summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* spice-guest-vdagent: upgrade 0.22.1 -> 0.23.0Wang Mingyu34 hours1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.14 -> 2.6.15Wang Mingyu34 hours1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libiec61850: upgrade 1.5.3 -> 1.6.1Gyorgy Sarvari39 hours3-54/+21
| | | | | | | | | This update contains a fix for CVE-2024-26529, CVE-2024-45970 and CVE-2024-45971 Changelog: https://github.com/mz-automation/libiec61850/blob/v1.6/CHANGELOG Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: upgrade 12.5.0 -> 13.0.5Rajeshkumar Ramasamy39 hours2-29/+2
| | | | | | | | | | | | | | this release addressed below CVE: CVE-2025-41244 Drop 0001-Fix-build-when-compiling-with-std-c23.patch which have been merged upstream. Changelog: https://github.com/vmware/open-vm-tools/releases Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: upgrade 4.5.5 -> 4.6.3Gyorgy Sarvari39 hours3-85/+338
| | | | | | | | | | | | Drop 0001-fix-compiling-on-32-bit-systems.patch, and change to another patch that solves the same issue in OE, but is more likely to be adapted by upstream (after discussion with upstream in https://github.com/pgpool/pgpool2/pull/128) Shortlog: https://github.com/pgpool/pgpool2/compare/V4_5_5...V4_6_3 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.1 -> 1.45.9Gyorgy Sarvari39 hours1-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While working on it, also ignore CVE-2025-47711 and CVE-2025-47712. Both vulnerabilities are fixed already (they were fixed before the upgrade also, but there is no version-range associated with the CVE report). CVE-2025-47711: https://gitlab.com/nbdkit/nbdkit/-/commit/e6f96bd1b77c0cc927ce6aeff650b52238304f39 CVE-2025-47712: https://gitlab.com/nbdkit/nbdkit/-/commit/a486f88d1eea653ea88b0bf8804c4825dab25ec7 Shortlog: Merge branch '2025-optional-qemu-img' into 'master' build: Check for qemu-img and disable some tests if not present tests/curl: Skip test if 'disk' was not created server/public.c: Use common/include parse_bool function common/include: Extra bool parsing into a mini-library docs: Shorter title and tweaks to the description indexed-gzip: Include <stddef.h> to get ptrdiff_t indexed-gzip: Move variable decl outside for loop vddk: Sort synopsis into alphabetical order ext2: Update docs since filter supports concurrent connections docs: Move --short/--long-options to right place in synopsis (origin/rhel-10.2) docs: Document how to probe for server command line options server: Document --long-options and --short-options docs/nbdkit-probing.pod: Rearrange synopsis to match description server: Add --name parameter docs: Fix bolding of --log=/path option tests/test-python-plugin.py: Remove unused variables python: Add binding for nbdkit_parse_bool tests/test-python-plugin.py: Add name of test for test_parse_size (tag: v1.45.6) Version 1.45.6. Merge branch '2025-rounding' into 'master' server/public.c: Use lrint() instead of implicit conversion to int indexed-gzip: Fixes for 32-bit support indexed-gzip: More editorially neutral content Merge branch 'add-indexed-gzip-filter' into 'master' Introduce index-gzip filter Move unmodified index build/extract to ig_zran.h/c Add serialize/deserialize fn for zran structs Restructure zran.h, zran.c for use as library Import zran.c/zran.h v1.6 (2 Aug 2024) from zlib Merge branch '2025-delay-trigger' into 'master' delay: Add new delay-trigger option delay: Rearrange the options in alphabetical order in the documentation tests/test-map.sh: Fix "nbd_pread: count cannot be 0: Invalid argument" docs/nbdkit-client.pod: Document attaching NBD devices to QEMU VMs docs/nbdkit-client.pod: Combine and rename "LIMITATIONS" section Merge branch '2025-fix-golang-test' into 'master' tests/test-golang-fork-warning.sh: Fix hanging test Merge branch '2025-misc-fixes' into 'master' tests: Use 'define script' in a few more places tests: Modify make-pki and make-psk scripts to be atomic tests: Define common functions for requiring TLS certs and PSK tests/test-tls.sh: Remove unused export of pkidir tests: Generate make-psk.sh tests/make-psk.sh: Fix typo "pkstool" -> "psktool" tests: Fix typo "An good" -> "A good" map: Implement map-size feature tests/test-at-file.sh: Fix srcdir != builddir tests: Work around realpath error on BSDs Merge branch '2025-eq-file' into 'master' Merge branch '2025-server-debug' into 'master' server: Use debug() instead of nbdkit_debug() consistently in the server map: Refer to @PATH syntax in documentation server: Add @PATH syntax server/main.c: Factor out the function that parses key=value server/main.c: Fix comment server/main.c: Move key=value parsing to a new function server/options.h: Reject empty string ("") as a short name server/options.h: Add comment to is_short_name server/main.c: Reject empty string as a plugin name or filter name common: utils: Add const to <vector>_duplicate variable decls data: Use new vector_append_array in a couple of places map: Use new vector_append_array function instead of loop common: utils: vector: Fix vector_uniq prototype and add a test common: utils: vector: Add range functions for insert, append and remove common: utils: vector: Prefer vector_reset over free() Merge branch '2025-map-filter' into 'master' New filter: map for remapping arbitrary blocks common: utils: vector: Add new vector_uniq function tests/functions: Factor out 2^63-1 constant used by a few tests tests/test-cache-block-size.sh: Remove unused socket data: Minor revisions to the documentation for clarity full: Remove reference to equivalence of nbdkit-readonly-filter tests/test-floppy.sh: Simplify this test count: Add an example to the documentation common/include/test-once.c: Further fixes for pthread_barrier_t common/include/test-once.c: Skip test on macOS which lacks pthread_barrier_t Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Add PACKAGECONFIG[ad-dc] python3-markdown RDEPENDSAndrew Bradford39 hours1-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For Samba's Active Directory Domain Controller functionality, it needs to have python3-markdown listed as an RDEPENDS as well as a DEPENDS. When trying to provision a domain with samba-tool without this change then it will error out like: $ samba-tool domain provision --realm=EXAMPLE.COM --domain=EXAMPLE \ --adminpass='YourPassword123!' --server-role=dc \ --dns-backend=SAMBA_INTERNAL --use-rfc2307 <snip> Temporarily overriding 'dsdb:schema update allowed' setting ERROR(<class 'ModuleNotFoundError'>): uncaught exception - No module named 'markdown' File "/usr/lib/python3.13/site-packages/samba/netcmd/init.py", line 279, in _run return self.run(*args, **kwargs) ~~~~~~~~^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/samba/netcmd/domain/provision.py", line 343, in run result = provision(self.logger, session, smbconf=smbconf, targetdir=targetdir, ...<16 lines>... backend_store=backend_store, backend_store_size=backend_store_size) File "/usr/lib/python3.13/site-packages/samba/provision/init.py", line 2404, in provision raise e File "/usr/lib/python3.13/site-packages/samba/provision/init.py", line 2394, in provision forest = ForestUpdate(samdb, fix=True) File "/usr/lib/python3.13/site-packages/samba/forest_update.py", line 212, in init from samba.ms_forest_updates_markdown import read_ms_markdown File "/usr/lib/python3.13/site-packages/samba/ms_forest_updates_markdown.py", line 27, in <module> import markdown Signed-off-by: Andrew Bradford <andrew.bradford@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: upgrade 1.11.1 -> 1.11.2Gyorgy Sarvari4 days2-35/+1
| | | | | | | | | | This upgrade contains fixes for CVE-2023-49606 and CVE-2022-40468. Changelog: https://github.com/tinyproxy/tinyproxy/compare/1.11.1...1.11.2 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: upgrade 2.3.21.1 -> 2.4.1-4Gyorgy Sarvari4 days6-117/+58
| | | | | | | | | | | | | | | | | | Remove obsolete CVE_STATUS variable: CVE-2016-4983 is marked for v2.3. Drop 0001-not-check-pandoc.patch because it became obsolete, pandoc is not used anymore. Drop 1ccd5b54a408d12fce0c94ab0bbaedbb5ef69830.patch, because it is included in this release. Add a backported patch to fix compiling with musl. Changelog: 2.4: https://github.com/dovecot/core/releases/tag/2.4.0 2.4.1: https://github.com/dovecot/core/releases/tag/2.4.1 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: update to the latest revisionGyorgy Sarvari4 days1-2/+3
| | | | | | | | | | | | This update contains a fix for CVE-2025-55763. License-Update: copyright year bump to 2025. Shortlog since last update: https://github.com/civetweb/civetweb/compare/5864b55a94f4b5238155cbf2baec707f0fa2ba6d...b6ef58f4c4c7fbe90fd1065bccf45b143345f1a6 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: Fix the multilib configLiu Yiding2025-09-241-2/+2
| | | | | | | | | | | | | When enabling multilib with lib32, the radiusd will use etc file for lib32 as default #systemctl status radiusd ...... /usr/sbin/radiusd -d /etc/lib32-raddb It should be lib64 as default. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* znc: upgrade 1.8.2 -> 1.10.1Gyorgy Sarvari2025-09-242-26/+22
| | | | | | | | | | The project has switched to cmake since the last update. The changelog is long, but there is a link: https://github.com/znc/znc/blob/master/ChangeLog.md Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arno-iptables-firewall: upgrade 2.1.2 -> 2.1.2aGyorgy Sarvari2025-09-241-2/+2
| | | | | | | | | Changelog: - dig wrapper function was broken since 2.1.2 - No longer send nslookup/dig stderr to /dev/null Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: upgrade 7.22 -> 7.24Gyorgy Sarvari2025-09-242-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: 7.24 Userspace changes Improve fixing commas in sorted json output Fix extra quotes around elements in json output (bugzilla #1793, issue 3.) Fix commas in sorted json output (bugzilla #1793, issue 4) Fix unquoted port range in json output (bugzilla #1793, issue 1) Fix extraneous comma in terse list json output (Joachim, bugzilla #1793, issue 2) bash-completion: restore fix for syntax error (Jeremy Sowden) Correct typo in man-page (Jeremy Sowden) Kernel part changes netfilter: ipset: fix region locking in hash types Handle "netfilter: ipset: Fix for recursive locking warning" patch for backward compatibility netfilter: ipset: Fix for recursive locking warning 7.23 Userspace changes tests: runtest.sh: Keep running, print summary of failed tests (Phil Sutter) tests: cidr.sh: Fix for quirks in RHEL's ipcalc (Phil Sutter) tests: cidr.sh: Respect IPSET_BIN env var (Phil Sutter) ipset: Fix implicit declaration of function basename (Mike Pagano) tests: Reduce testsuite run-time (Phil Sutter) lib: ipset: Avoid 'argv' array overstepping (Phil Sutter) lib: data: Fix for global-buffer-overflow warning by ASAN (Phil Sutter) Kernel part changes netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) netfilter: ipset: Fix suspicious rcu_dereference_protected() Replace BUG_ON() with WARN_ON_ONCE() according to usage policy. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* keepalived: upgrade 2.3.2 -> 2.3.4Gyorgy Sarvari2025-09-243-38/+3
| | | | | | | | | | | | | 0001-vrrp-Don-t-include-linux-if_ether.h-if-not-needed.patch is included in this release, so drop the patch. Many changes and updates, easier to look in the changelogs themselves rather than pasting here: https://www.keepalived.org/release-notes/Release-2.3.3.html https://www.keepalived.org/release-notes/Release-2.3.4.html Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: upgrade 4.5.1 -> 4.5.2Archana Polampalli2025-09-233-105/+1
| | | | | | | | | | Changelog: https://github.com/appneta/tcpreplay/releases/tag/v4.5.2 Drop patches that have been merged upstream. Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: Fix service start errorLiu Yiding2025-09-222-0/+34
| | | | | | | | | | | | | Following error occurred while starting this service. Error: tls: (TLS) Failed reading certificate file "/etc/raddb/certs/server.pem" Error: tls: (TLS) error:03000072:digital envelope routines::decode error Error: tls: (TLS) error:0A00018F:SSL routines::ee key too small Error: rlm_eap_tls: Failed initializing SSL context Error: rlm_eap (EAP): Failed to initialise rlm_eap_tls Error: /etc/raddb/mods-enabled/eap[14]: Instantiation failed for module "eap" Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lldpd: upgrade 1.0.19 -> 1.0.20Wang Mingyu2025-09-161-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: upgrade 4.5.4 -> 4.5.5Jason Schonberg2025-09-151-2/+2
| | | | | | | Changelog: https://www.pgpool.net/docs/latest/en/html/release-4-5-5.html Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: update patch statusesGyorgy Sarvari2025-09-152-2/+2
| | | | | | | The patches were submitted to upstream, they are not pending anymore. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: fix compiling for 32-bit archesGyorgy Sarvari2025-09-113-0/+125
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When compiling for 32-bit targets, two issues came to surface: 1. gcc was complaining that math.h is not included in snprintf, and some calls were implicitly defined. Added a patch that includes the required headers in snprintf.c file: | snprintf.c: In function 'fmtfloat': | snprintf.c:1232:13: error: implicit declaration of function 'isnan' [-Wimplicit-function-declaration] | 1232 | if (isnan(value)) | | ^~~~~ | snprintf.c:50:1: note: include '<math.h>' or provide a declaration of 'isnan' 2. The code passes a time_t argument to a function that expects a long. This works for 64-bit targets, because on those usually time_t is long. However on 32-bit systems time_t is usually long long, which makes compilation fail with the following error: | wd_json_data.c:540:66: error: passing argument 3 of 'json_get_long_value_for_key' from incompatible pointer type [-Wincompatible-pointer-types] | 540 | if (json_get_long_value_for_key(root, "StartupTimeSecs", &wdNode->startup_time.tv_sec)) | | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ To account for this, add a new helper method in a patch that returns the required json value as a time_t value. The patches are in pending state, because the mailing list of the project is sufferring from technical problems - when the site loads, sign up attempts throw internal server errors. It is planned to submit the patches and to update the status once their infrastructure is back. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kronosnet: Upgrade to 1.31Khem Raj2025-09-072-44/+2
| | | | | | Drop Upstreamed patch Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.1.4 -> 1.1.5Wang Mingyu2025-09-041-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.12.2 -> 1.12.3Wang Mingyu2025-09-041-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: upgrade 5.3 -> 5.4Wang Mingyu2025-09-041-1/+1
| | | | | | | | | | | | | Changelog: ========= - Memory allocation safety checks for event storage (thanks David.A for bug report) - Fix off-by-one boundary check in seqmap code - The minimum value for the period (-p flag) is now 0.001 milliseconds, since it probably never makes sense to use a smaller value, and to avoid doing a very large memory allocation for event storage. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-br-posix: Fix build with clang-21Khem Raj2025-08-292-1/+34
| | | | | | | Update to latest tip of trunk Fix mbedTLS issue seen with clang-21 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdns: Upgrade 2600.120.12 -> 2600.140.3Alex Kiernan2025-08-299-22/+18
| | | | | | | Also cleanup dangling comments in the recipe. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix build with clang-21Khem Raj2025-08-211-0/+6
| | | | | | Do not mark Wincompatible-function-pointer-types warning as error Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: change ptest output formatJiaying Song2025-08-211-3/+6
| | | | | | | The format selected is the automake "simple test" format: "result: testname". Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.1.3 -> 1.1.4Wang Mingyu2025-08-201-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.12.0 -> 1.12.2Wang Mingyu2025-08-201-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ============ * Fix bug that caused that challenge was incorrectly reused if invalid or expired. * Add support for "data-ciphers-fallback" option. * Add GUI support for "data-ciphers" option. * Fix export for password connection type that was not exporting some fields. * Fix mnemonics in editor's Identity - Advanced view * Auth-dialog ported to GTK4 * Import certificates into the XDG_DATA_HOME directory. * Update translations: Hindi, Slovenian, Catalan, Polish, Brazilian Portuguese, Ukrainian, Georgian, Swedish, Hebrew, Russian and Danish. * Skip release 1.12.1 because of a bug in the release pipeline. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: upgrade 0.17.0 -> 0.17.1Wang Mingyu2025-08-201-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtdb: upgrade 1.4.13 -> 1.4.14Wang Mingyu2025-08-201-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.2.9 -> 1.3.0Wang Mingyu2025-08-201-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdaq: upgrade 3.0.20 -> 3.0.21Wang Mingyu2025-08-201-1/+1
| | | | | | | | Changelog: api: add support for handling DIOCTL_SET_INJECT_DROP Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: Add PACKAGECONFIG for data channel offloadZoltán Böszörményi2025-08-141-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | Moved the iproute2 backend enablement into a new PACKAGECONFIG. It is enabled to keep the current defaults. Added the explicit runtime dependency on iproute2-ip (the "ip" command) which this backend requires. Added a new PACKAGECONFIG[dco] which enables the libnl backend, which is mutually incompatible with iproute2 backend in OpenVPN. With these: PACKAGECONFIG:remove = "iproute2" PACKAGECONFIG:append = " dco" the data channel offload is enabled: checking for LIBNL_GENL... yes configure: Enabled ovpn-dco support for Linux With Linux kernel 6.16 or newer, and CONFIG_OVPN enabled, the data channel offload will be used. Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: bump to 2.0.22Gianfranco Costamagna2025-08-133-29/+14
| | | | | | | | Refresh patches, drop patch 3238, now part of upstream codebase Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tailscale: Added support for systemd initDean Sellers2025-08-071-6/+23
| | | | | | | | | | | | | | Includes the provided service and defaults files for using the tailscale daemon on systemd init machines. Added the other kernel modules necessary for tailscaled to work without warnings to RRECOMMENDS. Tested with `core-image-minimal` under qemu with machines `qemux86-64`, `genericx86-64` and `qemuarm64`. Ping host on tailscale network using magicDNS host lookup. Signed-off-by: Dean Sellers <dean@sellers.id.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade 1.6.38 -> 1.6.39Wang Mingyu2025-08-041-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.6.1 -> 4.7Liu Yiding2025-07-222-10/+9
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Add opencommands directive to select remote monitoring commands - Add interval option to driftfile directive - Add waitsynced and waitunsynced options to local directive - Add sanity checks for integer values in configuration - Add support for systemd Type=notify service - Add RTC refclock driver - Allow PHC refclock to be specified with network interface name - Don’t require multiple refclock samples per poll to simplify filter configuration - Keep refclock reachable when dropping samples with large delay - Improve quantile-based filtering to adapt faster to larger delay - Improve logging of selection failures - Detect clock interference from other processes - Try to reopen message log (-l option) on cyclelogs command - Fix sourcedir reloading to not multiply sources - Fix tracking offset after failed clock step - Drop support for NTS with Nettle < 3.6 and GnuTLS < 3.6.14 - Drop support for building without POSIX threads Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.43.11 -> 1.45.1Liu Yiding2025-07-212-4/+6
| | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tsocks: Always use ligcc for compiler runtime with clang on x86Khem Raj2025-07-201-1/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ruli: Fix build with clangKhem Raj2025-07-181-0/+4
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: Do not pass LDFLAGS to compilerKhem Raj2025-07-181-2/+0
| | | | | | | | | | | | | | | | | This fixed issues like incompatible hash sections it was added in 2009 [1], however these errors are not seen in todays OE builds On the contrary it regresses build with clang since it rejects the options which results in some configure test failures, resulting finally in build/compile failures arm-yoe-linux-gnueabi-clang: warning: -Wl,-O1: 'linker' input unused [-Wunused-command-line-argument] [1] https://git.openembedded.org/openembedded/commit/?id=07f750c6382476b799201b5ca47f93a5f7aa7e84 Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Jan Luebbe <jlu@pengutronix.de>
* mbedtls: upgrade 3.6.3.1 -> 3.6.4Guðni Már Gilbert2025-07-161-2/+2
| | | | | | | | | | | | | | | | | | | Fixes several security vulnerabilities: CVE-2025-49601, CVE-2025-49600, CVE-2025-52496, CVE-2025-47917, CVE-2025-48965, CVE-2025-52497, and CVE-2025-49087 The framework directory has been changed into a git submodule.[1][2] The recipe now uses Git Submodule Fetcher (gitsm) Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4 [1] https://github.com/Mbed-TLS/mbedtls/commit/8cf5666a174237998a7965e284d7ba8c1655d16d [2] https://github.com/Mbed-TLS/mbedtls/commit/c90c6d8ff787ab8787d9373b0e662a95ed1f4dae Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tailscale: add initial recipe for v1.84.3Jeroen Hofstee2025-07-165-0/+308
| | | | | | | | | | | | Tailscale is a mesh VPN built on the WireGuard protocol. On the client side, it includes a node agent (tailscaled) and a client application for configuration (tailscale). These components can be bundled into a single binary for a more smaller total size, which is done in this recipe. Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com> Signed-off-by: Mark Bath <mark@baggywrinkle.co.uk> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 6.0.1 -> 6.0.2Wang Mingyu2025-07-154-240/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-pki-Fix-signature-of-help-to-match-that-of-a-callbac.patch 0002-callback-job-Replace-return_false-in-constructors-wi.patch 0003-Cast-uses-of-return_-nop-and-enumerator_create_empty.patch removed since they're included in 6.0.2 Changelog: ============= - Support for per-CPU SAs (RFC 9611) has been added (Linux 6.13+). - Basic support for AGGFRAG mode (RFC 9347) has been added (Linux 6.14+). - POSIX regular expressions can be used to match remote identities. - Switching configs based on EAP-Identities is supported. Setting 'remote.eap_id' now always initiates an EAP-Identity exchange. - On Linux, sequence numbers from acquires are used when installing SAs. This allows handling narrowing properly. - During rekeying, the narrowed traffic selectors are now proposed instead of the configured ones. - The default AH/ESP proposals contain all supported key exchange methods plus 'none' to make PFS optional and accept proposals of older peers. - GRO for ESP in enabled for NAT-T UDP sockets, which can improve performance if the esp4|6_offload modules are loaded. - charon-nm sets the VPN connection as persistent, preventing NetworkManager from tearing down the connection if the network connectivity changes. - ML-KEM is supported via OpenSSL 3.5+. - The wolfssl plugin is now compatible to wolfSSL's FIPS module. - The libsoup plugin has been migrated to libsoup 3, libsoup 2 is not supported anymore. - The long defunct uci plugin has been removed. - Log messages by watcher_t are now logged in a separate log group ('wch'). Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mtr: upgrade 0.95 -> 0.96Wang Mingyu2025-07-151-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* relayd: Fix building with CMake 4+Khem Raj2025-07-151-0/+2
| | | | | | | | Bump minimum cmake dialect to be 3.5+, this is an openwrt component, which does not get many updates these days. Ideally the cmake files for the project should be fixed. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: Update to latest tip if trunkKhem Raj2025-07-131-2/+2
| | | | | | Fixes build with cmake4+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-10-10 16:18:17 +0000