Commit Graph

282 Commits

Author SHA1 Message Date
Yue Tao
26b31ad728 quagga: Security Advisory - CVE-2012-1820
The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier
allows remote attackers to cause a denial of service (assertion failure
and daemon exit) by leveraging a BGP peering relationship and sending a
malformed Outbound Route Filtering (ORF) capability TLV in an OPEN
message.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-1820

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:56 -04:00
Zhang Xiao
d42a2e1605 tftp-hpa: bug fix on separated CR and LF
In ascii mode, if the CR and LF was separated into different transfer
blocks, This LF will be just dropped instead of replacing the previous
CR. Add a checking on the first character to fix it.

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:56 -04:00
Robert Yang
f135f64596 iftop: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_configure error:

cat: config/pthread.c: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:56 -04:00
Robert Yang
9f920bcf0e curlpp: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_configure error:

LifetimeLibrary.cpp:1:49: fatal error: utilspp/singleton/SingletonHolder.hpp: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:56 -04:00
Robert Yang
e3e7c6b850 tcpreplay: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_compile error:

src/defines.h:5:18: fatal error: tcpr.h: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:56 -04:00
Robert Yang
15f02ad761 vblade: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_install error:

install: cannot stat `vblade-20/vblade': No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:56 -04:00
Robert Yang
8e689bb7a1 tftp-hpa: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_install error:

make: *** No rule to make target `install'.  Stop.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Robert Yang
09da1e007c conntrack-tools: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_install error:

install: cannot stat `doc/sync/ftfw/conntrackd.conf': No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Robert Yang
103cb4ab99 netcf: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_install error:

make: *** No rule to make target `install'.  Stop.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Robert Yang
64adf1643b autofs: inherit autotools-brokensep
Otherwise do_configure failed:
sed: can't read configure.in: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Robert Yang
9613ff0a72 rp-pppoe: inherit autotools-brokensep
Otherwise do_compile failed:
No rule to make target `pppoe.c', needed by `pppoe.o'.  Stop.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Robert Yang
a97ab8e018 cyrus-sasl: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_configure error:

sed: can't read sasldb/db_berkeley.c: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Robert Yang
13813da08e proftpd: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_compile error:

proftpd-1.3.4b/include/version.h:1:24: fatal error: buildstamp.h: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Robert Yang
9e91501560 znc: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_configure error:

automake: error: 'configure.ac' is required

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Robert Yang
2f16a0ea81 openflow: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_configure error:

run.do_configure.22953: line 109: ./boot.sh: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Yao Xinpan
e35a1fe480 add recipe cim-schema, cim-schema-docs and license file DMTF.
Common Information Model (CIM) is a model for describing overall
management information in a network or enterprise environment. CIM
consists of a specification and a schema. The specification defines the
details for integration with other management models. The schema
provides the actual model descriptions.

Signed-off-by: Yao Xinpan <yaoxp@cn.fujitsu.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Martin Jansa
5e67ba4a28 radvd: fix install issue for S!=B
Some files are in "S" that are needed for install.

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-13 13:38:12 +02:00
Joe MacDonald
374545b58c MAINTAINERS: update my email address for meta-networking
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-09 21:28:52 -04:00
Maxim Uvarov
69cbc366c5 update snort to 2.9.6.0
1. looks like snort dropped reference to barnyard2. At least it's missing in configure.
Also download link to barnyard2 is not available now. Drop this package.
2. update snort version from 2.9.4.6 to 2.9.6.0.
3. fix libdnet paths.

Signed-off-by: Maxim Uvarov <maxim.uvarov@linaro.org>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-03 21:57:28 -04:00
Jack Mitchell
f3518c4c74 ntp: fix incorrect pidfile handling in ntpd init script
Signed-off-by: Jack Mitchell <jmitchell@cbnl.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-03 21:57:28 -04:00
Dan McGregor
4ae3822224 netcat-openbsd: fixup patching
Do the patching in the do_patch phase instead of the compile
phase. That way if the compile phase needs to be rerun
patching isn't attempted a second time.

Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-03 21:18:51 -04:00
Mihaela Sendrea
7734132dd3 netperf: enable SCTP support
Signed-off-by: Mihaela Sendrea <mihaela.sendrea@enea.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-03 21:18:51 -04:00
Mihaela Sendrea
ab6a7ff9b3 lksctp-tools: add recipe (version 1.0.16)
This recipe comes from arago-oe-dev:
https://github.com/mrchapp/arago-oe-dev/tree/master/recipes/lksctp-tools

Signed-off-by: Mihaela Sendrea <mihaela.sendrea@enea.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-03 21:18:51 -04:00
Alexandre Fournier
c4ba56ceeb net-snmp: install net-snmp-config script to STAGING_BINDIR_CROSS
This recipe was installing net-snmp-config script to STAGING_BINDIR
instead of STAGING_BINDIR_CROSS, during the do_install. It is not
recommended and must be done after staging.

Changes:
* Remove STAGING_BINDIR manipulations from do_install_append
* Add net_snmp_sysroot_preprocess function instead
* Append net_snmp_sysroot_preprocess to SYSROOT_PREPROCESS_FUNCS

Signed-off-by: Alexandre Fournier <alexandre.fournier@kiplink.fr>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-03 21:18:51 -04:00
Jackie Huang
dfbbb45e81 conntrack-tools: add depends on bison-native
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-21 13:56:23 +02:00
Changhyeok Bae
04dcd55c9d quagga, fim, gpsd, hddtemp, libunwind, lzip: Change the url to variable for savannah in SRC_URI
* The variables (SAVANNAH_MIRROR)
  are defined in oe-core/meta/conf/bitbake.conf.
* MIRRORS in quagga and libunwind is removed.
  because the MIRRORS of savannah is globally defined
  in oe-core/meta/classes/mirrors.bbclass

Signed-off-by: Changhyeok Bae <changhyeok.bae@lge.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-15 12:30:17 +02:00
Yue Tao
6938319b32 strongswan: Security Advisory - strongswan - CVE-2014-2338
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass
authentication by rekeying an IKE_SA during (1) initiation or (2)
re-authentication, which triggers the IKE_SA state to be set to
established.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2338

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-05-09 10:18:40 -04:00
yzhu1
9747141c09 net-snmp-5.7.2: fix CVE-2014-2285
The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs
in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions,
allows remote attackers to cause a denial of service (snmptrapd
crash) via an empty community string in an SNMP trap, which triggers
a NULL pointer dereference within the newSVpv function in Perl.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2285
Signed-off-by: yzhu1 <yanjun.zhu@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-05-09 10:18:40 -04:00
yanjun.zhu
7361149c47 net-snmp-5.7.2: fix CVE-2014-2284
The Linux implementation of the ICMP-MIB in Net-SNMP 5.5 before
5.5.2.1, 5.6.x before 5.6.2.1, and 5.7.x before 5.7.2.1 does
not properly validate input, which allows remote attackers
to cause a denial of service via unspecified vectors.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2284
Signed-off-by: yanjun.zhu <yanjun.zhu@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-05-09 10:18:40 -04:00
Yue Tao
b9ad53ccce net-snmp: Using the target perl
Set the PERLPROG to target perl to avoid host contamination.

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-05-09 10:18:40 -04:00
Koen Kooi
b78c07ceb9 netperf: fix S!=B issues
Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-03 20:47:03 +02:00
Jack Mitchell
89ccf41a21 bridge-utils: apply brokensep
Signed-off-by: Jack Mitchell <jmitchell@cbnl.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-03 20:45:04 +02:00
Jack Mitchell
78477c8cae tcpdump: inherit brokensep
Signed-off-by: Jack Mitchell <jmitchell@cbnl.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-03 20:45:04 +02:00
Wenzong Fan
ee6f88f285 radvd.init: fix path to radvd.conf sample
Correct the information that printed by radvd initscript.

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 21:07:47 -04:00
Kai Kang
715893e5ff quagga: fix CVE-2013-6051
Backport patch to fix CVE-2013-6051.

Signed-off-by: Hu <yadi.hu@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 21:07:46 -04:00
Kai Kang
a277f303df quagga: fix QA warning
When build quagga, it shows QA warnings:

WARNING: QA Issue: ELF binary '/home/build/poky/build/tmp/work/i586-poky-linux/quagga/0.99.21-r2.0/packages-split/quagga-bgpd/usr/sbin/bgpd' has relocations in .text
WARNING: QA Issue: ELF binary '/home/build/poky/build/tmp/work/i586-poky-linux/quagga/0.99.21-r2.0/packages-split/quagga-ripngd/usr/sbin/ripngd' has relocations in .text

The configure script tests compiler whether support option '-fPIE'. If
support, it pass option '-fPIE' to compiler then cause these QA
warnings.

Disable configure script to check option '-fPIC'.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 21:07:46 -04:00
Kai Kang
182c235bd9 ndisc6: allow the package can be empty
FILES_${PN} is set to null in original .bb file, this would cause
ndisc6 main package is missing, then one build error will happen:

ERROR: ndisc6 not found in the base feeds (qemux86 i586 x86 noarch any all).

To fix this, need to set ALLOW_EMPTY_${PN} = "1".

Signed-off-by: Xudong.zhu <xudong.zhu@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 21:07:46 -04:00
Wenzong Fan
b96ae8191d ntp: fix hardcode to /usr/bin/perl
This patch properly uses the path variables and fixes ntptrace and
ntp-wait, just in case perl is not installed with the hardcode path.

Signed-off-by: Rahat Mahbub <rahat.mahbub@windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 21:07:46 -04:00
Christian Ziethén
365125e4da dnsmasq: update to 2.68
Fixes a bug with libvirt and DHCP, which is fixed in 2.66.

"Handle the situation where libc headers define
SO_REUSEPORT, but the kernel in use doesn't, to cope with
the introduction of this option to Linux. Thanks to Rich
Felker for the bug report."

Signed-off-by: Christian Ziethén <Christian.Ziethen@enea.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 20:39:16 -04:00
Koen Kooi
aed102ddf3 dovecot: add libcap dependency
This fixes:
	dovecot/dovecot/latest lost dependency on  libcap

Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 20:39:16 -04:00
Javier Viguera
402ac25adb stunnel: fix configure ssl parameter
'--with-ssl=DIR' configure parameter expects the location of the
libraries and include files in the sysroot. This means the directory
containing the 'lib' and 'include' subdirectories, not the include
directory itself.

This fixes an error at configure time:

checking
<local-path>/tmp/sysroots/ccimx6adpt/usr/include/include/openssl/engine.h
usability... no

(notice duplicated include entry in above line)

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 20:39:15 -04:00
Changhyeok Bae
3fb3c2c8f8 quagga: Add mirror site
* The SRC_URI is not accessible.
  So need to add mirror site referred by the original site.
* The problem is that
  http://download.savannah.nongnu.org/releases redirects to closest mirror
  and few mirrors (e.g. .jp) weren't working correctly while
  http://download-mirror.savannah.gnu.org/releases/ seems to be reliable.

Signed-off-by: Changhyeok Bae <changhyeok.bae@lge.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 20:39:15 -04:00
Philip Balister
fdea5d0942 ntp : Add cap to default PACKAGECONFIG options.
If ntp is built without libcap, it refuses to start with the following
message:

Starting ntpd: /usr/sbin/ntpd: The ``user'' option has been disabled -- built
without --enable-clockctl or --enable-linuxcaps
ntpd - NTP daemon program - Ver. 4.2.6p5
USAGE:  ntpd [ -<flag> [<val>] | --<name>[{=| }<val>] ]...

By adding cap to the PACKAGECONFIG the default runs. In the
future, someone could add an option for using clockctl.

Signed-off-by: Philip Balister <philip@balister.org>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-24 20:39:15 -04:00
Paul Barker
f3cd626980 ipsec-tools: Update patch status
Signed-off-by: Paul Barker <paul@paulbarker.me.uk>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-04-20 14:51:32 +02:00
Martin Jansa
d8d44aeb94 atftp: include whole sysconfdir in PN
* when sysv script is removed QA warn is shown:
  atftp-0.7.1+gitAUTOINC+be3291a18c: atftp: Files/directories were installed but not shipped
    /etc
  empty dir doesn't cost much, so just include it

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-04-20 10:46:49 +02:00
Jackie Huang
bc969d3705 inetutils: add -dbg packages for tftpd, telnetd and rshd
The packages tftpd, telnetd and rshd conflict with the ones
provided by netkit, so add the corresponding -dbg packages
for them to avoid the following confliction between the dbg
package of inetutils and netkit:

error: file /usr/sbin/.debug/in.rexecd conflicts between attempted installs of inetutils-dbg-1.9.1-r1.0.armv7a_vfp_neon and netkit-rsh-dbg-0.17-r0.0.armv7a_vfp_neon
error: file /usr/sbin/.debug/in.telnetd conflicts between attempted installs of inetutils-dbg-1.9.1-r1.0.armv7a_vfp_neon and netkit-telnet-dbg-0.17-r0.0.armv7a_vfp_neon

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-02 11:18:54 -04:00
Javier Viguera
5be3c13736 stunnel: fix SRC_URI
Trying to build stunnel fails with:

  ERROR 404: Not Found.

Seems that after the new release (5.x) they have moved the old tarball
under a 'archive/4.x' subdirectory.

Signed-off-by: Javier Viguera <javier.viguera@digi.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-04-02 11:18:54 -04:00
Hongxu Jia
a600fe808a netcf: fix gnulib not found in sysroots while using a shared sstate cache
...
./bootstrap: Bootstrapping from checked-out netcf sources...
./bootstrap: consider installing git-merge-changelog from gnulib
./bootstrap: line 641:
tmp/sysroots/qemux86/usr/share/gnulib/gnulib-tool: No such file or
directory
...

The gnulib source was incorrectly populated to ${STAGING_DATADIR}.
While the build shared an existed sstate cache, the gnulib's
${SYSROOT_DESTDIR} was empty, the gnulib source code was not
found in sysroots.

We should use do_install task to install them to ${D}, and the
default do_populate_sysroot task will populate them to
${STAGING_DATADIR}.

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
2014-03-27 15:41:13 -04:00
Robert Yang
d9f21ab787 traceroute: filter-out patches dir
The $(subdirs) contains all the dirs under the ${B}, and this one:

do_unpack[cleandirs] = "${S}/patches"

will create a "patches" dir, then there will be compile errors, filter
out the patches will fix the problem.

Note: poky doesn't have this problem since it separates the ${S} and
${B}

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
2014-03-27 15:41:13 -04:00
Joe Slater
61d573ad7c traceroute: fix alternate name
traceroute6 for the name is misleading and will interfere
with traceroute6 in iputils making an alternate link to
the traceroute6 binary, so we change the name to traceroute.

Signed-off-by: Joe Slater <jslater@windriver.com>
Signed-off-by: Joe MacDonald <joe.macdonald@windriver.com>
2014-03-27 15:41:13 -04:00