aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity
AgeCommit message (Collapse)Author
2021-01-12firewalld: upgrade 0.9.1 -> 0.9.2Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-06blueman: upgrade 2.1.3 -> 2.1.4Andreas Müller
Security release, see GHSA-jpc9-mgw6-2xwx/CVE-2020-15238 [1] Changes Force cython to use python language version 3 Do not use exitcode 1 when we expect to fail Mark more strings translatable (@cwendling) Bugs fixed Unstranslated strings Searching (with Ctrl+F in manager device list) did not work Default PIN lookup Fix device removal handling (@Yannik) Only use LaunchContext when we have proper event time [1] https://github.com/blueman-project/blueman/security/advisories/GHSA-jpc9-mgw6-2xwx Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05wolfssl: upgrade 4.5.0 -> 4.6.0zangrc
0001-Make-ByteReverseWords-available-for-big-and-little-e.patch Removed since this is included in 4.6.0 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28netplan: upgrade 0.100 -> 0.101zhengruoqin
Refresh the following patch: 0001-dbus-Remove-unused-variabes.patch 0002-Makefile-Exclude-.h-files-from-target-rule.patch Add 0001-don-t-fail-if-GLOB_BRACE-is-not-defined.patch to solve the compilation errors on musl. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-17mbedtls: upgrade to 2.25.0Alexander Vickberg
Deleted build fix patch. This is already applied in this release. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15samba: CVE-2020-14383 Security AdvisoryZheng Ruoqin
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15samba: CVE-2020-14318 Security AdvisoryZheng Ruoqin
References https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318 Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-12networkmanager: Fix reallocarray check in meson and configureKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-09mbedtls: upgrade to 2.24.0Alexander Vickberg
Download archives are no longer updated so fetch from Github. Add build fix from upstream. The file LICENSE now contains the full Apache 2.0 license text. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27netplan: upgrade 0.99 -> 0.100zangrc
0001-src-parse.c-Initialize-key-to-NULL.patch Removed since this is included in 0.100. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27snort: upgrade 2.9.16.1 -> 2.9.17zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27nngpp: upgrade 1.2.4 -> 1.3.0zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03mbedtls: Fix typo in PACKAGECONFIGMark Jonas
Signed-off-by: Mark Jonas <toertel@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-14networkmanager: remove PACKAGECONFIG[dhclient]Yi Zhao
The dhcp-client has been removed from oe-core and the current networkmanager does not support dhcpcd >= 9.0 (See bug report: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/410) Remove the PACKAGECONFIG[dhclient] and pass --with-dhclient/dhcpcd=no explicitly to EXTRA_OECONF. Otherwise it will search the host path when configure. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-14samba: upgrade 4.10.17 -> 4.10.18Yi Zhao
This is security release in order to address CVE-2020-1472 (Unauthenticated domain takeover via netlogon ("ZeroLogon")). See: https://www.samba.org/samba/history/samba-4.10.18.html Also remove 3 backported patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-13firewalld: upgrade 0.9.0 -> 0.9.1Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-06wolfssl: upgrade 4.4.0 -> 4.5.0Alexander Vickberg
Add patch from upstream which fixes building on big endian. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-26firewalld: Add missing rdep on nftables-pythonWinfried Dobbe
Fixes Issue #280 Signed-off-by: Winfried Dobbe <winfried.dobbe@xmsnet.nl> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-24libiec61850: add recipe for libiec61850Romain Naour
IEC 61850 is an international standard for communication systems in Substation Automation Systems (SAS) and management of Decentralized Energy Resources (DER). It is seen as one of the communication standards of the emerging Smart Grid. Add two upstream patch fixing build issues with musl libc. Enable the libiec61850 python binding (pyiec61850) that require a fix to find the correct PYTHON_SITE_DIR path while cross-compiling. Signed-off-by: Romain Naour <romain.naour@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-24crda: rdepends on wireless-regdb-staticRobert Yang
The wireless-regdb has been moved to oe-core. According the commit message: wireless-regdb-static should be used with kernel >= 4.15. wireless-regdb can be used with older kernels and is mostly irrelevant here, but keeping it in meta-networking would create needless recipe duplication. it should replace runtime dependency wireless-regdb with wireless-regdb-static. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-23firewalld: upgrade 0.8.3 -> 0.9.0Todd Cunningham
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-10libdnet: upgrade 1.12 -> 1.14Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03dhcpcd: pkg moved to coreArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03kea: pkg moved to coreArmin Kuster
Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03mosquitto: Upgrade 1.6.11 -> 1.6.12Leon Anavi
Upgrade to release 1.6.12: Security: - In some circumstances, Mosquitto could leak memory when handling PUBLISH messages. This is limited to incoming QoS 2 messages, and is related to the combination of the broker having persistence enabled, a clean session=false client, which was connected prior to the broker restarting, then has reconnected and has now sent messages at a sufficiently high rate that the incoming queue at the broker has filled up and hence messages are being dropped. This is more likely to have an effect where max_queued_messages is a small value. This has now been fixed. Broker: - Build warning fixes when building with WITH_BRIDGE=no and WITH_TLS=no. Clients: - All clients exit with an error exit code on CONNACK failure. - Don't busy loop with `mosquitto_pub -l` on a slow connection. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01autossh: Depend on ssh instead of hardcoding opensshKhem Raj
This helps it to use dropbear Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01bearssl: fix GNU_HASH link errorKhem Raj
Fixes No GNU_HASH in the ELF binary /mnt/b/yoe/master/build/tmp/work/cortexa57-yoe-linux/bearssl/0.6-r0/packages-split/bearssl/usr/lib/libbearssl.so.6.0.0, didn't pass LDFLAGS? [ldflag s] Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01networkmanager: Depend on dhcpcdKhem Raj
dhcp-client is being removed from oe-core Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-25meta-networking: dhcpcd: backport ALIGN compile error fixJack Mitchell
Fails to build on an aarch64 system with ipv6 disabled. This backported patch fixes it. Signed-off-by: Jack Mitchell <ml@embed.me.uk> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21bearssl: fix missing installJens Rehsack
Default Makefile of bearssl doesn't have a make target which hadn't enough attraction when creating the recipe. Add missing functionality. Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21lftp: upgrade 4.9.1 -> 4.9.2Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-19bearssl: add new recipeJens Rehsack
Add recipe for BearSSL - an an implementation of the SSL/TLS protocol with the approach of: * Be correct and secure. * Be small * Be highly portable * Be feature-rich and extensible See https://bearssl.org for more details. Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17autossh: Created recipeColin McAllister
Added recipe for autossh tool. Signed-off-by: Colin McAllister <colinmca242@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17mosquitto: Upgrade 1.6.10 -> 1.6.11Leon Anavi
Upgrade to release 1.6.11: Broker: - Fix usage message only mentioning v3.1.1. - Fix broker refusing to start if only websockets listeners were defined. - Change systemd unit files to create /var/log/mosquitto before starting. - Don't quit with an error if opening the log file isn't possible. - Fix bridge topic remapping when using "" as the topic. - Fix messages being queued for disconnected bridges when clean start was set to true. - Fix `autosave_interval` not being triggered by messages being delivered. - Fix websockets clients sometimes not being disconnected promptly. - Fix "slow" file based logging by switching to line based buffering. - Log protocol error message where appropriate from a bad UNSUBSCRIBE, rather than the generic "socket error". - Don't try to start DLT logging if DLT unavailable, to avoid a long delay when shutting down the broker. - Fix potential memory leaks. - Fix clients not receiving messages after a previous client with the same client ID and positive will delay interval quit. - Fix overly broad HAVE_PTHREAD_CANCEL compile guard. Client library: - Improved documentation around connect callback return codes. - Fix `mosquitto_publish*()` no longer returning `MOSQ_ERR_NO_CONN` when not connected. - `mosquitto_loop_start()` now sets a thread name on Linux, FreeBSD, NetBSD, and OpenBSD. - Fix `mosquitto_loop_stop()` not stopping on Windows. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13daq: Upgrade to 2.0.7Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13snort: Upgrade to 2.9.16.1Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13dibbler: Update to latestKhem Raj
Drop upstreamed patch Fixed compatibility with g++-10 Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13netplan: Update to latest to fix build with -fno-commonKhem Raj
Add patches to fix build with clang-11 Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-05freeradius: fix the occasional verification failureMingli Yu
Fixes: # cd /etc/raddb/certs # ./bootstrap [snip] chmod g+r ca.key openssl pkcs12 -in server.p12 -out server.pem -passin pass:'whatever' -passout pass:'whatever' chmod g+r server.pem C = FR, ST = Radius, O = Example Inc., CN = Example Server Certificate, emailAddress = admin@example.org error 7 at 0 depth lookup: certificate signature failure 140066667427072:error:04067084:rsa routines:rsa_ossl_public_decrypt:data too large for modulus:../openssl-1.1.1g/crypto/rsa/rsa_ossl.c:553: 140066667427072:error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib:../openssl-1.1.1g/crypto/asn1/a_verify.c:170: error server.pem: verification failed make: *** [Makefile:107: server.vrfy] Error 2 It seems the ca.pem mismatchs server.pem which results in failing to execute "openssl verify -CAfile ca.pem server.pem", so add the logic to check the file to avoid inconsistency. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-03rdist: fix parallel buildKai Kang
It fails to compile rdist occasionally when system load of build server is high: | In file included from common.c:57: | ../include/defs.h:49:10: fatal error: y.tab.h: No such file or directory | 49 | #include "y.tab.h" | | ^~~~~~~~~ | compilation terminated. Make $(COMMONOBJS) which include common.o to depends on related header files and y.tab.h to fix the parallel build failure. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-31samba: upgrade 4.10.15 -> 4.10.17Yi Zhao
This is a security release in order to address the following defects: CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results. CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume excessive CPU CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV. CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd. Also backport 3 patches to fix build error with musl. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-31relayd: bump to latest revisionOleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-31openconnect: update to 8.10Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-31firewalld: update to 0.8.3Oleksandr Kravchuk
nft build dependency has been removed in @3f7419dcb50a5bdcf800512d2491. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-31dhcpcd: update to 9.1.4Oleksandr Kravchuk
License checksum changed due to modified copyright years. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-28nngpp: Add recipeJohan Jeppsson
nngpp is a c++ wrapper for nng Signed-off-by: Johan Jeppsson <johanje@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-22samba: Fix conflicts with nss.h from glibcKhem Raj
This is seen with glibc 2.32 where these names are also defined Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-20networkmanager: Fix udev dependencyChristian Eggers
NetworkManager depends on libudev, but not on libgudev. Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-20networkmanager: Package nmcli separatelyChristian Eggers
nmcli depends on libreadline which is licensed under GPLv3. Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-13freeradius: fix the existed certificate errorMingli Yu
Fixes the occasional error: # cd /etc/raddb/certs # ./bootstrap [snip] openssl ca -batch -keyfile ca.key -cert ca.pem -in client.csr -key 'whatever' -out client.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf Using configuration from ./client.cnf Check that the request matches the signature Signature ok ERROR:There is already a certificate for /C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org The matching entry has the following details Type :Valid Expires on :200908024833Z Serial Number :02 File name :unknown Subject Name :/C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org make: *** [Makefile:128: client.crt] Error 1 Add the check to fix the above error and it does the same for server.crt. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-01 00:59:30 +0000