aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking
AgeCommit message (Collapse)Author
5 daysfreediameter: fix dependency from libidn to libidn2Martin Jansa
* it's used since: https://github.com/freeDiameter/freeDiameter/commit/da679d27c546e11f6e41ad8882699f726e58a9f7 included with the upgrade to 1.5.0 in: https://git.openembedded.org/meta-openembedded/commit/?id=47ccb88d94852e327f3bdd45425f33e56983b50c * libidn2 is usually pulled into the RSS by the dependency from gnutls but when gnutls doesn't depend on it, the build fails with: -- Checking for module 'libidn2' -- No package 'libidn2' found CMake Error at include/freeDiameter/CMakeLists.txt:144 (MESSAGE): Unable to find libidn2, please install libidn2-dev or equivalent, or set DIAMID_IDNA_IGNORE or DIAMID_IDNA_REJECT Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
7 dayssquid: upgrade 6.8 -> 6.9Wang Mingyu
Changelog: ========== - Regression Bug 5349: basic_nis_auth build error: unterminated #ifndef - Bug 5069: Keep listening after getsockname() error - Bug 5360: FwdState::noteDestinationsEnd() assertion "err" - Reduce stale errno usage - Plug memory leak in handling cache manager requests - Fix error: template-id not allowed for constructor in C++20 - Improve release packaging automation Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
7 dayssngrep: upgrade 1.8.0 -> 1.8.1Wang Mingyu
Changelog: capture: fix possible buffer overflow while processing headers Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
7 daysrdma-core: upgrade 50.0 -> 51.0Wang Mingyu
Changelog: ============ -Merge pull request #1444 from yishaih/mlx5_dr -Merge pull request #1439 from Kamalheib/qedr_pr -mlx5: DR, Using sq ts format when RoCE is disabled -Merge pull request #1440 from Honggang-LI/doc -librdmacm: adjust ECE function name in man page -providers/qedr: Remove unused debug files -roviders/qelr: Replace DP_ERR with verbs_err -providers/qelr: Replace DP_VERBOSE with verbs_debug -providers/qelr: Remove unused macros -Merge pull request #1438 from amzn/fix-rdma-tracepoint Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
7 daysnng: upgrade 1.5.2 -> 1.7.3Alexander Vickberg
Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
7 daysRevert "nng: upgrade 1.5.2 -> 12"Alexander Vickberg
This reverts commit 915b6c02ee43e2dee8c6b3132e7d47836d392168. Mistake upgrade by AUH Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
8 dayssnort3: update to latest stable version 3.1.84.0Yi Zhao
ChangeLog: https://github.com/snort3/snort3/releases/tag/3.1.84.0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
8 dayslibdaq: update to latest stable version 3.0.14Yi Zhao
ChangeLog: https://github.com/snort3/libdaq/releases/tag/v3.0.14 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
9 daysUse PYTHON_SITEPACKAGES_DIR instead of hard-coded site-packages directory pathalperak
The following paths have been replaced with PYTHON_SITEPACKAGES_DIR: - "${libdir}/${PYTHON_DIR}/site-packages" - "${libdir}/python${PYTHON_BASEVERSION}/site-packages" - "${libdir}/python*/site-packages" - "${libdir}/python3.*/site-packages" Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
9 daysfreediameter: Upgrade to latest on master 1.5.0+Khem Raj
This also fixes all ptests, therefore move freediameter out of PTESTS_PROBLEMS_META_NETWORKING to PTESTS_FAST_META_NETWORKING Signed-off-by: Khem Raj <raj.khem@gmail.com>
12 dayslibcoap: fix CVE-2024-0962alperak
CVE-2024-0962: A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_oscore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. Upstream-Status: Backport [https://github.com/obgm/libcoap/pull/1311] WARNING: libcoap-4.3.4-r0 do_cve_check: Found unpatched CVE (CVE-2024-0962) This vulnerability is only exist in 4.3.4. Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
12 dayswaf-samba: replace oldincludedirPeter Marko
oldincludedir was removed in oe-core by commit 506c91cbc6a604a84e37e53ccff430436369802e Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-10nftables: Fix ptest runsKhem Raj
It gets OOMs with memory < 2G on x86_64 qemu Export NFT variable in run-ptest script its used by few tests Add required runtime dependencies for ptests to pass This also requires changes to kernel config features/nf_tables/nft_test.scc and CONFIG_VETH Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09postfix: switch SRC_URI to httpRandy MacLeod
Switch the SRC_URI to http since the postfix site does not yet use https. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09tnftp: switch the SRC_URI to httpsRandy MacLeod
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09pimd: switch SRC_URI to httpsRandy MacLeod
Switch SRC_URI to https (yes, the URI still has ftp in the path!). Also drop the obsolete SRC_URI[md5sum]. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-09ncftp: Upgrade to 3.2.7Randy MacLeod
Switch the SRC_URI from "ftp:" to "https:". Drop the obsolete SRC_URI[md5sum]. Drop ncftp-3.2.5-gcc10.patch since we're using gcc13 and upstream has fixed the build to work by adding an extern to sh_util/gpshare.c for example. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-05unbound: upgrade 1.19.1 -> 1.19.3Beniamin Sandu
Includes security fixes for: CVE-2024-1931 - Loop with Unreachable Exit Condition ('Infinite Loop') Full release notes: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.3 Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-05mbedtls: upgrade 2.28.7 -> 2.28.8Beniamin Sandu
Includes security fixes for: CVE-2024-28960 - Insecure handling of shared memory in PSA Crypto APIs Full release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.8 Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-05mbedtls: upgrade 3.5.2 -> 3.6.0Beniamin Sandu
This is an LTS release. Includes security fixes: * CVE-2024-28960 - Insecure handling of shared memory in PSA Crypto APIs Full release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.6.0 Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-05mdns: Upgrade 2200.80.16 -> 2200.100.94.0.2Alex Kiernan
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02nftables: Fix failed ptest testcasesWilliam Lyu
There are 2 failed ptest testcases. They fail because they are broken, but the fix from the upstream is not yet available in version 1.0.9. These testcases are: - tests/shell/testcases/sets/reset_command_0 Fix from the upstream: https://git.netfilter.org/nftables/commit/?id=7a6089a400a573b9a4fd92f29c00a6be7b8ef269 - tests/shell/testcases/json/0005secmark_objref_0 Fix from the upstream: https://git.netfilter.org/nftables/commit/?id=fff913c1eefbc84eb2d9c52038ef29fe881e9ee9 Signed-off-by: William Lyu <William.Lyu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02nftables: Fix ShellCheck violations in ptest wrapper script "run-ptest"William Lyu
The following ShellCheck violations in "run-ptest" are fixed: - line 4: SC2164: Use 'cd ... || exit' or 'cd ... || return' in case cd fails. - line 7: SC2086: Double quote to prevent globbing and word splitting. - line 9: SC2006: Use $(...) notation instead of legacy backticks `...`. SC2086: Double quote to prevent globbing and word splitting. SC2126: Consider using 'grep -c' instead of 'grep|wc -l'. - line 10: SC2006: Use $(...) notation instead of legacy backticks `...`. SC2086: Double quote to prevent globbing and word splitting. SC2126: Consider using 'grep -c' instead of 'grep|wc -l'. - line 17: SC2086: Double quote to prevent globbing and word splitting. Signed-off-by: William Lyu <William.Lyu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02nftables: Fix ptest output format issuesWilliam Lyu
Fix the following ptest output format issues: - For "sed" command, change "-e" option to "-E" option. I believe the previous "-e" option is a typo based on the manual page of "sed": -e script, --expression=script add the script to the commands to be executed "-E" option, on the other hand, makes "sed" "use extended regular expressions in the script" according to the manual page. - The test result summary line is being treated as both a passed testcase and a failed testcase due to this line containing substring "[OK]" and "[FAILED]". The following is a sample test result summary line: I: results: [OK] 379 [SKIPPED] 1 [FAILED] 0 [TOTAL] 380 The fix is to change run-ptest to look for "I: [OK]" and "W: [FAILED]" when determining which lines correspond to passed/failed testcases. - Previously, only "W: [FAILED]" out of the following testcase failure prompts is parsed: W: [CHK DUMP] W: [VALGRIND] W: [TAINTED] W: [DUMP FAIL] W: [FAILED] Adding parsing for all testcase failure prompts. Signed-off-by: William Lyu <William.Lyu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02freeradius: 3.0.26 -> 3.2.3Robert Yang
* Add --without-rlm_json to fix: configure: error: set --without-rlm_json to disable it explicitly * Add --without-rlm_cache_redis to fix: configure: error: set --without-rlm_cache_redis to disable it explicitly. * Drop 0017-add-python.m4-for-detecting-python-3.10.patch and add 0017-Add-acinclude.m4-to-include-required-macros.patch to fix python3 related build errors * Rebased other patches for 3.2.3. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02wolfssl: upgrade 5.6.6 -> 5.7.0Wang Mingyu
Changelog: ============ https://github.com/wolfSSL/wolfssl/releases/tag/v5.7.0-stable Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-04-02wireshark: upgrade 4.2.3 -> 4.2.4Wang Mingyu
Bugfix: ========= -wnpa-sec-2024-06 T.38 dissector crash. -Extcap with configuration never starts; "Configure all extcaps before start of capture." is shown instead. -Packet Dissection CSV Export includes last column even if hidden. -Inject TLS secrets closes Wireshark on Windows. -Wireshark crashes when adding another port to the HTTP dissector. -When adding a new row to a table an error report may be inserted. -'--export-objects' does not work as expected on tshark version later than 3.2.10. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-26libcpr: add new recipePeter Marko
Curl for People C++ Requests is a simple wrapper around libcurl inspired by the excellent Python Requests project. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-26nftables: Add DESCRIPTION and HOMEPAGERandy MacLeod
Add DESCRIPTION and HOMEPAGE. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-26strongswan: upgrade 5.9.13 -> 5.9.14Yi Zhao
ChangeLog: https://github.com/strongswan/strongswan/releases/tag/5.9.14 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-25autofs: Fix build with musl >= 1.2.5Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-25ssmtp: Fix build with musl >= 1.2.5Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-25rdma-core: Fix build with musl >= 1.2.5Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-25net-snmp: Fix build with muslKhem Raj
The last patch 0012-Fix-configuration-of-NETSNMP_FD_MASK_TYPE.patch brought in with 5.9.4 upgrade is not sufficient and infact has a regression introduced for clang+musl builds. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-25usrsctp: upgrade to latest versionThomas Roos
Signed-off-by: Thomas Roos <throos@amazon.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-24wpantund: Update to latestKhem Raj
Add patch to support portable basename Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-24ot-br-posix: Update to latestKhem Raj
Drop backports Add a new patch to supply additional musl fixes Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-24ot-daemon: Update to tip of trunkKhem Raj
Drop backports which are not already available Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-24ipset: Update to 7.21Khem Raj
Fix build with latest musl while here Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-23openflow: Fix build with muslKhem Raj
Link in external library to provide backtrace functions since they are not part of C library Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-23openflow: Merge .inc into .bbKhem Raj
There is one recipe so merge the include file into recipe Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-23openflow: Delete recipe for 1.0Khem Raj
_git is the maintained recipe Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-21openvpn: upgrade 2.6.9 -> 2.6.10Yi Zhao
License-Update: Update copyright years to 2024 ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.6.10/Changes.rst Security fixes: CVE-2024-27459: Windows: fix a possible stack overflow in the interactive service component which might lead to a local privilege escalation. CVE-2024-24974: Windows: disallow access to the interactive service pipe from remote computers. CVE-2024-27903: Windows: disallow loading of plugins from untrusted installation paths, which could be used to attack openvpn.exe via a malicious plugin. Plugins can now only be loaded from the OpenVPN install directory, the Windows system directory, and possibly from a directory specified by HKLM\SOFTWARE\OpenVPN\plugin_dir. CVE-2024-1305: Windows TAP driver: Fix potential integer overflow in !TapSharedSendPacket. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-20openlldp: upgrade 1.1.0 -> 1.1.1Wang Mingyu
0001-autotools-Add-option-to-disable-installation-of-syst.patch refreshed for 1.1.1 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-20networkd-dispatcher: upgrade 2.1 -> 2.2.4Wang Mingyu
Changelog: ========== - Improve performance when getting interface status - update project URL - Add environment variables to manpage. - Don't start the daemon if there's nothing to do - _interface_scan: fix wrong index into iface map - _interface_scan: force handle_state for new interfaces - Add missing administrative state 'initialized' - use os.path.dirname instead of os.path.basename - make sure scripts are not writeable by non-root users - don't allow unknown operational/admin states (CVE-2022-29799, CVE-2022-29800) - Fix missing word in exception message - fix some new linting issues from pylint - manpage: fix missing slash in "configured.d" directory name - Normalize parsed IP address value - Drop support for Python 3.4 - Add testing for Python 3.10 - README.md: fix code formatting Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-20libdnet: upgrade 1.17.0 -> 1.18.0Wang Mingyu
Changelog: ========== -update to autotools build chain -rebuild Python bindings with latest Cython Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-19civetweb: remove buildpaths from civetweb-targets.cmakeYi Zhao
Fixes: WARNING: civetweb-1.16-r0 do_package_qa: QA Issue: File /usr/lib/cmake/civetweb/civetweb-targets.cmake in package civetweb-dev contains reference to TMPDIR [buildpaths] Siuned-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-18bluez-tools: New recipe for bluez5 toolsJörg Sommer
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-17layer.conf: Prepare for release, drop nanbield LAYERSERIESKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-03-17frr: Fix build on newer muslKhem Raj
provide GNU like basename on non-glibc systems Signed-off-by: Khem Raj <raj.khem@gmail.com>