aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-protocols
AgeCommit message (Collapse)Author
2020-07-12net-snmp: Security fix CVE-2019-20892Armin Kuster
Source: net-snmp.org MR: 104509 Type: Security Fix Disposition: Backport from https://github.com/net-snmp/net-snmp/commit/5f881d3bf24599b90d67a45cae7a3eb099cd71c9 ChangeID: 206d822029d48d904864f23fd1b1af69dffc26c8 Description: Fixes CVE-2019-20892 which affect net-snmp <= 5.8pre1 Had to fix up some file do to later code restructioning. "int refcnt;" addition was done in include/net-snmp/library/snmpusm.h Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 96a63b1ecf321c9a63880a963ed257086998133b) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12freediameter: Fix testcnx ptest failureOvidiu Panait
Currently, testcnx ptest fails due to expired CA certificates: Test project /usr/lib64/freeDiameter/ptest ... Start 10: testcnx 10/11 Test #10: testcnx ..........................***Failed 0.12 sec ... <snip> Command: "/usr/lib64/freeDiameter/ptest/testcnx" Directory: /usr/lib64/freeDiameter/ptest "testcnx" start time: Jun 17 10:52 UTC Output: ---------------------------------------------------------- 10:52:43 ERROR ERROR: Invalid parameter '(conn->cc_rcvthr != (pthread_t)((voidd *)0))', 22 10:52:43 ERROR TLS: Remote certificate invalid on socket 6 (Remote: 'localhostt .localdomain')(Connection: '{---T} TCP from [127.0.0.1]:57898 (4<-6)') : 10:52:43 ERROR - The certificate has expired. 10:52:43 ERROR TLS ERROR: in 'ret = gnutls_handshake(conn->cc_tls_para.sessionn )' : Error in the certificate. 10:52:43 FATAL! testcnx.c:867: CHECK FAILED : fd_cnx_handshake(server_side, GNUU TLS_SERVER, ALGO_HANDSHAKE_DEFAULT , NULL, NULL) == 16 != 0 10:52:43 FATAL! FAILED: testcnx.c <end of output> Test time = 0.02 sec <snip> Backport upstream patch [1] to fix this issue. [1] http://www.freediameter.net/hg/freeDiameter/rev/eff5bb332b5a This patch is present in version 1.4.0, so master is not affected. Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-12net-snmp: refresh patchesPatrick Williams
Refreshed patches for 5.8 due to the following: ERROR: net-snmp-5.8-r0 do_patch: Command Error: 'quilt --quiltrc .../net-snmp/5.8-r0/recipe-sysroot-native/etc/quiltrc push' exited with 0 Output: Applying patch 0001-Add-pkg-config-support-for-building-applications-and.patch patching file configure ... Hunk #1 succeeded at 32248 with fuzz 2 (offset 1826 lines). Hunk #2 FAILED at 31447. 1 out of 2 hunks FAILED -- rejects in file configure ... Patch 0001-Add-pkg-config-support-for-building-applications-and.patch does not apply (enforce with -f) Signed-off-by: Patrick Williams <patrick@stwcx.xyz> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9c3b872f846e0a2491fe8bf16ae38db82609938c) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-04-08mdns: upgrade 878.260.1 -> 878.270.2Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-04usrsctp: use UPSTREAM_CHECK_COMMITSPierre-Jean Texier
Fixes: $: devtool check-upgrade-status usrsctp <...> INFO: usrsctp git UNKNOWN_BROKEN None f4e14ab5e12187cb2cf1ddbdc0ee5555aead3f72 Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06net-snmp: fix reproducibilty issues in net-snmp-configJeremy Puhlman
Both STAGING_HOST_DIR and -fmacro-prefix-map path to WORKDIR were encoded in the config. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06net-snmp: multilib fixesJeremy Puhlman
net-snmp/net-snmp-config.h: - encodes type sizes - encodes pathing into the libdir net-snmp-config: - encodes build configuration data and lib pathing. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06babeld: add UPSTREAM_CHECK_GITTAGREGEXPierre-Jean Texier
Fixes: INFO: babeld, 1.9.1, 20110804, None, 794863e90f81ee38b9dddd72dfabcba634b2fc07 After this commit: INFO: Skip package babeld (status = MATCH, current version = 1.9.1, next version = 1.9.1) Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06quagga: make version.h a multilib headerJeremy Puhlman
version.h contains the configure options passed during the build which differs between multilibs Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-06quagga: fix reproducibily issue.Jeremy Puhlman
version.h contains the options passed to configure, which includes the path to the recipe-sysroot on the build host. Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-27open-lldp: Add initial version 1.0.1Jonathan Richardson
Open-LLDP provides a Link Layer Discovery Protocol agent that supports DCB (Data Center Bridging). The tc utility from iproute is needed to manipulate traffic control settings in the kernel. Signed-off-by: Jonathan Richardson <jonathan.richardson@broadcom.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-20net-snmp: Add pkgconfig file supportJeremy Puhlman
Signed-off-by: Jeremy A. Puhlman <jpuhlman@mvista.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-19quagga: install tmpfiles snippet to /usr/lib/tmpfiles.dCallaghan, Dan
Package-owned tmpfiles snippets belong in /usr/lib/tmpfiles.d, /etc/tmpfiles.d is for administrator customisations. Signed-off-by: Dan Callaghan <dan.callaghan@opengear.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-19quagga: fix tmpfiles snippet to refer to /run instead of /var/runCallaghan, Dan
This fixes a complaint from systemd on boot: systemd-tmpfiles[393]: [/etc/tmpfiles.d/quagga.conf:1] Line references path below legacy directory /var/run/, updating /var/run/quagga → /run/quagga; please update the tmpfiles.d/ drop-in file accordingly. Signed-off-by: Dan Callaghan <dan.callaghan@opengear.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-06mdns: improve numerous aspects of Posix backendMatt Hoosier
Apple's default implementation of the Posix backend for mDNSResponder has a number of weaknesses. Address several of them, most notably: * Improve interface tracking, preventing confusion to mdns's state machine. Prevents spurious removal/republication cycles whenever network interfaces are added or removed. * Support network interfaces whose indeces are great than 31. Indices grow past that range surprisingly quickly, especially with multi- homed, mobile, wifi, Bluetooth, VPN, VLANs, or other interfaces present. * Correctly handle edge cases during removal of a network interface. The fixes are kept as a patch series for clarity. Signed-off-by: Matt Hoosier <matt.hoosier@garmin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-02recipes: Inherit perlnative for pod2manKhem Raj
replace host version of pod2man perl-native provides, helps in improving reproducability Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-19openl2tp: update systemd service fileKai Kang
It shows an warning of openl2tp in systemd log: | /lib/systemd/system/openl2tpd.service:8: PIDFile= references a path | below legacy directory /var/run/, updating /var/run/openl2tpd.pid → | /run/openl2tpd.pid; please update the unit file accordingly. Update the systemd service file to fix the warning. Update SRC_URI as well that the homepage openl2tp.org has been closed. Use archived file on sourceforge instead. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-21recipes: rename distro_features_check to features_checkDenys Dmytriyenko
Avoid warning due to the class rename in OE-Core. Signed-off-by: Denys Dmytriyenko <denys@ti.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-04mdns: upgrade 878.200.35 -> 878.260.1Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01mdns: Mark as incompatible with muslAdrian Bunk
musl does not support mDNS or NSS plugins. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01babeld: upgrade 1.8.4 -> 1.9.1Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-11-01usrsctp: Upgrade to a more recent git snapshotAdrian Bunk
Patch applied upstream removed. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-24radiusclient: Clarify BSD license variantChristophe PRIOUZEAU
The License of radiusclient is BSD-3-Clause and BSD-2-Clause and HPND. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-24freediameter: Clarify BSD license variantChristophe PRIOUZEAU
The License of freediameter is BSD-3-Clause. Signed-off-by: Christophe Priouzeau <christophe.priouzeau@st.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-10-17quagga: fix PIDFile path for service filesTrevor Gamblin
Multiple quagga service files are causing the following type of message to appear during boot: /lib/systemd/system/zebra.service:10: PIDFile= references a path below legacy directory /var/run/, updating /var/run/quagga/zebra.pid → /run/quagga/zebra.pid; please update the unit file accordingly. Update the service files included as part of the recipe to use /run instead of /var/run as the PIDFile path. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-30net-snmp: Fix PACKAGECONFIG for perlRobert Yang
* Remove perl-lib since it had been removed by oe-core: commit 68552c353255188de3d5b42135360a30e7eac535 Author: Alexander Kanavin <alex.kanavin@gmail.com> Date: Sun Dec 2 12:46:37 2018 +0100 perl: remove the previous version of the recipe Now the files are in perl pacakge. * Fix perl paths when perl is enabled. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-26net-snmp: update SRC_URIKai Kang
Replace source zip ball with tarball for net-snmp to avoid zip bomb issue. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-10freediameter: update to 1.2.1Oleksandr Kravchuk
License checksum changed due to modified copyright years. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-18xl2tpd: Remove the old 1.3.6 versionAdrian Bunk
It started as one recipe for the latest stable release and one for the latest git, but after these became ancient release and latest release it no longer made sense to have two recipees. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-06-15net-snmp: split net-snmp-config to package net-snmp-devHongxu Jia
Move net-snmp-config in which contains build path from package net-snmp to net-snmp-dev. It refers ubuntu, here are we got from Ubuntu 18.04 $ dpkg -c /var/cache/apt/archives/libsnmp-dev_5.7.3+dfsg-1.8ubuntu3.1_amd64.deb drwxr-xr-x root/root 0 2018-10-15 22:16 ./usr/bin/ -rwxr-xr-x root/root 43797 2018-10-15 22:16 ./usr/bin/mib2c -rwxr-xr-x root/root 8780 2018-10-15 22:16 ./usr/bin/mib2c-update -rwxr-xr-x root/root 29427 2018-10-15 22:16 ./usr/bin/net-snmp-config -rwxr-xr-x root/root 3688 2018-10-15 22:16 ./usr/bin/net-snmp-create-v3-user Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-23mdns: update to 878.200.35Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-21rp-pppoe: update to 3.13Oleksandr Kravchuk
Removed patch was upstreamed. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-18xl2tpd: update to 1.3.14Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-09pptp-linux: Upgrade 1.9.0 -> 1.10.0Adrian Bunk
Remove patch for issue fixed upstream. Signed-off-by: Adrian Bunk <bunk@stusta.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-09babeld: update to 1.8.4Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-07net-snmp: Licenses are in the COPYING filedouglas.royds
A bit of an unholy mixture of MIT, BSD 3-clause, and too old to really know BSD-style, with a wide variety of copyright holders. I'm open to better suggestions on how to handle this. Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-03-01net-snmp: Add PACKAGECONFIG desChangqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-02-26net-snmp: fix compile error with --disable-desChangqing Li
| scapi.c: In function 'sc_encrypt': | scapi.c:1256:5: error: 'pad_size' undeclared (first use in this function); did you mean 'dysize'? | pad_size = pai->pad_size; | ^~~~~~~~ | dysize pad_size is defined only without --disable-des [snip] int pad, plast, pad_size = 0; but used when disable-des [snip] QUITFUN(SNMPERR_GENERR, sc_encrypt_quit); } pad_size = pai->pad_size; memset(my_iv, 0, sizeof(my_iv)); if (USM_CREATE_USER_PRIV_DES == (pai->type & USM_PRIV_MASK_ALG)) { /* fix by move it into #ifndef NETSNMP_DISABLE_DES Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-13net-snmp: reproducibility: Strip host paths from ptest filesdouglas.royds
net-snmp also installs net-snmp-config and gen-variables files that need to have host paths stripped. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-27net-snmp: inherit ptestKai Kang
Inherit ptest for net-snmp to create ${PN}-ptest. Update run-ptest as well to avoid only could be run in the same directory. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26net-snmp: Simplify sed expressionsdouglas.royds
Readability. The existing patterns allowed each pattern to be matched multiple times (with no intevening spaces), but the "g" modifier achieves this anyway. Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26net-snmp: Reproducibility: Set NETSNMP_CONFIGURE_OPTIONS nulldouglas.royds
To avoid build host paths being written into binaries, accept a null NETSNMP_CONFIGURE_OPTIONS from the environment. Upstream-Status: Submitted https://sourceforge.net/p/net-snmp/patches/1384/ Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26net-snmp: Reproducibility: Don't check build host for /etc/printcapdouglas.royds
Don't check for /etc/printcap on the build machine when cross-compiling. Use AC_CHECK_FILE to set the cached variable ac_cv_file__etc_printcap instead. When cross-compiling, this variable should be set in the environment to "yes" or "no" as appropriate for the target platform. I have taken the simple expedient of setting ac_cv_file__etc_printcap=no. If this proves to be a problem, we can easily add a new variable, HAS_PRINTCAP. Upstream-Status: Submitted https://sourceforge.net/p/net-snmp/patches/1385/ Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26net-snmp: Reproducibility: Remove PKG_CONFIG paths from net-snmp-configdouglas.royds
PKG_CONFIG_PATH and PKG_CONFIG_LIBDIR point into the net-snmp recipe-sysroot. Careful not to trim trailing quotes from the CFLAGS Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26net-snmp: Reproducibility: Fixed path to /bin/unamedouglas.royds
Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26Revert "net-snmp: improve reproducibility"douglas.royds
This reverts commit 57d8e2c673d5f5686bbf411333f1d39c3e29690e. Signed-off-by: Douglas Royds <douglas.royds@taitradio.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-09babeld: Add Babel routing protocol recipeYi-Soo An
Babel is a loop-avoiding distance-vector routing protocol for IPv6 and IPv4 with fast convergence properties. Signed-off-by: Yi-Soo An <yisooan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-02tsocks: Link with libc_nonshared.aKhem Raj
Link step uses -nostdlib which means all defaults from gcc spec file are not used and it results in errors when using stack protector options e.g. in function `send_socksv5_connect': | /usr/src/debug/tsocks/1.8beta5-r0/tsocks-1.8/tsocks.c:954: undefined reference to `__stack_chk_fail_local' Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-29net-snmp: improve reproducibilityHongxu Jia
- Remoe prefix ${RECIPE_SYSROOT} from net-snmp-config - Remove configure options from versioninfo Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-24tsocks: Add -lssp_nonshared to LIBS explicitly on muslKhem Raj
tsocks uses -nostdlib while linking shared library, which is not ideal but instead of chasing that and assuming there is a reason for that, we add -lssp_noshared to linker command at the end so it can build when security flags are enabled Fixes tsocks.c:954: undefined reference to `__stack_chk_fail_local' Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit 1.2.3-korg (git 2.39.0) at 2024-05-05 10:47:22 +0000