Commit Graph

158 Commits

Author SHA1 Message Date
Zhang Xiao
622ad1538b ntp: fix CVE-2013-5211
The monlist feature in ntp_request.c in ntpd in NTP before
4.2.7p26 allows remote attackers to cause a denial of service
(traffic amplification) via forged (1) REQ_MON_GETLIST or
(2) REQ_MON_GETLIST_1 requests, as exploited in the wild
in December 2013.

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21 21:35:05 +02:00
Xufeng Zhang
55ebea4bb0 ntp: Disable debugging by default
There is a problem in configure.ac file that whether or not
'--enable-debugging' is specified in configure cmdline, debugging
is always enabled.
We should disable ntp debugging by default.

Signed-off-by: Xufeng Zhang <xufeng.zhang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-21 21:35:04 +02:00
Hongxu Jia
8afe9200c4 curlpp: fix do_compile failed since gcc upgrade to 4.9
The deprecated test code was no longer used, so remove it
to avoid compiling failure with -Werror=unused-function
...
| example21.cpp:51:8: error: 'size_t {anonymous}::readData(char*,
size_t, size_t)' defined but not used [-Werror=unused-function]
|  size_t readData(char *buffer, size_t size, size_t nitems)
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:06 +02:00
Roy Li
4d7e174324 ipsec-tools: uprev it to 0.8.2
Remove 0001-Fix-warning-with-gcc-4.8.patch, it has been in 0.8.2

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:05 +02:00
Roy Li
61d61c4eb8 ifenslave: add recipes
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:05 +02:00
Christopher Larson
7bb14206a2 dnsmasq: add packageconfigs for idn, conntrack, lua
Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:04 +02:00
Christopher Larson
f1e112fa68 dnsmasq: look for lua.pc, not lua5.1.pc
Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:04 +02:00
Christopher Larson
a46abacebd dnsmasq: move parallel make patch to .bb, add upstream-status
Patches really belong in the recipe, not the .inc, given patches are generally
version-bound.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:03 +02:00
Christopher Larson
e87a84abd4 dnsmasq: obey CFLAGS & LDFLAGS
Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:03 +02:00
Christopher Larson
7ba7f53075 dnsmasq: add missing inherit pkgconfig
dnsmasq runs pkg-config to get cflags/libs for its dependencies.

Signed-off-by: Christopher Larson <chris_larson@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-13 23:28:03 +02:00
Martin Jansa
62435508cf stunnel: add dependency on zlib and tcp-wrappers
* fixes floating dependency:
  stunnel/stunnel/latest lost dependency on  libwrap zlib

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-11 10:59:23 +02:00
Roy Li
8f84267086 netcf: init script should be installed under /etc/init.d/
init script should be installed under /etc/init.d/, not /etc/rc.d/init.d

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-10 16:07:18 +02:00
Shrikant Bobade
3740ef2638 dnsmasq: fix parallel make failure
The dnsmasq target depends on .configured and $(objs). .configured does an rm
-f *.o. Yet the only thing telling make to build the .configured target before
the $(objs) target was the order of the dependencies of the dnsmasq target. We
can't rely on that order when doing a paralllel make build, so add an explicit
rule to enforce that order.

Signed-off-by: Christopher Larson <kergoth@gmail.com>
Signed-off-by: Shrikant Bobade <Shrikant_Bobade@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-10 16:07:17 +02:00
Joe MacDonald
a9636f77ac wireshark: update configuration and epoch
Commit 6d781369 warranted a PE bump but didn't include it.  Update it,
correct a typo in EXTRA_OECONF and explicitly disable c-ares resolver at
the same time.

Acked-by: Armin Kuster <akuster@mvista.com>
Acked-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-06 19:51:59 -04:00
Joe MacDonald
7a3f8a76cb wireshark: update README instructions
Minor tweaks to the README to make the email suggestion follow the format
used in other meta-openembedded README files and adding clarification on
building wireshark in a GUI environment.

Acked-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-06 11:24:28 -04:00
Joe MacDonald
6d7813692a wireshark: update to latest stable version
Version 1.12.0 is out, update the SRC_URI and associated variables.

Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-08-06 09:28:33 -04:00
Yue Tao
18bea20781 strongswan: Security Advisory - strongswan - CVE-2014-2891
strongSwan before 5.1.2 allows remote attackers to cause a denial of
service (NULL pointer dereference and IKE daemon crash) via a crafted
ID_DER_ASN1_DN ID payload.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2891

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-05 16:23:58 -04:00
Armin Kuster
967f16750a wireshark: fix build depends
This should address issues found in test-dependencies 2014-07-25

wireshark/wireshark/latest lost dependency on  libcap libnl libnl-genl libnl-nf libnl-route portaudio-v19 sbc

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-01 14:23:45 +02:00
Richard Purdie
abc0dc14b1 wireshark: Add missing pkgconfig dependency
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-08-01 14:23:45 +02:00
Armin Kuster
6d92fd5d68 wireshark: fix build for arm
* Backported Arm build fix

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-01 14:23:45 +02:00
Armin Kuster
9bfdcec408 wireshark: Add recipe 1.12.0-rc2
* Inital wireshark support on gtk+, gtk3
* README with additional info

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-08-01 14:23:44 +02:00
Roy Li
2d7c7956bd tnftp: add openssl PACKAGECONFIG and inherit pkgconfig
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30 09:35:44 +02:00
Ting Liu
280f4c9aea ipsec-tools: enable Dead Peer Detection and NAT traversal
* Dead peer detection (DPD) is a method that network devices use to verify
  the current existence and availability of other peer devices.
* NAT traversal (sometimes abbreviated as NAT-T) is a general term for
  techniques that establish and maintain Internet protocol connections
  traversing network address translation (NAT) gateways

Signed-off-by: Ting Liu <b28495@freescale.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30 09:35:44 +02:00
Roy Li
2ea5feedac ipsec-tools: several fixes
1. use PACKAGECONFIG
2. add three patches which will add the address check, to avoid SEGFAULT

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30 09:21:05 +02:00
Roy Li
042f9a89c6 openvpn: not use the hardcoded libdir
it will lead to QA failure, since .debug dir can not be installed into dbg package

    ERROR: QA Issue: non debug package contains .debug directory: openvpn path
    /work/core2-64-wrs-linux/openvpn/2.3.4-r0/packages-split/openvpn/usr/lib64i
    /openvpn/plugins/.debug/openvpn-plugin-down-root.so [debug-files]

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-30 09:21:04 +02:00
Martin Jansa
6ef51f43d5 lksctp-tools: blacklist because it fails to link against sctp_connectx symbol
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-24 15:31:50 +02:00
Richard Tollerton
f647f319fc openvpn: update and enable iproute2 support
- Added .bb for version 2.3.4.
- The download URL was broken; it's changed to reflect where the website
  points to.
- Force use of iproute2, which is generally recommended when running
  OpenVPN as an unprivileged user. Ref:
  http://community.openvpn.net/openvpn/wiki/UnprivilegedUser
- Explicitly add libpam to DEPENDS if pam is enabled, and disable the
  auth-pam plugin if pam is not enabled.
- Pass the path to the 'ip' utility to the configure script to keep it
  from trying to find it on the host.

Signed-off-by: Richard Tollerton <rich.tollerton@ni.com>
Signed-off-by: Ben Shelton <ben.shelton@ni.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-22 00:01:58 +02:00
Richard Purdie
8dc1763bac mtr: Use "foreign" automake strictness
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-22 00:01:56 +02:00
Richard Purdie
5161b267c7 memcached: Use "foreign" automake strictness
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-22 00:01:55 +02:00
Richard Purdie
a846cd69f7 ipsec-tools: Use "foreign" automake strictness
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-22 00:01:54 +02:00
Roy Li
be2a243700 Uprev tcpdump to 4.5.1
1. update the patch tcpdump_configure_no_-O2.patch
2. do not check libdlpi dependence on cross-compile, or else it will
cause do_qa_configure to fail.
3. do not check libpcap dependence, since the libpcap has been added
into DEPENDS, or else it will cause do_qa_configure to fail
4. make the check of getaddrinfo work on cross-compile

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-07-20 23:57:27 -04:00
Roy Li
fb70d44934 tnftp: add tnftp recipes file
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-07-20 23:57:27 -04:00
Roy Li
6a613feba9 aoetools: fix the SRC_URI
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-15 14:57:40 +02:00
Robert Yang
fb71368dfa meta-networking: use BPN in SRC_URI
Fixed SRC_URI:
* ${PN} -> ${BPN}, use ${BP} if it was ${PN}-${PV}
* ${P} -> ${BP}

Otherwise we would meet do_fetch errors when we do the multilib, native
or nativesdk build.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-07-15 14:56:59 +02:00
Amy Fong
87bbe91686 Uprev memcached from upstream
memcached 1.4.15 has some configuration errors:
configure:5798: error: cannot run test program while cross compiling

Uprev has the needed fix for the configuration error and some other fixes.

Signed-off-by: Amy Fong <amy.fong@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-29 23:30:49 -04:00
Richard Purdie
36d57b9234 recipes: add missing pkgconfig class inherits
* These recipes all use pkg-config in some way but were missing
  dependencies on the tool, this patch adds them.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 13:06:13 +02:00
Martin Jansa
4a179de52c curlpp: Blacklist because it's broken since gcc upgrade to 4.9
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 12:20:21 +02:00
Roy Li
bab22d4b16 dovecot: add the dependency for a C file
building rquota_xdr.c depends on a head file, which is generated
when building, so add the dependency to ensure the header file is
generated firstly.

Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-06-21 10:36:53 +02:00
Robert Yang
f135f64596 iftop: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_configure error:

cat: config/pthread.c: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:56 -04:00
Robert Yang
9f920bcf0e curlpp: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_configure error:

LifetimeLibrary.cpp:1:49: fatal error: utilspp/singleton/SingletonHolder.hpp: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:56 -04:00
Robert Yang
e3e7c6b850 tcpreplay: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_compile error:

src/defines.h:5:18: fatal error: tcpr.h: No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:56 -04:00
Robert Yang
103cb4ab99 netcf: inherit autotools-brokensep
It needs autotools-brokensep, otherwise do_install error:

make: *** No rule to make target `install'.  Stop.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Yao Xinpan
e35a1fe480 add recipe cim-schema, cim-schema-docs and license file DMTF.
Common Information Model (CIM) is a model for describing overall
management information in a network or enterprise environment. CIM
consists of a specification and a schema. The specification defines the
details for integration with other management models. The schema
provides the actual model descriptions.

Signed-off-by: Yao Xinpan <yaoxp@cn.fujitsu.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2014-06-15 23:21:33 -04:00
Jack Mitchell
f3518c4c74 ntp: fix incorrect pidfile handling in ntpd init script
Signed-off-by: Jack Mitchell <jmitchell@cbnl.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-03 21:57:28 -04:00
Dan McGregor
4ae3822224 netcat-openbsd: fixup patching
Do the patching in the do_patch phase instead of the compile
phase. That way if the compile phase needs to be rerun
patching isn't attempted a second time.

Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-03 21:18:51 -04:00
Mihaela Sendrea
7734132dd3 netperf: enable SCTP support
Signed-off-by: Mihaela Sendrea <mihaela.sendrea@enea.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-03 21:18:51 -04:00
Mihaela Sendrea
ab6a7ff9b3 lksctp-tools: add recipe (version 1.0.16)
This recipe comes from arago-oe-dev:
https://github.com/mrchapp/arago-oe-dev/tree/master/recipes/lksctp-tools

Signed-off-by: Mihaela Sendrea <mihaela.sendrea@enea.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-06-03 21:18:51 -04:00
Yue Tao
6938319b32 strongswan: Security Advisory - strongswan - CVE-2014-2338
IKEv2 in strongSwan 4.0.7 before 5.1.3 allows remote attackers to bypass
authentication by rekeying an IKE_SA during (1) initiation or (2)
re-authentication, which triggers the IKE_SA state to be set to
established.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2338

Signed-off-by: Yue Tao <Yue.Tao@windriver.com>
Signed-off-by: Roy Li <rongqing.li@windriver.com>
Signed-off-by: Joe MacDonald <joe@deserted.net>
2014-05-09 10:18:40 -04:00
Koen Kooi
b78c07ceb9 netperf: fix S!=B issues
Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-03 20:47:03 +02:00
Jack Mitchell
89ccf41a21 bridge-utils: apply brokensep
Signed-off-by: Jack Mitchell <jmitchell@cbnl.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-05-03 20:45:04 +02:00