | Adding -f*-prefix-map to LDFLAGS caused the following issue: QA Issue: netsnmp-agent.pc failed sanity test (tmpdir) Fix by filtering out -f*-prefix-map from *.pc files. [YOCTO #14481] Signed-off-by: Tony Battersby <tonyb@cybernetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.6.1 -> 3.6.2Yi Zhao2021-07-271-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: update to 3.4.7Armin Kuster2021-07-271-1/+1
| | | | | | | | Stable branch bug fix update. Includes: CVE-2021-22235 Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nghttp2: upgrade 1.43.0 -> 1.44.0wangmy2021-07-271-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | v1.44.0 changelog: lib: Port new ngtcp2 map implementation doc: Replace master with main build: Add precious variables for libev and jemalloc and use JEMALLOC_CFLAGS build: Add more --with-* configure flags build: Add LIBTOOL_LDFLAGS configure variable third-party: Bump llhttp to 6.0.2 src: Replace black-list with block-list nghttpx: Fix max distance in weight group/address cycle comparison nghttpx: Set connect_blocker and live_check after shuffling addresses nghttpx: Replace master with main nghttpx: Remove trailing white space after $method log variable (https://github.com/nghttp2/nghttp2/pull/1553) h2load: Add --rps option (https://github.com/nghttp2/nghttp2/pull/1559) h2load: Allow unit in -D option asio: fix some typos (Patch from Jan Kundrát) (https://github.com/nghttp2/nghttp2/pull/1550) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: upgrade 2.3.2 -> 2.3.3wangmy2021-07-271-3/+3
| | | | | | | | | | | | License-Update: add note: ** NOTE! The following LGPL license applies to the talloc ** library. This does NOT imply that all of Samba is released ** under the LGPL "GNU General Public License" changed to "GNU Lesser General Public License" Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openlldp: fix segfaultLi Wang2021-07-272-0/+332
| | | | | | | | | | | | | | | | | ~ lldpad -d ~ 8021q: 802.1Q VLAN Support v1.8 ~ 8021q: adding VLAN 0 to HW filter on device eth0 ~ lldpad[xxx]: segfault at 0 ip xxx sp xxx error 4 in lldpad[xxx+xxx] ~ Code: xxx the issue is introduced by: 0002-lldp_head-rename-and-make-extern.patch Upstream patches: https://github.com/intel/openlldp/commit/ed6a8e5a75f56b7034a46294a0bf2a9a7fd14fbc Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netperf: Add systemd unit fileKhem Raj2021-07-272-4/+17
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netperf: Update to latestKhem Raj2021-07-271-3/+2
| | | | | | | | License-Update: Upstream has switched to MIT [1] [1] https://github.com/HewlettPackard/netperf/commit/2d88bcc75d97f462eafe8605f8da0c1f875b7dad Signed-off-by: Khem Raj <raj.khem@gmail.com>
* autofs: Upgrade to 5.1.7Khem Raj2021-07-177-91/+175
| | | | | | | | | | | | | | | License-Update: correct fsf address [1] - Drop upstreamed autofs-5.0.7-include-linux-nfs.h-directly-in-rpc_sub.patch - Forward port remaining patches - Package libautofs.so which is new - Add a patch to fix build on musl systems - Detailed ChangeLog [2] [1] https://git.kernel.org/pub/scm/linux/storage/autofs/autofs.git/commit/COPYING?id=b74dcdd3f6b05522388729141c29286829c302fc [2] https://www.spinics.net/lists/autofs/msg02344.html Signed-off-by: Khem Raj <raj.khem@gmail.com>
* layers: Fix git send-email instructions in READMEKhem Raj2021-07-171-1/+1
| | | | | | This ensures that cut-n-paste of this command from README will work Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: Upgrade to 3.6.1Khem Raj2021-07-162-1/+103
| | | | | | | | | Fix build with glibc 2.34+ Details of this release [1] [1] http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.6.1.RELEASE_NOTES Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 5.9.2 -> 5.9.3zangrc2021-07-131-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | - Added AES_ECB, SHA-3 and SHAKE-256 support to wolfssl plugin. - Added AES_CCM and SHA-3 signature support to openssl plugin. - The x509 and openssl plugins now consider the authorityKeyIdentifier, if available, before verifying signatures, which avoids unnecessary signature verifications after a CA key rollover if both certificates are loaded. - The pkcs11 plugin better handles optional attributes like CKA_TRUSTED, which previously depended on a version check. - charon-nm now supports using SANs as client identities, not only full DNs. - charon-tkm now handles IKE encryption. - A MOBIKE update is sent again if a a change in the NAT mappings is detected but the endpoints stay the same. - Converted most of the test case scenarios to the vici interface Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.9.3 -> 0.9.4zangrc2021-07-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bug fix only release. $ git shortlog --grep "^fix" v0.9.3..v0.9.4 Eric Garver (10): fix(dbus): conf: setting deprecated properties should be ignored fix(dbus): properties: IPv4 and IPv6 should be true if using nftables fix(fw): when checking tables make sure to check the actual backend fix(ipset): nftables: use interval flag for "ip" types fix(rpm): applet: don't replace config modified by admin fix(rpm): logrotate: don't replace config modified by admin fix(ipv6_filter): match fwmark fix(direct): rule order with multiple address with -s/-d fix(nm): reload: only consider NM connections with a real interface fix(policy): warn instead of error for overlapping ports Fabrizio D'Angelo (1): fix(ipset): fix hash:net,net functionality Robert Richmond (1): fix(ipset): entry delete with timeout Ye Shu (1): fix(applet): Show a basic tooltip instead of HTML Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* keepalived: Upgrade to 2.2.2Khem Raj2021-07-082-2/+62
| | | | | | Fix build with upcoming glibc 2.34 while here Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.30.4 -> 1.32.2Andreas Müller2021-07-084-202/+19
| | | | | | | Did not find hints upstream but musl build turned painless! Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: upgrade 2.1.4 -> 2.2.1Andreas Müller2021-07-082-19/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Manually refresh 0002-fix-fail-to-enable-bluetooth.patch - it did not apply 2.2.1 Bugs fixed Hard dependency of DBusService on NetworkManager 2.2 New features Disconnect items in applet menu (plugin) Desktop notifications on connect / disconnect (plugin) Notifications with battery level for connecting devices (applet plugin) Stop discovery and retry connection for broken adapter drivers Auto-connect settings for supported services Changes Drop blueman-report Drop blueman-assistant Raise minimum Python version to 3.6 Raise GTK+ 3 version to 3.22 Raise minimum BlueZ version to 5.48 Allow opening device menus via keyboard (Shift+F10 or menu key) Add Ctrl+Q and Ctrl+W accelerators for closing blueman-manager Allow cancelling device connection attempts Improved passkey handling (fixed padding, highlighting, single notifitication) Hide devices with no name Bugs fixed Fix disconnecting NMDevice Exceptions from asynchronous DBus calls (getting picked up by tools like Apport or ABRT) DiscvManager plugin showed its icon unreliably Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: add missing runtime dependency for pidlYi Zhao2021-07-011-1/+1
| | | | | | | | | | | Add libparse-yapp-perl to RDEPENDS for pidl. Fixes: $ pidl Can't locate Parse/Yapp/Driver.pm in @INC (you may need to install the Parse::Yapp::Driver module) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: fix shebang for pidlYi Zhao2021-07-011-1/+1
| | | | | | | | | The shebang in pidl points to wrong location: $ pidl -sh: /usr/bin/pidl: /buildarea/build/tmp-glibc/hosttools/env: bad interpreter: No such file or directory Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: fix ntpdate to wait for subprocessesAdrian Zaharia2021-06-281-0/+5
| | | | | | | | | | | | | | | When using systemd, ntpdate-sync script will start in background triggering the start of ntpd without actually exiting. This results in an bind error in ntpd startup. Add wait at the end of ntpdate script to ensure that when the ntpdate.service is marked as finished the oneshot script ntpdate-sync finished and unbind the ntp port Fixes #386 Signed-off-by: Adrian Zaharia <Adrian.Zaharia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: add CVE-2020-7224 and CVE-2020-27569 to allowlistAkifumi Chikazawa2021-06-261-0/+3
| | | | | | | | CVE-2020-7224 and CVE-2020-27569 are for Aviatrix OpenVPN client, not for openvpn. Signed-off-by: Akifumi Chikazawa <chikazawa.akifu@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Don't guess dirs for perllocal.pod removingPersian Prince2021-06-241-1/+1
| | | | | | | | We're not living in a perfect world so avoid build failures like: ERROR: samba-4.14.5-r0 do_package_qa: QA Issue: samba-pidl contains perllocal.pod (/usr/lib/perl5/5.34.0/x86_64-linux/perllocal.pod), should not be installed [perllocalpod] ERROR: samba-4.14.5-r0 do_package_qa: QA run found fatal errors. Please consider fixing them. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Solve the dependency problem when installing Sambawangmy2021-06-231-2/+20
| | | | | | | | | Error Message: Problem: conflicting requests - nothing provides samba-pidl needed by samba-client-4.14.5-r0.aarch64 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.17.1 -> 2.9.18zangrc2021-06-232-4/+4
| | | | | | | | Refresh the following patch: configure.in-disable-tirpc-checking-for-fedora.patch Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.5.2 -> 2.5.3zangrc2021-06-231-3/+3
| | | | | | | -License-Update: Copyright year updated to 2021. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Support building for nativePeter Kjellerstedt2021-06-231-5/+13
| | | | | | | | | Due to the sed commands in do_install_append() that removed ${STAGING_DIR_HOST} and it being empty when building for native, it was impossible to add support for building this as native using a bbappend. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: A little clean upPeter Kjellerstedt2021-06-231-19/+16
| | | | | | | | | | | | * Remove the explicit dependency on libnl as the libnl PACKAGECONFIG depends on it as necessary. * Add a PACKAGECONFIG for systemd to replace modifying EXTRA_OECONF directly. * Sort the PACKAGECONFIGs. * Some whitespace clean up. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard-module: Stop overriding modules_install in the recipeDaiane Angolini2021-06-231-5/+1
| | | | | | | | | | | | Configure the recipe to use the module_install function from the module source code and remove the overriden modules_install function from the recipe. Using the default modules_install (instead of the function defined in the recipe file) the module is signed when DISTRO_FEATURE contains modsign. Signed-off-by: Daiane Angolini <daiane.angolini@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: add CVE-2016-9312 to allowlistSekine Shigeki2021-06-181-0/+3
| | | | | Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: upgrade 2.0.10 -> 2.0.11zangrc2021-06-181-3/+3
| | | | | | | | -License-Update: notice.html does not exist in this version, use NOTICE.md to check. Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: set ROOTSBINDIR to /usr/sbin if DISTRO_FEATURES has usrmergeGeoff Parker2021-06-181-3/+14
| | | | | | | | | | | | | | Fixes cif-utils recipe build when DISTRO_FEATURES includes 'usrmerge' Add do_configure_prepend() to override ROOTSSBINDIR environment variable so that the utilities are installed in /usr/sbin rather than /sbin. Setting --exec-prefix or --prefix in EXTRA_OECONF does not work. Update do_install_append() to NOT remove /usr/bin /usr/sbin if usrmerge is set in DISTRO_FEATURES Signed-off-by: Geoff Parker <geoffrey.parker@arthrex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Use the built-in options for removing pack toolsEd Tanous2021-06-181-5/+1
| | | | | | | | | | | | | For distros that want to use the ENABLE_LIB_ONLY option, the rm call will fail, because ENABLE_HPACK_TOOLS (set implicitly as part of ENABLE_LIB_ONLY) removes those two binaries from the build, so they then can't be removed again. This commit sets ENABLE_HPACK_TOOLS=OFF, which not only allows for the option to be overridden in other meta layers, also allows a simplified use of ENABLE_LIB_ONLY in meta layers that don't want to ship the binaries. Signed-off-by: Ed Tanous <ed@tanous.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: add CVE-2016-4983 to allowlistito-yuichi@fujitsu.com2021-06-151-0/+3
| | | | | | | CVE-2016-4983 affects only postinstall script on specific distribution, so add it to allowlist. Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cyrus-sasl: add CVE-2020-8032 to allowlistito-yuichi@fujitsu.com2021-06-111-0/+3
| | | | | | | This affects only openSUSE, so add it to allowlist. Signed-off-by: Yuichi Ito <ito-yuichi@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* add CVE-2011-2411 to allowlistSekine Shigeki2021-06-111-0/+4
| | | | | | | This affects only on HP NonStop Server, so add it to allowlist. Signed-off-by: Sekine Shigeki <sekine.shigeki@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: upgrade 5.9 -> 5.9.1zhengruoqin2021-06-102-9/+12
| | | | | | | | Refresh the following patch: net-snmp-5.7.2-fix-engineBoots-value-on-SIGHUP.patch Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.14.4 -> 4.14.5Yi Zhao2021-06-091-2/+2
| | | | | | | | Changelog: https://www.samba.org/samba/history/samba-4.14.5.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: disable check fcntl RW_HINTS when configureYi Zhao2021-06-092-1/+1
| | | | | | | | | | This fails on cross-compilation for musl and clang. Fixes configure error: Checking whether fcntl supports setting/geting hints: UNKNOWN Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-networking: add dhcp-relayYi Zhao2021-06-091-0/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: update 4.4.2 -> 4.4.2-P1Yi Zhao2021-06-091-4/+4
| | | | | | | | | | | | | | Changes since 4.4.2 (Bug Fixes) Corrected a buffer overwrite possible when parsing hexadecimal literals with more than 1024 octets. Reported by Jon Franklin from Dell, and also by Pawel Wieczorkiewicz from Amazon Web Services. [Gitlab #182] CVE: CVE-2021-25217 See: https://downloads.isc.org/isc/dhcp/4.4.2-P1/dhcp-4.4.2-P1-RELNOTES Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: disable backtrace in bundled bindYi Zhao2021-06-092-0/+32
| | | | | | | | | | | Disable backtrace in bundled bind to fix build error for qemuarm on musl. Fixes: bind/bind-9.11.32/lib/isc/.libs/libisc.so: undefined reference to `_Unwind_GetIP' Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: update bundled bind to 9.11.32Yi Zhao2021-06-092-6/+43
| | | | | | | | | | | | | | Update the bundled bind from 9.11.14 to 9.11.32. Fixes build error on qemuarmv5: stats.c: In function 'setcounter': stats.c:300:36: error: 'val' undeclared (first use in this function); did you mean 'value'? 300 | stats->counters[counter] = val; | ^~~ | value Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.4.5 -> 3.4.6zangrc2021-06-091-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>