summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* open-vm-tools: Avoid GLib g_free macro redefinition errorKhem Raj5 days2-0/+32
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vsomeip: upgrade 3.5.10 -> 3.5.11Yi Zhao6 days4-15/+99
| | | | | | | | | | | ChangeLog: https://github.com/COVESA/vsomeip/releases/tag/3.5.11 * Refresh local patches * Fix build with boost 1.89 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python-scapy: Ignore failing ptestsKhem Raj6 days3-1/+52
| | | | | | These tests fail in OE qemu environment and is sensitive to ISP provider Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lkcp-tools: Fix test_1_to_1_recvfrom ptest failureKhem Raj7 days2-0/+48
| | | | | | | Build it with fortify disabled to get the intended behavior of the test Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-scapy: Upgrade to 2.6.1Khem Raj7 days1-3/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.36 -> 2.0.37Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.12 -> 1.45.14Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcpr: upgrade 1.12.0 -> 1.13.0Wang Mingyu8 days1-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Implement support for CURLOPT_CAINFO_BLOB - Added support for CURLOPT_SSLCERT_BLOB - Refactor: Pass std::string_view by value instead of by const reference - Add connection pool option (V3) - fix: Calling empty callbacks - fix: callback function pointer type mismatch in writeFunction - 1.12.0 CI Fixes - fix: Cmake config file - fix: make is_same_v check constexpr in set_option_internal - cpr::MultiPerform fixes - #1047 and #1186 - Bump actions/setup-python from 5 to 6 - Bump actions/checkout from 3 to 5 - Allow disabling PSL - Make curl dependency management optional - curl_container: allow calling GetContent without CurlHolder - Bump stefanzweifel/git-auto-commit-action from 6 to 7 - Bump actions/upload-artifact from 4 to 5 - Bump actions/setup-python from 1 to 5 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* corosync: upgrade 3.1.9 -> 3.1.10Wang Mingyu8 days2-72/+2
| | | | | | | | CVE-2025-30472.patch removed since it's included in 3.1.10 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Backport fixes to build with glibc 2.43Khem Raj12 days5-0/+902
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: remove buildtime installation of /var/lib/chronyVishwas Udupa13 days1-6/+8
| | | | | | | | | | | | | Since commit 3200122d68 (chrony: create /var/lib/chrony by systemd-tmpfiles) tmpfiles.d mechanism already ensures populating /var/lib/chrony at runtime. Introduce volatiles mechanism to make sure the directory is created at runtime for sysvinit as well. Since /var/lib/chrony is populated at runtime, stop packaging at build time. this helps to align towards stateless system expectations or when updates are done via meta-updater. Signed-off-by: Vishwas Udupa <vudupa@qti.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: update UPSTREAM_CHECK_REGEXYi Zhao13 days1-1/+1
| | | | | | | | | | | | | | | | | Update UPSTREAM_CHECK_REGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version dhcp-relay INFO: Current version: 4.4.3p1 INFO: Latest version: 4.4.3 After the patch: $ devtool latest-version dhcp-relay INFO: Current version: 4.4.3p1 INFO: Latest version: 4.4.3-P1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: add UPSTREAM_CHECK_URIYi Zhao13 days1-0/+1
| | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_URI to check the correct latest stable verison. Before the patch: $ devtool latest-version ntp INFO: Current version: 4.2.8p18 INFO: Latest version: After the patch: $ devtool latest-version ntp INFO: Current version: 4.2.8p18 INFO: Latest version: 4.2.8p18 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdaq: upgrade 3.0.21 -> 3.0.22Wang Mingyu2025-11-111-1/+1
| | | | | | | | Changelog: api: add drop reason in daq flow stats Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* atftp,tftp-hpa,vsftpd,dante,stunnel: Disable and remove tcp-wrapper supportKhem Raj2025-11-118-73/+11
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: Fix build with glibc 2.43Khem Raj2025-11-102-0/+249
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: Upgrade to 3.9.7.0Khem Raj2025-11-102-3/+48
| | | | | | Fix build with C23 glibc while here Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: fix pytalloc package orderingMoraless Philius2025-11-101-4/+6
| | | | | | | | | | The libtalloc recipe did not properly populate the pytalloc package because pytalloc was listed after the main libtalloc package in the PACKAGES variable. As a result, the pytalloc package contained only talloc.so and was missing other required files. Signed-off-by: Moraless Philius <moraless.philius5@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tunctl: inherit sourceforge-releases classYi Zhao2025-11-091-0/+2
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version tunctl INFO: Current version: 1.5 INFO: Latest version: After the patch: $ devtool latest-version tunctl INFO: Current version: 1.5 INFO: Latest version: 1.5 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: add UPSTREAM_CHECK_REGEXYi Zhao2025-11-091-0/+1
| | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_REGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version tcpreplay INFO: Current version: 4.5.2 INFO: Latest version: After the patch: $ devtool latest-version tcpreplay INFO: Current version: 4.5.2 INFO: Latest version: 4.5.2 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* radvd: add UPSTREAM_CHECK_URIYi Zhao2025-11-091-0/+3
| | | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_URI and UPSTREAM_CHECK_REGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version radvd INFO: Current version: 2.20 INFO: Latest version: After the patch: $ devtool latest-version radvd INFO: Current version: 2.20 INFO: Latest version: 2.20 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ptpd: inherit sourceforge-releases classYi Zhao2025-11-091-3/+1
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version ptpd INFO: Current version: 2.3.1 INFO: Latest version: After the patch: $ devtool latest-version ptpd INFO: Current version: 2.3.1 INFO: Latest version: 2.3.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: add UPSTREAM_CHECK_URIYi Zhao2025-11-091-1/+2
| | | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_URI and UPSTREAM_CHECK_REGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version postfix INFO: Current version: 3.10.5 INFO: Latest version: After the patch: $ devtool latest-version postfix INFO: Current version: 3.10.5 INFO: Latest version: 3.10.5 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: inherit sourceforge-releases classYi Zhao2025-11-091-1/+1
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version openipmi INFO: Current version: 2.0.36 INFO: Latest version: After the patch: $ devtool latest-version openipmi INFO: Current version: 2.0.36 INFO: Latest version: 2.0.37 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* PATCH 2/8] netcat: inherit sourceforge-releases classYi Zhao2025-11-091-1/+1
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version netcat INFO: Current version: 0.7.1 INFO: Latest version: After the patch: $ devtool latest-version netcat INFO: Current version: 0.7.1 INFO: Latest version: 0.7.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: add UPSTREAM_CHECK_URIYi Zhao2025-11-091-0/+3
| | | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_URI and UPSTREAM_CHECK_REGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version ipset INFO: Current version: 7.24 INFO: Latest version: After the patch: $ devtool latest-version ipset INFO: Current version: 7.24 INFO: Latest version: 7.24 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netsniff-ng: upgarde 0.6.8 -> 0.6.9Gyorgy Sarvari2025-11-082-33/+2
| | | | | | | | | | | | | | | | | | Source branch was renamed from master to main. Drop patch that was incorporated in this release. Changelog: Use GitHub actions for CI Allow to manually define CPUs for trafgen Fix make install and output netsniff-ng stats on stderr trafgen: Fix for ipv6 header generation when L3-only devices are present mausezahn: use getopt_long instead of getopt build: fix install dependencies in Makefile template trafgen: move cpu stats temp file to /tmp ring_tx: handle EINTR from sendto Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: update SRC_URI branchGyorgy Sarvari2025-11-081-1/+1
| | | | | | | Branch was renamed. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* http-parser: fix SRC_URI branchGyorgy Sarvari2025-11-081-1/+1
| | | | | | | master was renamed to main Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ncftp: correct SRC_URIGyorgy Sarvari2025-11-081-2/+2
| | | | | | | | The used version was moved to another folder - and was also repackaged with gzip compression. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: multilib-header fix for freeradius/features.hLiu Yiding2025-11-061-0/+1
| | | | | | | | | | Fix following conflicts when enabling multilib. Error: Transaction test error: file /usr/include/freeradius/features.h conflicts between attempted installs of freeradius-dev-3.2.8-r0.x86_64_v3 and lib32-freeradius-dev-3.2.8-r0.core2_32 Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vsomeip: upgrade 3.5.3 -> 3.5.10Yi Zhao2025-11-069-69/+298
| | | | | | | | | | | | | | | | | ChangeLog: https://github.com/COVESA/vsomeip/releases/tag/3.5.4 https://github.com/COVESA/vsomeip/releases/tag/3.5.5 https://github.com/COVESA/vsomeip/releases/tag/3.5.6 https://github.com/COVESA/vsomeip/releases/tag/3.5.7 https://github.com/COVESA/vsomeip/releases/tag/3.5.8 https://github.com/COVESA/vsomeip/releases/tag/3.5.9 https://github.com/COVESA/vsomeip/releases/tag/3.5.10 * Fix build with boost 1.89 * Fix build on 32-bit host Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 3.6.4 -> 3.6.5Gyorgy Sarvari2025-11-041-1/+1
| | | | | | | | | | | | Contains fixes for CVE-2025-54764 and CVE-2025-59438 Also, add the recipe to the ptest image list, because it was missing. Ptests passed successfully. Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.5 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Fix CVE-2025-9817Vijay Anusuri2025-11-042-0/+33
| | | | | | | | | | | Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/39daba5e247ea495f88b0be82f0b7ebbdbf50fba Link: https://gitlab.com/wireshark/wireshark/-/issues/20642 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-9817 https://ftp.lysator.liu.se/pub/opensuse/update/leap/15.6/sle/src/wireshark-4.2.13-150600.18.26.1.src.rpm Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Upgrade 4.2.12 -> 4.2.14Vijay Anusuri2025-11-041-1/+1
| | | | | | | | | | | | | releasenote: https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html Includes security fix CVE-2025-11626 Link: https://gitlab.com/wireshark/wireshark/-/issues/20724 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 6.0.2 -> 6.0.3Yi Zhao2025-11-021-1/+1
| | | | | | | | ChangeLog: https://github.com/strongswan/strongswan/releases/tag/6.0.3 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: upgrade 7.2 -> 7.3Peter Marko2025-11-011-1/+1
| | | | | | | | | | | | | | * https://github.com/squid-cache/squid/releases/tag/SQUID_7_3 - Regression Bug 5520: ERR_INVALID_URL for CONNECT host with leading digit - Quit NTLM authenticate() on missing NTLM authorization header - Fix Auth::User::absorb() IP list transfer logic - Fix type mismatch in new/delete of addrinfo::ai_addr - Fix libntlmauth string parsing on big-endian machines - ... and some code cleanups - ... and some CI improvements Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: Fix service start errorLiu Yiding2025-10-311-1/+4
| | | | | | | | | | | | 1.Fix following dovecot.service starting error. dovecot[364]: doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 48: cert_file: open(/etc/dovecot/ssl-cert.pem) failed: No such file or directory systemd[1]: dovecot.service: Main process exited, code=exited, status=89/n/a systemd[1]: dovecot.service: Failed with result 'exit-code'. 2. There is no need to do "touch ${D}/etc/dovecot/dovecot.conf" as it was created by dovecot after dovecot was upgraded to 2.4.1-4. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: upgrade 2.1 -> 2.4Patrick Williams2025-10-292-41/+2
| | | | | | | | mctp-2.4 was released. It includes a previously submitted patch, so drop that. Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* squid: upgrade 7.1 -> 7.2Peter Marko2025-10-293-56/+3
| | | | | | | | | | Handles CVE-2025-62168. Remove CVE patch included in this release. Refresh remaining patches. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.7 -> 4.8Bastian Krause2025-10-292-35/+1
| | | | | | | | | | | | | | | | | | | | | | | | | 0001-Fix-compilation-with-musl.patch is obsolete due to 948ecf8 ("hash: include util.h for MIN macro") included in chrony since version 3.5. From chrony's NEWS [1] for the 4.8 release: Enhancements ------------ * Add maxunreach option to limit selection of unreachable sources * Add -u option to chronyc to drop root privileges (default chronyc user is set by configure script) Bug fixes --------- * Hide chronyc socket to mitigate unsafe permissions change * Fix refclock extpps option to work on Linux >= 6.15 * Validate refclock samples for reachability updates [1] https://chrony-project.org/news.html Signed-off-by: Bastian Krause <bst@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: update 0.15.2 -> 0.16.0Markus Volk2025-10-291-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Major Changes in 0.16: Added Added DMA-BUF encoder support for GStreamer 1.24+ Implemented hardware-accelerated encoding for Intel GPUs Added environment variable SPICE_CONVERTER_PREFERRED_FORMAT to override converter format Multi-plane GL scanout support (new spice_qxl_gl_scanout2()) Changed Improved memslot to preserve address bits for ARM64 TBI/AMD UAI/Intel LAM Optimized BGR24/BGRX32 conversion when JCS_EXTENSIONS is defined Removed GStreamer 0.10 support Send real time to client, instead of synchronizing on both ends, attempting to fix latency issue Fixes Fixes a GL_DRAW cookie assertion race Add SSL_OP_NO_RENEGOTIATION fallback path, fixing w/LibreSSL 3.7.2 builds Fix Win32 builds Fix TCP_NOPUSH usage on Darwin Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocols: update 0.14.4 -> 0.14.5Markus Volk2025-10-291-1/+1
| | | | | | | | | Major changes in 0.14.5 ======================= * Add SPICE_MSG_DISPLAY_GL_SCANOUT2_UNIX * Fix for Windows Arm64 build Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: upgrade 3.2.7 -> 3.2.8Yi Zhao2025-10-297-8536/+345
| | | | | | | | | | | | | | | | ChangeLog: https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_8 * Add PACKAGECONFIG[kafka] * Drop backport patch 0018-Fix-Service-start-error.patch * Refresh 0013-raddb-certs-Makefile-fix-the-occasional-verification.patch * Drop 0019-freeradius-Remove-files-which-have-license-issues.patch and backport upstream patches to fix license issue[1]. [1] https://github.com/FreeRADIUS/freeradius-server/issues/5664 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.10 -> 1.45.12Wang Mingyu2025-10-291-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postfix: upgrade 3.10.1 -> 3.10.5Yi Zhao2025-10-292-33/+1
| | | | | | | | | | | | | | ChangeLog: http://www.postfix.org/announcements/postfix-3.10.2.html http://www.postfix.org/announcements/postfix-3.10.3.html http://www.postfix.org/announcements/postfix-3.10.4.html http://www.postfix.org/announcements/postfix-3.10.5.html Drop 0006-postfix-add-preliminary-setting.patch as the issue has been fixed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: fix ptestsGyorgy Sarvari2025-10-282-1/+41
| | | | | | | | | | | | | | | | | | | Add missing kernel module dependencies, fix a script that is trying to run python instead of python3, and add a patch that fixes a test (submitted upstream). There are 2 notes: 1. For the tests to succeed the kernel must be compiled with CONFIG_NFT_TPROXY 2. There is 1 testcase that seems to be flaky: 0002-persist testcase randomly fails. When it is comparing the test output with the expected output, sometimes there is a comment present, and sometimes there isn't. Couldn't get to the bottom of this. The second point is the reason why the recipe remains on the PTESTS_PROBLEMS_META_NETWORKING list. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-scapy: fix ptestsGyorgy Sarvari2025-10-283-1/+20
| | | | | | | | | | | | | | | | 1. Install missing test files 2. Enable network access by setting a nameserver in resolv.conf because some tests require this 3. One test tries to ping Google through IPv6 - this test requires ipv6 DISTRO_FEATURE. In case ipv6 is not enabled, skip this test from the run-ptest script. NB: the last mentioned test to work also requires IPv6 support from your ISP. My ISP is IPv4-only, and I couldn't try it out. The above comes from my reading of the testcode. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lksctp-tools: move ptest from problem-list to slow-listGyorgy Sarvari2025-10-281-1/+1
| | | | | | | | The tests execute and pass successfully - I managed to run them successfully, without a change on x86-64 and aarch64. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* net-snmp: fix ptestsGyorgy Sarvari2025-10-282-2/+6
| | | | | | | Add missing dependencies. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>