Commit Graph

1006 Commits

Author SHA1 Message Date
Mingli Yu
df3ef15834 geoip: Switch to use the main branch
Fix the below do_fetch warning:
WARNING: geoip-1.6.12-r0 do_fetch: Failed to fetch URL git://github.com/maxmind/geoip-api-c.git, attempting MIRRORS if available

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-11 00:12:55 -08:00
Oleksandr Kravchuk
90553ded8c nbdkit: update to 1.25.3
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-07 09:53:12 -08:00
zangrc
dc516cbeb7 strongswan: upgrade 5.9.1 -> 5.9.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04 09:04:24 -08:00
zangrc
7e4485adcb openvpn: upgrade 2.5.0 -> 2.5.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04 09:04:24 -08:00
Wang Mingyu
2f887a4d0d stunnel: upgrade 5.57 -> 5.58
License-Update: Update year to 2021

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-24 14:18:31 -08:00
Yi Fan Yu
138e4f59c3 tcpdump: update 4.9.3 -> 4.99.0
Removed patches:
    * avoid-absolute-path-when-searching-for-libdlpi.patch
    reason: this is a solaris specific patch,
            It no longer generates QA error.

    * unnecessary-to-check-libpcap.patch
    reason: upstream changed the logic, a new patch was needed.

New patch:
    * 0001-aclocal.m4-Skip-checking-for-pcap-config.patch
    reason: configure shouldn't look for pcap-config.
    upstream reference: cfc4c750a

Modified patch:
    * add-ptest.patch
    reason: Makefile had slight change.
            new unrelated perl script was introduced,
            removed to make package QA happy.

License:
    upstream removed some whitespace

Ptest:
    binaries are now present in /usr/bin not /usr/sbin
        upstream commit: 95096be4f
    add perl libraries dependencies

    tests passed: 571 (qemux86-64)
    tests failed: 0

Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-21 23:37:54 -08:00
Khem Raj
ed54f12e19 recipes: Update common-licenses references to match new names
The licenses were renamed to match their SPDX names, fix the
references in LIC_FILES_CHKSUM

Correct the checksums where they were wrong

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-21 23:37:54 -08:00
Oleksiy Obitotskyy
ac4c2dc26d wireshark-src: improve reproducibility
What was done:
- add --noline option to flex, --no-line to bison
  and -l to lemon generators to prevent
  adding #line directives with absolute path.
- eliminate absolute source path in python code generator
  and use baseline instead.

Signed-off-by: Oleksiy Obitotskyy <oobitots@cisco.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-17 09:58:35 -08:00
Oleksandr Kravchuk
57ccfc7f79 wireshark: update to 3.4.3
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-11 09:05:11 -08:00
Oleksandr Kravchuk
eec3d38a7a fetchmail: udpate to 6.4.16
License-Update: copyright years.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-11 09:05:11 -08:00
Hongxu Jia
5506dc7ddb ndpi: fix autoconf-2.71 compatibility
While DEBUG_BUILD != 1, Yocto adds option _FORTIFY_SOURCE to CPP and CC [1],
since _FORTIFY_SOURCE requires -O1 or higher, if no -O1 or higher then
results in a compiler warning.

The configure.ac of ndpi uses macro AC_PROG_CC to test toolchain, since
CPPFLAGS does not have the option -O<level> [1], while building with autoconf
2.71+, the toolchain test will report a warning.

The configure.ac of ndpi uses macro AC_LANG_WERROR to treat the warning as
error. Then it broke the build
...
|configure: error: C preprocessor "i686-wrs-linux-gcc -E --sysroot=tmp-glibc/
work/core2-32-wrs-linux/ndpi/3.4-r0/recipe-sysroot  -m32 -march=core2
-mtune=core2 -msse3 -mfpmath=sse -fstack-protector-strong -D_FORTIFY_SOURCE=2
-Wformat -Wformat-security -Werror=format-security" fails sanity check
...

The SELECTED_OPTIMIZATION contains option -O<level>, add SELECTED_OPTIMIZATION
to CPPFLAGS to could fix the issue

[1] The definition of CPP and CC and XXXFLAGS in bitbake.conf
[snip]
export CPP = "${HOST_PREFIX}gcc -E${TOOLCHAIN_OPTIONS} ${HOST_CC_ARCH}"
export CC = "${CCACHE}${HOST_PREFIX}gcc ${HOST_CC_ARCH}${TOOLCHAIN_OPTIONS}"
...
export CFLAGS = "${TARGET_CFLAGS}"
TARGET_CFLAGS = "${TARGET_CPPFLAGS} ${SELECTED_OPTIMIZATION}"
...
export CPPFLAGS = "${TARGET_CPPFLAGS}"
TARGET_CPPFLAGS = ""
[snip]

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-09 08:51:48 -08:00
Oleksandr Kravchuk
e6b20e7711 nghttp2: update to 1.43.0
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-06 21:52:33 -08:00
zangrc
a12c6cf8a9 libtalloc: upgrade 2.3.1 -> 2.3.2
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-06 21:52:33 -08:00
Hongxu Jia
bf527522e0 spice: make conpatible to autoconf-2.70
In order to build with autoconf 2.7, explicitly link to jpeg lib
since lib jpeg is already in DEPENDS
...
| checking for jpeglib.h... ../git/configure: line 16008: CPP: command not found
...

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-05 10:59:49 -08:00
zhengruoqin
118fccf2d1 open-isns: upgrade 0.99 -> 0.101
* Changes v0.100 to v0.101:

Dmitry Bogdanov (1):
      Fix parsing of GetNextRsp

Lee Duncan (10):
      Ignore common build files
      Fix compiler issue when not in security mode
      Do not ignore write() return value.
      Fix 586 compile issue and remove -Werror
      Added a TODO: 'make depend' not worrking
      Update version string to "0.100".
      Fix broken server authentication initialization.
      Add man page for isnssetup.
      Added TODO to test "isnsd --init"
      Preparing for version 0.101

Leo (1):
      socket.c: include poll.h instead of sys/poll.h for POSIX compatibility

Rosen Penev (2):
      fix compilation without deprecated OpenSSL APIs
      libisns: remove sighold and sigrelse

* Changes v0.99 to v0.100:

Chris Leech (1):
      Travis-CI and Coverity Scan setup

Lee Duncan (7):
      Fix compiler complaint about possible alignment issue
      add tags to ignored list of files
      Change isns_portal_string() to return allocated string.
      Remove old compiler option, and add "-Werror".
      openssl: handle newer version with ifdefs
      General cleanup for the compiler.
      Fix problem with parsing IPv6 Addresses with brakcets.
      Preparing for version v0.100
      Added debugging, moved .cvsignore to .gitignore
      fixed issues with old openssl usage
      Adding python compiled files
      Change isns_portal_string() to use static mem
      Running make twice should not rebuild everything
      Fix mdebug.c so it compiles when enabled.
      Handle restarting test harness server correctly
      Ignore SO lib
      Create and use pythong unittest framework

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-04 19:10:38 -08:00
Hongxu Jia
974fed367e lksctp-tools: make conpatible to autoconf-2.70
...
./configure: line 16398: syntax error: unexpected end of file
...

Backport a commit from upstream to fix it

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-04 09:26:39 -08:00
Wang Mingyu
3e28a31bb4 dnsmasq: upgrade 2.82 -> 2.84
Refresh the following patch:
lua.patch

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-29 09:52:13 -08:00
Yi Zhao
561a5c9d44 openipmi: upgrade 2.0.30 -> 2.0.31
Refresh openipmi-remove-host-path-from-la_LDFLAGS.patch

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-29 09:52:13 -08:00
Mario Schuknecht
55c94cb319 dnsmasq: Fix systemd service
Systemd service file option 'ExecStopPre' is warned and ignored by
systemd. By replacing 'ExecStopPre' with 'ExecStop', the intended
behavior is realized. The 'ExecStop' commands are executed one after the
other.

Signed-off-by: Mario Schuknecht <mario.schuknecht@dresearch-fe.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-25 14:58:54 -08:00
changqing.li@windriver.com
5450c958bf celt051: update SRC_URI
original SRC_URI is not valid now, offical CELT repository
moved to gitlab

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-19 09:12:04 -08:00
Wang Mingyu
33086407b1 dovecot: upgrade 2.2.36.4 -> 2.3.13
0001-doveadm-Fix-parallel-build.patch
removed since it is included in 2.3.13

refresh 0001-configure.ac-convert-AC_TRY_RUN-to-AC_TRY_LINK-state.patch

add 0001-not-check-pandoc.patch to not check pandoc of configure

Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 22:38:29 -08:00
Armin Kuster
b2d9c69405 wireshark: Several securtiy fixes
Source: Wireshark.org
MR: 106181, 106696, 107655, 107673, 107682
Type: Security Fix
Disposition: Backport from wireshark.org
ChangeID: 57df6ac3b11aabd96e6aec728501ce7988bc176a
Description:

Bugfix only update including these cves:
3.2.8
CVE-2020-26575
CVE-2020-28030

3.2.9
CVE-2020-26418
CVE-2020-26421
CVE-2020-26420

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-13 10:22:23 -08:00
Zheng Ruoqin
3055f59683 cifs-utils: upgrade 6.11 -> 6.12
0001-Bugfix-Modify-the-dir-of-install-exec-hook-and.patch
Removed since this is included in 6.12.

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-12 00:54:53 -08:00
zangrc
b8e884d638 rdma-core: upgrade 32.0 -> 33.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-07 22:57:45 -08:00
Yi Zhao
d97b95466d tcpdump: add UPSTREAM_CHECK_REGEX
Add UPSTREAM_CHECK_REGEX to skip checking testing version (e.g. 4.99.0).

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:25 -08:00
zhengruoqin
1d112d988e bridge-utils: upgrade 1.6 -> 1.7
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zangrc
667a7b1027 libtevent: upgrade 0.10.1 -> 0.10.2
Refresh the following patch:
avoid-attr-unless-wanted.patch
options-0.10.0.patch

0001-waf-add-support-of-cross_compile.patch
Removed since this is included in 0.10.2

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
zangrc
d8426e0637 libtalloc: upgrade 2.3.0 -> 2.3.1
0001-waf-add-support-of-cross_compile.patch
Removed since this is included in 2.3.1.

Refresh the following patch:
avoid-attr-unless-wanted.patch
options-2.2.0.patch

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-28 22:34:02 -08:00
Mingli Yu
049f0b3e83 traceroute: change the ALTERNATIVE_PRIORITY
Both inetutils-traceroute and traceroute provide the traceroute
command and the ALTERNATIVE_PRIORITY of inetutils-traceroute is
79 until now.

Increase the ALTERNATIVE_PRIORITY of traceroute to 100 to guarantee
the traceroute command provided by traceroute when both of the
packages installed.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-23 22:47:02 -08:00
zangrc
4a3e3f2d2d openipmi: upgrade 2.0.29 -> 2.0.30
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-18 08:23:14 -08:00
zangrc
3e05b98d08 nghttp2: upgrade 2.41.0 -> 2.42.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27 11:54:04 -08:00
viatsk
0192d60708 tcpdump: Patch for CVE-2020-8037
Signed-off-by: Stacy Gaikovaia <stacy.gaikovaia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-24 21:19:34 -08:00
Khem Raj
d9d8713860 chrony: Upgrade to 4.0
ChangeLog is here [1]

Do not install /var/log as it conflicts with basefiles package

Collected errors:
 * check_data_file_clashes: Package chrony wants to install file /var/log
        But that file is already provided by package  * base-files

Remove CVE patch since its upstream

Forward port arm_eabi.patch patch

Make builds reproducible

[1] https://chrony.tuxfamily.org/news.html

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 22:51:38 -08:00
Beni
70662b5b7e unbound: upgrade to 1.12.0
Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:34 -08:00
zangrc
9a77c8d8f0 strongswan: upgrade 5.8.4 -> 5.9.1
0001-Remove-obsolete-setting-regarding-the-Standard-Outpu.patch
Removed since this is included in 5.9.1

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:33 -08:00
zangrc
f682696a05 rdma-core: upgrade 31.1 -> 32.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-23 07:09:33 -08:00
Mingli Yu
bcfd6f7a4b traceroute: set VPATH
Fixes:
make[1]: *** No rule to make target '-lm', needed by 'traceroute'.  Stop.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-18 08:25:43 -08:00
Khem Raj
59f817bbe3 openipmi: Inherit python3targetconfig
Fixes

configure: error:
  Could not link test program to Python. Maybe the main Python library has been
  installed in some non-standard library path. If so, pass it to configure,
  via the LIBS environment variable.
  Example: ./configure LIBS="-L/usr/non-standard-path/python/lib"

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-17 15:04:43 -08:00
Khem Raj
05d7f36548 ntopng: Link with libatomic on rv32
Fixes build errors e.g.
include/c++/10.2.0/bits/atomic_base.h:426: undefined reference to `__atomic_load_8'

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 12:25:54 -08:00
Khem Raj
02c21a0342 spice: Add leading whitespace for append operator
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-15 12:25:53 -08:00
Nick Rosbrook
4cdd651960 strongswan: remove ldap from default PACKAGECONFIG
Since ldap is not a standard DISTRO_FEATURE, leave it disabled by default.

Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-10 08:15:56 -08:00
Nick Rosbrook
b570072902 strongswan: do not use deprecated stroke and starter by default
The swanctl and vici configuration of strongswan is preferred, as the stroke
plugin used with starter is deprecated. As a reasonable default, add swanctl
to PACKAGECONFIG by default, and remove stroke. When systemd is in DISTRO_FEATURES,
add systemd-charon to PACKAGECONFIG, and add charon when systemd is not in
DISTRO_FEATURES.

While here, make sure strongswan-starter.service is only installed when
charon is enabled. The current unconditional installation of
strongswan-starter.service can break systems which install strongswan.service
for use with swanctl.

Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-10 08:15:56 -08:00
Mingli Yu
127e50b456 ntop: remove the recipe
The ntop project is inactive and there is no new version
since 2012 [1] and it has been replaced by ntopng.

[1] https://sourceforge.net/projects/ntop/files/ntop/Stable/

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Mingli Yu
f5b9e4ecd2 ntopng: add new recipe
ntopng is a web-based network traffic monitoring application
released under GPLv3. It is the new incarnation of the original
ntop written in 1998, and now revamped in terms of performance,
usability, and features.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Mingli Yu
3b6b36e32d libmaxminddb: add new recipe
The libmaxminddb library provides a C library for reading MaxMind
DB files, including the GeoIP2 databases from MaxMind.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Mingli Yu
1b37387c39 ndpi: add new recipe
nDPI is an open source LGPLv3 library for deep-packet inspection.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 20:49:52 -08:00
Zang Ruochen
f20a4ba04f openvpn: upgrade 2.4.9 -> 2.5.0
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:41:02 -08:00
Khem Raj
7a0117ec4e dovecot: Disable LTO
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:41:02 -08:00
Khem Raj
294e945309 traceroute: Fix build with LTO
Drop patch needed to build when S = B, we do not use this setting
anymore

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 13:40:57 -08:00
Khem Raj
7b31db8928 rdma-core: Upgrade to 31.1
Disable LTO, its uses ASM constructs for symbol versioning which are incompatible with LTO,
they should migrate to gcc-10's mechanism for symbol versioning which is
compatible with LTO

disable manpages, it needs pandoc to build

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-09 00:00:05 -08:00