Commit Graph

3076 Commits

Author SHA1 Message Date
Khem Raj
4635b1c427 opensaf: Check for _FILE_OFFSET_BITS instead of __TIMESIZE
This is fixing both LFS as well as 64bit time_t issue in one go

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-30 09:46:47 -08:00
Peter Kjellerstedt
9cbd247b42 lldpd: Correct the checksum for the tar ball to match 1.0.16
The checksum was not updated when the recipe version was stepped.

Also simplify the SRC_URI by replacing "${BPN}-${PV}" with "${BP}".

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-29 14:07:52 -08:00
Peter Kjellerstedt
040b55ce99 Revert "lldpd: Use github release assets for SRC_URI"
This reverts commit e154914718.

The change of SRC_URI was probably triggered by the checksum for the
tarball not having been updated when the recipe version was stepped.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-29 14:07:52 -08:00
Wang Mingyu
bd0b63e186 nbdkit: upgrade 1.33.2 -> 1.33.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-28 11:32:26 -08:00
Markus Volk
ea94889e88 blueman: upgrade 2.34 -> 2.35
This fixes a nasty bug where the shown device list doesnt match the underlying
MAC list, resulting in connecting to a different device than selected.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-25 18:11:10 -08:00
Khem Raj
e154914718 lldpd: Use github release assets for SRC_URI
media.luffy.cx seems unreliable as AB is not able to fetch it

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-23 08:25:30 -08:00
Wang Mingyu
a56dcf44c7 lldpd: upgrade 1.0.15 -> 1.0.16
Fix:
--------
    Do not use 00:00:00:00:00:00 as chassis ID.
    Do not busy loop when an interface with a neighbor disappears.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-19 08:11:45 -08:00
Wang Mingyu
0be5319a5e networkmanager-openvpn: upgrade 1.10.0 -> 1.10.2
Changelog:
=========
* IP condfiguration is no longer required in TAP mode.
* Fix initialization of secret flags.
* Add support for DOMAIN-SEARCH option.
* Set data-ciphers option with chosen cipher.
* Update Brazilian Portuguese, Croatian, Danish, Georgian, Polish, Serbian,
  Slovenian, Swedish, Turkish and Ukrainian translations.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-19 08:11:45 -08:00
Kai Kang
172c707251 freeradius: fix multilib systemd service start failure
It fails to start radiusd.service from lib32-freeradius that the
configure directory is /etc/lib32-raddb rather than /etc/raddb. So add
an environment file to export a variable MLPREFIX for the service file
to make it start successfully.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-18 11:10:25 -08:00
Khem Raj
d8bc689ee7 ettercap: Add missing dependency on libpcre
It depends on it, but it was being pulled in via glib-2.0
which now uses libpcre2

Fixes
TOPDIR/build/tmp/work/cortexa15t2hf-neon-yoe-linux-gnueabi/ettercap/0.8.3.1-r0/recipe-sysroot-native/usr/lib/libpcre.so: file not recognized: file format not recognized

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-16 16:51:41 -08:00
Wang Mingyu
9afefefac5 libnftnl: upgrade 1.2.3 -> 1.2.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-14 11:55:59 -08:00
Peter Kjellerstedt
fac629b4f1 chrony: Remove the libcap and nss PACKAGECONFIGs
There is no need for these configs on their own and they would only mess
up the sechash and privdrop configs. To actually enable sechash one also
had to enable nss, and to enable privdrop one also had to enable libcap.

This also avoids passing --with-libcap if privdrop is enabled since the
option does not exist.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-12 16:52:33 -08:00
Peter Kjellerstedt
1ff3ca8540 chrony: Make it possible to enable editline support again
Support for readline was dropped in Chrony 4.2. However, the
--disable-readline option still remains (it is used to completely ignore
all forms of command line editing, even though the only remaining
variant is editline). So keeping the readline PACKAGECONFIG and making
it pass --disable-readline when it is not enabled disabled support for
editline, and if it was enabled it instead passed --without-editline,
which also disabled support for editline. Thus there was no way to
enable editline support.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-12 16:52:33 -08:00
Markus Volk
25c3860701 blueman: add RDEPEND on python3-fcntl
After updating current poky master python3-fcntl is not installed
into my image anymore. Blueman-applet fails to run with
Error: No module named 'fcntl''Module fcntl not found'

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-11 11:45:18 -08:00
Xiangyu Chen
7fe87bea09 lldpd: add ptest for lldpd package
Signed-off-by: Xiangyu Chen <xiangyu.chen@eng.windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-11 11:45:17 -08:00
Alexander Kanavin
4035dfc557 frr: add a patch to correctly check presence of python from pkg-config
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-10 10:41:35 -08:00
Wang Mingyu
58793ca934 wolfssl: upgrade 5.5.2 -> 5.5.3
Fixes
---------
 Fix for possible buffer zeroization overrun introduced at the end of
 v5.5.2 release cycle in GitHub pull request 5743 (#5743) and fixed in
 pull request 5757 (#5757). In the case where a specific memory allocation
 failed or a hardware fault happened there was the potential for an overrun
 of 0's when masking the buffer used for (D)TLS 1.2 and lower operations.
 (D)TLS 1.3 only and crypto only users are not affected by the issue.
 This is not related in any way to recent issues reported in OpenSSL.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-09 10:17:15 -08:00
Wang Mingyu
0c91d984c3 stunnel: upgrade 5.66 -> 5.67
Changelog:
==========
Security bugfixes
-----------------
OpenSSL DLLs updated to version 3.0.7.

New features
------------
Provided a logging callback to custom engines.

Bugfixes
---------
OpenSSL DLLs updated to version 3.0.6.
Fixed "make cert" with OpenSSL older than 3.0.
Fixed the code and the documentation to use concious language for SNI servers (thx to Clemens Lang).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-09 10:17:15 -08:00
Wang Mingyu
cc976ef344 openvpn: upgrade 2.5.7 -> 2.5.8
Changelog:
==========
  tls-crypt-v2: bail out if the client key is too small
  Remove useless empty line from CR_RESPONSE message
  Allow running a default configuration with TLS libraries without BF-CBC
  Change command help to match man page and implementation
  Fix OpenVPN querying user/password if auth-token with user expires
  t_client: Allow to force FAIL on prerequisite fails
  t_client.sh: do not require fping6
  Preparing release 2.5.8
  msvc: add branch name and commit hash to version output
  Update the replay-window backtrack log message
  Do not skip ERROR:/SUCCESS: response from management interface
  Fix auth-token usage with management-def-auth
  Allow a few levels of recursion in virtual_output_callback()
  Ensure --auth-nocache is handled during renegotiation
  Purge auth-token as well while purging passwords
  Do not copy auth_token username to itself

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-09 10:17:15 -08:00
Wang Mingyu
ca25528ad3 ulogd2: upgrade 2.0.7 -> 2.0.8
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-07 08:40:48 -08:00
Randy MacLeod
66585ce7ca nftables: use automake ptest output format
Make run-ptest use the correct libdir for multilib builds.

Log the ptest output to a date stamped file and append a test summary
to the end of the log.

Munge the log as it is produced to:
 - insert the expected automake keywords: PASS and FAIL.
 - remove escape sequences used for ANSI colours as well as movement commands

Add additional discrete tool dependencies to the nftables-ptest list since
the test suite does not work with the busybox versions.

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-07 08:39:05 -08:00
Wang Mingyu
9497ca2325 fetchmail: Fix buildpaths warning.
WARNING: fetchmail-6.4.23-r0 do_package_qa: QA Issue: File /usr/bin/fetchmailconf in package fetchmail contains reference to TMPDIR [buildpaths]

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-07 08:39:05 -08:00
leimaohui
be6245aefc samba: Fix install conflict with multilib enabled.
Signed-off-by: Lei Maohui <leimaohui@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-07 08:39:05 -08:00
Markus Volk
00895a31a8 spice-gtk: add recipe
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-11-01 10:13:47 -07:00
Wang Mingyu
a9334a5cba wolfssl: upgrade 5.5.1 -> 5.5.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-31 08:27:33 -07:00
zhengruoqin
8e64d8f7af tcpslice: upgrade 1.5 -> 1.6
Changelog:
=========
- Call pcap_dump_close() on the output file.
- Implement new flags in ./configure: --enable-instrument-functions,
  --without-libnids, --without-libosipparser2 and --without-libooh323c.
- autoconf: Add the option to print functions and files names
- Update config.{guess,sub}, timestamps 2022-01-09,2022-01-03
- configure: use pcap-config --static-pcap-only if available
- Remove awk code from mkdep.
- Refine the man page.
- Refine the documentation files.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-24 09:56:33 -07:00
Alex Kiernan
c782674d3f lldpd: Upgrade 1.0.14 -> 1.0.15
Add github-releases to make new releases discoverable.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-22 16:01:22 -07:00
Khem Raj
dd5226bed9 postfix: Upgrade to 3.7.3
Fix build on systems with linux 6.x

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-19 10:33:43 -07:00
zhengrq.fnst
aca28022cc unbound: upgrade 1.16.3 -> 1.17.0
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-18 08:23:44 -07:00
Wang Mingyu
e5ecbd204b blueman: upgrade 2.3.2 -> 2.3.4
Bugs fixed
==========
    Errors when connected to a device with the DisconnectItems plugin enabled

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-18 08:23:44 -07:00
Wang Mingyu
c6fddf41de nbdkit: upgrade 1.33.1 -> 1.33.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-18 08:23:44 -07:00
Alex Kiernan
4a0e41431e conntrack-tools: Use canonical shell spacing
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-16 18:30:32 -07:00
Alex Kiernan
4d8d56d0e7 conntrack-tools: Add PACKAGECONFIGs for build options
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-16 18:30:32 -07:00
Alex Kiernan
80b68df709 conntrack-tools: Upgrade 1.4.6 -> 1.4.7
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-16 18:30:32 -07:00
Markus Volk
3b32cfc181 blueman: upgrade 2.2.4 -> 2.3.2
Switch from using tarball to git because the 2.3.2 tarball lacks the
meson_options.txt file.

Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-13 10:16:58 -07:00
Yi Zhao
9628ca83c2 frr: Security fix CVE-2022-37032
CVE-2022-37032:
An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may
lead to a segmentation fault and denial of service. This occurs in
bgp_capability_msg_parse in bgpd/bgp_packet.c.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2022-37032

Patch from:
066770ac1c

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-12 19:19:27 -07:00
Hao Jiang
6e2cfa4113 mctp: install the .target files
Need the targets file to enable the mctpd.service on systemd.

Signed-off-by: Hao Jiang <jianghao@google.com>
Change-Id: I8d48d3767760dc1f34ae7e1266600d350ac93281
2022-10-12 19:19:27 -07:00
Yi Zhao
354608cb88 dhcp-relay: upgrade 4.4.3 -> 4.4.3-P1
Changes since 4.4.3 (Bug Fixes)

Corrected a reference count leak that occurs when the server builds
responses to leasequery packets. Thanks to VictorV of Cyber Kunlun
Lab for reporting the issue.
[Gitlab #253]
CVE: CVE-2022-2928

Corrected a memory leak that occurs when unpacking a packet that has an
FQDN option (81) that contains a label with length greater than 63
bytes.
Thanks to VictorV of Cyber Kunlun Lab for reporting the issue.
[Gitlab #254]
CVE: CVE-2022-2929

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-11 08:21:44 -07:00
Fabio Estevam
022e65ccd4 spice: Include aarch64 to COMPATIBLE_HOST
Allow spice to be built on ARM64 as well, so add aarch64
entry to COMPATIBLE_HOST.

Signed-off-by: Fabio Estevam <festevam@denx.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-10 13:53:51 -07:00
Yi Zhao
7cd9307271 open-vm-tools: upgrade 11.3.5 -> 12.1.0
* Drop 0001-Make-HgfsConvertFromNtTimeNsec-aware-of-64-bit-time_.patch
  and 0013-misc-Do-not-print-NULL-string-into-logs.patch which have been
  merged upstream.
* Refresh patches.
* Do not build containerinfo plugin as it requries containerd.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-10 10:19:33 -07:00
zhengrq.fnst
6829378d00 wolfssl: upgrade 5.5.0 -> 5.5.1
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-10 10:19:33 -07:00
zhengrq.fnst
4ea9e26918 stunnel: upgrade 5.65 -> 5.66
Changelog:
===========
  New features
      OpenSSL 3.0 FIPS Provider support for Windows.
  Bugfixes
      Fixed building on machines without pkg-config.
      Added the missing "environ" declaration for BSD-based operating systems.
      Fixed the passphrase dialog with OpenSSL 3.0.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-10 10:19:33 -07:00
Yi Zhao
b6be90d70b strongswan: upgrade 5.9.7 -> 5.9.8
ChangeLog:
https://github.com/strongswan/strongswan/releases/tag/5.9.8

* Drop PACKAGECONFIG[scep] as scepclient has been removed.
* Add plugin-gcm to RDEPENDS as gcm plugin has been added to the default
  plugins.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-08 11:36:57 -07:00
Federico Pellegrin
aa20821f17 chrony: correct parameter to configure to disable readline usage
The correct parameter to disable readline usage is --disable-readline
and not --without-readline.

See also chrony source at:
https://github.com/mlichvar/chrony/blob/master/configure#L110

Signed-off-by: Federico Pellegrin <fede@evolware.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-06 07:20:50 -07:00
Federico Pellegrin
22682fdfb7 chrony: add pkgconfig class as pkg-config is explicitly searched for
The configure script present in chrony will explicitly look for
pkg-config and without the pkgconfig class it will fail:

Checking for pkg-config : No

This then affects the possibility (via image features or bbappend)
to use features based on nettle/gnutls/nss which strictly require
pkgconfig to be present and working.

Signed-off-by: Federico Pellegrin <fede@evolware.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-06 07:20:50 -07:00
Mathieu Dubois-Briand
e2188ac73b mbedtls: Whitelist CVE-2021-43666, CVE-2021-45451
Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-04 09:29:47 -07:00
Mathieu Dubois-Briand
e726f388b2 mbedtls: Update to 2.28.1 version
Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-04 09:29:47 -07:00
Mathieu Dubois-Briand
0f6a6a3cc9 mbedtls: Fix CVE product name
Signed-off-by: Mathieu Dubois-Briand <mbriand@witekio.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-04 09:29:47 -07:00
Khem Raj
111e73d712 open62541: Disable lto on riscv/clang
clang errors out linking lto objects
riscv64-yoe-linux-musl-ld: /tmp/lto-llvm-d497c5.o: can't link soft-float modules with double-float modules

This is something needs to be addressed in clang for riscv
as of now disable lto for rv32/rv64 when using clang

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-04 09:29:47 -07:00
Vyacheslav Yurkov
3d65e0460c opcua: Add new recipe
open62541 (http://open62541.org) is an open source and free implementation
of OPC Unified Architecture according to IEC62541 standard

The patch exclude git-related files from installation directory
Upstream-Status: Accepted
a0328d4cb5

Signed-off-by: Vyacheslav Yurkov <v.yurkov@precitec.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2022-10-03 23:48:07 -07:00