aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking
AgeCommit message (Collapse)Author
2014-09-01ntp: re-enable server debugging and control by PACKAGECONFIGPeter Bigot
The description in a previous patch to disable debugging is incorrect. Although the option is default-enabled in configure.ac, configure does respect the option that disables it. In ntp 4.2.7 the option code is refactored to ntp_debug.m4 and has an effect in sntp as well. Adding --disable-debugging to the top-level configure options overrides the default for both 4.2.6 and 4.2.7 without patching the distribution. Make the selection explicit and configurable, but restore the historical default. Absence of debugging capability in the server makes it difficult to validate complex configurations. Signed-off-by: Peter A. Bigot <pab@pabigot.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21autofs: uprev it to 5.1.0Roy Li
1. Uprev it to 5.1.0, add remove the unneed patches 2. fix a building failure since not include stdarg.h 3. using pkg-config to check xml and krb5 4. force STRIP to empty to not strip the file Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21strongswan: uprev to version 5.2.0Jackie Huang
* removed two patches which were already integrated in 5.2.0: strongswan-4.3.3-5.1.1_asn1_unwrap.patch strongswan-5.0.0-5.1.2_reject_child_sa.patch Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21traceroute: uprev it to 2.0.20Roy Li
1. uprev to 2.0.20 2. Update the license md5sum, since the address is changed in COPYING*: From: Copyright (C) 1989, 1991 Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA To: Copyright (C) 1989, 1991 Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21tcpdump: uprev it to 4.6.1Roy Li
1. uprev to 4.6.1 2. remove three obsolete patches 3. use PACKAGECONFIG, and the default value is ipv6 openssl Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21wireshark: add libsmi portaudio to PACKAGECONFIGRoy.Li
Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21ntp: fix CVE-2013-5211Zhang Xiao
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013. Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21ntp: Disable debugging by defaultXufeng Zhang
There is a problem in configure.ac file that whether or not '--enable-debugging' is specified in configure cmdline, debugging is always enabled. We should disable ntp debugging by default. Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-15cyassl: add recipelchristina26
Signed-off-by: Leah Thompson <lchristina26@hotmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13net-snmp: uprev it to 5.7.2.1Roy Li
Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13inetutils: not use auto-detected login for telnetdTing Liu
Below error appears as login was auto-detected by default: | telnetd: /usr/bin/login -p -h 192.168.2.1 : No such file or directory. | Connection closed by foreign host. Signed-off-by: Ting Liu <ting.liu@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13quagga: uprev it to 0.99.23Roy Li
uprev it to 0.99.23 remove patches which have been in the latest version Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13curlpp: fix do_compile failed since gcc upgrade to 4.9Hongxu Jia
The deprecated test code was no longer used, so remove it to avoid compiling failure with -Werror=unused-function ... | example21.cpp:51:8: error: 'size_t {anonymous}::readData(char*, size_t, size_t)' defined but not used [-Werror=unused-function] | size_t readData(char *buffer, size_t size, size_t nitems) ... Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13ipsec-tools: uprev it to 0.8.2Roy Li
Remove 0001-Fix-warning-with-gcc-4.8.patch, it has been in 0.8.2 Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13ifenslave: add recipesRoy Li
Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13dnsmasq: add packageconfigs for idn, conntrack, luaChristopher Larson
Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13dnsmasq: look for lua.pc, not lua5.1.pcChristopher Larson
Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13dnsmasq: move parallel make patch to .bb, add upstream-statusChristopher Larson
Patches really belong in the recipe, not the .inc, given patches are generally version-bound. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13dnsmasq: obey CFLAGS & LDFLAGSChristopher Larson
Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13dnsmasq: add missing inherit pkgconfigChristopher Larson
dnsmasq runs pkg-config to get cflags/libs for its dependencies. Signed-off-by: Christopher Larson <chris_larson@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-11snort: add dependency on util-linuxMartin Jansa
* fixes floating dependency: WARNING: QA Issue: snort rdepends on util-linux-libuuid but it isn't a build dependency? [build-deps] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-11stunnel: add dependency on zlib and tcp-wrappersMartin Jansa
* fixes floating dependency: stunnel/stunnel/latest lost dependency on libwrap zlib Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-10netcf: init script should be installed under /etc/init.d/Roy Li
init script should be installed under /etc/init.d/, not /etc/rc.d/init.d Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-10dnsmasq: fix parallel make failureShrikant Bobade
The dnsmasq target depends on .configured and $(objs). .configured does an rm -f *.o. Yet the only thing telling make to build the .configured target before the $(objs) target was the order of the dependencies of the dnsmasq target. We can't rely on that order when doing a paralllel make build, so add an explicit rule to enforce that order. Signed-off-by: Christopher Larson <kergoth@gmail.com> Signed-off-by: Shrikant Bobade <Shrikant_Bobade@mentor.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-06wireshark: update configuration and epochJoe MacDonald
Commit 6d781369 warranted a PE bump but didn't include it. Update it, correct a typo in EXTRA_OECONF and explicitly disable c-ares resolver at the same time. Acked-by: Armin Kuster <akuster@mvista.com> Acked-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-06wireshark: update README instructionsJoe MacDonald
Minor tweaks to the README to make the email suggestion follow the format used in other meta-openembedded README files and adding clarification on building wireshark in a GUI environment. Acked-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-06README: Update layer dependenciesJoe MacDonald
There are a few recipes in meta-networking that depend unconditionally on components in meta-oe, so indicate that in the README. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-06wireshark: update to latest stable versionJoe MacDonald
Version 1.12.0 is out, update the SRC_URI and associated variables. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-05znc: Fix for CVE-2013-2130Xufeng Zhang
ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp. Per: http://cwe.mitre.org/data/definitions/476.html CWE-476: NULL Pointer Dereference Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-05quagga: Security Advisory - quagga - CVE-2013-2236Yue Tao
Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2236 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-05strongswan: Security Advisory - strongswan - CVE-2014-2891Yue Tao
strongSwan before 5.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a crafted ID_DER_ASN1_DN ID payload. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2891 Signed-off-by: Yue Tao <Yue.Tao@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-01wireshark: fix build dependsArmin Kuster
This should address issues found in test-dependencies 2014-07-25 wireshark/wireshark/latest lost dependency on libcap libnl libnl-genl libnl-nf libnl-route portaudio-v19 sbc Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-01wireshark: Add missing pkgconfig dependencyRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-08-01wireshark: fix build for armArmin Kuster
* Backported Arm build fix Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-01wireshark: Add recipe 1.12.0-rc2Armin Kuster
* Inital wireshark support on gtk+, gtk3 * README with additional info Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30tnftp: add openssl PACKAGECONFIG and inherit pkgconfigRoy Li
Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30ipsec-tools: enable Dead Peer Detection and NAT traversalTing Liu
* Dead peer detection (DPD) is a method that network devices use to verify the current existence and availability of other peer devices. * NAT traversal (sometimes abbreviated as NAT-T) is a general term for techniques that establish and maintain Internet protocol connections traversing network address translation (NAT) gateways Signed-off-by: Ting Liu <b28495@freescale.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30ipsec-tools: several fixesRoy Li
1. use PACKAGECONFIG 2. add three patches which will add the address check, to avoid SEGFAULT Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30snort: do not hardcode the libdirRoy.Li
libdir is defined as ${pref_exec}/lib/, but we want it to support multilib path Signed-off-by: Roy.Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30openvpn: not use the hardcoded libdirRoy Li
it will lead to QA failure, since .debug dir can not be installed into dbg package ERROR: QA Issue: non debug package contains .debug directory: openvpn path /work/core2-64-wrs-linux/openvpn/2.3.4-r0/packages-split/openvpn/usr/lib64i /openvpn/plugins/.debug/openvpn-plugin-down-root.so [debug-files] Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-24snort: move files from 'files' to 'snort' for faster lookupMartin Jansa
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-24snort: add openssl PACKAGECONFIGMartin Jansa
* otherwise the result isn't deterministic WARN: packages/armv5te-oe-linux-gnueabi/snort/snort/latest lost dependency on libcrypto * enable it by default, disabling currently doesn't work, because there are --with flags for openssl, but then configure.in still checks for sha.h header with AC_CHECK_HEADERS([openssl/sha.h],, SHA_H="no") and autodetects it, I'll leave patching configure to someone who is actually using snort (this issue was reported many times and nobody seems to care). Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-24snort: add missing pkgconfig inheritMartin Jansa
* otherwise m4 eats all memory and is killed by OOMK [1051138.019784] Out of memory: Kill process 26264 (m4) score 860 or sacrifice child [1051138.019788] Killed process 26264 (m4) total-vm:23062712kB, anon-rss:15066516kB, file-rss:100kB * very strange, but m4 and snort sometimes have strange side-effects, from first google result: http://www.hipforums.com/newforums/showthread.php?t=466568 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-24lksctp-tools: blacklist because it fails to link against sctp_connectx symbolMartin Jansa
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-22openvpn: update and enable iproute2 supportRichard Tollerton
- Added .bb for version 2.3.4. - The download URL was broken; it's changed to reflect where the website points to. - Force use of iproute2, which is generally recommended when running OpenVPN as an unprivileged user. Ref: http://community.openvpn.net/openvpn/wiki/UnprivilegedUser - Explicitly add libpam to DEPENDS if pam is enabled, and disable the auth-pam plugin if pam is not enabled. - Pass the path to the 'ip' utility to the configure script to keep it from trying to find it on the host. Signed-off-by: Richard Tollerton <rich.tollerton@ni.com> Signed-off-by: Ben Shelton <ben.shelton@ni.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-22mtr: Use "foreign" automake strictnessRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-22rp-pppoe: Use "foreign" automake strictnessRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-22memcached: Use "foreign" automake strictnessRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-22ipsec-tools: Use "foreign" automake strictnessRichard Purdie
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-22vsftpd: fix install warningWenzong Fan
WARNING: QA Issue: vsftpd: Files/directories were installed but not shipped /run /run/vsftpd /run/vsftpd/empty Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>