summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity
Commit message (Collapse)AuthorAgeFilesLines
* networkmanager: upgrade 1.52.2 -> 1.56.0Andrej Kozemcak2 days2-5/+77
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Create path to fix `meson` build errors Add missing dependencies. Disables man page generation. The build was using xsltproc to try downloading http://docbook.sourceforge.net/release/xsl/current/manpages/docbook.xsl from the network, which fails in embedded build environments. Changelog: v1.56.0 https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.56.0/NEWS?ref_type=tags Changed: - Unify the versioning to use everywhere the scheme with the -rcX or -dev suffixes when appropriate. This affects, for example, the URL and filename of the release tarball and the version reported by nmcli and the daemon. As an exception, the C API will continue to use the 90+ scheme for RC versions. - nmcli now supports viewing and managing WireGuard peers. - Support reapplying the "sriov.vfs" property as long as "sriov.total-vfs" is not changed. - Support reapplying "bond-port.vlans". - Accept hostnames longer than 64 characters from DNS lookup. - Make that global-dns configuration overwrites DNS searches and options from connections, instead of merging all together. - Add support for a new rd.net.dhcp.client-id option in nm-initrd-generator. - Add gsm device-uid setting to restrict the devices the connection applies to. - Support configuring the HSR protocol version via the "hsr.protocol-version" property. - Fix a bug that makes broadband connections auto-connect getting blocked if the connection tries to reconnect when modem status is "disconnecting" / "disconnected". - Treat modem connection not having an operator code available as a recoverable error. - Add support for configuring systemd-resolved's DNSSEC option per-connection via the "connection.dnssec" connection property. - Support configuring the HSR interlink port via the "hsr.interlink" property. - Fix some connection properties not being applied to vpn connections (connection.mdns, connection.llmnr, connection.dns-over-tls, connection.mptcp-flags, ipv6.ip6-privacy) - Update n-acd to always compile with eBPF enabled, as support for eBPF is now detected at run time. - Add new MPTCP 'laminar' endpoint type, and set it by default alongside the 'subflow' one. - For private connections (the ones that specify a user in the "connection.permissions" property), verify that the user can access the 802.1X certificates and keys set in the connection. - Introduce a libnm function that can be used by VPN plugins to check user permissions on certificate and keys. v1.54.0 https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/1.54.0/NEWS?ref_type=tags Changed: - Add support for configuring per-device IPv4 forwarding via the "ipv4.forwarding" connection property. - Add a new "prefix-delegation" setting containing a "subnet-id" property that specifies the subnet to choose on the downstream interface when using IPv6 prefix delegation. - Support OCI baremetal in nm-cloud-setup - When activating a WireGuard connection to an IPv6 endpoint, now NetworkManager creates firewall rules to ensure that the incoming packets are not dropped by kernel reverse path filtering. - Add support for configuring the loopback interface in nmtui. - Most of the properties of ovs-bridge and ovs-port connections can now be reapplied at runtime without bringing the connection down. - Add a new "sriov.preserve-on-down" property that controls whether NetworkManager preserves the SR-IOV parameters set on the device when the connection is deactivated, or whether it resets them to their default value. - Introduce a new "ovs-dpdk.lsc-interrupt" property to configure the Link State Change (LSC) detection mode for OVS DPDK interfaces. - The initrd-generator now can parse the NVMe Boot Firmware Table (NBFT) to configure networking during early boot. - Add systemd services to provide networking in the initrd. Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdaq: upgrade 3.0.23 -> 3.0.25Wang Mingyu3 days1-1/+1
| | | | | | | | Changelog: api: update dioctl daqSnort latency common changes Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wowlan-udev: add udev rule to enable WoWLAN magic-packetMiaoqing Pan2026-03-042-0/+18
| | | | | | | | | | | | | | | | | | On some platforms (for example, QCx6490), XO (Crystal Oscillator) shutdown is prevented by Wireless Processor Subsystem votes on interconnect bandwidth and XO unless the WoWLAN magic-packet trigger is enabled. These votes are released only after running: iw phy0 wowlan enable magic-packet Add an udev rule to automatically enable WoWLAN magic-packet support when a Wi-Fi PHY is registered. This rule is provided via a dedicated wowlan-udev package and is not enabled by default. Integrators should include this package only if their platform requires automatic WoWLAN magic-packet enablement. Signed-off-by: Miaoqing Pan <miaoqing.pan@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdnet: upgrade 1.18.0 -> 1.18.2Wang Mingyu2026-02-251-2/+2
| | | | | | | | | | | | | Changelog: =========== - fix copyright typo - Fix encoding (iso-8859 -> utf-8) and add GL CI config - config.h.in: Fix wrong return type - Update master from devel branch - Pull in latest development changes Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ez-ipupdate: patch CVE-2003-0887Gyorgy Sarvari2026-02-022-0/+165
| | | | | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2003-0887 The vulnerability is about the default (example) configurations, which place cache files into the /tmp folder, that is world-writeable. The recommendation would be to place them to a more secure folder. The recipe however does not install these example configurations, and as such it is not vulnerable either. Just to make sure, patch these folders to a non-tmp folder (and also install that folder, empty). Some more discussion about the vulnerability: https://bugzilla.suse.com/show_bug.cgi?id=48161 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* adcli: upgrade 0.9.2 -> 0.9.3.1Liu Yiding2026-01-202-4/+60
| | | | | | | | | | | | | | | | | 1. Add pkgconfig to solve following configure error: ../sources/adcli-0.9.3.1/configure: line 15340: syntax error near unexpected token `LIBSELINUX,' ../sources/adcli-0.9.3.1/configure: line 15340: `PKG_CHECK_MODULES(LIBSELINUX, libselinux, found_libselinux=yes, found_libselinux=no)' 2. Add PACKAGECONFIG[selinux] for new selinux support in 0.9.3.1. 3. Add 0001-configure.ac-Fix-selinux-error-for-cross_compiling.patch to fix SELINUX_MAKEFILE file check in 0.9.3.1. 4. Add --disable-offline-join-support to solve following configure error configure: error: Couldn't build offline join support, Samba version too old or libnatapi devel package is missing Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* adcli: Fix OECONFLiu Yiding2026-01-141-2/+1
| | | | | | | | | Remove "--disable-static" as it's not needed for default option. ./configure --help --enable-static[=PKGS] build static libraries [default=no] Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openfortivpn: upgrade 1.24.0 -> 1.24.1Wang Mingyu2026-01-131-1/+1
| | | | | | | | Changelog: fix regression where the 'plugin' was not passed to pppd Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nng: add ptestYi Zhao2026-01-122-3/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ptest results on genericx86-64 BSP: $ run-ptest PASS: compat_block PASS: compat_bug777 PASS: compat_bus PASS: compat_cmsg PASS: compat_device PASS: compat_iovec PASS: compat_msg PASS: compat_options PASS: compat_pair PASS: compat_pipeline PASS: compat_poll PASS: compat_reqrep PASS: compat_reqttl PASS: compat_shutdown PASS: compat_survey PASS: compat_surveyttl PASS: cplusplus_pair PASS: device PASS: files FAIL: httpclient PASS: httpserver PASS: inproc PASS: ipc PASS: ipcsupp PASS: multistress PASS: nonblock PASS: options PASS: pipe PASS: pollfd PASS: reqctx PASS: reqstress PASS: scalability PASS: synch PASS: tcp PASS: tcp6 PASS: tcpsupp PASS: tls PASS: ws PASS: wss The httpclient case attempts to retrieve the Content-Length field from HTTP header of http://example.com/, but because the site uses chunked transfer encoding, the Content-Length field is not present, leading to an assertion failure. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nng: upgrade 1.7.3 -> 1.11Yi Zhao2026-01-121-3/+2
| | | | | | | | | | | ChangeLog: https://github.com/nanomsg/nng/releases/tag/v1.11 https://github.com/nanomsg/nng/releases/tag/v1.10 https://github.com/nanomsg/nng/releases/tag/v1.9.0 https://github.com/nanomsg/nng/releases/tag/v1.8.0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nanomsg: add ptestYi Zhao2026-01-122-2/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ptest results: $ run-ptest PASS: async_shutdown PASS: block PASS: bug328 PASS: bug777 PASS: bus PASS: cmsg PASS: device PASS: device4 PASS: device5 PASS: device6 PASS: device7 PASS: domain PASS: emfile PASS: hash PASS: inproc PASS: inproc_shutdown PASS: iovec PASS: ipc PASS: ipc_shutdown PASS: ipc_stress PASS: list PASS: msg PASS: pair PASS: pipeline PASS: poll PASS: prio PASS: pubsub PASS: reqrep PASS: reqttl PASS: separation PASS: shutdown PASS: stats PASS: survey PASS: surveyttl PASS: symbol PASS: tcp PASS: tcp_shutdown PASS: term PASS: timeo PASS: trie PASS: ws PASS: ws_async_shutdown PASS: zerocopy Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nanomsg: upgrade 1.2.1 -> 1.2.2Yi Zhao2026-01-122-60/+2
| | | | | | | | | | | ChangeLog: https://github.com/nanomsg/nanomsg/releases/tag/1.2.2 Drop 0001-allow-build-with-cmake-4.patch as the issue has been fixed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.12.3 -> 1.12.5Liu Yiding2025-12-311-1/+3
| | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.52.0 -> 1.52.2Liu Yiding2025-12-311-2/+2
| | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: ignore CVE-2025-11931 and CVE-2025-12889Gyorgy Sarvari2025-12-241-0/+3
| | | | | | | | | | | | | | | | | | NVD claims that WolfSSL 5.8.4 is affected by both of these vulnerabilities, however actually both have been fixed in that version. CVE-2025-11931: NVD[1] references [2] PR as a patch, which was merged in [3]. CVE-2025-12889: NVD[4] referenced [5] PR as a patch, which was merged in [6]. [1]: https://nvd.nist.gov/vuln/detail/CVE-2025-11931 [2]: https://github.com/wolfSSL/wolfssl/pull/9223 [3]: https://github.com/wolfSSL/wolfssl/commit/e497d28ae1b364e0136849996b893f55d8a8fd4a [4]: https://nvd.nist.gov/vuln/detail/CVE-2025-12889 [5]: https://github.com/wolfSSL/wolfssl/pull/9395 [6]: https://github.com/wolfSSL/wolfssl/commit/2db1c7a522ba258d841fbce95ab84156669a5a3e Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 5.8.0 -> 5.8.4Gyorgy Sarvari2025-12-102-796/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: the project was relicensed from GPL-2 to GPL-3 Inludes fixes for the following vulnerabilities: CVE-2025-7394, CVE-2025-7395, CVE-2025-7396, CVE-2025-12888, CVE-2025-11936, CVE-2025-11935, CVE-2025-11934, CVE-2025-11933, CVE-2025-11932, CVE-2025-11931, CVE-2025-12889 Drop patch that is incorporated in this release. Changelog: https://github.com/wolfSSL/wolfssl/blob/master/ChangeLog.md Ptests passed: START: ptest-runner 2025-12-09T18:23 BEGIN: /usr/lib/wolfssl/ptest Wolfssl ptest logs are stored in /tmp/wolfss_temp.6rsnys/ptest.log Test script returned: 0 unit_test: Success for all configured tests. PASS: Wolfssl DURATION: 13 END: /usr/lib/wolfssl/ptest 2025-12-09T18:23 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: ignore CVE-2025-9648Gyorgy Sarvari2025-12-101-1/+2
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-9648 It is already fixed in the currently used version. Also, update CVE-2025-55763's status to "fixed-version" (so it will be marked as "Patched" in the CVE report instead of "Ignored") Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openfortivpn: upgrade 1.23.1 -> 1.24.0Wang Mingyu2025-12-091-2/+2
| | | | | | | | | | | | | | | | | | | Changelog: =========== - add OpenSSL 3.0+ PKCS#11 support using OSSL_STORE API - add OpenSSL Engine support (with OpenSSL < 3.0) - update package links for distros in README - remove deprecated option --plugin - increase the maximum size of the proxy response - route: always remove wrong pppd route to self - fix several Coverity warnings - fix a memory leak in new ipv4_drop_wrong_route method - HTTP: fixes missing '\0' in debug - IO: fixes a RC use after free - SSL: Avoid leaking SSL context Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ufw: upgrade 0.36.1 -> 0.36.2Liu Yiding2025-12-081-2/+2
| | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdaq: upgrade 3.0.22 -> 3.0.23Wang Mingyu2025-12-021-1/+1
| | | | | | | | Changelog: api: add tcp flag in DAQ flow stats Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Backport fixes to build with glibc 2.43Khem Raj2025-11-135-0/+902
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: update UPSTREAM_CHECK_REGEXYi Zhao2025-11-131-1/+1
| | | | | | | | | | | | | | | | | Update UPSTREAM_CHECK_REGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version dhcp-relay INFO: Current version: 4.4.3p1 INFO: Latest version: 4.4.3 After the patch: $ devtool latest-version dhcp-relay INFO: Current version: 4.4.3p1 INFO: Latest version: 4.4.3-P1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdaq: upgrade 3.0.21 -> 3.0.22Wang Mingyu2025-11-111-1/+1
| | | | | | | | Changelog: api: add drop reason in daq flow stats Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort3: Upgrade to 3.9.7.0Khem Raj2025-11-102-3/+48
| | | | | | Fix build with C23 glibc while here Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: update SRC_URI branchGyorgy Sarvari2025-11-081-1/+1
| | | | | | | Branch was renamed. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: multilib-header fix for freeradius/features.hLiu Yiding2025-11-061-0/+1
| | | | | | | | | | Fix following conflicts when enabling multilib. Error: Transaction test error: file /usr/include/freeradius/features.h conflicts between attempted installs of freeradius-dev-3.2.8-r0.x86_64_v3 and lib32-freeradius-dev-3.2.8-r0.core2_32 Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 3.6.4 -> 3.6.5Gyorgy Sarvari2025-11-041-1/+1
| | | | | | | | | | | | Contains fixes for CVE-2025-54764 and CVE-2025-59438 Also, add the recipe to the ptest image list, because it was missing. Ptests passed successfully. Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.5 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: upgrade 3.2.7 -> 3.2.8Yi Zhao2025-10-297-8536/+345
| | | | | | | | | | | | | | | | ChangeLog: https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_8 * Add PACKAGECONFIG[kafka] * Drop backport patch 0018-Fix-Service-start-error.patch * Refresh 0013-raddb-certs-Makefile-fix-the-occasional-verification.patch * Drop 0019-freeradius-Remove-files-which-have-license-issues.patch and backport upstream patches to fix license issue[1]. [1] https://github.com/FreeRADIUS/freeradius-server/issues/5664 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: Remove files which have license issuesLibo Chen2025-10-242-0/+8495
| | | | | | | | | | | | | | | | | | | remove the following files which have the following license: Copyright (C) 2023 Network RADIUS SARL (legal@networkradius.com) This software may not be redistributed in any form without the prior written consent of Network RADIUS. src/modules/rlm_dpsk/rlm_dpsk.c src/modules/rlm_eap/types/rlm_eap_teap/eap_teap.h src/modules/rlm_eap/types/rlm_eap_teap/eap_teap.c src/modules/rlm_eap/types/rlm_eap_teap/rlm_eap_teap.c src/modules/rlm_eap/types/rlm_eap_teap/eap_teap_crypto.h src/modules/rlm_eap/types/rlm_eap_teap/eap_teap_crypto.c Signed-off-by: Libo Chen <libo.chen.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.19.8 -> 4.19.9Yi Zhao2025-10-151-1/+1
| | | | | | | | ChangeLog: https://www.samba.org/samba/history/samba-4.19.9.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libiec61850: upgrade 1.5.3 -> 1.6.1Gyorgy Sarvari2025-10-083-54/+21
| | | | | | | | | This update contains a fix for CVE-2024-26529, CVE-2024-45970 and CVE-2024-45971 Changelog: https://github.com/mz-automation/libiec61850/blob/v1.6/CHANGELOG Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: Add PACKAGECONFIG[ad-dc] python3-markdown RDEPENDSAndrew Bradford2025-10-081-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For Samba's Active Directory Domain Controller functionality, it needs to have python3-markdown listed as an RDEPENDS as well as a DEPENDS. When trying to provision a domain with samba-tool without this change then it will error out like: $ samba-tool domain provision --realm=EXAMPLE.COM --domain=EXAMPLE \ --adminpass='YourPassword123!' --server-role=dc \ --dns-backend=SAMBA_INTERNAL --use-rfc2307 <snip> Temporarily overriding 'dsdb:schema update allowed' setting ERROR(<class 'ModuleNotFoundError'>): uncaught exception - No module named 'markdown' File "/usr/lib/python3.13/site-packages/samba/netcmd/init.py", line 279, in _run return self.run(*args, **kwargs) ~~~~~~~~^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.13/site-packages/samba/netcmd/domain/provision.py", line 343, in run result = provision(self.logger, session, smbconf=smbconf, targetdir=targetdir, ...<16 lines>... backend_store=backend_store, backend_store_size=backend_store_size) File "/usr/lib/python3.13/site-packages/samba/provision/init.py", line 2404, in provision raise e File "/usr/lib/python3.13/site-packages/samba/provision/init.py", line 2394, in provision forest = ForestUpdate(samdb, fix=True) File "/usr/lib/python3.13/site-packages/samba/forest_update.py", line 212, in init from samba.ms_forest_updates_markdown import read_ms_markdown File "/usr/lib/python3.13/site-packages/samba/ms_forest_updates_markdown.py", line 27, in <module> import markdown Signed-off-by: Andrew Bradford <andrew.bradford@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: update to the latest revisionGyorgy Sarvari2025-10-051-2/+3
| | | | | | | | | | | | This update contains a fix for CVE-2025-55763. License-Update: copyright year bump to 2025. Shortlog since last update: https://github.com/civetweb/civetweb/compare/5864b55a94f4b5238155cbf2baec707f0fa2ba6d...b6ef58f4c4c7fbe90fd1065bccf45b143345f1a6 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: Fix the multilib configLiu Yiding2025-09-241-2/+2
| | | | | | | | | | | | | When enabling multilib with lib32, the radiusd will use etc file for lib32 as default #systemctl status radiusd ...... /usr/sbin/radiusd -d /etc/lib32-raddb It should be lib64 as default. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: Fix service start errorLiu Yiding2025-09-222-0/+34
| | | | | | | | | | | | | Following error occurred while starting this service. Error: tls: (TLS) Failed reading certificate file "/etc/raddb/certs/server.pem" Error: tls: (TLS) error:03000072:digital envelope routines::decode error Error: tls: (TLS) error:0A00018F:SSL routines::ee key too small Error: rlm_eap_tls: Failed initializing SSL context Error: rlm_eap (EAP): Failed to initialise rlm_eap_tls Error: /etc/raddb/mods-enabled/eap[14]: Instantiation failed for module "eap" Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.12.2 -> 1.12.3Wang Mingyu2025-09-041-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-br-posix: Fix build with clang-21Khem Raj2025-08-292-1/+34
| | | | | | | Update to latest tip of trunk Fix mbedTLS issue seen with clang-21 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix build with clang-21Khem Raj2025-08-211-0/+6
| | | | | | Do not mark Wincompatible-function-pointer-types warning as error Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.12.0 -> 1.12.2Wang Mingyu2025-08-201-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ============ * Fix bug that caused that challenge was incorrectly reused if invalid or expired. * Add support for "data-ciphers-fallback" option. * Add GUI support for "data-ciphers" option. * Fix export for password connection type that was not exporting some fields. * Fix mnemonics in editor's Identity - Advanced view * Auth-dialog ported to GTK4 * Import certificates into the XDG_DATA_HOME directory. * Update translations: Hindi, Slovenian, Catalan, Polish, Brazilian Portuguese, Ukrainian, Georgian, Swedish, Hebrew, Russian and Danish. * Skip release 1.12.1 because of a bug in the release pipeline. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdaq: upgrade 3.0.20 -> 3.0.21Wang Mingyu2025-08-201-1/+1
| | | | | | | | Changelog: api: add support for handling DIOCTL_SET_INJECT_DROP Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: bump to 2.0.22Gianfranco Costamagna2025-08-133-29/+14
| | | | | | | | Refresh patches, drop patch 3238, now part of upstream codebase Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tailscale: Added support for systemd initDean Sellers2025-08-071-6/+23
| | | | | | | | | | | | | | Includes the provided service and defaults files for using the tailscale daemon on systemd init machines. Added the other kernel modules necessary for tailscaled to work without warnings to RRECOMMENDS. Tested with `core-image-minimal` under qemu with machines `qemux86-64`, `genericx86-64` and `qemuarm64`. Ping host on tailscale network using magicDNS host lookup. Signed-off-by: Dean Sellers <dean@sellers.id.au> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: upgrade 3.6.3.1 -> 3.6.4Guðni Már Gilbert2025-07-161-2/+2
| | | | | | | | | | | | | | | | | | | Fixes several security vulnerabilities: CVE-2025-49601, CVE-2025-49600, CVE-2025-52496, CVE-2025-47917, CVE-2025-48965, CVE-2025-52497, and CVE-2025-49087 The framework directory has been changed into a git submodule.[1][2] The recipe now uses Git Submodule Fetcher (gitsm) Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-3.6.4 [1] https://github.com/Mbed-TLS/mbedtls/commit/8cf5666a174237998a7965e284d7ba8c1655d16d [2] https://github.com/Mbed-TLS/mbedtls/commit/c90c6d8ff787ab8787d9373b0e662a95ed1f4dae Signed-off-by: Guðni Már Gilbert <gudni.m.g@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tailscale: add initial recipe for v1.84.3Jeroen Hofstee2025-07-165-0/+308
| | | | | | | | | | | | Tailscale is a mesh VPN built on the WireGuard protocol. On the client side, it includes a node agent (tailscaled) and a client application for configuration (tailscale). These components can be bundled into a single binary for a more smaller total size, which is done in this recipe. Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com> Signed-off-by: Mark Bath <mark@baggywrinkle.co.uk> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* relayd: Fix building with CMake 4+Khem Raj2025-07-151-0/+2
| | | | | | | | Bump minimum cmake dialect to be 3.5+, this is an openwrt component, which does not get many updates these days. Ideally the cmake files for the project should be fixed. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* civetweb: Update to latest tip if trunkKhem Raj2025-07-131-2/+2
| | | | | | Fixes build with cmake4+ Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-br-posix: Update to latest tip on trunkKhem Raj2025-07-132-31/+2
| | | | | | Fix build with cmake4 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nngpp: Fix build with cmake4Khem Raj2025-07-132-5/+30
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-daemon: Update to latest of trunkKhem Raj2025-07-131-1/+3
| | | | | | | Fixes build with trunk Disable prepending uptime to logs Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mosquitto: bump to 2.0.21Louis Rannou2025-07-113-2/+28
| | | | | | | | | Upgrade to mosquitto 2.0.21. Update the patch status for issue 2895 and create a new patch for an issue introduced in 2.0.19 which causes connections to get down when the clock is changed. Signed-off-by: Louis Rannou <louis.rannou@non.se.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-03-20 16:58:33 +0000