Commit Graph

527 Commits

Author SHA1 Message Date
zhengruoqin
353aac0c7f netplan: upgrade 0.100 -> 0.101
Refresh the following patch:
0001-dbus-Remove-unused-variabes.patch
0002-Makefile-Exclude-.h-files-from-target-rule.patch

Add 0001-don-t-fail-if-GLOB_BRACE-is-not-defined.patch to solve the
compilation errors on musl.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
Alexander Vickberg
f431022415 mbedtls: upgrade to 2.25.0
Deleted build fix patch. This is already applied in this release.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-17 09:12:27 -08:00
Zheng Ruoqin
baee1ebeaf samba: CVE-2020-14383 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14383

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Zheng Ruoqin
1d44b4c03d samba: CVE-2020-14318 Security Advisory
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14318

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-15 00:52:55 -08:00
Khem Raj
62c2f4a48a networkmanager: Fix reallocarray check in meson and configure
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-12 16:41:59 -08:00
Alexander Vickberg
6f1139a717 mbedtls: upgrade to 2.24.0
Download archives are no longer updated so fetch from Github. Add build
fix from upstream. The file LICENSE now contains the full Apache 2.0
license text.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-09 10:14:57 -08:00
zangrc
9ef0c70871 netplan: upgrade 0.99 -> 0.100
0001-src-parse.c-Initialize-key-to-NULL.patch
Removed since this is included in 0.100.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 14:21:57 -08:00
zangrc
2bbb303b72 snort: upgrade 2.9.16.1 -> 2.9.17
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
zangrc
bb64362db7 nngpp: upgrade 1.2.4 -> 1.3.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
Mark Jonas
2fe4cb5882 mbedtls: Fix typo in PACKAGECONFIG
Signed-off-by: Mark Jonas <toertel@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-03 11:03:45 -08:00
Yi Zhao
17bc2a137f networkmanager: remove PACKAGECONFIG[dhclient]
The dhcp-client has been removed from oe-core and the current
networkmanager does not support dhcpcd >= 9.0 (See bug report:
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/410)

Remove the PACKAGECONFIG[dhclient] and pass --with-dhclient/dhcpcd=no
explicitly to EXTRA_OECONF. Otherwise it will search the host path when
configure.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-14 08:39:34 -07:00
Yi Zhao
bebdea8530 samba: upgrade 4.10.17 -> 4.10.18
This is security release in order to address CVE-2020-1472
(Unauthenticated domain takeover via netlogon ("ZeroLogon")).

See: https://www.samba.org/samba/history/samba-4.10.18.html

Also remove 3 backported patches.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-14 08:39:34 -07:00
Zang Ruochen
2519ac6932 firewalld: upgrade 0.9.0 -> 0.9.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-13 22:33:05 -07:00
Alexander Vickberg
35459c1d25 wolfssl: upgrade 4.4.0 -> 4.5.0
Add patch from upstream which fixes building on big endian.

Signed-off-by: Alexander Vickberg <wickbergster@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-06 08:45:24 -07:00
Winfried Dobbe
92524727d4 firewalld: Add missing rdep on nftables-python
Fixes Issue #280

Signed-off-by: Winfried Dobbe <winfried.dobbe@xmsnet.nl>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-26 07:20:26 -07:00
Romain Naour
25b91b3d2b libiec61850: add recipe for libiec61850
IEC 61850 is an international standard for communication systems in
Substation Automation Systems (SAS) and management of Decentralized
Energy Resources (DER). It is seen as one of the communication
standards of the emerging Smart Grid.

Add two upstream patch fixing build issues with musl libc.

Enable the libiec61850 python binding (pyiec61850) that require a fix
to find the correct PYTHON_SITE_DIR path while cross-compiling.

Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-24 12:42:04 -07:00
Robert Yang
ac313b6380 crda: rdepends on wireless-regdb-static
The wireless-regdb has been moved to oe-core. According the commit
message:

wireless-regdb-static should be used with kernel >= 4.15.
wireless-regdb can be used with older kernels and is mostly
irrelevant here, but keeping it in meta-networking would
create needless recipe duplication.

it should replace runtime dependency wireless-regdb with
wireless-regdb-static.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-24 12:42:04 -07:00
Todd Cunningham
3c35fe419d firewalld: upgrade 0.8.3 -> 0.9.0
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-23 19:45:53 -07:00
Zang Ruochen
535b9088dc libdnet: upgrade 1.12 -> 1.14
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-10 21:20:23 -07:00
Armin Kuster
45ccf2f43f dhcpcd: pkg moved to core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Armin Kuster
89adc5d3ec kea: pkg moved to core
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Leon Anavi
9701b83409 mosquitto: Upgrade 1.6.11 -> 1.6.12
Upgrade to release 1.6.12:

Security:
- In some circumstances, Mosquitto could leak memory when handling
  PUBLISH messages. This is limited to incoming QoS 2 messages,
  and is related to the combination of the broker having
  persistence enabled, a clean session=false client, which was
  connected prior to the broker restarting, then has reconnected
  and has now sent messages at a sufficiently high rate that the
  incoming queue at the broker has filled up and hence messages
  are being dropped. This is more likely to have an effect where
  max_queued_messages is a small value. This has now been fixed.

Broker:
- Build warning fixes when building with WITH_BRIDGE=no and
  WITH_TLS=no.

Clients:
- All clients exit with an error exit code on CONNACK failure.
- Don't busy loop with `mosquitto_pub -l` on a slow connection.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-03 07:54:13 -07:00
Khem Raj
0b15dce76a autossh: Depend on ssh instead of hardcoding openssh
This helps it to use dropbear

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
40ef9eea78 bearssl: fix GNU_HASH link error
Fixes
No GNU_HASH in the ELF binary /mnt/b/yoe/master/build/tmp/work/cortexa57-yoe-linux/bearssl/0.6-r0/packages-split/bearssl/usr/lib/libbearssl.so.6.0.0, didn't pass LDFLAGS? [ldflag
s]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Khem Raj
17b8039078 networkmanager: Depend on dhcpcd
dhcp-client is being removed from oe-core

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01 15:37:44 -07:00
Jack Mitchell
af306b7f7f meta-networking: dhcpcd: backport ALIGN compile error fix
Fails to build on an aarch64 system with ipv6 disabled. This backported
patch fixes it.

Signed-off-by: Jack Mitchell <ml@embed.me.uk>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-25 10:39:27 -07:00
Jens Rehsack
c79884d9b5 bearssl: fix missing install
Default Makefile of bearssl doesn't have a make target which hadn't
enough attraction when creating the recipe.

Add missing functionality.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 16:35:25 -07:00
Zang Ruochen
903a808600 lftp: upgrade 4.9.1 -> 4.9.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21 10:16:29 -07:00
Jens Rehsack
7527b1425f bearssl: add new recipe
Add recipe for BearSSL - an an implementation of the SSL/TLS protocol with
the approach of:
* Be correct and secure.
* Be small
* Be highly portable
* Be feature-rich and extensible

See https://bearssl.org for more details.

Signed-off-by: Jens Rehsack <sno@netbsd.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-19 14:02:48 -07:00
Colin McAllister
02f2eb8d50 autossh: Created recipe
Added recipe for autossh tool.

Signed-off-by: Colin McAllister <colinmca242@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17 17:59:34 -07:00
Leon Anavi
7c6bf8926c mosquitto: Upgrade 1.6.10 -> 1.6.11
Upgrade to release 1.6.11:

Broker:
- Fix usage message only mentioning v3.1.1.
- Fix broker refusing to start if only websockets listeners were
  defined.
- Change systemd unit files to create /var/log/mosquitto before
  starting.
- Don't quit with an error if opening the log file isn't possible.
- Fix bridge topic remapping when using "" as the topic.
- Fix messages being queued for disconnected bridges when clean
  start was set to true.
- Fix `autosave_interval` not being triggered by messages being
  delivered.
- Fix websockets clients sometimes not being disconnected promptly.
- Fix "slow" file based logging by switching to line based
  buffering.
- Log protocol error message where appropriate from a bad
  UNSUBSCRIBE, rather than the generic "socket error".
- Don't try to start DLT logging if DLT unavailable, to avoid a
  long delay when shutting down the broker.
- Fix potential memory leaks.
- Fix clients not receiving messages after a previous client with
  the same client ID and positive will delay interval quit.
- Fix overly broad HAVE_PTHREAD_CANCEL compile guard.

Client library:
- Improved documentation around connect callback return codes.
- Fix `mosquitto_publish*()` no longer returning
  `MOSQ_ERR_NO_CONN` when not connected.
- `mosquitto_loop_start()` now sets a thread name on Linux,
  FreeBSD, NetBSD, and OpenBSD.
- Fix `mosquitto_loop_stop()` not stopping on Windows.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-17 12:26:41 -07:00
Khem Raj
328b1fb12b daq: Upgrade to 2.0.7
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj
2dae71f7cd snort: Upgrade to 2.9.16.1
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj
748aea615e dibbler: Update to latest
Drop upstreamed patch
Fixed compatibility with g++-10

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Khem Raj
18e85358d3 netplan: Update to latest to fix build with -fno-common
Add patches to fix build with clang-11

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-13 22:32:07 -07:00
Mingli Yu
52f5141109 freeradius: fix the occasional verification failure
Fixes:
  # cd /etc/raddb/certs
  # ./bootstrap
[snip]
chmod g+r ca.key
openssl pkcs12 -in server.p12 -out server.pem -passin pass:'whatever' -passout pass:'whatever'
chmod g+r server.pem
C = FR, ST = Radius, O = Example Inc., CN = Example Server Certificate, emailAddress = admin@example.org
error 7 at 0 depth lookup: certificate signature failure
140066667427072:error:04067084:rsa routines:rsa_ossl_public_decrypt:data too large for modulus:../openssl-1.1.1g/crypto/rsa/rsa_ossl.c:553:
140066667427072:error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib:../openssl-1.1.1g/crypto/asn1/a_verify.c:170:
error server.pem: verification failed
make: *** [Makefile:107: server.vrfy] Error 2

It seems the ca.pem mismatchs server.pem which results in failing to
execute "openssl verify -CAfile ca.pem server.pem", so add the logic
to check the file to avoid inconsistency.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-05 10:02:11 -07:00
Kai Kang
1bb990c6ca rdist: fix parallel build
It fails to compile rdist occasionally when system load of build server
is high:

| In file included from common.c:57:
| ../include/defs.h:49:10: fatal error: y.tab.h: No such file or directory
|    49 | #include "y.tab.h"
|       |          ^~~~~~~~~
| compilation terminated.

Make $(COMMONOBJS) which include common.o to depends on related header files
and y.tab.h to fix the parallel build failure.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-03 10:49:15 -07:00
Yi Zhao
1609df1153 samba: upgrade 4.10.15 -> 4.10.17
This is a security release in order to address the following defects:

CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD
                DC LDAP Server with ASQ, VLV and paged_results.
CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume
                excessive CPU
CVE-2020-10760: LDAP Use-after-free in Samba AD DC Global Catalog with
                paged_results and VLV.
CVE-2020-14303: Empty UDP packet DoS in Samba AD DC nbtd.

Also backport 3 patches to fix build error with musl.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-31 13:22:53 -07:00
Oleksandr Kravchuk
012d7a62e0 relayd: bump to latest revision
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-31 13:22:52 -07:00
Oleksandr Kravchuk
729fbf0b9c openconnect: update to 8.10
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-31 13:22:52 -07:00
Oleksandr Kravchuk
cbf752d9e4 firewalld: update to 0.8.3
nft build dependency has been removed in @3f7419dcb50a5bdcf800512d2491.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-31 13:22:52 -07:00
Oleksandr Kravchuk
1134342971 dhcpcd: update to 9.1.4
License checksum changed due to modified copyright years.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-31 13:22:52 -07:00
Johan Jeppsson
3671e60c39 nngpp: Add recipe
nngpp is a c++ wrapper for nng

Signed-off-by: Johan Jeppsson <johanje@axis.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-28 12:55:35 -07:00
Khem Raj
5cf2665446 samba: Fix conflicts with nss.h from glibc
This is seen with glibc 2.32 where these names are also defined

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-22 23:17:32 -07:00
Christian Eggers
dee4e81927 networkmanager: Fix udev dependency
NetworkManager depends on libudev, but not on libgudev.

Signed-off-by: Christian Eggers <ceggers@arri.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-20 10:06:09 -07:00
Christian Eggers
b68c4c76db networkmanager: Package nmcli separately
nmcli depends on libreadline which is licensed under GPLv3.

Signed-off-by: Christian Eggers <ceggers@arri.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-20 10:06:09 -07:00
Mingli Yu
0d7522b7df freeradius: fix the existed certificate error
Fixes the occasional error:
 # cd /etc/raddb/certs
 # ./bootstrap
[snip]
openssl ca -batch -keyfile ca.key -cert ca.pem -in client.csr  -key 'whatever' -out client.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf
Using configuration from ./client.cnf
Check that the request matches the signature
Signature ok
ERROR:There is already a certificate for /C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org
The matching entry has the following details
Type          :Valid
Expires on    :200908024833Z
Serial Number :02
File name     :unknown
Subject Name  :/C=FR/ST=Radius/O=Example Inc./CN=user@example.org/emailAddress=user@example.org
make: *** [Makefile:128: client.crt] Error 1

Add the check to fix the above error and it does the same for server.crt.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-13 09:01:58 -07:00
Hongxu Jia
f500029f3c networkmanager: fix Files/directories were installed but not shipped
Since networkmanager: upgrade 1.22.10 -> 1.22.14, it added a new
build option 'firewalld-zone', while enabling multilib, there is
a QA issue
...
ERROR: QA Issue: networkmanager: Files/directories were installed but not shipped in any package:
  /usr/lib/firewalld
  /usr/lib/firewalld/zones
  /usr/lib/firewalld/zones/nm-shared.xml
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-07 11:02:13 -07:00
Adrian
1cc674bf92 firewalld: upgrade 0.7.3 -> 0.7.5
See full changelogs
- https://github.com/firewalld/firewalld/releases/tag/v0.7.4
- https://github.com/firewalld/firewalld/releases/tag/v0.7.5

Make documentation build optional.

Delete RedHat specific modprobe config file.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-02 08:45:19 -07:00
Andreas Müller
d05070c7d8 blueman: upgrade 2.1.1 -> 2.1.3
2.1.3
Changes
  * Force cython to use python language version 3
Bugs fixed
  * Fix tooltip not updating when bluetooth is disabled
  * Fix dbus timeout in DhcClient
  * Call the right method when pulseaudio crashes
  * Handle os.remove failing

2.1.2
Bugs fixed
  * Signal bar updates with multiple adapters
  * Pairing with pincode

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-29 07:20:22 -07:00