Commit Graph

830 Commits

Author SHA1 Message Date
Mingli Yu
d2b027d8d8 hostapd: fix CVE-2021-0326 and CVE-2021-27803
Backport 2 patches to fix two CVEs.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 5a085c588a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 845bd5a5f1)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-23 18:45:08 -07:00
Mingli Yu
a0f00c2e11 hostapd: fix CVE-2019-5061
Backport a patch to fix CVE-2019-5061.

Reference: https://security-tracker.debian.org/tracker/CVE-2019-5061

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit 04ba527e94)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-23 18:45:08 -07:00
Martin Jansa
f8ce4b1030 telepathy-glib: respect GI_DATA_ENABLED when enabling vala-bindings
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-23 18:45:08 -07:00
Andrej Kozemcak
b1de50b2fc libuv: fix CVE-2020-8252
Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-02-04 22:39:02 -08:00
Wang Mingyu
b5ddfc05f5 zabbix: CVE-2020-15803 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15803

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d259144422)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
(cherry picked from commit d9911b087c)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-01-10 19:26:00 -08:00
Khem Raj
1440770834 iwd: Upgrade to 1.9
Need this upgrade to work with ell >= 0.33

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-19 11:22:44 -07:00
Oleksandr Kravchuk
25229f187c iwd: update to 1.8
Changelog:
- Fix issue with handling FT AKMs when not supported.
- Fix issue with handling FILS and RSNE in authenticate.
- Fix issue with handling auto-connection and quick scan.
- Fix issue with sending multiple scan requests.
- Add support for P2P feature and API.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-19 11:22:31 -07:00
Pierre-Jean Texier
61df8a9cc5 iwd: upgrade 1.6 -> 1.7
This includes the following changes:

ver 1.7:
	Fix issue with APs that send IGTK falsely in big endian.
	Fix issue with setting linkmode & operstate for open networks.

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-09-19 11:22:17 -07:00
Zheng Ruoqin
1f77d18cc6 paho-mqtt-c: Fix build error when enable multilib.
The error is as the following:
ERROR: paho-mqtt-c-1.3.2-r0 do_package: QA Issue: paho-mqtt-c:
Files/directories were installed but not shipped in any package:
  /usr/lib
  /usr/lib/cmake
  /usr/lib/cmake/eclipse-paho-mqtt-c
  /usr/lib/cmake/eclipse-paho-mqtt-c/eclipse-paho-mqtt-cConfig.cmake
  /usr/lib/cmake/eclipse-paho-mqtt-c/eclipse-paho-mqtt-cConfigVersion.cmake
  /usr/lib/cmake/eclipse-paho-mqtt-c/eclipse-paho-mqtt-cConfig-noconfig.cmake

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 93aa8defe3)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Andreas Müller
f032374e55 modemmanager: upgrade 1.12.10 -> 1.12.12
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f0a9b8bfab)
[ak: 1.12.x is a stable release]
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-12 19:20:37 -07:00
Christian Eggers
63844270a3 linuxptp: Fix segmentation fault on 32 bit platforms with 64 bit time_t
Back ported upstream patch:
7de73fefc3

Signed-off-by: Christian Eggers <ceggers@arri.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 924bd4dd08)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01 08:01:41 -07:00
Martin Jansa
df584cd3ea irssi: package libirc_proxy.a in PN-staticdev
* fixes:
  ERROR: irssi-1.0.4-r0 do_package_qa: QA Issue:
  non -staticdev package contains static .a library: irssi path '/work/core2-64-oe-linux/irssi/1.0.4-r0/packages-split/irssi/usr/lib/irssi/modules/libirc_proxy.a' [staticdev]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 8a84a0f802)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-06-12 09:32:04 -07:00
Pierre-Jean Texier
6a44b89c82 ser2net: upgrade 4.1.5 -> 4.1.8
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit ace7342bdd)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-28 21:49:10 -07:00
Pierre-Jean Texier
5d228320ff ser2net: fix upstream check URL
Fixes:

$: devtool check-upgrade-status ser2net
<...>

INFO: ser2net                   4.1.5           UNKNOWN_BROKEN  None

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 3cdb571edf)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-28 21:49:10 -07:00
Zheng Ruoqin
1403b13892 libqmi: upgrade 1.24.8 -> 1.24.12
Add md5 check.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit d59503a02e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-28 21:39:56 -07:00
Wang Mingyu
1d0aab0160 modemmanager: upgrade 1.12.8 -> 1.12.10
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 9108bf23cd)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-05-20 16:50:45 +00:00
Peter Kjellerstedt
679bb49126 paho-mqtt-c: Update to the real 1.3.2, and correct the license
In commit b0345e3f (paho-mqtt-c: upgrade 1.3.1 -> 1.3.2), paho-mqtt-c
was supposedly updated to 1.3.2. However, the SRCREV did not match the
v1.3.2 tag.

With the update to 1.3.2, the license was changed from EPL-1.0 | EDL-1.0
to EPL-2.0 | EDL-1.0. This was updated in commit b0345e3f for
LIC_FILES_CHKSUM, but not in LICENSE.

Remove do_configure_prepend_libc-musl() as this has now been fixed
upstream.

Signed-off-by: Peter Kjellerstedt <peter.kjellerstedt@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-05-03 14:29:17 -07:00
Wang Mingyu
b0345e3fe4 paho-mqtt-c: upgrade 1.3.1 -> 1.3.2
add patches for resoving compile error with musl:
0001-Fix-bug-of-free-with-musl.patch

Eclipse Public License : update to v 2.0
-License-Update: updated to 2020.

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-26 23:10:57 -07:00
Martin Balik
f48d31a4eb libwebsockets: upgrade 3.2.2 -> 4.0.1
Signed-off-by: Martin Balik <martin.balik@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-25 08:32:41 -07:00
niko.mauno@vaisala.com
a7d022fe54 zeromq: Fix host-specific path issue with libsodium
Avoid propagation of full build host specific path into
WORKDIR/sysroot-destdir/usr/share/cmake/ZeroMQ/ZeroMQTargets.cmake
when building the recipe as this causes following-like breakage on
sstate cache consumer hosts (with different build host specific path,
than the host that populated sstate cache)

  ninja: error: '/build/host/specific/path/to/zeromq/4.3.2-r0/recipe-sysroot/usr/lib/libsodium.so', needed by 'src/FooBar', missing and no known rule to make it

Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-22 12:14:44 -07:00
Wang Mingyu
0acf2e26e9 hostapd: CVE-2019-16275.patch
security Advisory

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16275

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-21 07:14:06 -07:00
Pierre-Jean Texier
9b61f412d3 libuv: upgrade 1.35.0 -> 1.36.0
See full changelog https://github.com/libuv/libuv/releases/tag/v1.36.0

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-19 11:55:06 -07:00
Pierre-Jean Texier
03a53ec17d iwd: upgrade 1.5 -> 1.6
This includes the following changes:

ver 1.6:
	Fix issue with handling missing AP stop events.
	Fix issue with handling out-of-order disconnect events.
	Fix issue with handling missing auth/assoc support.
	Fix issue with handling omitted EAP-TLS-CACert.
	Fix issue with handling OWE PTK derivation.
	Add support for internal frame exchange API.
	Add support for MAC randomization and override.
	Add support for per-network MAC addresses.

Also remove patch applied upstream

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-30 22:02:13 -07:00
Wang Mingyu
e03b484814 libuv: upgrade 1.34.2 -> 1.35.0
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-30 22:02:13 -07:00
Pierre-Jean Texier
dc3fece666 libwebsockets: fix upstream check URL
Fixes:

INFO: libwebsockets             3.2.2           2015            None 9494c66d20898ddb39483427c84f152b03cbad28

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-25 12:48:21 -07:00
Pierre-Jean Texier
f0f5e20272 libev: upgrade 4.31 -> 4.33
The complete Changes since 4.31 are:

4.33 Wed Mar 18 13:22:29 CET 2020
        - the 4.31 timerfd code wrongly changed the priority of the signal
          fd watcher, which is usually harmless unless signal fds are
          also used (found via cpan tester service).
        - the documentation wrongly claimed that user may modify fd and events
          members in io watchers when the watcher was stopped
          (found by b_jonas).
        - new ev_io_modify mutator which changes only the events member,
          which can be faster. also added ev::io::set (int events) method
          to ev++.h.
        - officially allow a zero events mask for io watchers. this should
          work with older libev versions as well but was not officially
          allowed before.
        - do not wake up every minute when timerfd is used to detect timejumps.
        - do not wake up every minute when periodics are disabled and we have
          a monotonic clock.
        - support a lot more "uncommon" compile time configurations,
          such as ev_embed enabled but ev_timer disabled.
        - use a start/stop wrapper class to reduce code duplication in
          ev++.h and make it needlessly more c++-y.
        - the linux aio backend is no longer compiled in by default.
        - update to libecb version 0x00010008.

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-19 09:26:02 -07:00
Adrian Bunk
ca61f118d4 modemmanager: Upgrade 1.12.6 -> 1.12.8
Bugfix release on the 1.12 stable branch.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-18 15:33:50 -07:00
Adrian Bunk
94faa7c0e3 libqmi: Upgrade 1.24.6 -> 1.24.8
Bugfix release on the 1.24 stable branch.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-18 15:33:49 -07:00
Wang Mingyu
141307ea51 ser2net: upgrade 4.1.2 -> 4.1.5
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-18 15:33:49 -07:00
Wang Mingyu
3758a2d9c5 irssi: upgrade 1.1.2 -> 1.2.2
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-17 19:46:35 -07:00
Pierre-Jean Texier
be8878665b libqmi: upgrade 1.24.4 -> 1.24.6
Overview of changes in libqmi 1.24.6
----------------------------------------

 * libqmi-glib:
   ** Fixed the close operation logic to make sure that a reopen done right
      away doesn't close the wrong endpoint.
   ** Updated string reading logic to make sure that all strings are valid
      UTF-8.
   ** Updated string reading logic to attempt parsing as GSM7 or UCS2 if the
      initial UTF-8 validation fails.
   *+ Renamed TLV 0x15 in the "WDA Get Data Format" message, and added new
      compat methods for the old name.
   ** Fixed the format of the NITZ information TLV, and added new compat
      methods for the old name.
   ** Fixed the format of the Home Network 3GPP2 TLV, and added new compat
      methods for the old name.

 * Several other minor improvements and fixes.

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-13 12:49:49 -07:00
Pierre-Jean Texier
93d67b3079 iwd: upgrade 1.4 -> 1.5
Remove patch already in version

Fixes:

ver 1.5:
	Fix issue with handling missing NEW_WIPHY events.
	Fix issue with interface creation and NEW_WIPHY events.
	Fix issue with handling LastConnectedTime property change.
	Fix issue with PEAPv0 interoperability with Windows.

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-13 12:49:40 -07:00
Changqing Li
d178745cbf conf/layer.conf: add BBFILES_DYNAMIC and dynamic layers
some recipes under meta-oe have dependency on meta-python,
and test_world of yocto-check-layer will failed with error
like:

ERROR: test_world (common.CommonCheckLayer)
ERROR: Nothing PROVIDES 'python3-pytoml-native' (but
/meta-openembedded/meta-oe/recipes-extended/mozjs/mozjs_60.9.0.bb
DEPENDS on or otherwise requires it). Close matches:
  python3-numpy-native
  python3-pycairo-native
  python3-rpm-native
ERROR: Required build target 'meta-world-pkgdata' has no buildable
providers.
Missing or unbuildable dependency chain was: ['meta-world-pkgdata',
'mozjs', 'python3-pytoml-native']

fix by make these recipes only active when identified layers are
present

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-11 08:58:57 -07:00
Pierre-Jean Texier
5eeaa3edef irssi: fix upstream version check
Fixes:

INFO: Skip package irssi (status = UNKNOWN_BROKEN, current version = 1.1.2, next version = N/A)

After this commit:

INFO: irssi, 1.1.2, 1.2.2, None, N/

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
2020-03-05 07:11:50 -08:00
Pierre-Jean Texier
06d2b6a33b czmq: fix upstream version check
Fixes:

INFO: Skip package czmq (status = UNKNOWN_BROKEN, current version = 4.2.0, next version = N/A)

After this commit:

INFO: Skip package czmq (status = MATCH, current version = 4.2.0, next version = 4.2.0)

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
2020-03-05 07:11:50 -08:00
Pierre-Jean Texier
4a13dc6a9d zeromq: fix upstream version check
Fixes:

INFO: Skip package zeromq (status = UNKNOWN_BROKEN, current version = 4.3.2, next version = N/A)

After this commit:

INFO: Skip package zeromq (status = MATCH, current version = 4.3.2, next version = 4.3.2)

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
2020-03-05 07:11:50 -08:00
Wang Mingyu
b48cb2b950 zabbix: upgrade 4.4.5 -> 4.4.6
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-27 17:55:23 -08:00
Wang Mingyu
f953932ef7 libmtp: upgrade 1.1.16 -> 1.1.17
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-27 17:55:23 -08:00
Pierre-Jean Texier
acd1bfd169 ser2net: upgrade 3.5.1 -> 4.1.2
Add gensio and libyaml to DEPENDS list, see:
 - https://sourceforge.net/p/ser2net/news/2019/05/ser2net-40-gensio-10-released/

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-27 08:25:49 -08:00
Pierre-Jean Texier
9cbb406814 gensio: new package
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-27 08:25:49 -08:00
Wang Mingyu
d4874942d8 libmbim: upgrade 1.20.4 -> 1.22.0
clang.patch
Revemod since the file of this patch is non-existent.

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-27 08:25:49 -08:00
Wang Mingyu
9825d4cf3e libev: upgrade 4.27 -> 4.31
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-27 08:25:49 -08:00
Pierre-Jean Texier
a38a73eacd libuv: upgrade 1.34.0 -> 1.34.2
See full changelog https://github.com/libuv/libuv/releases/tag/v1.34.2

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-25 17:57:15 -08:00
Adrian Bunk
3fd86f3fa3 modemmanager: Upgrade 1.12.4 -> 1.12.6
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-23 07:49:16 -08:00
Adrian Bunk
975b6b20e1 libqmi: Upgrade 1.24.2 -> 1.24.4
Upgrade on the 1.24 stable branch.

Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-23 07:49:16 -08:00
Max Krummenacher
f23f2b96b9 lirc: build and deploy with python3
lirc already uses python3 for the build, reflect that in the recipe.
Add the relevant python modules used in the scripts to RDEPENDS.
Deploy all python scripts in the lirc-python package.

Signed-off-by: Max Krummenacher <max.krummenacher@toradex.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-15 08:05:08 -08:00
Wang Mingyu
c13246e463 zabbix: upgrade 4.4.1 -> 4.4.5
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-11 16:46:31 -08:00
Adrian Bunk
a30cedacfc modemmanager: Add a PACKAGECONFIG for the new --with-at-command-via-dbus option
Signed-off-by: Adrian Bunk <bunk@stusta.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-07 18:07:43 -08:00
Robert Joslyn
68aa2eab38 iwd: Update formatting
Try to conform better to the style guide.

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-04 22:03:14 -08:00
Robert Joslyn
3db4cc7350 iwd: Use manpages class to control documentation
This class allows the api-documentation distro feature to control man
page generation. Remove copying all .txt files from ${S}/doc since these
are developer documents and wouldn't be of any use to users on the
target device.

Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-02-04 22:03:14 -08:00