aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking
AgeCommit message (Collapse)Author
2024-03-02drbd-utils: Disable warnings as errorsKhem Raj
Newer clang ( 18+ ) finds more warnings and treats them as errors therefore disable warnings-as-errors Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-02drbd-utils: upgrade 9.22.0 -> 9.27.0Xiangyu Chen
rebased patches: 0001-drbd-utils-support-usrmerge.patch 0001-drbdmon-add-LDFLAGS-when-linking.patch removed patches that already in upstream code repository 0001-replace-off64_t-with-off_t.patch 0002-drbdadm-drop-use-of-GLOB_MAGCHAR-use-strchr-heuristi.patch add keyutils depends Change log ========== 9.27.0 * adjust,v9: retry for diskless primaries * tests: sanitize env (e.g., TZ) * drbdmeta: dump and restore the members field 9.26.0 * config,v9: new config option load-balance-paths * config,v9: new config options rdma-ctrls-(snd|rcv)buf-size * drbdadm,v9: fix segfault if proxy has no path * drbd: increase maximum CPU mask size * systemd: introduce drbd-graceful-shutdown.service * drbdmeta,v9: fix regression, allow attach after offline resize * drbdsetup,v9: add path established information to JSON status * events2: terminate on module unload even under --poll * events2: specif exit code if module unload * docs: add spdx license file * drbdmon: various smaller improvements * drbdsetup,v9: support for TLS/kTLS 9.25.0 * drbdsetup,v9,show: fix meta disk format for json * drbdmon: various updates * build: fix RHEL6 spec builds * drbdmeta: {hex,}dump superblock * drbdmon: major rewrite * build: gcc v12 cleanups * misc: put locks into separate dir * selinux: add fowner fsetsid, they dropped a global noaudit rule 9.24.0 * windrbd: various fixes * v9: Support user-defined block-size * doc,v9: improvements all over the place * drbdadm,v9: implement drbdadm role <res:peer> * drbdadm,v9: pass --verbose/--statistics to drbdsetup status * drbd{adm,meta}: add repair-md subcommand 9.23.1 * drbdadm,v9,resync-after: fix too strict check 9.23.0 * drbdadm,v9,floating: fixup fake uname for 9.2.x strict_names=1 * drbdadm,v9,parser: fixup globs, also rm GNU libc specific extensions * drbdadm,v9,parser: allow via outside-address for NATed peers Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-02openvpn: upgrade 2.6.7 -> 2.6.9Yi Zhao
License-Update: Remove conditional text for Apache2 linking exception[1] ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.6.9/Changes.rst [1] https://github.com/OpenVPN/openvpn/commit/20bc8bd5af9d1ee0489d0ee58ae9c2c2f9b0cf9f Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-01postfix: upgrade 3.7.3 -> 3.8.5Yi Zhao
ChangeLog: https://www.postfix.org/announcements/postfix-3.8.0.html https://www.postfix.org/announcements/postfix-3.8.1.html https://www.postfix.org/announcements/postfix-3.8.2.html https://www.postfix.org/announcements/postfix-3.8.3.html https://www.postfix.org/announcements/postfix-3.8.4.html https://www.postfix.org/announcements/postfix-3.8.5.html * Drop 0006-makedefs-Account-for-linux-6.x-version.patch as the issue has been fixed upstream. * Merge inc file into single recipe Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-28openipmi: fix do_configure error when using dashYi Zhao
We encountered a do_configure error when using dash on Ubuntu 20.04: conftest.c:31:26: fatal error: Python.h: No such file or directory 31 | #include <Python.h> | ^~~~~~~~~~ It seems that PYTHON_CPPFLAGS is not passed to configure command correctly. Use configuration option --with-pythoncflags instead of passing it in cmdline. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-27networkmanager-fortisslvpn: use python3native and depend on ↵Martin Jansa
python3-packaging-native * it uses gdbus-codegen from glib-2.0-native which depended on python3-distutils-native until https://lists.openembedded.org/g/openembedded-core/message/196136 but distutils on host was enforced by sanity check only until mickledore with: https://git.openembedded.org/openembedded-core/commit/?id=8e3a5b0709384f2b455a82ac1e8e212686fe4456 so on hosts without distutils this was already failing with: http://errors.yoctoproject.org/Errors/Details/754697/ gdbus-codegen \ --generate-c-code src/nm-fortisslvpn-pppd-service-dbus \ --c-namespace NMDBus \ --interface-prefix org.freedesktop.NetworkManager \ ../NetworkManager-fortisslvpn-1.4.0/src/nm-fortisslvpn-pppd-service.xml Traceback (most recent call last): File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/bin/gdbus-codegen", line 53, in <module> from codegen import codegen_main File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/codegen_main.py", line 29, in <module> from . import dbustypes File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/dbustypes.py", line 22, in <module> from . import utils File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/utils.py", line 22, in <module> import distutils.version ModuleNotFoundError: No module named 'distutils' make: *** [Makefile:2081: src/nm-fortisslvpn-pppd-service-dbus.h] Error 1 and the glib-2.0-native change only changes the dependency from distutils to packaging which results in: http://errors.yoctoproject.org/Errors/Details/754693/ gdbus-codegen \ --generate-c-code src/nm-fortisslvpn-pppd-service-dbus \ --c-namespace NMDBus \ --interface-prefix org.freedesktop.NetworkManager \ ../NetworkManager-fortisslvpn-1.4.0/src/nm-fortisslvpn-pppd-service.xml Traceback (most recent call last): File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/bin/gdbus-codegen", line 53, in <module> from codegen import codegen_main File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/codegen_main.py", line 29, in <module> from . import dbustypes File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/dbustypes.py", line 22, in <module> from . import utils File "TOPDIR/tmp-glibc/work/core2-64-oe-linux/networkmanager-fortisslvpn/1.4.0/recipe-sysroot-native/usr/share/glib-2.0/codegen/utils.py", line 22, in <module> import packaging.version ModuleNotFoundError: No module named 'packaging' make: *** [Makefile:2081: src/nm-fortisslvpn-pppd-service-dbus.h] Error 1 * packaging probably isn't as wide spread on host distros as old distutils was, so make sure it's available by using python3-native with python3-packaging-native from OE build Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-26meta-networking: Express dependency on meta-pythonKhem Raj
python3-scapy recipe needed python3-mock package for ptests which is provided by meta-python. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-26dnsmasq: Upgrade 2.89 -> 2.90Peter Marko
Fixes CVE-2023-50387 and CVE-2023-50868 Remove backported CVE patch. Remove patch for lua as hardcoding lua version was removed. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-26snort3: fix snort.pcMartin Jansa
* fixes: ERROR: lib32-snort3-3+git-r0 do_populate_sysroot: QA Issue: snort.pc failed sanity test (tmpdir) in path lib32-snort3/3+git/sysroot-destdir/usr/lib/pkg * it's broken for non-multilib builds as well, the issue is that FLEX_CPPFLAGS points to native include dir, e.g. FLEX_CPPFLAGS=-I/OE/../lib32-snort3/3+git/recipe-sysroot-native/usr/include and the work around from: https://github.com/openembedded/meta-openembedded/commit/973647848049abda6f2adbee0189720109863731 sed -i "s#${RECIPE_SYSROOT}##g" ${D}${libdir}/pkgconfig/snort.pc strips the "/OE/../lib32-snort3/3+git/recipe-sysroot" part in non-multilib case, but leaves: FLEX_CPPFLAGS=-I-native/usr/include which is still wrong, but not detected by buildpaths QA check anymore and in multilib case, this didn't strip the first part because the target sysroot is: "/OE/../lib32-snort3/3+git/lib32-recipe-sysroot" so it didn't strip anything from native sysroot: "/OE/../lib32-snort3/3+git/recipe-sysroot-native" Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-26snort3: drop SRCPV from PVMartin Jansa
* as other recipes did in: https://git.openembedded.org/meta-openembedded/commit/?id=21f956598ddb1bb08855fbc9a3293acf957154d1 Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-26squid: Add missing bash dependency for ptest packageKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-26openhpi: Fix ptest run time failuresKhem Raj
It needs make and build tools in order to run Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-26ptest-packagelists-meta-networking: firewalld hangs therefore disabledKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-26python3-scapy: Add missing rdeps for ptestsKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-22meta-networking-image-ptest: Add images to enable BBCLASSEXTEND parallel ↵Khem Raj
execution In line with other layers like meta-oe, meta-python add capability to run recipe ptests Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-21wavemon: add recipe for version 0.9.5Romain Naour
wavemon is an ncurses-based monitoring application for wireless network devices on Linux. We have to provide the path to libnl3 headers since the build system is not able to find them. In order to workaround a link issue with pthread library, we have to add -pthread to CFLAGS in order to add the library after the object file. arm-none-linux-gnueabihf/bin/ld: info_scr.o: undefined reference to symbol 'pthread_mutex_trylock@@GLIBC_2.4' [...]/wavemon/0.9.5-r0/recipe-sysroot/lib/libpthread.so.0: error adding symbols: DSO missing from command line "We should mention the library on the command line after the object files being compiled" [1] [1] https://stackoverflow.com/questions/19901934/libpthread-so-0-error-adding-symbols-dso-missing-from-command-line Signed-off-by: Romain Naour <romain.naour@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-21snort3: Fix contains reference to TMPDIR [buildpaths] warningsKhem Raj
Fixes WARNING: snort3-3+git-r0 do_package_qa: QA Issue: File /usr/lib/pkgconfig/snort.pc in package snort3-dev contains reference to TMPDIR [buildpaths] WARNING: snort3-3+git-r0 do_package_qa: QA Issue: File /usr/src/debug/snort3/3+git/src/js_norm/pdf_tokenizer.cc in package snort3-src contains reference to TMPDIR File /usr/src/debug/snort3/3+git/src/js_norm/js_tokenizer.cc in package snort3-src contains reference to TMPDIR [buildpaths] Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-21snort: Do not use llvm libunwindKhem Raj
If llvm unwind is present then disable unwinding support since it will not have all unw_* functions eg. unw_strerror Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-21snort: add snort3 initial recipeKhawaja Shaheryar
I am adding this recipe as snort2 is legacy now. See more: https://github.com/snort3/snort3 Signed-off-by: Khawaja Shaheryar <behzadshaheryar@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-21libdaq: add recipeKhawaja Shaheryar
I am adding this recipe as snort3 depends on it. snort3 recipe will be provided in next commit. See more: https://github.com/snort3/libdaq Signed-off-by: Khawaja Shaheryar <behzadshaheryar@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-20wireshark: upgrade 4.2.2 -> 4.2.3Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-20unbound: upgrade 1.19.0 -> 1.19.1Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-20Fix install error when enable multilib.Lei Maohui
ERROR: samba-4.19.4-r0 do_package: QA Issue: samba: Files/directories were installed but not shipped in any package: /usr/lib/python3.12/site-packages/samba/domain_update.py /usr/lib/python3.12/site-packages/samba/ntstatus.so /usr/lib/python3.12/site-packages/samba/descriptor.py ...... Signed-off-by: Lei Maohui <leimaohui@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-19meta-networking: drop ${PYTHON_PN}Tim Orling
python 2 is long unsupported, so we no longer need this variable Signed-off-by: Tim Orling <tim.orling@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-18dropwatch: Use header files from sysroot instead of build hostchenheyun
it does not match with our real head file form kernel.(net_dropmon.h) net_dropmon.h in dropwatch local src/net_dropmon.h. linux kernel also have it in include/uapi/linux/net_dropmon.h for example,our kernel is linux5.10: diff tmp/work/cortexa57-poky-linux/dropwatch/1.5.4+git-r0/recipe-sysroot/usr/ include/linux/net_dropmon.h tmp/work/cortexa57-poky-linux/dropwatch/1.5.4+git-r0/git/src/net_dropmon.h 1c1,3 < 95a94 > NET_DM_ATTR_REASON, /* string */ it will cause mismatch when we use dropwatch in older kernel version(v5.10), will cause dropwatch and kernel drop_monitor module mismatch with netlink talk. we should build it with header from sysroot which comes from matching kernel. Signed-off-by: chenheyun <chen_heyun@163.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-17ntp: Add missing 'ntp' static group idYoann Congal
This fixes build in reproducible test environment [0]: ERROR: ntp-4.2.8p17-r0 do_install: ExecutionError[...] | chown: invalid group: ‘ntp:ntp’ Also add a missing newline at end-of-file. [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/12/steps/28/logs/stdio line 12221 Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-17freeradius: Add missing 'radiusd' static group idYoann Congal
This fixes build in reproducible test environment [0]: ERROR: freeradius-3.0.26-r0 do_install: ExecutionError [...] | chown: invalid group: ‘radiusd:radiusd’ [0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/12/steps/28/logs/stdio line 12830 Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-10ot-br-posix: Limit vla-cxx-extension option to clang >= 18Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-10mdns: Upgrade 2200.60.25.0.4 -> 2200.80.16Alex Kiernan
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09radvd: Fix build in reproducible testYoann Congal
In reproducible test, useradd config comes from static files: meta-networking/files/static-{passwd,group}-meta-networking Those files were not coherent : * an unused "rasvd" was defined (a typo for "radvd") * passwd referenced a unexisting group id. This patch aligns static files to the USERADD_PARAM recipe value. This will fix the errors seen during reproducibility tests: stdio: ERROR: radvd-2.19-r0 do_prepare_recipe_sysroot: radvd: useradd command did not succeed. stdio: ERROR: radvd-2.19-r0 do_prepare_recipe_sysroot: ExecutionError('/home/pokybuild/yocto-worker/reproducible-meta-oe/build/build/build-st-meta-networking/build-st/reproducibleA/tmp/work/core2-64-poky-linux/radvd/2.19/temp/run.useradd_sysroot.1178426', 1, None, None) stdio: ERROR: Logfile of failure stored in: /home/pokybuild/yocto-worker/reproducible-meta-oe/build/build/build-st-meta-networking/build-st/reproducibleA/tmp/work/core2-64-poky-linux/radvd/2.19/temp/log.do_prepare_recipe_sysroot.1178426 stdio: ERROR: Task (/home/pokybuild/yocto-worker/reproducible-meta-oe/build/meta-openembedded/meta-networking/recipes-daemons/radvd/radvd_2.19.bb:do_prepare_recipe_sysroot) failed with exit code '1' Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09ot-br-posix: upgrade to latest trunkKhem Raj
Fix build with clang and drop unneeded patch for unused variable 'i' Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09openflow: Switch SRC_URI to github mirrorKhem Raj
Original repo seems to be not accessible. Fix build with clang-18 Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09tcpslice: upgrade 1.6 -> 1.7Wang Mingyu
Changelog: =========== - Use "git archive" for the "make releasetar" process. - Makefile.in: Add the releasecheck target. - Cirrus CI: Add the "make releasecheck" command in the Linux task. - INSTALL.md: Add missing files. - Makefile.in: Add "make -s install" in the releasecheck target. - Makefile.in: Add the whitespacecheck target. - Cirrus CI: Run the "make whitespacecheck" command in the Linux task. - Makefile.in: Add some missing files in the distclean target. - autoconf: Add autogen.sh, remove configure and config.h.in. - autoconf: Require at least autoconf 2.69. - autoconf: Address most warnings from Autoconf 2.71. - autoconf: Update install-sh script to the latest available version. - autoconf: Update config.{guess,sub}, timestamps 2024-01-01 - Fix a build error on Haiku. - Do the version number the same way as in tcpdump and libpcap. - Lose unused missing/strlcpy.c. - Use posix_fadvise() on input files if available. - Prefer calloc() over malloc(). - Fix --static-pcap-only test on Solaris 10. - autoconf: replace --with-system-libpcap with --disable-local-libpcap. - autoconf: Find a local libpcap even with rcX directory suffix - configure: special-case macOS /usr/bin/pcap-config - On Solaris, for 64-bit builds, use the 64-bit pcap-config. - configure: don't use egrep, use $EGREP. - Add some warning flags for Clang 13 or newer. - Fix some warnings with -Wmissing-variable-declarations. - Make various improvements to the instrument functions. - autoconf: Remove many obsolete elements, including workarounds for BSD/OS, IRIX, OSF/1, Solaris, Ultrix and possibly other OSes. - autoconf: Refine reporting of os-proto.h. - tcpslice(1): Use bold font more consistently. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09rdma-core: upgrade 48.0 -> 50.0Wang Mingyu
Changelog: ============= -Merge pull request #1419 from EdwardSro/pr-update-to-fc39 -Merge pull request #1422 from nmorey/dev/master/min-version -README: Bump minimum supported version to v30.x -Merge pull request #1421 from ffontaine/master -cbuild: Update to Fedora 39 -build: Fix cmake warning -pyverbs: Adapt includes in Fedora 39 [ #5860 ] -pyverbs: Fix runtime warnings in Fedora 39 -pyverbs: Fix compilation error in Fedora 39 -util/udma_barrier.h: fix mips4 build 0001-cmake-Allow-SYSTEMCTL_BIN-to-be-overridden-from-envi.patch refreshed for 50.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09recipes: drop ${SRCPV} usageMartin Jansa
* Drop SRCPV similarly like oe-core did in: https://git.openembedded.org/openembedded-core/commit/?h=nanbield&id=843f82a246a535c353e08072f252d1dc78217872 * SRCPV is deferred now from PV to PKGV since: https://git.openembedded.org/openembedded-core/commit/?h=nanbield&id=a8e7b0f932b9ea69b3a218fca18041676c65aba0 Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
2024-02-09squid: upgrade 6.6 -> 6.7Wang Mingyu
Changelog: =========== - Bug 5337: workaround for crash on startup if -a option is used - Bug 5274: Successful tunnels logged as TCP_TUNNEL/500 - Fix crash when NTLM and Negotiate helpers are queried with no HTTP request - Fix SslBump memory leak when mimicking certificates with Authority Key Identifier - Fix memory leak on SslBump certificates with Authority Key Identifier extension - Fix a possible integer overflow in FTP Gateway - Extend cache_log_message to Bug 5187 and job invalidation BUGs - Remove incorrect beta version warning - MS Windows portability improvements and some documentation improvements Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09ndisc6: upgrade 1.0.7 -> 1.0.8Wang Mingyu
Changelog ============ Fix potential garbage whilst prining an advertised prefix. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09nanomsg: upgrade 1.2 -> 1.2.1Wang Mingyu
Changelog: =========== -Fixed #1105 which caused a SIGBUS on some some platforms due misaligned accesses. -Fixed a problem when using absolute CMake target directories. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09mbedtls: upgrade 2.28.4 -> 2.28.7Beniamin Sandu
Includes security fixes for: CVE-2023-43615 - Buffer overread in TLS stream cipher suites CVE-2024-23170 - Timing side channel in private key RSA operations CVE-2024-23775 - Buffer overflow in mbedtls_x509_set_extension() Other changes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.5 License updated to dual Apache-2.0 OR GPL-2.0-or-later. Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-09mbedtls: upgrade 3.5.1 -> 3.5.2Beniamin Sandu
* Includes security fix for CVE-2024-23170 - Timing side channel in private key RSA operations * Includes security fix for CVE-2024-23775 - Buffer overflow in mbedtls_x509_set_extension() Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-01mdns: Fix SIGSEGV during DumpStateLog()Alex Kiernan
DumpStateLog() calls LogMsgWithLevelv() with category == NULL, avoid crashing in this case. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-28system-config-printer: fix runtime for system-config-printerMarkus Volk
https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=76e0113299bb65b840b2dd1409e31c67cc66d4b5 breaks runtime for system-config-printer, as it changes the way the cupshelpers module is installed and thus prevents system-config-printer from finding it. Install the module in a way it can be found. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-27scapy: Add difftools and logutils in RDEPENDSSimone Weiß
When adding scapy to core-image-base from poky those dependecies were missing causing scapys start to fail. Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-27radvd: add '--shell /sbin/nologin' to /etc/passwdLi Wang
the default setting USERADD_PARAM of yocto: -s /bin/sh follow redhat policy: radvd/redhat/systemd/radvd.spec useradd ... -s /sbin/nologin ... Signed-off-by: Li Wang <li.wang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-23wireshark: upgrade 4.2.0 -> 4.2.2Wang Mingyu
Changelog: ============ -sharkd is not installed by the Windows installer. -Fuzz job crash output: fuzz-2024-01-01-7740.pcap. -Can't open a snoop file from the Open dialog box unless I select \"All files\" as the file type. -Add s4607 dissector to \"decode as\" -Updater for 4.2.1 hangs. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-22lldpd: upgrade 1.0.17 -> 1.0.18Wang Mingyu
Changelog: =========== - Fix memory leaks in EDP/FDP decoding when receiving some TLVs twice. - Do not set interface description continuously. - Use a different Netlink socket for changes and queries. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-22dropwatch: add new recipeChristophe Vu-Brugier
Dropwatch is a utility to help developers and system administrators to diagnose problems in the Linux Networking stack, specifically their ability to diagnose where packets are getting dropped. References: * https://github.com/nhorman/dropwatch Signed-off-by: Christophe Vu-Brugier <christophe.vu-brugier@seagate.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-22libtalloc, libtevent, libtdb, libldb: set PYTHONARCHDIR for waf to respect ↵Martin Jansa
python libdir * fixes installed-vs-shipped when libdir in target is different than in native python e.g. with multilib enabled: ERROR: QA Issue: libtdb: Files/directories were installed but not shipped in any package: /usr/lib/python3.12/site-packages/tdb.so /usr/lib/python3.12/site-packages/_tdb_text.py Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. libtdb: 2 installed and not shipped files. [installed-vs-shipped] ERROR: QA Issue: libtalloc: Files/directories were installed but not shipped in any package: /usr/lib/python3.12/site-packages/talloc.so Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. libtalloc: 1 installed and not shipped files. [installed-vs-shipped] ERROR: QA Issue: libtevent: Files/directories were installed but not shipped in any package: /usr/lib/python3.12/site-packages/_tevent.so /usr/lib/python3.12/site-packages/tevent.py Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. lib32-libtevent: 2 installed and not shipped files. [installed-vs-shipped] * waflib has some fallback to query distutils when PYTHONARCHDIR isn't set in environment as in: https://gitlab.com/ita1024/waf/-/commit/84c26588fc3d479a1e79e1edacaa2cf052286c07 but this still returns wrong value from print(get_python_lib(plat_specific=1, standard_lib=0, prefix='/usr')) e.g. /usr/lib/python3.12/site-packages matching native layout instead of: /usr/lib64/python3.12/site-packages * python3targetconfig inherit breaks waflib as well as shown in config.log: ['libtdb/1.4.9/recipe-sysroot-native/usr/bin/python3-native/python3', '-c', "\ntry:\n\tfrom distutils.sysconfig import get_config_var, get_python_lib\nexcept ImportError:\n\tfrom sysconfig import get_config_var, get_path\n\tdef get_python_lib(*k, **kw):\n\t\tkeyword='platlib' if kw.get('plat_specific') else 'purelib'\n\t\tif 'prefix' in kw:\n\t\t\treturn get_path(keyword, vars={'installed_base': kw['prefix'], 'platbase': kw['prefix']})\n\t\treturn get_path(keyword)\n\nprint(repr(get_python_lib(standard_lib=0, prefix='/usr') or ''))"] err: Traceback (most recent call last): File "<string>", line 12, in <module> File "<string>", line 9, in get_python_lib File "libtdb/1.4.9/recipe-sysroot-native/usr/lib/python3.12/sysconfig.py", line 636, in get_path return get_paths(scheme, vars, expand)[name] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "libtdb/1.4.9/recipe-sysroot-native/usr/lib/python3.12/sysconfig.py", line 626, in get_paths return _expand_vars(scheme, vars) ^^^^^^^^^^^^^^^^^^^^^^^^^^ File "libtdb/1.4.9/recipe-sysroot-native/usr/lib/python3.12/sysconfig.py", line 270, in _expand_vars _extend_dict(vars, get_config_vars()) ^^^^^^^^^^^^^^^^^ File "libtdb/1.4.9/recipe-sysroot-native/usr/lib/python3.12/sysconfig.py", line 728, in get_config_vars _init_config_vars() File "libtdb/1.4.9/recipe-sysroot-native/usr/lib/python3.12/sysconfig.py", line 670, in _init_config_vars _init_posix(_CONFIG_VARS) File "libtdb/1.4.9/recipe-sysroot-native/usr/lib/python3.12/sysconfig.py", line 536, in _init_posix _temp = __import__(name, globals(), locals(), ['build_time_vars'], 0) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ModuleNotFoundError: No module named '_sysconfigdata' * setting PYTHONARCHDIR is simplest fix * this also fixes libldb failure when it fails to find e.g. tevent after these installed-vs-shipped issues instealled it in wrong libdir: Checking for system tevent (>=0.15.0) : yes Traceback (most recent call last): File "lib32-libldb/2.8.0/ldb-2.8.0/third_party/waf/waflib/Scripting.py", line 159, in waf_entry_point run_commands() File "lib32-libldb/2.8.0/ldb-2.8.0/third_party/waf/waflib/Scripting.py", line 255, in run_commands ctx = run_command(cmd_name) ^^^^^^^^^^^^^^^^^^^^^ File "lib32-libldb/2.8.0/ldb-2.8.0/third_party/waf/waflib/Scripting.py", line 239, in run_command ctx.execute() File "lib32-libldb/2.8.0/ldb-2.8.0/third_party/waf/waflib/Configure.py", line 159, in execute super(ConfigurationContext, self).execute() File "lib32-libldb/2.8.0/ldb-2.8.0/third_party/waf/waflib/Context.py", line 214, in execute self.recurse([os.path.dirname(g_module.root_path)]) File "lib32-libldb/2.8.0/ldb-2.8.0/third_party/waf/waflib/Context.py", line 296, in recurse user_function(self) File "lib32-libldb/2.8.0/ldb-2.8.0/wscript", line 54, in configure conf.RECURSE('lib/tevent') File "lib32-libldb/2.8.0/ldb-2.8.0/buildtools/wafsamba/samba_utils.py", line 66, in fun return f(*k, **kw) ^^^^^^^^^^^ File "lib32-libldb/2.8.0/ldb-2.8.0/buildtools/wafsamba/samba_utils.py", line 469, in RECURSE return ctx.recurse(relpath) ^^^^^^^^^^^^^^^^^^^^ File "lib32-libldb/2.8.0/ldb-2.8.0/third_party/waf/waflib/Context.py", line 296, in recurse user_function(self) File "lib32-libldb/2.8.0/ldb-2.8.0/lib/tevent/wscript", line 51, in configure conf.CHECK_BUNDLED_SYSTEM_PYTHON('pytevent', 'tevent', minversion=VERSION): ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "lib32-libldb/2.8.0/ldb-2.8.0/buildtools/wafsamba/samba_utils.py", line 66, in fun return f(*k, **kw) ^^^^^^^^^^^ File "lib32-libldb/2.8.0/ldb-2.8.0/buildtools/wafsamba/samba_bundled.py", line 270, in CHECK_BUNDLED_SYSTEM_PYTHON if not found and not conf.LIB_MAY_BE_BUNDLED(libname): ^^^^^ UnboundLocalError: cannot access local variable 'found' where it is not associated with a value and then it needs PYTHONARCHDIR as well to fix: ERROR: libldb-2.8.0-r0 do_package: QA Issue: libldb: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/python3.12 /usr/lib/python3.12/site-packages /usr/lib/python3.12/site-packages/_ldb_text.py /usr/lib/python3.12/site-packages/ldb.so /usr/lib/python3.12/site-packages/.debug /usr/lib/python3.12/site-packages/.debug/ldb.so Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install. libldb: 7 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-19samba: upgrade 4.19.3 -> 4.19.4Yi Zhao
Release Notes: https://www.samba.org/samba/history/samba-4.19.4.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-01-13adcli: use https protocol for fetchingalperak
Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-09-26 02:37:59 +0000