aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity
AgeCommit message (Collapse)Author
2020-01-06kea: upgrade 1.7.2 -> 1.7.3Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06wolfssl: upgrade 4.2.0 -> 4.3.0Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06lftp: upgrade 4.8.4 -> 4.9.0Wang Mingyu
fix-gcc-6-conflicts-signbit.patch Removed since they are included in 4.9.0 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06samba: upgrade 4.10.10 -> 4.10.11Yi Zhao
Security fixes: CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server (dnsserver). CVE-2019-14870: DelegationNotAllowed not being enforced in protocol transition on Samba AD DC. See: https://www.samba.org/samba/history/samba-4.10.11.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-25samba: disable guest access and anonymous queriesTrevor Gamblin
Guest accounts for Samba are a known potential vulnerability (see https://www.tenable.com/plugins/nessus/26919) where info about the host can be obtained without proper access. The option "map to guest = bad user" allows login attempts with usernames that don't exist to map to the guest account, while the "restrict anonymous" value (implicitly set to 0 before this patch) would allow any queries to obtain user and group list information. Raise the default security level by setting "restrict anonymous" to "1" and "map to guest" to "never" to avoid providing user/group info to unauthenticated users and reject login attempts with an invalid password, respectively. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-23cannelloni: Include stdexcept for runtime_errorKhem Raj
Fixes error: 'runtime_error' is not a member of 'std' throw std::runtime_error("Allocation error."); ^~~~~~~~~~~~~ Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-20civetweb: Upgrade to latest tipKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-20firewalld: Package firewalld filesKhem Raj
ERROR: firewalld-0.7.2-r0 do_package: QA Issue: firewalld: Files/directories were installed but not shipped in any package: /usr/lib /usr/lib/firewalld /usr/lib/firewalld/zones Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-20cannelloni: Update to latest and fix multilib buildsKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-18kea: upgrade 1.7.0 -> 1.7.2Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-15mosquitto: update to 1.6.8Leon Anavi
Bugfix release. For details, see: https://mosquitto.org/blog/2019/11/version-1-6-8-released/ Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-13samba: fix wrong shebang for python3Changqing Li
fix wrong shebang "#!/usr/bin/env python3/" Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-10blueman: disable appindicator supportKai Kang
libappindicator is a library to allow applications to export a menu into the Unity Menu bar. Unity is not supported in openembedded, so disable appindicator support for blueman. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-05netplan: add recipeJacopo Dall'Aglio
Canonical's Netplan is a network configuration abstraction renderer written in Python. It's compatible with NetworkManager and systemd-networkd. Signed-off-by: Jacopo Dall'Aglio <jacopo.dallaglio@kynetics.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-21recipes: rename distro_features_check to features_checkDenys Dmytriyenko
Avoid warning due to the class rename in OE-Core. Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-20networkmanager: do not deploy unnecessary udev rule fileStefan Agner
The 84-nm-drivers.rules is not required for systemd-udevd versions v210 and later. The file has been split into a separate file so distributions with a new enough systemd version can drop it. See also: https://github.com/NetworkManager/NetworkManager/commit/1e0375826252abf9aab2aef273a2a24cd08c9f42 I noticed this while investigating into a warning show during bootup: /usr/lib/udev/rules.d/84-nm-drivers.rules:10 Invalid value "/bin/sh -c 'ethtool -i $1 | sed -n s/^driver:\ //p' -- $env{INTERFACE}" for PROGRAM (char 24: invalid substitution type), ignoring, but please fix it. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-13mbedtls: upgrade 2.16.2 -> 2.16.3Denys Dmytriyenko
* Mbed TLS 2.16.3 is a maintenance release of the Mbed TLS 2.16 branch, and provides bug fixes and minor enhancements. https://github.com/ARMmbed/mbedtls/releases/tag/mbedtls-2.16.3 Most importantly, this fixes breakage on ARMv5TE platforms: * Fix the build on ARMv5TE in ARM mode to not use assembly instructions that are only available in Thumb mode. https://github.com/ARMmbed/mbedtls/pull/2169 Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-07samba: upgrade 4.10.8 -> 4.10.10Yi Zhao
Security fixes: CVE-2019-10218: Client code can return filenames containing path separators. CVE-2019-14833: Samba AD DC check password script does not receive the full password. CVE-2019-14847: User with "get changes" permission can crash AD DC LDAP server via dirsync. See: https://www.samba.org/samba/history/samba-4.10.10.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-07samba: fix installation for minimal buildAndreas Oberritter
| chmod: cannot access '.../image/etc/sudoers.d': No such file or directory | sed: can't read .../image/usr/bin/samba-tool: No such file or directory Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01miniupnpd: Build config.h before full buildKhem Raj
This fixes a race condition e.g. testminissdp.c:15:10: fatal error: config.h: No such file or directory 15 | #include "config.h" | ^~~~~~~~~~ compilation terminated. <builtin>: recipe for target 'testminissdp.o' failed Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01miniupnpd: Update to 2.1.20191006Khem Raj
Forward port the patches Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01freeradius: set CLEANBROKENYi Zhao
Fixed make clean error: NOTE: make clean Makefile:36: *** Missing 'Make.inc' Run './configure [options]' and retry. Stop. ERROR: oe_runmake failed Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01dhcpcd: upgrade 8.0.2 -> 8.1.1Zheng Ruoqin
1) Add 0001-dhcpcd-Fix-build-error-with-musl.patch to fix musl build error. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-25wolfssl: upgrade 4.1.0 -> 4.2.0Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-25snort: upgrade 2.9.14.1 -> 2.9.15Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-25blueman: fix fail to enable bluetooth issueKai Kang
When launch blueman-manager while bluetooth is disable, it may fails with error: Failed to enable bluetooth Because when get bluetooth status right after change its status, the status may not be updated that plugin applet/KillSwitch.py sets the bluetooth status via method of another dbus service which doesn't return immediately. Provides a new dbus method for PowerManager which checks whether dbus method SetBluetoothStatus() has finished. Then it makes sure to get right bluetooth status. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-24libnet: Clarify BSD license variantChristophe PRIOUZEAU
The License of libnet is BSD-3-Clause. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-21freeradius: fix PIDFile path in radiusd.service fileTrevor Gamblin
radiusd.service references a legacy path for its PIDFile, which results in a warning at boot: systemd[1]: /lib/systemd/system/radiusd.service:7: PIDFile= references a path below legacy directory /var/run/, updating /var/run/radiusd/radiusd.pid → /run/radiusd/radiusd.pid; please update the unit file accordingly. Modify the recipe's radiusd.service file to use the correct path. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-16freeradius: fix CVE-2019-10143Yi Zhao
Reference: https://nvd.nist.gov/vuln/detail/CVE-2019-10143 Patch from: https://github.com/FreeRADIUS/freeradius-server/commit/1f233773962bf1a9c2d228a180eacddb9db2d574 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-16kea: fix kea-dhcp4.service/kea-dhcp6.service start up failedChangqing Li
After upgrade to 1.7.0, path of database file changed from /var/kea to /var/lib/kea, correct the path to fix service start failed problem DHCP6_CONFIG_LOAD_FAIL configuration error using file: /etc/kea/kea-dhcp6.conf, reason: Unable to open database: unable to open '/var/lib/kea/kea-leases6.csv' Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-16networkmanager: Upgrade 1.18.2 -> 1.18.4Adrian Bunk
Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-09mosquitto: update to 1.6.7Paul Eggleton
Bugfix release. For details, see: https://mosquitto.org/blog/2019/09/version-1-6-7-released/ Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-08firewalld: upgrade 0.7.1 -> 0.7.2Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-08freeradius: add -latomic for armv5Trevor Gamblin
freeradius fails to build for armv5: | *** Warning: Linking the executable build/bin/local/radeapclient against the loadable module | *** libfreeradius-server.so is not portable! | | *** Warning: Linking the executable build/bin/local/radeapclient against the loadable module | *** libfreeradius-eap.so is not portable! path -Wl,/yow-lpggp31/tgamblin/freeradius.build/tmp-glibc/work/armv5e-oe-linux-gnueabi/freeradius/3.0.19-r0/git/build/lib/local//.libs /arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_compare_exchange_8' /arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_load_8' /arm-oe-linux-gnueabi/9.2.0/ld: build/lib/local/.libs/libfreeradius-radius.so: undefined reference to `__atomic_store_8' | collect2: error: ld returned 1 exit status | scripts/boiler.mk:630: recipe for target 'build/bin/local/radeapclient' failed Explicitly link libatomic to fix the issue. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-04kea: Disable parallel installOvidiu Panait
According to configure.ac, make install might fail when run with multiple jobs: $ tail -15 log.do_configure ... When running "make install" do not use any form of parallel or job server options (such as GNU make's -j option). Doing so may cause errors. ... Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-04firewalld: update to 0.7.1Callaghan, Dan
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30networkmanager: Correct the upstream version checkAdrian Bunk
Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30networkmanager: Add sysvinit supportOtavio Salvador
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30networkmanager: Add a `resolvconf` PACKAGECONFIGOtavio Salvador
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30networkmanager: Fix ADSL plugin packagingOtavio Salvador
Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-28kea: upgrade 1.5.0 -> 1.7.0Changqing Li
The license checksum change is due to the date being updated. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-25firewalld: add UPSTREAM_CHECK_URICallaghan, Dan
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-22mosquitto: update to 1.6.6Leon Anavi
Fix security vulnerabilities. For further details, see: https://mosquitto.org/blog/2019/09/version-1-6-6-released/ Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-17samba: upgrade 4.10.7 -> 4.10.8Yi Zhao
Security fixes: CVE-2019-10197: Combination of parameters and permissions can allow user to escape from the share path definition. See: https://www.samba.org/samba/history/samba-4.10.8.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-16mosquitto: update to 1.6.5Paul Eggleton
A lot of changes upstream since the last upgrade, the highlights: * MQTT v5 protocol support * Performance improvements * New mosquitto_rr (request/response) client * TLS enhancements: OCSP stapling, TLS Engine support, explicit TLS v1.3 support, removed TLS v1.0 support For further details, see https://mosquitto.org/blog/ Additionally, SUMMARY and DESCRIPTION were tidied up as needed. Based upon an earlier upgrade patch by Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-07samba: Fix configure tests to work with clangKhem Raj
Do not use nested functions ( main inside main ) Use global scope for __thread variables Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-02freeradius: upgrade 3.0.17 -> 3.0.19Changqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-29Replace EXCLUDE_FROM_WORLD_libc-musl = "1" with COMPATIBLE_HOST_libc-musl = ↵Adrian Bunk
'null' This gives users a proper error message when trying to build a known non-building package. netkit-rsh already had COMPATIBLE_HOST_libc-musl = 'null'. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-29samba: upgrade 4.10.6 -> 4.10.7Yi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-21networkmanager: Upgrade 1.18.0 -> 1.18.2Adrian Bunk
Remove a generated file with always changing hash from LIC_FILES_CHKSUM. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>