linux/meta-openembedded.git/meta-networking/recipes-connectivity, branch wrynose

networkmanager: re-implement the vala detection

2026-04-25T01:39:52+00:00

The introduction of DISTRO_FEATURES_OPTED_OUT allows rewriting the DISTRO_FEATURES by removing whatever is in DISTRO_FEATURES_OPTED_OUT from DISTRO_FEATURES. Thus, the logic of vala can be negated, and it can changed be to see if gobject-introspection-data is available in DISTRO_FEATURES. Signed-off-by: Jose Quaresma Signed-off-by: Khem Raj

networkmanager: DISTRO_FEATURES_BACKFILL_CONSIDERED -> DISTRO_FEATURES_OPTED_OUT

2026-04-22T06:12:37+00:00

Variable DISTRO_FEATURES_BACKFILL_CONSIDERED has been renamed to DISTRO_FEATURES_OPTED_OUT. Signed-off-by: Jose Quaresma Signed-off-by: Khem Raj

wolfssl: mark fixed CVEs as patched

2026-04-20T14:35:37+00:00

Details: https://nvd.nist.gov/vuln/detail/CVE-2026-5188 https://nvd.nist.gov/vuln/detail/CVE-2026-5392 https://nvd.nist.gov/vuln/detail/CVE-2026-5393 https://nvd.nist.gov/vuln/detail/CVE-2026-5447 https://nvd.nist.gov/vuln/detail/CVE-2026-5448 https://nvd.nist.gov/vuln/detail/CVE-2026-5460 https://nvd.nist.gov/vuln/detail/CVE-2026-5466 https://nvd.nist.gov/vuln/detail/CVE-2026-5479 https://nvd.nist.gov/vuln/detail/CVE-2026-5500 All of these CVEs are fixed in the current recipe version, however NVD tracks them without version. Each NVD advisory references the corresponding fix, and each of them are contained in 5.9.1. Mark all of them as patched explicitly. Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

dhcp-relay: disable C23 support to fix configure check

2026-04-16T19:21:06+00:00

Set ac_cv_prog_cc_c23=no to prevent autoconf from detecting C23 compiler support, avoiding potential build failures as the package is not yet fully ported to support C23 standard. Signed-off-by: Khem Raj

mosquitto: install default mosquitto.conf for systemd compatibility

2026-04-15T06:46:26+00:00

The upgrade to mosquitto 2.1.2 follows an upstream change where the default configuration file is only installed as ${sysconfdir}/mosquitto/mosquitto.conf.example. However, the shipped systemd service explicitly starts mosquitto using ${sysconfdir}/mosquitto/mosquitto.conf. If this file is not present, the daemon exits immediately and the service fails to start. Install the default mosquitto.conf alongside the example file, using the upstream-provided configuration, to match the expectations of the service unit and ensure the service starts correctly by default, as done with the 2.0.22 version. Signed-off-by: Ricardo Salveti Signed-off-by: Khem Raj

wolfssl: upgrade 5.9.0 -> 5.9.1

2026-04-14T09:16:51+00:00

Contains many CVE fixes. Changelog: https://github.com/wolfSSL/wolfssl/releases/tag/v5.9.1-stable There are a number of fixed CVEs in this version that are tracked without version by NVD - mark them as patched explicitly. Ptests passed: Test script returned: 0 unit_test: Success for all configured tests. PASS: Wolfssl Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

ez-ipupdate: add CVE tag to CVE-fixing patch

2026-04-13T22:28:24+00:00

An already existing patch fixes a CVE (CVE-2004-0980), but it since the patch didn't have the CVE tag, the cve checker did not pick it up. Rectify this ommission. CVE details: https://nvd.nist.gov/vuln/detail/CVE-2004-0980 The same patch is used by Gentoo to mitigate this issue. Gentoo CVE advisory: https://security.gentoo.org/glsa/200411-20 Linked Gentoo bug, containing this patch: https://bugs.gentoo.org/69658 Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj

tailscale: upgrade 1.84.3 -> 1.94.2

2026-04-12T23:42:05+00:00

-Update tailscale recipe to version 1.94.2 -Regenerate go module dependencies and license checksums -Export GOFLAGS with build tags so do_update_modules discovers all dependencies -Manually verify and complete Unknown license entries Signed-off-by: Ayoub Zaki Signed-off-by: Khem Raj

samba: upgrade 4.19.9 -> 4.23.5

2026-04-11T15:44:33+00:00

Samba has a new build-time dependency, libquic[1]. The repository builds an out-of-tree kernel module and a regular userspace library with the same build script, however the Makefile seems to be fairly hostile to cross-compilation. The Samba tarball also vendors the same with their own build script - for now, this venodred version is used. There are some efforts that the kernel part is mainlined[2], once it happens it should be possible to easily remove this from the recipe. pyldb was removed from RDEPENDS, as it seems that samba now builds its own version of it. Patches updated, unneeded patches dropped. Some patches contained a considerable amount of whitespace changes - those were trimmed for the ease of rebasing. Changelog: https://gitlab.com/samba-team/samba/-/blob/samba-4.23.5/WHATSNEW.txt?ref_type=tags (Switch to other branches to see earlier changelogs) [1]: https://github.com/lxin/quic/ [2]: https://github.com/lxin/net-next/commits/quic/ Signed-off-by: Gyorgy Sarvari Signed-off-by: Khem Raj Signed-off-by: Khem Raj

freeradius: Update to latest on 3.2 release

2026-04-11T00:25:49+00:00

Drop backports which are already in this SHA update Add -DTLS_STORAGE_CLASS=__thread via cflags Signed-off-by: Khem Raj