summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* autofs: Fix build with musl >= 1.2.5Khem Raj2024-03-252-0/+59
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ssmtp: Fix build with musl >= 1.2.5Khem Raj2024-03-252-0/+33
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Fix build with musl >= 1.2.5Khem Raj2024-03-252-1/+61
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Fix build with muslKhem Raj2024-03-252-0/+84
| | | | | | | | The last patch 0012-Fix-configuration-of-NETSNMP_FD_MASK_TYPE.patch brought in with 5.9.4 upgrade is not sufficient and infact has a regression introduced for clang+musl builds. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* usrsctp: upgrade to latest versionThomas Roos2024-03-251-2/+2
| | | | | Signed-off-by: Thomas Roos <throos@amazon.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wpantund: Update to latestKhem Raj2024-03-242-1/+21
| | | | | | Add patch to support portable basename Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-br-posix: Update to latestKhem Raj2024-03-244-105/+29
| | | | | | | Drop backports Add a new patch to supply additional musl fixes Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-daemon: Update to tip of trunkKhem Raj2024-03-243-106/+4
| | | | | | Drop backports which are not already available Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: Update to 7.21Khem Raj2024-03-242-2/+53
| | | | | | Fix build with latest musl while here Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openflow: Fix build with muslKhem Raj2024-03-231-0/+3
| | | | | | | Link in external library to provide backtrace functions since they are not part of C library Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openflow: Merge .inc into .bbKhem Raj2024-03-232-63/+59
| | | | | | There is one recipe so merge the include file into recipe Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openflow: Delete recipe for 1.0Khem Raj2024-03-231-4/+0
| | | | | | _git is the maintained recipe Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.9 -> 2.6.10Yi Zhao2024-03-211-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: Update copyright years to 2024 ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.6.10/Changes.rst Security fixes: CVE-2024-27459: Windows: fix a possible stack overflow in the interactive service component which might lead to a local privilege escalation. CVE-2024-24974: Windows: disallow access to the interactive service pipe from remote computers. CVE-2024-27903: Windows: disallow loading of plugins from untrusted installation paths, which could be used to attack openvpn.exe via a malicious plugin. Plugins can now only be loaded from the OpenVPN install directory, the Windows system directory, and possibly from a directory specified by HKLM\SOFTWARE\OpenVPN\plugin_dir. CVE-2024-1305: Windows TAP driver: Fix potential integer overflow in !TapSharedSendPacket. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openlldp: upgrade 1.1.0 -> 1.1.1Wang Mingyu2024-03-202-6/+6
| | | | | | | | 0001-autotools-Add-option-to-disable-installation-of-syst.patch refreshed for 1.1.1 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkd-dispatcher: upgrade 2.1 -> 2.2.4Wang Mingyu2024-03-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Improve performance when getting interface status - update project URL - Add environment variables to manpage. - Don't start the daemon if there's nothing to do - _interface_scan: fix wrong index into iface map - _interface_scan: force handle_state for new interfaces - Add missing administrative state 'initialized' - use os.path.dirname instead of os.path.basename - make sure scripts are not writeable by non-root users - don't allow unknown operational/admin states (CVE-2022-29799, CVE-2022-29800) - Fix missing word in exception message - fix some new linting issues from pylint - manpage: fix missing slash in "configured.d" directory name - Normalize parsed IP address value - Drop support for Python 3.4 - Add testing for Python 3.10 - README.md: fix code formatting Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdnet: upgrade 1.17.0 -> 1.18.0Wang Mingyu2024-03-201-1/+1
| | | | | | | | | | Changelog: ========== -update to autotools build chain -rebuild Python bindings with latest Cython Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: remove buildpaths from civetweb-targets.cmakeYi Zhao2024-03-191-0/+5
| | | | | | | | | | Fixes: WARNING: civetweb-1.16-r0 do_package_qa: QA Issue: File /usr/lib/cmake/civetweb/civetweb-targets.cmake in package civetweb-dev contains reference to TMPDIR [buildpaths] Siuned-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bluez-tools: New recipe for bluez5 toolsJörg Sommer2024-03-183-0/+833
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* layer.conf: Prepare for release, drop nanbield LAYERSERIESKhem Raj2024-03-171-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Fix build on newer muslKhem Raj2024-03-172-0/+35
| | | | | | provide GNU like basename on non-glibc systems Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: Upgrade to latest on 9.1 stableKhem Raj2024-03-171-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Drop remaining PR values from recipesMartin Jansa2024-03-174-4/+0
| | | | | | | | | | | | * as oe-core did in: https://git.openembedded.org/openembedded-core/commit/?id=d4c346e8ab * when people are have to maintain own PRs for recipes in oe-core, they might add them for meta-oe recipes at the same time when upgrading to next LTS Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sngrep: new recipe for ncurses SIP Messages flow viewerJörg Sommer2024-03-171-0/+37
| | | | | Signed-off-by: Jörg Sommer <joerg.sommer@navimatix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unionfs-fuse, dropwatch, postgresql, yasm, multipath-tools, ↵Martin Jansa2024-03-171-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | python3-pybind11: add missing Upstream-Status * add Pending to .patch files where it was accidentally droped with upgrades or modifications in: f88e5b146e postgresql: upgrade 15.5 -> 16.2 c904e169db multipath-tools: upgrade 0.9.3 -> 0.9.8 105be9b3d9 unionfs-fuse: upgrade 2.2 --> 3.4 or new patches where the author didn't notice/care: 2a7f74cdb0 dropwatch: Use header files from sysroot instead of build host f5cc9f272a yasm: improve reproducibility 39028d0d9d python3-pybind11: Restore strip prevention patch authors of these added to CC, please be more careful with removing or not adding these or enable patch-status in ERROR_QA for your builds, see: https://lists.openembedded.org/g/openembedded-core/topic/104922136#197113 * added with: for p in `/OE/layers/openembedded-core/scripts/contrib/patchreview.py -v . | grep Missing.Upstream-Status.tag | sed 's/.*(//g;s/)$//g'`; do grep -q ^Upstream-Status: $p || sed -i "s/^---$/\nUpstream-Status: Pending\n---/g" $p; grep -q ^Upstream-Status: $p || sed -i "1iUpstream-Status: Pending\n" $p; done Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* layer.conf: Update for the scarthgap release seriesKhem Raj2024-03-161-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.19.4 -> 4.19.5Yi Zhao2024-03-101-1/+2
| | | | | | | | | | | | | Release Notes: https://www.samba.org/samba/history/samba-4.19.5.html Specify --pythondir to fix do_package_qa QA Issue: WARNING: samba-4.19.5-r0 do_package_qa: QA Issue: File /usr/lib/libsamba-util.so.0.0.1 in package libsamba-util contains reference to TMPDIR [buildpaths] Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netcf: Fix build with latest gnulibKhem Raj2024-03-092-1/+84
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcprelay: fix a minor cross compilation do_configure issueChen Qi2024-03-082-0/+52
| | | | | | | | | | | | | | | | We're seeing errors like below in log.do_configure: ./conftest: cannot execute binary file: Exec format error The tcprelay's configure have two places to execute ./conftest. And the result happens to be correct even with the error above. Instead of leaving the errors as they are, we explicitly skip running ./conftest in case of cross compiling. The build will continue to succeed and result will remain the same. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: upgrade 5.9.3 -> 5.9.4Yi Zhao2024-03-0817-206/+118
| | | | | | | | | | | | | | ChangeLog: https://github.com/net-snmp/net-snmp/blob/V5-9-patches/CHANGES * Refresh patches * Drop backport CVE patch * Drop 0001-Add-noreturn-attribute-to-netsnmp_pci_error.patch as the issue has been fixed upstream. * Add a patch to fix build on musl Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: Upgrade to 6.8Khem Raj2024-03-086-138/+3
| | | | | | Drop a patch which was needed for older gcc Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.8.5 -> 3.8.6Yi Zhao2024-03-081-1/+1
| | | | | | | | ChangeLog: https://www.postfix.org/announcements/postfix-3.8.6.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: 1.44.0 -> 1.46.0Yi Zhao2024-03-081-1/+1
| | | | | | | | | | | | | ChangeLog: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.46.0/NEWS Highlights: - Drop build with python2, python3 is now required - Support randomizing the MAC address based on the Wi-Fi network - IPv4 DAD (Duplicate Address Detection) enabled by default Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.69 -> 5.72Wang Mingyu2024-03-082-18/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fix-openssl-no-des.patch refreshed for 5.72 License-Update: Copyright year updated to 2024. Changelog: =========== * Security bugfixes - OpenSSL DLLs updated to version 3.2.1. - OpenSSL FIPS Provider updated to version 3.0.8. * Bugfixes - Fixed SSL_CTX_new() errors handling. - Fixed OPENSSL_NO_PSK builds. - Android build updated for NDK r23c. - stunnel.nsi updated for Debian 12. - Fixed tests with OpenSSL older than 1.0.2. - Fixed the console output of tstunnel.exe. - Fixed TLS socket EOF handling with OpenSSL 3.x. This bug caused major interoperability issues between stunnel built with OpenSSL 3.x and Microsoft's Schannel Security Support Provider (SSP). - Fixed reading certificate chains from PKCS#12 files. * Features sponsored by SAE IT-systems - OCSP stapling is requested and verified in the client mode. - Using "verifyChain" automatically enables OCSP stapling in the client mode. - OCSP stapling is always available in the server mode. - An inconclusive OCSP verification breaks TLS negotiation. This can be disabled with "OCSPrequire = no". - Added the "TIMEOUTocsp" option to control the maximum time allowed for connecting an OCSP responder. * Features - Added support for Red Hat OpenSSL 3.x patches. - Added configurable delay for the "retry" option. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtdb: upgrade 1.4.9 -> 1.4.10Wang Mingyu2024-03-082-8/+33
| | | | | | | | 0001-tdb-Add-configure-options-for-packages.patch refreshed for 1.4.10 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: upgrade 2.4.1 -> 2.4.2Wang Mingyu2024-03-082-8/+33
| | | | | | | | 0001-talloc-Add-configure-options-for-packages.patch refreshed for 2.4.2 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.4.37 -> 6.4.38Wang Mingyu2024-03-081-1/+1
| | | | | | | | | | | | Changelog: ========== -updates translations, and tightens OpenSSL/wolfSSL version requirements in order to track their security fixes and deprecations. OpenSSL 3.0.9, 3.1.4, 3.2.0 and wolfSSL 5.6.2 (or newer on the respective compatible branches) remain supported. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: Fix build with postgresql 16+Khem Raj2024-03-052-0/+26
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: Upgrade to 4.5.1Khem Raj2024-03-052-39/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd-utils: Fix a udev rule reproducibilityYoann Congal2024-03-052-0/+57
| | | | | | | | | | | | | drbd-utils configure step check the build host udev version to enable or disable the target udev rule. This leads to a clear non-reproducibility. This patch fixes this by adding a configure option to the configure step which allows to skip the udev version checks and unconditionally enable the udev rule. Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd-utils: Drop a duplicated line in DESCRIPTIONYoann Congal2024-03-051-1/+0
| | | | | | | | Line "DRBD mirrors a block device over the network to another machine" is written twice in DESCRIPTION. Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd-utils: Disable warnings as errorsKhem Raj2024-03-021-0/+3
| | | | | | | Newer clang ( 18+ ) finds more warnings and treats them as errors therefore disable warnings-as-errors Signed-off-by: Khem Raj <raj.khem@gmail.com>
* drbd-utils: upgrade 9.22.0 -> 9.27.0Xiangyu Chen2024-03-025-165/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | rebased patches: 0001-drbd-utils-support-usrmerge.patch 0001-drbdmon-add-LDFLAGS-when-linking.patch removed patches that already in upstream code repository 0001-replace-off64_t-with-off_t.patch 0002-drbdadm-drop-use-of-GLOB_MAGCHAR-use-strchr-heuristi.patch add keyutils depends Change log ========== 9.27.0 * adjust,v9: retry for diskless primaries * tests: sanitize env (e.g., TZ) * drbdmeta: dump and restore the members field 9.26.0 * config,v9: new config option load-balance-paths * config,v9: new config options rdma-ctrls-(snd|rcv)buf-size * drbdadm,v9: fix segfault if proxy has no path * drbd: increase maximum CPU mask size * systemd: introduce drbd-graceful-shutdown.service * drbdmeta,v9: fix regression, allow attach after offline resize * drbdsetup,v9: add path established information to JSON status * events2: terminate on module unload even under --poll * events2: specif exit code if module unload * docs: add spdx license file * drbdmon: various smaller improvements * drbdsetup,v9: support for TLS/kTLS 9.25.0 * drbdsetup,v9,show: fix meta disk format for json * drbdmon: various updates * build: fix RHEL6 spec builds * drbdmeta: {hex,}dump superblock * drbdmon: major rewrite * build: gcc v12 cleanups * misc: put locks into separate dir * selinux: add fowner fsetsid, they dropped a global noaudit rule 9.24.0 * windrbd: various fixes * v9: Support user-defined block-size * doc,v9: improvements all over the place * drbdadm,v9: implement drbdadm role <res:peer> * drbdadm,v9: pass --verbose/--statistics to drbdsetup status * drbd{adm,meta}: add repair-md subcommand 9.23.1 * drbdadm,v9,resync-after: fix too strict check 9.23.0 * drbdadm,v9,floating: fixup fake uname for 9.2.x strict_names=1 * drbdadm,v9,parser: fixup globs, also rm GNU libc specific extensions * drbdadm,v9,parser: allow via outside-address for NATed peers Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.7 -> 2.6.9Yi Zhao2024-03-021-2/+2
| | | | | | | | | | | | License-Update: Remove conditional text for Apache2 linking exception[1] ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.6.9/Changes.rst [1] https://github.com/OpenVPN/openvpn/commit/20bc8bd5af9d1ee0489d0ee58ae9c2c2f9b0cf9f Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.7.3 -> 3.8.5Yi Zhao2024-03-013-53/+18
| | | | | | | | | | | | | | | | | ChangeLog: https://www.postfix.org/announcements/postfix-3.8.0.html https://www.postfix.org/announcements/postfix-3.8.1.html https://www.postfix.org/announcements/postfix-3.8.2.html https://www.postfix.org/announcements/postfix-3.8.3.html https://www.postfix.org/announcements/postfix-3.8.4.html https://www.postfix.org/announcements/postfix-3.8.5.html * Drop 0006-makedefs-Account-for-linux-6.x-version.patch as the issue has been fixed upstream. * Merge inc file into single recipe Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: fix do_configure error when using dashYi Zhao2024-02-281-2/+4
| | | | | | | | | | | | | | We encountered a do_configure error when using dash on Ubuntu 20.04: conftest.c:31:26: fatal error: Python.h: No such file or directory 31 | #include <Python.h> | ^~~~~~~~~~ It seems that PYTHON_CPPFLAGS is not passed to configure command correctly. Use configuration option --with-pythoncflags instead of passing it in cmdline. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-fortisslvpn: use python3native and depend on ↵Martin Jansa2024-02-271-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | python3-packaging-native * it uses gdbus-codegen from glib-2.0-native which depended on python3-distutils-native until https://lists.openembedded.org/g/openembedded-core/message/196136 but distutils on host was enforced by sanity check only until mickledore with: https://git.openembedded.org/openembedded-core/commit/?id=8e3a5b0709384f2b455a82ac1e8e212686fe4456 so on hosts without distutils this was already failing with: http://errors.yoctoproject.org/Errors/Details/754697/ gdbus-codegen \ --generate-c-code src/nm-fortisslvpn-pppd-service-dbus \ --c-namespace NMDBus \ --interface-prefix org.freedesktop.NetworkManager \ ../NetworkManager-fortisslvpn-1.4.0/src/nm-fortisslvpn-pppd-service.xml Traceback (most recent call last): File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/bin/gdbus-codegen", line 53, in <module> from codegen import codegen_main File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/codegen_main.py", line 29, in <module> from . import dbustypes File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/dbustypes.py", line 22, in <module> from . import utils File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/utils.py", line 22, in <module> import distutils.version ModuleNotFoundError: No module named 'distutils' make: *** [Makefile:2081: src/nm-fortisslvpn-pppd-service-dbus.h] Error 1 and the glib-2.0-native change only changes the dependency from distutils to packaging which results in: http://errors.yoctoproject.org/Errors/Details/754693/ gdbus-codegen \ --generate-c-code src/nm-fortisslvpn-pppd-service-dbus \ --c-namespace NMDBus \ --interface-prefix org.freedesktop.NetworkManager \ ../NetworkManager-fortisslvpn-1.4.0/src/nm-fortisslvpn-pppd-service.xml Traceback (most recent call last): File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/bin/gdbus-codegen", line 53, in <module> from codegen import codegen_main File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/codegen_main.py", line 29, in <module> from . import dbustypes File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/dbustypes.py", line 22, in <module> from . import utils File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/utils.py", line 22, in <module> import packaging.version ModuleNotFoundError: No module named 'packaging' make: *** [Makefile:2081: src/nm-fortisslvpn-pppd-service-dbus.h] Error 1 * packaging probably isn't as wide spread on host distros as old distutils was, so make sure it's available by using python3-native with python3-packaging-native from OE build Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-networking: Express dependency on meta-pythonKhem Raj2024-02-261-2/+1
| | | | | | | python3-scapy recipe needed python3-mock package for ptests which is provided by meta-python. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dnsmasq: Upgrade 2.89 -> 2.90Peter Marko2024-02-263-84/+1
| | | | | | | | | | Fixes CVE-2023-50387 and CVE-2023-50868 Remove backported CVE patch. Remove patch for lua as hardcoding lua version was removed. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: fix snort.pcMartin Jansa2024-02-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | * fixes: ERROR: lib32-snort3-3+git-r0 do_populate_sysroot: QA Issue: snort.pc failed sanity test (tmpdir) in path lib32-snort3/3+git/sysroot-destdir/usr/lib/pkg * it's broken for non-multilib builds as well, the issue is that FLEX_CPPFLAGS points to native include dir, e.g. FLEX_CPPFLAGS=-I/OE/../lib32-snort3/3+git/recipe-sysroot-native/usr/include and the work around from: https://github.com/openembedded/meta-openembedded/commit/973647848049abda6f2adbee0189720109863731 sed -i "s#${RECIPE_SYSROOT}##g" ${D}${libdir}/pkgconfig/snort.pc strips the "/OE/../lib32-snort3/3+git/recipe-sysroot" part in non-multilib case, but leaves: FLEX_CPPFLAGS=-I-native/usr/include which is still wrong, but not detected by buildpaths QA check anymore and in multilib case, this didn't strip the first part because the target sysroot is: "/OE/../lib32-snort3/3+git/lib32-recipe-sysroot" so it didn't strip anything from native sysroot: "/OE/../lib32-snort3/3+git/recipe-sysroot-native" Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: drop SRCPV from PVMartin Jansa2024-02-261-1/+1
| | | | | | | | * as other recipes did in: https://git.openembedded.org/meta-openembedded/commit/?id=21f956598ddb1bb08855fbc9a3293acf957154d1 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>