summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
* libowfat: update SRC_URIGyorgy Sarvari3 days1-1/+1
| | | | | | | | The https link does not work anymore, it just refuses the connection. http still works though. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ncp: update SRC_URIGyorgy Sarvari3 days1-1/+1
| | | | | | | | The https link does not work anymore, it just refuses the connection. http still works though. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: fix broken PACKAGECONFIGsGyorgy Sarvari5 days1-0/+2
| | | | | | | | | | | | | | | | | | | Some PACKAGECONFIGs (cifsidmap, cifsacl, pam) were failing to build since a while, erroring out with: | ../sources/cifs-utils-7.4/resolve_host.c:23:10: fatal error: config.h: No such file or directory | 23 | #include "config.h" | | ^~~~~~~~~~ | compilation terminated. The config.h header is generated in the root of build folder, and it seems that the recipe can't be built 100% out of the source tree. To avoid this issue, add ${B} as an include folder to CFLAGS, so it finds the required header. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: upgrade 7.0 -> 7.4Gyorgy Sarvari5 days1-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains fix for CVE-2025-2312 The recipe installs two scripts in bindir - this is nothing new. But the shebang has changed from "/usr/bin/env python3" to "/usr/bin/python3" - these were always python scripts, but they weren't recognized as such during the QA checks, and python wasn't installed as a runtime dependency. Now QA check is complaining about missing python in RDEPENDS. To avoid mandatory python installation, package the scripts separately in cifs-utils-scripts package. Shortlog: cifs-utils: bump version to 7.4 mount.cifs: retry mount on -EINPROGRESS cifs.upcall: correctly treat UPTARGET_UNSPECIFIED as UPTARGET_APP cifscreds: use <libgen.h> for basename getcifsacl, setcifsacl: use <libgen.h> for basename cifs.upcall: fix memory leaks in check_service_ticket_exits() cifs-utils: bump version to 7.3 Fix regression in mount.cifs with guest mount option resolve_host.c: Initialize site_name cldap_ping: Fix socket fd leak cifs-utils: bump version to 7.2 getcifsacl: fix return code check for getting full ACL cifs-utils: add documentation for upcall_target cifs-utils: avoid using mktemp when updating mtab cldap_ping.c: add missing <sys/types.h> include configure.ac: libtalloc is now mandatory cifscreds: allow user to set the key's timeout cifscreds: use continue instead of break when matching commands Do not pass passwords with sec=none and sec=krb5 docs: add esize description docs: add max_cached_dirs description docs: update actimeo description Fix compiler warnings in mount.cifs CIFS.upcall to accomodate new namespace mount opt cifs-utils: Skip TGT check if valid service ticket is already available use enums to check password or password2 in set_password, get_password_from_file and minor documentation additions cifs-utils: support and document password2 mount option smbinfo: add bash completion support for filestreaminfo, keys, gettconinfo cifs-utils: bump version to 7.1 cifs: update documentation for sloppy mount option docs: add closetimeo description docs: add compress description checkopts: update it to work with latest kernel version cifs-utils: add documentation for multichannel and max_channels cifs-utils: smbinfo: add gettconinfo command Implement CLDAP Ping to find the closest site mount.cifs.rst: update section about xattr/acl support mount.cifs.rst: add missing reference for sssd getcifsacl, setcifsacl: add missing <endian.h> include for le32toh getcifsacl, setcifsacl: add missing <linux/limits.h> include for XATTR_SIZE_MAX cifs-utils: Make automake treat /sbin as exec, not data pam_cifscreds: fix warning on NULL arg passed to %s in pam_syslog() cifs.upcall: fix UAF in get_cachename_from_process_env() cifs-utils: add documentation for acregmax and acdirmax setcifsacl: Fix uninitialized value. Use explicit "#!/usr/bin/python3" Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.15 -> 1.46.0Wang Mingyu6 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade 1.6.39 -> 1.6.40Wang Mingyu6 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: add ptest supportGyorgy Sarvari6 days2-1/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It takes <10s to execute. Sample output: root@qemux86-64:~# ptest-runner START: ptest-runner 2025-12-23T17:45 BEGIN: /usr/lib/tinyproxy/ptest starting web server... done (listening on 127.0.0.3:32123) starting tinyproxy... done (listening on 127.0.0.2:12321) waiting for 1 seconds.. done checking direct connection to web server... ok testing connection through tinyproxy... ok requesting statspage via stathost url... ok signaling tinyproxy to reload config...ok checking direct connection to web server... ok testing connection through tinyproxy... ok requesting statspage via stathost url... ok checking bogus request... ok, got expected error code 400 testing connection to filtered domain... ok, got expected error code 403 requesting connect method to denied port... ok, got expected error code 403 testing unavailable backend... ok, got expected error code 502 0 errors killing tinyproxy... ok killing webserver... ok done PASS: run_tests.sh DURATION: 1 END: /usr/lib/tinyproxy/ptest 2025-12-23T17:45 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tinyproxy: patch CVE-2025-63938Gyorgy Sarvari6 days2-0/+44
| | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2025-63938 Pick the patch referenced by the nvd report. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: upgrade 2.4.1-4 -> 2.4.2Gyorgy Sarvari8 days3-30/+28
| | | | | | | | | Contains fix for CVE-2025-30189 Changelog: https://github.com/dovecot/core/releases/tag/2.4.2 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 6.0.3 -> 6.0.4Wang Mingyu10 days1-1/+1
| | | | | | | | | | | | | Changelog: ========== - Fixed a vulnerability in the NetworkManager plugin charon-nm that potentially allows using credentials of other local users. - Concurrent requests to fetch the same CRL URI by multiple threads are now combined. - Increased the max. supported length for section names in swanctl.conf to 256. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* fetchmail: upgrade 6.5.2 -> 6.6.2Gyorgy Sarvari10 days1-2/+2
| | | | | | | | | | | Contains fix for CVE-2025-61962. License-Update: added a warning about linking against the newly relicensed WolfSSL. Changelog: https://gitlab.com/fetchmail/fetchmail/-/blob/6.6.2/NEWS Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: complete ptest supportGyorgy Sarvari2025-12-162-5/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The recipe had already an almost working ptest config which wasn't enabled, it just needed some small fixes to make it work: correct the output of the run-ptest script, and install some extra testdata. Execution is quick, single digit seconds: root@qemux86-64:/usr/lib/unbound/ptest/tests# ptest-runner START: ptest-runner 2025-12-16T11:53 BEGIN: /usr/lib/unbound/ptest Start of unbound 1.24.2 unit test. test authzone functions test negative cache functions test ub_random functions [...many lines...] PASS: ./testdata/val_unsecds_negcache.rpl PASS: ./testdata/val_unsecds_qtypeds.rpl PASS: ./testdata/val_wild_pos.rpl PASS: ./testdata/version_bind.rpl PASS: ./testdata/version_bind_hide.rpl PASS: ./testdata/views.rpl DURATION: 4 END: /usr/lib/unbound/ptest 2025-12-16T11:53 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* unbound: upgrade 1.22.0 -> 1.24.2Gyorgy Sarvari2025-12-162-52/+2
| | | | | | | | | | | | | | | | Contains fixes for CVE-2025-11411 and CVE-2025-5994. Drop patch that was incorporated in this release. Changelogs: https://github.com/NLnetLabs/unbound/releases/tag/release-1.24.2 https://github.com/NLnetLabs/unbound/releases/tag/release-1.24.1 https://github.com/NLnetLabs/unbound/releases/tag/release-1.24.0 https://github.com/NLnetLabs/unbound/releases/tag/release-1.23.1 https://github.com/NLnetLabs/unbound/releases/tag/release-1.23.0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.16 -> 2.6.17Gyorgy Sarvari2025-12-161-1/+1
| | | | | | | | | | | | | | Changelog: - Windows/interactive service: fix erroneous exit on error that could be used by a local Windows users to achieve a local denial-of-service (CVE-2025-13751) - Windows/interactive service: improve service pipe robustness against file access races (uuid) and access by unauthorized processes (ACL). upgrade bundled build instruction (vcpkg and patch) for pkcs11-helper to 1.31, fixing a parser bug Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.14 -> 1.45.15Wang Mingyu2025-12-091-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: Pass BUILD_CFLAGS to BUILD_CCMingli Yu2025-12-052-0/+36
| | | | | | | | | | | | | | | | | * The option -fcanon-prefix-map is added to CFLAGS after the commit [1] introduced and result in the below build error. Making all in sdrcomp make[3]: Entering directory '/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37/lanserv/sdrcomp' aarch64-wrs-linux-gcc -mcpu=cortex-a57+crc -mbranch-protection=standard -fstack-protector-strong -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security --sysroot=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot -DHAVE_CONFIG_H -I. -I../.. -DSTATEDIR='"/var"' -Wall -Wsign-compare -I../../include -I../../lanserv -I../../utils -O2 -g -fcanon-prefix-map -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37 -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37 -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot= -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot-native= -pipe -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -c -o sdrcomp.o sdrcomp.c gcc -o sdrcomp_build ../../lanserv/sdrcomp/sdrcomp.c -O2 -g -fcanon-prefix-map -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37 -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/sources/OpenIPMI-2.0.37=/usr/src/debug/openipmi/2.0.37 -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot= -ffile-prefix-map=/tmp/work/cortexa57-wrs-linux/openipmi/2.0.37/recipe-sysroot-native= -pipe -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Wall -Wsign-compare -I../../include -I../../lanserv -I../../utils -lm gcc: error: unrecognized command-line option ‘-fcanon-prefix-map’; did you mean ‘-fmacro-prefix-map=’? * Pass BUILD_CFLAGS for BUILD_CC to fix the above build issue. [1] https://git.openembedded.org/openembedded-core/commit/?id=3dbc4a79f01ebfc54da024c1460c06772659088d Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* pgpool2: 4.6.3 -> 4.6.4Liu Yiding2025-12-023-379/+1
| | | | | | | | Drop 0001-snprintf-Add-math.h-to-ensure-isnan-and-isinf-are-de.patch and v1-0001-Make-time-calculations-always-long-long.patch as those were merged upstream. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lowpan-tools: drop recipeGyorgy Sarvari2025-12-028-393/+0
| | | | | | | | | | | | | | | | | | The application has received its last upstream update 11 years ago. It has been on the skiplist[1] of meta-networking for the past 6 years due to being severly outdated. There are no recipes that would depend on this recipe in the meta-oe layers, nor in the layer-index[3]. Let's bid farewell. [1]: https://github.com/linux-wpan/lowpan-tools/commits/master/ [2]: https://github.com/openembedded/meta-openembedded/commit/13830393555adbb70ccec18bea177131ff405edc [3]: https://layers.openembedded.org/layerindex/branch/master/recipes/?q=depends%3Alowpan-tools Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netcat-openbsd: update to 1.228Dan McGregor2025-11-283-19/+17
| | | | | | | | | | | | | A version newer than 1.195 is required for certain features of newer versions of cloud-init. May as well bump to the version in Debian Testing. I also noticed it appears the licence was incorrectly specified, and is indeed BSD-3-Clause. License-update: Added copyright holders and clarified man page licence Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.6.15 -> 2.6.16Wang Mingyu2025-11-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Code maintenance / Compat changes --------------------------------- - adapt to new "encrypt-then-mac" cipher suites in OpenSSL 3.6.0 - these need special handling which we don't do, so the t_lpback self-test failed on them. Exclude from list of allowed ciphers, as there is no strong reason today to make OpenVPN use these. - fix various compile-time warnings Documentation updates --------------------- - fix outdated and non-HTTPS URLs throughout the tree (doxygen, warnings, manpage, ...) Bugfixes -------- - Fix memcmp check for the hmac verification in the 3way handshake. This bug renders the HMAC based protection against state exhaustion on receiving spoofed TLS handshake packets in the OpenVPN server inefficient. CVE: 2025-13086 - fix invalid pointer creation in tls_pre_decrypt() - technically this is a memory over-read issue, in practice, the compilers optimize it away so no negative effects could be observed. - Windows: in the interactive service, fix the "undo DNS config" handling. - Windows: in the interactive service, disallow using of "stdin" for the config file, unless the caller is authorized OpenVPN Administrator - Windows: in the interactive service, change all netsh calls to use interface index and not interface name - sidesteps all possible attack avenues with special characters in interface names. - Windows: in the interactive service, improve error handling in some "unlikely to happen" paths. - auth plugin/script handling: properly check for errors in creation on $auth_failed_reason_file (arf). - for incoming TCP connections, close-on-exec option was applied to the wrong socket fd, leaking socket FDs to child processes. - sitnl: set close-on-exec flag on netlink socket - ssl_mbedtls: fix missing perf_pop() call (optional performance profiling) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-vm-tools: Avoid GLib g_free macro redefinition errorKhem Raj2025-11-212-0/+32
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lkcp-tools: Fix test_1_to_1_recvfrom ptest failureKhem Raj2025-11-192-0/+48
| | | | | | | Build it with fortify disabled to get the intended behavior of the test Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: upgrade 2.0.36 -> 2.0.37Wang Mingyu2025-11-181-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.12 -> 1.45.14Wang Mingyu2025-11-181-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcpr: upgrade 1.12.0 -> 1.13.0Wang Mingyu2025-11-181-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Implement support for CURLOPT_CAINFO_BLOB - Added support for CURLOPT_SSLCERT_BLOB - Refactor: Pass std::string_view by value instead of by const reference - Add connection pool option (V3) - fix: Calling empty callbacks - fix: callback function pointer type mismatch in writeFunction - 1.12.0 CI Fixes - fix: Cmake config file - fix: make is_same_v check constexpr in set_option_internal - cpr::MultiPerform fixes - #1047 and #1186 - Bump actions/setup-python from 5 to 6 - Bump actions/checkout from 3 to 5 - Allow disabling PSL - Make curl dependency management optional - curl_container: allow calling GetContent without CurlHolder - Bump stefanzweifel/git-auto-commit-action from 6 to 7 - Bump actions/upload-artifact from 4 to 5 - Bump actions/setup-python from 1 to 5 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: remove buildtime installation of /var/lib/chronyVishwas Udupa2025-11-131-6/+8
| | | | | | | | | | | | | Since commit 3200122d68 (chrony: create /var/lib/chrony by systemd-tmpfiles) tmpfiles.d mechanism already ensures populating /var/lib/chrony at runtime. Introduce volatiles mechanism to make sure the directory is created at runtime for sysvinit as well. Since /var/lib/chrony is populated at runtime, stop packaging at build time. this helps to align towards stateless system expectations or when updates are done via meta-updater. Signed-off-by: Vishwas Udupa <vudupa@qti.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntp: add UPSTREAM_CHECK_URIYi Zhao2025-11-131-0/+1
| | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_URI to check the correct latest stable verison. Before the patch: $ devtool latest-version ntp INFO: Current version: 4.2.8p18 INFO: Latest version: After the patch: $ devtool latest-version ntp INFO: Current version: 4.2.8p18 INFO: Latest version: 4.2.8p18 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* atftp,tftp-hpa,vsftpd,dante,stunnel: Disable and remove tcp-wrapper supportKhem Raj2025-11-111-2/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: Fix build with glibc 2.43Khem Raj2025-11-102-0/+249
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtalloc: fix pytalloc package orderingMoraless Philius2025-11-101-4/+6
| | | | | | | | | | The libtalloc recipe did not properly populate the pytalloc package because pytalloc was listed after the main libtalloc package in the PACKAGES variable. As a result, the pytalloc package contained only talloc.so and was missing other required files. Signed-off-by: Moraless Philius <moraless.philius5@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tunctl: inherit sourceforge-releases classYi Zhao2025-11-091-0/+2
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version tunctl INFO: Current version: 1.5 INFO: Latest version: After the patch: $ devtool latest-version tunctl INFO: Current version: 1.5 INFO: Latest version: 1.5 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tcpreplay: add UPSTREAM_CHECK_REGEXYi Zhao2025-11-091-0/+1
| | | | | | | | | | | | | | | | | Add UPSTREAM_CHECK_REGEX to check the correct latest stable verison. Before the patch: $ devtool latest-version tcpreplay INFO: Current version: 4.5.2 INFO: Latest version: After the patch: $ devtool latest-version tcpreplay INFO: Current version: 4.5.2 INFO: Latest version: 4.5.2 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openipmi: inherit sourceforge-releases classYi Zhao2025-11-091-1/+1
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version openipmi INFO: Current version: 2.0.36 INFO: Latest version: After the patch: $ devtool latest-version openipmi INFO: Current version: 2.0.36 INFO: Latest version: 2.0.37 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* PATCH 2/8] netcat: inherit sourceforge-releases classYi Zhao2025-11-091-1/+1
| | | | | | | | | | | | | | | | | | Inherit sourceforge-releases class to check the correct latest stable verison. Before the patch: $ devtool latest-version netcat INFO: Current version: 0.7.1 INFO: Latest version: After the patch: $ devtool latest-version netcat INFO: Current version: 0.7.1 INFO: Latest version: 0.7.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netsniff-ng: upgarde 0.6.8 -> 0.6.9Gyorgy Sarvari2025-11-082-33/+2
| | | | | | | | | | | | | | | | | | Source branch was renamed from master to main. Drop patch that was incorporated in this release. Changelog: Use GitHub actions for CI Allow to manually define CPUs for trafgen Fix make install and output netsniff-ng stats on stderr trafgen: Fix for ipv6 header generation when L3-only devices are present mausezahn: use getopt_long instead of getopt build: fix install dependencies in Makefile template trafgen: move cpu stats temp file to /tmp ring_tx: handle EINTR from sendto Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* http-parser: fix SRC_URI branchGyorgy Sarvari2025-11-081-1/+1
| | | | | | | master was renamed to main Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Fix CVE-2025-9817Vijay Anusuri2025-11-042-0/+33
| | | | | | | | | | | Upstream-Status: Backport from https://gitlab.com/wireshark/wireshark/-/commit/39daba5e247ea495f88b0be82f0b7ebbdbf50fba Link: https://gitlab.com/wireshark/wireshark/-/issues/20642 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-9817 https://ftp.lysator.liu.se/pub/opensuse/update/leap/15.6/sle/src/wireshark-4.2.13-150600.18.26.1.src.rpm Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: Upgrade 4.2.12 -> 4.2.14Vijay Anusuri2025-11-041-1/+1
| | | | | | | | | | | | | releasenote: https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html Includes security fix CVE-2025-11626 Link: https://gitlab.com/wireshark/wireshark/-/issues/20724 Signed-off-by: Vijay Anusuri <vanusuri@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: upgrade 6.0.2 -> 6.0.3Yi Zhao2025-11-021-1/+1
| | | | | | | | ChangeLog: https://github.com/strongswan/strongswan/releases/tag/6.0.3 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: Fix service start errorLiu Yiding2025-10-311-1/+4
| | | | | | | | | | | | 1.Fix following dovecot.service starting error. dovecot[364]: doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 48: cert_file: open(/etc/dovecot/ssl-cert.pem) failed: No such file or directory systemd[1]: dovecot.service: Main process exited, code=exited, status=89/n/a systemd[1]: dovecot.service: Failed with result 'exit-code'. 2. There is no need to do "touch ${D}/etc/dovecot/dovecot.conf" as it was created by dovecot after dovecot was upgraded to 2.4.1-4. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mctp: upgrade 2.1 -> 2.4Patrick Williams2025-10-292-41/+2
| | | | | | | | mctp-2.4 was released. It includes a previously submitted patch, so drop that. Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: upgrade 4.7 -> 4.8Bastian Krause2025-10-292-35/+1
| | | | | | | | | | | | | | | | | | | | | | | | | 0001-Fix-compilation-with-musl.patch is obsolete due to 948ecf8 ("hash: include util.h for MIN macro") included in chrony since version 3.5. From chrony's NEWS [1] for the 4.8 release: Enhancements ------------ * Add maxunreach option to limit selection of unreachable sources * Add -u option to chronyc to drop root privileges (default chronyc user is set by configure script) Bug fixes --------- * Hide chronyc socket to mitigate unsafe permissions change * Fix refclock extpps option to work on Linux >= 6.15 * Validate refclock samples for reachability updates [1] https://chrony-project.org/news.html Signed-off-by: Bastian Krause <bst@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice: update 0.15.2 -> 0.16.0Markus Volk2025-10-291-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Major Changes in 0.16: Added Added DMA-BUF encoder support for GStreamer 1.24+ Implemented hardware-accelerated encoding for Intel GPUs Added environment variable SPICE_CONVERTER_PREFERRED_FORMAT to override converter format Multi-plane GL scanout support (new spice_qxl_gl_scanout2()) Changed Improved memslot to preserve address bits for ARM64 TBI/AMD UAI/Intel LAM Optimized BGR24/BGRX32 conversion when JCS_EXTENSIONS is defined Removed GStreamer 0.10 support Send real time to client, instead of synchronizing on both ends, attempting to fix latency issue Fixes Fixes a GL_DRAW cookie assertion race Add SSL_OP_NO_RENEGOTIATION fallback path, fixing w/LibreSSL 3.7.2 builds Fix Win32 builds Fix TCP_NOPUSH usage on Darwin Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-protocols: update 0.14.4 -> 0.14.5Markus Volk2025-10-291-1/+1
| | | | | | | | | Major changes in 0.14.5 ======================= * Add SPICE_MSG_DISPLAY_GL_SCANOUT2_UNIX * Fix for Windows Arm64 build Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.10 -> 1.45.12Wang Mingyu2025-10-291-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.75 -> 5.76Wang Mingyu2025-10-211-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nbdkit: upgrade 1.45.9 -> 1.45.10Wang Mingyu2025-10-211-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libldb: upgrade 2.8.1 -> 2.8.2Yi Zhao2025-10-151-2/+2
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: ignore CVE-2016-4983 (again)Gyorgy Sarvari2025-10-131-0/+2
| | | | | | | | | | | I removed the CVE_STATUS setting for CVE-2016-4983 when this recipe was updated to 2.4.1-4 - but that was a mistake, the CVE database considers (incorrectly) even the latest version as vulnerable. Revert that mistake by adding back the correct CVE_STATUS to the recipe. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* spice-guest-vdagent: upgrade 0.22.1 -> 0.23.0Wang Mingyu2025-10-081-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-12-31 06:46:44 +0000