summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
...
* tunctl: inherit sourceforge-releases classYi Zhao2025-11-091-0/+2
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version tunctl INFO: Current version: 1.5 INFO: Latest version: After the patch: $ devtool latest-version tunctl INFO: Current version: 1.5 INFO: Latest version: 1.5 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: add UPSTREAM_CHECK_REGEXYi Zhao2025-11-091-0/+1
| | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_REGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version tcpreplay INFO: Current version: 4.5.2 INFO: Latest version: After the patch: $ devtool latest-version tcpreplay INFO: Current version: 4.5.2 INFO: Latest version: 4.5.2 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: inherit sourceforge-releases classYi Zhao2025-11-091-1/+1
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version openipmi INFO: Current version: 2.0.36 INFO: Latest version: After the patch: $ devtool latest-version openipmi INFO: Current version: 2.0.36 INFO: Latest version: 2.0.37 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* PATCH 2/8] netcat: inherit sourceforge-releases classYi Zhao2025-11-091-1/+1
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version netcat INFO: Current version: 0.7.1 INFO: Latest version: After the patch: $ devtool latest-version netcat INFO: Current version: 0.7.1 INFO: Latest version: 0.7.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netsniff-ng: upgarde 0.6.8 -> 0.6.9Gyorgy Sarvari2025-11-082-33/+2
| | | | | | | | | | | | | | | | | | Source branch was renamed from master to main. Drop patch that was incorporated in this release. Changelog: Use GitHub actions for CI Allow to manually define CPUs for trafgen Fix make install and output netsniff-ng stats on stderr trafgen: Fix for ipv6 header generation when L3-only devices are present mausezahn: use getopt_long instead of getopt build: fix install dependencies in Makefile template trafgen: move cpu stats temp file to /tmp ring_tx: handle EINTR from sendto Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* http-parser: fix SRC_URI branchGyorgy Sarvari2025-11-081-1/+1
| | | | | | | master was renamed to main Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Fix CVE-2025-9817Vijay Anusuri2025-11-042-0/+33
| | | | | | | | | | | Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/39daba5e247ea495f88b0be82f0b7ebbdbf50fba Link: https://gitlab.com/wireshark/wireshark/-/issues/20642 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-9817 https://ftp.lysator.liu.se/pub/opensuse/update/leap/15.6/sle/src/wireshark-4.2.13-150600.18.26.1.src.rpm Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Upgrade 4.2.12 -> 4.2.14Vijay Anusuri2025-11-041-1/+1
| | | | | | | | | | | | | releasenote: https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html Includes security fix CVE-2025-11626 Link: https://gitlab.com/wireshark/wireshark/-/issues/20724 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 6.0.2 -> 6.0.3Yi Zhao2025-11-021-1/+1
| | | | | | | | ChangeLog: https://github.com/strongswan/strongswan/releases/tag/6.0.3 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: Fix service start errorLiu Yiding2025-10-311-1/+4
| | | | | | | | | | | | 1.Fix following dovecot.service starting error. dovecot[364]: doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 48: cert_file: open(/etc/dovecot/ssl-cert.pem) failed: No such file or directory systemd[1]: dovecot.service: Main process exited, code=exited, status=89/n/a systemd[1]: dovecot.service: Failed with result 'exit-code'. 2. There is no need to do "touch ${D}/etc/dovecot/dovecot.conf" as it was created by dovecot after dovecot was upgraded to 2.4.1-4. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: upgrade 2.1 -> 2.4Patrick Williams2025-10-292-41/+2
| | | | | | | | mctp-2.4 was released. It includes a previously submitted patch, so drop that. Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.7 -> 4.8Bastian Krause2025-10-292-35/+1
| | | | | | | | | | | | | | | | | | | | | | | | | 0001-Fix-compilation-with-musl.patch is obsolete due to 948ecf8 ("hash: include util.h for MIN macro") included in chrony since version 3.5. From chrony's NEWS [1] for the 4.8 release: Enhancements ------------ * Add maxunreach option to limit selection of unreachable sources * Add -u option to chronyc to drop root privileges (default chronyc user is set by configure script) Bug fixes --------- * Hide chronyc socket to mitigate unsafe permissions change * Fix refclock extpps option to work on Linux >= 6.15 * Validate refclock samples for reachability updates [1] https://chrony-project.org/news.html Signed-off-by: Bastian Krause <bst@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: update 0.15.2 -> 0.16.0Markus Volk2025-10-291-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Major Changes in 0.16: Added Added DMA-BUF encoder support for GStreamer 1.24+ Implemented hardware-accelerated encoding for Intel GPUs Added environment variable SPICE_CONVERTER_PREFERRED_FORMAT to override converter format Multi-plane GL scanout support (new spice_qxl_gl_scanout2()) Changed Improved memslot to preserve address bits for ARM64 TBI/AMD UAI/Intel LAM Optimized BGR24/BGRX32 conversion when JCS_EXTENSIONS is defined Removed GStreamer 0.10 support Send real time to client, instead of synchronizing on both ends, attempting to fix latency issue Fixes Fixes a GL_DRAW cookie assertion race Add SSL_OP_NO_RENEGOTIATION fallback path, fixing w/LibreSSL 3.7.2 builds Fix Win32 builds Fix TCP_NOPUSH usage on Darwin Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocols: update 0.14.4 -> 0.14.5Markus Volk2025-10-291-1/+1
| | | | | | | | | Major changes in 0.14.5 ======================= * Add SPICE_MSG_DISPLAY_GL_SCANOUT2_UNIX * Fix for Windows Arm64 build Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.10 -> 1.45.12Wang Mingyu2025-10-291-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.75 -> 5.76Wang Mingyu2025-10-211-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.9 -> 1.45.10Wang Mingyu2025-10-211-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 2.8.1 -> 2.8.2Yi Zhao2025-10-151-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: ignore CVE-2016-4983 (again)Gyorgy Sarvari2025-10-131-0/+2
| | | | | | | | | | | I removed the CVE_STATUS setting for CVE-2016-4983 when this recipe was updated to 2.4.1-4 - but that was a mistake, the CVE database considers (incorrectly) even the latest version as vulnerable. Revert that mistake by adding back the correct CVE_STATUS to the recipe. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-guest-vdagent: upgrade 0.22.1 -> 0.23.0Wang Mingyu2025-10-081-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.14 -> 2.6.15Wang Mingyu2025-10-081-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: upgrade 12.5.0 -> 13.0.5Rajeshkumar Ramasamy2025-10-082-29/+2
| | | | | | | | | | | | | | this release addressed below CVE: CVE-2025-41244 Drop 0001-Fix-build-when-compiling-with-std-c23.patch which have been merged upstream. Changelog: https://github.com/vmware/open-vm-tools/releases Signed-off-by: Rajeshkumar Ramasamy <rajeshkumar.ramasamy@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: upgrade 4.5.5 -> 4.6.3Gyorgy Sarvari2025-10-083-85/+338
| | | | | | | | | | | | Drop 0001-fix-compiling-on-32-bit-systems.patch, and change to another patch that solves the same issue in OE, but is more likely to be adapted by upstream (after discussion with upstream in https://github.com/pgpool/pgpool2/pull/128) Shortlog: https://github.com/pgpool/pgpool2/compare/V4_5_5...V4_6_3 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.1 -> 1.45.9Gyorgy Sarvari2025-10-081-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While working on it, also ignore CVE-2025-47711 and CVE-2025-47712. Both vulnerabilities are fixed already (they were fixed before the upgrade also, but there is no version-range associated with the CVE report). CVE-2025-47711: https://gitlab.com/nbdkit/nbdkit/-/commit/e6f96bd1b77c0cc927ce6aeff650b52238304f39 CVE-2025-47712: https://gitlab.com/nbdkit/nbdkit/-/commit/a486f88d1eea653ea88b0bf8804c4825dab25ec7 Shortlog: Merge branch '2025-optional-qemu-img' into 'master' build: Check for qemu-img and disable some tests if not present tests/curl: Skip test if 'disk' was not created server/public.c: Use common/include parse_bool function common/include: Extra bool parsing into a mini-library docs: Shorter title and tweaks to the description indexed-gzip: Include <stddef.h> to get ptrdiff_t indexed-gzip: Move variable decl outside for loop vddk: Sort synopsis into alphabetical order ext2: Update docs since filter supports concurrent connections docs: Move --short/--long-options to right place in synopsis (origin/rhel-10.2) docs: Document how to probe for server command line options server: Document --long-options and --short-options docs/nbdkit-probing.pod: Rearrange synopsis to match description server: Add --name parameter docs: Fix bolding of --log=/path option tests/test-python-plugin.py: Remove unused variables python: Add binding for nbdkit_parse_bool tests/test-python-plugin.py: Add name of test for test_parse_size (tag: v1.45.6) Version 1.45.6. Merge branch '2025-rounding' into 'master' server/public.c: Use lrint() instead of implicit conversion to int indexed-gzip: Fixes for 32-bit support indexed-gzip: More editorially neutral content Merge branch 'add-indexed-gzip-filter' into 'master' Introduce index-gzip filter Move unmodified index build/extract to ig_zran.h/c Add serialize/deserialize fn for zran structs Restructure zran.h, zran.c for use as library Import zran.c/zran.h v1.6 (2 Aug 2024) from zlib Merge branch '2025-delay-trigger' into 'master' delay: Add new delay-trigger option delay: Rearrange the options in alphabetical order in the documentation tests/test-map.sh: Fix "nbd_pread: count cannot be 0: Invalid argument" docs/nbdkit-client.pod: Document attaching NBD devices to QEMU VMs docs/nbdkit-client.pod: Combine and rename "LIMITATIONS" section Merge branch '2025-fix-golang-test' into 'master' tests/test-golang-fork-warning.sh: Fix hanging test Merge branch '2025-misc-fixes' into 'master' tests: Use 'define script' in a few more places tests: Modify make-pki and make-psk scripts to be atomic tests: Define common functions for requiring TLS certs and PSK tests/test-tls.sh: Remove unused export of pkidir tests: Generate make-psk.sh tests/make-psk.sh: Fix typo "pkstool" -> "psktool" tests: Fix typo "An good" -> "A good" map: Implement map-size feature tests/test-at-file.sh: Fix srcdir != builddir tests: Work around realpath error on BSDs Merge branch '2025-eq-file' into 'master' Merge branch '2025-server-debug' into 'master' server: Use debug() instead of nbdkit_debug() consistently in the server map: Refer to @PATH syntax in documentation server: Add @PATH syntax server/main.c: Factor out the function that parses key=value server/main.c: Fix comment server/main.c: Move key=value parsing to a new function server/options.h: Reject empty string ("") as a short name server/options.h: Add comment to is_short_name server/main.c: Reject empty string as a plugin name or filter name common: utils: Add const to <vector>_duplicate variable decls data: Use new vector_append_array in a couple of places map: Use new vector_append_array function instead of loop common: utils: vector: Fix vector_uniq prototype and add a test common: utils: vector: Add range functions for insert, append and remove common: utils: vector: Prefer vector_reset over free() Merge branch '2025-map-filter' into 'master' New filter: map for remapping arbitrary blocks common: utils: vector: Add new vector_uniq function tests/functions: Factor out 2^63-1 constant used by a few tests tests/test-cache-block-size.sh: Remove unused socket data: Minor revisions to the documentation for clarity full: Remove reference to equivalence of nbdkit-readonly-filter tests/test-floppy.sh: Simplify this test count: Add an example to the documentation common/include/test-once.c: Further fixes for pthread_barrier_t common/include/test-once.c: Skip test on macOS which lacks pthread_barrier_t Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: upgrade 1.11.1 -> 1.11.2Gyorgy Sarvari2025-10-062-35/+1
| | | | | | | | | | This upgrade contains fixes for CVE-2023-49606 and CVE-2022-40468. Changelog: https://github.com/tinyproxy/tinyproxy/compare/1.11.1...1.11.2 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: upgrade 2.3.21.1 -> 2.4.1-4Gyorgy Sarvari2025-10-066-117/+58
| | | | | | | | | | | | | | | | | | Remove obsolete CVE_STATUS variable: CVE-2016-4983 is marked for v2.3. Drop 0001-not-check-pandoc.patch because it became obsolete, pandoc is not used anymore. Drop 1ccd5b54a408d12fce0c94ab0bbaedbb5ef69830.patch, because it is included in this release. Add a backported patch to fix compiling with musl. Changelog: 2.4: https://github.com/dovecot/core/releases/tag/2.4.0 2.4.1: https://github.com/dovecot/core/releases/tag/2.4.1 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: upgrade 4.5.1 -> 4.5.2Archana Polampalli2025-09-233-105/+1
| | | | | | | | | | Changelog: https://github.com/appneta/tcpreplay/releases/tag/v4.5.2 Drop patches that have been merged upstream. Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: upgrade 4.5.4 -> 4.5.5Jason Schonberg2025-09-151-2/+2
| | | | | | | Changelog: https://www.pgpool.net/docs/latest/en/html/release-4-5-5.html Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: update patch statusesGyorgy Sarvari2025-09-152-2/+2
| | | | | | | The patches were submitted to upstream, they are not pending anymore. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: fix compiling for 32-bit archesGyorgy Sarvari2025-09-113-0/+125
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When compiling for 32-bit targets, two issues came to surface: 1. gcc was complaining that math.h is not included in snprintf, and some calls were implicitly defined. Added a patch that includes the required headers in snprintf.c file: | snprintf.c: In function 'fmtfloat': | snprintf.c:1232:13: error: implicit declaration of function 'isnan' [-Wimplicit-function-declaration] | 1232 | if (isnan(value)) | | ^~~~~ | snprintf.c:50:1: note: include '<math.h>' or provide a declaration of 'isnan' 2. The code passes a time_t argument to a function that expects a long. This works for 64-bit targets, because on those usually time_t is long. However on 32-bit systems time_t is usually long long, which makes compilation fail with the following error: | wd_json_data.c:540:66: error: passing argument 3 of 'json_get_long_value_for_key' from incompatible pointer type [-Wincompatible-pointer-types] | 540 | if (json_get_long_value_for_key(root, "StartupTimeSecs", &wdNode->startup_time.tv_sec)) | | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ To account for this, add a new helper method in a patch that returns the required json value as a time_t value. The patches are in pending state, because the mailing list of the project is sufferring from technical problems - when the site loads, sign up attempts throw internal server errors. It is planned to submit the patches and to update the status once their infrastructure is back. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fping: upgrade 5.3 -> 5.4Wang Mingyu2025-09-041-1/+1
| | | | | | | | | | | | | Changelog: ========= - Memory allocation safety checks for event storage (thanks David.A for bug report) - Fix off-by-one boundary check in seqmap code - The minimum value for the period (-p flag) is now 0.001 milliseconds, since it probably never makes sense to use a smaller value, and to avoid doing a very large memory allocation for event storage. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: change ptest output formatJiaying Song2025-08-211-3/+6
| | | | | | | The format selected is the automake "simple test" format: "result: testname". Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: upgrade 0.17.0 -> 0.17.1Wang Mingyu2025-08-201-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtdb: upgrade 1.4.13 -> 1.4.14Wang Mingyu2025-08-201-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: Add PACKAGECONFIG for data channel offloadZoltán Böszörményi2025-08-141-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | Moved the iproute2 backend enablement into a new PACKAGECONFIG. It is enabled to keep the current defaults. Added the explicit runtime dependency on iproute2-ip (the "ip" command) which this backend requires. Added a new PACKAGECONFIG[dco] which enables the libnl backend, which is mutually incompatible with iproute2 backend in OpenVPN. With these: PACKAGECONFIG:remove = "iproute2" PACKAGECONFIG:append = " dco" the data channel offload is enabled: checking for LIBNL_GENL... yes configure: Enabled ovpn-dco support for Linux With Linux kernel 6.16 or newer, and CONFIG_OVPN enabled, the data channel offload will be used. Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade 1.6.38 -> 1.6.39Wang Mingyu2025-08-041-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.6.1 -> 4.7Liu Yiding2025-07-222-10/+9
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Add opencommands directive to select remote monitoring commands - Add interval option to driftfile directive - Add waitsynced and waitunsynced options to local directive - Add sanity checks for integer values in configuration - Add support for systemd Type=notify service - Add RTC refclock driver - Allow PHC refclock to be specified with network interface name - Don’t require multiple refclock samples per poll to simplify filter configuration - Keep refclock reachable when dropping samples with large delay - Improve quantile-based filtering to adapt faster to larger delay - Improve logging of selection failures - Detect clock interference from other processes - Try to reopen message log (-l option) on cyclelogs command - Fix sourcedir reloading to not multiply sources - Fix tracking offset after failed clock step - Drop support for NTS with Nettle < 3.6 and GnuTLS < 3.6.14 - Drop support for building without POSIX threads Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.43.11 -> 1.45.1Liu Yiding2025-07-212-4/+6
| | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ruli: Fix build with clangKhem Raj2025-07-181-0/+4
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 6.0.1 -> 6.0.2Wang Mingyu2025-07-154-240/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-pki-Fix-signature-of-help-to-match-that-of-a-callbac.patch 0002-callback-job-Replace-return_false-in-constructors-wi.patch 0003-Cast-uses-of-return_-nop-and-enumerator_create_empty.patch removed since they're included in 6.0.2 Changelog: ============= - Support for per-CPU SAs (RFC 9611) has been added (Linux 6.13+). - Basic support for AGGFRAG mode (RFC 9347) has been added (Linux 6.14+). - POSIX regular expressions can be used to match remote identities. - Switching configs based on EAP-Identities is supported. Setting 'remote.eap_id' now always initiates an EAP-Identity exchange. - On Linux, sequence numbers from acquires are used when installing SAs. This allows handling narrowing properly. - During rekeying, the narrowed traffic selectors are now proposed instead of the configured ones. - The default AH/ESP proposals contain all supported key exchange methods plus 'none' to make PFS optional and accept proposals of older peers. - GRO for ESP in enabled for NAT-T UDP sockets, which can improve performance if the esp4|6_offload modules are loaded. - charon-nm sets the VPN connection as persistent, preventing NetworkManager from tearing down the connection if the network connectivity changes. - ML-KEM is supported via OpenSSL 3.5+. - The wolfssl plugin is now compatible to wolfSSL's FIPS module. - The libsoup plugin has been migrated to libsoup 3, libsoup 2 is not supported anymore. - The long defunct uci plugin has been removed. - Log messages by watcher_t are now logged in a separate log group ('wch'). Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mtr: upgrade 0.95 -> 0.96Wang Mingyu2025-07-151-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ettercap: Add patch for CMake 4+ compatibilityAlper Ak2025-07-092-2/+56
| | | | | | | | | | | | | | | | | | | Fix: | CMake Error at CMakeLists.txt:1 (cmake_minimum_required): | Compatibility with CMake < 3.5 has been removed from CMake. | | Update the VERSION argument <min> value. Or, use the <min>...<max> syntax | to tell CMake that the project requires at least <min> but has been updated | to work with policies introduced by <max> or earlier. | | Or, add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to try configuring anyway. | | | -- Configuring incomplete, errors occurred! Signed-off-by: Alper Ak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: upgrade 4.5.3 -> 4.5.4Jason Schonberg2025-07-021-1/+1
| | | | | | | | | This version brings a fix for CVE-2024-45624 Changlog: https://www.pgpool.net/docs/latest/en/html/release-4-5-4.html Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: Fix build after S moved into UNPACKDIRKhem Raj2025-07-011-7/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netcf: remove EXTRA_AUTORECONFChangqing Li2025-06-261-2/+0
| | | | | | | | | | | Refer [1], Makefile.am already set ACLOCAL_AMFLAGS = -I gnulib/m4, set EXTRA_AUTORECONF will cause do_configure failure with long build path, just drop EXTRA_AUTORECONF. [1] https://git.openembedded.org/openembedded-core/commit/meta/classes-recipe/autotools.bbclass?id=e718d1be2c4fb54cf363c23f929358e1be68c724 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtevent: upgrade 0.16.2 -> 0.17.0Wang Mingyu2025-06-262-7/+4
| | | | | | | | 0002-Fix-pyext_PATTERN-for-cross-compilation.patch refreshed for 0.17.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcpr: upgrade 1.11.0 -> 1.12.0Wang Mingyu2025-06-261-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =============== - Updated supported versions for 1.11.0 - Add FreeBSD package/port mention into README - Fixed grammatical issues and corrected spelling errors in README.md - Refactored timeout.h: added template ctr and removed redundant ctrs - fix no-revoke. - Resolve CURLOPT_SSL_OPTIONS issues - fix: remove duplicate call in Session::prepareCommonDownload() - Update To The Latest Clang-Tidy Version - Enhance: Use unordered_map for CURL error mapping - Public cpr::Session::GetSharedPtrFromThis - Replace ubuntu:22.04 and ubuntu:23.04 with ubuntu:latest - [BUG] Fix cpr::ssl:KeyBlob: Copy blob to curl - Added handling no_proxy override through Proxies - fix: let bad-host-tests pass when there is DNS error redirection - Removed 1.9.x from the supported versions - Replaced the secureStringClear mechanism with a SecureString class - Clang-Tidy And cppcheck Fixes - Getter function for Session::header_ to enable the user to read back all headers set and delete select ones - Status code int32_t -> long - Fix windows static library build parameter in CMakeLists.txt - Fix Seg-fault when setting proxy username + password - Add Session::RemoveContent() - Cookie expires date is now only 100 days in the future - add curl's ANY and ANSAFE authorization options - Fixed memory leak in threadpool - Add enforced HTTP/3 - Update README.md to add Bazel extension instructions - feat: Use CMAKE_MSVC_RUNTIME_LIBRARY for runtime selection in MSVC - Update CMakeLists.txt project version for 1.11.2 release - Add std::to_string functionality for ErrorCode to ease human meaningful logging - Make cpr::async and HTTP (Get, Post, Put, etc.) callbacks cancelable - Refactor AsyncWrapper to make it safer - Do Not Check For Sanitizers If They Are Not Enabled - Fix usage for TLS v1.3 cipher - Changed LowSpeed to use std::chrono - Better OpenSSL headers include based on headers version. - Ensure cpr::LowSpeed properties are cased to long for curl - Implemented cpr::BodyView. - Add primary_ip primary_port to Response - Bump stefanzweifel/git-auto-commit-action from 5 to 6 - Load all certs in a CaBuffer - WIP CURL 8.13 Support Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mdio-netlink and mdio-tools: Fix license file pathAlper Ak2025-06-251-1/+1
| | | | | | | | | | | | | Issue was related to latest UNPACKDIR changes -> https://git.openembedded.org/openembedded-core/commit/?id=46480a5e66747a673041fe4452a0ab14a1736d5e WARNING: mdio-netlink-1.3.1-r0 do_populate_lic: Could not copy license file - [Errno 2] No such file or directory: '/srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/qemux86_64-poky-linux/mdio-netlink/1.3.1/git/COPYING' ERROR: mdio-netlink-1.3.1-r0 do_populate_lic: QA Issue: mdio-netlink: LIC_FILES_CHKSUM points to an invalid file: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/qemux86_64-poky-linux/mdio-netlink/1.3.1/git/COPYING [license-checksum] WARNING: mdio-tools-1.3.1-r0 do_populate_lic: Could not copy license file - [Errno 2] No such file or directory: '/srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/mdio-tools/1.3.1/git/COPYING' ERROR: mdio-tools-1.3.1-r0 do_populate_lic: QA Issue: mdio-tools: LIC_FILES_CHKSUM points to an invalid file: /srv/pokybuild/yocto-worker/meta-oe/build/build/tmp/work/core2-64-poky-linux/mdio-tools/1.3.1/git/COPYING [license-checksum] Signed-off-by: Alper Ak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcpr: upgrade 1.10.5 -> 1.11.0Jason Schonberg2025-06-251-2/+2
| | | | | | | Changelog: https://github.com/libcpr/cpr/releases/tag/1.11.0 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-openembedded/all: adapt to UNPACKDIR changesAlexander Kanavin2025-06-2555-57/+10
| | | | | | | | | | | | | Please see https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265 for what changes are needed, and sed commands that can be used to make them en masse. I've verified that bitbake -c patch world works with these, but did not run a world build; the majority of recipes shouldn't need further fixups, but if there are some that still fall out, they can be fixed in followups. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-04-21 19:10:27 +0000