Commit Graph

357 Commits

Author SHA1 Message Date
Chris Conlon
5f9bcfcd3b wolfssl: Update version to 3.15.5
This patch updates wolfSSL to the current 3.15.5 version. It removes a previous
patch for generating cyassl/options.h, as wolfSSL proper now does that as part
of the Autoconf configure step. It also removes the ipv6 PACKAGECONFIG usage.
wolfSSL is IP neutral and the --enable-ipv6 configure option only affects
the wolfSSL example client/server. As these examples are not compiled as part
of this recipe, the PACKAGECONFIG is unnecessary.

Signed-off-by: Chris Conlon <chris@wolfssl.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-06 17:06:39 -08:00
André Draszik
83c38fc544 mosquitto: fully switch over to using PACKAGECONFIG_CONFARGS
Convert all other instances of explicit PACKAGECONFIG uses
to the PACKAGECONFIG_CONFARGS infrastructure.

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-05 10:18:59 -08:00
André Draszik
e39709e381 mosquitto: fix build in systemd environments
The mosquitto systemd service file instructs systemd to wait
for mosquitto to notify systemd that mosquitto has started
correctly. This isn't working as mosquitto is not *compiled*
with systemd support enabled. As such, systemd restarts
mosquitto every few seconds.

For reference, this was introduced in commit a483d344d9
("mosquitto: Make enabling systemd also enable build dep on systemd")

Because we build mosquitto using the provided Makefile
infrastructure, the solution is to add PACKAGECONFIG_CONFARGS
to EXTRA_OEMAKE, so that the required make flags are added
to the make command line.

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-05 10:18:59 -08:00
Andreas Müller
331b717b86 networkmanager: move udev-rules from /usr/lib -> /lib
Seems udev-rules in /usr/lib are ignored: systemd-analayse reported >3min!
for system startup time!

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-12-02 11:05:02 -08:00
Khem Raj
4e8143007a miniupnpd: Update to 2.1.20180706
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-29 18:55:52 -08:00
Paul Eggleton
b26618c971 mosquitto: update to 1.5.4
1.5.2, 1.5.3 and 1.5.4 include a number of fixes, notably for
vulnerability CVE-2018-12543 which allowed the server process to be
remotely crashed. For further information see:

  https://mosquitto.org/blog/2018/11/version-154-released/
  https://mosquitto.org/blog/2018/09/security-advisory-cve-2018-12543/
  https://mosquitto.org/blog/2018/09/version-152-released/

A build option was added to use the system version of uthash rather than
the bundled version so we no longer need the patch to do this.

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-26 09:38:14 -08:00
Mark Asselstine
952d746611 networkmanager: package additional .la files
This fixes:
     ERROR: networkmanager-1.14.4-r0 do_package: QA Issue: networkmanager: Files/directories were installed but not shipped in any package:
       /usr/lib64/NetworkManager/1.14.4/libnm-settings-plugin-ifupdown.la
       /usr/lib64/NetworkManager/1.14.4/libnm-device-plugin-adsl.la
       /usr/lib64/NetworkManager/1.14.4/libnm-device-plugin-wifi.la
       /usr/lib64/NetworkManager/1.14.4/libnm-device-plugin-ovs.la
     Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
     networkmanager: 4 installed and not shipped files. [installed-vs-shipped]

As with similar changes in the past, if the distro makes use of
'remove-libtool' this issue is not seen but we should add .la files to
the -dev package when they do exist.

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-13 12:13:26 -08:00
Khem Raj
8a88083150 networkmanager: Fix build with musl
Remove redundant header includes

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Andreas Müller <schnitzeltony@gmail.com>
2018-11-07 12:05:31 -08:00
Andreas Müller
4be3dce466 networkmanager: upgrade 1.10.10 -> 1.14.4
* License checksum: copyright year changed
* packageconfig glib: with this version (udev-)glib support hase to be enabled
  explicitly. Split this out to meta-gnome where network-manager-applet lives.
* packageconfig netconfig: This was nonsense: netconfig is a SUSE tool [1]
  which is not found in layer index. The error was detected now because
  configuration checks for presence of netconfig.
* --disable-ifnet and --disable-ifcfg-suse are gone
* musl patches were aligned but have no resources to test them

[1] https://github.com/openSUSE/sysconfig

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-02 10:05:06 -07:00
Pascal Bach
b5dd6804f6 civetweb: disable tests
Tests try to download third party code and bypass the bitbake fetcher to
do that. This will not work in environments with no internet access.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-02 10:05:06 -07:00
Pascal Bach
a21e2ae87d civetweb: remove redundant EXTRA_OECMAKE_class-native
They are the same as the default version.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-02 10:05:06 -07:00
Changqing Li
5cf604e136 vlan: update SRC_URI
tar on previous link checksum changed, so changed SRC_URI to
get previous tar

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-01 10:04:54 -07:00
Johannes Pointner
bce1210d2e mbedtls: upgrade to 2.13.0
Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-25 13:51:52 -07:00
Mingli Yu
a9bef8df07 snort: Update SRC_URI
Update SRC_URI for snort as the previous
one is invalid.

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-23 13:23:47 -07:00
Armin Kuster
0dfc9ab6f0 blueman: really belongs in meta-networking
it has a build dependancy on python-cython and python-pyparsing with are in
meta-python

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-12 13:08:17 -07:00
Changqing Li
9f47fcd337 freeradius: fix radiusd.service startup failed problem
during radiusd start up, it will check several CVEs of libssl,
if allow_vulnerable_openssl set to no and one of the CVEs is
matched, radiusd will not startup.

in tls.c, two CVEs's version number is wrong, and after upgrade openssl
to 1.1.1, one CVE matched, so startup failed. correct the version numner
to make radiusd startup successfully.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-10 20:48:18 -07:00
Alex Kiernan
c1b4548322 crda: Fix usrmerge install path
Set UDEV_RULE_DIR so we follow usrmerge paths, fixing:

  ERROR: QA Issue: crda package is not obeying usrmerge distro feature. /lib should be relocated to /usr. [usrmerge]

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-09 19:08:25 -07:00
Hongxu Jia
9254a77848 umip: fix recipe location typo
Since `36983fe umip: move to meta-networking' applied,
it was moved to invalid location.

Fix prior partial move to meta-networking

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-07 21:45:20 -07:00
Armin Kuster
36983fea5e umip: move to meta-networking
ERROR: Nothing PROVIDES 'radvd' (but /home/akuster/oss/maint/meta-openembedded/meta-oe/recipes-connectivity/umip/umip_1.0.bb DEPENDS on or otherwise requires it)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-10-01 10:16:15 -07:00
Jeroen Hofstee
4ac262cc8b mosquitto: make websockets a PACKAGECONFIG option
Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-26 07:35:44 -07:00
Hongxu Jia
238c1e3bee crda: use gcrypt as default crypt
As Makefile told us, if `USE_OPENSSL=1', only openssl10 works,
even though the recipe depends libgcrypt.
[Makefile snip]
|ifeq ($(USE_OPENSSL),1)
|CFLAGS += -DUSE_OPENSSL
[snip]
|else
|CFLAGS += -DUSE_GCRYPT
[Makefile snip]

The crda dpends openssl 1.0.x which there is a build failure with
openssl 1.1.x. So use gcrypt instead of openssl by default.

The idea refers:
https://bugs.chromium.org/p/chromium/issues/detail?id=735782
https://gitweb.gentoo.org/repo/gentoo.git/tree/net-wireless/crda/crda-3.18-r1.ebuild#n36

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-25 22:24:15 -07:00
Khem Raj
6e56df6868 kea: Fix build with boost 1.68+
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-09 10:46:29 -07:00
Khem Raj
a483d344d9 mosquitto: Make enabling systemd also enable build dep on systemd
systemd support in mqtt needs system developement headers and libs installed in recipe sysroot

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-08 13:32:12 -07:00
Khem Raj
f42e527c92 crda: Depend on openssl10
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-08 13:32:12 -07:00
Randy MacLeod
f83a6cfe66 lftp: update from 4.8.3 to 4.8.4
Drop upstreamed CVE fix:
   a27e07d9 mirror: prepend ./ to rm and chmod arguments to avoid URL recognition (fix #452)

Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-05 13:59:16 -07:00
Paul Eggleton
9c0243b691 mosquitto: upgrade to 1.5.1
This includes one security fix and numerous other bugfixes. MQTT version
3.1.1 is now the default protocol.

See the following for details:

https://mosquitto.org/blog/2018/08/version-151-released/
https://mosquitto.org/blog/2018/05/version-1-5-released/

Changes to the recipe:
* Drop explicit installation of the libmosquitto.a static library
  because this no longer gets built by default, and the normal
  "make install" which we are running will install it anyway if it were
  to be enabled.
* Drop our service file since there is one supplied in the source tree
* Enable systemd notify support when systemd is being used
* Update comments in the init script

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-09-04 11:55:21 -07:00
Yevgeny Popovych
3c6eceb941 crda: Fix 64bit builds by inheriting siteinfo class
Variables provided by siteinfo are already in use,
but the siteinfo class is not inherited for some reason.

Signed-off-by: Yevgeny Popovych <yevgenyp@pointgrab.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-30 09:20:07 -07:00
Khem Raj
b3f3251273 civetweb: Fix build with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-29 18:18:14 -07:00
Radek Dostal
bae481e933 wireless-regdb: make wireless-regdb architecture independent
There is no compilation involved in wireless-regdb and package should
produce  the same results on all architectures => making it allarch saves
build time.

Additionally this fixes issue: "On machines where ${libdir} equals to
/usr/lib64/ regulatory.bin is not found by crda". Reason was that
crda-3.18/crda.c looks only in following paths:
  "/usr/local/lib/crda/regulatory.bin", /* Users/preloads can override */
  "/usr/lib/crda/regulatory.bin", /* General distribution package usage */
  "/lib/crda/regulatory.bin", /* alternative for distributions */

Signed-off-by: Radek Dostál <radek.dostal@streamunlimited.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-28 09:36:28 -07:00
Jagadeesh Krishnanjanappa
29158f7bde lftp: CVE-2018-10916
Affects lftp <= 4.8.3

Signed-off-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-24 08:58:13 -07:00
Johannes Pointner
77966d0f3a mbedtls: upgrade to 2.12.0
Signed-off-by: Johannes Pointner <johannes.pointner@br-automation.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-24 08:58:13 -07:00
Yi Zhao
c856f05705 samba: upgrade 4.8.3 -> 4.8.4
Security fixes:

CVE-2018-1139 (Weak authentication protocol allowed.)
CVE-2018-1140 (Denial of Service Attack on DNS and LDAP server.)
CVE-2018-10858 (Insufficient input validation on client directory listing in libsmbclient.)
CVE-2018-10918 (Denial of Service Attack on AD DC DRSUAPI server.)
CVE-2018-10919 (Confidential attribute disclosure from the AD LDAP server.)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-21 17:28:18 -07:00
Khem Raj
7e0fa293b7 recipes: Exclude non-buildable recipes from world for musl build
These recipes need to be fixed for musl, until they are needed
on musl lets remove them from world builds

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-20 23:58:58 -07:00
Martin Jansa
422ccc1548 daq: add dependency on bison-native
* fixes:
checking for flex 2.4 or higher... yes
checking for bison... no
configure: WARNING: don't have both flex and bison; reverting to lex/yacc
checking for capable lex... insufficient
configure: error: Your operating system's lex is insufficient to compile
         libsfbpf. You should install both bison and flex.
         flex is a lex replacement that has many advantages,
         including being able to compile libsfbpf.  For more
         information, see http://www.gnu.org/software/flex/flex.html .

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-19 17:10:27 -04:00
Martin Jansa
ac4ad1c40f snort: add dependency on bison-native
* fixes:
   ERROR!  bison not found.
   Get it from http://www.gnu.org/software/bison/
   (You may also try byacc or yacc instead.)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-19 17:10:01 -04:00
Martin Jansa
408204073e inetutils: fix build with glibc-2.28
* fixes:
  ../../inetutils-1.9.4/src/uucpd.c:236: error: undefined reference to 'crypt'
  ../../inetutils-1.9.4/src/rexecd.c:378: error: undefined reference to 'crypt'

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-16 21:41:15 -04:00
Mingli Yu
12f45d8b00 kea: fix do_package warning
Add libdhcp_stat_cmds.a and libdhcp_ha.a to
FILES_${PN}-staticdev to fix below warning:

WARNING: kea-1.4.0-r0 do_package: QA Issue: kea: Files/directories were installed but not shipped in any package:
  /usr/lib64/hooks/libdhcp_stat_cmds.a
  /usr/lib64/hooks/libdhcp_ha.a

Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-13 14:29:11 -04:00
Khem Raj
a001e46529 samba: Update to 4.8.3
LDB 1.4.0 breaks Samba < 4.9 therefore use internal version

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-30 01:34:10 -07:00
Changqing Li
d4610b9d97 freeradius: upgrade 3.0.15 -> 3.0.17
Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-27 07:19:11 -07:00
Yi Zhao
6d960cf729 snort: upgrade 2.9.7.5 -> 2.9.11.1
* Update SRC_URI

* Drop 0001-fix-do_package-failed-since-snort-2.9.7.0.patch since the
  issue had been fixed upstream.

* Drop the following patches and merge their modifications to
  disable-run-test-program-while-cross-compiling.patch:
    disable-dap-address-space-id.patch
    disable-daq-flow-id.patch
    disable-daq-verdict-retry.patch
    disable-inaddr-none.patch

* Add disable-run-test-program-while-cross-compiling.patch to fix
  configure error: cannot run test program while cross compiling.

  The variables have_daq_real_addresses, have_daq_ext_modflow,
  have_daq_queryflow, have_daq_data_channel_flags and
  have_daq_data_channel_separate_ip_versions are set to no since they
  are for daq 2.2.2 but we have daq 2.0.6 in meta-networking layer.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-26 20:10:07 -07:00
leimaohui
d75280b749 samba: Delete remain of LSB.
Signed-off-by: Lei Maohui <leimaohui@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-21 00:26:49 -07:00
Carlos Rafael Giani
2de6f8d1b4 nanomsg: add recipe
nanomsg is a socket library that provides several common communication
patterns. It is a rewrite of the ZeroMQ library. For differences between
ZeroMQ and nanomsg, consult https://nanomsg.org/documentation-zeromq.html

Signed-off-by: Carlos Rafael Giani <dv@pseudoterminal.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-15 11:58:02 -07:00
Khem Raj
f8904d0a6a mbedtls: Upgrade to 2.11.0
- Use libs section, libdevel is not common

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-14 15:50:14 -07:00
Krzysztof Kozlowski
8603b7643b kernel_wireless_regdb: Add class for embedding regulatory data into older kernel
Linux kernels before v4.15, allowed to be compiled with static
regulatory database if it was put under net/wireless/db.txt.

Add kernel_wireless_regdb class which allows in such cases to embed the
wireless regulatory database directly in the Linux kernel during build
process.

Usage:
1. The class should be inherited by kernel recipe (e.g. in
   linux-yocto_%.bbappend).
2. For Linux kernels up to v4.14, build kernel with CONFIG_EXPERT and
   CONFIG_CFG80211_INTERNAL_REGDB.

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-05 17:51:16 -07:00
Krzysztof Kozlowski
20e3c3e2e4 wireless-regdb: Add wireless-regdb-static package with static regulatory data
Small embedded systems might:
1. Want to get rid of daemons as much as possible (therefore be built
   without CRDA),
2. Not receive user-space incremental updates but an entire system
   upgrade (with kernel).

Linux kernel since v4.15 allows loading static regulatory data from
/lib/firmware/regulatory.db.

Add additional package to wireless-regdb recipe which provides such
static data.

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-05 17:51:16 -07:00
Krzysztof Kozlowski
e5b5114177 wireless-regdb: Bump version to latest upstream 2018.05.31
Bump the wireless-regdb recipe to use newest wireless regulatory
database.

Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-05 17:51:15 -07:00
Yi Zhao
476d08c49e networkmanager-openvpn: upgrade 1.2.8 -> 1.2.10
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-03 17:42:25 -07:00
Yi Zhao
b80f1d7710 NetworkManager: upgrade 1.10.6 -> 1.10.10
License-Update: update GTK-Doc from 1.27 to 1.28 to generate license.html

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-03 17:42:25 -07:00
Yi Zhao
703aa8c1f9 samba: upgrade 4.7.6 -> 4.7.8
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-07-03 17:42:25 -07:00
Khem Raj
f6c7adbccc kea: Upgrade to 1.4.0 release
Licence-Update:
* Co-routines are now used from external boost
* ISC Copyright years are updated to 2018
* Support for Google Benchmark has been added under Apache-2.0

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-06-29 00:35:46 -07:00