summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* networkmanager: upgrade 1.34.0 -> 1.36.0Wang Mingyu2022-03-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Overview of changes since NetworkManager-1.34 ============================================= * The handling of Layer 3 configurations has been substantially reworked. While this is mostly internal change, it results in more robust behavior when addressing information from multiple sources (DHCP, manually configured, VPN) need to be applied simultaneously. Overall performance and memory use have also slightly improved. * Manually configured addresses can no longer expire even if the same addresses are also obtained dynamically. * Code for systemd-based DHCP and DHCPv6 clients has been updated from upstream. * NTP servers obtained via DHCPv6 are now exposed on the DBus API, visible in nmcli and available for use by dispatcher scripts. * 5G NR (New Radio) modems are now supported. * The "rd.znet_ifnames" kernel command line option is now honored on network bootups on an IBM s390 platform. * Wi-Fi P2P support does now work with the IWD backend, in addition to wpa_supplicant backend. * Support for special route types have been added: "prohibit", "blackhole" and "unreachable". * Routes managed by routing daemons are now ignored. This is done to address a performance bottleneck on specialized routers. * Handling of IP addressing and routing information is now slightly more efficient and uses less memory. This is apparent on systems with large amount of IP configuration information. * It is now possible to start NetworkManager without root user privileges. This is experimental doesn't necessarily result in a working daemon. NetworkManager service already drops many of capabilities available to the root user. * WPA3 Wi-FI network security have been improved by enabling new H2E (hash to element) method for generating SAE password element. * It is now possible to select the default Wi-Fi backend (wpa_supplicant or IWD) at build-time. * Replies from broken DHCP servers that send duplicate address or mask options are now handled gracefully. * Bridge support has gained the possibility of turning off MAC ageing. * "configure-and-quit" mode and nm-iface-helper have been removed. * A number of bugs that could cause NetworkManager to crash in rare conditions have been fixed. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cyrus-sasl: Fix ptest buildsKhem Raj2022-03-012-0/+92
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Wang Mingyu <wangmy@fujitsu.com>
* cyrus-sasl: upgrade 2.1.27 -> 2.1.28Wang Mingyu2022-03-016-199/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-Allow-saslauthd-to-be-built-outside-of-source-tree-w.patch 0001-makeinit.sh-fix-parallel-build-issue.patch 0004-configure.ac-fix-condition-for-suppliment-snprintf-i.patch deleted since they're included in 2.1.28 CVE-2019-19906.patch avoid-to-call-AC_TRY_RUN.patch refreshed for new version Changelog: ========= build: ------ configure - Restore LIBS after checking gss_inquire_sec_context_by_oid makemd5.c - Fix potential out of bound writes fix build with –disable-shared –enable-static Dozens of fixes for Windows specific builds Fix cross platform builds with SPNEGO Do not try to build broken java subtree Fix build error with –enable-auth-sasldb common: ------- plugin_common.c: Ensure size is always checked if called repeatedly (#617) documentation: -------------- Fixed generation of saslauthd(8) man page Fixed installation of saslauthd(8) and testsaslauthd(8) man pages (#373) Updates for additional SCRAM mechanisms Fix sasl_decode64 and sasl_encode64 man pages Tons of fixes for Sphinx include: -------- sasl.h: Allow up to 16 bits for security flags lib: ---- checkpw.c: Skip one call to strcat Disable auxprop-hashed (#374) client.c: Use proper length for fully qualified domain names common.c: CVE-2019-19906 Fix off by one error (#587) external.c: fix EXTERNAL with non-terminated input (#689) saslutil.c: fix index_64 to be a signed char (#619) plugins: -------- gssapi.c: Emit debug log only in case of errors ntlm.c: Fail compile if MD4 is not available (#632) sql.c: Finish reading residual return data (#639) CVE-2022-24407 Escape password for SQL insert/update commands. sasldb: ------- db_gdbm.c: fix gdbm_errno overlay from gdbm_close DIGEST-MD5 plugin: ------------------ Prevent double free of RC4 context Use OpenSSL RC4 implementation if available SCRAM plugin: ------------ Return BADAUTH on incorrect password (#545) Add -224, -384, -512 (#552) Remove SCRAM_HASH_SIZE Add function to return SCRAM auth method name Allocate enough memory in scam_setpass() Add function to sort SCRAM methods by hash strength Update windows build for newer SCRAM options saslauthd: --------- auth_httpform.c: Avoid signed overflow with non-ascii characters (#576) auth_krb5.c: support setting an explicit auth_krb5 server name support setting an explicit servername with Heimdal unify the MIT and Heimdal auth_krb5 implementations Remove call to krbtf auth_rimap.c: provide native memmem implementation if missing lak.c: Allow LDAP_OPT_X_TLS_REQUIRE_CERT to be 0 (no certificate verification) lak.h: Increase supported DN length to 4096 (#626) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-scapy: Define custom PYPA_WHEELKhem Raj2022-03-011-0/+2
| | | | | | | Standard defaults are not able to guess it right, so aid it a bit Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
* netplan: Add knob to enable testsKhem Raj2022-02-241-1/+5
| | | | | | | this puts python3-nose away from default requirements, nose dependency should eventually be removed and perhaps converted to pytest Signed-off-by: Khem Raj <raj.khem@gmail.com>
* All layers: Follow oe-core's variable name changesAndreas Müller2022-02-241-1/+1
| | | | | | | Auto rename performed by oe-core's convert-variable-renames.py 0.1 Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocol: upgrade 0.14.3 -> 0.14.4Wang Mingyu2022-02-241-1/+1
| | | | | | | | | | Major changes in 0.14.4 ======================= * Fix enum deprecation warning for visual studio * Fix documentation typos in stream-device.h Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: upgrade 4.4.0 -> 4.4.1Wang Mingyu2022-02-241-1/+1
| | | | | | | | | | | | | Changelog: ========= Bug #708 fix support for feeding PCAP files from STDIN Bug #705 fix Debian/kfreebsd build Bug #704 fix typos Bug #703 safeguard against corrupt packet lengths in checksum functions Bug #702 fix double free in Juniper DLT Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 5.1.0- > 5.2.0Wang Mingyu2022-02-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: upgrade 0.103 -> 0.104Wang Mingyu2022-02-234-39/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | refresh patches for 0.104: 0001-Makefile-do-not-use-Werror.patch 0001-don-t-fail-if-GLOB_BRACE-is-not-defined.patch 0001-parse-nm-fix-32bit-format-string.patch removed since it's included in 0.104 Changelog: ========= Enable embedded-switch-mode setting on SmartNICs (#253) Permit multiple patterns for the driver globs in match (#202), LP#1918421 Improve routing capabilities (#248), LP#1892272, LP#1805038 Support additional link offload options for networkd (#225) (#242), LP#1771740 Consolidate enum-to-string arrays (#230) Handle differing ip6-privacy default value for NetworkManager (#263) YAML state tracking (--state rootdir) for DBus API and netplan try (#231), LP#1943120 Support ConfigureWithoutCarrier (ignore-carrier) for networkd (#215) Move primary git branch master to main Documentation improvements (#226) Compatibility for glib-2.70 (#235) Cleanup Makefile, install only public headers Improve test reliability & enable integration testing CI for autopkgtests Netplan get to use the libnetplan parser (#252) libnetplan: - introduce the notion of NetplanState (#232) - use an explicit parser context (#233) - expose coherent generator APIs (#239) - improve overall error handling (#234) - consolidation of YAML parsing into the library (#241, #249, #250, #251) Restrict the symbol export to a determined public API (#227) - WARNING: We dropped some internal symbols from the API that we know have no external consumers (that we are aware of) - 0.103: _serialize_yaml, contains_netdef_type, tmp, validate_default_route_consistency - 0.102: cur_filename, netplan_netdef_new - 0.100: address_option_handlers, is_hostname, validate_ovs_target, wireguard_peer_handlers - 0.99: current_file, is_ip4_address, is_ip6_address, missing_id, missing_ids_found, parser_error, validate_backend_rules, validate_netdef_grammar, yaml_error Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 38.0 -> 39.0Wang Mingyu2022-02-231-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ========= b2fedc4 rsocket: Make sure that the allocated memory is aligned ebbdb85 Merge pull request #1107 from Sindhu-Devale/libirdma-12-9-fixes a83619b providers: Move input validation for memory window bind to core a274c9c providers/rxe: Replace '%' with '&' in check_qp_queue_full() 812ab81 Merge pull request #1128 from Wenpeng-Liang/clear_rq_sge 1a9b2db docs: Fix typo in pyverbs example d498180 libhns: Clear remaining unused sges when post recv d99f61c Merge pull request #1127 from Wenpeng-Liang/misc_bugfix 7307264 verbs: Fix description of manual for ibv wc read byte len function c298130 verbs: Fix a typo Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: upgrade 2.1.5 -> 2.1.6Wang Mingyu2022-02-222-45/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-Fix-compiler-error-introduced-with-recent-IPv6-commi.patch removed since it's included in 2.1.6. Changelog: ========= This release adds more bug fixes and cleanups. No major functionality changes. libopeniscsiusr: extend sysfs ignore_error to include EINVAL Fix compiler error introduced with recent IPv6 commit. Remove dependences from iscsi-init.service Use "sbindir" for path in systemd service files Updated README a bit Finish ability to have binary location configurable. Fix iscsi-init so that it runs when root writable remove redundant params in Makefile Fixing last parts of sbindir configuration Cosmetic cleanup on recent addition Update the iscsi-gen-initiatorname script: harden and generalize change iscsi-gen-initiatorname option -b => -p Add man page for the iscsi-gen-initiatorname script. Install new man page for iscsi-gen-initiatorname Fix issues discovered by gcc12 Fix more issues discovered by gcc12 iscsi sysfs: check state before onlining devs iscsistart: fix login timeout handling iscsid: use infinite timeout if passed in iscsid: add error code for req timeouts Improve 'iscsid.conf' iscsiadm: Call log_init() first to fix a segmentation fault iscsi_err: Add iscsid request timed out error messages Fix wrong install_systemd destination path actor: add name to struct actor and init it with function name actor: print thread name in log actor: enhanced: print error log when init a initilized thread initiator_common: make set operational parameter log easy to read iscsid: Check session id before start sync a thread Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Fix DeprecationWarning about regexpsMartin Jansa2022-02-212-10/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes: meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:125: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:126: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:128: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:129: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:130: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-graphics/ttf-fonts/ttf-mplus_027.bb:18: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-multimedia/libcdio/libcdio-paranoia_10.2+2.0.1.bb:21: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-multimedia/libcdio/libcdio_2.1.0.bb:28: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1342: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1343: DeprecationWarning: invalid escape sequence \- oe-core/meta/classes/package.bbclass:1343: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1344: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1345: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1348: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1350: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1353: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1355: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1358: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1360: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1365: DeprecationWarning: invalid escape sequence \. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* layers: Bump to use kirkstoneKhem Raj2022-02-211-1/+1
| | | | | | its not going to be backward ABI compatible with honister due to variable renaming. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Use new CVE_CHECK_IGNORE variableKhem Raj2022-02-216-6/+6
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Use renamed SKIP_RECIPE varFlagKhem Raj2022-02-213-3/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networking: add new netsniff-ng recipe version 0.6.8Clément Péron2022-02-173-0/+63
| | | | | | | | | | Netsniff-ng is a fast zero-copy analyzer, pcap capturing and replaying tool. Actually the Makefile doesn't create the folder when installing tools, let's add a patch to fix this. Signed-off-by: Clément Péron <peron.clem@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: Avoid linking libm staticallyKhem Raj2022-02-162-0/+40
| | | | | | This fixes build on x86 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: remove perl from RDEPENDSChristian Eggers2022-02-141-1/+1
| | | | | | | | | The upstream ebtables-legacy-save perl script is replaced by a bash implementation (taken from Fedora). So there's nothing left which RDEPENDs on perl. Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: Package needed shared libs from bindKhem Raj2022-02-111-3/+7
| | | | | | | Fixes ERROR: QA Issue: /usr/sbin/dhcrelay contained in package dhcp-relay requires libisccfg.so.163, but no providers found in RDEPENDS:dhcp-relay? [file-rdeps] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.14.11 -> 4.14.12Yi Zhao2022-02-111-1/+1
| | | | | | | | | | | | | This is a security release in order to address the following defects: CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit module. https://www.samba.org/samba/security/CVE-2021-44142.html CVE-2022-0336: Re-adding an SPN skips subsequent SPN conflict checks. https://www.samba.org/samba/security/CVE-2022-0336.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: Upgrade to 2.28.0Mark Jonas2022-02-112-37/+2
| | | | | | | | | | Mbed TLS 2.28 is a long-time support branch. It will be supported with bug-fixes and security fixes until end of 2024. https://github.com/ARMmbed/mbedtls/releases/tag/v2.28.0 Signed-off-by: Mark Jonas <toertel@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: update to 5.1Oleksandr Kravchuk2022-02-111-1/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: update HOMEPAGEYi Zhao2022-02-091-1/+2
| | | | | | | The official site was moved to https://tcpreplay.appneta.com/. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: upgrade 2.0.12 -> 2.0.14Gianfranco Costamagna2022-02-082-4/+4
| | | | | | | | | - Upgrade license hash due to whitespace changes - refresh patch 1571.patch Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: upgrade 5.0 -> 5.2.1Wang Mingyu2022-02-085-34/+34
| | | | | | | | change configure.seed to configure.ac.in refresh 0001-Makefile.in-don-t-use-the-internal-lua.patch Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndpi: upgrade 4.0 -> 4.2Wang Mingyu2022-02-082-13/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | refresh 0001-autogen.sh-not-generate-configure.patch Changelog: ========= New Features ----------- Add a "confidence" field indicating the reliability of the classification Add risk exceptions for services and domain names via ndpi_add_domain_risk_exceptions() Add ability to report whether a protocol is encrypted New Supported Protocols and Services ----------------------------------- Add protocol detection for: Badoo Cassandra EthernetIP Improvements ------------ Significantly reduced memory footprint from 2.94 KB to 688 B per flow Improve protocol detection for: BitTorrent ICloud Private Relay IMAP, POP3, SMTP Log4J/Log4Shell Microsoft Azure Pandora TV RTP RTSP Salesforce STUN Whatsapp QUICv2 Zoom Add flow risk: NDPI_CLEAR_TEXT_CREDENTIALS NDPI_POSSIBLE_EXPLOIT (Log4J) NDPI_TLS_FATAL_ALERT NDPI_TLS_CERTIFICATE_ABOUT_TO_EXPIRE Update WhatsAPP and Instagram addresses Update the list of default ports for QUIC Update WindowsUpdate URLs Add support for the .goog Google TLD Add googletagmanager.com Add bitmaps and API for handling compressed bitmaps Add JA3 in risk exceptions Add entropy calculation to check for suspicious (encrypted) payload Add extraction of hostname in SMTP Add RDP over UDP dissection Add support for TLS over IPV6 in Subject Alt Names field Improve JSON and CSV serialization Improve IPv6 support for almost all dissectors Improve CI and unit tests, add arm64, armhf and s390x as part of CI Improve WHOIS detection, reduce false positives Improve DGA detection for skipping potential DGAs of known/popular domain names Improve user agent analysis Reworked HTTP protocol dissection including HTTP proxy and HTTP connect Changes -------- TLS obsolete protocol is set when TLS < 1.2 (used to be 1.1) Numeric IPs are not considered for DGA checks Differentiate between standard Amazon stuff (i.e market) and AWS Remove Playstation VUE protocol Remove pandora.tv from Pandora protocol Remove outdated SoulSeek dissector Fixes ----- Fix race conditions Fix dissectors to be big-endian friendly Fix heap overflow in realloc wrapper Fix errors in Kerberos, TLS, H323, Netbios, CSGO, Bittorrent Fix wrong tuple comparison Fix ndpi_serialize_string_int64 Fix Grease values parsing Fix certificate mismatch check Fix null-dereference read for Zattoo with IPv6 Fix dissectors initialization for XBox, Diameter Fix confidence for STUN classifications Fix FreeBSD support Fix old GQUIC versions on big-endian machines Fix aho-corasick on big-endian machines Fix DGA false positive Fix integer overflow for QUIC Fix HTTP false positives Fix SonarCloud-CI support Fix clashes setting the hostname on similar protocols (FTP, SMTP) Fix some invalid TLS guesses Fix crash on ARM (Raspberry) Fix DNS (including fragmented DNS) dissection Fix parsing of IPv6 packets with extension headers Fix extraction of Realm attribute in STUN Fix support for START-TLS sessions in FTP Fix TCP retransmissions for multiple dissectors Fix DES initialisation Fix Git protocol dissection Fix certificate mismatch for TLS flows with no client hello observed Fix old versions of GQUIC on big-endian machines Misc ---- Add tool for generating automatically the Azure IP list Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: upgrade 4.3.4 -> 4.4.0wangmy2022-02-081-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= Update strlcpy.c and strlcat.c PR #636 Apply #616 fix to flows.c, fix #665 Bug #670: update Travis CI to focal Bug #669: LINUX installed netmap auto detection Feature #626 - Support for Q-in-Q VLAN tags Bug #677 skipbroadcast Bug #689: add security policy document Directories of pcaps as arguments PR #682 Bug #679 fix PPS calc for long-running sessions Bug #668 Improve SDK selection Bug #696 fix directory include feature Bug #695 mac os tests fail Bug #674 - Revert "send_packet: Avoid clock drift by using time since first packet" Feature #563 mac update on multicast Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: upgrade 5.21.09 -> 5.22.01wangmy2022-02-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= * log: removal of letter 'C'/'R' from msgId in RFC5424 format [#3303] * log: Stop all threads while releasing the log agent object [#3302] * amf: Correct HC period to make it effect immediately[#3298] * log: Correct condition to shutdown the log agent [#3301] * log: Increase timeout in logtest [#3291] * log: Shutdown log agent when not in use [#3291] * log: Introduce the initial clm node status [#3291] * amf: Correct the version of csi attribute message [#3296] * ntf: correct the behavior of periodic check log pending [#3297] * mds: Resolve active MxN VDEST conflict in split brain [#3281] * smf: correct merge bundle rolling to single step [#3290] * ntf: get attribute value from local when value not existed [#3289] * immd: fix cannot find candidate for new immnd coordinator [#3284] * smf: make more robustness in BISU upgrade [#3286] * amfd: Tightens sync window condition to proceed headless restoration [#3271] * osaf: fixed redefinition of typedef 'SaConstStringT' [#3287] * amf: update runtime attributes of node to IMM in sync [#3285] * amfd: Correct checking CSICOMP while deleting CSI [#3282] * base: using mutex for test case sysf_ipc_test instead of atomic [#3283] * build: adaptive python version for rpm build [#3270] Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: Fix build with muslKhem Raj2022-02-072-0/+37
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crda: Fix buffer overflow in sscanfKhem Raj2022-02-042-0/+32
| | | | | | Fixes build with clang14 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: set precise licenseRoss Burton2022-02-031-1/+3
| | | | | | | | | | fping is under a non-standard license: it's almost BSD-3-Clause but is phrased differently. As interpretation of the licenses isn't something we want to do, we can use the exact license text instead of referring to the 3-clause BSD text. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocol: upgrade to 1.14.3Ross Burton2022-02-032-28/+19
| | | | | Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: use precise BSD licenseRoss Burton2022-02-031-1/+1
| | | | | | | This package is BSD-3-Clause. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: set correct LICENSERoss Burton2022-02-031-1/+1
| | | | | | | Remove BSD, as this package is entirely LGPL2+. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpslice: upgrade 1.2a3 -> 1.5Yi Zhao2022-02-034-126/+25
| | | | | | | | | * Update SRC_URI to official download page * Drop patches which had been fixed upstream. * Add UPSTREAM_CHECK_REGEX Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpdump: upgrade 4.99.0 -> 4.99.1Yi Zhao2022-02-032-46/+5
| | | | | | | | | * Skip aclocal in do_configure * Inherit pkgconfig then we can drop 0001-aclocal.m4-Skip-checking-for-pcap-config.patch Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.32.12 -> 1.34.0wangmy2022-01-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= * initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6". * core: better handle sd-resolved errors when resolving hostnames. * nmcli: fix import WireGuard profile with DNS domain and address family disabled. * ndisc: send router solicitations before expiry. * policy: send earlier the ip configs to the DNS manager. * core: support linking with LLD 13. * wireguard: importing wg-quick configuration files with nmcli no longer sets a negative, exclusive "dns-priority". This plays better with common split DNS setups that use systemd-resolved. Adjust the "dns-priority" to your liking after import yourself. * NetworkManager no longer listens for netlink events for traffic control objects (qdiscs and filters). * core: add internal nm-priv-helper service for separating privileges and have a way to drop capabilities from NetworkManager daemon. * bond: add support for setting queue-id of bond port. * dns: support configuring DNS over TLS (DoT) with systemd-resolved. * nmtui: add support for WireGuard profiles. * nmcli: add aliases `nmcli device up|down` beside connect|disconnect. * conscious language: Deprecate 'Device.Slaves' D-Bus property in favor of new 'Device.Ports' property. Depracate 'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()' in libnm. * nmcli: invoking nmcli command without arguments will now show 'default' instead of null address in route4 or route6 section. The following changes were backported to 1.32.x releases between 1.32.0 and 1.32.12 are also present in NetworkManager-1.34: - 1.32.12: * Fix wrong order of addresses when restarting NetworkManager. * Preserve the IPv6 ff00::/8 route added by kernel in the local table, necessary for multicast communication. * Fix emitting the signal for changed metered status of devices. * Fix applying the ethtool autonegotiation and speed settings. * initrd: fix crash parsing plain '=' without key. * cloud-setup: use suppress_prefixlength rule to honor non-default-routes in the main table. - 1.32.10: * core: fix the order of IPv6 addresses changing on service restart. * initrd: add command line option to configure link autonegotiation and speed. * ifcfg-rh: fix crash when parsing invalid DNS address. * ifcfg-rh: extend ifup/ifdown scripts to work with connection profile names. * udev: also react to "move" (and "change") udev actions in our rules. - 1.32.8: * firewalld: configure zones on "Reloaded" signal. * core: fix wrong MTU for bridge interfaces. * cloud-setup: fix gateway address for Aliyun cloud. - 1.32.6: * core: fix adding stale local routes when address changes. * initrd: tag generated profiles with origin in user data. * core: introduce "allowed-connections" option to disallow profiles on a device. This allows to filter out profiles that originate from initrd. * core: introduce "keep-configuration" device option to forcefully activate a profile on start. * dhcp: handle filename/bootfile_name DHCP option and write it to device state file for initrd/kickstart. * initrd: add "ib.pkey=" command line option - 1.32.4: * core: remove stale entries from "seen-bssids" and "timestamp" files in "/var/lib/NetworkManager". * bond: support the peer_notif_delay option. * core: add ipv[46].required-timeout option to wait for IP configuration while activating. * core: send ARP announcements when there is carrier. * core: start DHCPv6 when a prefix delegation is needed for shared mode. * firewall: fix nftables backend to create "ip" table for IPv4 only. * initrd: set required-timeout of 20 seconds for default IPv4 configuration to opportunistically wait for IPv4. * ifcfg: log warning about invalid keys in ifcfg files. * ifcfg: reject non-UTF-8 from ifcfg files. * nmcli: show DNS SEARCH field in device information. * cloud-setup: add support for Aliyun cloud. - 1.32.2: * hostname: prefer IPv4 addresses for reverse DNS lookup. * dhcp: ignore unauthenticated FORCERENEW messages with internal, systemd-based DHCPv4 plugin (CVE-2020-13529). This plugin is not used, unless the undocumented dhcp=systemd option was set. * cloud-setup: preserve IP addresses, routes and rules from currently active connection profile. * Various bugfixes and performance improvements. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mtr: upgrade 0.94 -> 0.95wangmy2022-01-192-72/+2
| | | | | | | | 0001-Fix-a-lot-of-Werror-format-security-errors-in-printw.patch removed since it is included in 0.95. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: upgrade 36.0 -> 38.0wangmy2022-01-181-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ========= Merge pull request #1085 from rleon/upgrade-fc35 build: Update to clang 13 build: Update to Fedora 35 ci: Convert deprecated distutils Merge pull request #1084 from jgunthorpe/kernel-headers Update kernel headers build: Fix distutils deprecation warning during vuild pyverbs: Prepare code to Cython 3 mlx5: Change pthread_yield to sched_yield Merge pull request #1083 from Wenpeng-Liang/fix_db Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.6.3 -> 3.6.4Yi Zhao2022-01-1812-88/+90
| | | | | | | Refresh patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tnftp: Add missing header stdc-predef.hKhem Raj2022-01-182-0/+32
| | | | | | | | | | | | musl highlights this problem Fixes | ../../tnftp-20210827/libedit/chartype.h:47:3: error: wchar_t must store ISO 10646 characters | #error wchar_t must store ISO 10646 characters | ^ | 1 error generated. Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Yi Zhao <yi.zhao@windriver.com>
* tnftp: upgrade 20151004 -> 20210827Yi Zhao2022-01-182-46/+3
| | | | | | | | * License-Update: Update copyright years * Drop tnftp-autotools.patch as the issue had been fixed upstream Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: upgrade 2.1.4. -> 2.1.5Yi Zhao2022-01-182-1/+45
| | | | | | | Backport a patch to fix the build error. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bridge-utils: upgrade 1.7 -> 1.7.1Yi Zhao2022-01-185-15/+165
| | | | | | | | | | | * Update SRC_URI to official git repo per [1] * Refresh patches * Backport a patch to fix build error with musl [1] https://wiki.linuxfoundation.org/networking/bridge Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-queue: upgrade 1.0.3 -> 1.0.5Yi Zhao2022-01-182-1229/+1
| | | | | | | | Drop 0001-libnetfilter-queue-Declare-the-define-visivility-attribute-together.patch as the clang build issue had been fixed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: upgrade 7.11 -> 7.15Yi Zhao2022-01-181-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.0.0 -> 1.0.1Yi Zhao2022-01-181-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-scapy: remove redundant pycrypto RDEPENDSRoss Burton2022-01-181-1/+1
| | | | | | | | Scapy moved from pycrypto to cryptography in 2.4.0 (commit c24298b). Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
* ntpsec: Add glibc-2.34/kernel-5.14 seccomp fixesAlex Kiernan2022-01-054-0/+110
| | | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Alex Kiernan <alexk@zuma.ai> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-09-29 14:27:09 +0000