aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity
AgeCommit message (Collapse)Author
2020-08-23samba: upgrade 4.10.15 -> 4.10.17Yi Zhao
This is a security release in order to address the following defects: CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results. CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume excessive CPU CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with paged_results and VLV. CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd. Also backport 3 patches to fix build error with musl. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 1609df11530ebb73de863d0c705e16107015dbe3) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-30samba: Fix conflicts with nss.h from glibcKhem Raj
This is seen with glibc 2.32 where these names are also defined Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 5cf2665446f3fdc16b484c64afffaa0ac8373a35) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-29freeradius: fix the existed certificate errorMingli Yu
Fixes the occasional error: # cd /etc/raddb/certs # ./bootstrap [snip] openssl ca -batch -keyfile ca.key -cert ca.pem -in client.csr -key 'whatever' -out client.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf Using configuration from ./client.cnf Check that the request matches the signature Signature ok ERROR:There is already a certificate for /C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org The matching entry has the following details Type :Valid Expires on :200908024833Z Serial Number :02 File name :unknown Subject Name :/C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org make: *** [Makefile:128: client.crt] Error 1 Add the check to fix the above error and it does the same for server.crt. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 0d7522b7df80e45c379ad76addfddd51d0e56e9d) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12blueman: upgrade 2.1.1 -> 2.1.3Andreas Müller
2.1.3 Changes * Force cython to use python language version 3 Bugs fixed * Fix tooltip not updating when bluetooth is disabled * Fix dbus timeout in DhcClient * Call the right method when pulseaudio crashes * Handle os.remove failing 2.1.2 Bugs fixed * Signal bar updates with multiple adapters * Pairing with pincode Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit d05070c7d8d1f384914b1243298b4759fd9accae) [AK: Dunfell does not support py2 so upgrade seems resonable] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-12snort: upgrade 2.9.15 -> 2.9.16Zang Ruochen
-0001-chdeck-for-gettid-API-during-configure.patch Removed since this is included in 2.9.16 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit e44e7be3e9d140410d3c7d799a32cf867e494f9c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-12mosquitto: upgrade 1.6.9 -> 1.6.10Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit aa615a8e6093759fd580217be79dc037d9c0d79c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-28kea: upgrade 1.7.6 -> 1.7.7Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a5d7311490e12a296241bcd8adb0090c226842ec) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-28netplan: Depend on systemd if it is in distroKhem Raj
it needs to link with libsystemd when using systemd as init system Fixes Package libsystemd was not found in the pkg-config search path. Perhaps you should add the directory containing `libsystemd.pc' to the PKG_CONFIG_PATH environment variable Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 60e603f11ae1cca38553d18cf411f1a77207a97c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-20samba: upgrade 4.10.13 -> 4.10.15Yi Zhao
This is a security release in order to address the following defects: CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with ASQ CVE-2020-10704: LDAP Denial of Service (stack overflow) in Samba AD DC Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit a41c021cfb11418f1a32e49be0716b00b5234210) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-04-29samba: Remove the dependency on libbsdPeter Kjellerstedt
It is unnecessary, and libbsd uses the "BSD-4-Clause" license, which can be problematic. To make it deterministic, a patch is introduced to allow libbsd support to be disabled. It resembles similar patches in, e.g., libldb, libtalloc, libtdb and libtevent. Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-26wolfssl: upgrade 4.3.0 -> 4.4.0Pierre-Jean Texier
Release 4.4.0 of wolfSSL embedded TLS has bug fixes, new features and fixes for security vulnerabilities. See full changelog https://github.com/wolfSSL/wolfssl/releases/tag/v4.4.0-stablefixes Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-26kea: improve reproducibilityMingli Yu
There are some shell scripts such as kea-admin, upgrade_4.0_to_5.0.sh, wipe_data.sh and etc contain build path. Actually the build path is meanlingless on the target, so replace abs_top_builddir to abs_top_builddir_placeholder to avoid expanding abs_top_builddir which introduces build path. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-15mbedtls: upgrade 2.16.5 -> 2.16.6Pierre-Jean Texier
Mbed TLS 2.16.6 is a maintenance release of the Mbed TLS 2.16 branch, and provides security fixes and bug fixes, see: - https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.6-and-2.7.15-released Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-04relayd: use UPSTREAM_CHECK_COMMITSPierre-Jean Texier
Fixes: $: devtool check-upgrade-status relayd <...> INFO: relayd 0.0.1 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-02miniupnpd: Package miniupnpd_functions.shVinothkumar
Currently miniupnpd.service fails to start without miniupnpd_functions.sh in rootfs Signed-off-by: Vinothkumar <vinothkumar_baskaran@comcast.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-31kea: upgrade 1.7.5 -> 1.7.6Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-26freeradius: don't download LFS content by defaultChangqing Li
fix error: Fetcher failure: Repository git://github.com/FreeRADIUS/freeradius-server.git has LFS content, install git-lfs on host to download (or set lfs=0 to ignore it) upstream has file .lfsconfig to make it not download lfs files by default, so we also don't download it by default Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-23ufw: fix upstream check URLPierre-Jean Texier
Fixes: $: devtool check-upgrade-status ufw <...> INFO: ufw 0.33 UNKNOWN_BROKEN None Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-20civetweb: upgrade 1.11 -> 1.12Wang Mingyu
-License-Update: Copyright year updated to 2020. Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-18networkmanager-openvpn: Make PACKAGECONFIG gnome workAndreas Müller
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-18networkmanager-openvpn: upgrade 1.8.10 -> 1.8.12Andreas Müller
>From [1]: ======================================================= NetworkManager-openvpn-1.8.12 Overview of changes since NetworkManager-openvpn-1.8.10 ======================================================= * The auth helper in external UI mode can now be run without a display server. Future nmcli version will utilize this for handling the secrets without a graphical desktop. * libnm-glib compatibility (NetworkManager < 1.0) is disabled by default. It can be enabled by passing --with-libnm-glib to configure script. Nobody should need it by now. Users that still use this are encouraged to let us know before the libnm-glib support is removed for good. * Add support for the following OpenVPN options: tls-version-min, tls-version-max, compress. * Support inline CRL blobs during import. * Allow option mssfix to be set to zero. * Update Catalan, Czech, Danish, Dutch, Friulian, Hungarian, Indonesian, Italian, Polish, Serbian, Spanish, Swedish and Ukrainian translations. [1] http://ftp.gnome.org/pub/gnome/sources/NetworkManager-openvpn/1.8/NetworkManager-openvpn-1.8.12.news Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-18networkmanager: Upgrade 1.22.8 -> 1.22.10Adrian Bunk
Upgrade on the 1.22 stable branch. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-10kea: upgrade 1.7.4 -> 1.7.5Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-08mosquitto: do not enable srv by defaultGianfranco Costamagna
Rationale can be found in the Debian packaging (debian/changelog): Revert change enabling SRV functionality, it is disabled by default upstream and of little benefit to any end user, but adds reasonable complexity to the code. Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-08mosquitto: refresh patches and sync with Debian packagingGianfranco Costamagna
Also add patch from debian to mqtt_protocol.h header file Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-08networkmanager: Upgrade 1.18.4 -> 1.22.8Adrian
- rebased patches - added two more small patches - Option --enable-polkit-agent is not available with current NM, removed - Option --with-libnm-glib is not available with current NM, removed - New package NM-cloud-setup for new experimental cloud setup feature - NM tries to re-license from GPL to LGPL, added LGPL to LICENSES - Removed empty packages libnmutil libnmglib libnmglib-vpn Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06libdnet: make dnet-config a multilib_scriptJeremy Puhlman
Script encodes library paths. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-02mosquitto: upgrade 1.6.8 -> 1.6.9Pierre-Jean Texier
Bugfix release. For details, see: https://mosquitto.org/blog/2020/02/version-1-6-9-released/ Also remove patches applied upstream. Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
2020-02-24kea: upgrade 1.7.3 -> 1.7.4Zheng Ruoqin
-License-Update: Copyright year updated to 2020. Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-24dhcpcd: upgrade 8.1.5 -> 8.1.6Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-21mbedtls: upgrade 2.16.3 -> 2.16.5Pierre-Jean Texier
Mbed TLS 2.16.5 is a maintenance release of the Mbed TLS 2.16 branch, and provides security fixes and bug fixes, see: https://tls.mbed.org/tech-updates/releases/mbedtls-2.16.5-and-2.7.14-released Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-20mbedtls: add native and nativesdk to BBCLASSEXTENDPierre-Jean Texier
Fixes: ERROR: Nothing PROVIDES 'mbedtls-native' Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-17netplan: rdep on python3 version of pyflakesKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-16openconnect: use target path to scriptMax Krummenacher
openconnect puts the default absolute path to the vpnc-script into its binary from the --with-vpnc-script configure options. So do not prepend the value with the path to the OE sysroot. RDEPEND on vpnc-script to have the script from vpnc installed on target. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-16openconnect: build with python3Max Krummenacher
Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-16vpnc: splitout the vpnc-script into its own packageMax Krummenacher
The vpnc-script can be used unchanged with the openconnect package. Provide it in its own package and make vpnc RDEPEND on it. Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-13samba: upgrade 4.10.11 -> 4.10.13Yi Zhao
Changelog: https://www.samba.org/samba/history/samba-4.10.13.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-11mosquitto: Use mosquitto.init for daemon initMike Krupicka
Config file specification is missing in start) case. It is present already in restart) case. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-06freeradius: upgrade 3.0.19 -> 3.0.20Yi Zhao
* Drop backported patch: 0001-su-to-radiusd-user-group-when-rotating-logs.patch * Disable python2 module build and add PACKAGECONFIG for python3 module build Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-04lftp: upgrade 4.9.0 -> 4.9.1Trevor Gamblin
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-03nng: Add recipeTom Rini
nng is the nanomsg project's rewrite of their libnanomsg library. Just like nanomsg it is a socket library that provides several common communication patterns. Unlike nanomsg it does not normally provide a number of tools and we do not attempt to add them here. We allow for optional mbedtls support. Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-25mosquitto: apply upstream proposed patches to use cmake build system,Gianfranco Costamagna
simplifying a lot the build and install process. Signed-off-by: Gianfranco Costamagna <costamagnagianfranco@yahoo.it> Signed-off-by: Gianfranco Costamagna <gianfranco.costamagna@abinsula.com> Signed-off-by: Gianfranco Costamagna <locutusofborg@debian.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-24firewalld: upgrade 0.7.2 -> 0.7.3Pierre-Jean Texier
See full changelog https://github.com/firewalld/firewalld/releases/tag/v0.7.3 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-22crda: Fix build with python3Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-22meta-networking: Remove using python2Khem Raj
This change makes the parsing go though, we still might have build issues, which will be reported in world builds seprately Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-15dhcpcd: upgrade 8.1.1 -> 8.1.5Zang Ruochen
-files/0001-dhcpcd-Fix-build-error-with-musl.patch Removed since this is included in 8.1.5. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-14crda: fix UDEV_RULE_DIRYi Zhao
The default UDEV_RULE_DIR is ${nonarch_base_libdir}. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06kea: upgrade 1.7.2 -> 1.7.3Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06wolfssl: upgrade 4.2.0 -> 4.3.0Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06lftp: upgrade 4.8.4 -> 4.9.0Wang Mingyu
fix-gcc-6-conflicts-signbit.patch Removed since they are included in 4.9.0 Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>